last executing test programs: 5.642209329s ago: executing program 3 (id=1723): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r2, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x83, &(0x7f0000000940)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x64, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) sendmsg$inet(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000400)="9d83acd840d1140ec18c2383d7bcab84a3db6040de1da327d2b4576529a92c965169824c69f4e192323f28f78166b78c8e1086751a79bb85507b341585a4b2aa6b5c386124c0e1f8ccf2520a1e90db2c6909db9a", 0x54}, {&(0x7f00000002c0)="9f89d266a7d9f7eddac7a560caff24ff", 0x10}, {&(0x7f0000000640)="92ba4c37852b51d76048fe360d034360b461cafa6381d9015855b66d06f29192112686ac72e2fb3d2668a7d9772f51300b975b61bc7e9f26583259e1d32643812f5fc2207640f48eb1686ef18d153332c2448dbdf78ef1a68f67819b7a96ecadf3fbb8d2859aee02e6f50e38d93958ed34c91e2dc7566b1876151fc7e3027bd455963f10fb549ff33f827cfd628345efab246888bed13c5f57e6ca295d1bbb0a8666a2e821e628460312e4c46680f96982da1b67777fc368157a96", 0xbb}, {&(0x7f0000000700)="1cfbd7a752e81dff3bb569be87851a699bc7e490a533fc1733ba9ba5a09de871ff2093759a9793bda5ce437f326f92f0046a952e66b37467f7ab751a72878e868385e70cef694b27f886b2fcc781c8ab388991d18c6effea861a6970ecebd689a0210aed0e7f1e9ca29e56973e4a8500f4805fc6bc93e7842504997e3fad4646d6be1eff6738a4c5489d1c443a0338d4c76e3997d6cfabf48c1aa6d3b26b872c62f448c84b5f38d441f42ba30537f42424", 0xb1}, {&(0x7f00000007c0)="6fe7fef1ccd38dba893dcec6d08b2ca7809a8f00c07a1e9906b8807d96c361d9b472df7ac8f0f46076cea2d7023d050161f08d1fb94b6d90d3ee1dc144c52ebc0886ff45b9d06f88a736c6b636a237f88e8c1ed5f60951220a793457391d5296f6d44b", 0x63}], 0x5, &(0x7f0000000b80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast1, @dev={0xac, 0x14, 0x14, 0x3d}}}}], 0x20}, 0x20000000) socket$kcm(0xa, 0x2, 0x3a) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvmsg(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0xf2ff) socket$kcm(0x11, 0x6ac1f6422399433d, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/23, 0x17}, 0x0) 5.024592513s ago: executing program 3 (id=1728): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7eaa00000000000061103d0000000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0xc, 0x17, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000010000007f7ae0ff080000001833000002000000000000000000000018000000080000000000000003000000b7080000000000007b8af8ff00000000b7080000100000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00008ed8004799d1000000000000b70500000800000085000000a5000000180000000700000000000000030000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0xac3f, 0x91, &(0x7f0000000840)=""/145, 0x0, 0x20, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x2, 0xf, 0x9, 0x15d}, 0x10, 0x0, r0, 0x0, &(0x7f0000000dc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r4}, 0x10) close(r3) sendmsg$unix(r2, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x0, 0x0}, 0x10) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r5, &(0x7f0000000180), &(0x7f0000000540)=""/119}, 0x20) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xb3b, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x73) 4.305077969s ago: executing program 3 (id=1732): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x76}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xc, 0x9, 0x0, 0x3}, {0xc}}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x80, 0x0}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000100)=""/15, 0xf}, {&(0x7f0000000440)=""/23, 0x17}, {&(0x7f0000000480)=""/162, 0xa2}, {&(0x7f0000000540)=""/112, 0x70}, {&(0x7f00000005c0)=""/225, 0xe1}, {&(0x7f00000006c0)=""/60, 0x3c}], 0x7}, 0x40012000) 3.859818962s ago: executing program 0 (id=1738): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a000000010000004000000023"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x4f}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)='%-010d \x00'}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x3, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYRES32=r2, @ANYRES32=r3], 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000018000000000000000010000851000000000000000020000000000000000000100da"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r4, 0x20, &(0x7f0000000440)={&(0x7f0000001340)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x1d, &(0x7f00000007c0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x4c}, @map_idx_val={0x18, 0xd, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x3, 0x2, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffd}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000380)='syzkaller\x00', 0x8001, 0x0, &(0x7f00000003c0), 0x40f00, 0x51, '\x00', r2, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x0, 0x0, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[r1, r1, r1, r1, r1, r1, r1], &(0x7f0000000600)=[{0x3, 0x2, 0x3, 0x6}, {0x4, 0x4, 0x2, 0x9}, {0x1, 0x4, 0xf, 0x6}, {0x3, 0x4, 0xb, 0x5}], 0x10, 0x9, @void, @value}, 0x94) perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xfffffffffffffeb8, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d080207000000810000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40000) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xa000000, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001c000b63d25a80648c2594f91c24fc60", 0x14}], 0x1}, 0x0) 3.460420955s ago: executing program 4 (id=1739): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x100, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x23, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000940)={r1, r1}) 3.255899466s ago: executing program 3 (id=1740): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020003600e41b0000900ac0000001101a80016000b00014002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="67101dd52f317863448955d3021845d8707954ed5100000000100000000000000000000095000fa10fcf600274"], 0x0, 0xc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="fe05000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91924fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x66) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={0x0, 0x0, 0x8}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r6}, 0x38) 2.876378029s ago: executing program 2 (id=1742): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xb9, &(0x7f0000000080)=""/185, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000880)='memory.oom.group\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x76}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xc, 0x9, 0x0, 0x3}, {0xc}}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x80, 0x0}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000100)=""/15, 0xf}, {&(0x7f0000000440)=""/23, 0x17}, {&(0x7f0000000480)=""/162, 0xa2}, {&(0x7f0000000540)=""/112, 0x70}, {&(0x7f00000005c0)=""/225, 0xe1}, {&(0x7f00000006c0)=""/60, 0x3c}], 0x7}, 0x40012000) 2.820166039s ago: executing program 4 (id=1743): openat$tun(0xffffffffffffff9c, 0x0, 0x84703, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'macvlan1\x00', 0x200}) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, 0x0, &(0x7f0000000040)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x599, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000004001000000000000002000000030000000000000000000006040000"], &(0x7f0000000080)=""/227, 0x3e, 0xe3, 0x1, 0x0, 0x0, @void, @value}, 0x20) (fail_nth: 1) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x2, 0x5, 0x84) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x891b, &(0x7f0000000400)={r7}) bpf$LINK_DETACH(0x22, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r2, 0x6, 0x8, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg(r2, &(0x7f0000000040)={&(0x7f0000000280)=@hci={0x1f, 0x1, 0x2}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000300)="7c34c7320fae545225a2bfa31db594cd241d05a096373fb9eafee13d5f97f46432aa58307e9808153ced756c51faac80801002c2e25f714ad0c37d7a318045204c8bdee23dc866217d96e2213a435f139d6af501aba62a4f6c158196adde7b20ad5ab9552279a0898dbcd73489a1fc2d05465519c09c064f1d1057a316e6973f4899e4de3ff18a8b34fac254aadad88b0a998a7927c8e3624ccb6f9a545282cb4cbc01df75578053996b03b91d3a8d7c5192772861b1616026c278f2df6c709c8a1b2dca9cef2595fb0eb5851288f6ee30b16fed5a530ddab8da11", 0xdb}, {&(0x7f0000000500)="dfd341eed83599e9e90c786f9d7b15ee8f94a4237309349a8374039ea2ca0c45ab68b7782cb76fed9652d22ea040396e99b6e48ed25d2b810824fcea82043e5fe1f511b6ec6a402025470e1fe49d6645fccdfebdc504a1d601cb2fe943515319faa4e2f21606f57b4e56ec50ca475b512f836aea247be7dd2214da323d3435973af42501cadd34adda1c5ce4f8f45eecaa22f589bd23f2ed64f09ed41343693661fc05f25f2b17e1f4164c255ea2fdab9fa4c25ed172d66becb5734c88dae5aa8c", 0xc1}, {&(0x7f0000000600)="ee874f359b59026fcc64216149f840118ce0c4f1947f47bc39a183369632e82392372647ce3c12c9dd847368572e6728dd577e4fce10cc00abeb369fcd4ab03720093e705ff99d451eee74d1f6d165d388624d77bf05147490515730ccf670ad837119ad4371f922705659dc611639c2f643b6ba4d7d0611e5b0b8fae08012320f9f5be2320cc2b4639c0763420abf1640cc4705d50343dc51e7f749f93c75e1c515c84ce152a4a119f09e332bebb2848dd99384c907c1b862e1660b2dacb7311c332a3b2f48b699d55ae9ca645f112ba261157367c51b3d21588c5350ddcc4d", 0xe0}, {&(0x7f0000000700)="fb03a1dd1340643d15b6e20c07b5428a892bc5dacaa08f2342cbeb30a0410f3a3c8d694c556dc31e44bd2a6c39e29a2d7985076f84067a429d81f752f967ae59657a223b1ef0c2437f649b793e3d52d32d97ec4c6a6cf46a0aa79fc74c071d4809db020b8e5556c60e2bd7e43ab047d122d3abc40ddf7340f79d438d67b3fdbacdcb5871182dad8be4ad1e88e7d5e5237a0d6a3471154fc3ca79eb32678d9233dc4f488bbb96f838aee91031811f6af269bcebe6d35e625ee63783", 0xbb}, {&(0x7f0000000400)="dab631114d72e05867d587dd9d5fe8eaf9af4bc1e4f0466b2536499ce263df3bfdc62ad69c3562f99c4fffc2123a8a8f47b433602c32399d14bacbc07615fd95e3813bbb76e500da889d8820", 0x4c}], 0x5}, 0x80) 2.79439314s ago: executing program 0 (id=1744): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="5aee41dea43e63a3f7fb7f110000", 0x0, 0xf004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext, 0x8, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5be}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0xd238, 0x8000000000000, 0x0, 0x5, 0xc8f, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, r3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0xe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6, 0x1, 0x0, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4ea8, 0x0, 0x20, 0x8, 0x40000, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 2.329796194s ago: executing program 0 (id=1745): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0xf00, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.257486453s ago: executing program 1 (id=1746): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xafe6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="73fa", 0x2}], 0x1}, 0x4040001) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000180), 0xfd66) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x7, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000180), &(0x7f0000000100)=r2}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x18102) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f6", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.003022836s ago: executing program 0 (id=1747): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020003600e41b0000900ac0000001101a80016000b00014002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="67101dd52f317863448955d3021845d8707954ed5100000000100000000000000000000095000fa10fcf600274"], 0x0, 0xc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="fe05000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x66) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={0x0, 0x0, 0x8}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r5}, 0x38) 2.002606755s ago: executing program 1 (id=1748): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) 1.876378977s ago: executing program 1 (id=1749): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x500, &(0x7f0000000080)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b9040a1d08041000000000000aa1180015000600142603600e1208000f0000810401a8001600200001400300000007600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a08400e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4040001) recvmsg$unix(r3, 0x0, 0x10003) r6 = openat$cgroup_devices(r0, 0x0, 0x2, 0x0) r7 = socket$kcm(0x2, 0x5, 0x84) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYRES32], 0x50) r9 = socket$kcm(0x1e, 0x2, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={&(0x7f0000000d00)=@nl=@unspec, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)="f4", 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}, 0x80) socket$kcm(0xa, 0x5, 0x0) r11 = socket$kcm(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000000000000000007000000000000000002000006040000000000000000000000000000000000000000000000000000090000000000000000000009"], 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) setsockopt$sock_attach_bpf(r11, 0x84, 0x9, &(0x7f0000000380), 0x9c) setsockopt$sock_attach_bpf(r7, 0x84, 0x6e, 0x0, 0x0) write$cgroup_devices(r6, 0x0, 0x9) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000a10000002e000000180100002020702500000000002020207b1af8ff00000000bf0500000000000007010000f8ff0500ef67a4fea0ffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000001c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000240)=""/250, 0xfa}, {&(0x7f0000000340)=""/79, 0x4f}, {&(0x7f00000003c0)=""/148, 0x94}, {&(0x7f0000000480)=""/115, 0x73}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000500)=""/91, 0x5b}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f0000000740)=""/209, 0xd1}, {&(0x7f0000000580)=""/49, 0x31}], 0x9, &(0x7f0000000900)=""/187, 0xbb}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000a80)={r2, r8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x43) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r12, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.875714217s ago: executing program 4 (id=1750): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a000000010000004000000023"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x4f}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)='%-010d \x00'}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x3, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYRES32=r2, @ANYRES32=r3], 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f0000001340)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x1d, &(0x7f00000007c0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x4c}, @map_idx_val={0x18, 0xd, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x3, 0x2, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffd}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000380)='syzkaller\x00', 0x8001, 0x0, &(0x7f00000003c0), 0x40f00, 0x51, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x0, 0x0, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[r1, r1, r1, r1, r1, r1, r1], &(0x7f0000000600)=[{0x3, 0x2, 0x3, 0x6}, {0x4, 0x4, 0x2, 0x9}, {0x1, 0x4, 0xf, 0x6}, {0x3, 0x4, 0xb, 0x5}], 0x10, 0x9, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0xfffffffffffffeb8, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d080207000000810000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40000) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xa000000, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001c000b63d25a80648c2594f91c24fc60", 0x14}], 0x1}, 0x0) 1.874511006s ago: executing program 2 (id=1759): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xafe6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="73fa", 0x2}], 0x1}, 0x4040001) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000180), 0xfd66) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x7, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000180), &(0x7f0000000100)=r2}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x18102) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f6", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.863696257s ago: executing program 3 (id=1751): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a000000010000004000000023"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x4f}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)='%-010d \x00'}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x3, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYRES32=r2, @ANYRES32=r3], 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000018000000000000000010000851000000000000000020000000000000000000100da"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r4, 0x20, &(0x7f0000000440)={&(0x7f0000001340)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x1d, &(0x7f00000007c0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x4c}, @map_idx_val={0x18, 0xd, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x3, 0x2, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffd}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000380)='syzkaller\x00', 0x8001, 0x0, &(0x7f00000003c0), 0x40f00, 0x51, '\x00', r2, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x0, 0x0, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[r1, r1, r1, r1, r1, r1, r1], &(0x7f0000000600)=[{0x3, 0x2, 0x3, 0x6}, {0x4, 0x4, 0x2, 0x9}, {0x1, 0x4, 0xf, 0x6}, {0x3, 0x4, 0xb, 0x5}], 0x10, 0x9, @void, @value}, 0x94) perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xfffffffffffffeb8, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d080207000000810000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40000) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xa000000, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001c000b63d25a80648c2594f91c24fc60", 0x14}], 0x1}, 0x0) 1.623097458s ago: executing program 1 (id=1752): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a000000010000004000000023"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x4f}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)='%-010d \x00'}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x3, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYRES32=r2, @ANYRES32=r3], 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000018000000000000000010000851000000000000000020000000000000000000100da"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r4, 0x20, &(0x7f0000000440)={&(0x7f0000001340)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x1d, &(0x7f00000007c0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x4c}, @map_idx_val={0x18, 0xd, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x3, 0x2, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffd}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000380)='syzkaller\x00', 0x8001, 0x0, &(0x7f00000003c0), 0x40f00, 0x51, '\x00', r2, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x0, 0x0, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[r1, r1, r1, r1, r1, r1, r1], &(0x7f0000000600)=[{0x3, 0x2, 0x3, 0x6}, {0x4, 0x4, 0x2, 0x9}, {0x1, 0x4, 0xf, 0x6}, {0x3, 0x4, 0xb, 0x5}], 0x10, 0x9, @void, @value}, 0x94) perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xfffffffffffffeb8, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d080207000000810000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40000) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xa000000, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001c000b63d25a80648c2594f91c24fc60", 0x14}], 0x1}, 0x0) 1.320152961s ago: executing program 2 (id=1753): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x100, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x23, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000940)={r1, r1}) 1.204935272s ago: executing program 4 (id=1754): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a000000010000004000000023"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x4f}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)='%-010d \x00'}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x3, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYRES32=r2, @ANYRES32=r3], 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000018000000000000000010000851000000000000000020000000000000000000100da"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r4, 0x20, &(0x7f0000000440)={&(0x7f0000001340)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x1d, &(0x7f00000007c0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x4c}, @map_idx_val={0x18, 0xd, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x3, 0x2, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffd}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000380)='syzkaller\x00', 0x8001, 0x0, &(0x7f00000003c0), 0x40f00, 0x51, '\x00', r2, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x0, 0x0, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[r1, r1, r1, r1, r1, r1, r1], &(0x7f0000000600)=[{0x3, 0x2, 0x3, 0x6}, {0x4, 0x4, 0x2, 0x9}, {0x1, 0x4, 0xf, 0x6}, {0x3, 0x4, 0xb, 0x5}], 0x10, 0x9, @void, @value}, 0x94) perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xfffffffffffffeb8, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d080207000000810000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40000) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xa000000, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001c000b63d25a80648c2594f91c24fc60", 0x14}], 0x1}, 0x0) 684.092235ms ago: executing program 0 (id=1755): openat$tun(0xffffffffffffff9c, 0x0, 0x84703, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'macvlan1\x00', 0x200}) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, 0x0, &(0x7f0000000040)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x599, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000004001000000000000002000000030000000000000000000006040000"], &(0x7f0000000080)=""/227, 0x3e, 0xe3, 0x1, 0x0, 0x0, @void, @value}, 0x20) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x2, 0x5, 0x84) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x891b, &(0x7f0000000400)={r7}) bpf$LINK_DETACH(0x22, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r2, 0x6, 0x8, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg(r2, &(0x7f0000000040)={&(0x7f0000000280)=@hci={0x1f, 0x1, 0x2}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000300)="7c34c7320fae545225a2bfa31db594cd241d05a096373fb9eafee13d5f97f46432aa58307e9808153ced756c51faac80801002c2e25f714ad0c37d7a318045204c8bdee23dc866217d96e2213a435f139d6af501aba62a4f6c158196adde7b20ad5ab9552279a0898dbcd73489a1fc2d05465519c09c064f1d1057a316e6973f4899e4de3ff18a8b34fac254aadad88b0a998a7927c8e3624ccb6f9a545282cb4cbc01df75578053996b03b91d3a8d7c5192772861b1616026c278f2df6c709c8a1b2dca9cef2595fb0eb5851288f6ee30b16fed5a530ddab8da11", 0xdb}, {&(0x7f0000000500)="dfd341eed83599e9e90c786f9d7b15ee8f94a4237309349a8374039ea2ca0c45ab68b7782cb76fed9652d22ea040396e99b6e48ed25d2b810824fcea82043e5fe1f511b6ec6a402025470e1fe49d6645fccdfebdc504a1d601cb2fe943515319faa4e2f21606f57b4e56ec50ca475b512f836aea247be7dd2214da323d3435973af42501cadd34adda1c5ce4f8f45eecaa22f589bd23f2ed64f09ed41343693661fc05f25f2b17e1f4164c255ea2fdab9fa4c25ed172d66becb5734c88dae5aa8c", 0xc1}, {&(0x7f0000000600)="ee874f359b59026fcc64216149f840118ce0c4f1947f47bc39a183369632e82392372647ce3c12c9dd847368572e6728dd577e4fce10cc00abeb369fcd4ab03720093e705ff99d451eee74d1f6d165d388624d77bf05147490515730ccf670ad837119ad4371f922705659dc611639c2f643b6ba4d7d0611e5b0b8fae08012320f9f5be2320cc2b4639c0763420abf1640cc4705d50343dc51e7f749f93c75e1c515c84ce152a4a119f09e332bebb2848dd99384c907c1b862e1660b2dacb7311c332a3b2f48b699d55ae9ca645f112ba261157367c51b3d21588c5350ddcc4d", 0xe0}, {&(0x7f0000000700)="fb03a1dd1340643d15b6e20c07b5428a892bc5dacaa08f2342cbeb30a0410f3a3c8d694c556dc31e44bd2a6c39e29a2d7985076f84067a429d81f752f967ae59657a223b1ef0c2437f649b793e3d52d32d97ec4c6a6cf46a0aa79fc74c071d4809db020b8e5556c60e2bd7e43ab047d122d3abc40ddf7340f79d438d67b3fdbacdcb5871182dad8be4ad1e88e7d5e5237a0d6a3471154fc3ca79eb32678d9233dc4f488bbb96f838aee91031811f6af269bcebe6d35e625ee63783", 0xbb}, {&(0x7f0000000400)="dab631114d72e05867d587dd9d5fe8eaf9af4bc1e4f0466b2536499ce263df3bfdc62ad69c3562f99c4fffc2123a8a8f47b433602c32399d14bacbc07615fd95e3813bbb76e500da889d8820", 0x4c}], 0x5}, 0x80) 683.404545ms ago: executing program 2 (id=1756): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="5aee41dea43e63a3f7fb7f110000", 0x0, 0xf004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext, 0x8, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5be}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0xd238, 0x8000000000000, 0x0, 0x5, 0xc8f, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, r3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0xe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6, 0x1, 0x0, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4ea8, 0x0, 0x20, 0x8, 0x40000, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 563.474596ms ago: executing program 1 (id=1757): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0xf00, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 461.059727ms ago: executing program 3 (id=1758): openat$tun(0xffffffffffffff9c, 0x0, 0x84703, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'macvlan1\x00', 0x200}) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, 0x0, &(0x7f0000000040)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1d00000004000000990500000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000004001000000000000002000000030000000000000000000006040000"], &(0x7f0000000080)=""/227, 0x3e, 0xe3, 0x1, 0x0, 0x0, @void, @value}, 0x20) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x2, 0x5, 0x84) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x891b, &(0x7f0000000400)={r7}) bpf$LINK_DETACH(0x22, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r2, 0x6, 0x8, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg(r2, &(0x7f0000000040)={&(0x7f0000000280)=@hci={0x1f, 0x1, 0x2}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000300)="7c34c7320fae545225a2bfa31db594cd241d05a096373fb9eafee13d5f97f46432aa58307e9808153ced756c51faac80801002c2e25f714ad0c37d7a318045204c8bdee23dc866217d96e2213a435f139d6af501aba62a4f6c158196adde7b20ad5ab9552279a0898dbcd73489a1fc2d05465519c09c064f1d1057a316e6973f4899e4de3ff18a8b34fac254aadad88b0a998a7927c8e3624ccb6f9a545282cb4cbc01df75578053996b03b91d3a8d7c5192772861b1616026c278f2df6c709c8a1b2dca9cef2595fb0eb5851288f6ee30b16fed5a530ddab8da11", 0xdb}, {&(0x7f0000000500)="dfd341eed83599e9e90c786f9d7b15ee8f94a4237309349a8374039ea2ca0c45ab68b7782cb76fed9652d22ea040396e99b6e48ed25d2b810824fcea82043e5fe1f511b6ec6a402025470e1fe49d6645fccdfebdc504a1d601cb2fe943515319faa4e2f21606f57b4e56ec50ca475b512f836aea247be7dd2214da323d3435973af42501cadd34adda1c5ce4f8f45eecaa22f589bd23f2ed64f09ed41343693661fc05f25f2b17e1f4164c255ea2fdab9fa4c25ed172d66becb5734c88dae5aa8c", 0xc1}, {&(0x7f0000000600)="ee874f359b59026fcc64216149f840118ce0c4f1947f47bc39a183369632e82392372647ce3c12c9dd847368572e6728dd577e4fce10cc00abeb369fcd4ab03720093e705ff99d451eee74d1f6d165d388624d77bf05147490515730ccf670ad837119ad4371f922705659dc611639c2f643b6ba4d7d0611e5b0b8fae08012320f9f5be2320cc2b4639c0763420abf1640cc4705d50343dc51e7f749f93c75e1c515c84ce152a4a119f09e332bebb2848dd99384c907c1b862e1660b2dacb7311c332a3b2f48b699d55ae9ca645f112ba261157367c51b3d21588c5350ddcc4d", 0xe0}, {&(0x7f0000000700)="fb03a1dd1340643d15b6e20c07b5428a892bc5dacaa08f2342cbeb30a0410f3a3c8d694c556dc31e44bd2a6c39e29a2d7985076f84067a429d81f752f967ae59657a223b1ef0c2437f649b793e3d52d32d97ec4c6a6cf46a0aa79fc74c071d4809db020b8e5556c60e2bd7e43ab047d122d3abc40ddf7340f79d438d67b3fdbacdcb5871182dad8be4ad1e88e7d5e5237a0d6a3471154fc3ca79eb32678d9233dc4f488bbb96f838aee91031811f6af269bcebe6d35e625ee63783", 0xbb}, {&(0x7f0000000400)="dab631114d72e05867d587dd9d5fe8eaf9af4bc1e4f0466b2536499ce263df3bfdc62ad69c3562f99c4fffc2123a8a8f47b433602c32399d14bacbc07615fd95e3813bbb76e500da889d8820", 0x4c}], 0x5}, 0x80) 430.409907ms ago: executing program 4 (id=1760): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) 375.207977ms ago: executing program 2 (id=1761): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000007c0)="5c00000012006bab9e3fe3d8fd8978f45225d9ee000000007ea60860160af36504000100080ec000000002009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bdd7fcf50e4509c5cc68b7ed9c232d786c35fe0000000000cb0e5209d169e1208acb", 0x66}, {&(0x7f0000000b80)}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4088) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 152.508199ms ago: executing program 1 (id=1762): syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/pid_for_children\x00') bpf$MAP_CREATE(0x0, &(0x7f0000002a00)=@base={0x1, 0x4, 0x7, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2a, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 96.014389ms ago: executing program 4 (id=1763): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r2, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000008c0), &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x83, &(0x7f0000000940)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x64, 0x8, 0x0, 0x0}}, 0x10) sendmsg$inet(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000400)="9d83acd840d1140ec18c2383d7bcab84a3db6040de1da327d2b4576529a92c965169824c69f4e192323f28f78166b78c8e1086751a79bb85507b341585a4b2aa6b5c386124c0e1f8ccf2520a1e90db2c6909db9a", 0x54}, {&(0x7f00000002c0)="9f89d266a7d9f7eddac7a560caff24ff", 0x10}, {&(0x7f0000000640)="92ba4c37852b51d76048fe360d034360b461cafa6381d9015855b66d06f29192112686ac72e2fb3d2668a7d9772f51300b975b61bc7e9f26583259e1d32643812f5fc2207640f48eb1686ef18d153332c2448dbdf78ef1a68f67819b7a96ecadf3fbb8d2859aee02e6f50e38d93958ed34c91e2dc7566b1876151fc7e3027bd455963f10fb549ff33f827cfd628345efab246888bed13c5f57e6ca295d1bbb0a8666a2e821e628460312e4c46680f96982da1b67777fc368157a96", 0xbb}, {&(0x7f0000000700)="1cfbd7a752e81dff3bb569be87851a699bc7e490a533fc1733ba9ba5a09de871ff2093759a9793bda5ce437f326f92f0046a952e66b37467f7ab751a72878e868385e70cef694b27f886b2fcc781c8ab388991d18c6effea861a6970ecebd689a0210aed0e7f1e9ca29e56973e4a8500f4805fc6bc93e7842504997e3fad4646d6be1eff6738a4c5489d1c443a0338d4c76e3997d6cfabf48c1aa6d3b26b872c62f448c84b5f38d441f42ba30537f42424", 0xb1}, {&(0x7f00000007c0)="6fe7fef1ccd38dba893dcec6d08b2ca7809a8f00c07a1e9906b8807d96c361d9b472df7ac8f0f46076cea2d7023d050161f08d1fb94b6d90d3ee1dc144c52ebc0886ff45b9d06f88a736c6b636a237f88e8c1ed5f60951220a793457391d5296f6d44b", 0x63}], 0x5, &(0x7f0000000b80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast1, @dev={0xac, 0x14, 0x14, 0x3d}}}}], 0x20}, 0x20000000) socket$kcm(0xa, 0x2, 0x3a) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvmsg(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0xf2ff) socket$kcm(0x11, 0x6ac1f6422399433d, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/23, 0x17}, 0x0) 68.94685ms ago: executing program 0 (id=1764): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xafe6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="73fa", 0x2}], 0x1}, 0x4040001) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000180), 0xfd66) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x7, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000180), &(0x7f0000000100)=r2}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x18102) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f698", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 0s ago: executing program 2 (id=1765): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a000000010000004000000023"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x4f}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)='%-010d \x00'}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x3, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYRES32=r2, @ANYRES32=r3], 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f0000001340)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x1d, &(0x7f00000007c0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x4c}, @map_idx_val={0x18, 0xd, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x3, 0x2, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffd}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000380)='syzkaller\x00', 0x8001, 0x0, &(0x7f00000003c0), 0x40f00, 0x51, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x0, 0x0, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[r1, r1, r1, r1, r1, r1, r1], &(0x7f0000000600)=[{0x3, 0x2, 0x3, 0x6}, {0x4, 0x4, 0x2, 0x9}, {0x1, 0x4, 0xf, 0x6}, {0x3, 0x4, 0xb, 0x5}], 0x10, 0x9, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0xfffffffffffffeb8, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d080207000000810000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40000) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xa000000, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001c000b63d25a80648c2594f91c24fc60", 0x14}], 0x1}, 0x0) kernel console output (not intermixed with test programs): idge0): Error: Slave device does not support XDP [ 464.186154][ T6389] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.686'. [ 464.311148][ T6387] bond0: (slave bond_slave_0): Releasing backup interface [ 464.829509][ T6392] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.687'. [ 465.160760][ T6416] netlink: 14585 bytes leftover after parsing attributes in process `syz.4.694'. [ 465.639523][ T6426] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.700'. [ 466.234692][ T6443] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.704'. [ 467.686245][ T4289] Bluetooth: hci0: command 0x0406 tx timeout [ 467.686259][ T4288] Bluetooth: hci3: command 0x0406 tx timeout [ 468.099252][ T4289] Bluetooth: hci2: command 0x0406 tx timeout [ 468.105386][ T4292] Bluetooth: hci1: command 0x0406 tx timeout [ 468.105399][ T4288] Bluetooth: hci4: command 0x0406 tx timeout [ 468.819958][ T6494] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.718'. [ 469.121314][ T6508] validate_nla: 4 callbacks suppressed [ 469.121338][ T6508] netlink: 'syz.2.722': attribute type 12 has an invalid length. [ 469.143891][ T6508] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.722'. [ 469.425967][ T6515] IPv6: Can't replace route, no match found [ 469.670871][ T6518] netlink: 'syz.2.727': attribute type 10 has an invalid length. [ 469.730481][ T6526] netlink: 'syz.4.732': attribute type 10 has an invalid length. [ 469.755655][ T6526] netlink: 40 bytes leftover after parsing attributes in process `syz.4.732'. [ 469.805953][ T6526] bridge0: port 3(ipvlan1) entered blocking state [ 469.844432][ T6526] bridge0: port 3(ipvlan1) entered disabled state [ 469.881585][ T6526] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 470.952460][ T6552] netlink: 'syz.1.740': attribute type 10 has an invalid length. [ 470.973146][ T6558] netlink: 'syz.4.741': attribute type 3 has an invalid length. [ 471.053288][ T6558] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.741'. [ 471.144484][ T6567] netlink: 'syz.3.754': attribute type 10 has an invalid length. [ 471.445506][ T6573] netlink: 'syz.1.747': attribute type 10 has an invalid length. [ 471.498458][ T6573] netlink: 40 bytes leftover after parsing attributes in process `syz.1.747'. [ 471.525293][ T6573] bridge0: port 3(ipvlan1) entered blocking state [ 471.532026][ T6573] bridge0: port 3(ipvlan1) entered disabled state [ 471.609683][ T6573] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 471.628319][ T6578] netlink: 'syz.2.751': attribute type 29 has an invalid length. [ 471.661352][ T6578] netlink: 'syz.2.751': attribute type 29 has an invalid length. [ 471.677580][ T6582] netlink: 'syz.2.751': attribute type 29 has an invalid length. [ 472.385469][ T6601] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.759'. [ 472.888054][ T6606] device wlan1 entered promiscuous mode [ 473.068152][ T6606] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 473.568965][ T6628] FAULT_INJECTION: forcing a failure. [ 473.568965][ T6628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.585383][ T6628] CPU: 0 PID: 6628 Comm: syz.4.770 Not tainted 6.1.131-syzkaller #0 [ 473.593518][ T6628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 473.603610][ T6628] Call Trace: [ 473.606918][ T6628] [ 473.609872][ T6628] dump_stack_lvl+0x1e3/0x2cb [ 473.614585][ T6628] ? nf_tcp_handle_invalid+0x647/0x647 [ 473.620079][ T6628] ? panic+0x764/0x764 [ 473.624191][ T6628] ? __lock_acquire+0x1f80/0x1f80 [ 473.629346][ T6628] ? __lock_acquire+0x125b/0x1f80 [ 473.634406][ T6628] should_fail_ex+0x3a6/0x4d0 [ 473.639117][ T6628] _copy_from_user+0x2b/0x170 [ 473.643831][ T6628] dev_ethtool+0xd6/0x1540 [ 473.648277][ T6628] ? ethtool_get_module_eeprom_call+0x180/0x180 [ 473.654547][ T6628] ? __lock_acquire+0x1f80/0x1f80 [ 473.659593][ T6628] ? __kmem_cache_free+0x25c/0x3c0 [ 473.664727][ T6628] ? full_name_hash+0x8f/0xe0 [ 473.669509][ T6628] ? dev_load+0x1d/0x1e0 [ 473.673767][ T6628] dev_ioctl+0x273/0xf70 [ 473.678026][ T6628] ? get_user_ifreq+0x167/0x1f0 [ 473.682887][ T6628] sock_do_ioctl+0x26b/0x450 [ 473.687493][ T6628] ? sock_show_fdinfo+0xb0/0xb0 [ 473.692371][ T6628] ? __fget_files+0x28/0x4a0 [ 473.696977][ T6628] sock_ioctl+0x484/0x770 [ 473.701320][ T6628] ? sock_poll+0x410/0x410 [ 473.705747][ T6628] ? __fget_files+0x28/0x4a0 [ 473.710347][ T6628] ? __fget_files+0x435/0x4a0 [ 473.715034][ T6628] ? __fget_files+0x28/0x4a0 [ 473.719640][ T6628] ? bpf_lsm_file_ioctl+0x5/0x10 [ 473.724588][ T6628] ? security_file_ioctl+0x7d/0xa0 [ 473.729710][ T6628] ? sock_poll+0x410/0x410 [ 473.734140][ T6628] __se_sys_ioctl+0xf1/0x160 [ 473.738742][ T6628] do_syscall_64+0x3b/0xb0 [ 473.743188][ T6628] ? clear_bhb_loop+0x45/0xa0 [ 473.747876][ T6628] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.753797][ T6628] RIP: 0033:0x7f0635b8d169 [ 473.758233][ T6628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.777869][ T6628] RSP: 002b:00007f063698c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 473.786295][ T6628] RAX: ffffffffffffffda RBX: 00007f0635da5fa0 RCX: 00007f0635b8d169 [ 473.794274][ T6628] RDX: 0000400000000080 RSI: 0000000000008946 RDI: 0000000000000038 [ 473.802252][ T6628] RBP: 00007f063698c090 R08: 0000000000000000 R09: 0000000000000000 [ 473.810232][ T6628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.818207][ T6628] R13: 0000000000000000 R14: 00007f0635da5fa0 R15: 00007ffc35b1f808 [ 473.826199][ T6628] [ 474.182014][ T6639] validate_nla: 5 callbacks suppressed [ 474.182037][ T6639] netlink: 'syz.3.775': attribute type 3 has an invalid length. [ 474.303968][ T6639] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.775'. [ 474.448920][ T6641] netlink: 'syz.0.776': attribute type 10 has an invalid length. [ 474.897551][ T6651] netlink: 'syz.4.780': attribute type 10 has an invalid length. [ 474.998706][ T6651] netlink: 40 bytes leftover after parsing attributes in process `syz.4.780'. [ 475.045178][ T6651] bridge0: port 3(ipvlan1) entered blocking state [ 475.093552][ T6651] bridge0: port 3(ipvlan1) entered disabled state [ 475.210480][ T6651] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 475.706517][ T6675] FAULT_INJECTION: forcing a failure. [ 475.706517][ T6675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.738809][ T6675] CPU: 0 PID: 6675 Comm: syz.0.789 Not tainted 6.1.131-syzkaller #0 [ 475.746903][ T6675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 475.756996][ T6675] Call Trace: [ 475.760306][ T6675] [ 475.763265][ T6675] dump_stack_lvl+0x1e3/0x2cb [ 475.767981][ T6675] ? nf_tcp_handle_invalid+0x647/0x647 [ 475.773487][ T6675] ? panic+0x764/0x764 [ 475.777598][ T6675] ? __lock_acquire+0x1f80/0x1f80 [ 475.782667][ T6675] ? __lock_acquire+0x125b/0x1f80 [ 475.787738][ T6675] should_fail_ex+0x3a6/0x4d0 [ 475.792474][ T6675] _copy_from_user+0x2b/0x170 [ 475.797224][ T6675] kstrtouint_from_user+0xc2/0x180 [ 475.802389][ T6675] ? kstrtol_from_user+0x180/0x180 [ 475.807580][ T6675] ? read_lock_is_recursive+0x10/0x10 [ 475.813099][ T6675] proc_fail_nth_write+0xa6/0x290 [ 475.818168][ T6675] ? rcu_read_lock_bh_held+0x110/0x110 [ 475.823669][ T6675] ? proc_fail_nth_read+0x210/0x210 [ 475.828908][ T6675] ? proc_fail_nth_read+0x210/0x210 [ 475.834149][ T6675] vfs_write+0x2d9/0xbc0 [ 475.838687][ T6675] ? file_end_write+0x250/0x250 [ 475.843565][ T6675] ? __fget_files+0x28/0x4a0 [ 475.848200][ T6675] ? __fget_files+0x435/0x4a0 [ 475.852957][ T6675] ? __fdget_pos+0x2ba/0x360 [ 475.857588][ T6675] ? ksys_write+0x77/0x2c0 [ 475.862118][ T6675] ksys_write+0x19c/0x2c0 [ 475.866475][ T6675] ? print_irqtrace_events+0x210/0x210 [ 475.871977][ T6675] ? __ia32_sys_read+0x80/0x80 [ 475.876768][ T6675] ? syscall_enter_from_user_mode+0x2e/0x230 [ 475.882776][ T6675] ? lockdep_hardirqs_on+0x94/0x130 [ 475.888097][ T6675] ? syscall_enter_from_user_mode+0x2e/0x230 [ 475.894120][ T6675] do_syscall_64+0x3b/0xb0 [ 475.898578][ T6675] ? clear_bhb_loop+0x45/0xa0 [ 475.903313][ T6675] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 475.909554][ T6675] RIP: 0033:0x7fcac678bc1f [ 475.914957][ T6675] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 475.936508][ T6675] RSP: 002b:00007fcac75ec030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 475.944955][ T6675] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcac678bc1f [ 475.952961][ T6675] RDX: 0000000000000001 RSI: 00007fcac75ec0a0 RDI: 0000000000000016 [ 475.960973][ T6675] RBP: 00007fcac75ec090 R08: 0000000000000000 R09: 0000000000000000 [ 475.969095][ T6675] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 475.977097][ T6675] R13: 0000000000000000 R14: 00007fcac69a6080 R15: 00007fffc3d670d8 [ 475.985124][ T6675] [ 476.031983][ T6680] netlink: 'syz.4.792': attribute type 3 has an invalid length. [ 476.041351][ T6680] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.792'. [ 476.568072][ T6689] netlink: 'syz.4.794': attribute type 17 has an invalid length. [ 476.639545][ T6689] netlink: 148 bytes leftover after parsing attributes in process `syz.4.794'. [ 477.824436][ T6716] netlink: 'syz.3.803': attribute type 10 has an invalid length. [ 478.772945][ T6751] netlink: 'syz.4.818': attribute type 10 has an invalid length. [ 478.814961][ T6751] netlink: 40 bytes leftover after parsing attributes in process `syz.4.818'. [ 478.834484][ T6751] bridge0: port 3(ipvlan1) entered blocking state [ 478.844969][ T6751] bridge0: port 3(ipvlan1) entered disabled state [ 478.871763][ T6751] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 478.924090][ T6755] netlink: 'syz.1.819': attribute type 10 has an invalid length. [ 478.937865][ T6755] netlink: 40 bytes leftover after parsing attributes in process `syz.1.819'. [ 478.959173][ T6755] bridge0: port 3(ipvlan1) entered blocking state [ 479.022565][ T6755] bridge0: port 3(ipvlan1) entered disabled state [ 479.087816][ T6755] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 479.160212][ T6758] netlink: 'syz.2.822': attribute type 16 has an invalid length. [ 479.184075][ T6760] netlink: 'syz.4.821': attribute type 10 has an invalid length. [ 479.190549][ T6758] netlink: 'syz.2.822': attribute type 3 has an invalid length. [ 479.224356][ T6758] netlink: 132 bytes leftover after parsing attributes in process `syz.2.822'. [ 480.760139][ T6788] netlink: 'syz.3.834': attribute type 10 has an invalid length. [ 480.810293][ T6788] netlink: 40 bytes leftover after parsing attributes in process `syz.3.834'. [ 480.868326][ T6788] bridge0: port 3(ipvlan1) entered blocking state [ 480.933101][ T6788] bridge0: port 3(ipvlan1) entered disabled state [ 481.014360][ T6788] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 481.225031][ T6798] netlink: 'syz.2.837': attribute type 10 has an invalid length. [ 481.636100][ T6804] FAULT_INJECTION: forcing a failure. [ 481.636100][ T6804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.658527][ T6804] CPU: 1 PID: 6804 Comm: syz.2.839 Not tainted 6.1.131-syzkaller #0 [ 481.666617][ T6804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 481.676719][ T6804] Call Trace: [ 481.680031][ T6804] [ 481.682991][ T6804] dump_stack_lvl+0x1e3/0x2cb [ 481.687726][ T6804] ? nf_tcp_handle_invalid+0x647/0x647 [ 481.693224][ T6804] ? panic+0x764/0x764 [ 481.697347][ T6804] ? __lock_acquire+0x1f80/0x1f80 [ 481.702416][ T6804] ? __lock_acquire+0x125b/0x1f80 [ 481.707584][ T6804] should_fail_ex+0x3a6/0x4d0 [ 481.712325][ T6804] _copy_from_user+0x2b/0x170 [ 481.717044][ T6804] dev_ethtool+0xd6/0x1540 [ 481.721507][ T6804] ? print_irqtrace_events+0x210/0x210 [ 481.727015][ T6804] ? ethtool_get_module_eeprom_call+0x180/0x180 [ 481.733302][ T6804] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 481.739676][ T6804] ? lockdep_hardirqs_on+0x94/0x130 [ 481.745181][ T6804] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 481.751382][ T6804] ? dev_load+0x15e/0x1e0 [ 481.755764][ T6804] dev_ioctl+0x273/0xf70 [ 481.760046][ T6804] ? get_user_ifreq+0x167/0x1f0 [ 481.764939][ T6804] sock_do_ioctl+0x26b/0x450 [ 481.769553][ T6804] ? sock_show_fdinfo+0xb0/0xb0 [ 481.774421][ T6804] ? __fget_files+0x28/0x4a0 [ 481.779036][ T6804] sock_ioctl+0x484/0x770 [ 481.783377][ T6804] ? sock_poll+0x410/0x410 [ 481.787804][ T6804] ? __fget_files+0x28/0x4a0 [ 481.792402][ T6804] ? __fget_files+0x435/0x4a0 [ 481.797094][ T6804] ? __fget_files+0x28/0x4a0 [ 481.801709][ T6804] ? bpf_lsm_file_ioctl+0x5/0x10 [ 481.806669][ T6804] ? security_file_ioctl+0x7d/0xa0 [ 481.811795][ T6804] ? sock_poll+0x410/0x410 [ 481.816224][ T6804] __se_sys_ioctl+0xf1/0x160 [ 481.820838][ T6804] do_syscall_64+0x3b/0xb0 [ 481.825263][ T6804] ? clear_bhb_loop+0x45/0xa0 [ 481.829953][ T6804] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 481.835859][ T6804] RIP: 0033:0x7fc3a1b8d169 [ 481.840283][ T6804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.860003][ T6804] RSP: 002b:00007fc3a29ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 481.868428][ T6804] RAX: ffffffffffffffda RBX: 00007fc3a1da5fa0 RCX: 00007fc3a1b8d169 [ 481.876407][ T6804] RDX: 0000400000000080 RSI: 0000000000008946 RDI: 000000000000002f [ 481.884385][ T6804] RBP: 00007fc3a29ff090 R08: 0000000000000000 R09: 0000000000000000 [ 481.892362][ T6804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.900336][ T6804] R13: 0000000000000000 R14: 00007fc3a1da5fa0 R15: 00007ffe0b268e48 [ 481.908331][ T6804] [ 482.463504][ T6829] netlink: 'syz.4.849': attribute type 10 has an invalid length. [ 482.546166][ T6829] netlink: 40 bytes leftover after parsing attributes in process `syz.4.849'. [ 482.588688][ T6829] bridge0: port 3(ipvlan1) entered blocking state [ 482.637935][ T6829] bridge0: port 3(ipvlan1) entered disabled state [ 482.661069][ T6829] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 482.745939][ T6833] netlink: 'syz.1.850': attribute type 10 has an invalid length. [ 482.995695][ T3622] udevd[3622]: worker [4266] terminated by signal 33 (Unknown signal 33) [ 483.055458][ T3622] udevd[3622]: worker [4266] failed while handling '/devices/virtual/block/loop3' [ 483.126638][ T3622] udevd[3622]: worker [4264] terminated by signal 33 (Unknown signal 33) [ 483.155952][ T3622] udevd[3622]: worker [4264] failed while handling '/devices/virtual/block/loop4' [ 483.309964][ T6851] netlink: 'syz.0.857': attribute type 4 has an invalid length. [ 483.681918][ T6860] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 483.865571][ T6860] device syzkaller0 entered promiscuous mode [ 483.886983][ T6864] netlink: 'syz.1.863': attribute type 10 has an invalid length. [ 486.588772][ T6884] netlink: 'syz.1.867': attribute type 10 has an invalid length. [ 486.596777][ T6884] netlink: 40 bytes leftover after parsing attributes in process `syz.1.867'. [ 486.605832][ T6884] bridge0: port 3(ipvlan1) entered blocking state [ 486.612481][ T6884] bridge0: port 3(ipvlan1) entered disabled state [ 486.620474][ T6884] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 486.994893][ T6902] netlink: 'syz.0.875': attribute type 10 has an invalid length. [ 487.278436][ T6917] netlink: 'syz.0.882': attribute type 10 has an invalid length. [ 487.314733][ T6917] netlink: 40 bytes leftover after parsing attributes in process `syz.0.882'. [ 487.341166][ T6917] bridge0: port 3(ipvlan1) entered blocking state [ 487.364086][ T6917] bridge0: port 3(ipvlan1) entered disabled state [ 487.380065][ T6917] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 487.413047][ T6924] FAULT_INJECTION: forcing a failure. [ 487.413047][ T6924] name failslab, interval 1, probability 0, space 0, times 0 [ 487.451851][ T6924] CPU: 0 PID: 6924 Comm: syz.2.885 Not tainted 6.1.131-syzkaller #0 [ 487.460070][ T6924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 487.470300][ T6924] Call Trace: [ 487.473802][ T6924] [ 487.476865][ T6924] dump_stack_lvl+0x1e3/0x2cb [ 487.481876][ T6924] ? nf_tcp_handle_invalid+0x647/0x647 [ 487.487753][ T6924] ? panic+0x764/0x764 [ 487.492066][ T6924] ? __might_sleep+0xb0/0xb0 [ 487.496774][ T6924] should_fail_ex+0x3a6/0x4d0 [ 487.501539][ T6924] should_failslab+0x5/0x20 [ 487.506313][ T6924] slab_pre_alloc_hook+0x59/0x300 [ 487.511423][ T6924] ? alloc_fd+0x5a0/0x640 [ 487.515823][ T6924] kmem_cache_alloc_lru+0x4a/0x2d0 [ 487.521282][ T6924] ? __d_alloc+0x31/0x760 [ 487.525958][ T6924] __d_alloc+0x31/0x760 [ 487.530533][ T6924] ? __lock_acquire+0x1f80/0x1f80 [ 487.536060][ T6924] ? do_raw_spin_lock+0x14a/0x370 [ 487.541221][ T6924] d_alloc_pseudo+0x19/0x70 [ 487.545792][ T6924] alloc_file_pseudo+0x131/0x2f0 [ 487.550868][ T6924] ? do_raw_spin_unlock+0x137/0x8a0 [ 487.556297][ T6924] ? alloc_empty_file_noaccount+0x80/0x80 [ 487.562169][ T6924] ? alloc_fd+0x5a0/0x640 [ 487.566683][ T6924] anon_inode_getfd+0xca/0x1e0 [ 487.572107][ T6924] map_create+0x9b1/0xd20 [ 487.576573][ T6924] ? bpf_lsm_bpf+0x5/0x10 [ 487.581110][ T6924] ? security_bpf+0x7d/0xa0 [ 487.585670][ T6924] __sys_bpf+0x2d3/0x6c0 [ 487.589985][ T6924] ? __fget_files+0x435/0x4a0 [ 487.594863][ T6924] ? bpf_link_show_fdinfo+0x300/0x300 [ 487.600429][ T6924] ? print_irqtrace_events+0x210/0x210 [ 487.605948][ T6924] ? print_irqtrace_events+0x210/0x210 [ 487.611480][ T6924] ? syscall_enter_from_user_mode+0x2e/0x230 [ 487.617505][ T6924] ? lockdep_hardirqs_on+0x94/0x130 [ 487.622866][ T6924] __x64_sys_bpf+0x78/0x90 [ 487.627362][ T6924] do_syscall_64+0x3b/0xb0 [ 487.631845][ T6924] ? clear_bhb_loop+0x45/0xa0 [ 487.636566][ T6924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 487.642483][ T6924] RIP: 0033:0x7fc3a1b8d169 [ 487.646916][ T6924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.666603][ T6924] RSP: 002b:00007fc3a29ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 487.675124][ T6924] RAX: ffffffffffffffda RBX: 00007fc3a1da5fa0 RCX: 00007fc3a1b8d169 [ 487.683107][ T6924] RDX: 0000000000000050 RSI: 0000400000000100 RDI: 0000000000000000 [ 487.691180][ T6924] RBP: 00007fc3a29ff090 R08: 0000000000000000 R09: 0000000000000000 [ 487.699168][ T6924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.707182][ T6924] R13: 0000000000000000 R14: 00007fc3a1da5fa0 R15: 00007ffe0b268e48 [ 487.715206][ T6924] [ 488.569784][ T6963] netlink: 'syz.4.898': attribute type 10 has an invalid length. [ 488.591173][ T6963] netlink: 40 bytes leftover after parsing attributes in process `syz.4.898'. [ 488.644378][ T6963] bridge0: port 3(ipvlan1) entered blocking state [ 488.684168][ T6963] bridge0: port 3(ipvlan1) entered disabled state [ 488.707242][ T6963] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 489.621587][ T6997] netlink: 'syz.2.911': attribute type 12 has an invalid length. [ 489.654572][ T6997] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.911'. [ 490.172522][ T7008] FAULT_INJECTION: forcing a failure. [ 490.172522][ T7008] name failslab, interval 1, probability 0, space 0, times 0 [ 490.203126][ T7008] CPU: 1 PID: 7008 Comm: syz.2.915 Not tainted 6.1.131-syzkaller #0 [ 490.211188][ T7008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 490.221270][ T7008] Call Trace: [ 490.224570][ T7008] [ 490.227522][ T7008] dump_stack_lvl+0x1e3/0x2cb [ 490.232253][ T7008] ? nf_tcp_handle_invalid+0x647/0x647 [ 490.237761][ T7008] ? panic+0x764/0x764 [ 490.241878][ T7008] ? ___ratelimit+0x1/0x670 [ 490.246417][ T7008] should_fail_ex+0x3a6/0x4d0 [ 490.251148][ T7008] should_failslab+0x5/0x20 [ 490.255686][ T7008] slab_pre_alloc_hook+0x59/0x300 [ 490.260758][ T7008] ? bpf_test_init+0xc3/0x160 [ 490.265474][ T7008] __kmem_cache_alloc_node+0x47/0x260 [ 490.270887][ T7008] ? bpf_test_init+0xc3/0x160 [ 490.275606][ T7008] __kmalloc+0xa1/0x230 [ 490.279798][ T7008] ? perf_trace_preemptirq_template+0xf4/0x3d0 [ 490.285999][ T7008] bpf_test_init+0xc3/0x160 [ 490.290547][ T7008] bpf_prog_test_run_skb+0x297/0x13a0 [ 490.296054][ T7008] ? print_irqtrace_events+0x210/0x210 [ 490.301574][ T7008] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 490.307774][ T7008] ? cpu_online+0xb0/0xb0 [ 490.312152][ T7008] ? cpu_online+0xb0/0xb0 [ 490.316519][ T7008] bpf_prog_test_run+0x32f/0x3a0 [ 490.321497][ T7008] __sys_bpf+0x3eb/0x6c0 [ 490.325767][ T7008] ? ktime_get+0x242/0x270 [ 490.330220][ T7008] ? bpf_link_show_fdinfo+0x300/0x300 [ 490.335708][ T7008] ? perf_trace_preemptirq_template+0xf4/0x3d0 [ 490.341934][ T7008] ? print_irqtrace_events+0x210/0x210 [ 490.347440][ T7008] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 490.353471][ T7008] ? syscall_enter_from_user_mode+0x2e/0x230 [ 490.359527][ T7008] ? lockdep_hardirqs_on+0x94/0x130 [ 490.364776][ T7008] __x64_sys_bpf+0x78/0x90 [ 490.369238][ T7008] do_syscall_64+0x3b/0xb0 [ 490.373684][ T7008] ? clear_bhb_loop+0x45/0xa0 [ 490.378399][ T7008] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.384325][ T7008] RIP: 0033:0x7fc3a1b8d169 [ 490.388771][ T7008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.408498][ T7008] RSP: 002b:00007fc3a29ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 490.416954][ T7008] RAX: ffffffffffffffda RBX: 00007fc3a1da5fa0 RCX: 00007fc3a1b8d169 [ 490.424969][ T7008] RDX: 0000000000000048 RSI: 0000400000000080 RDI: 000000000000000a [ 490.432966][ T7008] RBP: 00007fc3a29ff090 R08: 0000000000000000 R09: 0000000000000000 [ 490.440971][ T7008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.448972][ T7008] R13: 0000000000000000 R14: 00007fc3a1da5fa0 R15: 00007ffe0b268e48 [ 490.456990][ T7008] [ 490.550343][ T7010] netlink: 'syz.0.916': attribute type 10 has an invalid length. [ 490.561922][ T7010] netlink: 40 bytes leftover after parsing attributes in process `syz.0.916'. [ 490.571899][ T7010] bridge0: port 3(ipvlan1) entered blocking state [ 490.578879][ T7010] bridge0: port 3(ipvlan1) entered disabled state [ 490.587966][ T7010] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 490.817814][ T7018] netlink: 'syz.1.918': attribute type 10 has an invalid length. [ 490.988968][ T7028] FAULT_INJECTION: forcing a failure. [ 490.988968][ T7028] name failslab, interval 1, probability 0, space 0, times 0 [ 491.101967][ T7028] CPU: 1 PID: 7028 Comm: syz.4.922 Not tainted 6.1.131-syzkaller #0 [ 491.110034][ T7028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 491.120138][ T7028] Call Trace: [ 491.123458][ T7028] [ 491.126436][ T7028] dump_stack_lvl+0x1e3/0x2cb [ 491.131172][ T7028] ? nf_tcp_handle_invalid+0x647/0x647 [ 491.136695][ T7028] ? panic+0x764/0x764 [ 491.140835][ T7028] ? __might_sleep+0xb0/0xb0 [ 491.145475][ T7028] ? __lock_acquire+0x125b/0x1f80 [ 491.150579][ T7028] should_fail_ex+0x3a6/0x4d0 [ 491.155342][ T7028] should_failslab+0x5/0x20 [ 491.159911][ T7028] slab_pre_alloc_hook+0x59/0x300 [ 491.165010][ T7028] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 491.170799][ T7028] __kmem_cache_alloc_node+0x47/0x260 [ 491.176015][ T7036] netlink: 'syz.3.925': attribute type 12 has an invalid length. [ 491.176219][ T7028] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 491.189707][ T7028] __kmalloc+0xa1/0x230 [ 491.193928][ T7028] ? rcu_is_watching+0x11/0xb0 [ 491.197709][ T7036] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.925'. [ 491.198723][ T7028] tomoyo_realpath_from_path+0xcb/0x5d0 [ 491.198790][ T7028] tomoyo_path_number_perm+0x21f/0x7f0 [ 491.218960][ T7028] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 491.224663][ T7028] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 491.230222][ T7028] ? __fget_files+0x28/0x4a0 [ 491.234910][ T7028] ? __fget_files+0x28/0x4a0 [ 491.239563][ T7028] ? __fget_files+0x435/0x4a0 [ 491.244303][ T7028] ? __fget_files+0x28/0x4a0 [ 491.248966][ T7028] security_file_ioctl+0x6d/0xa0 [ 491.253973][ T7028] __se_sys_ioctl+0x47/0x160 [ 491.258634][ T7028] do_syscall_64+0x3b/0xb0 [ 491.263132][ T7028] ? clear_bhb_loop+0x45/0xa0 [ 491.267872][ T7028] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 491.273818][ T7028] RIP: 0033:0x7f0635b8d169 [ 491.278273][ T7028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.297930][ T7028] RSP: 002b:00007f063698c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 491.306401][ T7028] RAX: ffffffffffffffda RBX: 00007f0635da5fa0 RCX: 00007f0635b8d169 [ 491.314433][ T7028] RDX: 0000000000000000 RSI: 0000000080047441 RDI: 0000000000000003 [ 491.322458][ T7028] RBP: 00007f063698c090 R08: 0000000000000000 R09: 0000000000000000 [ 491.330565][ T7028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.338575][ T7028] R13: 0000000000000000 R14: 00007f0635da5fa0 R15: 00007ffc35b1f808 [ 491.346629][ T7028] [ 491.360979][ T7028] ERROR: Out of memory at tomoyo_realpath_from_path. [ 492.306323][ T7051] netlink: 132 bytes leftover after parsing attributes in process `syz.3.930'. [ 492.489701][ T7059] netlink: 'syz.1.932': attribute type 10 has an invalid length. [ 492.504372][ T7059] netlink: 40 bytes leftover after parsing attributes in process `syz.1.932'. [ 492.513600][ T7059] bridge0: port 3(ipvlan1) entered blocking state [ 492.521131][ T7059] bridge0: port 3(ipvlan1) entered disabled state [ 492.532163][ T7059] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 492.557498][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.931'. [ 492.981019][ T7080] netlink: 132 bytes leftover after parsing attributes in process `syz.3.939'. [ 493.810157][ T7100] netlink: 'syz.4.948': attribute type 10 has an invalid length. [ 493.818359][ T7100] netlink: 40 bytes leftover after parsing attributes in process `syz.4.948'. [ 493.828179][ T7100] bridge0: port 3(ipvlan1) entered blocking state [ 493.835644][ T7100] bridge0: port 3(ipvlan1) entered disabled state [ 493.845134][ T7100] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 494.983083][ T7137] netlink: 'syz.1.960': attribute type 10 has an invalid length. [ 495.128734][ T7139] netlink: 'syz.0.962': attribute type 10 has an invalid length. [ 495.149674][ T7139] netlink: 40 bytes leftover after parsing attributes in process `syz.0.962'. [ 495.162808][ T7139] bridge0: port 3(ipvlan1) entered blocking state [ 495.195045][ T7139] bridge0: port 3(ipvlan1) entered disabled state [ 495.216975][ T7139] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 496.983330][ T7178] netlink: 'syz.2.978': attribute type 10 has an invalid length. [ 496.991468][ T7178] netlink: 40 bytes leftover after parsing attributes in process `syz.2.978'. [ 497.003018][ T7178] bridge0: port 3(ipvlan1) entered blocking state [ 497.009871][ T7178] bridge0: port 3(ipvlan1) entered disabled state [ 497.019205][ T7178] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 497.035441][ T7170] netlink: 'syz.3.974': attribute type 10 has an invalid length. [ 497.319002][ T7198] FAULT_INJECTION: forcing a failure. [ 497.319002][ T7198] name failslab, interval 1, probability 0, space 0, times 0 [ 497.343559][ T7198] CPU: 1 PID: 7198 Comm: syz.3.986 Not tainted 6.1.131-syzkaller #0 [ 497.351792][ T7198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 497.361897][ T7198] Call Trace: [ 497.365213][ T7198] [ 497.368188][ T7198] dump_stack_lvl+0x1e3/0x2cb [ 497.372907][ T7198] ? nf_tcp_handle_invalid+0x647/0x647 [ 497.378408][ T7198] ? panic+0x764/0x764 [ 497.382528][ T7198] should_fail_ex+0x3a6/0x4d0 [ 497.387255][ T7198] should_failslab+0x5/0x20 [ 497.391793][ T7198] slab_pre_alloc_hook+0x59/0x300 [ 497.396856][ T7198] ? bpf_prog_alloc+0x1c/0x1b0 [ 497.401659][ T7198] ? bpf_prog_load+0x84a/0x1bf0 [ 497.406536][ T7198] ? __sys_bpf+0x382/0x6c0 [ 497.410988][ T7198] kmem_cache_alloc_node+0x52/0x310 [ 497.416225][ T7198] ? alloc_vmap_area+0x1bb/0x1ac0 [ 497.421294][ T7198] alloc_vmap_area+0x1bb/0x1ac0 [ 497.426214][ T7198] ? vm_map_ram+0xb20/0xb20 [ 497.430764][ T7198] __get_vm_area_node+0x16c/0x360 [ 497.435845][ T7198] __vmalloc_node_range+0x37d/0x14b0 [ 497.441170][ T7198] ? bpf_prog_alloc_no_stats+0x34/0x3f0 [ 497.446957][ T7198] ? free_vm_area+0x50/0x50 [ 497.451511][ T7198] ? end_current_label_crit_section+0x170/0x170 [ 497.457815][ T7198] ? bpf_prog_alloc_no_stats+0x34/0x3f0 [ 497.463407][ T7198] __vmalloc+0x75/0x80 [ 497.467510][ T7198] ? bpf_prog_alloc_no_stats+0x34/0x3f0 [ 497.473088][ T7198] bpf_prog_alloc_no_stats+0x34/0x3f0 [ 497.478495][ T7198] ? bpf_prog_alloc+0x13/0x1b0 [ 497.483296][ T7198] bpf_prog_alloc+0x1c/0x1b0 [ 497.487927][ T7198] bpf_prog_load+0x84a/0x1bf0 [ 497.492651][ T7198] ? map_freeze+0x390/0x390 [ 497.497183][ T7198] ? __might_fault+0xa1/0x110 [ 497.501908][ T7198] ? __might_fault+0xbd/0x110 [ 497.506619][ T7198] ? bpf_lsm_bpf+0x5/0x10 [ 497.510983][ T7198] ? security_bpf+0x7d/0xa0 [ 497.515523][ T7198] __sys_bpf+0x382/0x6c0 [ 497.519793][ T7198] ? __fget_files+0x435/0x4a0 [ 497.524509][ T7198] ? bpf_link_show_fdinfo+0x300/0x300 [ 497.529940][ T7198] ? print_irqtrace_events+0x210/0x210 [ 497.535440][ T7198] ? print_irqtrace_events+0x210/0x210 [ 497.540947][ T7198] ? syscall_enter_from_user_mode+0x2e/0x230 [ 497.546967][ T7198] ? lockdep_hardirqs_on+0x94/0x130 [ 497.552203][ T7198] __x64_sys_bpf+0x78/0x90 [ 497.556662][ T7198] do_syscall_64+0x3b/0xb0 [ 497.561208][ T7198] ? clear_bhb_loop+0x45/0xa0 [ 497.565926][ T7198] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 497.571855][ T7198] RIP: 0033:0x7ff10118d169 [ 497.576301][ T7198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.596020][ T7198] RSP: 002b:00007ff101fdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 497.604464][ T7198] RAX: ffffffffffffffda RBX: 00007ff1013a5fa0 RCX: 00007ff10118d169 [ 497.612465][ T7198] RDX: 0000000000000094 RSI: 0000400000000080 RDI: 0000000000000005 [ 497.620488][ T7198] RBP: 00007ff101fdf090 R08: 0000000000000000 R09: 0000000000000000 [ 497.628498][ T7198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.636502][ T7198] R13: 0000000000000000 R14: 00007ff1013a5fa0 R15: 00007ffd71385578 [ 497.644525][ T7198] [ 497.684031][ T7194] netlink: 132 bytes leftover after parsing attributes in process `syz.1.983'. [ 497.706819][ T7198] syz.3.986: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 497.737362][ T7198] CPU: 0 PID: 7198 Comm: syz.3.986 Not tainted 6.1.131-syzkaller #0 [ 497.745421][ T7198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 497.755520][ T7198] Call Trace: [ 497.758825][ T7198] [ 497.761778][ T7198] dump_stack_lvl+0x1e3/0x2cb [ 497.766493][ T7198] ? nf_tcp_handle_invalid+0x647/0x647 [ 497.771983][ T7198] ? panic+0x764/0x764 [ 497.776267][ T7198] ? cpuset_print_current_mems_allowed+0x1b/0x350 [ 497.782721][ T7198] ? cpuset_print_current_mems_allowed+0x30f/0x350 [ 497.789275][ T7198] warn_alloc+0x26f/0x400 [ 497.793644][ T7198] ? zone_watermark_ok_safe+0x270/0x270 [ 497.799227][ T7198] ? __get_vm_area_node+0x182/0x360 [ 497.804471][ T7198] ? __get_vm_area_node+0x182/0x360 [ 497.809750][ T7198] __vmalloc_node_range+0x3a2/0x14b0 [ 497.815065][ T7198] ? free_vm_area+0x50/0x50 [ 497.819586][ T7198] ? end_current_label_crit_section+0x170/0x170 [ 497.825849][ T7198] ? bpf_prog_alloc_no_stats+0x34/0x3f0 [ 497.831403][ T7198] __vmalloc+0x75/0x80 [ 497.835476][ T7198] ? bpf_prog_alloc_no_stats+0x34/0x3f0 [ 497.841029][ T7198] bpf_prog_alloc_no_stats+0x34/0x3f0 [ 497.846405][ T7198] ? bpf_prog_alloc+0x13/0x1b0 [ 497.851181][ T7198] bpf_prog_alloc+0x1c/0x1b0 [ 497.855779][ T7198] bpf_prog_load+0x84a/0x1bf0 [ 497.860475][ T7198] ? map_freeze+0x390/0x390 [ 497.864987][ T7198] ? __might_fault+0xa1/0x110 [ 497.869687][ T7198] ? __might_fault+0xbd/0x110 [ 497.874383][ T7198] ? bpf_lsm_bpf+0x5/0x10 [ 497.878719][ T7198] ? security_bpf+0x7d/0xa0 [ 497.883238][ T7198] __sys_bpf+0x382/0x6c0 [ 497.887486][ T7198] ? __fget_files+0x435/0x4a0 [ 497.892173][ T7198] ? bpf_link_show_fdinfo+0x300/0x300 [ 497.897559][ T7198] ? print_irqtrace_events+0x210/0x210 [ 497.903031][ T7198] ? print_irqtrace_events+0x210/0x210 [ 497.908506][ T7198] ? syscall_enter_from_user_mode+0x2e/0x230 [ 497.914530][ T7198] ? lockdep_hardirqs_on+0x94/0x130 [ 497.919752][ T7198] __x64_sys_bpf+0x78/0x90 [ 497.924182][ T7198] do_syscall_64+0x3b/0xb0 [ 497.928601][ T7198] ? clear_bhb_loop+0x45/0xa0 [ 497.933300][ T7198] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 497.939202][ T7198] RIP: 0033:0x7ff10118d169 [ 497.943623][ T7198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.963345][ T7198] RSP: 002b:00007ff101fdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 497.971774][ T7198] RAX: ffffffffffffffda RBX: 00007ff1013a5fa0 RCX: 00007ff10118d169 [ 497.979753][ T7198] RDX: 0000000000000094 RSI: 0000400000000080 RDI: 0000000000000005 [ 497.987734][ T7198] RBP: 00007ff101fdf090 R08: 0000000000000000 R09: 0000000000000000 [ 497.995717][ T7198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.003700][ T7198] R13: 0000000000000000 R14: 00007ff1013a5fa0 R15: 00007ffd71385578 [ 498.011696][ T7198] [ 498.043709][ T7198] Mem-Info: [ 498.047242][ T7198] active_anon:5897 inactive_anon:0 isolated_anon:0 [ 498.047242][ T7198] active_file:18518 inactive_file:38360 isolated_file:0 [ 498.047242][ T7198] unevictable:768 dirty:100 writeback:0 [ 498.047242][ T7198] slab_reclaimable:20865 slab_unreclaimable:97471 [ 498.047242][ T7198] mapped:29212 shmem:1410 pagetables:520 [ 498.047242][ T7198] sec_pagetables:0 bounce:0 [ 498.047242][ T7198] kernel_misc_reclaimable:0 [ 498.047242][ T7198] free:1324441 free_pcp:9075 free_cma:0 [ 498.096071][ T7198] Node 0 active_anon:23588kB inactive_anon:0kB active_file:74072kB inactive_file:153364kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116748kB dirty:400kB writeback:0kB shmem:4104kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10228kB pagetables:2180kB sec_pagetables:0kB all_unreclaimable? no [ 498.136300][ T7198] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 498.192504][ T7198] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 498.263800][ T7198] lowmem_reserve[]: 0 2519 2519 2519 2519 [ 498.294972][ T7198] Node 0 DMA32 free:1376788kB boost:0kB min:34628kB low:43284kB high:51940kB reserved_highatomic:0KB active_anon:23788kB inactive_anon:0kB active_file:74072kB inactive_file:153364kB unevictable:1536kB writepending:400kB present:3129332kB managed:2585164kB mlocked:0kB bounce:0kB free_pcp:17584kB local_pcp:8748kB free_cma:0kB [ 498.423890][ T7198] lowmem_reserve[]: 0 0 0 0 0 [ 498.428872][ T7198] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 498.502382][ T7198] lowmem_reserve[]: 0 0 0 0 0 [ 498.507458][ T7198] Node 1 Normal free:3905364kB boost:0kB min:55268kB low:69084kB high:82900kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:18624kB local_pcp:12672kB free_cma:0kB [ 498.538492][ T7218] netlink: 'syz.4.992': attribute type 10 has an invalid length. [ 498.585151][ T7198] lowmem_reserve[]: 0 0 0 0 0 [ 498.694038][ T7198] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 498.755388][ T7198] Node 0 DMA32: 819*4kB (UM) 1229*8kB (UME) 1588*16kB (UM) 2071*32kB (UME) 1039*64kB (UME) 238*128kB (UME) 102*256kB (UME) 24*512kB (UM) 12*1024kB (UME) 5*2048kB (UM) 272*4096kB (M) = 1376788kB [ 498.803729][ T7198] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 498.846729][ T7198] Node 1 Normal: 253*4kB (UME) 56*8kB (UME) 36*16kB (UME) 45*32kB (UME) 25*64kB (UME) 17*128kB (UME) 5*256kB (UM) 3*512kB (UME) 0*1024kB 2*2048kB (UE) 950*4096kB (M) = 3905364kB [ 498.869772][ T7198] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 498.879978][ T7198] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 498.895271][ T7198] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 498.924568][ T7198] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 498.943883][ T7198] 58290 total pagecache pages [ 498.948616][ T7198] 0 pages in swap cache [ 498.952796][ T7198] Free swap = 124996kB [ 498.964353][ T7198] Total swap = 124996kB [ 498.968654][ T7198] 2097051 pages RAM [ 498.972522][ T7198] 0 pages HighMem/MovableOnly [ 498.977382][ T7198] 417415 pages reserved [ 499.007694][ T7198] 0 pages cma reserved [ 499.168505][ T7228] device sit0 left promiscuous mode [ 500.421578][ T7264] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1010'. [ 501.449511][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.455993][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.864297][ T7299] device wg2 entered promiscuous mode [ 502.776126][ T7328] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1035'. [ 504.370132][ T7371] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1048'. [ 504.386121][ T7369] netlink: 'syz.2.1051': attribute type 10 has an invalid length. [ 504.405578][ T7369] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1051'. [ 504.424438][ T7369] bridge0: port 3(ipvlan1) entered blocking state [ 504.441570][ T7369] bridge0: port 3(ipvlan1) entered disabled state [ 504.471690][ T7369] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 505.245142][ T7405] FAULT_INJECTION: forcing a failure. [ 505.245142][ T7405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.264810][ T7405] CPU: 0 PID: 7405 Comm: syz.3.1065 Not tainted 6.1.131-syzkaller #0 [ 505.272949][ T7405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 505.283045][ T7405] Call Trace: [ 505.286359][ T7405] [ 505.289324][ T7405] dump_stack_lvl+0x1e3/0x2cb [ 505.294056][ T7405] ? nf_tcp_handle_invalid+0x647/0x647 [ 505.299558][ T7405] ? panic+0x764/0x764 [ 505.303680][ T7405] ? snprintf+0xd6/0x120 [ 505.307972][ T7405] should_fail_ex+0x3a6/0x4d0 [ 505.312703][ T7405] _copy_to_user+0x2b/0x130 [ 505.317269][ T7405] simple_read_from_buffer+0xc6/0x150 [ 505.322781][ T7405] proc_fail_nth_read+0x1a3/0x210 [ 505.327860][ T7405] ? proc_fault_inject_write+0x390/0x390 [ 505.333555][ T7405] ? fsnotify_perm+0x439/0x590 [ 505.338372][ T7405] ? proc_fault_inject_write+0x390/0x390 [ 505.344066][ T7405] vfs_read+0x2ed/0xbf0 [ 505.348271][ T7405] ? __fdget_pos+0x2ba/0x360 [ 505.352911][ T7405] ? kernel_read+0x1f0/0x1f0 [ 505.357553][ T7405] ? __fget_files+0x28/0x4a0 [ 505.362195][ T7405] ? __fget_files+0x435/0x4a0 [ 505.366975][ T7405] ? __fdget_pos+0x2ba/0x360 [ 505.371609][ T7405] ? ksys_read+0x77/0x2c0 [ 505.375983][ T7405] ksys_read+0x19c/0x2c0 [ 505.380302][ T7405] ? print_irqtrace_events+0x210/0x210 [ 505.385823][ T7405] ? vfs_write+0xbc0/0xbc0 [ 505.390279][ T7405] ? syscall_enter_from_user_mode+0x2e/0x230 [ 505.396300][ T7405] ? lockdep_hardirqs_on+0x94/0x130 [ 505.401537][ T7405] ? syscall_enter_from_user_mode+0x2e/0x230 [ 505.407560][ T7405] do_syscall_64+0x3b/0xb0 [ 505.412004][ T7405] ? clear_bhb_loop+0x45/0xa0 [ 505.416711][ T7405] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 505.422626][ T7405] RIP: 0033:0x7ff10118bb7c [ 505.427049][ T7405] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 505.446749][ T7405] RSP: 002b:00007ff101fdf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 505.455171][ T7405] RAX: ffffffffffffffda RBX: 00007ff1013a5fa0 RCX: 00007ff10118bb7c [ 505.463147][ T7405] RDX: 000000000000000f RSI: 00007ff101fdf0a0 RDI: 0000000000000004 [ 505.471122][ T7405] RBP: 00007ff101fdf090 R08: 0000000000000000 R09: 0000000000000000 [ 505.479099][ T7405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.487075][ T7405] R13: 0000000000000000 R14: 00007ff1013a5fa0 R15: 00007ffd71385578 [ 505.495065][ T7405] [ 506.421359][ T7442] netlink: 'syz.1.1080': attribute type 10 has an invalid length. [ 506.534021][ T7442] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1080'. [ 506.571025][ T7442] bridge0: port 3(ipvlan1) entered blocking state [ 506.596428][ T7442] bridge0: port 3(ipvlan1) entered disabled state [ 506.655543][ T7442] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 508.252644][ T7491] netlink: 'syz.4.1096': attribute type 15 has an invalid length. [ 508.271817][ T7491] netlink: 'syz.4.1096': attribute type 7 has an invalid length. [ 508.927570][ T7507] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1103'. [ 509.255448][ T7515] netlink: 'syz.2.1107': attribute type 10 has an invalid length. [ 509.376644][ T7515] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1107'. [ 509.434578][ T7515] bridge0: port 3(ipvlan1) entered blocking state [ 509.451767][ T7515] bridge0: port 3(ipvlan1) entered disabled state [ 509.500921][ T7515] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 509.645552][ T7522] FAULT_INJECTION: forcing a failure. [ 509.645552][ T7522] name failslab, interval 1, probability 0, space 0, times 0 [ 509.658938][ T7522] CPU: 0 PID: 7522 Comm: syz.4.1109 Not tainted 6.1.131-syzkaller #0 [ 509.667051][ T7522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 509.677142][ T7522] Call Trace: [ 509.680437][ T7522] [ 509.683373][ T7522] dump_stack_lvl+0x1e3/0x2cb [ 509.688061][ T7522] ? nf_tcp_handle_invalid+0x647/0x647 [ 509.693525][ T7522] ? panic+0x764/0x764 [ 509.697600][ T7522] ? __might_sleep+0xb0/0xb0 [ 509.702193][ T7522] ? netlink_insert+0x10dc/0x1540 [ 509.707317][ T7522] should_fail_ex+0x3a6/0x4d0 [ 509.712021][ T7522] should_failslab+0x5/0x20 [ 509.716654][ T7522] slab_pre_alloc_hook+0x59/0x300 [ 509.721698][ T7522] ? netlink_data_ready+0x10/0x10 [ 509.726732][ T7522] kmem_cache_alloc_node+0x52/0x310 [ 509.731940][ T7522] ? __alloc_skb+0xd3/0x2c0 [ 509.736554][ T7522] __alloc_skb+0xd3/0x2c0 [ 509.740906][ T7522] netlink_sendmsg+0x6f8/0xd60 [ 509.745701][ T7522] ? netlink_getsockopt+0x580/0x580 [ 509.751005][ T7522] ? aa_sock_msg_perm+0x91/0x150 [ 509.755963][ T7522] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 509.761270][ T7522] ? security_socket_sendmsg+0x7d/0xa0 [ 509.766796][ T7522] ? netlink_getsockopt+0x580/0x580 [ 509.772039][ T7522] ____sys_sendmsg+0x5d3/0x9a0 [ 509.777093][ T7522] ? __sys_sendmsg_sock+0x30/0x30 [ 509.782178][ T7522] __sys_sendmsg+0x2a9/0x390 [ 509.786784][ T7522] ? ____sys_sendmsg+0x9a0/0x9a0 [ 509.791724][ T7522] ? vfs_write+0x6cf/0xbc0 [ 509.796271][ T7522] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 509.802304][ T7522] ? syscall_enter_from_user_mode+0x2e/0x230 [ 509.808439][ T7522] ? lockdep_hardirqs_on+0x94/0x130 [ 509.813937][ T7522] ? syscall_enter_from_user_mode+0x2e/0x230 [ 509.819990][ T7522] do_syscall_64+0x3b/0xb0 [ 509.824415][ T7522] ? clear_bhb_loop+0x45/0xa0 [ 509.829196][ T7522] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 509.835103][ T7522] RIP: 0033:0x7f0635b8d169 [ 509.839521][ T7522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.859150][ T7522] RSP: 002b:00007f063698c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 509.867612][ T7522] RAX: ffffffffffffffda RBX: 00007f0635da5fa0 RCX: 00007f0635b8d169 [ 509.875629][ T7522] RDX: 0000000004040000 RSI: 0000400000000080 RDI: 0000000000000003 [ 509.883634][ T7522] RBP: 00007f063698c090 R08: 0000000000000000 R09: 0000000000000000 [ 509.891630][ T7522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.899619][ T7522] R13: 0000000000000000 R14: 00007f0635da5fa0 R15: 00007ffc35b1f808 [ 509.907628][ T7522] [ 510.275485][ T7538] FAULT_INJECTION: forcing a failure. [ 510.275485][ T7538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.321349][ T7538] CPU: 0 PID: 7538 Comm: syz.2.1116 Not tainted 6.1.131-syzkaller #0 [ 510.329493][ T7538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 510.339589][ T7538] Call Trace: [ 510.342882][ T7538] [ 510.345822][ T7538] dump_stack_lvl+0x1e3/0x2cb [ 510.350530][ T7538] ? nf_tcp_handle_invalid+0x647/0x647 [ 510.356006][ T7538] ? panic+0x764/0x764 [ 510.360179][ T7538] ? snprintf+0xd6/0x120 [ 510.364444][ T7538] should_fail_ex+0x3a6/0x4d0 [ 510.369145][ T7538] _copy_to_user+0x2b/0x130 [ 510.373662][ T7538] simple_read_from_buffer+0xc6/0x150 [ 510.379080][ T7538] proc_fail_nth_read+0x1a3/0x210 [ 510.384125][ T7538] ? proc_fault_inject_write+0x390/0x390 [ 510.389811][ T7538] ? fsnotify_perm+0x439/0x590 [ 510.394600][ T7538] ? proc_fault_inject_write+0x390/0x390 [ 510.400271][ T7538] vfs_read+0x2ed/0xbf0 [ 510.404460][ T7538] ? __fdget_pos+0x2ba/0x360 [ 510.409075][ T7538] ? kernel_read+0x1f0/0x1f0 [ 510.413676][ T7538] ? __fget_files+0x28/0x4a0 [ 510.418280][ T7538] ? __fget_files+0x435/0x4a0 [ 510.422984][ T7538] ? __fdget_pos+0x2ba/0x360 [ 510.427584][ T7538] ? ksys_read+0x77/0x2c0 [ 510.431922][ T7538] ksys_read+0x19c/0x2c0 [ 510.436177][ T7538] ? print_irqtrace_events+0x210/0x210 [ 510.441655][ T7538] ? vfs_write+0xbc0/0xbc0 [ 510.446175][ T7538] ? syscall_enter_from_user_mode+0x2e/0x230 [ 510.452171][ T7538] ? lockdep_hardirqs_on+0x94/0x130 [ 510.457385][ T7538] ? syscall_enter_from_user_mode+0x2e/0x230 [ 510.463404][ T7538] do_syscall_64+0x3b/0xb0 [ 510.467861][ T7538] ? clear_bhb_loop+0x45/0xa0 [ 510.472572][ T7538] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 510.478484][ T7538] RIP: 0033:0x7fc3a1b8bb7c [ 510.482919][ T7538] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 510.502533][ T7538] RSP: 002b:00007fc3a29ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 510.511042][ T7538] RAX: ffffffffffffffda RBX: 00007fc3a1da5fa0 RCX: 00007fc3a1b8bb7c [ 510.519021][ T7538] RDX: 000000000000000f RSI: 00007fc3a29ff0a0 RDI: 0000000000000003 [ 510.527000][ T7538] RBP: 00007fc3a29ff090 R08: 0000000000000000 R09: 0000000000000000 [ 510.534977][ T7538] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 510.542954][ T7538] R13: 0000000000000000 R14: 00007fc3a1da5fa0 R15: 00007ffe0b268e48 [ 510.550978][ T7538] [ 511.108690][ T7560] netlink: 'syz.3.1123': attribute type 10 has an invalid length. [ 511.151415][ T7560] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1123'. [ 511.201320][ T7560] bridge0: port 3(ipvlan1) entered blocking state [ 511.252695][ T7560] bridge0: port 3(ipvlan1) entered disabled state [ 511.266549][ T7560] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 511.376084][ T7565] netlink: 'syz.1.1124': attribute type 10 has an invalid length. [ 512.230749][ T7590] netlink: 'syz.3.1136': attribute type 10 has an invalid length. [ 512.540175][ T7596] netlink: 'syz.3.1138': attribute type 10 has an invalid length. [ 512.630328][ T7596] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1138'. [ 512.640177][ T7596] bridge0: port 3(ipvlan1) entered blocking state [ 512.647567][ T7596] bridge0: port 3(ipvlan1) entered disabled state [ 512.657305][ T7596] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 513.142974][ T7610] netlink: 'syz.0.1143': attribute type 3 has an invalid length. [ 513.155706][ T7610] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1143'. [ 513.449423][ T7620] device sit0 left promiscuous mode [ 513.963093][ T7635] FAULT_INJECTION: forcing a failure. [ 513.963093][ T7635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 513.987146][ T7635] CPU: 1 PID: 7635 Comm: syz.0.1155 Not tainted 6.1.131-syzkaller #0 [ 513.995283][ T7635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 514.005376][ T7635] Call Trace: [ 514.008668][ T7635] [ 514.011613][ T7635] dump_stack_lvl+0x1e3/0x2cb [ 514.016316][ T7635] ? nf_tcp_handle_invalid+0x647/0x647 [ 514.021792][ T7635] ? panic+0x764/0x764 [ 514.025971][ T7635] ? __lock_acquire+0x1f80/0x1f80 [ 514.031024][ T7635] ? __lock_acquire+0x125b/0x1f80 [ 514.036093][ T7635] should_fail_ex+0x3a6/0x4d0 [ 514.040802][ T7635] _copy_from_user+0x2b/0x170 [ 514.045496][ T7635] kstrtouint_from_user+0xc2/0x180 [ 514.050625][ T7635] ? kstrtol_from_user+0x180/0x180 [ 514.055759][ T7635] ? read_lock_is_recursive+0x10/0x10 [ 514.061161][ T7635] proc_fail_nth_write+0xa6/0x290 [ 514.066206][ T7635] ? rcu_read_lock_bh_held+0x110/0x110 [ 514.071685][ T7635] ? proc_fail_nth_read+0x210/0x210 [ 514.076917][ T7635] ? proc_fail_nth_read+0x210/0x210 [ 514.082222][ T7635] vfs_write+0x2d9/0xbc0 [ 514.086481][ T7635] ? file_end_write+0x250/0x250 [ 514.091356][ T7635] ? __fget_files+0x28/0x4a0 [ 514.096045][ T7635] ? __fget_files+0x435/0x4a0 [ 514.100825][ T7635] ? __fdget_pos+0x2ba/0x360 [ 514.105423][ T7635] ? ksys_write+0x77/0x2c0 [ 514.109852][ T7635] ksys_write+0x19c/0x2c0 [ 514.114192][ T7635] ? print_irqtrace_events+0x210/0x210 [ 514.119675][ T7635] ? __ia32_sys_read+0x80/0x80 [ 514.124454][ T7635] ? syscall_enter_from_user_mode+0x2e/0x230 [ 514.130454][ T7635] ? lockdep_hardirqs_on+0x94/0x130 [ 514.135673][ T7635] ? syscall_enter_from_user_mode+0x2e/0x230 [ 514.141682][ T7635] do_syscall_64+0x3b/0xb0 [ 514.146109][ T7635] ? clear_bhb_loop+0x45/0xa0 [ 514.150795][ T7635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 514.156710][ T7635] RIP: 0033:0x7fcac678bc1f [ 514.161146][ T7635] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 514.180770][ T7635] RSP: 002b:00007fcac75ec030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 514.189224][ T7635] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcac678bc1f [ 514.197201][ T7635] RDX: 0000000000000001 RSI: 00007fcac75ec0a0 RDI: 000000000000000a [ 514.205185][ T7635] RBP: 00007fcac75ec090 R08: 0000000000000000 R09: 0000000000000000 [ 514.213160][ T7635] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 514.221136][ T7635] R13: 0000000000000000 R14: 00007fcac69a6080 R15: 00007fffc3d670d8 [ 514.229132][ T7635] [ 514.250272][ T7637] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.1156'. [ 514.486603][ T7644] netlink: 'syz.0.1159': attribute type 3 has an invalid length. [ 514.495599][ T7644] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1159'. [ 515.085416][ T7667] netlink: 'syz.4.1167': attribute type 10 has an invalid length. [ 515.362576][ T7673] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.1170'. [ 515.645183][ T7684] netlink: 'syz.4.1176': attribute type 10 has an invalid length. [ 515.867995][ T7696] netlink: 'syz.4.1181': attribute type 10 has an invalid length. [ 516.120585][ T7699] netlink: 'syz.4.1182': attribute type 10 has an invalid length. [ 516.141342][ T7699] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1182'. [ 516.157604][ T7699] bridge0: port 3(ipvlan1) entered blocking state [ 516.170210][ T7699] bridge0: port 3(ipvlan1) entered disabled state [ 516.180988][ T7699] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 516.431967][ T7703] netlink: 'syz.1.1194': attribute type 10 has an invalid length. [ 516.440061][ T7703] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1194'. [ 516.450037][ T7703] bridge0: port 3(ipvlan1) entered blocking state [ 516.457203][ T7703] bridge0: port 3(ipvlan1) entered disabled state [ 516.479837][ T7703] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 516.635773][ T7707] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.1185'. [ 517.097210][ T7719] netlink: 'syz.3.1189': attribute type 40 has an invalid length. [ 517.466317][ T7728] netlink: 'syz.3.1193': attribute type 10 has an invalid length. [ 517.755285][ T7736] netlink: 'syz.0.1198': attribute type 10 has an invalid length. [ 517.763566][ T7736] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1198'. [ 517.774491][ T7736] bridge0: port 3(ipvlan1) entered blocking state [ 517.781381][ T7736] bridge0: port 3(ipvlan1) entered disabled state [ 517.791457][ T7736] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 518.278870][ T7747] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 518.337205][ T7747] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 518.392246][ T7752] netlink: 'syz.1.1205': attribute type 40 has an invalid length. [ 518.628286][ T7760] netlink: 'syz.4.1207': attribute type 3 has an invalid length. [ 518.641909][ T7760] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1207'. [ 518.857750][ T7767] netlink: 'syz.2.1211': attribute type 10 has an invalid length. [ 518.896505][ T7767] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1211'. [ 518.922845][ T7767] bridge0: port 3(ipvlan1) entered blocking state [ 518.939654][ T7767] bridge0: port 3(ipvlan1) entered disabled state [ 518.960902][ T7767] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 519.048828][ T7768] netlink: 'syz.0.1210': attribute type 10 has an invalid length. [ 519.849206][ T7796] netlink: 'syz.2.1221': attribute type 3 has an invalid length. [ 519.882066][ T7796] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1221'. [ 520.058316][ T7802] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.1222'. [ 520.173599][ T7808] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.1224'. [ 520.342558][ T7813] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1227'. [ 520.362199][ T7813] bridge0: port 3(ipvlan1) entered blocking state [ 520.401773][ T7813] bridge0: port 3(ipvlan1) entered disabled state [ 520.425460][ T7813] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 521.341916][ T7833] validate_nla: 2 callbacks suppressed [ 521.342000][ T7833] netlink: 'syz.0.1235': attribute type 3 has an invalid length. [ 521.386587][ T7833] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1235'. [ 521.495540][ T7841] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.1238'. [ 521.840507][ T7854] netlink: 'syz.1.1244': attribute type 10 has an invalid length. [ 521.859821][ T7854] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1244'. [ 521.880413][ T7854] bridge0: port 3(ipvlan1) entered blocking state [ 521.998265][ T7854] bridge0: port 3(ipvlan1) entered disabled state [ 522.066720][ T7854] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 522.209455][ T7862] netlink: 'syz.3.1247': attribute type 11 has an invalid length. [ 522.382971][ T7864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 522.447662][ T7862] netlink: 'syz.3.1247': attribute type 3 has an invalid length. [ 522.489536][ T7862] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1247'. [ 522.516894][ T7868] netlink: 'syz.1.1259': attribute type 10 has an invalid length. [ 522.544110][ T7868] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1259'. [ 522.664032][ T7868] bridge0: port 3(ipvlan1) entered blocking state [ 522.691329][ T7868] bridge0: port 3(ipvlan1) entered disabled state [ 522.699920][ T7868] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 523.190748][ T7882] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.1252'. [ 523.236359][ T7886] netlink: 'syz.2.1264': attribute type 10 has an invalid length. [ 523.284238][ T7886] bridge0: port 3(ipvlan1) entered blocking state [ 523.304139][ T7886] bridge0: port 3(ipvlan1) entered disabled state [ 523.344958][ T7886] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 523.481142][ T7890] netlink: 'syz.0.1266': attribute type 3 has an invalid length. [ 525.003969][ T7921] __nla_validate_parse: 3 callbacks suppressed [ 525.003991][ T7921] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1265'. [ 525.336559][ T7927] netlink: 'syz.3.1268': attribute type 10 has an invalid length. [ 525.431581][ T7933] netlink: 14585 bytes leftover after parsing attributes in process `syz.4.1269'. [ 525.627577][ T7937] netlink: 'syz.3.1273': attribute type 3 has an invalid length. [ 525.654497][ T7937] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1273'. [ 525.922093][ T7953] netlink: 'syz.0.1279': attribute type 11 has an invalid length. [ 526.058575][ T7953] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1279'. [ 527.158595][ T7975] validate_nla: 1 callbacks suppressed [ 527.158615][ T7975] netlink: 'syz.0.1284': attribute type 10 has an invalid length. [ 527.340999][ T7979] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1286'. [ 528.260838][ T8011] netlink: 'syz.2.1298': attribute type 11 has an invalid length. [ 528.318262][ T8005] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1297'. [ 528.371205][ T8013] netlink: 'syz.3.1301': attribute type 10 has an invalid length. [ 528.433669][ T8011] netlink: 'syz.2.1298': attribute type 3 has an invalid length. [ 528.478151][ T8011] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1298'. [ 528.873406][ T8028] netlink: 'syz.4.1307': attribute type 10 has an invalid length. [ 528.892386][ T8028] device hsr_slave_0 left promiscuous mode [ 528.911052][ T8028] device hsr_slave_1 left promiscuous mode [ 529.367541][ T8040] netlink: 'syz.1.1311': attribute type 10 has an invalid length. [ 529.412169][ T8040] device hsr_slave_0 left promiscuous mode [ 529.506504][ T8040] device hsr_slave_1 left promiscuous mode [ 529.758622][ T8046] netlink: 'syz.2.1313': attribute type 12 has an invalid length. [ 529.790665][ T8046] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.1313'. [ 529.968614][ T8048] netlink: 'syz.4.1314': attribute type 10 has an invalid length. [ 530.189563][ T8056] netlink: 'syz.0.1318': attribute type 10 has an invalid length. [ 530.225122][ T8056] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1318'. [ 530.250489][ T8056] bridge0: port 3(ipvlan1) entered blocking state [ 530.284189][ T8056] bridge0: port 3(ipvlan1) entered disabled state [ 530.307850][ T8056] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 530.350937][ T8060] netlink: 'syz.4.1320': attribute type 3 has an invalid length. [ 530.402983][ T8060] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1320'. [ 531.145010][ T8084] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.1327'. [ 531.539227][ T8098] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1333'. [ 531.548709][ T8098] bridge0: port 3(ipvlan1) entered blocking state [ 531.576135][ T8098] bridge0: port 3(ipvlan1) entered disabled state [ 531.597153][ T8098] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 532.558108][ T8112] validate_nla: 2 callbacks suppressed [ 532.558154][ T8112] netlink: 'syz.3.1339': attribute type 3 has an invalid length. [ 532.664512][ T8112] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1339'. [ 533.090548][ T8126] netlink: 'syz.3.1342': attribute type 12 has an invalid length. [ 533.119651][ T8126] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.1342'. [ 533.705514][ T8142] netlink: 'syz.4.1349': attribute type 10 has an invalid length. [ 534.043928][ T8144] netlink: 'syz.0.1350': attribute type 11 has an invalid length. [ 534.204119][ T8144] netlink: 'syz.0.1350': attribute type 3 has an invalid length. [ 534.381778][ T8144] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1350'. [ 534.435851][ T8151] netlink: 'syz.2.1361': attribute type 10 has an invalid length. [ 534.564655][ T8149] netlink: 'syz.1.1352': attribute type 3 has an invalid length. [ 534.582070][ T8149] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1352'. [ 534.848945][ T8157] netlink: 'syz.3.1354': attribute type 11 has an invalid length. [ 535.010126][ T8164] netlink: 'syz.0.1357': attribute type 12 has an invalid length. [ 535.036432][ T8158] netlink: 'syz.2.1353': attribute type 3 has an invalid length. [ 535.054038][ T8164] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.1357'. [ 535.129397][ T8158] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1353'. [ 535.302602][ T8173] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1359'. [ 535.358479][ T8173] bridge0: port 3(ipvlan1) entered blocking state [ 535.380103][ T8173] bridge0: port 3(ipvlan1) entered disabled state [ 535.404151][ T8173] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 535.882147][ T8186] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1364'. [ 536.314423][ T8202] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1369'. [ 536.927220][ T8211] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.1371'. [ 536.984424][ T8212] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1372'. [ 537.878236][ T8232] validate_nla: 7 callbacks suppressed [ 537.878257][ T8232] netlink: 'syz.2.1379': attribute type 10 has an invalid length. [ 538.118569][ T8241] netlink: 'syz.1.1392': attribute type 3 has an invalid length. [ 538.139919][ T8243] FAULT_INJECTION: forcing a failure. [ 538.139919][ T8243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 538.147814][ T8241] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1392'. [ 538.172794][ T8243] CPU: 1 PID: 8243 Comm: syz.4.1384 Not tainted 6.1.131-syzkaller #0 [ 538.180926][ T8243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 538.191000][ T8243] Call Trace: [ 538.194287][ T8243] [ 538.197224][ T8243] dump_stack_lvl+0x1e3/0x2cb [ 538.201913][ T8243] ? nf_tcp_handle_invalid+0x647/0x647 [ 538.207379][ T8243] ? panic+0x764/0x764 [ 538.211471][ T8243] ? __lock_acquire+0x1f80/0x1f80 [ 538.216519][ T8243] ? perf_trace_preemptirq_template+0x2d1/0x3d0 [ 538.222792][ T8243] should_fail_ex+0x3a6/0x4d0 [ 538.227500][ T8243] _copy_from_user+0x2b/0x170 [ 538.232282][ T8243] dev_ethtool+0xd6/0x1540 [ 538.236721][ T8243] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 538.242900][ T8243] ? ethtool_get_module_eeprom_call+0x180/0x180 [ 538.249155][ T8243] ? __lock_acquire+0x1f80/0x1f80 [ 538.254195][ T8243] ? dev_load+0x1d/0x1e0 [ 538.258453][ T8243] ? full_name_hash+0x8f/0xe0 [ 538.264120][ T8243] ? dev_load+0x1d/0x1e0 [ 538.268391][ T8243] dev_ioctl+0x273/0xf70 [ 538.272651][ T8243] ? get_user_ifreq+0x167/0x1f0 [ 538.277583][ T8243] sock_do_ioctl+0x26b/0x450 [ 538.282283][ T8243] ? sock_show_fdinfo+0xb0/0xb0 [ 538.287153][ T8243] ? __fget_files+0x28/0x4a0 [ 538.291759][ T8243] sock_ioctl+0x484/0x770 [ 538.296113][ T8243] ? sock_poll+0x410/0x410 [ 538.300623][ T8243] ? __fget_files+0x28/0x4a0 [ 538.305219][ T8243] ? __fget_files+0x435/0x4a0 [ 538.309903][ T8243] ? __fget_files+0x28/0x4a0 [ 538.314505][ T8243] ? bpf_lsm_file_ioctl+0x5/0x10 [ 538.319456][ T8243] ? security_file_ioctl+0x7d/0xa0 [ 538.324577][ T8243] ? sock_poll+0x410/0x410 [ 538.329002][ T8243] __se_sys_ioctl+0xf1/0x160 [ 538.333600][ T8243] do_syscall_64+0x3b/0xb0 [ 538.338031][ T8243] ? clear_bhb_loop+0x45/0xa0 [ 538.342720][ T8243] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 538.348705][ T8243] RIP: 0033:0x7f0635b8d169 [ 538.353156][ T8243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.372801][ T8243] RSP: 002b:00007f063698c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 538.381253][ T8243] RAX: ffffffffffffffda RBX: 00007f0635da5fa0 RCX: 00007f0635b8d169 [ 538.389232][ T8243] RDX: 0000400000000080 RSI: 0000000000008946 RDI: 0000000000000038 [ 538.397296][ T8243] RBP: 00007f063698c090 R08: 0000000000000000 R09: 0000000000000000 [ 538.405364][ T8243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.413349][ T8243] R13: 0000000000000000 R14: 00007f0635da5fa0 R15: 00007ffc35b1f808 [ 538.421342][ T8243] [ 538.505493][ T8249] netlink: 'syz.0.1385': attribute type 11 has an invalid length. [ 538.703953][ T8254] netlink: 'syz.0.1385': attribute type 3 has an invalid length. [ 538.794466][ T8254] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1385'. [ 539.465906][ T8271] netlink: 'syz.2.1393': attribute type 10 has an invalid length. [ 540.507396][ T8303] netlink: 'syz.4.1406': attribute type 11 has an invalid length. [ 540.581087][ T8311] netlink: 'syz.4.1406': attribute type 3 has an invalid length. [ 540.588964][ T8311] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1406'. [ 540.614530][ T8312] netlink: 'syz.3.1409': attribute type 10 has an invalid length. [ 541.848300][ T8344] netlink: 'syz.3.1422': attribute type 10 has an invalid length. [ 541.933974][ T8339] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1418'. [ 542.170257][ T8353] FAULT_INJECTION: forcing a failure. [ 542.170257][ T8353] name failslab, interval 1, probability 0, space 0, times 0 [ 542.228847][ T8352] netlink: 16083 bytes leftover after parsing attributes in process `syz.4.1425'. [ 542.248513][ T8353] CPU: 0 PID: 8353 Comm: syz.3.1426 Not tainted 6.1.131-syzkaller #0 [ 542.256664][ T8353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 542.266755][ T8353] Call Trace: [ 542.270061][ T8353] [ 542.273116][ T8353] dump_stack_lvl+0x1e3/0x2cb [ 542.277841][ T8353] ? nf_tcp_handle_invalid+0x647/0x647 [ 542.283337][ T8353] ? panic+0x764/0x764 [ 542.287449][ T8353] ? __might_sleep+0xb0/0xb0 [ 542.292071][ T8353] ? __lock_acquire+0x125b/0x1f80 [ 542.297159][ T8353] should_fail_ex+0x3a6/0x4d0 [ 542.301892][ T8353] should_failslab+0x5/0x20 [ 542.306431][ T8353] slab_pre_alloc_hook+0x59/0x300 [ 542.311504][ T8353] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 542.317266][ T8353] __kmem_cache_alloc_node+0x47/0x260 [ 542.322693][ T8353] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 542.328465][ T8353] __kmalloc+0xa1/0x230 [ 542.332665][ T8353] ? rcu_is_watching+0x11/0xb0 [ 542.337560][ T8353] tomoyo_realpath_from_path+0xcb/0x5d0 [ 542.343185][ T8353] tomoyo_path_number_perm+0x21f/0x7f0 [ 542.348701][ T8353] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 542.354381][ T8353] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 542.359899][ T8353] ? __fget_files+0x28/0x4a0 [ 542.364544][ T8353] ? __fget_files+0x28/0x4a0 [ 542.369167][ T8353] ? __fget_files+0x435/0x4a0 [ 542.373876][ T8353] ? __fget_files+0x28/0x4a0 [ 542.378509][ T8353] security_file_ioctl+0x6d/0xa0 [ 542.383496][ T8353] __se_sys_ioctl+0x47/0x160 [ 542.388124][ T8353] do_syscall_64+0x3b/0xb0 [ 542.392570][ T8353] ? clear_bhb_loop+0x45/0xa0 [ 542.397290][ T8353] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 542.403314][ T8353] RIP: 0033:0x7ff10118d169 [ 542.407765][ T8353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.427406][ T8353] RSP: 002b:00007ff101fdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 542.435857][ T8353] RAX: ffffffffffffffda RBX: 00007ff1013a5fa0 RCX: 00007ff10118d169 [ 542.443856][ T8353] RDX: 0000000000000000 RSI: 000000000000890c RDI: 0000000000000003 [ 542.451851][ T8353] RBP: 00007ff101fdf090 R08: 0000000000000000 R09: 0000000000000000 [ 542.459848][ T8353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.468021][ T8353] R13: 0000000000000000 R14: 00007ff1013a5fa0 R15: 00007ffd71385578 [ 542.476043][ T8353] [ 542.573975][ T8353] ERROR: Out of memory at tomoyo_realpath_from_path. [ 542.770364][ T8361] netlink: 'syz.2.1431': attribute type 12 has an invalid length. [ 542.788790][ T8361] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1431'. [ 543.289881][ T8385] netlink: 'syz.3.1438': attribute type 3 has an invalid length. [ 543.315452][ T8385] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1438'. [ 543.337748][ T8382] netlink: 'syz.1.1437': attribute type 3 has an invalid length. [ 543.356331][ T8382] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1437'. [ 543.655777][ T8395] FAULT_INJECTION: forcing a failure. [ 543.655777][ T8395] name failslab, interval 1, probability 0, space 0, times 0 [ 543.694020][ T8395] CPU: 1 PID: 8395 Comm: syz.0.1441 Not tainted 6.1.131-syzkaller #0 [ 543.702164][ T8395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 543.712266][ T8395] Call Trace: [ 543.715579][ T8395] [ 543.718632][ T8395] dump_stack_lvl+0x1e3/0x2cb [ 543.723348][ T8395] ? nf_tcp_handle_invalid+0x647/0x647 [ 543.728903][ T8395] ? panic+0x764/0x764 [ 543.733018][ T8395] ? __might_sleep+0xb0/0xb0 [ 543.737660][ T8395] should_fail_ex+0x3a6/0x4d0 [ 543.742406][ T8395] should_failslab+0x5/0x20 [ 543.746953][ T8395] slab_pre_alloc_hook+0x59/0x300 [ 543.752031][ T8395] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 543.758268][ T8395] kmem_cache_alloc_node+0x52/0x310 [ 543.763489][ T8395] ? dup_task_struct+0x57/0x6d0 [ 543.768357][ T8395] dup_task_struct+0x57/0x6d0 [ 543.773054][ T8395] copy_process+0x637/0x40a0 [ 543.777656][ T8395] ? perf_trace_run_bpf_submit+0x1d0/0x1d0 [ 543.783513][ T8395] ? idle_dummy+0x10/0x10 [ 543.787869][ T8395] kernel_clone+0x222/0x920 [ 543.792387][ T8395] ? create_io_thread+0x1a0/0x1a0 [ 543.797433][ T8395] ? irqentry_enter+0x33/0x50 [ 543.802133][ T8395] __x64_sys_clone+0x242/0x2c0 [ 543.806921][ T8395] ? __do_sys_vfork+0x140/0x140 [ 543.811894][ T8395] ? syscall_enter_from_user_mode+0x37/0x230 [ 543.817892][ T8395] ? syscall_enter_from_user_mode+0x2e/0x230 [ 543.823893][ T8395] do_syscall_64+0x3b/0xb0 [ 543.828316][ T8395] ? clear_bhb_loop+0x45/0xa0 [ 543.833011][ T8395] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 543.838919][ T8395] RIP: 0033:0x7fcac678d169 [ 543.843375][ T8395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 543.862994][ T8395] RSP: 002b:00007fcac760cfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 543.871420][ T8395] RAX: ffffffffffffffda RBX: 00007fcac69a5fa0 RCX: 00007fcac678d169 [ 543.879399][ T8395] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 543.887416][ T8395] RBP: 00007fcac760d090 R08: 0000000000000000 R09: 0000000000000000 [ 543.895398][ T8395] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 543.903379][ T8395] R13: 0000000000000000 R14: 00007fcac69a5fa0 R15: 00007fffc3d670d8 [ 543.911380][ T8395] [ 544.021776][ T8400] netlink: 'syz.4.1443': attribute type 12 has an invalid length. [ 544.030133][ T8400] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1443'. [ 544.347115][ T8411] netlink: 'syz.0.1447': attribute type 11 has an invalid length. [ 544.834926][ T8408] netlink: 'syz.0.1447': attribute type 3 has an invalid length. [ 544.843139][ T8408] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1447'. [ 545.154852][ T8425] netlink: 'syz.2.1453': attribute type 1 has an invalid length. [ 545.200587][ T8425] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1453'. [ 545.809454][ T8437] netlink: 'syz.0.1457': attribute type 10 has an invalid length. [ 546.336661][ T8450] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1463'. [ 546.437919][ T8458] netlink: 'syz.1.1464': attribute type 3 has an invalid length. [ 546.461769][ T8458] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1464'. [ 546.782990][ T8466] netlink: 'syz.0.1467': attribute type 1 has an invalid length. [ 546.840383][ T8466] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1467'. [ 547.027358][ T8474] FAULT_INJECTION: forcing a failure. [ 547.027358][ T8474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.040652][ T8474] CPU: 1 PID: 8474 Comm: syz.1.1470 Not tainted 6.1.131-syzkaller #0 [ 547.048767][ T8474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 547.058866][ T8474] Call Trace: [ 547.062178][ T8474] [ 547.065150][ T8474] dump_stack_lvl+0x1e3/0x2cb [ 547.069858][ T8474] ? nf_tcp_handle_invalid+0x647/0x647 [ 547.075342][ T8474] ? panic+0x764/0x764 [ 547.079454][ T8474] ? __lock_acquire+0x1f80/0x1f80 [ 547.084611][ T8474] should_fail_ex+0x3a6/0x4d0 [ 547.089318][ T8474] _copy_from_user+0x2b/0x170 [ 547.094013][ T8474] copy_msghdr_from_user+0xaa/0x670 [ 547.099263][ T8474] ? sendmsg_copy_msghdr+0x70/0x70 [ 547.104393][ T8474] __sys_sendmsg+0x236/0x390 [ 547.108995][ T8474] ? ____sys_sendmsg+0x9a0/0x9a0 [ 547.113959][ T8474] ? vfs_write+0x6cf/0xbc0 [ 547.118404][ T8474] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 547.124408][ T8474] ? syscall_enter_from_user_mode+0x2e/0x230 [ 547.130406][ T8474] ? lockdep_hardirqs_on+0x94/0x130 [ 547.135624][ T8474] ? syscall_enter_from_user_mode+0x2e/0x230 [ 547.141791][ T8474] do_syscall_64+0x3b/0xb0 [ 547.146220][ T8474] ? clear_bhb_loop+0x45/0xa0 [ 547.150910][ T8474] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 547.156820][ T8474] RIP: 0033:0x7ff92a18d169 [ 547.161243][ T8474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.180859][ T8474] RSP: 002b:00007ff92af24038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 547.189300][ T8474] RAX: ffffffffffffffda RBX: 00007ff92a3a5fa0 RCX: 00007ff92a18d169 [ 547.197325][ T8474] RDX: 000000000000a900 RSI: 0000400000000b40 RDI: 0000000000000003 [ 547.205400][ T8474] RBP: 00007ff92af24090 R08: 0000000000000000 R09: 0000000000000000 [ 547.213380][ T8474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.221359][ T8474] R13: 0000000000000000 R14: 00007ff92a3a5fa0 R15: 00007ffc8142a228 [ 547.229481][ T8474] [ 547.374713][ T8475] netlink: 'syz.3.1468': attribute type 11 has an invalid length. [ 547.554799][ T8475] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1468'. [ 547.580474][ T8485] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1472'. [ 548.187925][ T8507] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1477'. [ 548.872766][ T8516] device syzkaller0 entered promiscuous mode [ 549.333271][ T8528] FAULT_INJECTION: forcing a failure. [ 549.333271][ T8528] name failslab, interval 1, probability 0, space 0, times 0 [ 549.482390][ T8526] validate_nla: 4 callbacks suppressed [ 549.482579][ T8526] netlink: 'syz.0.1488': attribute type 3 has an invalid length. [ 549.486847][ T8528] CPU: 1 PID: 8528 Comm: syz.3.1489 Not tainted 6.1.131-syzkaller #0 [ 549.504611][ T8528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 549.514975][ T8528] Call Trace: [ 549.518280][ T8528] [ 549.521217][ T8528] dump_stack_lvl+0x1e3/0x2cb [ 549.526453][ T8528] ? nf_tcp_handle_invalid+0x647/0x647 [ 549.532240][ T8528] ? panic+0x764/0x764 [ 549.536707][ T8528] ? __might_sleep+0xb0/0xb0 [ 549.541320][ T8528] ? __lock_acquire+0x125b/0x1f80 [ 549.546394][ T8528] should_fail_ex+0x3a6/0x4d0 [ 549.551226][ T8528] should_failslab+0x5/0x20 [ 549.555773][ T8528] slab_pre_alloc_hook+0x59/0x300 [ 549.560830][ T8528] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 549.566714][ T8528] __kmem_cache_alloc_node+0x47/0x260 [ 549.572404][ T8528] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 549.578262][ T8528] __kmalloc+0xa1/0x230 [ 549.582542][ T8528] ? rcu_is_watching+0x11/0xb0 [ 549.587684][ T8528] tomoyo_realpath_from_path+0xcb/0x5d0 [ 549.593263][ T8528] tomoyo_path_number_perm+0x21f/0x7f0 [ 549.598844][ T8528] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 549.604506][ T8528] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 549.610000][ T8528] ? __fget_files+0x28/0x4a0 [ 549.614637][ T8528] ? __fget_files+0x28/0x4a0 [ 549.619258][ T8528] ? __fget_files+0x435/0x4a0 [ 549.623946][ T8528] ? __fget_files+0x28/0x4a0 [ 549.628570][ T8528] security_file_ioctl+0x6d/0xa0 [ 549.633523][ T8528] __se_sys_ioctl+0x47/0x160 [ 549.638139][ T8528] do_syscall_64+0x3b/0xb0 [ 549.642560][ T8528] ? clear_bhb_loop+0x45/0xa0 [ 549.647247][ T8528] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 549.653147][ T8528] RIP: 0033:0x7ff10118d169 [ 549.657569][ T8528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.677179][ T8528] RSP: 002b:00007ff101fdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 549.685598][ T8528] RAX: ffffffffffffffda RBX: 00007ff1013a5fa0 RCX: 00007ff10118d169 [ 549.693601][ T8528] RDX: 0000400000000000 RSI: 0000000000008b32 RDI: 0000000000000003 [ 549.701612][ T8528] RBP: 00007ff101fdf090 R08: 0000000000000000 R09: 0000000000000000 [ 549.709600][ T8528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.717584][ T8528] R13: 0000000000000000 R14: 00007ff1013a5fa0 R15: 00007ffd71385578 [ 549.725581][ T8528] [ 549.732600][ T8526] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1488'. [ 549.908169][ T8528] ERROR: Out of memory at tomoyo_realpath_from_path. [ 551.685410][ T8533] netlink: 'syz.2.1491': attribute type 10 has an invalid length. [ 551.876196][ T8538] netlink: 'syz.0.1493': attribute type 12 has an invalid length. [ 551.897625][ T8538] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1493'. [ 551.914527][ T8536] netlink: 'syz.3.1492': attribute type 11 has an invalid length. [ 552.184052][ T8536] netlink: 'syz.3.1492': attribute type 3 has an invalid length. [ 552.193733][ T8536] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1492'. [ 553.177684][ T8568] netlink: 'syz.0.1505': attribute type 10 has an invalid length. [ 553.628517][ T8579] netlink: 'syz.1.1508': attribute type 11 has an invalid length. [ 553.861205][ T8586] FAULT_INJECTION: forcing a failure. [ 553.861205][ T8586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.912141][ T8579] netlink: 'syz.1.1508': attribute type 3 has an invalid length. [ 553.918701][ T8586] CPU: 1 PID: 8586 Comm: syz.2.1513 Not tainted 6.1.131-syzkaller #0 [ 553.928195][ T8586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 553.934100][ T8579] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1508'. [ 553.938265][ T8586] Call Trace: [ 553.938281][ T8586] [ 553.938291][ T8586] dump_stack_lvl+0x1e3/0x2cb [ 553.938326][ T8586] ? nf_tcp_handle_invalid+0x647/0x647 [ 553.938351][ T8586] ? panic+0x764/0x764 [ 553.938381][ T8586] ? __lock_acquire+0x1f80/0x1f80 [ 553.938423][ T8586] should_fail_ex+0x3a6/0x4d0 [ 553.977975][ T8586] _copy_from_user+0x2b/0x170 [ 553.982706][ T8586] copy_msghdr_from_user+0xaa/0x670 [ 553.987956][ T8586] ? sendmsg_copy_msghdr+0x70/0x70 [ 553.993131][ T8586] __sys_sendmsg+0x236/0x390 [ 553.997762][ T8586] ? ____sys_sendmsg+0x9a0/0x9a0 [ 554.002731][ T8586] ? vfs_write+0x6cf/0xbc0 [ 554.007224][ T8586] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 554.013268][ T8586] ? syscall_enter_from_user_mode+0x2e/0x230 [ 554.019289][ T8586] ? lockdep_hardirqs_on+0x94/0x130 [ 554.024526][ T8586] ? syscall_enter_from_user_mode+0x2e/0x230 [ 554.030551][ T8586] do_syscall_64+0x3b/0xb0 [ 554.035001][ T8586] ? clear_bhb_loop+0x45/0xa0 [ 554.039728][ T8586] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 554.045676][ T8586] RIP: 0033:0x7fc3a1b8d169 [ 554.050124][ T8586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.069863][ T8586] RSP: 002b:00007fc3a29ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.078320][ T8586] RAX: ffffffffffffffda RBX: 00007fc3a1da5fa0 RCX: 00007fc3a1b8d169 [ 554.086327][ T8586] RDX: 0000000000000000 RSI: 0000400000000940 RDI: 0000000000000003 [ 554.094330][ T8586] RBP: 00007fc3a29ff090 R08: 0000000000000000 R09: 0000000000000000 [ 554.102353][ T8586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.110350][ T8586] R13: 0000000000000000 R14: 00007fc3a1da5fa0 R15: 00007ffe0b268e48 [ 554.118376][ T8586] [ 554.888970][ T8606] netlink: 'syz.1.1519': attribute type 10 has an invalid length. [ 555.086709][ T8615] netlink: 'syz.0.1523': attribute type 12 has an invalid length. [ 555.166729][ T8615] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.1523'. [ 556.099683][ T8643] FAULT_INJECTION: forcing a failure. [ 556.099683][ T8643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 556.134161][ T8643] CPU: 0 PID: 8643 Comm: syz.1.1534 Not tainted 6.1.131-syzkaller #0 [ 556.142591][ T8643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 556.152866][ T8643] Call Trace: [ 556.156267][ T8643] [ 556.159400][ T8643] dump_stack_lvl+0x1e3/0x2cb [ 556.164238][ T8643] ? nf_tcp_handle_invalid+0x647/0x647 [ 556.170196][ T8643] ? panic+0x764/0x764 [ 556.174437][ T8643] ? snprintf+0xd6/0x120 [ 556.178745][ T8643] should_fail_ex+0x3a6/0x4d0 [ 556.183707][ T8643] _copy_to_user+0x2b/0x130 [ 556.188269][ T8643] simple_read_from_buffer+0xc6/0x150 [ 556.193793][ T8643] proc_fail_nth_read+0x1a3/0x210 [ 556.198872][ T8643] ? proc_fault_inject_write+0x390/0x390 [ 556.204553][ T8643] ? fsnotify_perm+0x439/0x590 [ 556.209375][ T8643] ? proc_fault_inject_write+0x390/0x390 [ 556.215074][ T8643] vfs_read+0x2ed/0xbf0 [ 556.219369][ T8643] ? __fdget_pos+0x2ba/0x360 [ 556.224358][ T8643] ? kernel_read+0x1f0/0x1f0 [ 556.229123][ T8643] ? __fget_files+0x28/0x4a0 [ 556.234046][ T8643] ? __fget_files+0x435/0x4a0 [ 556.238975][ T8643] ? __fdget_pos+0x2ba/0x360 [ 556.243964][ T8643] ? ksys_read+0x77/0x2c0 [ 556.248427][ T8643] ksys_read+0x19c/0x2c0 [ 556.252713][ T8643] ? print_irqtrace_events+0x210/0x210 [ 556.258976][ T8643] ? vfs_write+0xbc0/0xbc0 [ 556.263441][ T8643] ? syscall_enter_from_user_mode+0x2e/0x230 [ 556.269480][ T8643] ? lockdep_hardirqs_on+0x94/0x130 [ 556.274813][ T8643] ? syscall_enter_from_user_mode+0x2e/0x230 [ 556.280841][ T8643] do_syscall_64+0x3b/0xb0 [ 556.285296][ T8643] ? clear_bhb_loop+0x45/0xa0 [ 556.290012][ T8643] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 556.295948][ T8643] RIP: 0033:0x7ff92a18bb7c [ 556.300406][ T8643] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 556.320051][ T8643] RSP: 002b:00007ff92af24030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 556.328510][ T8643] RAX: ffffffffffffffda RBX: 00007ff92a3a5fa0 RCX: 00007ff92a18bb7c [ 556.336532][ T8643] RDX: 000000000000000f RSI: 00007ff92af240a0 RDI: 0000000000000004 [ 556.344654][ T8643] RBP: 00007ff92af24090 R08: 0000000000000000 R09: 0000000000000000 [ 556.352675][ T8643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.360692][ T8643] R13: 0000000000000000 R14: 00007ff92a3a5fa0 R15: 00007ffc8142a228 [ 556.368719][ T8643] [ 556.795121][ T8653] netlink: 'syz.2.1537': attribute type 10 has an invalid length. [ 557.335263][ T8687] FAULT_INJECTION: forcing a failure. [ 557.335263][ T8687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.355212][ T8687] CPU: 1 PID: 8687 Comm: syz.4.1551 Not tainted 6.1.131-syzkaller #0 [ 557.363523][ T8687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 557.373690][ T8687] Call Trace: [ 557.376983][ T8687] [ 557.379923][ T8687] dump_stack_lvl+0x1e3/0x2cb [ 557.384617][ T8687] ? nf_tcp_handle_invalid+0x647/0x647 [ 557.390176][ T8687] ? panic+0x764/0x764 [ 557.394261][ T8687] ? __lock_acquire+0x1f80/0x1f80 [ 557.399315][ T8687] should_fail_ex+0x3a6/0x4d0 [ 557.404106][ T8687] _copy_from_user+0x2b/0x170 [ 557.408895][ T8687] copy_msghdr_from_user+0xaa/0x670 [ 557.414111][ T8687] ? sendmsg_copy_msghdr+0x70/0x70 [ 557.419261][ T8687] __sys_sendmsg+0x236/0x390 [ 557.423865][ T8687] ? ____sys_sendmsg+0x9a0/0x9a0 [ 557.428810][ T8687] ? vfs_write+0x6cf/0xbc0 [ 557.433267][ T8687] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 557.439279][ T8687] ? syscall_enter_from_user_mode+0x2e/0x230 [ 557.445272][ T8687] ? lockdep_hardirqs_on+0x94/0x130 [ 557.450483][ T8687] ? syscall_enter_from_user_mode+0x2e/0x230 [ 557.456477][ T8687] do_syscall_64+0x3b/0xb0 [ 557.460902][ T8687] ? clear_bhb_loop+0x45/0xa0 [ 557.465596][ T8687] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 557.471502][ T8687] RIP: 0033:0x7f0635b8d169 [ 557.475939][ T8687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.495638][ T8687] RSP: 002b:00007f063698c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 557.504064][ T8687] RAX: ffffffffffffffda RBX: 00007f0635da5fa0 RCX: 00007f0635b8d169 [ 557.512040][ T8687] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000000000000004 [ 557.520027][ T8687] RBP: 00007f063698c090 R08: 0000000000000000 R09: 0000000000000000 [ 557.528029][ T8687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.536009][ T8687] R13: 0000000000000000 R14: 00007f0635da5fa0 R15: 00007ffc35b1f808 [ 557.544011][ T8687] [ 557.629529][ T8689] netlink: 'syz.2.1552': attribute type 12 has an invalid length. [ 557.640842][ T8689] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.1552'. [ 557.655958][ T8691] netlink: 'syz.0.1553': attribute type 10 has an invalid length. [ 558.087947][ T8706] netlink: 'syz.0.1560': attribute type 11 has an invalid length. [ 558.282547][ T8709] netlink: 'syz.0.1560': attribute type 3 has an invalid length. [ 558.306082][ T8709] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1560'. [ 558.534039][ T8715] netlink: 'syz.1.1563': attribute type 11 has an invalid length. [ 558.591497][ T8719] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1565'. [ 558.792445][ T8715] netlink: 'syz.1.1563': attribute type 3 has an invalid length. [ 558.843000][ T8715] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1563'. [ 558.867592][ T8726] netlink: 'syz.2.1567': attribute type 12 has an invalid length. [ 558.877578][ T8726] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.1567'. [ 559.106891][ T8734] FAULT_INJECTION: forcing a failure. [ 559.106891][ T8734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.141258][ T8734] CPU: 1 PID: 8734 Comm: syz.3.1572 Not tainted 6.1.131-syzkaller #0 [ 559.149396][ T8734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 559.159491][ T8734] Call Trace: [ 559.162801][ T8734] [ 559.165753][ T8734] dump_stack_lvl+0x1e3/0x2cb [ 559.170459][ T8734] ? nf_tcp_handle_invalid+0x647/0x647 [ 559.175950][ T8734] ? panic+0x764/0x764 [ 559.180063][ T8734] ? __lock_acquire+0x1f80/0x1f80 [ 559.185158][ T8734] should_fail_ex+0x3a6/0x4d0 [ 559.189982][ T8734] _copy_from_user+0x2b/0x170 [ 559.194705][ T8734] __sys_bpf+0x226/0x6c0 [ 559.198986][ T8734] ? __fget_files+0x435/0x4a0 [ 559.203794][ T8734] ? bpf_link_show_fdinfo+0x300/0x300 [ 559.209213][ T8734] ? print_irqtrace_events+0x210/0x210 [ 559.214806][ T8734] ? print_irqtrace_events+0x210/0x210 [ 559.220306][ T8734] ? syscall_enter_from_user_mode+0x2e/0x230 [ 559.226325][ T8734] ? lockdep_hardirqs_on+0x94/0x130 [ 559.231710][ T8734] __x64_sys_bpf+0x78/0x90 [ 559.236184][ T8734] do_syscall_64+0x3b/0xb0 [ 559.240639][ T8734] ? clear_bhb_loop+0x45/0xa0 [ 559.245363][ T8734] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 559.251301][ T8734] RIP: 0033:0x7ff10118d169 [ 559.255756][ T8734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.275493][ T8734] RSP: 002b:00007ff101fdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 559.283941][ T8734] RAX: ffffffffffffffda RBX: 00007ff1013a5fa0 RCX: 00007ff10118d169 [ 559.291938][ T8734] RDX: 0000000000000050 RSI: 0000400000000240 RDI: 000000000000000a [ 559.299927][ T8734] RBP: 00007ff101fdf090 R08: 0000000000000000 R09: 0000000000000000 [ 559.307911][ T8734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.315894][ T8734] R13: 0000000000000000 R14: 00007ff1013a5fa0 R15: 00007ffd71385578 [ 559.323898][ T8734] [ 559.797245][ T8751] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1579'. [ 560.437213][ T8756] validate_nla: 1 callbacks suppressed [ 560.437237][ T8756] netlink: 'syz.0.1580': attribute type 11 has an invalid length. [ 560.739432][ T8758] netlink: 'syz.0.1580': attribute type 3 has an invalid length. [ 560.760549][ T8758] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1580'. [ 561.185600][ T8763] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 561.311777][ T8763] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 561.357878][ T8753] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1577'. [ 561.711062][ T8766] netlink: 'syz.2.1582': attribute type 12 has an invalid length. [ 561.723249][ T8766] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.1582'. [ 561.805182][ T8773] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1593'. [ 562.077652][ T8775] netlink: 'syz.4.1586': attribute type 11 has an invalid length. [ 562.132832][ T8777] netlink: 'syz.0.1585': attribute type 10 has an invalid length. [ 562.152265][ T8780] FAULT_INJECTION: forcing a failure. [ 562.152265][ T8780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 562.195675][ T8780] CPU: 0 PID: 8780 Comm: syz.2.1587 Not tainted 6.1.131-syzkaller #0 [ 562.203813][ T8780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 562.213919][ T8780] Call Trace: [ 562.217228][ T8780] [ 562.220185][ T8780] dump_stack_lvl+0x1e3/0x2cb [ 562.224901][ T8780] ? nf_tcp_handle_invalid+0x647/0x647 [ 562.230405][ T8780] ? panic+0x764/0x764 [ 562.234513][ T8780] ? __lock_acquire+0x1f80/0x1f80 [ 562.239606][ T8780] should_fail_ex+0x3a6/0x4d0 [ 562.244339][ T8780] _copy_from_user+0x2b/0x170 [ 562.249151][ T8780] __sys_bpf+0x226/0x6c0 [ 562.253422][ T8780] ? ktime_get+0x242/0x270 [ 562.257880][ T8780] ? bpf_link_show_fdinfo+0x300/0x300 [ 562.263281][ T8780] ? perf_trace_preemptirq_template+0xf4/0x3d0 [ 562.269489][ T8780] ? print_irqtrace_events+0x210/0x210 [ 562.274992][ T8780] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 562.281024][ T8780] ? syscall_enter_from_user_mode+0x2e/0x230 [ 562.287040][ T8780] ? lockdep_hardirqs_on+0x94/0x130 [ 562.292278][ T8780] __x64_sys_bpf+0x78/0x90 [ 562.296735][ T8780] do_syscall_64+0x3b/0xb0 [ 562.301191][ T8780] ? clear_bhb_loop+0x45/0xa0 [ 562.305908][ T8780] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 562.311837][ T8780] RIP: 0033:0x7fc3a1b8d169 [ 562.316286][ T8780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.335943][ T8780] RSP: 002b:00007fc3a29ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 562.344570][ T8780] RAX: ffffffffffffffda RBX: 00007fc3a1da5fa0 RCX: 00007fc3a1b8d169 [ 562.352583][ T8780] RDX: 0000000000000050 RSI: 0000400000000080 RDI: 000000000000000a [ 562.360601][ T8780] RBP: 00007fc3a29ff090 R08: 0000000000000000 R09: 0000000000000000 [ 562.368619][ T8780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.376632][ T8780] R13: 0000000000000000 R14: 00007fc3a1da5fa0 R15: 00007ffe0b268e48 [ 562.384669][ T8780] [ 562.563771][ T8775] netlink: 'syz.4.1586': attribute type 3 has an invalid length. [ 562.905843][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.912230][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.955593][ T8796] FAULT_INJECTION: forcing a failure. [ 563.955593][ T8796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.000347][ T8796] CPU: 1 PID: 8796 Comm: syz.2.1595 Not tainted 6.1.131-syzkaller #0 [ 564.008488][ T8796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 564.018581][ T8796] Call Trace: [ 564.021890][ T8796] [ 564.024853][ T8796] dump_stack_lvl+0x1e3/0x2cb [ 564.029581][ T8796] ? nf_tcp_handle_invalid+0x647/0x647 [ 564.035085][ T8796] ? panic+0x764/0x764 [ 564.039214][ T8796] ? snprintf+0xd6/0x120 [ 564.043514][ T8796] should_fail_ex+0x3a6/0x4d0 [ 564.048255][ T8796] _copy_to_user+0x2b/0x130 [ 564.052805][ T8796] simple_read_from_buffer+0xc6/0x150 [ 564.058223][ T8796] proc_fail_nth_read+0x1a3/0x210 [ 564.063272][ T8796] ? proc_fault_inject_write+0x390/0x390 [ 564.068930][ T8796] ? fsnotify_perm+0x439/0x590 [ 564.073708][ T8796] ? proc_fault_inject_write+0x390/0x390 [ 564.079385][ T8796] vfs_read+0x2ed/0xbf0 [ 564.083555][ T8796] ? __fdget_pos+0x2ba/0x360 [ 564.088155][ T8796] ? kernel_read+0x1f0/0x1f0 [ 564.092754][ T8796] ? __fget_files+0x28/0x4a0 [ 564.097357][ T8796] ? __fget_files+0x435/0x4a0 [ 564.102052][ T8796] ? __fdget_pos+0x2ba/0x360 [ 564.106656][ T8796] ? ksys_read+0x77/0x2c0 [ 564.110995][ T8796] ksys_read+0x19c/0x2c0 [ 564.115247][ T8796] ? print_irqtrace_events+0x210/0x210 [ 564.120727][ T8796] ? vfs_write+0xbc0/0xbc0 [ 564.125151][ T8796] ? syscall_enter_from_user_mode+0x2e/0x230 [ 564.131145][ T8796] ? lockdep_hardirqs_on+0x94/0x130 [ 564.136365][ T8796] ? syscall_enter_from_user_mode+0x2e/0x230 [ 564.142364][ T8796] do_syscall_64+0x3b/0xb0 [ 564.146786][ T8796] ? clear_bhb_loop+0x45/0xa0 [ 564.151474][ T8796] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 564.157376][ T8796] RIP: 0033:0x7fc3a1b8bb7c [ 564.161818][ T8796] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 564.181535][ T8796] RSP: 002b:00007fc3a29ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 564.189968][ T8796] RAX: ffffffffffffffda RBX: 00007fc3a1da5fa0 RCX: 00007fc3a1b8bb7c [ 564.198034][ T8796] RDX: 000000000000000f RSI: 00007fc3a29ff0a0 RDI: 0000000000000005 [ 564.206104][ T8796] RBP: 00007fc3a29ff090 R08: 0000000000000000 R09: 0000000000000000 [ 564.214084][ T8796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.222058][ T8796] R13: 0000000000000000 R14: 00007fc3a1da5fa0 R15: 00007ffe0b268e48 [ 564.230054][ T8796] [ 564.332989][ T8798] netlink: 'syz.4.1596': attribute type 11 has an invalid length. [ 564.406845][ T8807] netlink: 'syz.2.1599': attribute type 10 has an invalid length. [ 564.435063][ T8798] netlink: 'syz.4.1596': attribute type 3 has an invalid length. [ 564.454527][ T8798] __nla_validate_parse: 1 callbacks suppressed [ 564.454546][ T8798] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1596'. [ 564.615096][ T8814] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1601'. [ 565.029471][ T8822] FAULT_INJECTION: forcing a failure. [ 565.029471][ T8822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.074692][ T8822] CPU: 1 PID: 8822 Comm: syz.3.1604 Not tainted 6.1.131-syzkaller #0 [ 565.082837][ T8822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 565.092918][ T8822] Call Trace: [ 565.096216][ T8822] [ 565.099165][ T8822] dump_stack_lvl+0x1e3/0x2cb [ 565.103879][ T8822] ? nf_tcp_handle_invalid+0x647/0x647 [ 565.109367][ T8822] ? panic+0x764/0x764 [ 565.113468][ T8822] ? __lock_acquire+0x1f80/0x1f80 [ 565.118538][ T8822] should_fail_ex+0x3a6/0x4d0 [ 565.123264][ T8822] _copy_from_user+0x2b/0x170 [ 565.127973][ T8822] __sys_bpf+0x226/0x6c0 [ 565.132225][ T8822] ? __fget_files+0x435/0x4a0 [ 565.136917][ T8822] ? bpf_link_show_fdinfo+0x300/0x300 [ 565.142294][ T8822] ? perf_trace_preemptirq_template+0xf4/0x3d0 [ 565.148472][ T8822] ? print_irqtrace_events+0x210/0x210 [ 565.153946][ T8822] ? print_irqtrace_events+0x210/0x210 [ 565.159433][ T8822] ? syscall_enter_from_user_mode+0x2e/0x230 [ 565.165430][ T8822] ? lockdep_hardirqs_on+0x94/0x130 [ 565.170657][ T8822] __x64_sys_bpf+0x78/0x90 [ 565.175106][ T8822] do_syscall_64+0x3b/0xb0 [ 565.179633][ T8822] ? clear_bhb_loop+0x45/0xa0 [ 565.184334][ T8822] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 565.190240][ T8822] RIP: 0033:0x7ff10118d169 [ 565.194662][ T8822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.214275][ T8822] RSP: 002b:00007ff101fbe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 565.222697][ T8822] RAX: ffffffffffffffda RBX: 00007ff1013a6080 RCX: 00007ff10118d169 [ 565.230688][ T8822] RDX: 0000000000000048 RSI: 000040000000e000 RDI: 0000000000000005 [ 565.238666][ T8822] RBP: 00007ff101fbe090 R08: 0000000000000000 R09: 0000000000000000 [ 565.246644][ T8822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.254618][ T8822] R13: 0000000000000001 R14: 00007ff1013a6080 R15: 00007ffd71385578 [ 565.262606][ T8822] [ 565.732138][ T8837] netlink: 'syz.3.1607': attribute type 11 has an invalid length. [ 566.104862][ T8837] netlink: 'syz.3.1607': attribute type 3 has an invalid length. [ 566.112975][ T8837] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1607'. [ 566.631105][ T8852] netlink: 'syz.4.1613': attribute type 10 has an invalid length. [ 567.059751][ T8858] netlink: 'syz.4.1616': attribute type 11 has an invalid length. [ 567.517441][ T8858] netlink: 'syz.4.1616': attribute type 3 has an invalid length. [ 567.557069][ T8858] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1616'. [ 568.050341][ T8869] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1620'. [ 568.258059][ T8874] FAULT_INJECTION: forcing a failure. [ 568.258059][ T8874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.302120][ T8874] CPU: 1 PID: 8874 Comm: syz.3.1622 Not tainted 6.1.131-syzkaller #0 [ 568.310276][ T8874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 568.320367][ T8874] Call Trace: [ 568.323687][ T8874] [ 568.326656][ T8874] dump_stack_lvl+0x1e3/0x2cb [ 568.331379][ T8874] ? nf_tcp_handle_invalid+0x647/0x647 [ 568.336875][ T8874] ? panic+0x764/0x764 [ 568.340988][ T8874] ? __lock_acquire+0x1f80/0x1f80 [ 568.346070][ T8874] should_fail_ex+0x3a6/0x4d0 [ 568.350801][ T8874] _copy_from_user+0x2b/0x170 [ 568.355514][ T8874] copy_msghdr_from_user+0xaa/0x670 [ 568.360753][ T8874] ? sendmsg_copy_msghdr+0x70/0x70 [ 568.365930][ T8874] __sys_sendmsg+0x236/0x390 [ 568.370597][ T8874] ? ____sys_sendmsg+0x9a0/0x9a0 [ 568.375585][ T8874] ? vfs_write+0x6cf/0xbc0 [ 568.380057][ T8874] ? perf_trace_run_bpf_submit+0xf7/0x1d0 [ 568.385836][ T8874] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 568.391973][ T8874] ? syscall_enter_from_user_mode+0x2e/0x230 [ 568.397990][ T8874] ? lockdep_hardirqs_on+0x94/0x130 [ 568.403226][ T8874] ? syscall_enter_from_user_mode+0x2e/0x230 [ 568.409247][ T8874] do_syscall_64+0x3b/0xb0 [ 568.413693][ T8874] ? clear_bhb_loop+0x45/0xa0 [ 568.418404][ T8874] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 568.424329][ T8874] RIP: 0033:0x7ff10118d169 [ 568.428770][ T8874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.448406][ T8874] RSP: 002b:00007ff101fdf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 568.456851][ T8874] RAX: ffffffffffffffda RBX: 00007ff1013a5fa0 RCX: 00007ff10118d169 [ 568.464851][ T8874] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000000000000005 [ 568.472856][ T8874] RBP: 00007ff101fdf090 R08: 0000000000000000 R09: 0000000000000000 [ 568.480860][ T8874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.488862][ T8874] R13: 0000000000000000 R14: 00007ff1013a5fa0 R15: 00007ffd71385578 [ 568.496879][ T8874] [ 568.810478][ T8879] device syzkaller0 entered promiscuous mode [ 570.728656][ T8893] netlink: 'syz.0.1625': attribute type 3 has an invalid length. [ 570.737665][ T8893] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1625'. [ 570.858264][ T8896] FAULT_INJECTION: forcing a failure. [ 570.858264][ T8896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.872797][ T8896] CPU: 1 PID: 8896 Comm: syz.4.1629 Not tainted 6.1.131-syzkaller #0 [ 570.880910][ T8896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 570.890988][ T8896] Call Trace: [ 570.894287][ T8896] [ 570.897221][ T8896] dump_stack_lvl+0x1e3/0x2cb [ 570.901955][ T8896] ? nf_tcp_handle_invalid+0x647/0x647 [ 570.907442][ T8896] ? panic+0x764/0x764 [ 570.911555][ T8896] ? __lock_acquire+0x1f80/0x1f80 [ 570.916622][ T8896] should_fail_ex+0x3a6/0x4d0 [ 570.921410][ T8896] _copy_from_user+0x2b/0x170 [ 570.926117][ T8896] __sys_bpf+0x226/0x6c0 [ 570.930379][ T8896] ? __fget_files+0x435/0x4a0 [ 570.935088][ T8896] ? bpf_link_show_fdinfo+0x300/0x300 [ 570.940495][ T8896] ? perf_trace_preemptirq_template+0xf4/0x3d0 [ 570.946681][ T8896] ? print_irqtrace_events+0x210/0x210 [ 570.952178][ T8896] ? print_irqtrace_events+0x210/0x210 [ 570.957678][ T8896] ? syscall_enter_from_user_mode+0x2e/0x230 [ 570.963697][ T8896] ? lockdep_hardirqs_on+0x94/0x130 [ 570.968930][ T8896] __x64_sys_bpf+0x78/0x90 [ 570.973375][ T8896] do_syscall_64+0x3b/0xb0 [ 570.977807][ T8896] ? clear_bhb_loop+0x45/0xa0 [ 570.982522][ T8896] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 570.988443][ T8896] RIP: 0033:0x7f0635b8d169 [ 570.992884][ T8896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.012605][ T8896] RSP: 002b:00007f063698c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 571.021038][ T8896] RAX: ffffffffffffffda RBX: 00007f0635da5fa0 RCX: 00007f0635b8d169 [ 571.029125][ T8896] RDX: 0000000000000050 RSI: 0000400000000a80 RDI: 0000000000000000 [ 571.037104][ T8896] RBP: 00007f063698c090 R08: 0000000000000000 R09: 0000000000000000 [ 571.045090][ T8896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.053080][ T8896] R13: 0000000000000000 R14: 00007f0635da5fa0 R15: 00007ffc35b1f808 [ 571.061102][ T8896] [ 571.447832][ T8887] netlink: 'syz.3.1626': attribute type 10 has an invalid length. [ 571.456186][ T8889] netlink: 'syz.0.1625': attribute type 11 has an invalid length. [ 571.869801][ T8908] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1633'. [ 572.168305][ T8915] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1634'. [ 572.292131][ T8920] FAULT_INJECTION: forcing a failure. [ 572.292131][ T8920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.518042][ T8920] CPU: 0 PID: 8920 Comm: syz.3.1637 Not tainted 6.1.131-syzkaller #0 [ 572.526182][ T8920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 572.536340][ T8920] Call Trace: [ 572.539628][ T8920] [ 572.542561][ T8920] dump_stack_lvl+0x1e3/0x2cb [ 572.547249][ T8920] ? nf_tcp_handle_invalid+0x647/0x647 [ 572.552723][ T8920] ? panic+0x764/0x764 [ 572.556806][ T8920] ? __lock_acquire+0x1f80/0x1f80 [ 572.561850][ T8920] should_fail_ex+0x3a6/0x4d0 [ 572.566546][ T8920] _copy_from_user+0x2b/0x170 [ 572.571235][ T8920] copy_msghdr_from_user+0xaa/0x670 [ 572.576456][ T8920] ? sendmsg_copy_msghdr+0x70/0x70 [ 572.581591][ T8920] __sys_sendmsg+0x236/0x390 [ 572.586191][ T8920] ? ____sys_sendmsg+0x9a0/0x9a0 [ 572.591159][ T8920] ? vfs_write+0x6cf/0xbc0 [ 572.595613][ T8920] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 572.601617][ T8920] ? syscall_enter_from_user_mode+0x2e/0x230 [ 572.607611][ T8920] ? lockdep_hardirqs_on+0x94/0x130 [ 572.612822][ T8920] ? syscall_enter_from_user_mode+0x2e/0x230 [ 572.618813][ T8920] do_syscall_64+0x3b/0xb0 [ 572.623233][ T8920] ? clear_bhb_loop+0x45/0xa0 [ 572.627927][ T8920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 572.633859][ T8920] RIP: 0033:0x7ff10118d169 [ 572.638289][ T8920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.657900][ T8920] RSP: 002b:00007ff101fdf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 572.666323][ T8920] RAX: ffffffffffffffda RBX: 00007ff1013a5fa0 RCX: 00007ff10118d169 [ 572.674307][ T8920] RDX: 0000000000040000 RSI: 0000400000000940 RDI: 0000000000000003 [ 572.682455][ T8920] RBP: 00007ff101fdf090 R08: 0000000000000000 R09: 0000000000000000 [ 572.690431][ T8920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.698417][ T8920] R13: 0000000000000000 R14: 00007ff1013a5fa0 R15: 00007ffd71385578 [ 572.706495][ T8920] [ 572.903299][ T8927] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1641'. [ 573.066179][ T8931] netlink: 'syz.4.1643': attribute type 10 has an invalid length. [ 573.098557][ T8935] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1644'. [ 573.110581][ T8934] FAULT_INJECTION: forcing a failure. [ 573.110581][ T8934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 573.175565][ T8934] CPU: 0 PID: 8934 Comm: syz.1.1645 Not tainted 6.1.131-syzkaller #0 [ 573.183703][ T8934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 573.193795][ T8934] Call Trace: [ 573.197141][ T8934] [ 573.200093][ T8934] dump_stack_lvl+0x1e3/0x2cb [ 573.204805][ T8934] ? nf_tcp_handle_invalid+0x647/0x647 [ 573.210296][ T8934] ? panic+0x764/0x764 [ 573.214404][ T8934] ? __lock_acquire+0x1f80/0x1f80 [ 573.219510][ T8934] should_fail_ex+0x3a6/0x4d0 [ 573.224243][ T8934] _copy_from_user+0x2b/0x170 [ 573.228967][ T8934] __sys_bpf+0x226/0x6c0 [ 573.233272][ T8934] ? bpf_link_show_fdinfo+0x300/0x300 [ 573.238873][ T8934] ? print_irqtrace_events+0x210/0x210 [ 573.244388][ T8934] ? print_irqtrace_events+0x210/0x210 [ 573.249898][ T8934] ? syscall_enter_from_user_mode+0x2e/0x230 [ 573.255907][ T8934] ? lockdep_hardirqs_on+0x94/0x130 [ 573.261127][ T8934] __x64_sys_bpf+0x78/0x90 [ 573.265577][ T8934] do_syscall_64+0x3b/0xb0 [ 573.270005][ T8934] ? clear_bhb_loop+0x45/0xa0 [ 573.274701][ T8934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 573.280613][ T8934] RIP: 0033:0x7ff92a18d169 [ 573.285060][ T8934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.304683][ T8934] RSP: 002b:00007ff92af24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 573.313109][ T8934] RAX: ffffffffffffffda RBX: 00007ff92a3a5fa0 RCX: 00007ff92a18d169 [ 573.321084][ T8934] RDX: 0000000000000048 RSI: 000040000000e000 RDI: 0000000000000005 [ 573.329060][ T8934] RBP: 00007ff92af24090 R08: 0000000000000000 R09: 0000000000000000 [ 573.337034][ T8934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.345007][ T8934] R13: 0000000000000000 R14: 00007ff92a3a5fa0 R15: 00007ffc8142a228 [ 573.352995][ T8934] [ 573.713410][ T8950] netlink: 'syz.3.1649': attribute type 11 has an invalid length. [ 573.865240][ T8950] netlink: 'syz.3.1649': attribute type 3 has an invalid length. [ 573.873154][ T8950] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1649'. [ 573.995364][ T8942] netlink: 'syz.0.1640': attribute type 10 has an invalid length. [ 574.230350][ T8953] netlink: 'syz.2.1651': attribute type 3 has an invalid length. [ 574.253260][ T8953] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1651'. [ 574.691334][ T8975] netlink: 'syz.4.1657': attribute type 10 has an invalid length. [ 574.736601][ T8976] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.1658'. [ 575.384960][ T8990] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 575.449170][ T9000] netlink: 'syz.3.1665': attribute type 3 has an invalid length. [ 575.473408][ T9000] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1665'. [ 575.593943][ T8997] netlink: 'syz.3.1665': attribute type 11 has an invalid length. [ 575.648922][ T8995] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1664'. [ 576.052608][ T9014] FAULT_INJECTION: forcing a failure. [ 576.052608][ T9014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 576.120367][ T9014] CPU: 1 PID: 9014 Comm: syz.4.1671 Not tainted 6.1.131-syzkaller #0 [ 576.128516][ T9014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 576.138614][ T9014] Call Trace: [ 576.141374][ T9008] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1669'. [ 576.141902][ T9014] [ 576.141914][ T9014] dump_stack_lvl+0x1e3/0x2cb [ 576.141947][ T9014] ? nf_tcp_handle_invalid+0x647/0x647 [ 576.141972][ T9014] ? panic+0x764/0x764 [ 576.142004][ T9014] ? __lock_acquire+0x1f80/0x1f80 [ 576.142048][ T9014] should_fail_ex+0x3a6/0x4d0 [ 576.142096][ T9014] _copy_from_user+0x2b/0x170 [ 576.142128][ T9014] __sys_bpf+0x226/0x6c0 [ 576.142153][ T9014] ? bpf_link_show_fdinfo+0x300/0x300 [ 576.142196][ T9014] ? ct_irq_exit_irqson+0x13c/0x1b0 [ 576.142232][ T9014] ? syscall_enter_from_user_mode+0x37/0x230 [ 576.142265][ T9014] __x64_sys_bpf+0x78/0x90 [ 576.142300][ T9014] do_syscall_64+0x3b/0xb0 [ 576.142320][ T9014] ? clear_bhb_loop+0x45/0xa0 [ 576.142430][ T9014] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 576.142463][ T9014] RIP: 0033:0x7f0635b8d169 [ 576.142484][ T9014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.142504][ T9014] RSP: 002b:00007f063696b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 576.142532][ T9014] RAX: ffffffffffffffda RBX: 00007f0635da6080 RCX: 00007f0635b8d169 [ 576.142550][ T9014] RDX: 0000000000000078 RSI: 0000400000000440 RDI: 0000000000000005 [ 576.142566][ T9014] RBP: 00007f063696b090 R08: 0000000000000000 R09: 0000000000000000 [ 576.142581][ T9014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.142595][ T9014] R13: 0000000000000000 R14: 00007f0635da6080 R15: 00007ffc35b1f808 [ 576.142629][ T9014] [ 576.412157][ T9006] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 576.478101][ T9018] validate_nla: 4 callbacks suppressed [ 576.478121][ T9018] netlink: 'syz.0.1672': attribute type 10 has an invalid length. [ 576.859424][ T9021] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1673'. [ 577.811416][ T9047] device syzkaller0 entered promiscuous mode [ 577.838552][ T9052] FAULT_INJECTION: forcing a failure. [ 577.838552][ T9052] name failslab, interval 1, probability 0, space 0, times 0 [ 577.853043][ T9052] CPU: 1 PID: 9052 Comm: syz.3.1684 Not tainted 6.1.131-syzkaller #0 [ 577.861203][ T9052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 577.863876][ T9054] netlink: 'syz.0.1685': attribute type 10 has an invalid length. [ 577.871290][ T9052] Call Trace: [ 577.882468][ T9052] [ 577.885455][ T9052] dump_stack_lvl+0x1e3/0x2cb [ 577.890226][ T9052] ? nf_tcp_handle_invalid+0x647/0x647 [ 577.895769][ T9052] ? panic+0x764/0x764 [ 577.899918][ T9052] ? __might_sleep+0xb0/0xb0 [ 577.904563][ T9052] ? __lock_acquire+0x125b/0x1f80 [ 577.909690][ T9052] should_fail_ex+0x3a6/0x4d0 [ 577.914462][ T9052] should_failslab+0x5/0x20 [ 577.919017][ T9052] slab_pre_alloc_hook+0x59/0x300 [ 577.924129][ T9052] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 577.929911][ T9052] __kmem_cache_alloc_node+0x47/0x260 [ 577.935374][ T9052] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 577.941164][ T9052] __kmalloc+0xa1/0x230 [ 577.945391][ T9052] ? rcu_is_watching+0x11/0xb0 [ 577.950245][ T9052] tomoyo_realpath_from_path+0xcb/0x5d0 [ 577.955893][ T9052] tomoyo_path_number_perm+0x21f/0x7f0 [ 577.961404][ T9052] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 577.967070][ T9052] ? trace_event_raw_event_lock+0x240/0x240 [ 577.973009][ T9052] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 577.978562][ T9052] ? __fget_files+0x28/0x4a0 [ 577.983253][ T9052] ? __fget_files+0x28/0x4a0 [ 577.987965][ T9052] ? __fget_files+0x435/0x4a0 [ 577.992706][ T9052] ? __fget_files+0x28/0x4a0 [ 577.997366][ T9052] security_file_ioctl+0x6d/0xa0 [ 578.002370][ T9052] __se_sys_ioctl+0x47/0x160 [ 578.007012][ T9052] do_syscall_64+0x3b/0xb0 [ 578.011477][ T9052] ? clear_bhb_loop+0x45/0xa0 [ 578.016193][ T9052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 578.022415][ T9052] RIP: 0033:0x7ff10118d169 [ 578.026905][ T9052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 578.046747][ T9052] RSP: 002b:00007ff101fdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 578.055312][ T9052] RAX: ffffffffffffffda RBX: 00007ff1013a5fa0 RCX: 00007ff10118d169 [ 578.063395][ T9052] RDX: 0000400000000280 RSI: 0000000000008914 RDI: 0000000000000006 [ 578.071389][ T9052] RBP: 00007ff101fdf090 R08: 0000000000000000 R09: 0000000000000000 [ 578.079384][ T9052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.087377][ T9052] R13: 0000000000000000 R14: 00007ff1013a5fa0 R15: 00007ffd71385578 [ 578.095450][ T9052] [ 578.105369][ T9052] ERROR: Out of memory at tomoyo_realpath_from_path. [ 578.432766][ T9064] netlink: 'syz.4.1686': attribute type 3 has an invalid length. [ 578.480400][ T9064] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1686'. [ 580.149518][ T9060] netlink: 'syz.4.1686': attribute type 11 has an invalid length. [ 580.158518][ T9057] netlink: 'syz.2.1687': attribute type 10 has an invalid length. [ 580.192321][ T9057] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 580.537897][ T9083] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1692'. [ 580.638912][ T9081] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1691'. [ 581.059348][ T9095] netlink: 'syz.1.1697': attribute type 10 has an invalid length. [ 581.415838][ T9103] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1699'. [ 582.094481][ T9111] device syzkaller0 entered promiscuous mode [ 585.278904][ T9118] netlink: 'syz.3.1704': attribute type 10 has an invalid length. [ 585.300711][ T9118] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 585.565664][ T9136] netlink: 'syz.0.1712': attribute type 11 has an invalid length. [ 585.651475][ T9138] netlink: 'syz.0.1712': attribute type 3 has an invalid length. [ 585.713288][ T9138] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1712'. [ 585.999737][ T9147] netlink: 'syz.4.1717': attribute type 11 has an invalid length. [ 586.107194][ T9147] netlink: 'syz.4.1717': attribute type 3 has an invalid length. [ 586.136976][ T9147] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1717'. [ 586.249211][ T9153] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1719'. [ 586.797279][ T9166] FAULT_INJECTION: forcing a failure. [ 586.797279][ T9166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.818916][ T9166] CPU: 1 PID: 9166 Comm: syz.2.1725 Not tainted 6.1.131-syzkaller #0 [ 586.827042][ T9166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 586.837130][ T9166] Call Trace: [ 586.840431][ T9166] [ 586.843378][ T9166] dump_stack_lvl+0x1e3/0x2cb [ 586.848086][ T9166] ? nf_tcp_handle_invalid+0x647/0x647 [ 586.853564][ T9166] ? panic+0x764/0x764 [ 586.857656][ T9166] ? __lock_acquire+0x1f80/0x1f80 [ 586.862718][ T9166] should_fail_ex+0x3a6/0x4d0 [ 586.867422][ T9166] _copy_from_user+0x2b/0x170 [ 586.872158][ T9166] __sys_bpf+0x226/0x6c0 [ 586.876411][ T9166] ? __fget_files+0x435/0x4a0 [ 586.881369][ T9166] ? bpf_link_show_fdinfo+0x300/0x300 [ 586.886745][ T9166] ? perf_trace_preemptirq_template+0xf4/0x3d0 [ 586.892926][ T9166] ? print_irqtrace_events+0x210/0x210 [ 586.898400][ T9166] ? print_irqtrace_events+0x210/0x210 [ 586.903882][ T9166] ? syscall_enter_from_user_mode+0x2e/0x230 [ 586.909874][ T9166] ? lockdep_hardirqs_on+0x94/0x130 [ 586.915094][ T9166] __x64_sys_bpf+0x78/0x90 [ 586.919543][ T9166] do_syscall_64+0x3b/0xb0 [ 586.923979][ T9166] ? clear_bhb_loop+0x45/0xa0 [ 586.928684][ T9166] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 586.934607][ T9166] RIP: 0033:0x7fc3a1b8d169 [ 586.939028][ T9166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.958831][ T9166] RSP: 002b:00007fc3a29ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 586.967274][ T9166] RAX: ffffffffffffffda RBX: 00007fc3a1da5fa0 RCX: 00007fc3a1b8d169 [ 586.975288][ T9166] RDX: 0000000000000038 RSI: 0000400000000300 RDI: 000000000000001a [ 586.983276][ T9166] RBP: 00007fc3a29ff090 R08: 0000000000000000 R09: 0000000000000000 [ 586.991257][ T9166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.999254][ T9166] R13: 0000000000000000 R14: 00007fc3a1da5fa0 R15: 00007ffe0b268e48 [ 587.007256][ T9166] [ 587.082652][ T9170] netlink: 'syz.0.1727': attribute type 11 has an invalid length. [ 587.654119][ T9179] netlink: 'syz.1.1730': attribute type 10 has an invalid length. [ 588.114698][ T9190] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1734'. [ 589.360249][ T9209] netlink: 'syz.3.1740': attribute type 3 has an invalid length. [ 589.388413][ T9209] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1740'. [ 589.388586][ T9215] FAULT_INJECTION: forcing a failure. [ 589.388586][ T9215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 589.417028][ T9215] CPU: 0 PID: 9215 Comm: syz.4.1743 Not tainted 6.1.131-syzkaller #0 [ 589.425167][ T9215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 589.435266][ T9215] Call Trace: [ 589.438588][ T9215] [ 589.441528][ T9215] dump_stack_lvl+0x1e3/0x2cb [ 589.446233][ T9215] ? nf_tcp_handle_invalid+0x647/0x647 [ 589.451732][ T9215] ? panic+0x764/0x764 [ 589.455821][ T9215] ? __lock_acquire+0x1f80/0x1f80 [ 589.460869][ T9215] ? __check_object_size+0x73/0xa30 [ 589.466085][ T9215] ? __might_fault+0x1d/0x110 [ 589.470785][ T9215] should_fail_ex+0x3a6/0x4d0 [ 589.475525][ T9215] _copy_from_user+0x2b/0x170 [ 589.480222][ T9215] __sys_bpf+0x226/0x6c0 [ 589.484493][ T9215] ? __fget_files+0x435/0x4a0 [ 589.489187][ T9215] ? bpf_link_show_fdinfo+0x300/0x300 [ 589.494569][ T9215] ? perf_trace_preemptirq_template+0xf4/0x3d0 [ 589.500758][ T9215] ? print_irqtrace_events+0x210/0x210 [ 589.506239][ T9215] ? print_irqtrace_events+0x210/0x210 [ 589.511727][ T9215] ? syscall_enter_from_user_mode+0x2e/0x230 [ 589.517809][ T9215] ? lockdep_hardirqs_on+0x94/0x130 [ 589.523024][ T9215] __x64_sys_bpf+0x78/0x90 [ 589.527464][ T9215] do_syscall_64+0x3b/0xb0 [ 589.531887][ T9215] ? clear_bhb_loop+0x45/0xa0 [ 589.536583][ T9215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 589.542525][ T9215] RIP: 0033:0x7f0635b8d169 [ 589.547040][ T9215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.566658][ T9215] RSP: 002b:00007f063698c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 589.575086][ T9215] RAX: ffffffffffffffda RBX: 00007f0635da5fa0 RCX: 00007f0635b8d169 [ 589.583067][ T9215] RDX: 0000000000000020 RSI: 0000400000000200 RDI: 0000000000000012 [ 589.591049][ T9215] RBP: 00007f063698c090 R08: 0000000000000000 R09: 0000000000000000 [ 589.599028][ T9215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.607004][ T9215] R13: 0000000000000000 R14: 00007f0635da5fa0 R15: 00007ffc35b1f808 [ 589.615008][ T9215] [ 589.636889][ T9216] netlink: 'syz.0.1744': attribute type 10 has an invalid length. [ 590.251736][ T9230] netlink: 'syz.0.1747': attribute type 11 has an invalid length. [ 591.564593][ T9255] netlink: 'syz.2.1756': attribute type 10 has an invalid length. [ 592.054334][ T9272] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 592.062205][ T9272] #PF: supervisor instruction fetch in kernel mode [ 592.068740][ T9272] #PF: error_code(0x0010) - not-present page [ 592.074747][ T9272] PGD 28d66067 P4D 28d66067 PUD 0 [ 592.079893][ T9272] Oops: 0010 [#1] PREEMPT SMP KASAN [ 592.085109][ T9272] CPU: 0 PID: 9272 Comm: syz.1.1762 Not tainted 6.1.131-syzkaller #0 [ 592.093201][ T9272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 592.103281][ T9272] RIP: 0010:0x0 [ 592.106768][ T9272] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 592.114149][ T9272] RSP: 0018:ffffc9000d1f7078 EFLAGS: 00010246 [ 592.120232][ T9272] RAX: 1ffffffff172a5c3 RBX: ffffffff8b952e18 RCX: 0000000000000000 [ 592.128214][ T9272] RDX: ffffc9000d1f7120 RSI: 0000000000000001 RDI: ffff888057420000 [ 592.136194][ T9272] RBP: ffffc9000d1f71f0 R08: ffffffff85b66061 R09: 0000000000400000 [ 592.144176][ T9272] R10: 0000000000000a4c R11: dffffc0000000001 R12: dffffc0000000000 [ 592.152167][ T9272] R13: ffff888057420000 R14: ffffc9000d1f7158 R15: ffffc9000d1f7158 [ 592.160191][ T9272] FS: 00007ff92af246c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 592.169135][ T9272] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 592.175739][ T9272] CR2: ffffffffffffffd6 CR3: 0000000074413000 CR4: 00000000003506f0 [ 592.183736][ T9272] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 592.191721][ T9272] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 592.199717][ T9272] Call Trace: [ 592.203005][ T9272] [ 592.205943][ T9272] ? __die_body+0x5e/0xa0 [ 592.210297][ T9272] ? page_fault_oops+0x7fe/0xaa0 [ 592.215251][ T9272] ? mark_lock+0x9a/0x340 [ 592.219722][ T9272] ? kernelmode_fixup_or_oops+0xd0/0xd0 [ 592.225298][ T9272] ? rcu_is_watching+0x11/0xb0 [ 592.230078][ T9272] ? is_errata93+0xc0/0x240 [ 592.234598][ T9272] ? exc_page_fault+0x3d1/0x620 [ 592.239466][ T9272] ? asm_exc_page_fault+0x22/0x30 [ 592.244512][ T9272] ? bond_get_slave_by_id+0x251/0x560 [ 592.249891][ T9272] bond_xdp_xmit+0x3fd/0x650 [ 592.254487][ T9272] ? bond_xdp_xmit+0xa7/0x650 [ 592.259175][ T9272] ? bond_xdp+0x950/0x950 [ 592.263506][ T9272] ? get_page_from_freelist+0x3731/0x38d0 [ 592.269236][ T9272] bq_xmit_all+0xe73/0x12e0 [ 592.273758][ T9272] ? __dev_flush+0x1c0/0x1c0 [ 592.278354][ T9272] ? __alloc_pages+0x770/0x770 [ 592.283121][ T9272] ? prepare_alloc_pages+0x35b/0x5b0 [ 592.288418][ T9272] ? rcu_is_watching+0x11/0xb0 [ 592.293186][ T9272] ? __alloc_pages+0x36f/0x770 [ 592.297955][ T9272] ? zone_statistics+0x160/0x160 [ 592.302899][ T9272] ? rcu_lockdep_current_cpu_online+0x33/0x120 [ 592.309054][ T9272] ? rcu_read_lock_bh_held+0x7a/0x110 [ 592.314531][ T9272] bq_enqueue+0x324/0x3b0 [ 592.318874][ T9272] dev_map_enqueue_multi+0xf8d/0x1100 [ 592.324263][ T9272] ? dev_map_enqueue+0x340/0x340 [ 592.329205][ T9272] ? memcpy+0x3c/0x60 [ 592.333192][ T9272] ? trace_page_pool_state_hold+0xb6/0x280 [ 592.339010][ T9272] xdp_do_redirect_frame+0x496/0x660 [ 592.344308][ T9272] bpf_test_run_xdp_live+0xbf4/0x1ea0 [ 592.349694][ T9272] ? __mutex_unlock_slowpath+0x218/0x750 [ 592.355341][ T9272] ? 0xffffffffa0003b40 [ 592.359492][ T9272] ? bpf_test_run_xdp_live+0x75c/0x1ea0 [ 592.365061][ T9272] ? xdp_convert_md_to_buff+0x330/0x330 [ 592.370633][ T9272] ? bpf_dispatcher_change_prog+0xdf5/0xf80 [ 592.376543][ T9272] ? 0xffffffffa0003b40 [ 592.380712][ T9272] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 592.386974][ T9272] ? __might_fault+0xbd/0x110 [ 592.391663][ T9272] ? _copy_from_user+0x109/0x170 [ 592.396609][ T9272] ? bpf_test_init+0x137/0x160 [ 592.401385][ T9272] ? xdp_convert_md_to_buff+0x5b/0x330 [ 592.406857][ T9272] bpf_prog_test_run_xdp+0x7d1/0x1130 [ 592.412251][ T9272] ? dev_put+0x80/0x80 [ 592.416336][ T9272] ? dev_put+0x80/0x80 [ 592.420414][ T9272] bpf_prog_test_run+0x32f/0x3a0 [ 592.425356][ T9272] __sys_bpf+0x3eb/0x6c0 [ 592.429604][ T9272] ? bpf_link_show_fdinfo+0x300/0x300 [ 592.434985][ T9272] ? print_irqtrace_events+0x210/0x210 [ 592.440459][ T9272] ? print_irqtrace_events+0x210/0x210 [ 592.445938][ T9272] ? syscall_enter_from_user_mode+0x2e/0x230 [ 592.451936][ T9272] ? lockdep_hardirqs_on+0x94/0x130 [ 592.457145][ T9272] __x64_sys_bpf+0x78/0x90 [ 592.461578][ T9272] do_syscall_64+0x3b/0xb0 [ 592.465997][ T9272] ? clear_bhb_loop+0x45/0xa0 [ 592.470681][ T9272] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 592.476582][ T9272] RIP: 0033:0x7ff92a18d169 [ 592.480997][ T9272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.500606][ T9272] RSP: 002b:00007ff92af24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 592.509142][ T9272] RAX: ffffffffffffffda RBX: 00007ff92a3a5fa0 RCX: 00007ff92a18d169 [ 592.517123][ T9272] RDX: 0000000000000050 RSI: 0000400000000600 RDI: 000000000000000a [ 592.525096][ T9272] RBP: 00007ff92a20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 592.533077][ T9272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.541057][ T9272] R13: 0000000000000000 R14: 00007ff92a3a5fa0 R15: 00007ffc8142a228 [ 592.549040][ T9272] [ 592.552058][ T9272] Modules linked in: [ 592.555984][ T9272] CR2: 0000000000000000 [ 592.560579][ T9272] ---[ end trace 0000000000000000 ]--- [ 592.566029][ T9272] RIP: 0010:0x0 [ 592.569497][ T9272] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 592.576858][ T9272] RSP: 0018:ffffc9000d1f7078 EFLAGS: 00010246 [ 592.582930][ T9272] RAX: 1ffffffff172a5c3 RBX: ffffffff8b952e18 RCX: 0000000000000000 [ 592.590904][ T9272] RDX: ffffc9000d1f7120 RSI: 0000000000000001 RDI: ffff888057420000 [ 592.598877][ T9272] RBP: ffffc9000d1f71f0 R08: ffffffff85b66061 R09: 0000000000400000 [ 592.606944][ T9272] R10: 0000000000000a4c R11: dffffc0000000001 R12: dffffc0000000000 [ 592.614922][ T9272] R13: ffff888057420000 R14: ffffc9000d1f7158 R15: ffffc9000d1f7158 [ 592.622898][ T9272] FS: 00007ff92af246c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 592.631830][ T9272] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 592.638417][ T9272] CR2: ffffffffffffffd6 CR3: 0000000074413000 CR4: 00000000003506f0 [ 592.646404][ T9272] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 592.654379][ T9272] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 592.662358][ T9272] Kernel panic - not syncing: Fatal exception in interrupt [ 592.669852][ T9272] Kernel Offset: disabled [ 592.674205][ T9272] Rebooting in 86400 seconds..