last executing test programs: 3.027994052s ago: executing program 2 (id=4137): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x0, 0x3, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc2}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910069cdfb5cc682e02e0a"], 0xfe33) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r5, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'caif0\x00', 0x1000}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x61}]}) r6 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009000000000000", @ANYRES32, @ANYBLOB="0000000000000000000056d06a9e66a282e10000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000000000000000000fdffffffffffffff0000000000000000"], 0x50) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x82, &(0x7f0000000000), 0x8) sendmsg$inet(r7, &(0x7f00000011c0)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000080)='x', 0x1}], 0x1}, 0xfc) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) socket$kcm(0xa, 0x2, 0x0) 2.465384133s ago: executing program 2 (id=4145): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200"/31], 0x0, 0x26}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, 0x0}, 0x3000c085) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)}, 0x0) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x94) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000380)) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)="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", 0x10d}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000011008188040f46ec0800b9cca7480ef421000000e3bd6efb440013030e001b000d000008ba8000001201", 0x2e}], 0x1}, 0x4044) 1.689328308s ago: executing program 0 (id=4151): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x101, 0x3}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) socket$kcm(0x2, 0x1, 0x84) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r0 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc54}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) close(r0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x2, 0x922000000001, 0x106) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f0000000280)='\x02;\xe5\b\x00\x14\x96)]\xa3\xcdB!\xf7\xe5\fc\xe9\x00\x9c\x00\x00\x00\x00\x00\x00') sendmsg$inet(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x24000800) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e1700800000876c1d0000007ea60864160af36514001ac00400020207000200020001000200000000938037a786a6d0001000000e4509c5f05c2f070000000000000088bbcb", 0x52}, {&(0x7f0000000100)="9b25af20af07241a63c3", 0xa}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000380)="48000005150081fb0259ae08040204000aff0f110000000401d174a4ffa4d8643aec0caa94bd9a5f5901546fabca1b4e7d06a6bd7c493872f750375ed08a562af5740700b8c119418f0f000000d6e747", 0x50}, {&(0x7f00000007c0)="decb77dfbba2fdc2a7b40b5b3117d71280e9cd12549e87a76898aae84b7b06817fc8bad6619cf78aded2304756d2c57d3c607262ad65123dc50a2c0db26a71abdeb2dae70ebe4329e8794fc6695d18ad7e91d6c82ae9ba5da11e20a47fb30bf528fd171bd38936ccd8e5dd3a325fdadb5664e78bea54ebdd6affe6c8ca825dce4f616d6dfd264000483359f0e38b7d4b22b6c447b44c02e69c570095ba97f0e60cae06f2902570a86960b9fd321952fabe5a7ba3b9896dfdb1a301bd", 0xbc}, {&(0x7f0000000a40)="5bd909d8a4ddfc98a94d87ee43a4085211465e0707cad8ded79dbec131c3ef99a06091a7e8924936ee50bd1df08456658275bd29b6b1edcf4147471879fb37bd436858a7a3fbf872da2788a8f7d99ce8b55becf9c56a6231d39cc498c249eb89fd4b2afa88ad1e51d2636c737158b8a213560a6f28af9a07fb3e9def8d8a3041b363949d3e44045f4e6472352a4b76d01036f1b15723f45997af6bf113c568da8024364a7f954f6ae38d44f89ce9550159147dcfe3d7c696d1c4e55ec885789cbb0ff33148e899dc7acbcd59f92855c847d668f1b9726869d1c2c62c40cca122510e83c55c121954014c0fbf9f2d9333e3a4c508b4d45a8cec6381bf86b0b82369b71377f2b114a3fb7ae41457aa83321063dadb4c48dca1710e871191118c842ef3ae28c5b1c93730018968f6ca5a8a1d58cf969059c44a9fc622af486145d4640c373a40eb774b2a76d92858666aa373fa78c1a108ee7ecfe94f1e7a8e0b9c3e2d31e4d9f6683dd05dde0e1b90a896fb72dd7a2a13eaf3ca196f4e17bc10a5969297b82324f79679b29d5e6c60403f8353e5496c24c01a08f3bcb67ccb47107f1be30bd58ea5c7ab49451730ea0734332a0301c15f50f267a535f803f71b6cd86c95679cf62c641d792c7e09b1d0f3a23d8fbcec1f4a36d305a9a08a417e288dc412c9641b1fce7c0e87d0594e7f0c94fdec369f4321d7982b34880e6697f04b912257df7dff44474a04a0e02a306b2e5fdf108f0d849edac852caf191dce20decba3fc3d733318c4e7887f75adb0ee1fc43109633aef02a4b49d56bdc67b28bb21366867765735091574820f1caa58d613e518d3aaad1c6cd2f629bbabbc57c7dd31d9e9ea098cb56d793c282e01de29d3539aeb2d440db8e1e0fd20a2a48f68c1ac60c734ad94388375fd26d21931a54bc4d6910f438dec0cb1759a41e83a8dbfa894565979a42919bb38f19b4fd6c6b15a97537c0796370e208611c7404805e258bafdfb12356d319a751bc9a2fc3e3dbbd1637fd27a2ba68b9093af2845736dbce01f17e989a463bd3eb01128e5f7f766aec5875b77de7009b96c228ff30ca476cccefad0464dc23d1726467f005c960062ea513d1082ca8cd2558c7ec7b229127f928eaff69a7224cf2475923b976dd73b12b4104f3527bb854997d2d1d65c19f22af87b03c390ae903fe104b5651bac73be10352d6d151ddf9d814335da0d93002a1dea64caae2870c1fedcb2857581f657b3f11a6536769a54e060e1190c6faea78ea044164f614da2c9548a1c622ab1fd1bde99f66387fc11741859f518efc39e15b1eafb7e9237dc447917e209d9b9133e3668392af16419bb5f22a9d50ef9fde7590d6417efd9909b26f775ed94f9f99d27b3cc5213063616131c15a9cfee20ece76da4018d51a497a75d73c8048f2c10c878c56fdb89f331192aa438a4bf991202100c3ff30859df65c2a34cb08cb1ce115aa9ad427c98ed0405c9a30fdfc5a0a314a34abb17ef64b69290adf7d46445ebe051248ac8e7070e7e8cc3f428fd1fabe137b23d507d3a5112a0a9b61e3438720dc70c219509aef5bdc78a89a453a254a9cdb723108294443933cb1683e8740b86f9f74d419e902fab8e3961bf698adcb5f1eda5ec3805de70b54a15c2e996814508b3a61f141de20fbb42ca92285440e7bf6ae58718cbdcfe7dea21c37e4b221ecde1a84dd388ac40f513d3c3931ccafbd5b25729822b9989060d6ffa1741e501ef4515008c452a9fb9124e6c3e97316047425f49d85f57c857ea8050ed647ac37a557727a38cc2251d1c5c5ad8a5c4e18280a8dd153317dfdbfec0083b90b8491e3cc614cf9a177bb50c07ae87c4037e8c34126e364be942438584634fa82acecb3eeb4eb717aa2a005d8e06fc5dcf90540e633aea0fed0665f372c9a048878a51316b9972fd3d6db727667519147ecfcff42357db78bf4243c7fd73f590c2e7745a8978acf15bf662464ab902987a96091eb661c730dbb7196564747379da11edbd72ff840ae7a4dccf4c30cb64aa44e5a743d60018d3472b67c678a25d71be0cdd3a73085bf1a70c00fa5be158affccce6627a3ca04b21b6770a3b87843730224c5cac09f30ca29565ac0778b795fb515092b7d9e0cf36f1e3c44b781d3127c3df3e60cdf0b94cd147ae1e66af4f66320c9d436c1ca4a42ee6c56f991f0e0e0c83e4c2987465b1b4eae8cdef84ae1c610e0666aff6918d594a05f14bbf87dfd0af3a587459580eec0373a5502715dec048908fe66e652de204dcba27b4c695003f98667bf32a813f1aa30bebb26893ca5449b578e8cfe0aa77a418432a6f186d1260bc34ef8e78f543a7c32498a566323f7278ed5383fca45a1abefefe78dbca83e7ad78c5af687b1d8e51941f5b01c41b0de039d52d885e92ed70693d626151074c4d84f5d69ad1a50c2a2af7073f652ffdcd075c9535721294e2cfecefa9e40a27f10a5c5bd96b182673c6543a291dd83884b1e863b1ecab3895ae0a0c9eaef77fb6d5bbe07a89cc75fc9fc904f082a956472caaef3727030b2c5998be1d57da5a70dc186da9b802aa688c540ae3b063bd76ee21fd7bcf14d4f00fc4968d61761e92abca865aafa7b644987d2fdf123ff912a7cc11bfe97c545109caea80343770341ca883723a4e6fb55ffca65915a90cad9983d306800f12eeac93fb86c08069095f805474fcb2263bec56a8eb5c7f70a6f81e21c20e79b6e76b4f6760951d8e2980977d944a2261170cce8eccea3dcec1ad65cc155bedd73eaa1b99bc332fb470ed6732d4afb507f684e7fd3255746f17c634481a62df28f1bafdee8b99eea89abe6342f77bccdba77b4a72e8b8aa7bef31d613653ecf9c99fd907627d690c7bc9f999d408128dbf3fa485ee245f2dd7fdfa9031bd25045284a017711ddcd2c6ea32e41eb38115efc8509858af3ba448711273a1410c23e21ecb3943d201d1fc769fac482d16b1c5db795cfe7ee042de8737b01883e63e32e61c9a4e3ae50a0b7035118f2f7878acb0059212c8cc18aec50c15cb2690fadf8c46dfaa2ed0a6ba5220f3587e168cd02634ab06c84d6e7190fe11dadcef2a361fb7426899a96c7f4f0502d1dc5722f071e812e37b925ad6497f5b56fa916ec88cbd3538f0c72943ac4d7f6fb300ef9b2f112bf64107ce52d59ad57ed5c53dd5b20e4005a54c63093f744bd4d6e0a924d9a605410cb0c5795ee425ff741968bca95f4164d6ca047e4b4e14e8e72bd2120b958923a32e4710191cd21ebd37e9945315ca9aff982405275a633e4b0de7a702f5140dc31cb8a23bb4853c40ddcf42ed964a379852bbb5ee37cf0a53c4736048626ecb2156891c1afddacb13e1a00ca57b4247eef5dbaf3a463e59b44b45072e766ba279cf4a7dd51e2884ff602b3e453ce7678f6d73266f4be6b04b503682a5cdf41bb169a7159c71f7af49cb668dcc6f9d811d2a36992e3863bbd4575373bef1b4348b983a97fc10200068a29d338c1f911526f3969ca0d1b77ffae08cc4c85722c692809203dbea7de76fa52eda646ec997fe4898634bdbe22449f729fc9a1d9df5cd9c56d38b22906bbc714f20d9cf1d0f92e4935e82d6be69a29a2ad888914c0f08b2b71f54a70f69a7c49fbdb4c5314d569f7655e68c4a1d190eb752e2d2e9f0f2458aa0696cdc0a6b3d9d0256e0decdabaea6648870e3fdf90d9747f795c4d6c24011aed24f6e22f64c8e13394fc4ec342ed25316b3d1e3dda0a0dfb02a6967a61ccdd8a9ca77fc7eb89dcaa845e7887f4b9635afba3ddc06154ff38ede9497a333b6e538e3ed28bd6f32554dde11c71c82651eb449ba25c6fb904107296e1b625f09bed0df51e7a2138a39905840ef1995a3abcd0d9f4f79e14e4d391f325ae13fa1", 0xacb}], 0x3}, 0x2000000) 1.519657061s ago: executing program 1 (id=4153): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x0, 0x3, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc2}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910069cdfb5cc682e02e0a"], 0xfe33) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r5, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'caif0\x00', 0x1000}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x61}]}) r6 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009000000000000", @ANYRES32, @ANYBLOB="0000000000000000000056d06a9e66a282e10000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000000000000000000fdffffffffffffff0000000000000000"], 0x50) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x82, &(0x7f0000000000), 0x8) sendmsg$inet(r7, &(0x7f00000011c0)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000080)='x', 0x1}], 0x1}, 0xfc) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) socket$kcm(0xa, 0x2, 0x0) 1.412335843s ago: executing program 2 (id=4154): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e48974aae56e0000000000000061b9459b68100dbf05177b2490a5408bdf271fd6b9aa6701365ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f90698aa2d9c57276322b82e8976f5a4d980eaeb3b636630b810f2e2", 0x99}], 0x1, 0x0, 0x0, 0x84}, 0x20000000) close(r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40034, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x1b, 0x0, 0x3, 0x8, 0x8, 0xfffffffc, 0x2}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) close(0xffffffffffffffff) socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000040), 0xffffffffffffff29) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="6000000068007f089e", 0x59}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) 1.274424125s ago: executing program 0 (id=4156): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x32, 0x0, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/234, 0xea}, {&(0x7f00000001c0)=""/15, 0xf}, {&(0x7f0000000200)=""/8, 0x8}, {&(0x7f0000000240)=""/234, 0xea}, {&(0x7f0000000340)=""/133, 0x85}], 0x5, &(0x7f0000000480)=""/152, 0x98}, 0x40010001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000007c0)=[0x0], &(0x7f0000000800)=[0x0], 0x0, 0x6f, &(0x7f0000000840)=[{}, {}], 0x10, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x1c, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x17, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000081300400030000001869000006200000000000000300000018510000100400000000000000000000181b0000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00.\x00'], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', r2, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000a80)={r0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r3, @ANYBLOB='&\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030031000b05d25a806c8c6f94f90224fc600e0007000a000200053582c137153e370e0c0180040010000400", 0xffffffffffffff9d}], 0x1}, 0x0) 1.197725037s ago: executing program 0 (id=4157): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000"], 0x48) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0x22072a18}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00<', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000000000000080000000800000000", @ANYRES32], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xabf1}, [@exit]}, &(0x7f0000000380)='syzkaller\x00', 0x4df, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0xd, 0x7, 0x9a99}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r4 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000000)={0x2, 0xfffffffffffffdfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080), 0x8}, 0x112, 0x8000000000000001, 0x0, 0x0, 0x0, 0x8}) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x2000000) r6 = getpid() perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x5, 0x5, 0x0, 0xb, 0x0, 0x6, 0x10120, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000100), 0x5}, 0x8095, 0x0, 0x6, 0x9, 0x2, 0xb, 0x9, 0x0, 0x7, 0x0, 0x71b618a}, r6, 0x1, r0, 0xa) 1.187460668s ago: executing program 2 (id=4158): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f00000001c0)=""/135, 0x87, 0x0, &(0x7f0000000380)=""/213, 0xd5}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000500)="b9ff03076804268cb89e14f086dd47e0ffff2000000000000000ac141416e000000129a130112b92121f9ae0dd972fa104edcce40d8d", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.109568249s ago: executing program 1 (id=4160): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1, 0x10000000}, 0x10) 1.032466161s ago: executing program 2 (id=4161): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1}, 0x100000, 0x0, 0x0, 0x1, 0xc774}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x0, 0x13, 0x0, 0x0) 1.031314061s ago: executing program 1 (id=4169): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$kcm(0xf, 0x3, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x8000000000000000, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x407fff, 0x40}, 0x14115, 0x2e, 0xfffffbff, 0x25346c7d6a446d0f, 0x2, 0x80, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1000000000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x6, 0x7f, 0x11}, 0x50) socket$kcm(0x2, 0x200000000000003, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x2, 0x4, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000c44185000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mr_integ_alloc\x00', r1}, 0x18) socket$kcm(0xa, 0x2, 0x88) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="80000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0xd}, 0x14105, 0x2e, 0xfffffbff, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x5f21df7aec8d40fb, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYRES64=r2], 0x20) 824.317324ms ago: executing program 2 (id=4162): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200"/31], 0x0, 0x26}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, 0x0}, 0x3000c085) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)}, 0x0) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x94) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000380)) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)="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", 0x10d}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000011008188040f46ec0800b9cca7480ef421000000e3bd6efb440013030e001b000d000008ba8000001201", 0x2e}], 0x1}, 0x4044) 734.943816ms ago: executing program 1 (id=4163): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2082, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x100000000000, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x311, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x52, 0x1, 0xd, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107979, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0xfffffffffffffffd, 0xffffebff, 0x3, 0x2, 0x5, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/user\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x4041, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x50}, 0x40000002) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000380)=""/71) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) sendmsg(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000540)='|', 0x1}], 0x1}, 0x40) sendmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000740)="94", 0x1}], 0x1}, 0x11895) 734.524826ms ago: executing program 3 (id=4164): bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)=@o_path={0x0, 0x0, 0x10}, 0x18) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f0"], 0x0, 0x2}, 0x94) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000008400000005000000000000000000060020000000000000008400000002"], 0x38}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r0, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB='/'], 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="180200000000000000000000000000008500000097000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 613.433289ms ago: executing program 3 (id=4165): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x32, 0x0, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/234, 0xea}, {&(0x7f00000001c0)=""/15, 0xf}, {&(0x7f0000000200)=""/8, 0x8}, {&(0x7f0000000240)=""/234, 0xea}, {&(0x7f0000000340)=""/133, 0x85}], 0x5, &(0x7f0000000480)=""/152, 0x98}, 0x40010001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000007c0)=[0x0], &(0x7f0000000800)=[0x0], 0x0, 0x6f, &(0x7f0000000840)=[{}, {}], 0x10, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x1c, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x17, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000081300400030000001869000006200000000000000300000018510000100400000000000000000000181b0000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00.\x00'], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', r2, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000a80)={r0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r3, @ANYBLOB='&\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030031000b05d25a806c8c6f94f90224fc600e0007000a000200053582c137153e370e0c0180040010000400", 0xffffffffffffff9d}], 0x1}, 0x0) 565.691049ms ago: executing program 3 (id=4166): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e48974aae56e0000000000000061b9459b68100dbf05177b2490a5408bdf271fd6b9aa6701365ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f90698aa2d9c57276322b82e8976f5a4d980eaeb3b636630b810f2e2", 0x99}], 0x1, 0x0, 0x0, 0x84}, 0x20000000) close(r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40034, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x1b, 0x0, 0x3, 0x8, 0x8, 0xfffffffc, 0x2}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) close(0xffffffffffffffff) socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000040), 0xffffffffffffff29) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="6000000068007f089e", 0x59}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) 536.5651ms ago: executing program 0 (id=4167): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000e6d35fb400"/28], 0x48) 474.795921ms ago: executing program 0 (id=4168): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) socket$kcm(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000900000085000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000008500000072000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = gettid() perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0xb, 0x17, 0x9, 0xa, 0x0, 0x4, 0x300, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x2842, 0x8001, 0x81, 0x0, 0x8, 0x8e, 0x5, 0x0, 0x9}, r4, 0x7, r1, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000000000bcc3fbe7d90de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad06b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976ada362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e2486472b5cba1f3346c1e8e23deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a867152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd246128f41bcb02000000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca4501391358000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de42957ffe9bb6d752e68d2bc2ce777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f5024df1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfde3be9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118af9ba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141489ed926b822becead7a0a2b4a4c008ab16b616d60f345e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c469953a63baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a667c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc00000000002364bbd93964a8d0bdc802b9be250000000000000000000000000000dd4a009b2ba0d648a6975bcb66956a963912e26eb226af29c9f9f6261884db2d6b172b240dae6c7af327a27c533ab69811ca700d51724999cb8c0a8cace25602c3ecb9f0bcbe9ca6c9a444feb4cd9abbf2db2d583d5279de7f4130"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r5, 0x29, 0x17, &(0x7f0000000100)=r6, 0x4) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000021c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x7fff, '\x00', 0x0, r7, 0x2, 0x1, 0x3}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000000300)=@framed, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', r9, 0x1f00}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002440)={0x1}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002480)={0x0, 0x5, 0x8}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 414.244543ms ago: executing program 1 (id=4170): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) socket$kcm(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000900000085000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000008500000072000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = gettid() perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0xb, 0x17, 0x9, 0xa, 0x0, 0x4, 0x300, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x2842, 0x8001, 0x81, 0x0, 0x8, 0x8e, 0x5, 0x0, 0x9}, r4, 0x7, r1, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r5, 0x29, 0x17, &(0x7f0000000100)=r6, 0x4) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000021c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x7fff, '\x00', 0x0, r7, 0x2, 0x1, 0x3}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000000300)=@framed, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', r9, 0x1f00}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002440)={0x1}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002480)={0x0, 0x5, 0x8}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 412.938733ms ago: executing program 3 (id=4171): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1}, 0x100000, 0x0, 0x0, 0x1, 0xc774}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x0, 0x13, 0x0, 0x0) 212.103426ms ago: executing program 3 (id=4172): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 107.399688ms ago: executing program 0 (id=4173): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$kcm(0xf, 0x3, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x8000000000000000, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x407fff, 0x40}, 0x14115, 0x2e, 0xfffffbff, 0x25346c7d6a446d0f, 0x2, 0x80, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1000000000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x6, 0x7f, 0x11}, 0x50) socket$kcm(0x2, 0x200000000000003, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x2, 0x4, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000c44185000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mr_integ_alloc\x00', r1}, 0x18) socket$kcm(0xa, 0x2, 0x88) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="80000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0xd}, 0x14105, 0x2e, 0xfffffbff, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x5f21df7aec8d40fb, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYRES64=r2], 0x20) 17.50601ms ago: executing program 3 (id=4174): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x3, 0x10004, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (fail_nth: 4) 0s ago: executing program 1 (id=4175): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x32, 0x0, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/234, 0xea}, {&(0x7f00000001c0)=""/15, 0xf}, {&(0x7f0000000200)=""/8, 0x8}, {&(0x7f0000000240)=""/234, 0xea}, {&(0x7f0000000340)=""/133, 0x85}], 0x5, &(0x7f0000000480)=""/152, 0x98}, 0x40010001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000007c0)=[0x0], &(0x7f0000000800)=[0x0], 0x0, 0x6f, &(0x7f0000000840)=[{}, {}], 0x10, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x1c, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x17, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000081300400030000001869000006200000000000000300000018510000100400000000000000000000181b0000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00.\x00'], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', r2, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000a80)={r0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r3, @ANYBLOB='&\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030031000b05d25a806c8c6f94f90224fc600e0007000a000200053582c137153e370e0c0180040010000400", 0xffffffffffffff9d}], 0x1}, 0x0) kernel console output (not intermixed with test programs): yz.1.3618'. [ 620.306645][T16599] Mem-Info: [ 620.309866][T16599] active_anon:5205 inactive_anon:0 isolated_anon:0 [ 620.309866][T16599] active_file:18963 inactive_file:40078 isolated_file:0 [ 620.309866][T16599] unevictable:768 dirty:199 writeback:0 [ 620.309866][T16599] slab_reclaimable:10459 slab_unreclaimable:94518 [ 620.309866][T16599] mapped:24542 shmem:1361 pagetables:542 [ 620.309866][T16599] sec_pagetables:0 bounce:0 [ 620.309866][T16599] kernel_misc_reclaimable:0 [ 620.309866][T16599] free:1343711 free_pcp:9071 free_cma:0 [ 620.367801][T16599] Node 0 active_anon:20820kB inactive_anon:0kB active_file:75852kB inactive_file:160112kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98168kB dirty:796kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10928kB pagetables:2168kB sec_pagetables:0kB all_unreclaimable? no [ 620.407310][T16599] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 620.449944][T16599] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 620.592412][T16599] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 620.617754][T16599] Node 0 DMA32 free:1470420kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:20572kB inactive_anon:0kB active_file:75852kB inactive_file:158796kB unevictable:1536kB writepending:796kB present:3129332kB managed:2589588kB mlocked:0kB bounce:0kB free_pcp:15024kB local_pcp:13812kB free_cma:0kB [ 620.686814][T16599] lowmem_reserve[]: 0 0 1 1 1 [ 620.698276][T16599] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 620.729275][T16613] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3620'. [ 620.739191][T16599] lowmem_reserve[]: 0 0 0 0 0 [ 620.786588][T16599] Node 1 Normal free:3888132kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21452kB local_pcp:10148kB free_cma:0kB [ 620.874559][T16599] lowmem_reserve[]: 0 0 0 0 0 [ 620.880225][T16599] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 620.893639][T16599] Node 0 DMA32: 2602*4kB (UME) 2010*8kB (UME) 1286*16kB (UME) 884*32kB (UME) 448*64kB (UME) 108*128kB (UME) 38*256kB (UME) 15*512kB (M) 7*1024kB (ME) 3*2048kB (ME) 322*4096kB (UM) = 1467480kB [ 620.919768][T16599] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 620.933343][T16599] Node 1 Normal: 257*4kB (UME) 72*8kB (UME) 44*16kB (UME) 46*32kB (UME) 13*64kB (UE) 8*128kB (UME) 0*256kB 3*512kB (UME) 0*1024kB 1*2048kB (E) 947*4096kB (M) = 3888132kB [ 620.985277][T16599] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 621.006297][T16599] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 621.015721][T16599] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 621.046297][T16599] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 621.055711][T16599] 61077 total pagecache pages [ 621.076760][T16599] 0 pages in swap cache [ 621.081129][T16599] Free swap = 124996kB [ 621.091187][T16599] Total swap = 124996kB [ 621.097134][T16599] 2097051 pages RAM [ 621.101307][T16599] 0 pages HighMem/MovableOnly [ 621.111491][T16599] 416140 pages reserved [ 621.115752][T16599] 0 pages cma reserved [ 621.128383][T16610] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3620'. [ 621.342933][T16621] netlink: 'syz.1.3623': attribute type 27 has an invalid length. [ 621.443627][T16627] netlink: 'syz.3.3624': attribute type 27 has an invalid length. [ 621.593881][T16630] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3625'. [ 621.719336][T16639] netlink: 'syz.1.3628': attribute type 27 has an invalid length. [ 622.292030][T16646] lo: left promiscuous mode [ 622.297786][T16646] lo: entered allmulticast mode [ 622.367140][T16651] lo: entered promiscuous mode [ 622.371997][T16651] lo: left allmulticast mode [ 622.559537][T16655] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3633'. [ 622.590636][T16650] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3633'. [ 622.805458][T16668] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.3641'. [ 622.825389][T16667] FAULT_INJECTION: forcing a failure. [ 622.825389][T16667] name failslab, interval 1, probability 0, space 0, times 0 [ 622.843935][T16667] CPU: 0 PID: 16667 Comm: syz.1.3640 Not tainted syzkaller #0 [ 622.851461][T16667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 622.861641][T16667] Call Trace: [ 622.864947][T16667] [ 622.867905][T16667] dump_stack_lvl+0x16c/0x230 [ 622.872617][T16667] ? show_regs_print_info+0x20/0x20 [ 622.877830][T16667] ? load_image+0x3b0/0x3b0 [ 622.882348][T16667] ? __might_sleep+0xe0/0xe0 [ 622.886998][T16667] ? __lock_acquire+0x7c80/0x7c80 [ 622.892043][T16667] should_fail_ex+0x39d/0x4d0 [ 622.896751][T16667] should_failslab+0x9/0x20 [ 622.901285][T16667] slab_pre_alloc_hook+0x59/0x310 [ 622.906341][T16667] ? br_netlink_fini+0x30/0x30 [ 622.911161][T16667] kmem_cache_alloc_node+0x60/0x330 [ 622.916381][T16667] ? __alloc_skb+0x108/0x2c0 [ 622.921080][T16667] __alloc_skb+0x108/0x2c0 [ 622.925515][T16667] rtmsg_ifinfo_build_skb+0x8c/0x260 [ 622.930832][T16667] rtnetlink_event+0x1b7/0x260 [ 622.935626][T16667] notifier_call_chain+0x197/0x390 [ 622.940763][T16667] dev_set_mtu_ext+0x436/0x620 [ 622.945546][T16667] ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0 [ 622.952166][T16667] ? dev_validate_mtu+0x170/0x170 [ 622.957228][T16667] dev_set_mtu+0xb9/0x170 [ 622.961583][T16667] ? dev_set_mtu_ext+0x620/0x620 [ 622.966550][T16667] ? __mutex_lock+0x304/0xcc0 [ 622.971245][T16667] ? full_name_hash+0x92/0xe0 [ 622.975948][T16667] dev_ifsioc+0x53f/0xe20 [ 622.980297][T16667] ? dev_ioctl+0x1170/0x1170 [ 622.984895][T16667] ? dev_load+0x21/0x1f0 [ 622.989149][T16667] ? dev_load+0x21/0x1f0 [ 622.993436][T16667] dev_ioctl+0x7e2/0x1170 [ 622.997781][T16667] sock_do_ioctl+0x226/0x2f0 [ 623.002391][T16667] ? sock_show_fdinfo+0xb0/0xb0 [ 623.007276][T16667] sock_ioctl+0x623/0x7a0 [ 623.011630][T16667] ? sock_poll+0x3d0/0x3d0 [ 623.016114][T16667] ? bpf_lsm_file_ioctl+0x9/0x10 [ 623.021082][T16667] ? security_file_ioctl+0x80/0xa0 [ 623.026232][T16667] ? sock_poll+0x3d0/0x3d0 [ 623.030669][T16667] __se_sys_ioctl+0xfd/0x170 [ 623.035279][T16667] do_syscall_64+0x55/0xb0 [ 623.039709][T16667] ? clear_bhb_loop+0x40/0x90 [ 623.044402][T16667] ? clear_bhb_loop+0x40/0x90 [ 623.049092][T16667] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 623.055016][T16667] RIP: 0033:0x7f88ce38eba9 [ 623.059450][T16667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 623.079071][T16667] RSP: 002b:00007f88cf13b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 623.087516][T16667] RAX: ffffffffffffffda RBX: 00007f88ce5d5fa0 RCX: 00007f88ce38eba9 [ 623.095498][T16667] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000006 [ 623.103479][T16667] RBP: 00007f88cf13b090 R08: 0000000000000000 R09: 0000000000000000 [ 623.111490][T16667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.119477][T16667] R13: 00007f88ce5d6038 R14: 00007f88ce5d5fa0 R15: 00007ffd2b40e0c8 [ 623.127478][T16667] [ 623.165706][T16669] netlink: 'syz.2.3639': attribute type 27 has an invalid length. [ 623.555482][T16679] FAULT_INJECTION: forcing a failure. [ 623.555482][T16679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 623.574924][T16679] CPU: 0 PID: 16679 Comm: syz.0.3645 Not tainted syzkaller #0 [ 623.582535][T16679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 623.592631][T16679] Call Trace: [ 623.595942][T16679] [ 623.598905][T16679] dump_stack_lvl+0x16c/0x230 [ 623.603648][T16679] ? show_regs_print_info+0x20/0x20 [ 623.608895][T16679] ? load_image+0x3b0/0x3b0 [ 623.613436][T16679] ? __lock_acquire+0x7c80/0x7c80 [ 623.618504][T16679] ? snprintf+0xdb/0x120 [ 623.622791][T16679] should_fail_ex+0x39d/0x4d0 [ 623.627521][T16679] _copy_to_user+0x2f/0xa0 [ 623.631977][T16679] simple_read_from_buffer+0xe7/0x150 [ 623.637400][T16679] proc_fail_nth_read+0x1e3/0x250 [ 623.642468][T16679] ? proc_fault_inject_write+0x340/0x340 [ 623.648206][T16679] ? fsnotify_perm+0x271/0x5e0 [ 623.653030][T16679] ? proc_fault_inject_write+0x340/0x340 [ 623.658704][T16679] vfs_read+0x27e/0x920 [ 623.662904][T16679] ? kernel_read+0x1e0/0x1e0 [ 623.667553][T16679] ? __fget_files+0x28/0x4d0 [ 623.672218][T16679] ? __fget_files+0x44a/0x4d0 [ 623.676951][T16679] ? __fdget_pos+0x2a3/0x330 [ 623.681583][T16679] ? ksys_read+0x75/0x250 [ 623.685960][T16679] ksys_read+0x147/0x250 [ 623.690289][T16679] ? vfs_write+0x940/0x940 [ 623.694747][T16679] ? lockdep_hardirqs_on+0x98/0x150 [ 623.700002][T16679] do_syscall_64+0x55/0xb0 [ 623.704451][T16679] ? clear_bhb_loop+0x40/0x90 [ 623.709165][T16679] ? clear_bhb_loop+0x40/0x90 [ 623.713893][T16679] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 623.719833][T16679] RIP: 0033:0x7f1a87b8d5bc [ 623.724289][T16679] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 623.743938][T16679] RSP: 002b:00007f1a88998030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 623.752394][T16679] RAX: ffffffffffffffda RBX: 00007f1a87dd5fa0 RCX: 00007f1a87b8d5bc [ 623.760408][T16679] RDX: 000000000000000f RSI: 00007f1a889980a0 RDI: 0000000000000004 [ 623.768430][T16679] RBP: 00007f1a88998090 R08: 0000000000000000 R09: 0000000000000000 [ 623.776432][T16679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 623.784436][T16679] R13: 00007f1a87dd6038 R14: 00007f1a87dd5fa0 R15: 00007fffd02d6868 [ 623.792464][T16679] [ 624.136821][T16684] lo: left promiscuous mode [ 624.142059][T16684] lo: entered allmulticast mode [ 624.200710][T16697] lo: entered promiscuous mode [ 624.206325][T16697] lo: left allmulticast mode [ 624.475087][T16703] FAULT_INJECTION: forcing a failure. [ 624.475087][T16703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.508044][T16703] CPU: 1 PID: 16703 Comm: syz.0.3654 Not tainted syzkaller #0 [ 624.515584][T16703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 624.525663][T16703] Call Trace: [ 624.528986][T16703] [ 624.531939][T16703] dump_stack_lvl+0x16c/0x230 [ 624.536660][T16703] ? show_regs_print_info+0x20/0x20 [ 624.541887][T16703] ? load_image+0x3b0/0x3b0 [ 624.546420][T16703] ? __lock_acquire+0x7c80/0x7c80 [ 624.551471][T16703] ? snprintf+0xdb/0x120 [ 624.555740][T16703] should_fail_ex+0x39d/0x4d0 [ 624.560454][T16703] _copy_to_user+0x2f/0xa0 [ 624.564896][T16703] simple_read_from_buffer+0xe7/0x150 [ 624.570309][T16703] proc_fail_nth_read+0x1e3/0x250 [ 624.575364][T16703] ? proc_fault_inject_write+0x340/0x340 [ 624.581034][T16703] ? fsnotify_perm+0x271/0x5e0 [ 624.585828][T16703] ? proc_fault_inject_write+0x340/0x340 [ 624.591488][T16703] vfs_read+0x27e/0x920 [ 624.595682][T16703] ? kernel_read+0x1e0/0x1e0 [ 624.600300][T16703] ? __fget_files+0x28/0x4d0 [ 624.604917][T16703] ? __fget_files+0x44a/0x4d0 [ 624.609635][T16703] ? __fdget_pos+0x2a3/0x330 [ 624.614244][T16703] ? ksys_read+0x75/0x250 [ 624.618606][T16703] ksys_read+0x147/0x250 [ 624.622874][T16703] ? vfs_write+0x940/0x940 [ 624.627319][T16703] ? lockdep_hardirqs_on+0x98/0x150 [ 624.632551][T16703] do_syscall_64+0x55/0xb0 [ 624.636990][T16703] ? clear_bhb_loop+0x40/0x90 [ 624.641684][T16703] ? clear_bhb_loop+0x40/0x90 [ 624.646385][T16703] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 624.652305][T16703] RIP: 0033:0x7f1a87b8d5bc [ 624.656755][T16703] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 624.676399][T16703] RSP: 002b:00007f1a88998030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 624.684853][T16703] RAX: ffffffffffffffda RBX: 00007f1a87dd5fa0 RCX: 00007f1a87b8d5bc [ 624.692850][T16703] RDX: 000000000000000f RSI: 00007f1a889980a0 RDI: 0000000000000006 [ 624.700841][T16703] RBP: 00007f1a88998090 R08: 0000000000000000 R09: 0000000000000000 [ 624.708830][T16703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.716817][T16703] R13: 00007f1a87dd6038 R14: 00007f1a87dd5fa0 R15: 00007fffd02d6868 [ 624.724840][T16703] [ 624.753880][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.761114][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.014260][T16714] netlink: 'syz.2.3658': attribute type 27 has an invalid length. [ 625.209419][T16718] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.3660'. [ 625.389630][T16720] lo: left promiscuous mode [ 625.394592][T16720] lo: entered allmulticast mode [ 625.552832][T16723] lo: entered promiscuous mode [ 625.576350][T16723] lo: left allmulticast mode [ 625.656231][T16722] veth1_to_hsr: mtu less than device minimum [ 626.694781][T16737] macsec0: entered promiscuous mode [ 626.707038][T16737] macsec0: entered allmulticast mode [ 626.725153][T16737] veth1_macvtap: entered allmulticast mode [ 626.809894][T16748] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3670'. [ 626.993289][T16759] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.3673'. [ 627.273009][T16766] netlink: 'syz.0.3675': attribute type 27 has an invalid length. [ 627.419523][T16772] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.3677'. [ 627.439051][T16775] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.3680'. [ 627.877561][T16783] netlink: 'syz.1.3683': attribute type 12 has an invalid length. [ 627.892750][T16783] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3683'. [ 628.225689][T16794] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3689'. [ 628.463743][T16798] lo: left promiscuous mode [ 628.475180][T16798] lo: entered allmulticast mode [ 628.530283][T16799] lo: entered promiscuous mode [ 628.535137][T16799] lo: left allmulticast mode [ 628.587546][T16801] FAULT_INJECTION: forcing a failure. [ 628.587546][T16801] name failslab, interval 1, probability 0, space 0, times 0 [ 628.600534][T16801] CPU: 1 PID: 16801 Comm: syz.0.3691 Not tainted syzkaller #0 [ 628.608040][T16801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 628.618121][T16801] Call Trace: [ 628.621428][T16801] [ 628.624380][T16801] dump_stack_lvl+0x16c/0x230 [ 628.629096][T16801] ? show_regs_print_info+0x20/0x20 [ 628.634360][T16801] ? load_image+0x3b0/0x3b0 [ 628.638904][T16801] ? __might_sleep+0xe0/0xe0 [ 628.643535][T16801] ? __lock_acquire+0x7c80/0x7c80 [ 628.648605][T16801] should_fail_ex+0x39d/0x4d0 [ 628.653325][T16801] should_failslab+0x9/0x20 [ 628.657862][T16801] slab_pre_alloc_hook+0x59/0x310 [ 628.662941][T16801] ? call_usermodehelper_setup+0x8e/0x260 [ 628.668717][T16801] __kmem_cache_alloc_node+0x53/0x260 [ 628.674144][T16801] ? call_usermodehelper_setup+0x8e/0x260 [ 628.679913][T16801] kmalloc_trace+0x2a/0xe0 [ 628.684379][T16801] call_usermodehelper_setup+0x8e/0x260 [ 628.689976][T16801] ? __request_module+0x5b0/0x5b0 [ 628.695041][T16801] __request_module+0x390/0x5b0 [ 628.699940][T16801] ? module_enforce_rwx_sections+0x150/0x150 [ 628.705974][T16801] ? bpf_lsm_capable+0x9/0x10 [ 628.710700][T16801] ? security_capable+0x89/0xb0 [ 628.715595][T16801] ? dev_load+0x21/0x1f0 [ 628.719877][T16801] dev_load+0x18b/0x1f0 [ 628.724072][T16801] devinet_ioctl+0x13a/0x1c60 [ 628.728802][T16801] ? __might_fault+0xc6/0x120 [ 628.733505][T16801] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 628.738667][T16801] ? _copy_from_user+0xa5/0xe0 [ 628.743479][T16801] ? get_user_ifreq+0x12b/0x180 [ 628.748394][T16801] inet_ioctl+0x33c/0x4c0 [ 628.752758][T16801] ? tomoyo_path_number_perm+0x1ba/0x590 [ 628.758437][T16801] ? inet_shutdown+0x370/0x370 [ 628.763226][T16801] ? slab_free_freelist_hook+0x130/0x1b0 [ 628.768906][T16801] ? tomoyo_path_number_perm+0x477/0x590 [ 628.774575][T16801] ? __kmem_cache_free+0xba/0x1f0 [ 628.779649][T16801] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 628.785158][T16801] sock_do_ioctl+0xd7/0x2f0 [ 628.789713][T16801] ? sock_show_fdinfo+0xb0/0xb0 [ 628.794643][T16801] sock_ioctl+0x623/0x7a0 [ 628.799034][T16801] ? sock_poll+0x3d0/0x3d0 [ 628.803499][T16801] ? bpf_lsm_file_ioctl+0x9/0x10 [ 628.808486][T16801] ? security_file_ioctl+0x80/0xa0 [ 628.810171][T16805] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.3692'. [ 628.813630][T16801] ? sock_poll+0x3d0/0x3d0 [ 628.827294][T16801] __se_sys_ioctl+0xfd/0x170 [ 628.831920][T16801] do_syscall_64+0x55/0xb0 [ 628.836374][T16801] ? clear_bhb_loop+0x40/0x90 [ 628.841082][T16801] ? clear_bhb_loop+0x40/0x90 [ 628.845796][T16801] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 628.851733][T16801] RIP: 0033:0x7f1a87b8eba9 [ 628.852476][T16809] netlink: 'syz.3.3694': attribute type 10 has an invalid length. [ 628.856160][T16801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.856181][T16801] RSP: 002b:00007f1a88998038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 628.856202][T16801] RAX: ffffffffffffffda RBX: 00007f1a87dd5fa0 RCX: 00007f1a87b8eba9 [ 628.856217][T16801] RDX: 0000200000000080 RSI: 000000000000891b RDI: 0000000000000003 [ 628.856230][T16801] RBP: 00007f1a88998090 R08: 0000000000000000 R09: 0000000000000000 [ 628.856242][T16801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.856253][T16801] R13: 00007f1a87dd6038 R14: 00007f1a87dd5fa0 R15: 00007fffd02d6868 [ 628.856282][T16801] [ 628.944485][T16809] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3694'. [ 629.263251][T16816] netlink: 'syz.3.3696': attribute type 27 has an invalid length. [ 630.820755][T16840] lo: left promiscuous mode [ 630.825340][T16840] lo: entered allmulticast mode [ 630.841419][T16841] lo: entered promiscuous mode [ 630.847083][T16841] lo: left allmulticast mode [ 631.134519][T16855] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.3706'. [ 631.236394][T16856] netlink: 'syz.1.3709': attribute type 10 has an invalid length. [ 631.244284][T16856] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3709'. [ 631.266759][T16859] netlink: 'syz.2.3707': attribute type 27 has an invalid length. [ 631.266915][T16856] FAULT_INJECTION: forcing a failure. [ 631.266915][T16856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 631.332803][T16856] CPU: 0 PID: 16856 Comm: syz.1.3709 Not tainted syzkaller #0 [ 631.340346][T16856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 631.350446][T16856] Call Trace: [ 631.353768][T16856] [ 631.356741][T16856] dump_stack_lvl+0x16c/0x230 [ 631.361471][T16856] ? show_regs_print_info+0x20/0x20 [ 631.366728][T16856] ? load_image+0x3b0/0x3b0 [ 631.371316][T16856] ? __lock_acquire+0x7c80/0x7c80 [ 631.376391][T16856] ? snprintf+0xdb/0x120 [ 631.380682][T16856] should_fail_ex+0x39d/0x4d0 [ 631.385418][T16856] _copy_to_user+0x2f/0xa0 [ 631.389874][T16856] simple_read_from_buffer+0xe7/0x150 [ 631.395296][T16856] proc_fail_nth_read+0x1e3/0x250 [ 631.400365][T16856] ? proc_fault_inject_write+0x340/0x340 [ 631.406043][T16856] ? fsnotify_perm+0x271/0x5e0 [ 631.410867][T16856] ? proc_fault_inject_write+0x340/0x340 [ 631.416551][T16856] vfs_read+0x27e/0x920 [ 631.420751][T16856] ? kernel_read+0x1e0/0x1e0 [ 631.425392][T16856] ? __fget_files+0x28/0x4d0 [ 631.430028][T16856] ? __fget_files+0x44a/0x4d0 [ 631.434753][T16856] ? __fdget_pos+0x2a3/0x330 [ 631.439382][T16856] ? ksys_read+0x75/0x250 [ 631.443759][T16856] ksys_read+0x147/0x250 [ 631.448047][T16856] ? vfs_write+0x940/0x940 [ 631.452493][T16856] ? lockdep_hardirqs_on+0x98/0x150 [ 631.457713][T16856] do_syscall_64+0x55/0xb0 [ 631.462141][T16856] ? clear_bhb_loop+0x40/0x90 [ 631.466825][T16856] ? clear_bhb_loop+0x40/0x90 [ 631.471509][T16856] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 631.477433][T16856] RIP: 0033:0x7f88ce38d5bc [ 631.481890][T16856] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 631.501537][T16856] RSP: 002b:00007f88cf13b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 631.509975][T16856] RAX: ffffffffffffffda RBX: 00007f88ce5d5fa0 RCX: 00007f88ce38d5bc [ 631.517980][T16856] RDX: 000000000000000f RSI: 00007f88cf13b0a0 RDI: 0000000000000004 [ 631.526035][T16856] RBP: 00007f88cf13b090 R08: 0000000000000000 R09: 0000000000000000 [ 631.534023][T16856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 631.542024][T16856] R13: 00007f88ce5d6038 R14: 00007f88ce5d5fa0 R15: 00007ffd2b40e0c8 [ 631.550052][T16856] [ 632.170059][T16878] __nla_validate_parse: 2 callbacks suppressed [ 632.170077][T16878] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3715'. [ 632.187455][T16878] netlink: del zone limit has 8 unknown bytes [ 632.487699][T16893] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.3717'. [ 632.907719][T16914] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.3722'. [ 632.988308][T16913] netlink: 'syz.3.3725': attribute type 27 has an invalid length. [ 633.069909][T16918] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.3726'. [ 633.546976][T16931] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3729'. [ 633.949961][T16941] netlink: 'syz.2.3732': attribute type 21 has an invalid length. [ 634.508914][T16959] netlink: 'syz.2.3736': attribute type 27 has an invalid length. [ 634.855517][T16966] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.3739'. [ 635.040028][T16969] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3740'. [ 635.178144][T16971] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.3741'. [ 635.639781][T16978] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.3743'. [ 636.037913][T16983] lo: left promiscuous mode [ 636.056740][T16983] lo: entered allmulticast mode [ 636.119480][T16983] lo: entered promiscuous mode [ 636.135494][T16983] lo: left allmulticast mode [ 636.351975][T16986] FAULT_INJECTION: forcing a failure. [ 636.351975][T16986] name failslab, interval 1, probability 0, space 0, times 0 [ 636.400085][T16993] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.3749'. [ 636.409754][T16986] CPU: 0 PID: 16986 Comm: syz.2.3748 Not tainted syzkaller #0 [ 636.417334][T16986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 636.427489][T16986] Call Trace: [ 636.430861][T16986] [ 636.433878][T16986] dump_stack_lvl+0x16c/0x230 [ 636.438711][T16986] ? show_regs_print_info+0x20/0x20 [ 636.444019][T16986] ? load_image+0x3b0/0x3b0 [ 636.448658][T16986] ? __might_sleep+0xe0/0xe0 [ 636.453362][T16986] ? __lock_acquire+0x7c80/0x7c80 [ 636.458534][T16986] should_fail_ex+0x39d/0x4d0 [ 636.463362][T16986] should_failslab+0x9/0x20 [ 636.467970][T16986] slab_pre_alloc_hook+0x59/0x310 [ 636.473119][T16986] ? __lock_acquire+0x7c80/0x7c80 [ 636.478271][T16986] kmem_cache_alloc_node+0x60/0x330 [ 636.483587][T16986] ? __alloc_skb+0x108/0x2c0 [ 636.488322][T16986] __alloc_skb+0x108/0x2c0 [ 636.492890][T16986] netlink_sendmsg+0x65b/0xbe0 [ 636.497827][T16986] ? netlink_getsockopt+0x580/0x580 [ 636.503153][T16986] ? aa_sock_msg_perm+0x94/0x150 [ 636.508213][T16986] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 636.513588][T16986] ? security_socket_sendmsg+0x80/0xa0 [ 636.519145][T16986] ? netlink_getsockopt+0x580/0x580 [ 636.524452][T16986] ____sys_sendmsg+0x5bf/0x950 [ 636.529370][T16986] ? __asan_memset+0x22/0x40 [ 636.534073][T16986] ? __sys_sendmsg_sock+0x30/0x30 [ 636.539212][T16986] ? __import_iovec+0x5f2/0x860 [ 636.544213][T16986] ? import_iovec+0x73/0xa0 [ 636.548841][T16986] ___sys_sendmsg+0x220/0x290 [ 636.553651][T16986] ? __sys_sendmsg+0x270/0x270 [ 636.558682][T16986] ? __lock_acquire+0x7c80/0x7c80 [ 636.563996][T16986] __se_sys_sendmsg+0x1a5/0x270 [ 636.568987][T16986] ? __x64_sys_sendmsg+0x80/0x80 [ 636.574150][T16986] ? lockdep_hardirqs_on+0x98/0x150 [ 636.579482][T16986] do_syscall_64+0x55/0xb0 [ 636.583995][T16986] ? clear_bhb_loop+0x40/0x90 [ 636.588764][T16986] ? clear_bhb_loop+0x40/0x90 [ 636.593554][T16986] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 636.599544][T16986] RIP: 0033:0x7f37fbf8eba9 [ 636.604051][T16986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.623784][T16986] RSP: 002b:00007f37fce5d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 636.632308][T16986] RAX: ffffffffffffffda RBX: 00007f37fc1d5fa0 RCX: 00007f37fbf8eba9 [ 636.640342][T16986] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000008 [ 636.648368][T16986] RBP: 00007f37fce5d090 R08: 0000000000000000 R09: 0000000000000000 [ 636.656400][T16986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.664431][T16986] R13: 00007f37fc1d6038 R14: 00007f37fc1d5fa0 R15: 00007ffca2a19d58 [ 636.672527][T16986] [ 637.013475][T16998] netlink: 'syz.1.3751': attribute type 27 has an invalid length. [ 637.120840][T17003] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.128321][T17003] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.293417][T17009] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.300732][T17009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.308386][T17009] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.315561][T17009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.402180][T17009] bridge0: entered promiscuous mode [ 637.411293][T17009] bridge0: entered allmulticast mode [ 637.886894][T17015] lo: left promiscuous mode [ 637.905311][T17015] lo: entered allmulticast mode [ 637.979005][T17021] lo: entered promiscuous mode [ 637.984490][T17021] lo: left allmulticast mode [ 638.219479][T17024] FAULT_INJECTION: forcing a failure. [ 638.219479][T17024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 638.249480][T17024] CPU: 0 PID: 17024 Comm: syz.0.3760 Not tainted syzkaller #0 [ 638.257013][T17024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 638.267105][T17024] Call Trace: [ 638.270400][T17024] [ 638.273346][T17024] dump_stack_lvl+0x16c/0x230 [ 638.278046][T17024] ? show_regs_print_info+0x20/0x20 [ 638.283262][T17024] ? load_image+0x3b0/0x3b0 [ 638.287781][T17024] ? __lock_acquire+0x7c80/0x7c80 [ 638.292823][T17024] ? snprintf+0xdb/0x120 [ 638.297086][T17024] should_fail_ex+0x39d/0x4d0 [ 638.301788][T17024] _copy_to_user+0x2f/0xa0 [ 638.306234][T17024] simple_read_from_buffer+0xe7/0x150 [ 638.311659][T17024] proc_fail_nth_read+0x1e3/0x250 [ 638.316710][T17024] ? proc_fault_inject_write+0x340/0x340 [ 638.322365][T17024] ? fsnotify_perm+0x271/0x5e0 [ 638.327148][T17024] ? proc_fault_inject_write+0x340/0x340 [ 638.332800][T17024] vfs_read+0x27e/0x920 [ 638.336978][T17024] ? kernel_read+0x1e0/0x1e0 [ 638.341590][T17024] ? __fget_files+0x28/0x4d0 [ 638.346203][T17024] ? __fget_files+0x44a/0x4d0 [ 638.350941][T17024] ? __fdget_pos+0x2a3/0x330 [ 638.355550][T17024] ? ksys_read+0x75/0x250 [ 638.359904][T17024] ksys_read+0x147/0x250 [ 638.364187][T17024] ? vfs_write+0x940/0x940 [ 638.368623][T17024] ? lockdep_hardirqs_on+0x98/0x150 [ 638.373848][T17024] do_syscall_64+0x55/0xb0 [ 638.378279][T17024] ? clear_bhb_loop+0x40/0x90 [ 638.382984][T17024] ? clear_bhb_loop+0x40/0x90 [ 638.387679][T17024] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 638.393598][T17024] RIP: 0033:0x7f1a87b8d5bc [ 638.398028][T17024] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 638.417646][T17024] RSP: 002b:00007f1a88998030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 638.426077][T17024] RAX: ffffffffffffffda RBX: 00007f1a87dd5fa0 RCX: 00007f1a87b8d5bc [ 638.434063][T17024] RDX: 000000000000000f RSI: 00007f1a889980a0 RDI: 0000000000000006 [ 638.442049][T17024] RBP: 00007f1a88998090 R08: 0000000000000000 R09: 0000000000000000 [ 638.450034][T17024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.458018][T17024] R13: 00007f1a87dd6038 R14: 00007f1a87dd5fa0 R15: 00007fffd02d6868 [ 638.466031][T17024] [ 638.488513][T17027] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.3761'. [ 638.862250][T17034] netlink: 'syz.2.3762': attribute type 27 has an invalid length. [ 639.127182][T17040] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3765'. [ 639.635663][T17057] FAULT_INJECTION: forcing a failure. [ 639.635663][T17057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 639.666269][T17057] CPU: 0 PID: 17057 Comm: syz.1.3771 Not tainted syzkaller #0 [ 639.673904][T17057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 639.683995][T17057] Call Trace: [ 639.687315][T17057] [ 639.690286][T17057] dump_stack_lvl+0x16c/0x230 [ 639.695017][T17057] ? show_regs_print_info+0x20/0x20 [ 639.700256][T17057] ? load_image+0x3b0/0x3b0 [ 639.704812][T17057] ? __lock_acquire+0x7c80/0x7c80 [ 639.709879][T17057] ? snprintf+0xdb/0x120 [ 639.714168][T17057] should_fail_ex+0x39d/0x4d0 [ 639.718894][T17057] _copy_to_user+0x2f/0xa0 [ 639.723356][T17057] simple_read_from_buffer+0xe7/0x150 [ 639.728779][T17057] proc_fail_nth_read+0x1e3/0x250 [ 639.733847][T17057] ? proc_fault_inject_write+0x340/0x340 [ 639.739539][T17057] ? fsnotify_perm+0x271/0x5e0 [ 639.744350][T17057] ? proc_fault_inject_write+0x340/0x340 [ 639.750035][T17057] vfs_read+0x27e/0x920 [ 639.754243][T17057] ? kernel_read+0x1e0/0x1e0 [ 639.758876][T17057] ? __fget_files+0x28/0x4d0 [ 639.763514][T17057] ? __fget_files+0x44a/0x4d0 [ 639.768246][T17057] ? __fdget_pos+0x2a3/0x330 [ 639.772881][T17057] ? ksys_read+0x75/0x250 [ 639.777255][T17057] ksys_read+0x147/0x250 [ 639.781543][T17057] ? vfs_write+0x940/0x940 [ 639.786005][T17057] ? lockdep_hardirqs_on+0x98/0x150 [ 639.791258][T17057] do_syscall_64+0x55/0xb0 [ 639.795716][T17057] ? clear_bhb_loop+0x40/0x90 [ 639.800420][T17057] ? clear_bhb_loop+0x40/0x90 [ 639.805130][T17057] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 639.811068][T17057] RIP: 0033:0x7f88ce38d5bc [ 639.815519][T17057] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 639.835160][T17057] RSP: 002b:00007f88cf13b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 639.843620][T17057] RAX: ffffffffffffffda RBX: 00007f88ce5d5fa0 RCX: 00007f88ce38d5bc [ 639.851633][T17057] RDX: 000000000000000f RSI: 00007f88cf13b0a0 RDI: 0000000000000009 [ 639.859644][T17057] RBP: 00007f88cf13b090 R08: 0000000000000000 R09: 0000000000000000 [ 639.867656][T17057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.875661][T17057] R13: 00007f88ce5d6038 R14: 00007f88ce5d5fa0 R15: 00007ffd2b40e0c8 [ 639.883689][T17057] [ 639.986722][T17067] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.3774'. [ 640.380147][T17069] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3776'. [ 640.954648][T17090] netlink: 'syz.1.3781': attribute type 27 has an invalid length. [ 641.378778][T17092] lo: left promiscuous mode [ 641.396425][T17092] lo: entered allmulticast mode [ 641.454350][T17098] lo: entered promiscuous mode [ 641.460254][T17098] lo: left allmulticast mode [ 641.592702][T17100] warn_alloc: 4 callbacks suppressed [ 641.592721][T17100] syz.3.3785: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 641.639854][T17105] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.3787'. [ 641.657611][T17100] CPU: 0 PID: 17100 Comm: syz.3.3785 Not tainted syzkaller #0 [ 641.665224][T17100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 641.675368][T17100] Call Trace: [ 641.678737][T17100] [ 641.681777][T17100] dump_stack_lvl+0x16c/0x230 [ 641.686623][T17100] ? show_regs_print_info+0x20/0x20 [ 641.691906][T17100] ? load_image+0x3b0/0x3b0 [ 641.696509][T17100] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 641.703022][T17100] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 641.709609][T17100] warn_alloc+0x210/0x300 [ 641.714021][T17100] ? stack_trace_save+0x9c/0xe0 [ 641.718988][T17100] ? zone_watermark_ok_safe+0x230/0x230 [ 641.724651][T17100] ? kasan_set_track+0x5f/0x70 [ 641.729470][T17100] ? kasan_set_track+0x4e/0x70 [ 641.734283][T17100] ? __kasan_kmalloc+0x8f/0xa0 [ 641.739096][T17100] ? xsk_init_queue+0xb0/0x110 [ 641.743910][T17100] ? xsk_setsockopt+0x4db/0x6f0 [ 641.748808][T17100] ? do_sock_setsockopt+0x175/0x1a0 [ 641.754082][T17100] ? __x64_sys_setsockopt+0x184/0x200 [ 641.759536][T17100] __vmalloc_node_range+0x126/0x1320 [ 641.765026][T17100] ? free_vm_area+0x50/0x50 [ 641.769651][T17100] vmalloc_user+0x74/0x80 [ 641.774056][T17100] ? xskq_create+0xbf/0x170 [ 641.778623][T17100] xskq_create+0xbf/0x170 [ 641.783025][T17100] xsk_init_queue+0xb0/0x110 [ 641.787686][T17100] xsk_setsockopt+0x4db/0x6f0 [ 641.792446][T17100] ? xsk_poll+0x670/0x670 [ 641.796868][T17100] ? __fget_files+0x28/0x4d0 [ 641.801530][T17100] ? aa_sock_opt_perm+0x74/0x100 [ 641.806551][T17100] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 641.812168][T17100] ? security_socket_setsockopt+0x7e/0xa0 [ 641.817961][T17100] ? xsk_poll+0x670/0x670 [ 641.822363][T17100] do_sock_setsockopt+0x175/0x1a0 [ 641.827453][T17100] ? __fdget+0x180/0x210 [ 641.831777][T17100] __x64_sys_setsockopt+0x184/0x200 [ 641.837244][T17100] do_syscall_64+0x55/0xb0 [ 641.841720][T17100] ? clear_bhb_loop+0x40/0x90 [ 641.846447][T17100] ? clear_bhb_loop+0x40/0x90 [ 641.851199][T17100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 641.857162][T17100] RIP: 0033:0x7fa11758eba9 [ 641.861649][T17100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.881311][T17100] RSP: 002b:00007fa1184c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 641.889803][T17100] RAX: ffffffffffffffda RBX: 00007fa1177d5fa0 RCX: 00007fa11758eba9 [ 641.897832][T17100] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 641.905856][T17100] RBP: 00007fa117611e19 R08: 0000000000000004 R09: 0000000000000000 [ 641.913883][T17100] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 641.921913][T17100] R13: 00007fa1177d6038 R14: 00007fa1177d5fa0 R15: 00007ffde6f96208 [ 641.930015][T17100] [ 641.986328][T17100] Mem-Info: [ 641.989580][T17100] active_anon:5184 inactive_anon:0 isolated_anon:0 [ 641.989580][T17100] active_file:18963 inactive_file:40086 isolated_file:0 [ 641.989580][T17100] unevictable:768 dirty:139 writeback:0 [ 641.989580][T17100] slab_reclaimable:10576 slab_unreclaimable:93696 [ 641.989580][T17100] mapped:24520 shmem:1361 pagetables:519 [ 641.989580][T17100] sec_pagetables:0 bounce:0 [ 641.989580][T17100] kernel_misc_reclaimable:0 [ 641.989580][T17100] free:1346506 free_pcp:7773 free_cma:0 [ 642.100409][T17100] Node 0 active_anon:20636kB inactive_anon:0kB active_file:75852kB inactive_file:160144kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98180kB dirty:556kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10832kB pagetables:1976kB sec_pagetables:0kB all_unreclaimable? no [ 642.190089][T17100] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 642.228205][T17100] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 642.273589][T17100] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 642.288024][T17116] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3789'. [ 642.289600][T17100] Node 0 DMA32 free:1481320kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:20600kB inactive_anon:0kB active_file:75852kB inactive_file:158828kB unevictable:1536kB writepending:660kB present:3129332kB managed:2589588kB mlocked:0kB bounce:0kB free_pcp:9752kB local_pcp:9020kB free_cma:0kB [ 642.345082][T17118] bridge0: entered allmulticast mode [ 642.354738][T17118] team0: left allmulticast mode [ 642.356289][T17100] lowmem_reserve[]: 0 0 1 1 1 [ 642.364244][T17118] team_slave_0: left allmulticast mode [ 642.381922][T17100] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 642.382906][T17118] team_slave_1: left allmulticast mode [ 642.417400][T17100] lowmem_reserve[]: 0 0 0 0 0 [ 642.422355][T17100] Node 1 Normal free:3888132kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21452kB local_pcp:10148kB free_cma:0kB [ 642.456003][T17118] team0: left promiscuous mode [ 642.461389][T17118] team_slave_0: left promiscuous mode [ 642.467629][T17118] team_slave_1: left promiscuous mode [ 642.475678][T17118] bridge0: port 3(team0) entered disabled state [ 642.483328][T17100] lowmem_reserve[]: 0 0 0 0 0 [ 642.489052][T17100] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 642.503907][T17100] Node 0 DMA32: 2998*4kB (UME) 2208*8kB (UME) 1459*16kB (UME) 1017*32kB (UME) 465*64kB (UME) 111*128kB (UME) 39*256kB (UME) 15*512kB (UM) 7*1024kB (UME) 2*2048kB (ME) 323*4096kB (UM) = 1481448kB [ 642.525019][T17100] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 642.526073][T17118] bridge_slave_1: left allmulticast mode [ 642.538792][T17100] Node 1 [ 642.545712][T17118] bridge_slave_1: left promiscuous mode [ 642.555741][T17118] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.573034][T17118] bridge_slave_0: left allmulticast mode [ 642.575008][T17100] Normal: 257*4kB (UME) 72*8kB (UME) 44*16kB (UME) 46*32kB (UME) 13*64kB (UE) 8*128kB (UME) 0*256kB 3*512kB (UME) 0*1024kB 1*2048kB (E) 947*4096kB (M) = 3888132kB [ 642.596443][T17118] bridge_slave_0: left promiscuous mode [ 642.596736][T17118] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.625127][T17100] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 642.636121][T17100] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 642.646532][T17100] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 642.666856][T17100] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 642.696262][T17100] 60410 total pagecache pages [ 642.701186][T17100] 0 pages in swap cache [ 642.705396][T17100] Free swap = 124996kB [ 642.721476][T17100] Total swap = 124996kB [ 642.746368][T17100] 2097051 pages RAM [ 642.750296][T17100] 0 pages HighMem/MovableOnly [ 642.755049][T17100] 416140 pages reserved [ 642.770142][T17100] 0 pages cma reserved [ 643.063666][T17133] netlink: 'syz.3.3794': attribute type 39 has an invalid length. [ 643.172818][T17137] netlink: 'syz.2.3792': attribute type 27 has an invalid length. [ 643.185167][T17139] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.192561][T17139] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.206245][T17139] bridge0: left promiscuous mode [ 643.371719][T17148] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.3799'. [ 643.596975][T17153] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3801'. [ 643.606505][T17153] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3801'. [ 643.616011][T17153] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3801'. [ 643.626007][T17153] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3801'. [ 643.763292][T17157] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3803'. [ 644.160633][T17170] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3806'. [ 644.173586][T17175] FAULT_INJECTION: forcing a failure. [ 644.173586][T17175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 644.213528][T17175] CPU: 1 PID: 17175 Comm: syz.1.3808 Not tainted syzkaller #0 [ 644.221071][T17175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 644.231171][T17175] Call Trace: [ 644.234511][T17175] [ 644.237481][T17175] dump_stack_lvl+0x16c/0x230 [ 644.242223][T17175] ? show_regs_print_info+0x20/0x20 [ 644.247466][T17175] ? load_image+0x3b0/0x3b0 [ 644.252016][T17175] ? __might_fault+0xaa/0x120 [ 644.256741][T17175] ? __lock_acquire+0x7c80/0x7c80 [ 644.261814][T17175] should_fail_ex+0x39d/0x4d0 [ 644.266541][T17175] _copy_to_user+0x2f/0xa0 [ 644.271017][T17175] finalize_log+0xe2/0x150 [ 644.275483][T17175] ? btf_parse_struct_metas+0xe10/0xe10 [ 644.281080][T17175] ? btf_check_type_tags+0x674/0x680 [ 644.286414][T17175] btf_new_fd+0x702/0x980 [ 644.290793][T17175] ? bpf_btf_show_fdinfo+0x80/0x80 [ 644.295951][T17175] ? capable+0x88/0xe0 [ 644.300063][T17175] __sys_bpf+0x60e/0x800 [ 644.304346][T17175] ? bpf_link_show_fdinfo+0x350/0x350 [ 644.309762][T17175] ? lock_chain_count+0x20/0x20 [ 644.314643][T17175] __x64_sys_bpf+0x7c/0x90 [ 644.319070][T17175] do_syscall_64+0x55/0xb0 [ 644.323500][T17175] ? clear_bhb_loop+0x40/0x90 [ 644.328194][T17175] ? clear_bhb_loop+0x40/0x90 [ 644.332882][T17175] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 644.338799][T17175] RIP: 0033:0x7f88ce38eba9 [ 644.343231][T17175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.362852][T17175] RSP: 002b:00007f88cf13b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 644.371286][T17175] RAX: ffffffffffffffda RBX: 00007f88ce5d5fa0 RCX: 00007f88ce38eba9 [ 644.379270][T17175] RDX: 0000000000000028 RSI: 0000200000000140 RDI: 0000000000000012 [ 644.387251][T17175] RBP: 00007f88cf13b090 R08: 0000000000000000 R09: 0000000000000000 [ 644.395234][T17175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 644.403232][T17175] R13: 00007f88ce5d6038 R14: 00007f88ce5d5fa0 R15: 00007ffd2b40e0c8 [ 644.411227][T17175] [ 644.558897][T17182] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.3811'. [ 644.772400][T17191] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3813'. [ 644.795813][T17191] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3813'. [ 644.808272][T17185] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3813'. [ 644.905843][T17193] netlink: 'syz.1.3814': attribute type 27 has an invalid length. [ 645.321411][T17200] netlink: 'syz.2.3817': attribute type 13 has an invalid length. [ 645.442149][T17203] raw_sendmsg: syz.3.3818 forgot to set AF_INET. Fix it! [ 646.189254][T17219] lo: left promiscuous mode [ 646.194931][T17219] lo: entered allmulticast mode [ 646.272268][T17219] lo: entered promiscuous mode [ 646.326443][T17219] lo: left allmulticast mode [ 646.566255][T17223] netlink: 'syz.3.3824': attribute type 27 has an invalid length. [ 646.917610][T17235] FAULT_INJECTION: forcing a failure. [ 646.917610][T17235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.954413][T17235] CPU: 1 PID: 17235 Comm: syz.3.3827 Not tainted syzkaller #0 [ 646.961950][T17235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 646.972045][T17235] Call Trace: [ 646.975358][T17235] [ 646.978329][T17235] dump_stack_lvl+0x16c/0x230 [ 646.983054][T17235] ? show_regs_print_info+0x20/0x20 [ 646.988289][T17235] ? load_image+0x3b0/0x3b0 [ 646.992854][T17235] ? __lock_acquire+0x7c80/0x7c80 [ 646.997920][T17235] ? snprintf+0xdb/0x120 [ 647.002205][T17235] should_fail_ex+0x39d/0x4d0 [ 647.006941][T17235] _copy_to_user+0x2f/0xa0 [ 647.011400][T17235] simple_read_from_buffer+0xe7/0x150 [ 647.016834][T17235] proc_fail_nth_read+0x1e3/0x250 [ 647.021921][T17235] ? proc_fault_inject_write+0x340/0x340 [ 647.027617][T17235] ? fsnotify_perm+0x271/0x5e0 [ 647.032438][T17235] ? proc_fault_inject_write+0x340/0x340 [ 647.038119][T17235] vfs_read+0x27e/0x920 [ 647.042346][T17235] ? kernel_read+0x1e0/0x1e0 [ 647.046981][T17235] ? __fget_files+0x28/0x4d0 [ 647.051617][T17235] ? __fget_files+0x44a/0x4d0 [ 647.056350][T17235] ? __fdget_pos+0x2a3/0x330 [ 647.060993][T17235] ? ksys_read+0x75/0x250 [ 647.065372][T17235] ksys_read+0x147/0x250 [ 647.069664][T17235] ? vfs_write+0x940/0x940 [ 647.074130][T17235] ? lockdep_hardirqs_on+0x98/0x150 [ 647.079386][T17235] do_syscall_64+0x55/0xb0 [ 647.083853][T17235] ? clear_bhb_loop+0x40/0x90 [ 647.088573][T17235] ? clear_bhb_loop+0x40/0x90 [ 647.093294][T17235] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 647.099241][T17235] RIP: 0033:0x7fa11758d5bc [ 647.103689][T17235] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 647.123340][T17235] RSP: 002b:00007fa1184c5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 647.131796][T17235] RAX: ffffffffffffffda RBX: 00007fa1177d5fa0 RCX: 00007fa11758d5bc [ 647.139809][T17235] RDX: 000000000000000f RSI: 00007fa1184c50a0 RDI: 0000000000000004 [ 647.147824][T17235] RBP: 00007fa1184c5090 R08: 0000000000000000 R09: 0000000000000000 [ 647.155838][T17235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.163843][T17235] R13: 00007fa1177d6038 R14: 00007fa1177d5fa0 R15: 00007ffde6f96208 [ 647.171887][T17235] [ 647.394638][T17245] FAULT_INJECTION: forcing a failure. [ 647.394638][T17245] name failslab, interval 1, probability 0, space 0, times 0 [ 647.451098][T17244] netlink: 'syz.3.3831': attribute type 21 has an invalid length. [ 647.464763][T17244] netlink: 'syz.3.3831': attribute type 4 has an invalid length. [ 647.472967][T17245] CPU: 0 PID: 17245 Comm: syz.1.3830 Not tainted syzkaller #0 [ 647.480469][T17245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 647.490566][T17245] Call Trace: [ 647.493881][T17245] [ 647.496851][T17245] dump_stack_lvl+0x16c/0x230 [ 647.501579][T17245] ? sctp_sendmsg+0x155c/0x27e0 [ 647.506476][T17245] ? ___sys_sendmsg+0x220/0x290 [ 647.511389][T17245] ? show_regs_print_info+0x20/0x20 [ 647.516646][T17245] ? load_image+0x3b0/0x3b0 [ 647.521214][T17245] should_fail_ex+0x39d/0x4d0 [ 647.525951][T17245] should_failslab+0x9/0x20 [ 647.530504][T17245] slab_pre_alloc_hook+0x59/0x310 [ 647.535583][T17245] ? sctp_add_bind_addr+0x8c/0x360 [ 647.540740][T17245] __kmem_cache_alloc_node+0x53/0x260 [ 647.546164][T17245] ? sctp_add_bind_addr+0x8c/0x360 [ 647.551328][T17245] kmalloc_trace+0x2a/0xe0 [ 647.555800][T17245] sctp_add_bind_addr+0x8c/0x360 [ 647.560796][T17245] sctp_copy_local_addr_list+0x30c/0x4e0 [ 647.566483][T17245] ? sctp_copy_local_addr_list+0x9c/0x4e0 [ 647.572270][T17245] ? sctp_do_8_2_transport_strike+0x8b0/0x8b0 [ 647.578392][T17245] ? sctp_v4_is_any+0x35/0x60 [ 647.583115][T17245] ? sctp_copy_one_addr+0x8c/0x350 [ 647.588284][T17245] sctp_bind_addr_copy+0xb3/0x3c0 [ 647.593363][T17245] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 647.599758][T17245] sctp_connect_new_asoc+0x2da/0x690 [ 647.605103][T17245] ? __sctp_connect+0xd20/0xd20 [ 647.610010][T17245] ? __local_bh_enable_ip+0x12e/0x1c0 [ 647.615427][T17245] ? _local_bh_enable+0xa0/0xa0 [ 647.620319][T17245] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 647.626179][T17245] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 647.632040][T17245] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 647.637633][T17245] ? security_sctp_bind_connect+0x89/0xb0 [ 647.643494][T17245] sctp_sendmsg+0x155c/0x27e0 [ 647.648241][T17245] ? sctp_getsockopt+0xb60/0xb60 [ 647.653244][T17245] ? aa_sk_perm+0x7fc/0x930 [ 647.657907][T17245] ? aa_af_perm+0x2b0/0x2b0 [ 647.662456][T17245] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 647.668926][T17245] ? sock_rps_record_flow+0x19/0x400 [ 647.674255][T17245] ? inet_send_prepare+0x260/0x260 [ 647.679414][T17245] ? inet_sendmsg+0x7c/0x2f0 [ 647.684045][T17245] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 647.689374][T17245] ? security_socket_sendmsg+0x80/0xa0 [ 647.694868][T17245] ? inet_send_prepare+0x260/0x260 [ 647.700019][T17245] ____sys_sendmsg+0x5bf/0x950 [ 647.704837][T17245] ? __asan_memset+0x22/0x40 [ 647.709471][T17245] ? __sys_sendmsg_sock+0x30/0x30 [ 647.714545][T17245] ? __import_iovec+0x5f2/0x860 [ 647.719456][T17245] ? import_iovec+0x73/0xa0 [ 647.724020][T17245] ___sys_sendmsg+0x220/0x290 [ 647.728749][T17245] ? __sys_sendmsg+0x270/0x270 [ 647.733589][T17245] ? __lock_acquire+0x7c80/0x7c80 [ 647.738686][T17245] __se_sys_sendmsg+0x1a5/0x270 [ 647.743582][T17245] ? __x64_sys_sendmsg+0x80/0x80 [ 647.748597][T17245] ? lockdep_hardirqs_on+0x98/0x150 [ 647.753852][T17245] do_syscall_64+0x55/0xb0 [ 647.758317][T17245] ? clear_bhb_loop+0x40/0x90 [ 647.763033][T17245] ? clear_bhb_loop+0x40/0x90 [ 647.767755][T17245] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 647.773693][T17245] RIP: 0033:0x7f88ce38eba9 [ 647.778142][T17245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 647.797791][T17245] RSP: 002b:00007f88cc5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 647.806256][T17245] RAX: ffffffffffffffda RBX: 00007f88ce5d6090 RCX: 00007f88ce38eba9 [ 647.814278][T17245] RDX: 0000000004008040 RSI: 0000200000001f80 RDI: 0000000000000005 [ 647.822298][T17245] RBP: 00007f88cc5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 647.830306][T17245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 647.838298][T17245] R13: 00007f88ce5d6128 R14: 00007f88ce5d6090 R15: 00007ffd2b40e0c8 [ 647.846306][T17245] [ 648.302010][T17251] lo: left promiscuous mode [ 648.312484][T17251] lo: entered allmulticast mode [ 648.393742][T17257] lo: entered promiscuous mode [ 648.436526][T17257] lo: left allmulticast mode [ 648.501704][T17261] netlink: 'syz.2.3835': attribute type 27 has an invalid length. [ 649.335637][T17286] __nla_validate_parse: 9 callbacks suppressed [ 649.335657][T17286] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.3845'. [ 649.353828][T17288] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3844'. [ 649.363142][T17288] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3844'. [ 649.383537][T17284] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3844'. [ 649.406355][T17291] netlink: 'syz.1.3847': attribute type 21 has an invalid length. [ 649.424706][T17291] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3847'. [ 650.296660][T17300] lo: left promiscuous mode [ 650.301265][T17300] lo: entered allmulticast mode [ 650.342302][T17294] lo: entered promiscuous mode [ 650.358693][T17294] lo: left allmulticast mode [ 650.743471][T17299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3850'. [ 650.985588][T17312] netlink: 'syz.1.3853': attribute type 27 has an invalid length. [ 651.300491][T17324] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.3858'. [ 651.671755][T17331] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.3869'. [ 651.748056][T17334] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3861'. [ 651.791341][T17334] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3861'. [ 652.455017][T17330] lo: left promiscuous mode [ 652.496811][T17330] lo: entered allmulticast mode [ 652.635831][T17338] lo: entered promiscuous mode [ 652.657596][T17338] lo: left allmulticast mode [ 652.996672][T17350] netlink: 'syz.3.3867': attribute type 27 has an invalid length. [ 653.117277][T17355] FAULT_INJECTION: forcing a failure. [ 653.117277][T17355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 653.146428][T17355] CPU: 0 PID: 17355 Comm: syz.1.3870 Not tainted syzkaller #0 [ 653.153987][T17355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 653.164102][T17355] Call Trace: [ 653.167426][T17355] [ 653.170403][T17355] dump_stack_lvl+0x16c/0x230 [ 653.175150][T17355] ? show_regs_print_info+0x20/0x20 [ 653.180412][T17355] ? load_image+0x3b0/0x3b0 [ 653.184971][T17355] ? __might_fault+0xaa/0x120 [ 653.189719][T17355] ? __lock_acquire+0x7c80/0x7c80 [ 653.194811][T17355] should_fail_ex+0x39d/0x4d0 [ 653.199609][T17355] _copy_from_user+0x2f/0xe0 [ 653.204275][T17355] __sys_bpf+0x1e9/0x800 [ 653.208582][T17355] ? bpf_link_show_fdinfo+0x350/0x350 [ 653.214044][T17355] ? lock_chain_count+0x20/0x20 [ 653.218960][T17355] __x64_sys_bpf+0x7c/0x90 [ 653.223408][T17355] do_syscall_64+0x55/0xb0 [ 653.227860][T17355] ? clear_bhb_loop+0x40/0x90 [ 653.232563][T17355] ? clear_bhb_loop+0x40/0x90 [ 653.237269][T17355] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 653.243200][T17355] RIP: 0033:0x7f88ce38eba9 [ 653.247677][T17355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 653.267313][T17355] RSP: 002b:00007f88cf13b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 653.275775][T17355] RAX: ffffffffffffffda RBX: 00007f88ce5d5fa0 RCX: 00007f88ce38eba9 [ 653.283887][T17355] RDX: 000000000000000c RSI: 00002000000003c0 RDI: 000000000000000a [ 653.291891][T17355] RBP: 00007f88cf13b090 R08: 0000000000000000 R09: 0000000000000000 [ 653.299894][T17355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 653.307886][T17355] R13: 00007f88ce5d6038 R14: 00007f88ce5d5fa0 R15: 00007ffd2b40e0c8 [ 653.315905][T17355] [ 653.357025][T17360] netlink: 'syz.3.3872': attribute type 21 has an invalid length. [ 653.546101][T17363] netlink: 'syz.1.3874': attribute type 21 has an invalid length. [ 653.561146][T17363] netlink: 'syz.1.3874': attribute type 4 has an invalid length. [ 654.562023][T17373] lo: left promiscuous mode [ 654.573604][T17373] lo: entered allmulticast mode [ 654.626860][T17378] lo: entered promiscuous mode [ 654.631712][T17378] lo: left allmulticast mode [ 654.826002][T17382] netlink: 'syz.0.3880': attribute type 27 has an invalid length. [ 654.978431][T17389] FAULT_INJECTION: forcing a failure. [ 654.978431][T17389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 655.006415][T17389] CPU: 0 PID: 17389 Comm: syz.1.3883 Not tainted syzkaller #0 [ 655.014082][T17389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 655.024177][T17389] Call Trace: [ 655.027496][T17389] [ 655.030459][T17389] dump_stack_lvl+0x16c/0x230 [ 655.035213][T17389] ? show_regs_print_info+0x20/0x20 [ 655.040456][T17389] ? load_image+0x3b0/0x3b0 [ 655.045016][T17389] ? __lock_acquire+0x7c80/0x7c80 [ 655.050083][T17389] ? __virt_addr_valid+0x18c/0x540 [ 655.055241][T17389] should_fail_ex+0x39d/0x4d0 [ 655.059967][T17389] _copy_from_user+0x2f/0xe0 [ 655.064631][T17389] bpf_test_init+0xf9/0x150 [ 655.069194][T17389] bpf_prog_test_run_xdp+0x382/0xfa0 [ 655.074550][T17389] ? dev_put+0x80/0x80 [ 655.078688][T17389] ? dev_put+0x80/0x80 [ 655.082800][T17389] bpf_prog_test_run+0x321/0x390 [ 655.087760][T17389] __sys_bpf+0x440/0x800 [ 655.092024][T17389] ? bpf_link_show_fdinfo+0x350/0x350 [ 655.097446][T17389] ? lock_chain_count+0x20/0x20 [ 655.102343][T17389] __x64_sys_bpf+0x7c/0x90 [ 655.106803][T17389] do_syscall_64+0x55/0xb0 [ 655.111269][T17389] ? clear_bhb_loop+0x40/0x90 [ 655.115971][T17389] ? clear_bhb_loop+0x40/0x90 [ 655.120668][T17389] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 655.126582][T17389] RIP: 0033:0x7f88ce38eba9 [ 655.131048][T17389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.150682][T17389] RSP: 002b:00007f88cf13b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 655.159123][T17389] RAX: ffffffffffffffda RBX: 00007f88ce5d5fa0 RCX: 00007f88ce38eba9 [ 655.167112][T17389] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 655.175092][T17389] RBP: 00007f88cf13b090 R08: 0000000000000000 R09: 0000000000000000 [ 655.183075][T17389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 655.191053][T17389] R13: 00007f88ce5d6038 R14: 00007f88ce5d5fa0 R15: 00007ffd2b40e0c8 [ 655.199045][T17389] [ 655.390537][T17395] __nla_validate_parse: 5 callbacks suppressed [ 655.390556][T17395] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3886'. [ 655.390704][T17394] netlink: 'syz.1.3893': attribute type 29 has an invalid length. [ 655.404219][T17395] bond_slave_1: entered promiscuous mode [ 655.438602][T17394] netlink: 'syz.1.3893': attribute type 29 has an invalid length. [ 655.525699][T17397] netlink: 'syz.2.3885': attribute type 21 has an invalid length. [ 655.555038][T17397] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3885'. [ 655.598342][T17397] netlink: 'syz.2.3885': attribute type 4 has an invalid length. [ 655.619961][T17397] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3885'. [ 655.623955][T17401] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.3887'. [ 655.897749][T17406] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.3889'. [ 657.213653][T17422] FAULT_INJECTION: forcing a failure. [ 657.213653][T17422] name failslab, interval 1, probability 0, space 0, times 0 [ 657.242646][T17422] CPU: 1 PID: 17422 Comm: syz.2.3897 Not tainted syzkaller #0 [ 657.250204][T17422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 657.260319][T17422] Call Trace: [ 657.263629][T17422] [ 657.266588][T17422] dump_stack_lvl+0x16c/0x230 [ 657.271309][T17422] ? show_regs_print_info+0x20/0x20 [ 657.276534][T17422] ? load_image+0x3b0/0x3b0 [ 657.281066][T17422] ? __lock_acquire+0x7c80/0x7c80 [ 657.286122][T17422] should_fail_ex+0x39d/0x4d0 [ 657.290834][T17422] should_failslab+0x9/0x20 [ 657.295360][T17422] slab_pre_alloc_hook+0x59/0x310 [ 657.300414][T17422] ? sk_prot_alloc+0xe7/0x210 [ 657.305110][T17422] ? sk_prot_alloc+0xe7/0x210 [ 657.309803][T17422] __kmem_cache_alloc_node+0x53/0x260 [ 657.315206][T17422] ? sk_prot_alloc+0xe7/0x210 [ 657.319903][T17422] __kmalloc+0xa4/0x240 [ 657.324092][T17422] sk_prot_alloc+0xe7/0x210 [ 657.328615][T17422] ? sk_alloc+0x24/0x360 [ 657.332883][T17422] sk_alloc+0x3a/0x360 [ 657.336979][T17422] ? bpf_ctx_init+0x163/0x1a0 [ 657.341685][T17422] ? bpf_prog_test_run_skb+0x268/0x11c0 [ 657.347275][T17422] bpf_prog_test_run_skb+0x39a/0x11c0 [ 657.352677][T17422] ? __fget_files+0x28/0x4d0 [ 657.357319][T17422] ? cpu_online+0x60/0x60 [ 657.361680][T17422] bpf_prog_test_run+0x321/0x390 [ 657.366649][T17422] __sys_bpf+0x440/0x800 [ 657.370928][T17422] ? bpf_link_show_fdinfo+0x350/0x350 [ 657.376374][T17422] ? lock_chain_count+0x20/0x20 [ 657.381278][T17422] __x64_sys_bpf+0x7c/0x90 [ 657.385718][T17422] do_syscall_64+0x55/0xb0 [ 657.390173][T17422] ? clear_bhb_loop+0x40/0x90 [ 657.394872][T17422] ? clear_bhb_loop+0x40/0x90 [ 657.399575][T17422] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 657.405497][T17422] RIP: 0033:0x7f37fbf8eba9 [ 657.409933][T17422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 657.429560][T17422] RSP: 002b:00007f37fce5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 657.437999][T17422] RAX: ffffffffffffffda RBX: 00007f37fc1d5fa0 RCX: 00007f37fbf8eba9 [ 657.445988][T17422] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 657.453987][T17422] RBP: 00007f37fce5d090 R08: 0000000000000000 R09: 0000000000000000 [ 657.461982][T17422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.469976][T17422] R13: 00007f37fc1d6038 R14: 00007f37fc1d5fa0 R15: 00007ffca2a19d58 [ 657.477997][T17422] [ 657.686469][T17421] warn_alloc: 5 callbacks suppressed [ 657.686486][T17421] syz.3.3896: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 657.785152][T17421] CPU: 0 PID: 17421 Comm: syz.3.3896 Not tainted syzkaller #0 [ 657.792710][T17421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 657.802820][T17421] Call Trace: [ 657.806136][T17421] [ 657.809100][T17421] dump_stack_lvl+0x16c/0x230 [ 657.813836][T17421] ? show_regs_print_info+0x20/0x20 [ 657.819086][T17421] ? load_image+0x3b0/0x3b0 [ 657.823640][T17421] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 657.830100][T17421] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 657.836650][T17421] warn_alloc+0x210/0x300 [ 657.841031][T17421] ? stack_trace_save+0x9c/0xe0 [ 657.845929][T17421] ? zone_watermark_ok_safe+0x230/0x230 [ 657.851538][T17421] ? kasan_set_track+0x5f/0x70 [ 657.856340][T17421] ? kasan_set_track+0x4e/0x70 [ 657.861170][T17421] ? __kasan_kmalloc+0x8f/0xa0 [ 657.865986][T17421] ? xsk_init_queue+0xb0/0x110 [ 657.870788][T17421] ? xsk_setsockopt+0x4db/0x6f0 [ 657.875681][T17421] ? do_sock_setsockopt+0x175/0x1a0 [ 657.880945][T17421] ? __x64_sys_setsockopt+0x184/0x200 [ 657.886378][T17421] __vmalloc_node_range+0x126/0x1320 [ 657.891750][T17421] ? free_vm_area+0x50/0x50 [ 657.896320][T17421] vmalloc_user+0x74/0x80 [ 657.900694][T17421] ? xskq_create+0xbf/0x170 [ 657.905234][T17421] xskq_create+0xbf/0x170 [ 657.909604][T17421] xsk_init_queue+0xb0/0x110 [ 657.914236][T17421] xsk_setsockopt+0x4db/0x6f0 [ 657.918956][T17421] ? xsk_poll+0x670/0x670 [ 657.923328][T17421] ? __fget_files+0x28/0x4d0 [ 657.927953][T17421] ? aa_sock_opt_perm+0x74/0x100 [ 657.932932][T17421] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 657.938515][T17421] ? security_socket_setsockopt+0x7e/0xa0 [ 657.944285][T17421] ? xsk_poll+0x670/0x670 [ 657.948650][T17421] do_sock_setsockopt+0x175/0x1a0 [ 657.953716][T17421] ? __fdget+0x180/0x210 [ 657.958005][T17421] __x64_sys_setsockopt+0x184/0x200 [ 657.963261][T17421] do_syscall_64+0x55/0xb0 [ 657.967724][T17421] ? clear_bhb_loop+0x40/0x90 [ 657.972441][T17421] ? clear_bhb_loop+0x40/0x90 [ 657.977161][T17421] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 657.983111][T17421] RIP: 0033:0x7fa11758eba9 [ 657.987580][T17421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.007237][T17421] RSP: 002b:00007fa1184c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 658.015696][T17421] RAX: ffffffffffffffda RBX: 00007fa1177d5fa0 RCX: 00007fa11758eba9 [ 658.023703][T17421] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 658.031717][T17421] RBP: 00007fa117611e19 R08: 0000000000000004 R09: 0000000000000000 [ 658.039732][T17421] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 658.047737][T17421] R13: 00007fa1177d6038 R14: 00007fa1177d5fa0 R15: 00007ffde6f96208 [ 658.055772][T17421] [ 658.238863][T17421] Mem-Info: [ 658.242447][T17421] active_anon:6336 inactive_anon:0 isolated_anon:0 [ 658.242447][T17421] active_file:18963 inactive_file:40092 isolated_file:0 [ 658.242447][T17421] unevictable:768 dirty:364 writeback:0 [ 658.242447][T17421] slab_reclaimable:10560 slab_unreclaimable:93504 [ 658.242447][T17421] mapped:24563 shmem:2484 pagetables:520 [ 658.242447][T17421] sec_pagetables:0 bounce:0 [ 658.242447][T17421] kernel_misc_reclaimable:0 [ 658.242447][T17421] free:1337946 free_pcp:14821 free_cma:0 [ 658.301927][T17421] Node 0 active_anon:23344kB inactive_anon:0kB active_file:75852kB inactive_file:160168kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98252kB dirty:1456kB writeback:0kB shmem:6400kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10992kB pagetables:2080kB sec_pagetables:0kB all_unreclaimable? no [ 658.335256][T17421] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 658.366417][T17421] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 658.406567][T17421] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 658.412430][T17421] Node 0 DMA32 free:1448028kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:20896kB inactive_anon:0kB active_file:75852kB inactive_file:158852kB unevictable:1536kB writepending:1456kB present:3129332kB managed:2589588kB mlocked:0kB bounce:0kB free_pcp:42624kB local_pcp:20992kB free_cma:0kB [ 658.454808][T17421] lowmem_reserve[]: 0 0 1 1 1 [ 658.506262][T17421] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 658.546943][T17421] lowmem_reserve[]: 0 0 0 0 0 [ 658.551775][T17421] Node 1 Normal free:3888132kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21452kB local_pcp:10148kB free_cma:0kB [ 658.606820][T17421] lowmem_reserve[]: 0 0 0 0 0 [ 658.611642][T17421] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 658.628831][T17434] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.3900'. [ 658.671224][T17421] Node 0 DMA32: 3268*4kB (UME) 2336*8kB (UME) 1453*16kB (UME) 1105*32kB (UME) 189*64kB (UME) 112*128kB (UME) 41*256kB (UME) 15*512kB (UM) 7*1024kB (UME) 2*2048kB (ME) 323*4096kB (UM) = 1469248kB [ 658.786818][T17421] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 658.825445][T17421] Node 1 Normal: 257*4kB (UME) 72*8kB (UME) 44*16kB (UME) 46*32kB (UME) 13*64kB (UE) 8*128kB (UME) 0*256kB 3*512kB (UME) 0*1024kB 1*2048kB (E) 947*4096kB (M) = 3888132kB [ 658.851559][T17421] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 658.863191][T17421] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 658.875492][T17421] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 658.896302][T17421] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 658.905880][T17421] 60439 total pagecache pages [ 658.911104][T17421] 0 pages in swap cache [ 658.915299][T17421] Free swap = 124996kB [ 658.920174][T17421] Total swap = 124996kB [ 658.924497][T17421] 2097051 pages RAM [ 659.005528][T17421] 0 pages HighMem/MovableOnly [ 659.019711][T17421] 416140 pages reserved [ 659.047772][T17421] 0 pages cma reserved [ 659.165507][T17450] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.3906'. [ 659.373548][T17454] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.3908'. [ 659.983793][T17470] FAULT_INJECTION: forcing a failure. [ 659.983793][T17470] name failslab, interval 1, probability 0, space 0, times 0 [ 660.049957][T17470] CPU: 0 PID: 17470 Comm: syz.0.3914 Not tainted syzkaller #0 [ 660.057483][T17470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 660.067570][T17470] Call Trace: [ 660.070897][T17470] [ 660.073886][T17470] dump_stack_lvl+0x16c/0x230 [ 660.073908][T17464] lo: left promiscuous mode [ 660.078599][T17470] ? show_regs_print_info+0x20/0x20 [ 660.078628][T17470] ? load_image+0x3b0/0x3b0 [ 660.078652][T17470] ? __might_sleep+0xe0/0xe0 [ 660.078680][T17470] ? __lock_acquire+0x7c80/0x7c80 [ 660.078701][T17470] ? rcu_is_watching+0x15/0xb0 [ 660.078733][T17470] should_fail_ex+0x39d/0x4d0 [ 660.078767][T17470] should_failslab+0x9/0x20 [ 660.078796][T17470] slab_pre_alloc_hook+0x59/0x310 [ 660.078828][T17470] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 660.098605][T17464] lo: entered allmulticast mode [ 660.102673][T17470] __kmem_cache_alloc_node+0x53/0x260 [ 660.102716][T17470] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 660.102748][T17470] kmalloc_trace+0x2a/0xe0 [ 660.102780][T17470] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 660.102821][T17470] sctp_association_new+0x15d3/0x25c0 [ 660.102870][T17470] sctp_connect_new_asoc+0x2bf/0x690 [ 660.164760][T17470] ? __sctp_connect+0xd20/0xd20 [ 660.169660][T17470] ? __local_bh_enable_ip+0x12e/0x1c0 [ 660.175073][T17470] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 660.180654][T17470] ? security_sctp_bind_connect+0x89/0xb0 [ 660.186426][T17470] sctp_sendmsg+0x155c/0x27e0 [ 660.191155][T17470] ? sctp_getsockopt+0xb60/0xb60 [ 660.196145][T17470] ? aa_sk_perm+0x7fc/0x930 [ 660.200706][T17470] ? aa_af_perm+0x2b0/0x2b0 [ 660.205255][T17470] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 660.211725][T17470] ? sock_rps_record_flow+0x19/0x400 [ 660.217053][T17470] ? inet_send_prepare+0x260/0x260 [ 660.222225][T17470] ? inet_sendmsg+0xe9/0x2f0 [ 660.226856][T17470] ? inet_send_prepare+0x260/0x260 [ 660.232017][T17470] ____sys_sendmsg+0x5bf/0x950 [ 660.236835][T17470] ? __asan_memset+0x22/0x40 [ 660.241465][T17470] ? __sys_sendmsg_sock+0x30/0x30 [ 660.246529][T17470] ? __import_iovec+0x5f2/0x860 [ 660.251433][T17470] ? import_iovec+0x73/0xa0 [ 660.255984][T17470] ___sys_sendmsg+0x220/0x290 [ 660.260704][T17470] ? __sys_sendmsg+0x270/0x270 [ 660.265526][T17470] ? __lock_acquire+0x7c80/0x7c80 [ 660.270622][T17470] __se_sys_sendmsg+0x1a5/0x270 [ 660.275534][T17470] ? perf_trace_preemptirq_template+0x281/0x340 [ 660.281835][T17470] ? __x64_sys_sendmsg+0x80/0x80 [ 660.286845][T17470] ? lockdep_hardirqs_on+0x98/0x150 [ 660.292101][T17470] do_syscall_64+0x55/0xb0 [ 660.296583][T17470] ? clear_bhb_loop+0x40/0x90 [ 660.301297][T17470] ? clear_bhb_loop+0x40/0x90 [ 660.306017][T17470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 660.311956][T17470] RIP: 0033:0x7f1a87b8eba9 [ 660.316404][T17470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.336054][T17470] RSP: 002b:00007f1a88998038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 660.344511][T17470] RAX: ffffffffffffffda RBX: 00007f1a87dd5fa0 RCX: 00007f1a87b8eba9 [ 660.352511][T17470] RDX: 000000000000c000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 660.360513][T17470] RBP: 00007f1a88998090 R08: 0000000000000000 R09: 0000000000000000 [ 660.368514][T17470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.376519][T17470] R13: 00007f1a87dd6038 R14: 00007f1a87dd5fa0 R15: 00007fffd02d6868 [ 660.384549][T17470] [ 660.444017][T17478] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.3916'. [ 660.522909][T17480] netlink: 'syz.1.3917': attribute type 12 has an invalid length. [ 660.535919][T17480] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3917'. [ 660.750438][T17492] FAULT_INJECTION: forcing a failure. [ 660.750438][T17492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 660.776516][T17492] CPU: 0 PID: 17492 Comm: syz.0.3920 Not tainted syzkaller #0 [ 660.784045][T17492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 660.794134][T17492] Call Trace: [ 660.797450][T17492] [ 660.800405][T17492] dump_stack_lvl+0x16c/0x230 [ 660.805101][T17492] ? show_regs_print_info+0x20/0x20 [ 660.810310][T17492] ? load_image+0x3b0/0x3b0 [ 660.814818][T17492] ? __might_fault+0xaa/0x120 [ 660.819500][T17492] ? __lock_acquire+0x7c80/0x7c80 [ 660.824522][T17492] ? __mutex_trylock_common+0x153/0x250 [ 660.830080][T17492] should_fail_ex+0x39d/0x4d0 [ 660.834775][T17492] _copy_from_user+0x2f/0xe0 [ 660.839392][T17492] do_tcp_setsockopt+0x54f/0x1c40 [ 660.844465][T17492] ? tcp_set_window_clamp+0x4e0/0x4e0 [ 660.849875][T17492] ? smc_setsockopt+0x184/0xab0 [ 660.854760][T17492] ? mutex_lock_nested+0x20/0x20 [ 660.859767][T17492] ? sock_common_setsockopt+0x36/0xc0 [ 660.865167][T17492] ? tcp_setsockopt+0x3d/0xe0 [ 660.869862][T17492] ? tcp_enable_tx_delay+0x70/0x70 [ 660.875004][T17492] ? sock_common_recvmsg+0x1b0/0x1b0 [ 660.880310][T17492] smc_setsockopt+0x229/0xab0 [ 660.885011][T17492] ? smc_shutdown+0x9b0/0x9b0 [ 660.889701][T17492] ? __fget_files+0x28/0x4d0 [ 660.894311][T17492] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 660.899871][T17492] ? security_socket_setsockopt+0x7e/0xa0 [ 660.905600][T17492] ? smc_shutdown+0x9b0/0x9b0 [ 660.910293][T17492] do_sock_setsockopt+0x175/0x1a0 [ 660.915350][T17492] ? __fdget+0x180/0x210 [ 660.919609][T17492] __x64_sys_setsockopt+0x184/0x200 [ 660.924853][T17492] do_syscall_64+0x55/0xb0 [ 660.929298][T17492] ? clear_bhb_loop+0x40/0x90 [ 660.933984][T17492] ? clear_bhb_loop+0x40/0x90 [ 660.938672][T17492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 660.944582][T17492] RIP: 0033:0x7f1a87b8eba9 [ 660.949006][T17492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.968615][T17492] RSP: 002b:00007f1a88998038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 660.977035][T17492] RAX: ffffffffffffffda RBX: 00007f1a87dd5fa0 RCX: 00007f1a87b8eba9 [ 660.985021][T17492] RDX: 000000000000000a RSI: 0000000000000006 RDI: 0000000000000003 [ 660.993001][T17492] RBP: 00007f1a88998090 R08: 0000000000000004 R09: 0000000000000000 [ 661.000982][T17492] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 661.008966][T17492] R13: 00007f1a87dd6038 R14: 00007f1a87dd5fa0 R15: 00007fffd02d6868 [ 661.016961][T17492] [ 661.305913][T17506] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 661.647844][T17519] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.3931'. [ 661.742105][T17521] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3932'. [ 661.766318][T17521] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3932'. [ 661.864885][T17521] netlink: 'syz.1.3932': attribute type 20 has an invalid length. [ 661.883159][T17521] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3932'. [ 662.191918][T17537] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.3940'. [ 662.555688][T17549] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.3945'. [ 662.835200][T17559] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3948'. [ 663.079181][T17573] FAULT_INJECTION: forcing a failure. [ 663.079181][T17573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 663.094363][T17573] CPU: 0 PID: 17573 Comm: syz.3.3953 Not tainted syzkaller #0 [ 663.101901][T17573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 663.112001][T17573] Call Trace: [ 663.115319][T17573] [ 663.118285][T17573] dump_stack_lvl+0x16c/0x230 [ 663.123052][T17573] ? show_regs_print_info+0x20/0x20 [ 663.128294][T17573] ? load_image+0x3b0/0x3b0 [ 663.132843][T17573] ? __lock_acquire+0x7c80/0x7c80 [ 663.137928][T17573] ? snprintf+0xdb/0x120 [ 663.142248][T17573] should_fail_ex+0x39d/0x4d0 [ 663.147017][T17573] _copy_to_user+0x2f/0xa0 [ 663.151487][T17573] simple_read_from_buffer+0xe7/0x150 [ 663.156924][T17573] proc_fail_nth_read+0x1e3/0x250 [ 663.162002][T17573] ? proc_fault_inject_write+0x340/0x340 [ 663.167707][T17573] ? fsnotify_perm+0x271/0x5e0 [ 663.172531][T17573] ? proc_fault_inject_write+0x340/0x340 [ 663.178210][T17573] vfs_read+0x27e/0x920 [ 663.182452][T17573] ? kernel_read+0x1e0/0x1e0 [ 663.187087][T17573] ? __fget_files+0x28/0x4d0 [ 663.191724][T17573] ? __fget_files+0x44a/0x4d0 [ 663.196492][T17573] ? __fdget_pos+0x2a3/0x330 [ 663.201142][T17573] ? ksys_read+0x75/0x250 [ 663.205525][T17573] ksys_read+0x147/0x250 [ 663.209826][T17573] ? vfs_write+0x940/0x940 [ 663.214313][T17573] ? lockdep_hardirqs_on+0x98/0x150 [ 663.219581][T17573] do_syscall_64+0x55/0xb0 [ 663.224039][T17573] ? clear_bhb_loop+0x40/0x90 [ 663.228766][T17573] ? clear_bhb_loop+0x40/0x90 [ 663.233487][T17573] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 663.239433][T17573] RIP: 0033:0x7fa11758d5bc [ 663.243890][T17573] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 663.263530][T17573] RSP: 002b:00007fa1184c5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 663.271990][T17573] RAX: ffffffffffffffda RBX: 00007fa1177d5fa0 RCX: 00007fa11758d5bc [ 663.279998][T17573] RDX: 000000000000000f RSI: 00007fa1184c50a0 RDI: 0000000000000007 [ 663.288002][T17573] RBP: 00007fa1184c5090 R08: 0000000000000000 R09: 0000000000000000 [ 663.296008][T17573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.304011][T17573] R13: 00007fa1177d6038 R14: 00007fa1177d5fa0 R15: 00007ffde6f96208 [ 663.312069][T17573] [ 664.056009][T17586] lo: left promiscuous mode [ 664.063566][T17586] lo: entered allmulticast mode [ 664.153738][T17592] lo: entered promiscuous mode [ 664.176264][T17592] lo: left allmulticast mode [ 664.208309][T17594] netlink: 'syz.1.3960': attribute type 10 has an invalid length. [ 664.240027][T17596] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.3961'. [ 664.265813][T17594] .`: (slave dummy0): Enslaving as an active interface with an up link [ 665.895710][T17629] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.3974'. [ 666.564050][T17638] netlink: 'syz.3.3976': attribute type 27 has an invalid length. [ 666.963008][T17651] netlink: 'syz.2.3988': attribute type 27 has an invalid length. [ 667.120874][T17658] netlink: 'syz.3.3983': attribute type 10 has an invalid length. [ 667.133925][T17660] FAULT_INJECTION: forcing a failure. [ 667.133925][T17660] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 667.149432][T17660] CPU: 1 PID: 17660 Comm: syz.0.3984 Not tainted syzkaller #0 [ 667.156963][T17660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 667.167064][T17660] Call Trace: [ 667.170393][T17660] [ 667.173381][T17660] dump_stack_lvl+0x16c/0x230 [ 667.178152][T17660] ? show_regs_print_info+0x20/0x20 [ 667.183439][T17660] ? load_image+0x3b0/0x3b0 [ 667.188023][T17660] ? __lock_acquire+0x7c80/0x7c80 [ 667.193124][T17660] ? mark_lock+0x94/0x320 [ 667.197593][T17660] should_fail_ex+0x39d/0x4d0 [ 667.200960][T17658] team0: Port device netdevsim0 added [ 667.202342][T17660] prepare_alloc_pages+0x1e2/0x5f0 [ 667.212978][T17660] __alloc_pages+0x127/0x460 [ 667.217642][T17660] ? zone_statistics+0x170/0x170 [ 667.222653][T17660] ? do_wp_page+0x826/0x3630 [ 667.227285][T17660] ? do_wp_page+0x1024/0x3630 [ 667.232040][T17660] __folio_alloc+0x10/0x20 [ 667.236515][T17660] vma_alloc_folio+0x47a/0x8f0 [ 667.241353][T17660] do_wp_page+0x128e/0x3630 [ 667.245944][T17660] ? folio_put+0xd0/0xd0 [ 667.250246][T17660] ? do_raw_spin_lock+0x121/0x2c0 [ 667.255324][T17660] ? __rwlock_init+0x150/0x150 [ 667.260152][T17660] ? handle_mm_fault+0xd1/0x4920 [ 667.265154][T17660] handle_mm_fault+0x12d4/0x4920 [ 667.270151][T17660] ? handle_mm_fault+0xd1/0x4920 [ 667.275196][T17660] ? numa_migrate_prep+0x350/0x350 [ 667.280381][T17660] ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0 [ 667.287022][T17660] ? lock_mm_and_find_vma+0x9c/0x300 [ 667.292357][T17660] do_user_addr_fault+0x738/0x12e0 [ 667.297545][T17660] exc_page_fault+0x67/0x110 [ 667.302203][T17660] asm_exc_page_fault+0x26/0x30 [ 667.307099][T17660] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 667.312949][T17660] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 667.332585][T17660] RSP: 0018:ffffc9000c9c74f8 EFLAGS: 00050206 [ 667.338687][T17660] RAX: ffffffff841c6a01 RBX: 1ffff92001938fc7 RCX: 0000000000000fc0 [ 667.346686][T17660] RDX: 0000000000000000 RSI: ffff88804d6af040 RDI: 0000200000008000 [ 667.354685][T17660] RBP: ffffc9000c9c7650 R08: ffff88804d6affff R09: 1ffff11009ad5fff [ 667.362693][T17660] R10: dffffc0000000000 R11: ffffed1009ad6000 R12: ffff88804d6af000 [ 667.370696][T17660] R13: 0000000000001000 R14: 0000000000001000 R15: ffffc9000c9c7e48 [ 667.378725][T17660] ? _copy_to_iter+0x141/0x10d0 [ 667.383643][T17660] _copy_to_iter+0x249/0x10d0 [ 667.388375][T17660] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 667.394407][T17660] ? lock_chain_count+0x20/0x20 [ 667.399304][T17660] ? iov_iter_init+0x1e0/0x1e0 [ 667.404112][T17660] ? __local_bh_enable_ip+0x12e/0x1c0 [ 667.409528][T17660] ? lockdep_hardirqs_on+0x98/0x150 [ 667.414784][T17660] ? page_copy_sane+0x16a/0x270 [ 667.419682][T17660] copy_page_to_iter+0xa7/0x150 [ 667.424582][T17660] sk_msg_recvmsg+0x28c/0xc20 [ 667.429358][T17660] unix_bpf_recvmsg+0x5a2/0xd90 [ 667.434304][T17660] ? unix_stream_bpf_update_proto+0x2f0/0x2f0 [ 667.440464][T17660] unix_stream_recvmsg+0x13f/0x1b0 [ 667.445644][T17660] ? unix_stream_sendmsg+0xba0/0xba0 [ 667.450967][T17660] ? __unix_stream_recvmsg+0x130/0x130 [ 667.456485][T17660] ? verify_lock_unused+0x140/0x140 [ 667.461743][T17660] ? aa_sock_msg_perm+0x94/0x150 [ 667.466735][T17660] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 667.472058][T17660] ? security_socket_recvmsg+0x89/0xb0 [ 667.477571][T17660] ? unix_stream_sendmsg+0xba0/0xba0 [ 667.482907][T17660] ____sys_recvmsg+0x29e/0x5b0 [ 667.487745][T17660] ? __sys_recvmsg_sock+0x50/0x50 [ 667.492853][T17660] ? import_iovec+0x73/0xa0 [ 667.497415][T17660] ___sys_recvmsg+0x1b6/0x510 [ 667.502159][T17660] ? __sys_recvmsg+0x270/0x270 [ 667.506982][T17660] ? ksys_write+0x1c1/0x250 [ 667.511561][T17660] ? __fget_files+0x44a/0x4d0 [ 667.516329][T17660] __x64_sys_recvmsg+0x1f2/0x2c0 [ 667.521321][T17660] ? ___sys_recvmsg+0x510/0x510 [ 667.526270][T17660] ? lockdep_hardirqs_on+0x98/0x150 [ 667.531524][T17660] do_syscall_64+0x55/0xb0 [ 667.535975][T17660] ? clear_bhb_loop+0x40/0x90 [ 667.540686][T17660] ? clear_bhb_loop+0x40/0x90 [ 667.545407][T17660] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 667.551341][T17660] RIP: 0033:0x7f1a87b8eba9 [ 667.555792][T17660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.575427][T17660] RSP: 002b:00007f1a88998038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 667.583880][T17660] RAX: ffffffffffffffda RBX: 00007f1a87dd5fa0 RCX: 00007f1a87b8eba9 [ 667.591900][T17660] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000005 [ 667.599903][T17660] RBP: 00007f1a88998090 R08: 0000000000000000 R09: 0000000000000000 [ 667.607906][T17660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 667.615906][T17660] R13: 00007f1a87dd6038 R14: 00007f1a87dd5fa0 R15: 00007fffd02d6868 [ 667.623953][T17660] [ 667.655440][T17657] netlink: 'syz.3.3983': attribute type 10 has an invalid length. [ 667.963503][T17657] team0: Port device netdevsim0 removed [ 667.972862][T17657] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 667.981322][T17657] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 668.052983][T17666] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.3986'. [ 668.351505][T17675] warn_alloc: 5 callbacks suppressed [ 668.351524][T17675] syz.0.3991: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 668.377899][T17675] CPU: 1 PID: 17675 Comm: syz.0.3991 Not tainted syzkaller #0 [ 668.385480][T17675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 668.395637][T17675] Call Trace: [ 668.399011][T17675] [ 668.402042][T17675] dump_stack_lvl+0x16c/0x230 [ 668.406871][T17675] ? show_regs_print_info+0x20/0x20 [ 668.412179][T17675] ? load_image+0x3b0/0x3b0 [ 668.416827][T17675] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 668.423369][T17675] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 668.430028][T17675] warn_alloc+0x210/0x300 [ 668.434484][T17675] ? stack_trace_save+0x9c/0xe0 [ 668.439462][T17675] ? zone_watermark_ok_safe+0x230/0x230 [ 668.445187][T17675] ? kasan_set_track+0x5f/0x70 [ 668.450070][T17675] ? kasan_set_track+0x4e/0x70 [ 668.454944][T17675] ? __kasan_kmalloc+0x8f/0xa0 [ 668.459816][T17675] ? xsk_init_queue+0xb0/0x110 [ 668.464682][T17675] ? xsk_setsockopt+0x4db/0x6f0 [ 668.469632][T17675] ? do_sock_setsockopt+0x175/0x1a0 [ 668.474942][T17675] ? __x64_sys_setsockopt+0x184/0x200 [ 668.480454][T17675] __vmalloc_node_range+0x126/0x1320 [ 668.486051][T17675] ? free_vm_area+0x50/0x50 [ 668.490763][T17675] vmalloc_user+0x74/0x80 [ 668.495218][T17675] ? xskq_create+0xbf/0x170 [ 668.499841][T17675] xskq_create+0xbf/0x170 [ 668.504311][T17675] xsk_init_queue+0xb0/0x110 [ 668.509035][T17675] xsk_setsockopt+0x4db/0x6f0 [ 668.513858][T17675] ? xsk_poll+0x670/0x670 [ 668.518329][T17675] ? __fget_files+0x28/0x4d0 [ 668.523030][T17675] ? aa_sock_opt_perm+0x74/0x100 [ 668.528100][T17675] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 668.533749][T17675] ? security_socket_setsockopt+0x7e/0xa0 [ 668.539571][T17675] ? xsk_poll+0x670/0x670 [ 668.544025][T17675] do_sock_setsockopt+0x175/0x1a0 [ 668.549176][T17675] ? __fdget+0x180/0x210 [ 668.553574][T17675] __x64_sys_setsockopt+0x184/0x200 [ 668.558894][T17675] do_syscall_64+0x55/0xb0 [ 668.563420][T17675] ? clear_bhb_loop+0x40/0x90 [ 668.568199][T17675] ? clear_bhb_loop+0x40/0x90 [ 668.572971][T17675] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 668.578949][T17675] RIP: 0033:0x7f1a87b8eba9 [ 668.583445][T17675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.603139][T17675] RSP: 002b:00007f1a88998038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 668.611687][T17675] RAX: ffffffffffffffda RBX: 00007f1a87dd5fa0 RCX: 00007f1a87b8eba9 [ 668.619761][T17675] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 668.627830][T17675] RBP: 00007f1a87c11e19 R08: 0000000000000004 R09: 0000000000000000 [ 668.635903][T17675] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 668.643990][T17675] R13: 00007f1a87dd6038 R14: 00007f1a87dd5fa0 R15: 00007fffd02d6868 [ 668.652173][T17675] [ 668.687354][T17675] Mem-Info: [ 668.700842][T17682] netlink: 'syz.1.3994': attribute type 10 has an invalid length. [ 668.711862][T17675] active_anon:4255 inactive_anon:0 isolated_anon:0 [ 668.711862][T17675] active_file:18963 inactive_file:40096 isolated_file:0 [ 668.711862][T17675] unevictable:768 dirty:350 writeback:0 [ 668.711862][T17675] slab_reclaimable:10625 slab_unreclaimable:92955 [ 668.711862][T17675] mapped:24365 shmem:1361 pagetables:468 [ 668.711862][T17675] sec_pagetables:0 bounce:0 [ 668.711862][T17675] kernel_misc_reclaimable:0 [ 668.711862][T17675] free:1346363 free_pcp:8666 free_cma:0 [ 668.786489][T17675] Node 0 active_anon:17020kB inactive_anon:0kB active_file:75852kB inactive_file:160184kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97460kB dirty:1400kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10844kB pagetables:1872kB sec_pagetables:0kB all_unreclaimable? no [ 668.795359][T17682] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.831434][T17675] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 668.863775][T17675] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 668.977958][T17675] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 668.996070][T17675] Node 0 DMA32 free:1481820kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:16972kB inactive_anon:0kB active_file:75852kB inactive_file:158868kB unevictable:1536kB writepending:1400kB present:3129332kB managed:2589588kB mlocked:0kB bounce:0kB free_pcp:11964kB local_pcp:6092kB free_cma:0kB [ 669.027947][T17675] lowmem_reserve[]: 0 0 1 1 1 [ 669.033164][T17675] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 669.075428][T17675] lowmem_reserve[]: 0 0 0 0 0 [ 669.083711][T17675] Node 1 Normal free:3888132kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21452kB local_pcp:11304kB free_cma:0kB [ 669.121568][T17675] lowmem_reserve[]: 0 0 0 0 0 [ 669.127012][T17675] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 669.170719][T17675] Node 0 DMA32: 2547*4kB (UM) 2304*8kB (UME) 1439*16kB (UME) 1043*32kB (UME) 461*64kB (UME) 114*128kB (UME) 42*256kB (UME) 15*512kB (UM) 7*1024kB (UME) 2*2048kB (ME) 323*4096kB (UM) = 1481820kB [ 669.190705][T17675] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 669.203596][T17675] Node 1 Normal: 257*4kB (UME) 72*8kB (UME) 44*16kB (UME) 46*32kB (UME) 13*64kB (UE) 8*128kB (UME) 0*256kB 3*512kB (UME) 0*1024kB 1*2048kB (E) 947*4096kB (M) = 3888132kB [ 669.221950][T17675] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 669.259711][T17675] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 669.289207][T17675] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 669.322298][T17675] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 669.352353][T17675] 60422 total pagecache pages [ 669.368746][T17675] 0 pages in swap cache [ 669.381281][T17675] Free swap = 124996kB [ 669.391247][T17675] Total swap = 124996kB [ 669.401807][T17675] 2097051 pages RAM [ 669.405765][T17675] 0 pages HighMem/MovableOnly [ 669.413376][T17675] 416140 pages reserved [ 669.420057][T17675] 0 pages cma reserved [ 669.752800][T17707] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.4001'. [ 670.751639][T17728] netlink: 'syz.3.4009': attribute type 10 has an invalid length. [ 671.284846][T17740] FAULT_INJECTION: forcing a failure. [ 671.284846][T17740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 671.318863][T17740] CPU: 1 PID: 17740 Comm: syz.3.4014 Not tainted syzkaller #0 [ 671.326407][T17740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 671.336513][T17740] Call Trace: [ 671.339834][T17740] [ 671.342797][T17740] dump_stack_lvl+0x16c/0x230 [ 671.347526][T17740] ? show_regs_print_info+0x20/0x20 [ 671.352772][T17740] ? load_image+0x3b0/0x3b0 [ 671.357340][T17740] ? __lock_acquire+0x7c80/0x7c80 [ 671.362135][T17742] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.4015'. [ 671.362384][T17740] ? perf_trace_lock_acquire+0xfb/0x3e0 [ 671.377189][T17740] should_fail_ex+0x39d/0x4d0 [ 671.381921][T17740] strncpy_from_user+0x36/0x2e0 [ 671.386815][T17740] bpf_raw_tp_link_attach+0x1cf/0x560 [ 671.392217][T17740] ? bpf_insn_prepare_dump+0x840/0x840 [ 671.397723][T17740] bpf_raw_tracepoint_open+0x197/0x210 [ 671.403206][T17740] __sys_bpf+0x364/0x800 [ 671.407469][T17740] ? bpf_link_show_fdinfo+0x350/0x350 [ 671.412874][T17740] ? lock_chain_count+0x20/0x20 [ 671.417752][T17740] __x64_sys_bpf+0x7c/0x90 [ 671.422187][T17740] do_syscall_64+0x55/0xb0 [ 671.426621][T17740] ? clear_bhb_loop+0x40/0x90 [ 671.431313][T17740] ? clear_bhb_loop+0x40/0x90 [ 671.436007][T17740] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 671.441922][T17740] RIP: 0033:0x7fa11758eba9 [ 671.446355][T17740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.465977][T17740] RSP: 002b:00007fa1184c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 671.474408][T17740] RAX: ffffffffffffffda RBX: 00007fa1177d5fa0 RCX: 00007fa11758eba9 [ 671.482392][T17740] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000011 [ 671.490387][T17740] RBP: 00007fa1184c5090 R08: 0000000000000000 R09: 0000000000000000 [ 671.498371][T17740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.506351][T17740] R13: 00007fa1177d6038 R14: 00007fa1177d5fa0 R15: 00007ffde6f96208 [ 671.514372][T17740] [ 671.986696][T17757] netlink: 'syz.0.4019': attribute type 10 has an invalid length. [ 671.999175][T17757] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4019'. [ 672.603126][T17780] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.4028'. [ 673.014357][T17795] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4033'. [ 673.026405][T17795] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4033'. [ 673.041619][T17795] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4033'. [ 673.210986][T17800] netlink: 'syz.3.4034': attribute type 10 has an invalid length. [ 673.220026][T17802] syz.1.4035[17802] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 673.220242][T17802] syz.1.4035[17802] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 673.226303][T17800] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4034'. [ 673.254292][T17802] FAULT_INJECTION: forcing a failure. [ 673.254292][T17802] name failslab, interval 1, probability 0, space 0, times 0 [ 673.286299][T17802] CPU: 0 PID: 17802 Comm: syz.1.4035 Not tainted syzkaller #0 [ 673.293831][T17802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 673.303916][T17802] Call Trace: [ 673.307228][T17802] [ 673.310211][T17802] dump_stack_lvl+0x16c/0x230 [ 673.314936][T17802] ? show_regs_print_info+0x20/0x20 [ 673.320183][T17802] ? load_image+0x3b0/0x3b0 [ 673.324740][T17802] ? __might_sleep+0xe0/0xe0 [ 673.329380][T17802] ? __lock_acquire+0x7c80/0x7c80 [ 673.334471][T17802] ? mark_lock+0x94/0x320 [ 673.338861][T17802] should_fail_ex+0x39d/0x4d0 [ 673.343606][T17802] should_failslab+0x9/0x20 [ 673.348158][T17802] slab_pre_alloc_hook+0x59/0x310 [ 673.353215][T17802] ? __get_vm_area_node+0x125/0x370 [ 673.358438][T17802] __kmem_cache_alloc_node+0x53/0x260 [ 673.363838][T17802] ? __get_vm_area_node+0x125/0x370 [ 673.369142][T17802] kmalloc_node_trace+0x26/0xe0 [ 673.374022][T17802] __get_vm_area_node+0x125/0x370 [ 673.379073][T17802] __vmalloc_node_range+0x36e/0x1320 [ 673.384382][T17802] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 673.389944][T17802] ? mark_lock+0x94/0x320 [ 673.394290][T17802] ? __lock_acquire+0x1334/0x7c80 [ 673.399335][T17802] ? verify_lock_unused+0x140/0x140 [ 673.404643][T17802] ? get_pid_task+0x20/0x1e0 [ 673.409258][T17802] ? free_vm_area+0x50/0x50 [ 673.413780][T17802] ? end_current_label_crit_section+0x170/0x170 [ 673.420046][T17802] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 673.425607][T17802] __vmalloc+0x7a/0x90 [ 673.429696][T17802] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 673.435263][T17802] bpf_prog_alloc_no_stats+0x47/0x440 [ 673.440655][T17802] ? bpf_prog_alloc+0x2b/0x1b0 [ 673.445436][T17802] bpf_prog_alloc+0x3d/0x1b0 [ 673.450054][T17802] bpf_prog_load+0x6b8/0x16d0 [ 673.454763][T17802] ? map_freeze+0x420/0x420 [ 673.459285][T17802] ? __might_fault+0xaa/0x120 [ 673.463975][T17802] ? __lock_acquire+0x7c80/0x7c80 [ 673.469016][T17802] ? file_end_write+0x159/0x250 [ 673.473885][T17802] ? __might_fault+0xaa/0x120 [ 673.478576][T17802] ? __might_fault+0xc6/0x120 [ 673.483262][T17802] ? __might_fault+0xaa/0x120 [ 673.487947][T17802] ? bpf_lsm_bpf+0x9/0x10 [ 673.492294][T17802] ? security_bpf+0x7e/0xa0 [ 673.496812][T17802] __sys_bpf+0x55a/0x800 [ 673.501069][T17802] ? bpf_link_show_fdinfo+0x350/0x350 [ 673.506474][T17802] ? lock_chain_count+0x20/0x20 [ 673.511352][T17802] __x64_sys_bpf+0x7c/0x90 [ 673.515779][T17802] do_syscall_64+0x55/0xb0 [ 673.520208][T17802] ? clear_bhb_loop+0x40/0x90 [ 673.524900][T17802] ? clear_bhb_loop+0x40/0x90 [ 673.529594][T17802] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 673.535515][T17802] RIP: 0033:0x7f88ce38eba9 [ 673.539943][T17802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 673.559562][T17802] RSP: 002b:00007f88cf13b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 673.568007][T17802] RAX: ffffffffffffffda RBX: 00007f88ce5d5fa0 RCX: 00007f88ce38eba9 [ 673.575992][T17802] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 673.583970][T17802] RBP: 00007f88cf13b090 R08: 0000000000000000 R09: 0000000000000000 [ 673.591951][T17802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.599933][T17802] R13: 00007f88ce5d6038 R14: 00007f88ce5d5fa0 R15: 00007ffd2b40e0c8 [ 673.607931][T17802] [ 674.108371][T17816] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.4041'. [ 674.437164][T17829] FAULT_INJECTION: forcing a failure. [ 674.437164][T17829] name failslab, interval 1, probability 0, space 0, times 0 [ 674.466270][T17829] CPU: 0 PID: 17829 Comm: syz.3.4044 Not tainted syzkaller #0 [ 674.473808][T17829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 674.483883][T17829] Call Trace: [ 674.487186][T17829] [ 674.490127][T17829] dump_stack_lvl+0x16c/0x230 [ 674.494826][T17829] ? show_regs_print_info+0x20/0x20 [ 674.500038][T17829] ? load_image+0x3b0/0x3b0 [ 674.504554][T17829] ? __lock_acquire+0x7c80/0x7c80 [ 674.509609][T17829] should_fail_ex+0x39d/0x4d0 [ 674.514334][T17829] should_failslab+0x9/0x20 [ 674.518857][T17829] slab_pre_alloc_hook+0x59/0x310 [ 674.523901][T17829] ? __lock_acquire+0x7c80/0x7c80 [ 674.528942][T17829] kmem_cache_alloc+0x5a/0x2e0 [ 674.533725][T17829] ? security_file_alloc+0x34/0x120 [ 674.538958][T17829] security_file_alloc+0x34/0x120 [ 674.544003][T17829] init_file+0x94/0x1f0 [ 674.548179][T17829] alloc_empty_file+0xb7/0x1d0 [ 674.552961][T17829] alloc_file+0x5c/0x600 [ 674.557224][T17829] alloc_file_pseudo+0x17e/0x200 [ 674.562188][T17829] ? alloc_empty_backing_file+0xe0/0xe0 [ 674.567757][T17829] ? alloc_fd+0x58f/0x630 [ 674.572115][T17829] anon_inode_getfd+0xca/0x1c0 [ 674.576897][T17829] btf_new_fd+0x7ea/0x980 [ 674.581250][T17829] ? bpf_btf_show_fdinfo+0x80/0x80 [ 674.586379][T17829] ? capable+0x88/0xe0 [ 674.590468][T17829] __sys_bpf+0x60e/0x800 [ 674.594726][T17829] ? bpf_link_show_fdinfo+0x350/0x350 [ 674.600121][T17829] ? lock_chain_count+0x20/0x20 [ 674.604990][T17829] __x64_sys_bpf+0x7c/0x90 [ 674.609417][T17829] do_syscall_64+0x55/0xb0 [ 674.613846][T17829] ? clear_bhb_loop+0x40/0x90 [ 674.618533][T17829] ? clear_bhb_loop+0x40/0x90 [ 674.623222][T17829] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 674.629131][T17829] RIP: 0033:0x7fa11758eba9 [ 674.633557][T17829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.653175][T17829] RSP: 002b:00007fa1184c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 674.661607][T17829] RAX: ffffffffffffffda RBX: 00007fa1177d5fa0 RCX: 00007fa11758eba9 [ 674.669593][T17829] RDX: 0000000000000028 RSI: 0000200000000500 RDI: 0000000000000012 [ 674.677585][T17829] RBP: 00007fa1184c5090 R08: 0000000000000000 R09: 0000000000000000 [ 674.685567][T17829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 674.693550][T17829] R13: 00007fa1177d6038 R14: 00007fa1177d5fa0 R15: 00007ffde6f96208 [ 674.701552][T17829] [ 674.854816][T17833] netlink: 'syz.1.4045': attribute type 5 has an invalid length. [ 675.095396][T17843] netlink: 'syz.3.4050': attribute type 10 has an invalid length. [ 675.106386][T17843] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4050'. [ 675.291987][T17851] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.4054'. [ 675.343908][T17853] FAULT_INJECTION: forcing a failure. [ 675.343908][T17853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 675.367373][T17853] CPU: 0 PID: 17853 Comm: syz.1.4055 Not tainted syzkaller #0 [ 675.374893][T17853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 675.384984][T17853] Call Trace: [ 675.388299][T17853] [ 675.391267][T17853] dump_stack_lvl+0x16c/0x230 [ 675.395996][T17853] ? show_regs_print_info+0x20/0x20 [ 675.401249][T17853] ? load_image+0x3b0/0x3b0 [ 675.405800][T17853] ? __might_fault+0xaa/0x120 [ 675.410517][T17853] ? __lock_acquire+0x7c80/0x7c80 [ 675.415588][T17853] should_fail_ex+0x39d/0x4d0 [ 675.420324][T17853] _copy_from_iter+0x1d3/0x1290 [ 675.425220][T17853] ? __might_fault+0xaa/0x120 [ 675.429950][T17853] ? _copy_from_iter+0x248/0x1290 [ 675.435026][T17853] ? __virt_addr_valid+0x18c/0x540 [ 675.440181][T17853] ? __lock_acquire+0x7c80/0x7c80 [ 675.445254][T17853] ? copyout_mc+0x70/0x70 [ 675.449632][T17853] ? copyout_mc+0x70/0x70 [ 675.454001][T17853] ? __virt_addr_valid+0x18c/0x540 [ 675.459163][T17853] ? page_copy_sane+0x16a/0x270 [ 675.464081][T17853] copy_page_from_iter+0x7b/0x100 [ 675.469160][T17853] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 675.475049][T17853] tun_get_user+0x1583/0x3bf0 [ 675.479771][T17853] ? trace_event_raw_event_lock+0x230/0x230 [ 675.485708][T17853] ? aa_file_perm+0x120/0xec0 [ 675.490410][T17853] ? aa_file_perm+0x3e8/0xec0 [ 675.495109][T17853] ? rcu_read_unlock+0xa0/0xa0 [ 675.499907][T17853] ? tun_get+0x1c/0x2e0 [ 675.504086][T17853] ? __lock_acquire+0x7c80/0x7c80 [ 675.509141][T17853] ? tun_get+0x1c/0x2e0 [ 675.513326][T17853] tun_chr_write_iter+0x119/0x200 [ 675.518375][T17853] vfs_write+0x43b/0x940 [ 675.522644][T17853] ? file_end_write+0x250/0x250 [ 675.527520][T17853] ? __fget_files+0x44a/0x4d0 [ 675.532226][T17853] ? __fdget_pos+0x1d8/0x330 [ 675.536840][T17853] ? ksys_write+0x75/0x250 [ 675.541279][T17853] ksys_write+0x147/0x250 [ 675.545630][T17853] ? __ia32_sys_read+0x90/0x90 [ 675.550415][T17853] ? lockdep_hardirqs_on+0x98/0x150 [ 675.555636][T17853] do_syscall_64+0x55/0xb0 [ 675.560064][T17853] ? clear_bhb_loop+0x40/0x90 [ 675.564749][T17853] ? clear_bhb_loop+0x40/0x90 [ 675.569445][T17853] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 675.575364][T17853] RIP: 0033:0x7f88ce38eba9 [ 675.579788][T17853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.599428][T17853] RSP: 002b:00007f88cf13b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 675.607856][T17853] RAX: ffffffffffffffda RBX: 00007f88ce5d5fa0 RCX: 00007f88ce38eba9 [ 675.615836][T17853] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 675.623818][T17853] RBP: 00007f88cf13b090 R08: 0000000000000000 R09: 0000000000000000 [ 675.631804][T17853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 675.639786][T17853] R13: 00007f88ce5d6038 R14: 00007f88ce5d5fa0 R15: 00007ffd2b40e0c8 [ 675.647784][T17853] [ 678.932930][T17870] netlink: 'syz.2.4059': attribute type 10 has an invalid length. [ 678.985412][T17870] veth1_macvtap: left promiscuous mode [ 679.202506][T17872] netlink: 'syz.0.4061': attribute type 10 has an invalid length. [ 679.215502][T17872] __nla_validate_parse: 1 callbacks suppressed [ 679.215522][T17872] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4061'. [ 679.348872][T17869] lo: entered promiscuous mode [ 679.354052][T17869] lo: left allmulticast mode [ 679.575014][T17881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 679.588170][T17881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.599545][T17881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 679.615079][T17881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 680.212132][T17884] netlink: 'syz.1.4066': attribute type 10 has an invalid length. [ 680.440316][T17892] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.4069'. [ 680.469764][T17894] netlink: 'syz.2.4070': attribute type 10 has an invalid length. [ 680.481236][T17894] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4070'. [ 680.913087][T17904] FAULT_INJECTION: forcing a failure. [ 680.913087][T17904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 680.940080][T17904] CPU: 0 PID: 17904 Comm: syz.3.4074 Not tainted syzkaller #0 [ 680.947623][T17904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 680.957716][T17904] Call Trace: [ 680.961049][T17904] [ 680.964009][T17904] dump_stack_lvl+0x16c/0x230 [ 680.968746][T17904] ? show_regs_print_info+0x20/0x20 [ 680.974076][T17904] ? load_image+0x3b0/0x3b0 [ 680.978619][T17904] ? __might_fault+0xaa/0x120 [ 680.983344][T17904] ? __lock_acquire+0x7c80/0x7c80 [ 680.988424][T17904] should_fail_ex+0x39d/0x4d0 [ 680.993160][T17904] _copy_from_user+0x2f/0xe0 [ 680.997804][T17904] generic_map_update_batch+0x53f/0x810 [ 681.003407][T17904] ? rcu_read_unlock+0xa0/0xa0 [ 681.008217][T17904] ? __fdget+0x180/0x210 [ 681.012492][T17904] ? rcu_read_unlock+0xa0/0xa0 [ 681.017281][T17904] bpf_map_do_batch+0x3d7/0x610 [ 681.022158][T17904] __sys_bpf+0x31b/0x800 [ 681.026422][T17904] ? bpf_link_show_fdinfo+0x350/0x350 [ 681.031825][T17904] ? lock_chain_count+0x20/0x20 [ 681.036706][T17904] __x64_sys_bpf+0x7c/0x90 [ 681.041140][T17904] do_syscall_64+0x55/0xb0 [ 681.045581][T17904] ? clear_bhb_loop+0x40/0x90 [ 681.050270][T17904] ? clear_bhb_loop+0x40/0x90 [ 681.054969][T17904] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 681.060993][T17904] RIP: 0033:0x7fa11758eba9 [ 681.065424][T17904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 681.085049][T17904] RSP: 002b:00007fa1184c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 681.093479][T17904] RAX: ffffffffffffffda RBX: 00007fa1177d5fa0 RCX: 00007fa11758eba9 [ 681.101468][T17904] RDX: 0000000000000038 RSI: 0000200000000400 RDI: 000000000000001a [ 681.109455][T17904] RBP: 00007fa1184c5090 R08: 0000000000000000 R09: 0000000000000000 [ 681.117440][T17904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 681.125425][T17904] R13: 00007fa1177d6038 R14: 00007fa1177d5fa0 R15: 00007ffde6f96208 [ 681.133428][T17904] [ 681.268052][T17907] netlink: 'syz.2.4075': attribute type 27 has an invalid length. [ 681.380642][T17914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 681.389440][T17914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 681.412970][T17914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 681.434492][T17914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 681.569982][T17912] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4077'. [ 682.069232][T17933] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.4084'. [ 682.177926][T17934] netlink: 'syz.0.4085': attribute type 10 has an invalid length. [ 682.232635][T17934] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4085'. [ 682.317830][T17937] netlink: 'syz.2.4086': attribute type 10 has an invalid length. [ 682.747161][T17949] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.791816][T17949] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.799148][T17949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 682.828986][T17948] netlink: 'syz.3.4090': attribute type 27 has an invalid length. [ 682.913102][T17956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 682.922960][T17956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.943727][T17956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 682.965560][T17956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 683.264698][T17964] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.4096'. [ 683.433941][T17966] netlink: 'syz.3.4097': attribute type 10 has an invalid length. [ 683.442512][T17966] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4097'. [ 683.878824][T17979] warn_alloc: 5 callbacks suppressed [ 683.878844][T17979] syz.0.4104: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 683.914066][T17979] CPU: 1 PID: 17979 Comm: syz.0.4104 Not tainted syzkaller #0 [ 683.921672][T17979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 683.931839][T17979] Call Trace: [ 683.935216][T17979] [ 683.938253][T17979] dump_stack_lvl+0x16c/0x230 [ 683.943092][T17979] ? show_regs_print_info+0x20/0x20 [ 683.948423][T17979] ? load_image+0x3b0/0x3b0 [ 683.953069][T17979] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 683.959650][T17979] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 683.966296][T17979] warn_alloc+0x210/0x300 [ 683.970762][T17979] ? stack_trace_save+0x9c/0xe0 [ 683.975760][T17979] ? zone_watermark_ok_safe+0x230/0x230 [ 683.981505][T17979] ? kasan_set_track+0x5f/0x70 [ 683.986377][T17979] ? kasan_set_track+0x4e/0x70 [ 683.991248][T17979] ? __kasan_kmalloc+0x8f/0xa0 [ 683.996141][T17979] ? xsk_init_queue+0xb0/0x110 [ 684.001021][T17979] ? xsk_setsockopt+0x4db/0x6f0 [ 684.005982][T17979] ? do_sock_setsockopt+0x175/0x1a0 [ 684.011437][T17979] ? __x64_sys_setsockopt+0x184/0x200 [ 684.016965][T17979] __vmalloc_node_range+0x126/0x1320 [ 684.022572][T17979] ? free_vm_area+0x50/0x50 [ 684.027275][T17979] vmalloc_user+0x74/0x80 [ 684.031727][T17979] ? xskq_create+0xbf/0x170 [ 684.036342][T17979] xskq_create+0xbf/0x170 [ 684.040831][T17979] xsk_init_queue+0xb0/0x110 [ 684.045623][T17979] xsk_setsockopt+0x4db/0x6f0 [ 684.050440][T17979] ? xsk_poll+0x670/0x670 [ 684.054948][T17979] ? __fget_files+0x28/0x4d0 [ 684.059668][T17979] ? aa_sock_opt_perm+0x74/0x100 [ 684.064746][T17979] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 684.070434][T17979] ? security_socket_setsockopt+0x7e/0xa0 [ 684.076258][T17979] ? xsk_poll+0x670/0x670 [ 684.080720][T17979] do_sock_setsockopt+0x175/0x1a0 [ 684.085861][T17979] ? __fdget+0x180/0x210 [ 684.090246][T17979] __x64_sys_setsockopt+0x184/0x200 [ 684.095610][T17979] do_syscall_64+0x55/0xb0 [ 684.100132][T17979] ? clear_bhb_loop+0x40/0x90 [ 684.104913][T17979] ? clear_bhb_loop+0x40/0x90 [ 684.109722][T17979] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 684.115741][T17979] RIP: 0033:0x7f1a87b8eba9 [ 684.120281][T17979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 684.140003][T17979] RSP: 002b:00007f1a88998038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 684.148562][T17979] RAX: ffffffffffffffda RBX: 00007f1a87dd5fa0 RCX: 00007f1a87b8eba9 [ 684.156735][T17979] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 684.164824][T17979] RBP: 00007f1a87c11e19 R08: 0000000000000004 R09: 0000000000000000 [ 684.172900][T17979] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 684.181081][T17979] R13: 00007f1a87dd6038 R14: 00007f1a87dd5fa0 R15: 00007fffd02d6868 [ 684.189283][T17979] [ 684.227570][T17990] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.4107'. [ 684.242638][T17979] Mem-Info: [ 684.245988][T17979] active_anon:4279 inactive_anon:0 isolated_anon:0 [ 684.245988][T17979] active_file:19009 inactive_file:40102 isolated_file:0 [ 684.245988][T17979] unevictable:768 dirty:359 writeback:0 [ 684.245988][T17979] slab_reclaimable:10630 slab_unreclaimable:92856 [ 684.245988][T17979] mapped:25416 shmem:1361 pagetables:489 [ 684.245988][T17979] sec_pagetables:0 bounce:0 [ 684.245988][T17979] kernel_misc_reclaimable:0 [ 684.245988][T17979] free:1338937 free_pcp:15306 free_cma:0 [ 684.334874][T17979] Node 0 active_anon:17116kB inactive_anon:0kB active_file:76036kB inactive_file:160208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101764kB dirty:1436kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10872kB pagetables:1956kB sec_pagetables:0kB all_unreclaimable? no [ 684.396914][T17979] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 684.418367][T17994] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.4108'. [ 684.448639][T17979] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 684.480236][T17979] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 684.486414][T17979] Node 0 DMA32 free:1452372kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:17068kB inactive_anon:0kB active_file:76036kB inactive_file:158892kB unevictable:1536kB writepending:1436kB present:3129332kB managed:2589588kB mlocked:0kB bounce:0kB free_pcp:40988kB local_pcp:19552kB free_cma:0kB [ 684.520028][T17979] lowmem_reserve[]: 0 0 1 1 1 [ 684.525022][T17979] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 684.569598][T17979] lowmem_reserve[]: 0 0 0 0 0 [ 684.574618][T17979] Node 1 Normal free:3888132kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21452kB local_pcp:10148kB free_cma:0kB [ 684.608507][T17979] lowmem_reserve[]: 0 0 0 0 0 [ 684.613485][T17979] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 684.656293][T17979] Node 0 DMA32: 1477*4kB (M) 1726*8kB (UME) 933*16kB (UME) 644*32kB (UME) 448*64kB (UME) 121*128kB (UME) 42*256kB (UME) 15*512kB (UM) 7*1024kB (UME) 2*2048kB (ME) 323*4096kB (UM) = 1452116kB [ 684.676924][T17979] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 684.690386][T17979] Node 1 Normal: 257*4kB (UME) 72*8kB (UME) 44*16kB (UME) 46*32kB (UME) 13*64kB (UE) 8*128kB (UME) 0*256kB 3*512kB (UME) 0*1024kB 1*2048kB (E) 947*4096kB (M) = 3888132kB [ 684.726670][T17979] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 684.746367][T17979] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 684.758285][T17979] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 684.768829][T17979] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 684.778441][T17979] 60472 total pagecache pages [ 684.783503][T17979] 0 pages in swap cache [ 684.787864][T17979] Free swap = 124996kB [ 684.792109][T17979] Total swap = 124996kB [ 684.796607][T17979] 2097051 pages RAM [ 684.800504][T17979] 0 pages HighMem/MovableOnly [ 684.805278][T17979] 416140 pages reserved [ 684.809829][T17979] 0 pages cma reserved [ 684.839639][T17998] netlink: 'syz.1.4109': attribute type 10 has an invalid length. [ 684.862908][T17998] veth1_macvtap: left allmulticast mode [ 684.917774][T17998] veth1_macvtap: left promiscuous mode [ 685.707318][T18004] C: renamed from team_slave_0 (while UP) [ 685.765982][T17998] syz.1.4109 (17998) used greatest stack depth: 19368 bytes left [ 685.792445][T18004] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4112'. [ 685.841890][T18005] lo: left promiscuous mode [ 685.851966][T18005] lo: entered allmulticast mode [ 686.061834][T18018] netlink: 'syz.3.4118': attribute type 39 has an invalid length. [ 686.102307][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.112675][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.167012][T18012] netlink: 'syz.1.4114': attribute type 39 has an invalid length. [ 686.195278][T18022] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.4120'. [ 686.471176][T18028] netlink: 'syz.3.4122': attribute type 12 has an invalid length. [ 686.480708][T18028] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4122'. [ 686.612563][T18034] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.4131'. [ 686.812751][T18036] netlink: 'syz.3.4123': attribute type 10 has an invalid length. [ 686.866153][T18036] veth1_macvtap: left allmulticast mode [ 686.875453][T18036] veth1_macvtap: left promiscuous mode [ 687.300770][T18048] FAULT_INJECTION: forcing a failure. [ 687.300770][T18048] name failslab, interval 1, probability 0, space 0, times 0 [ 687.338006][T18048] CPU: 1 PID: 18048 Comm: syz.3.4129 Not tainted syzkaller #0 [ 687.345574][T18048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 687.355691][T18048] Call Trace: [ 687.359030][T18048] [ 687.362025][T18048] dump_stack_lvl+0x16c/0x230 [ 687.366786][T18048] ? show_regs_print_info+0x20/0x20 [ 687.372057][T18048] ? load_image+0x3b0/0x3b0 [ 687.376662][T18048] ? __might_sleep+0xe0/0xe0 [ 687.381321][T18048] ? __lock_acquire+0x7c80/0x7c80 [ 687.386511][T18048] should_fail_ex+0x39d/0x4d0 [ 687.391293][T18048] should_failslab+0x9/0x20 [ 687.395914][T18048] slab_pre_alloc_hook+0x59/0x310 [ 687.401062][T18048] kmem_cache_alloc+0x5a/0x2e0 [ 687.405878][T18048] ? security_inode_alloc+0x34/0x110 [ 687.411236][T18048] security_inode_alloc+0x34/0x110 [ 687.416384][T18048] inode_init_always+0x8fc/0xc90 [ 687.421352][T18048] ? __asan_memset+0x22/0x40 [ 687.425979][T18048] new_inode_pseudo+0x95/0x1d0 [ 687.430776][T18048] new_inode+0x22/0x1b0 [ 687.434970][T18048] ? __rwlock_init+0x150/0x150 [ 687.439769][T18048] proc_sys_make_inode+0x4e/0x570 [ 687.444822][T18048] ? do_raw_spin_unlock+0x121/0x230 [ 687.450100][T18048] proc_sys_lookup+0x283/0x4d0 [ 687.454964][T18048] __lookup_slow+0x281/0x3b0 [ 687.459650][T18048] ? lookup_one_len+0x2c0/0x2c0 [ 687.464604][T18048] ? _raw_spin_unlock+0x28/0x40 [ 687.469536][T18048] ? down_read+0x1ac/0x2e0 [ 687.474038][T18048] lookup_slow+0x53/0x70 [ 687.478376][T18048] link_path_walk+0x970/0xe00 [ 687.483199][T18048] ? handle_lookup_down+0x130/0x130 [ 687.488476][T18048] ? perf_trace_lock+0x2ed/0x380 [ 687.493534][T18048] path_lookupat+0x9d/0x440 [ 687.498155][T18048] filename_lookup+0x1f4/0x510 [ 687.503006][T18048] ? __virt_addr_valid+0x18c/0x540 [ 687.508208][T18048] ? hashlen_string+0x110/0x110 [ 687.513231][T18048] ? strncpy_from_user+0x197/0x2e0 [ 687.518427][T18048] ? getname_flags+0x20a/0x500 [ 687.523278][T18048] user_path_at_empty+0x42/0x60 [ 687.528187][T18048] bpf_obj_get_user+0xbb/0x460 [ 687.532991][T18048] ? file_end_write+0x159/0x250 [ 687.537891][T18048] ? bpf_obj_pin_user+0x320/0x320 [ 687.542957][T18048] ? __might_fault+0xaa/0x120 [ 687.547702][T18048] __sys_bpf+0x70a/0x800 [ 687.551998][T18048] ? bpf_link_show_fdinfo+0x350/0x350 [ 687.557456][T18048] ? lock_chain_count+0x20/0x20 [ 687.562366][T18048] __x64_sys_bpf+0x7c/0x90 [ 687.566823][T18048] do_syscall_64+0x55/0xb0 [ 687.571273][T18048] ? clear_bhb_loop+0x40/0x90 [ 687.575983][T18048] ? clear_bhb_loop+0x40/0x90 [ 687.580704][T18048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 687.586638][T18048] RIP: 0033:0x7fa11758eba9 [ 687.591091][T18048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.610731][T18048] RSP: 002b:00007fa1184c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 687.619183][T18048] RAX: ffffffffffffffda RBX: 00007fa1177d5fa0 RCX: 00007fa11758eba9 [ 687.627181][T18048] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000007 [ 687.635191][T18048] RBP: 00007fa1184c5090 R08: 0000000000000000 R09: 0000000000000000 [ 687.643188][T18048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.651189][T18048] R13: 00007fa1177d6038 R14: 00007fa1177d5fa0 R15: 00007ffde6f96208 [ 687.659238][T18048] [ 687.724690][T18051] netlink: 'syz.0.4130': attribute type 39 has an invalid length. [ 687.807845][T18055] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 688.108358][T18066] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.4137'. [ 688.157730][T18068] netlink: 'syz.1.4138': attribute type 4 has an invalid length. [ 688.171756][T18068] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4138'. [ 688.393725][T18074] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.4140'. [ 688.834349][T18089] netlink: 'syz.0.4146': attribute type 14 has an invalid length. [ 688.851621][T18089] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4146'. [ 688.945707][T18090] netlink: 'syz.2.4145': attribute type 27 has an invalid length. [ 689.425399][T18106] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4151'. [ 689.570490][T18111] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.4153'. [ 690.171894][T18135] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4157'. [ 690.426345][T18139] netlink: 'syz.2.4162': attribute type 27 has an invalid length. [ 690.787482][T18157] netlink: 'syz.0.4168': attribute type 10 has an invalid length. [ 690.815773][T18157] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4168'. [ 690.849021][T18158] netlink: 'syz.1.4170': attribute type 10 has an invalid length. [ 690.867637][T18158] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4170'. [ 691.070434][T18164] FAULT_INJECTION: forcing a failure. [ 691.070434][T18164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 691.071018][T18164] [ 691.071024][T18164] ====================================================== [ 691.071029][T18164] WARNING: possible circular locking dependency detected [ 691.071048][T18164] syzkaller #0 Not tainted [ 691.071055][T18164] ------------------------------------------------------ [ 691.071060][T18164] syz.3.4174/18164 is trying to acquire lock: [ 691.071068][T18164] ffffffff8cd23e80 (console_owner){-...}-{0:0}, at: console_flush_all+0x10f/0xd00 [ 691.071111][T18164] [ 691.071111][T18164] but task is already holding lock: [ 691.071116][T18164] ffff8880b8f3c458 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 691.071154][T18164] [ 691.071154][T18164] which lock already depends on the new lock. [ 691.071154][T18164] [ 691.071159][T18164] [ 691.071159][T18164] the existing dependency chain (in reverse order) is: [ 691.071165][T18164] [ 691.071165][T18164] -> #5 (&rq->__lock){-.-.}-{2:2}: [ 691.071183][T18164] _raw_spin_lock_nested+0x32/0x50 [ 691.071199][T18164] raw_spin_rq_lock_nested+0x2a/0x140 [ 691.071219][T18164] task_fork_fair+0x62/0x1f0 [ 691.071233][T18164] sched_cgroup_fork+0x333/0x3c0 [ 691.071246][T18164] copy_process+0x21e4/0x3d70 [ 691.071260][T18164] kernel_clone+0x21b/0x840 [ 691.071273][T18164] user_mode_thread+0xde/0x130 [ 691.071288][T18164] rest_init+0x27/0x300 [ 691.071301][T18164] arch_call_rest_init+0xe/0x10 [ 691.071316][T18164] start_kernel+0x459/0x4e0 [ 691.071329][T18164] x86_64_start_reservations+0x2a/0x30 [ 691.071352][T18164] copy_bootdata+0x0/0xe0 [ 691.071372][T18164] secondary_startup_64_no_verify+0x179/0x17b [ 691.071393][T18164] [ 691.071393][T18164] -> #4 (&p->pi_lock){-.-.}-{2:2}: [ 691.071411][T18164] _raw_spin_lock_irqsave+0xa8/0xf0 [ 691.071424][T18164] try_to_wake_up+0x60/0x1140 [ 691.071446][T18164] kick_pool+0x320/0x420 [ 691.071458][T18164] create_worker+0x5c0/0x7b0 [ 691.071473][T18164] workqueue_init+0x306/0x670 [ 691.071494][T18164] kernel_init_freeable+0x3a0/0x570 [ 691.071509][T18164] kernel_init+0x1d/0x1c0 [ 691.071521][T18164] ret_from_fork+0x48/0x80 [ 691.071538][T18164] ret_from_fork_asm+0x11/0x20 [ 691.071557][T18164] [ 691.071557][T18164] -> #3 (&pool->lock){-.-.}-{2:2}: [ 691.071575][T18164] _raw_spin_lock+0x2e/0x40 [ 691.071594][T18164] __queue_work+0x69f/0x1020 [ 691.071606][T18164] queue_work_on+0x121/0x1e0 [ 691.071618][T18164] rpm_suspend+0x10bc/0x1a90 [ 691.071632][T18164] __pm_runtime_idle+0x12f/0x1a0 [ 691.071645][T18164] __device_attach+0x33f/0x400 [ 691.071660][T18164] bus_probe_device+0x180/0x260 [ 691.071673][T18164] device_add+0x85b/0xc20 [ 691.071692][T18164] serial_base_port_add+0x2f2/0x420 [ 691.071707][T18164] serial_core_register_port+0x36d/0x2320 [ 691.071729][T18164] serial8250_register_8250_port+0x15ec/0x1f10 [ 691.071747][T18164] serial_pnp_probe+0x549/0x730 [ 691.071767][T18164] pnp_device_probe+0x305/0x4b0 [ 691.071783][T18164] really_probe+0x25b/0xb40 [ 691.071796][T18164] __driver_probe_device+0x18c/0x330 [ 691.071811][T18164] driver_probe_device+0x4f/0x420 [ 691.071825][T18164] __driver_attach+0x44e/0x6f0 [ 691.071838][T18164] bus_for_each_dev+0x22d/0x2a0 [ 691.071849][T18164] bus_add_driver+0x340/0x640 [ 691.071861][T18164] driver_register+0x23a/0x310 [ 691.071878][T18164] serial8250_init+0x9a/0x170 [ 691.071899][T18164] do_one_initcall+0x1fd/0x750 [ 691.071916][T18164] do_initcall_level+0x137/0x1f0 [ 691.071929][T18164] do_initcalls+0x69/0xd0 [ 691.071941][T18164] kernel_init_freeable+0x3d2/0x570 [ 691.071955][T18164] kernel_init+0x1d/0x1c0 [ 691.071966][T18164] ret_from_fork+0x48/0x80 [ 691.071980][T18164] ret_from_fork_asm+0x11/0x20 [ 691.071998][T18164] [ 691.071998][T18164] -> #2 (&dev->power.lock){-...}-{2:2}: [ 691.072014][T18164] _raw_spin_lock_irqsave+0xa8/0xf0 [ 691.072026][T18164] __pm_runtime_resume+0x10f/0x170 [ 691.072039][T18164] __uart_start+0x171/0x3e0 [ 691.072058][T18164] uart_write+0x449/0x5d0 [ 691.072077][T18164] n_tty_write+0xd27/0x11d0 [ 691.072095][T18164] file_tty_write+0x54b/0x980 [ 691.072109][T18164] vfs_write+0x43b/0x940 [ 691.072125][T18164] ksys_write+0x147/0x250 [ 691.072141][T18164] do_syscall_64+0x55/0xb0 [ 691.072156][T18164] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 691.072178][T18164] [ 691.072178][T18164] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 691.072194][T18164] _raw_spin_lock_irqsave+0xa8/0xf0 [ 691.072205][T18164] serial8250_console_write+0x16d/0x17a0 [ 691.072223][T18164] console_flush_all+0x6cd/0xd00 [ 691.072238][T18164] console_unlock+0xae/0x340 [ 691.072252][T18164] vprintk_emit+0x477/0x600 [ 691.072266][T18164] _printk+0xd0/0x110 [ 691.072277][T18164] register_console+0x91b/0xe60 [ 691.072292][T18164] univ8250_console_init+0x45/0x50 [ 691.072312][T18164] console_init+0x17b/0x5e0 [ 691.072324][T18164] start_kernel+0x2c0/0x4e0 [ 691.072336][T18164] x86_64_start_reservations+0x2a/0x30 [ 691.072356][T18164] copy_bootdata+0x0/0xe0 [ 691.072374][T18164] secondary_startup_64_no_verify+0x179/0x17b [ 691.072393][T18164] [ 691.072393][T18164] -> #0 (console_owner){-...}-{0:0}: [ 691.072409][T18164] __lock_acquire+0x2ddb/0x7c80 [ 691.072422][T18164] lock_acquire+0x197/0x410 [ 691.072435][T18164] console_flush_all+0x693/0xd00 [ 691.072450][T18164] console_unlock+0xae/0x340 [ 691.072464][T18164] vprintk_emit+0x477/0x600 [ 691.072478][T18164] _printk+0xd0/0x110 [ 691.072489][T18164] should_fail_ex+0x37e/0x4d0 [ 691.072505][T18164] strncpy_from_user+0x36/0x2e0 [ 691.072525][T18164] strncpy_from_user_nofault+0x71/0x140 [ 691.072543][T18164] bpf_probe_read_compat_str+0xe1/0x170 [ 691.072563][T18164] bpf_prog_c1796171ffc7efef+0x3d/0x3f [ 691.072576][T18164] bpf_trace_run4+0x1f9/0x420 [ 691.072607][T18164] __bpf_trace_sched_switch+0x17b/0x1e0 [ 691.072623][T18164] __traceiter_sched_switch+0x93/0xc0 [ 691.072635][T18164] __schedule+0x2197/0x44d0 [ 691.072651][T18164] schedule+0xbd/0x170 [ 691.072666][T18164] synchronize_rcu_expedited+0x720/0x830 [ 691.072684][T18164] synchronize_rcu+0x136/0x380 [ 691.072701][T18164] tracepoint_add_func+0x5e0/0x9a0 [ 691.072722][T18164] tracepoint_probe_register+0x5e/0x90 [ 691.072742][T18164] perf_trace_event_init+0x4d2/0x9b0 [ 691.072756][T18164] perf_trace_init+0x238/0x2d0 [ 691.072770][T18164] perf_tp_event_init+0x8d/0x110 [ 691.072787][T18164] perf_try_init_event+0x12b/0x3c0 [ 691.072805][T18164] perf_event_alloc+0xfa4/0x21b0 [ 691.072819][T18164] __se_sys_perf_event_open+0x70e/0x1c20 [ 691.072834][T18164] do_syscall_64+0x55/0xb0 [ 691.072849][T18164] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 691.072870][T18164] [ 691.072870][T18164] other info that might help us debug this: [ 691.072870][T18164] [ 691.072874][T18164] Chain exists of: [ 691.072874][T18164] console_owner --> &p->pi_lock --> &rq->__lock [ 691.072874][T18164] [ 691.072893][T18164] Possible unsafe locking scenario: [ 691.072893][T18164] [ 691.072896][T18164] CPU0 CPU1 [ 691.072900][T18164] ---- ---- [ 691.072904][T18164] lock(&rq->__lock); [ 691.072911][T18164] lock(&p->pi_lock); [ 691.072920][T18164] lock(&rq->__lock); [ 691.072929][T18164] lock(console_owner); [ 691.072936][T18164] [ 691.072936][T18164] *** DEADLOCK *** [ 691.072936][T18164] [ 691.072939][T18164] 7 locks held by syz.3.4174/18164: [ 691.072947][T18164] #0: ffffffff96efbbf0 (&pmus_srcu){.+.+}-{0:0}, at: perf_event_alloc+0xc06/0x21b0 [ 691.072980][T18164] #1: ffffffff8cd85fa8 (event_mutex){+.+.}-{3:3}, at: perf_trace_init+0x50/0x2d0 [ 691.073012][T18164] #2: ffffffff8cd78748 (tracepoints_mutex){+.+.}-{3:3}, at: tracepoint_probe_register+0x40/0x90 [ 691.073050][T18164] #3: ffff8880b8f3c458 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 691.073086][T18164] #4: ffffffff8cd2fc20 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0xfd/0x420 [ 691.073116][T18164] #5: ffffffff8cd23f60 (console_lock){+.+.}-{0:0}, at: _printk+0xd0/0x110 [ 691.073144][T18164] #6: ffffffff8cc0b770 (console_srcu){....}-{0:0}, at: console_flush_all+0x10f/0xd00 [ 691.073177][T18164] [ 691.073177][T18164] stack backtrace: [ 691.073181][T18164] CPU: 1 PID: 18164 Comm: syz.3.4174 Not tainted syzkaller #0 [ 691.073194][T18164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 691.073202][T18164] Call Trace: [ 691.073208][T18164] [ 691.073214][T18164] dump_stack_lvl+0x16c/0x230 [ 691.073231][T18164] ? load_image+0x3b0/0x3b0 [ 691.073244][T18164] ? show_regs_print_info+0x20/0x20 [ 691.073264][T18164] ? print_circular_bug+0x12b/0x1a0 [ 691.073282][T18164] check_noncircular+0x2bd/0x3c0 [ 691.073301][T18164] ? print_deadlock_bug+0x5d0/0x5d0 [ 691.073317][T18164] ? lockdep_lock+0xe0/0x220 [ 691.073336][T18164] __lock_acquire+0x2ddb/0x7c80 [ 691.073362][T18164] ? verify_lock_unused+0x140/0x140 [ 691.073387][T18164] lock_acquire+0x197/0x410 [ 691.073401][T18164] ? console_flush_all+0x10f/0xd00 [ 691.073421][T18164] ? __lock_acquire+0x7c80/0x7c80 [ 691.073435][T18164] ? do_raw_spin_lock+0x121/0x2c0 [ 691.073453][T18164] ? read_lock_is_recursive+0x20/0x20 [ 691.073468][T18164] ? __rwlock_init+0x150/0x150 [ 691.073487][T18164] ? do_raw_spin_unlock+0x121/0x230 [ 691.073506][T18164] console_flush_all+0x693/0xd00 [ 691.073522][T18164] ? console_flush_all+0x10f/0xd00 [ 691.073540][T18164] ? console_flush_all+0x10f/0xd00 [ 691.073561][T18164] ? is_console_locked+0x20/0x20 [ 691.073578][T18164] ? check_noncircular+0x175/0x3c0 [ 691.073602][T18164] console_unlock+0xae/0x340 [ 691.073619][T18164] ? other_cpu_in_panic+0xf0/0xf0 [ 691.073635][T18164] ? __lock_acquire+0x1260/0x7c80 [ 691.073654][T18164] vprintk_emit+0x477/0x600 [ 691.073670][T18164] ? printk_sprint+0x460/0x460 [ 691.073689][T18164] ? verify_lock_unused+0x140/0x140 [ 691.073706][T18164] _printk+0xd0/0x110 [ 691.073721][T18164] ? load_image+0x3b0/0x3b0 [ 691.073733][T18164] ? __lock_acquire+0x1334/0x7c80 [ 691.073753][T18164] should_fail_ex+0x37e/0x4d0 [ 691.073772][T18164] strncpy_from_user+0x36/0x2e0 [ 691.073796][T18164] strncpy_from_user_nofault+0x71/0x140 [ 691.073817][T18164] bpf_probe_read_compat_str+0xe1/0x170 [ 691.073840][T18164] bpf_prog_c1796171ffc7efef+0x3d/0x3f [ 691.073853][T18164] bpf_trace_run4+0x1f9/0x420 [ 691.073866][T18164] ? bpf_trace_run4+0xfd/0x420 [ 691.073880][T18164] ? bpf_trace_run3+0x400/0x400 [ 691.073895][T18164] ? __bpf_trace_sched_switch+0x160/0x1e0 [ 691.073915][T18164] __bpf_trace_sched_switch+0x17b/0x1e0 [ 691.073934][T18164] ? __bpf_trace_sched_wakeup_template+0xe0/0xe0 [ 691.073953][T18164] ? __lock_acquire+0x7c10/0x7c80 [ 691.073968][T18164] ? local_clock+0x20/0x20 [ 691.073985][T18164] ? tracing_record_taskinfo_sched_switch+0x7d/0x360 [ 691.074005][T18164] ? __bpf_trace_sched_wakeup_template+0xe0/0xe0 [ 691.074023][T18164] __traceiter_sched_switch+0x93/0xc0 [ 691.074038][T18164] __schedule+0x2197/0x44d0 [ 691.074061][T18164] ? lock_chain_count+0x20/0x20 [ 691.074077][T18164] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 691.074090][T18164] ? asan.module_dtor+0x20/0x20 [ 691.074108][T18164] ? _raw_spin_unlock+0x40/0x40 [ 691.074121][T18164] ? do_raw_spin_lock+0x121/0x2c0 [ 691.074139][T18164] ? prepare_to_wait_event+0x3db/0x470 [ 691.074156][T18164] ? prepare_to_wait_event+0x434/0x470 [ 691.074173][T18164] schedule+0xbd/0x170 [ 691.074189][T18164] synchronize_rcu_expedited+0x720/0x830 [ 691.074210][T18164] ? schedule_delayed_monitor_work+0x40/0x40 [ 691.074230][T18164] ? wake_bit_function+0x200/0x200 [ 691.074248][T18164] ? stack_trace_save+0x9c/0xe0 [ 691.074271][T18164] ? __kmalloc+0xb4/0x240 [ 691.074289][T18164] ? tracepoint_add_func+0x307/0x9a0 [ 691.074310][T18164] ? perf_trace_event_init+0x4d2/0x9b0 [ 691.074325][T18164] ? perf_try_init_event+0x12b/0x3c0 [ 691.074344][T18164] ? perf_event_alloc+0xfa4/0x21b0 [ 691.074359][T18164] ? __might_sleep+0xe0/0xe0 [ 691.074382][T18164] synchronize_rcu+0x136/0x380 [ 691.074400][T18164] ? __schedule_delayed_monitor_work+0x200/0x200 [ 691.074427][T18164] ? __kmem_cache_alloc_node+0x13e/0x260 [ 691.074447][T18164] ? tracepoint_add_func+0x307/0x9a0 [ 691.074467][T18164] ? rcu_is_watching+0x15/0xb0 [ 691.074488][T18164] tracepoint_add_func+0x5e0/0x9a0 [ 691.074512][T18164] ? trace_event_raw_event_lock+0x230/0x230 [ 691.074533][T18164] tracepoint_probe_register+0x5e/0x90 [ 691.074555][T18164] ? trace_event_raw_event_lock+0x230/0x230 [ 691.074577][T18164] perf_trace_event_init+0x4d2/0x9b0 [ 691.074601][T18164] perf_trace_init+0x238/0x2d0 [ 691.074618][T18164] perf_tp_event_init+0x8d/0x110 [ 691.074637][T18164] perf_try_init_event+0x12b/0x3c0 [ 691.074658][T18164] perf_event_alloc+0xfa4/0x21b0 [ 691.074673][T18164] ? perf_event_alloc+0xc06/0x21b0 [ 691.074692][T18164] ? find_lively_task_by_vpid+0x19/0x290 [ 691.074713][T18164] __se_sys_perf_event_open+0x70e/0x1c20 [ 691.074736][T18164] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 691.074756][T18164] ? lock_chain_count+0x20/0x20 [ 691.074774][T18164] ? __x64_sys_perf_event_open+0x20/0xc0 [ 691.074790][T18164] do_syscall_64+0x55/0xb0 [ 691.074806][T18164] ? clear_bhb_loop+0x40/0x90 [ 691.074819][T18164] ? clear_bhb_loop+0x40/0x90 [ 691.074833][T18164] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 691.074855][T18164] RIP: 0033:0x7fa11758eba9 [ 691.074866][T18164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.074878][T18164] RSP: 002b:00007fa1184c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 691.074892][T18164] RAX: ffffffffffffffda RBX: 00007fa1177d5fa0 RCX: 00007fa11758eba9 [ 691.074902][T18164] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000200000000040 [ 691.074911][T18164] RBP: 00007fa1184c5090 R08: 0000000000000000 R09: 0000000000000000 [ 691.074920][T18164] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 691.074929][T18164] R13: 00007fa1177d6038 R14: 00007fa1177d5fa0 R15: 00007ffde6f96208 [ 691.074946][T18164] [ 692.454478][T18164] CPU: 1 PID: 18164 Comm: syz.3.4174 Not tainted syzkaller #0 [ 692.461934][T18164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 692.471986][T18164] Call Trace: [ 692.475271][T18164] [ 692.478202][T18164] dump_stack_lvl+0x16c/0x230 [ 692.482887][T18164] ? show_regs_print_info+0x20/0x20 [ 692.488090][T18164] ? load_image+0x3b0/0x3b0 [ 692.492591][T18164] ? __lock_acquire+0x1334/0x7c80 [ 692.497621][T18164] should_fail_ex+0x39d/0x4d0 [ 692.502303][T18164] strncpy_from_user+0x36/0x2e0 [ 692.507163][T18164] strncpy_from_user_nofault+0x71/0x140 [ 692.512713][T18164] bpf_probe_read_compat_str+0xe1/0x170 [ 692.518263][T18164] bpf_prog_c1796171ffc7efef+0x3d/0x3f [ 692.523740][T18164] bpf_trace_run4+0x1f9/0x420 [ 692.528415][T18164] ? bpf_trace_run4+0xfd/0x420 [ 692.533180][T18164] ? bpf_trace_run3+0x400/0x400 [ 692.538029][T18164] ? __bpf_trace_sched_switch+0x160/0x1e0 [ 692.543769][T18164] __bpf_trace_sched_switch+0x17b/0x1e0 [ 692.549314][T18164] ? __bpf_trace_sched_wakeup_template+0xe0/0xe0 [ 692.555655][T18164] ? __lock_acquire+0x7c10/0x7c80 [ 692.560678][T18164] ? local_clock+0x20/0x20 [ 692.565096][T18164] ? tracing_record_taskinfo_sched_switch+0x7d/0x360 [ 692.571776][T18164] ? __bpf_trace_sched_wakeup_template+0xe0/0xe0 [ 692.578106][T18164] __traceiter_sched_switch+0x93/0xc0 [ 692.583481][T18164] __schedule+0x2197/0x44d0 [ 692.587994][T18164] ? lock_chain_count+0x20/0x20 [ 692.592849][T18164] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 692.598740][T18164] ? asan.module_dtor+0x20/0x20 [ 692.603591][T18164] ? _raw_spin_unlock+0x40/0x40 [ 692.608443][T18164] ? do_raw_spin_lock+0x121/0x2c0 [ 692.613467][T18164] ? prepare_to_wait_event+0x3db/0x470 [ 692.618933][T18164] ? prepare_to_wait_event+0x434/0x470 [ 692.624429][T18164] schedule+0xbd/0x170 [ 692.628502][T18164] synchronize_rcu_expedited+0x720/0x830 [ 692.634161][T18164] ? schedule_delayed_monitor_work+0x40/0x40 [ 692.640148][T18164] ? wake_bit_function+0x200/0x200 [ 692.645256][T18164] ? stack_trace_save+0x9c/0xe0 [ 692.650110][T18164] ? __kmalloc+0xb4/0x240 [ 692.654442][T18164] ? tracepoint_add_func+0x307/0x9a0 [ 692.659747][T18164] ? perf_trace_event_init+0x4d2/0x9b0 [ 692.665201][T18164] ? perf_try_init_event+0x12b/0x3c0 [ 692.670489][T18164] ? perf_event_alloc+0xfa4/0x21b0 [ 692.675602][T18164] ? __might_sleep+0xe0/0xe0 [ 692.680196][T18164] synchronize_rcu+0x136/0x380 [ 692.684982][T18164] ? __schedule_delayed_monitor_work+0x200/0x200 [ 692.691320][T18164] ? __kmem_cache_alloc_node+0x13e/0x260 [ 692.696955][T18164] ? tracepoint_add_func+0x307/0x9a0 [ 692.702245][T18164] ? rcu_is_watching+0x15/0xb0 [ 692.707012][T18164] tracepoint_add_func+0x5e0/0x9a0 [ 692.712134][T18164] ? trace_event_raw_event_lock+0x230/0x230 [ 692.718117][T18164] tracepoint_probe_register+0x5e/0x90 [ 692.723581][T18164] ? trace_event_raw_event_lock+0x230/0x230 [ 692.729486][T18164] perf_trace_event_init+0x4d2/0x9b0 [ 692.734772][T18164] perf_trace_init+0x238/0x2d0 [ 692.739538][T18164] perf_tp_event_init+0x8d/0x110 [ 692.744484][T18164] perf_try_init_event+0x12b/0x3c0 [ 692.749602][T18164] perf_event_alloc+0xfa4/0x21b0 [ 692.754540][T18164] ? perf_event_alloc+0xc06/0x21b0 [ 692.759656][T18164] ? find_lively_task_by_vpid+0x19/0x290 [ 692.765294][T18164] __se_sys_perf_event_open+0x70e/0x1c20 [ 692.770940][T18164] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 692.776583][T18164] ? lock_chain_count+0x20/0x20 [ 692.781441][T18164] ? __x64_sys_perf_event_open+0x20/0xc0 [ 692.787099][T18164] do_syscall_64+0x55/0xb0 [ 692.791525][T18164] ? clear_bhb_loop+0x40/0x90 [ 692.796201][T18164] ? clear_bhb_loop+0x40/0x90 [ 692.800874][T18164] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 692.806815][T18164] RIP: 0033:0x7fa11758eba9 [ 692.811228][T18164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 692.830923][T18164] RSP: 002b:00007fa1184c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 692.839343][T18164] RAX: ffffffffffffffda RBX: 00007fa1177d5fa0 RCX: 00007fa11758eba9 [ 692.847311][T18164] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000200000000040 [ 692.855286][T18164] RBP: 00007fa1184c5090 R08: 0000000000000000 R09: 0000000000000000 [ 692.863252][T18164] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 692.871221][T18164] R13: 00007fa1177d6038 R14: 00007fa1177d5fa0 R15: 00007ffde6f96208 [ 692.879198][T18164]