last executing test programs: 4.55754572s ago: executing program 4 (id=2374): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4, &(0x7f0000000040), 0x4) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu\t&0_&\t') socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0xa, 0x2, 0x88) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0xc}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r8, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r9 = socket$kcm(0x15, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000009500"/32], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$sock_attach_bpf(r9, 0x114, 0x8, 0x0, 0x0) 4.125176139s ago: executing program 4 (id=2379): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x63) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000001000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b7543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910ab193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68fe6b7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f8ce659e340c714809ec4d060bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd192595369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d4f17a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9570d730a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b94952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d830e1431ed6d646d13e8e7230300ef0a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000002000000000044ff72f96f084f4b6cdcb1b4a9d8e9f9021b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded5027a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b092b70f77f0f428d2000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634009aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3f19f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19006952fe2724c0105ab158a54a6a73000000000000000000000000b0d135da438cbe303f3ae070def97d6649b5a693ff5c788e5a406e1d06942ed51bff073011f6e6c29d3ea22e5fc26c7fbe37656229a6a12857ae9ed131ccdd513066bc9422ec38a1dc5212986d9bc330a23eb3b200af1a3678c2bfbe4b4ba6e8471495f6e82c5ee425973c590253e875352a3acaee044868f9b80f8fdc9d402007bb4c8df1b69d3d2b364ec9e4ed2f554118684eff1adf5b49b6b29232198e682dfa45dced8b332c404c8f292f36730845dc37dfe7a59e252ddc33ea9072dcd697a700cfac90b487660795f564ddb61fa3e4835f936984200000000000000000008e9f7bc3a00cd72ced7684e264e45398f7087734fcf2023a7a4c880f562f46f14cdc1bf472d74bc0c777b1021ff75de086c08f72a41399d3a3065b2f50a531cc90edbf88370ff50ba1aa6cc59076165a3ab90a3c90527b7c9711cf85bbb0cb0aebc47ab5c65458c40020f2cfb10e5f0a1594ae491e8756446e6873a8b222ae7e58dd7640666e359fc583e17ed6bcb30c0fafbba761e756ca80286d38bb92dd9ba17c1bb628e5b8d52c9a02a67f788ab88dca817cb4886942a279e06f45c8c936f5c46e1a008097471ca0ee26bcfabf7adb9c90a10539d960dec5c84464f6bc68318e7e899acf20ea41b071132d7a5945e941334855ce6149deaae1b5b83045e83bfc208079e6e58ebb4176b126c743111c5a712f465a3007d665ac21c43a544947c9d13e5206a21025f6acd47c2d333e648dcbf2e4989a1d4a176fe8f7a8cf0aeaf9736118b036639cb35810ea88213ff2a0842d420d418d026a101222a4ebd18fc89f04b5a9056ca6c00308936679474fa83bdf6eac126c9be33c551bccd42d8000736ed9a64ff7cb87d44c9bcf821c96dcd34aadfcc42fabd5976cedc9a4eef24764168056d0645c7aa007d69df4fa8de1224a56f0799ad59ee5c84418a1faae590b6c896cdd808376b6b51b217fcad5fbd7e3208d009e37484378df3ee5969f817d715d60fdd02c04e3fdd62a29285ac92f6836cbeb4d04d84c396150b2e17828d924013978173c48635e0b1ad4a0c5956717629794b39cf18d599e723d3c24689a5fea6cc1f59d1ba1fccfba88e02f9907"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)=r3}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8000025ffffffb70300000800000085000000330000009500"/64], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r6, 0x4008240b, &(0x7f00000013c0)) perf_event_open(0x0, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b9090000000b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd40dd6", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000100)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0xd8}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xd6a3}], 0x4}, 0x40c04) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) 3.397657317s ago: executing program 4 (id=2382): openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000bd1404050000000018150000", @ANYBLOB="405a69ee3b8020a7ea5475c83eb37cc14d32e782a3277195c41502fa73c2f3cd9b12410a6628202c57cc51b235d90160516971486e3898c5171783003f47efac7e5b7f45fd7cd589a8fb6bc170f0ef6c8424f658166d9205aea51391e13918f77a0a0e3e315f98d356b962ca232a08e290810000000000000000", @ANYBLOB="000000000000000097080000b2e91acaa345a4991500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500f50c4596d31d25c437ef1df2c7a641f2cb2113a755540dbc4610fe547ff97be6a09131468a85934074a97a0e78f734a632f573341023610037792d371d13a2159c1cc2b9c36d0bd55b43b53cea1a7ccd544d82ac57a05a75f5ced8a0af0a30f728cf77700fe866a24b8f8c965ceb8a651ad162687bc99721acd4ab9a687d5a092bc05bc24391982abc021f7dae6e1439aca20e87f8596f2a131d744288cca8f4a32021ab09da6c9479704fa190fc6c7244e73b78094dee567cc109bf9a85cd8387ea2f08dc30793e3108f1d406c12240c67dd5023e385ea411ff7e153f11bba0ecb7f08d538813beedf5931396bb57249bd900c2b6ad9c26a24b6dc674186780d35453e5dbd557a44d831928ba36c7cc8c3904d4d4f31b2564b8f42c6ebe1e805406a9f49a925953abc3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r0 = syz_clone(0xe080000, &(0x7f0000000780)="2ad40f649796bb57ca685cbff6adfe7b63b447d7ebe6afb63a45bffbeecf518205524ed0edc744faa9b26e261f8a0072d5c338a115a52516c69f8439d104c43c5f64fdf26ead4da91f63d13d4f2dd5a5ce60bd48e2e29c566609b102d427f449328784ba0e8128c53a9fafce21212fe206afe886b1fc0a85aa6e830d61c7578b358a94a2ab17e9383ba460625998b493", 0x90, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0)="5f0d8a72c5c140d7929bcf6bf57b4317e94ae0141757316ad5c052741e4e092f9a17d03c06748a81daa643a64576f8a30bd21189d45480eeb963850c3c1cc7dc2b5f7338cc95f13b522d1acaea2e054ea02916d91f075ae78c0927c267f582dbd09917a3cd324f5d95836f21e87f2efef570c4143f4d333194ffab0ad89682768cf3548b817e108ed5679451") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3b, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r6, &(0x7f0000000180), 0x40010) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) socketpair(0x2b, 0x1, 0x4b8, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a000000048000d7c6e6ea296e090536923587d9000c00ced07db2e196", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[@ANYRES8=r2, @ANYRES8=r9], 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a00)={r0, r8, 0x0, 0x2, &(0x7f0000000980)='(\x00'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.290733427s ago: executing program 1 (id=2383): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32], &(0x7f0000000200)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) close(r1) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='\x00') r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x40000}, {0x10000002, 0x3}], 0x10, 0x0, @void, @value}, 0x94) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f0000000340)=r8, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0), 0x4) 3.202095737s ago: executing program 3 (id=2384): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xb3b, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r3) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x10000}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f80)=[0x0, 0x0, 0x0], 0x0, 0xd3, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f0000000800), 0x8, 0xb8, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="b40800000000000073114100000000008510000002000000b7000000000000009500c2000000000095000012000000000e09b9445761db3ed82f7be4b9f1628b9a5c40384cb45e62e827e611f21a01a76f66f616553959b478ad3c46bb20e558783b21dd5307760617deec8b1b75c00853ee69e33ba2c01c28950365dd46fcc9f2ac6d20197fd68292e8445824f49b6fba41a316e13e462e31ca00d2622d56318d78e271d364329e7ae732bf8dade587bb30d67e23f78662621b74aabfd8eaf399893bab50fed33101f5a1085f991877907bd6117db675155932860499977f7384a8d94e810492c284fc7cc784ed942bf11d72897a7896f5f8c957984312e9d39eaa478a3065afd52404cb058b"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="2e00000010008188040f46ecdb4cb9cca7480ef400000000e3bd6efb440013030e001b000d000008ba8000001201", 0x2e}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000a80)='mm_page_free_batched\x00', r8}, 0x18) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r10) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x0}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r10, r8, 0x4, r7}, 0x10) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_ext={0x1c, 0x21, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x806}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1526ff1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c00)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000c80)={0x3, 0xf, 0x200, 0x5}, 0x10, 0x23ec4, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000cc0)=[{0x5, 0x4, 0xd, 0x4}, {0x0, 0x5, 0x7, 0x9}], 0x10, 0x6, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x13, 0x33, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x38c9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}, @map_val={0x18, 0x1, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x9}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x52, &(0x7f00000003c0)=""/82, 0x41000, 0x20, '\x00', r5, @fallback=0x1d, r10, 0x8, &(0x7f0000000a40)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000a80)={0x2, 0xd, 0xfe000000, 0x8fc}, 0x10, 0xffffffffffffffff, r11, 0x9, &(0x7f0000000dc0)=[r3], &(0x7f0000000e00)=[{0x2, 0x3, 0x9, 0xb}, {0x5, 0x2, 0x20000e, 0xe}, {0x3, 0x3, 0x5, 0xa}, {0x0, 0x5, 0x7, 0x3}, {0x2, 0x4, 0x5}, {0x2, 0x1, 0x10, 0x5}, {0x0, 0x4, 0x2, 0xc}, {0x2, 0x1, 0x10, 0x6}, {0x4, 0x1, 0x1, 0x5}], 0x10, 0x9, @void, @value}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1900400004000000040000000900000000000076", @ANYRES32=0x1, @ANYRES16=r3, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000100000000000000000000000000000000000ad0b1afd9c25268901ff5359478ec08a1f3f2435e3d1c21d4bec29f650fbff5012de2a0b62aa09efca92d15e4b13aeb239391e78bb4440590d342c068caa083bfe416ef200c585a2519190f2f7426586d92e7398937fa1d8b1c673bc19ee7630f709c8f4b28497fe28e106226cff4efd3fef6de7bd9089b75a6935f9d0e61a077a76705603d3cd706ab303e35c063d025d6af41de5b89fe0e5d7d5489fe8b96da771096a588054d3540f8fae6307782fe4f700"/219, @ANYRES16=r6, @ANYRES64, @ANYRES8=0x0, @ANYBLOB="dae702e385e79cc4903135c0484bd77b53b34c4e2fa7d98b57373c2b5e0b875a86da3def863d4001bd0c84245cd8bb0e8419ae374f5784670089167046f2", @ANYRESDEC=0x0], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r12, &(0x7f00000000c0)='P', &(0x7f0000000000)=""/8, 0x2}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r13, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) r14 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r14, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8) 2.999164116s ago: executing program 2 (id=2385): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) close(r2) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat$cgroup(r2, &(0x7f00000004c0)='syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001440)={'\x00', 0x52d35ce30131f272}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000180)=@phonet={0x23, 0x0, 0x0, 0x38}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="27050200d40f00000600002f88a81ab8e534", 0x12}], 0x1}, 0x4000092) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.826809706s ago: executing program 1 (id=2386): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x1d, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) socket$kcm(0xf, 0x3, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000180), 0x0}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, &(0x7f00000002c0), 0x4) 2.823231686s ago: executing program 4 (id=2387): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc00000, 0x9}, 0x100108, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@i}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000840)=""/262, 0x37, 0x106, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_ext={0x1c, 0x6, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@cb_func={0x18, 0xd, 0x4, 0x0, 0x4}, @generic={0x2, 0x8, 0x5, 0x7, 0x2d4ee68}]}, &(0x7f0000000740)='syzkaller\x00', 0x5, 0xa7, &(0x7f00000008c0)=""/167, 0x41100, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0x1, 0x4, 0x2}, 0x10, 0x7c23, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000980)=[{0x0, 0x1, 0x10, 0x1}, {0x5, 0x2, 0x10, 0x3}, {0x3, 0x2, 0x5, 0x5}, {0x2, 0x3, 0xe, 0x6}, {0x4, 0x4, 0x3, 0x4}, {0x2, 0x5, 0x6}, {0x3, 0x5, 0x1, 0x3}], 0x10, 0x74b3, @void, @value}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a00)={0xffffffffffffffff, 0xc, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x4, 0x11, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2a9cfd70}, {}, {}, [@jmp={0x5, 0x1, 0x0, 0x2, 0x5, 0xffffffffffffffc0, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x7, 0x4, 0xc, 0xfffffffffffffff8, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x3, 0x4a, &(0x7f0000000340)=""/74, 0x40f00, 0xf2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x1, 0x8, 0x40}, 0x10, 0x0, r2, 0x3, &(0x7f0000000a40), &(0x7f0000000cc0)=[{0x2, 0x5, 0xe, 0x4}, {0x1, 0x5, 0x2, 0xa}, {0x0, 0x5, 0x2}], 0x10, 0x8, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000007492c83c721f54c0084000000000000006814dee98368bfc40a3ac582e6a87256c1ec09c617f9c873ade6048748994f213af31398fc6d8d61331e9b0c69444e5a0a2bc2d4287a9bbc5a006885c0c8cb7eb082031fa41a53a17eaf9b2182799c4d89f61214718d4790912918b65cf93b4be1b1b9b50c", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2620, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8912, &(0x7f0000000080)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) r5 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r5, &(0x7f00000000c0)={'pim6reg1', 0x32, 0x34}, 0xb) 2.749819606s ago: executing program 3 (id=2389): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a003f00040000a118000200fe8000000000000008000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 2.435186995s ago: executing program 1 (id=2390): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000580)='cgroup.procs\x00', 0x2, 0x0) r3 = syz_clone(0x4080, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x7c, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400014002020a600e41b0000900ac00060411000000160012000a0003000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) write$cgroup_pid(r2, &(0x7f00000007c0)=r3, 0x12) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup(r1, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) close(r5) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x67}], 0x1}, 0x0) 2.378238305s ago: executing program 3 (id=2391): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$inet(r0, &(0x7f0000000800)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000080)="d3682f83c3", 0x5}], 0x1}, 0xc8d4) (fail_nth: 16) 2.377558625s ago: executing program 0 (id=2392): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r1 = socket$kcm(0xa, 0x2, 0x11) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000240)=@in6={0xa, 0x4e1c, 0x5, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000440)=[@mark={{0x10, 0x1, 0x24, 0x4}}], 0x10}, 0x24000000) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xe, 0x42b81b7, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0xffffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.281478565s ago: executing program 2 (id=2393): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) unlink(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x43, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{}], 0x1}, 0x480c0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xe, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000000000000000000000000001813", @ANYRES32=r0, @ANYBLOB="00000000000000008500000012000000180100002020642500000000001e20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0xe00, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.278338585s ago: executing program 4 (id=2394): r0 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f00000004c0)='.', 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1000, 0x0, 0xb3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="2000000000000000840000000200000094040400440c0000000026"], 0x20}, 0x0) 1.700056134s ago: executing program 3 (id=2395): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32], &(0x7f0000000200)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) close(r1) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='\x00') r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x40000}, {0x10000002, 0x3}], 0x10, 0x0, @void, @value}, 0x94) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f0000000340)=r8, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r10, 0x4) 1.648233334s ago: executing program 2 (id=2396): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x63) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)=r3}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8000025ffffffb70300000800000085000000330000009500"/64], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r6, 0x4008240b, &(0x7f00000013c0)) perf_event_open(0x0, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b9090000000b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd40dd6", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000100)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0xd8}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xd6a3}], 0x4}, 0x40c04) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) 1.571552704s ago: executing program 1 (id=2397): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7, 0x800006}, 0x81048, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0xffffffffffffffff, 0x400000000000000, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="170000000000000004000000ff000000000000", @ANYRES16=r2], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$TUNGETFEATURES(r5, 0x5452, &(0x7f00000013c0)) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) 1.266740073s ago: executing program 0 (id=2398): openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000bd1404050000000018150000", @ANYBLOB="405a69ee3b8020a7ea5475c83eb37cc14d32e782a3277195c41502fa73c2f3cd9b12410a6628202c57cc51b235d90160516971486e3898c5171783003f47efac7e5b7f45fd7cd589a8fb6bc170f0ef6c8424f658166d9205aea51391e13918f77a0a0e3e315f98d356b962ca232a08e290810000000000000000", @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) syz_clone(0xe080000, &(0x7f0000000780)="2ad40f649796bb57ca685cbff6adfe7b63b447d7ebe6afb63a45bffbeecf518205524ed0edc744faa9b26e261f8a0072d5c338a115a52516c69f8439d104c43c5f64fdf26ead4da91f63d13d4f2dd5a5ce60bd48e2e29c566609b102d427f449328784ba0e8128c53a9fafce21212fe206afe886b1fc0a85aa6e830d61c7578b358a94a2ab17e9383ba460625998b493", 0x90, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0)="5f0d8a72c5c140d7929bcf6bf57b4317e94ae0141757316ad5c052741e4e092f9a17d03c06748a81daa643a64576f8a30bd21189d45480eeb963850c3c1cc7dc2b5f7338cc95f13b522d1acaea2e054ea02916d91f075ae78c0927c267f582dbd09917a3cd324f5d95836f21e87f2efef570c4143f4d333194ffab0ad89682768cf3548b817e108ed5679451") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3b, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x40010) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) socketpair(0x2b, 0x1, 0x4b8, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a000000048000d7c6e6ea296e090536923587d9000c00ced07db2e196", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r8], 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.229855893s ago: executing program 2 (id=2399): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xb3b, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r3) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x10000}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f80)=[0x0, 0x0, 0x0], 0x0, 0xd3, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f0000000800), 0x8, 0xb8, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="2e00000010008188040f46ecdb4cb9cca7480ef400000000e3bd6efb440013030e001b000d000008ba8000001201", 0x2e}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000a80)='mm_page_free_batched\x00', r8}, 0x18) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r10) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x0}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r10, r8, 0x4, r7}, 0x10) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_ext={0x1c, 0x21, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x806}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1526ff1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c00)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000c80)={0x3, 0xf, 0x200, 0x5}, 0x10, 0x23ec4, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000cc0)=[{0x5, 0x4, 0xd, 0x4}, {0x0, 0x5, 0x7, 0x9}], 0x10, 0x6, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x13, 0x33, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x38c9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}, @map_val={0x18, 0x1, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x9}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x52, &(0x7f00000003c0)=""/82, 0x41000, 0x20, '\x00', r5, @fallback=0x1d, r10, 0x8, &(0x7f0000000a40)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000a80)={0x2, 0xd, 0xfe000000, 0x8fc}, 0x10, 0xffffffffffffffff, r11, 0x9, &(0x7f0000000dc0)=[r3], &(0x7f0000000e00)=[{0x2, 0x3, 0x9, 0xb}, {0x5, 0x2, 0x20000e, 0xe}, {0x3, 0x3, 0x5, 0xa}, {0x0, 0x5, 0x7, 0x3}, {0x2, 0x4, 0x5}, {0x2, 0x1, 0x10, 0x5}, {0x0, 0x4, 0x2, 0xc}, {0x2, 0x1, 0x10, 0x6}, {0x4, 0x1, 0x1, 0x5}], 0x10, 0x9, @void, @value}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1900400004000000040000000900000000000076", @ANYRES32=0x1, @ANYRES16=r3, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000100000000000000000000000000000000000ad0b1afd9c25268901ff5359478ec08a1f3f2435e3d1c21d4bec29f650fbff5012de2a0b62aa09efca92d15e4b13aeb239391e78bb4440590d342c068caa083bfe416ef200c585a2519190f2f7426586d92e7398937fa1d8b1c673bc19ee7630f709c8f4b28497fe28e106226cff4efd3fef6de7bd9089b75a6935f9d0e61a077a76705603d3cd706ab303e35c063d025d6af41de5b89fe0e5d7d5489fe8b96da771096a588054d3540f8fae6307782fe4f700"/219, @ANYRES16=r6, @ANYRES64, @ANYRES8=0x0, @ANYBLOB="dae702e385e79cc4903135c0484bd77b53b34c4e2fa7d98b57373c2b5e0b875a86da3def863d4001bd0c84245cd8bb0e8419ae374f5784670089167046f2", @ANYRESDEC=0x0], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r12, &(0x7f00000000c0)='P', &(0x7f0000000000)=""/8, 0x2}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r13, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) r14 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r14, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8) 1.115187882s ago: executing program 0 (id=2400): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x1d, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) socket$kcm(0xf, 0x3, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000540)=""/119}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) 1.027170892s ago: executing program 2 (id=2401): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$SIOCSIFHWADDR(r0, 0x40047440, 0x0) 953.899652ms ago: executing program 4 (id=2402): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x480c0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x12, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000050000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x7a44, 0x1700) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000200)={r2, r2}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r3) socketpair(0x1, 0xb, 0x6, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @random}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000400)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$kcm(0x2, 0x3, 0x73) sendmsg$kcm(r5, &(0x7f00000002c0)={&(0x7f00000000c0)=@nl=@unspec, 0x80, 0x0}, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000840000000000000001"], 0x18}, 0x41) 952.994792ms ago: executing program 0 (id=2403): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) close(r2) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat$cgroup(r2, &(0x7f00000004c0)='syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001440)={'\x00', 0x52d35ce30131f272}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000180)=@phonet={0x23, 0x0, 0x0, 0x38}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="27050200d40f00000600002f88a81ab8e534", 0x12}], 0x1}, 0x4000092) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 732.487712ms ago: executing program 3 (id=2404): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000000000000008000000ffff0000c0000000", @ANYRES32=0x1, @ANYBLOB="9d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000038000000000000000100"/28], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r2}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2f00020b, 0x809, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000014c0)={r0, 0x20, &(0x7f0000001480)={&(0x7f0000001300)=""/204, 0xcc, 0x0, &(0x7f0000001400)=""/118, 0x76}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002200)=r4, 0x4) socketpair(0x3, 0x4, 0xfffffff8, &(0x7f0000002240)) perf_event_open(&(0x7f0000000140)={0x7, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000002280)=0x8000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xa}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x2, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYRES32], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xbd4, @void, @value}, 0x94) openat$cgroup_subtree(r0, &(0x7f0000000240), 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30008085) socket$kcm(0x2, 0x1, 0x84) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x6000, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000160081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200004000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000280)={0x2, 0x4c23, @rand_addr=0x64010180}, 0xf, &(0x7f0000000600), 0x1}, 0x40) socketpair(0x1, 0x1, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x44, &(0x7f0000000100), 0x4) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xffffffffffffff75) 731.660022ms ago: executing program 2 (id=2414): r0 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f00000004c0)='.', 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1000, 0x0, 0xb3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="2000000000000000840000000200000094040400440c0000000026"], 0x20}, 0x0) 607.856141ms ago: executing program 0 (id=2405): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYRES16=r0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[], 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000240)="d800000018007b18e00212ba0d8105040a601100fe0f040b067c55a1bc0009001e0006990300000015000500fe800003003f00000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fba8cae8c9010000734d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r3 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x10000000001}, 0x0, 0x0, 0x400000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x724}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x16, 0x0, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc605800024004000400050082c137153e3719ac018015ac1720d1bd", 0x2e}], 0x1}, 0x40040c4) 400.268361ms ago: executing program 1 (id=2406): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) unlink(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x43, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{}], 0x1}, 0x480c0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xe, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000181300", @ANYRES32=r0, @ANYBLOB="00000000000000008500000012000000180100002020642500000000001e20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0xe00, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) 91.24466ms ago: executing program 3 (id=2407): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x480c0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x7a44, 0x1700) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000840000000000000001"], 0x18}, 0x41) (fail_nth: 16) 21.81674ms ago: executing program 0 (id=2408): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000580)='cgroup.procs\x00', 0x2, 0x0) r3 = syz_clone(0x4080, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x7c, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400014002020a600e41b0000900ac00060411000000160012000a0003000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) write$cgroup_pid(r2, &(0x7f00000007c0)=r3, 0x12) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup(r1, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) close(r5) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x67}], 0x1}, 0x0) 0s ago: executing program 1 (id=2409): r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000100), 0x120) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000140)=@llc={0x1a, 0x323, 0x3, 0x0, 0x8, 0xe0, @random="c9bff0b663f7"}, 0x80, 0x0}, 0x240440d1) kernel console output (not intermixed with test programs): : forcing a failure. [ 169.562831][ T6235] name failslab, interval 1, probability 0, space 0, times 0 [ 169.642293][ T6235] CPU: 0 PID: 6235 Comm: syz.1.721 Not tainted 6.1.129-syzkaller #0 [ 169.650359][ T6235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 169.660449][ T6235] Call Trace: [ 169.663770][ T6235] [ 169.666732][ T6235] dump_stack_lvl+0x1e3/0x2cb [ 169.671550][ T6235] ? nf_tcp_handle_invalid+0x647/0x647 [ 169.677049][ T6235] ? panic+0x764/0x764 [ 169.681170][ T6235] ? __might_sleep+0xb0/0xb0 [ 169.685827][ T6235] should_fail_ex+0x3a6/0x4d0 [ 169.690569][ T6235] should_failslab+0x5/0x20 [ 169.695116][ T6235] slab_pre_alloc_hook+0x59/0x300 [ 169.700207][ T6235] ? tomoyo_encode+0x26b/0x530 [ 169.705098][ T6235] __kmem_cache_alloc_node+0x47/0x260 [ 169.710509][ T6235] ? tomoyo_encode+0x26b/0x530 [ 169.715337][ T6235] __kmalloc+0xa1/0x230 [ 169.719629][ T6235] tomoyo_encode+0x26b/0x530 [ 169.724259][ T6235] ? sock_free_inode+0x20/0x20 [ 169.729059][ T6235] tomoyo_realpath_from_path+0x594/0x5d0 [ 169.734741][ T6235] tomoyo_path_number_perm+0x21f/0x7f0 [ 169.740242][ T6235] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 169.745921][ T6235] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 169.751436][ T6235] ? __fget_files+0x28/0x4a0 [ 169.756076][ T6235] ? __fget_files+0x28/0x4a0 [ 169.760696][ T6235] ? __fget_files+0x435/0x4a0 [ 169.765403][ T6235] ? __fget_files+0x28/0x4a0 [ 169.770032][ T6235] security_file_ioctl+0x6d/0xa0 [ 169.774996][ T6235] __se_sys_ioctl+0x47/0x160 [ 169.779613][ T6235] do_syscall_64+0x3b/0xb0 [ 169.784064][ T6235] ? clear_bhb_loop+0x45/0xa0 [ 169.788783][ T6235] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.794743][ T6235] RIP: 0033:0x7fb074f8d169 [ 169.799182][ T6235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.818828][ T6235] RSP: 002b:00007fb075d0d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.827391][ T6235] RAX: ffffffffffffffda RBX: 00007fb0751a5fa0 RCX: 00007fb074f8d169 [ 169.835410][ T6235] RDX: 0000400000000000 RSI: 0000000000008936 RDI: 0000000000000005 [ 169.843578][ T6235] RBP: 00007fb075d0d090 R08: 0000000000000000 R09: 0000000000000000 [ 169.851584][ T6235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.859594][ T6235] R13: 0000000000000000 R14: 00007fb0751a5fa0 R15: 00007fff879aa688 [ 169.867626][ T6235] [ 169.977578][ T6238] netlink: 156 bytes leftover after parsing attributes in process `syz.3.723'. [ 169.991207][ T6235] ERROR: Out of memory at tomoyo_realpath_from_path. [ 170.163657][ T6244] netlink: 'syz.0.725': attribute type 22 has an invalid length. [ 170.214280][ T6244] netlink: 'syz.0.725': attribute type 21 has an invalid length. [ 170.248027][ T6244] netlink: 'syz.0.725': attribute type 1 has an invalid length. [ 170.255787][ T6244] netlink: 9062 bytes leftover after parsing attributes in process `syz.0.725'. [ 171.061563][ T6277] netlink: 156 bytes leftover after parsing attributes in process `syz.3.738'. [ 171.211379][ T6281] netlink: 152 bytes leftover after parsing attributes in process `syz.0.741'. [ 171.324218][ T6285] netlink: 9062 bytes leftover after parsing attributes in process `syz.4.744'. [ 171.978485][ T6311] netlink: 156 bytes leftover after parsing attributes in process `syz.0.753'. [ 172.121523][ T6318] delete_channel: no stack [ 172.136806][ T6318] delete_channel: no stack [ 172.920500][ T6327] netlink: 40 bytes leftover after parsing attributes in process `syz.2.760'. [ 172.952312][ T6327] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 172.961783][ T6327] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.016619][ T6327] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 173.597771][ T6353] netlink: 156 bytes leftover after parsing attributes in process `syz.2.769'. [ 174.006344][ T6366] netlink: 152 bytes leftover after parsing attributes in process `syz.3.775'. [ 174.061260][ T6368] delete_channel: no stack [ 174.065985][ T6368] delete_channel: no stack [ 174.396946][ T6379] validate_nla: 16 callbacks suppressed [ 174.396969][ T6379] netlink: 'syz.2.778': attribute type 27 has an invalid length. [ 175.056159][ T6388] netlink: 'syz.0.783': attribute type 27 has an invalid length. [ 175.072848][ T6391] netlink: 156 bytes leftover after parsing attributes in process `syz.3.784'. [ 175.111133][ T6389] netlink: 'syz.2.782': attribute type 27 has an invalid length. [ 175.171405][ T6389] netlink: 'syz.2.782': attribute type 10 has an invalid length. [ 175.205436][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 175.282850][ T6393] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 175.347263][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 175.389866][ T6395] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 175.725765][ T6411] netlink: 'syz.1.792': attribute type 27 has an invalid length. [ 176.085880][ T6418] netlink: 'syz.4.795': attribute type 27 has an invalid length. [ 176.179625][ T6423] delete_channel: no stack [ 176.194876][ T6423] delete_channel: no stack [ 176.551994][ T6428] netlink: 156 bytes leftover after parsing attributes in process `syz.3.798'. [ 176.827620][ T6434] netlink: 'syz.2.799': attribute type 27 has an invalid length. [ 176.906681][ T6436] netlink: 'syz.3.801': attribute type 10 has an invalid length. [ 176.938151][ T6436] netlink: 40 bytes leftover after parsing attributes in process `syz.3.801'. [ 176.979836][ T6436] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 177.025377][ T6436] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.100142][ T6436] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 177.128733][ T6443] netlink: 'syz.1.804': attribute type 27 has an invalid length. [ 177.165079][ T6449] netlink: 'syz.1.804': attribute type 10 has an invalid length. [ 177.349702][ T6455] netlink: 9062 bytes leftover after parsing attributes in process `syz.3.807'. [ 177.643809][ T6463] netlink: 156 bytes leftover after parsing attributes in process `syz.3.812'. [ 177.977332][ T6473] delete_channel: no stack [ 177.991997][ T6473] delete_channel: no stack [ 178.741931][ T6490] netlink: 40 bytes leftover after parsing attributes in process `syz.4.820'. [ 178.754522][ T6490] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 178.779868][ T6490] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.815467][ T6490] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 178.838871][ T6495] netlink: 15998 bytes leftover after parsing attributes in process `syz.2.822'. [ 178.946413][ T6493] device geneve0 entered promiscuous mode [ 179.123810][ T6493] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 179.652463][ T6512] netlink: 156 bytes leftover after parsing attributes in process `syz.0.828'. [ 179.936584][ T6522] delete_channel: no stack [ 180.001014][ T6522] delete_channel: no stack [ 180.363612][ T6531] validate_nla: 9 callbacks suppressed [ 180.363631][ T6531] netlink: 'syz.3.837': attribute type 22 has an invalid length. [ 180.406340][ T6531] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.837'. [ 180.622998][ T6534] netlink: 'syz.4.839': attribute type 27 has an invalid length. [ 180.824524][ T6538] netlink: 'syz.2.841': attribute type 27 has an invalid length. [ 180.846995][ T6538] netlink: 'syz.2.841': attribute type 10 has an invalid length. [ 180.986953][ T6543] netlink: 'syz.1.854': attribute type 27 has an invalid length. [ 181.181209][ T6551] netlink: 156 bytes leftover after parsing attributes in process `syz.0.845'. [ 181.512721][ T6565] netlink: 152 bytes leftover after parsing attributes in process `syz.3.853'. [ 181.573227][ T6564] netlink: 'syz.1.852': attribute type 22 has an invalid length. [ 181.648128][ T6567] netlink: 15998 bytes leftover after parsing attributes in process `syz.1.852'. [ 181.722276][ T6572] delete_channel: no stack [ 181.747416][ T6572] delete_channel: no stack [ 181.791691][ T6574] netlink: 'syz.4.857': attribute type 29 has an invalid length. [ 181.816512][ T6574] netlink: 'syz.4.857': attribute type 29 has an invalid length. [ 181.833313][ T6574] netlink: 'syz.4.857': attribute type 29 has an invalid length. [ 181.877683][ T6574] netlink: 'syz.4.857': attribute type 21 has an invalid length. [ 181.939751][ T6574] netlink: 156 bytes leftover after parsing attributes in process `syz.4.857'. [ 182.268131][ T6574] FAULT_INJECTION: forcing a failure. [ 182.268131][ T6574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.317939][ T6574] CPU: 0 PID: 6574 Comm: syz.4.857 Not tainted 6.1.129-syzkaller #0 [ 182.326018][ T6574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 182.336115][ T6574] Call Trace: [ 182.339431][ T6574] [ 182.342396][ T6574] dump_stack_lvl+0x1e3/0x2cb [ 182.347134][ T6574] ? nf_tcp_handle_invalid+0x647/0x647 [ 182.352679][ T6574] ? panic+0x764/0x764 [ 182.356786][ T6574] should_fail_ex+0x3a6/0x4d0 [ 182.361492][ T6574] strncpy_from_user+0x32/0x360 [ 182.366395][ T6574] bpf_prog_load+0x1fb/0x1bf0 [ 182.371095][ T6574] ? map_freeze+0x390/0x390 [ 182.375613][ T6574] ? __might_fault+0xa1/0x110 [ 182.380321][ T6574] ? __might_fault+0xbd/0x110 [ 182.385044][ T6574] ? bpf_lsm_bpf+0x5/0x10 [ 182.389390][ T6574] ? security_bpf+0x7d/0xa0 [ 182.393910][ T6574] __sys_bpf+0x382/0x6c0 [ 182.398171][ T6574] ? __fget_files+0x435/0x4a0 [ 182.402868][ T6574] ? bpf_link_show_fdinfo+0x300/0x300 [ 182.408262][ T6574] ? print_irqtrace_events+0x210/0x210 [ 182.413770][ T6574] ? print_irqtrace_events+0x210/0x210 [ 182.419249][ T6574] ? syscall_enter_from_user_mode+0x2e/0x230 [ 182.425245][ T6574] ? syscall_enter_from_user_mode+0x2e/0x230 [ 182.431239][ T6574] ? lockdep_hardirqs_on+0x94/0x130 [ 182.436461][ T6574] __x64_sys_bpf+0x78/0x90 [ 182.440911][ T6574] do_syscall_64+0x3b/0xb0 [ 182.445354][ T6574] ? clear_bhb_loop+0x45/0xa0 [ 182.450067][ T6574] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 182.455977][ T6574] RIP: 0033:0x7fa12638d169 [ 182.460401][ T6574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.480030][ T6574] RSP: 002b:00007fa12719f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 182.488463][ T6574] RAX: ffffffffffffffda RBX: 00007fa1265a5fa0 RCX: 00007fa12638d169 [ 182.496465][ T6574] RDX: 0000000000000094 RSI: 0000400000002c80 RDI: 0000000000000005 [ 182.504444][ T6574] RBP: 00007fa12719f090 R08: 0000000000000000 R09: 0000000000000000 [ 182.512460][ T6574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.520442][ T6574] R13: 0000000000000000 R14: 00007fa1265a5fa0 R15: 00007fff7ea8f5a8 [ 182.528526][ T6574] [ 182.869356][ T6590] netlink: 156 bytes leftover after parsing attributes in process `syz.1.862'. [ 182.910244][ T6594] netlink: 156 bytes leftover after parsing attributes in process `syz.2.864'. [ 183.184603][ T6601] FAULT_INJECTION: forcing a failure. [ 183.184603][ T6601] name failslab, interval 1, probability 0, space 0, times 0 [ 183.310385][ T6601] CPU: 0 PID: 6601 Comm: syz.1.865 Not tainted 6.1.129-syzkaller #0 [ 183.318454][ T6601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 183.328542][ T6601] Call Trace: [ 183.331831][ T6601] [ 183.334775][ T6601] dump_stack_lvl+0x1e3/0x2cb [ 183.339475][ T6601] ? nf_tcp_handle_invalid+0x647/0x647 [ 183.344964][ T6601] ? __wake_up_klogd+0xcc/0x100 [ 183.349829][ T6601] ? _printk+0x102/0x111 [ 183.354084][ T6601] should_fail_ex+0x3a6/0x4d0 [ 183.358785][ T6601] should_failslab+0x5/0x20 [ 183.363299][ T6601] slab_pre_alloc_hook+0x59/0x300 [ 183.368342][ T6601] ? __get_vm_area_node+0x126/0x360 [ 183.373562][ T6601] __kmem_cache_alloc_node+0x47/0x260 [ 183.378948][ T6601] ? print_irqtrace_events+0x210/0x210 [ 183.384439][ T6601] ? __get_vm_area_node+0x126/0x360 [ 183.389654][ T6601] kmalloc_node_trace+0x23/0xe0 [ 183.394525][ T6601] __get_vm_area_node+0x126/0x360 [ 183.399572][ T6601] __vmalloc_node_range+0x37d/0x14b0 [ 183.404877][ T6601] ? bpf_prog_alloc_no_stats+0x34/0x3f0 [ 183.410888][ T6601] ? free_vm_area+0x50/0x50 [ 183.415408][ T6601] ? end_current_label_crit_section+0x170/0x170 [ 183.421661][ T6601] ? bpf_prog_alloc_no_stats+0x34/0x3f0 [ 183.427212][ T6601] __vmalloc+0x75/0x80 [ 183.431315][ T6601] ? bpf_prog_alloc_no_stats+0x34/0x3f0 [ 183.436900][ T6601] bpf_prog_alloc_no_stats+0x34/0x3f0 [ 183.442303][ T6601] ? bpf_prog_alloc+0x13/0x1b0 [ 183.447078][ T6601] bpf_prog_alloc+0x1c/0x1b0 [ 183.451683][ T6601] bpf_prog_load+0x84a/0x1bf0 [ 183.456381][ T6601] ? map_freeze+0x390/0x390 [ 183.460895][ T6601] ? __might_fault+0xa1/0x110 [ 183.465598][ T6601] ? __might_fault+0xbd/0x110 [ 183.470285][ T6601] ? bpf_lsm_bpf+0x5/0x10 [ 183.474634][ T6601] ? security_bpf+0x7d/0xa0 [ 183.479149][ T6601] __sys_bpf+0x382/0x6c0 [ 183.483426][ T6601] ? bpf_link_show_fdinfo+0x300/0x300 [ 183.488818][ T6601] ? print_irqtrace_events+0x210/0x210 [ 183.494318][ T6601] ? print_irqtrace_events+0x210/0x210 [ 183.499792][ T6601] ? syscall_enter_from_user_mode+0x2e/0x230 [ 183.505786][ T6601] ? syscall_enter_from_user_mode+0x2e/0x230 [ 183.511775][ T6601] ? lockdep_hardirqs_on+0x94/0x130 [ 183.516983][ T6601] __x64_sys_bpf+0x78/0x90 [ 183.521422][ T6601] do_syscall_64+0x3b/0xb0 [ 183.525868][ T6601] ? clear_bhb_loop+0x45/0xa0 [ 183.530578][ T6601] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 183.536525][ T6601] RIP: 0033:0x7fb074f8d169 [ 183.540947][ T6601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.560582][ T6601] RSP: 002b:00007fb075d0d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 183.569002][ T6601] RAX: ffffffffffffffda RBX: 00007fb0751a5fa0 RCX: 00007fb074f8d169 [ 183.576980][ T6601] RDX: 0000000000000080 RSI: 0000400000000140 RDI: 0000000000000005 [ 183.584976][ T6601] RBP: 00007fb075d0d090 R08: 0000000000000000 R09: 0000000000000000 [ 183.592972][ T6601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.600958][ T6601] R13: 0000000000000000 R14: 00007fb0751a5fa0 R15: 00007fff879aa688 [ 183.608953][ T6601] [ 183.678467][ T6601] syz.1.865: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 183.735481][ T6601] CPU: 1 PID: 6601 Comm: syz.1.865 Not tainted 6.1.129-syzkaller #0 [ 183.743568][ T6601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 183.753665][ T6601] Call Trace: [ 183.756977][ T6601] [ 183.759930][ T6601] dump_stack_lvl+0x1e3/0x2cb [ 183.764652][ T6601] ? nf_tcp_handle_invalid+0x647/0x647 [ 183.770180][ T6601] ? panic+0x764/0x764 [ 183.774284][ T6601] ? cpuset_print_current_mems_allowed+0x1b/0x350 [ 183.780818][ T6601] ? cpuset_print_current_mems_allowed+0x30f/0x350 [ 183.787386][ T6601] warn_alloc+0x26f/0x400 [ 183.792291][ T6601] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 183.798504][ T6601] ? zone_watermark_ok_safe+0x270/0x270 [ 183.804101][ T6601] ? __get_vm_area_node+0x351/0x360 [ 183.804475][ T6609] netlink: 152 bytes leftover after parsing attributes in process `syz.3.868'. [ 183.809334][ T6601] __vmalloc_node_range+0x3a2/0x14b0 [ 183.809399][ T6601] ? free_vm_area+0x50/0x50 [ 183.828191][ T6601] ? end_current_label_crit_section+0x170/0x170 [ 183.834491][ T6601] ? bpf_prog_alloc_no_stats+0x34/0x3f0 [ 183.840072][ T6601] __vmalloc+0x75/0x80 [ 183.844174][ T6601] ? bpf_prog_alloc_no_stats+0x34/0x3f0 [ 183.849763][ T6601] bpf_prog_alloc_no_stats+0x34/0x3f0 [ 183.855214][ T6601] ? bpf_prog_alloc+0x13/0x1b0 [ 183.860020][ T6601] bpf_prog_alloc+0x1c/0x1b0 [ 183.865256][ T6601] bpf_prog_load+0x84a/0x1bf0 [ 183.869988][ T6601] ? map_freeze+0x390/0x390 [ 183.874557][ T6601] ? __might_fault+0xa1/0x110 [ 183.879297][ T6601] ? __might_fault+0xbd/0x110 [ 183.884014][ T6601] ? bpf_lsm_bpf+0x5/0x10 [ 183.888385][ T6601] ? security_bpf+0x7d/0xa0 [ 183.892927][ T6601] __sys_bpf+0x382/0x6c0 [ 183.897200][ T6601] ? bpf_link_show_fdinfo+0x300/0x300 [ 183.902623][ T6601] ? print_irqtrace_events+0x210/0x210 [ 183.908128][ T6601] ? print_irqtrace_events+0x210/0x210 [ 183.913748][ T6601] ? syscall_enter_from_user_mode+0x2e/0x230 [ 183.919773][ T6601] ? syscall_enter_from_user_mode+0x2e/0x230 [ 183.925805][ T6601] ? lockdep_hardirqs_on+0x94/0x130 [ 183.931071][ T6601] __x64_sys_bpf+0x78/0x90 [ 183.935533][ T6601] do_syscall_64+0x3b/0xb0 [ 183.939991][ T6601] ? clear_bhb_loop+0x45/0xa0 [ 183.944709][ T6601] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 183.950648][ T6601] RIP: 0033:0x7fb074f8d169 [ 183.955095][ T6601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.974747][ T6601] RSP: 002b:00007fb075d0d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 183.983210][ T6601] RAX: ffffffffffffffda RBX: 00007fb0751a5fa0 RCX: 00007fb074f8d169 [ 183.991241][ T6601] RDX: 0000000000000080 RSI: 0000400000000140 RDI: 0000000000000005 [ 183.999336][ T6601] RBP: 00007fb075d0d090 R08: 0000000000000000 R09: 0000000000000000 [ 184.007342][ T6601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.015345][ T6601] R13: 0000000000000000 R14: 00007fb0751a5fa0 R15: 00007fff879aa688 [ 184.023372][ T6601] [ 184.054580][ T6601] Mem-Info: [ 184.075289][ T6601] active_anon:7952 inactive_anon:0 isolated_anon:0 [ 184.075289][ T6601] active_file:2910 inactive_file:38336 isolated_file:0 [ 184.075289][ T6601] unevictable:768 dirty:102 writeback:0 [ 184.075289][ T6601] slab_reclaimable:20631 slab_unreclaimable:97399 [ 184.075289][ T6601] mapped:30198 shmem:3709 pagetables:635 [ 184.075289][ T6601] sec_pagetables:0 bounce:0 [ 184.075289][ T6601] kernel_misc_reclaimable:0 [ 184.075289][ T6601] free:1330598 free_pcp:11829 free_cma:0 [ 184.147878][ T6601] Node 0 active_anon:32308kB inactive_anon:0kB active_file:11840kB inactive_file:153272kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120992kB dirty:408kB writeback:0kB shmem:13900kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10404kB pagetables:2440kB sec_pagetables:0kB all_unreclaimable? no [ 184.312925][ T6601] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 184.416704][ T6601] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 184.747971][ T6601] lowmem_reserve[]: 0 2519 2519 2519 2519 [ 184.753943][ T6601] Node 0 DMA32 free:1388320kB boost:0kB min:34628kB low:43284kB high:51940kB reserved_highatomic:0KB active_anon:41408kB inactive_anon:0kB active_file:15240kB inactive_file:153272kB unevictable:1536kB writepending:408kB present:3129332kB managed:2585168kB mlocked:0kB bounce:0kB free_pcp:26768kB local_pcp:16548kB free_cma:0kB [ 184.992540][ T6601] lowmem_reserve[]: 0 0 0 0 0 [ 185.032281][ T6601] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 185.328474][ T6601] lowmem_reserve[]: 0 0 0 0 0 [ 185.333310][ T6601] Node 1 Normal free:3904588kB boost:0kB min:55268kB low:69084kB high:82900kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:20068kB local_pcp:10240kB free_cma:0kB [ 185.406443][ T6601] lowmem_reserve[]: 0 0 0 0 0 [ 185.411805][ T6601] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 185.425424][ T6601] Node 0 DMA32: 4*4kB (UME) 2*8kB (ME) 589*16kB (UE) 586*32kB (UE) 13*64kB (UE) 41*128kB (UE) 10*256kB (UE) 11*512kB (UME) 1*1024kB (M) 1*2048kB (U) 325*4096kB (UM) = 1376752kB [ 185.491556][ T6601] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 185.574227][ T6601] Node 1 Normal: 151*4kB (UME) 58*8kB (UME) 36*16kB (UME) 27*32kB (UME) 12*64kB (UME) 9*128kB (UME) 1*256kB (M) 3*512kB (UME) 1*1024kB (U) 1*2048kB (U) 951*4096kB (M) = 3904588kB [ 185.609976][ T6601] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 185.627953][ T6601] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 185.647590][ T6601] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 185.672998][ T6601] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 185.714477][ T6601] 52241 total pagecache pages [ 185.734486][ T6601] 0 pages in swap cache [ 185.757420][ T6601] Free swap = 124996kB [ 185.767436][ T6601] Total swap = 124996kB [ 185.783563][ T6601] 2097051 pages RAM [ 185.797809][ T6601] 0 pages HighMem/MovableOnly [ 185.814514][ T6601] 417414 pages reserved [ 185.824622][ T6601] 0 pages cma reserved [ 186.664593][ T6656] validate_nla: 13 callbacks suppressed [ 186.664635][ T6656] netlink: 'syz.1.884': attribute type 27 has an invalid length. [ 186.842675][ T6661] netlink: 'syz.3.887': attribute type 22 has an invalid length. [ 186.973915][ T6663] netlink: 'syz.4.886': attribute type 27 has an invalid length. [ 187.050188][ T6663] netlink: 'syz.4.886': attribute type 10 has an invalid length. [ 187.626104][ T6685] device sit0 entered promiscuous mode [ 187.677905][ T6689] device sit0 entered promiscuous mode [ 188.389918][ T6703] netlink: 156 bytes leftover after parsing attributes in process `syz.2.901'. [ 188.458542][ T6705] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 188.540028][ T6705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.628808][ T6708] netlink: 'syz.4.903': attribute type 27 has an invalid length. [ 188.741440][ T6708] netlink: 'syz.4.903': attribute type 10 has an invalid length. [ 189.707134][ T6744] netlink: 156 bytes leftover after parsing attributes in process `syz.3.918'. [ 189.757806][ T6745] delete_channel: no stack [ 189.798363][ T6745] delete_channel: no stack [ 190.372560][ T6754] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 190.433815][ T6754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.702399][ T6757] netlink: 'syz.4.923': attribute type 27 has an invalid length. [ 190.780818][ T6757] netlink: 'syz.4.923': attribute type 10 has an invalid length. [ 191.498394][ T6782] netlink: 156 bytes leftover after parsing attributes in process `syz.2.932'. [ 191.595044][ T6783] netlink: 'syz.0.935': attribute type 27 has an invalid length. [ 191.608823][ T6781] netlink: 'syz.0.935': attribute type 10 has an invalid length. [ 191.684660][ T6785] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 191.771281][ T6785] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.205412][ T6795] delete_channel: no stack [ 192.378395][ T6795] delete_channel: no stack [ 193.135456][ T6812] netlink: 'syz.1.945': attribute type 22 has an invalid length. [ 193.212465][ T6812] netlink: 'syz.1.945': attribute type 2 has an invalid length. [ 193.239128][ T6812] netlink: 9062 bytes leftover after parsing attributes in process `syz.1.945'. [ 193.548168][ T6820] netlink: 156 bytes leftover after parsing attributes in process `syz.3.949'. [ 193.753198][ T6824] netlink: 'syz.4.948': attribute type 27 has an invalid length. [ 193.797325][ T6824] netlink: 'syz.4.948': attribute type 10 has an invalid length. [ 194.260767][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.267173][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.836168][ T6847] delete_channel: no stack [ 194.849631][ T6847] delete_channel: no stack [ 195.520390][ T6853] netlink: 'syz.4.961': attribute type 22 has an invalid length. [ 195.556473][ T6854] netlink: 156 bytes leftover after parsing attributes in process `syz.3.962'. [ 195.583721][ T6853] netlink: 'syz.4.961': attribute type 2 has an invalid length. [ 195.622397][ T6853] netlink: 9062 bytes leftover after parsing attributes in process `syz.4.961'. [ 195.902014][ T6864] netlink: 'syz.3.966': attribute type 27 has an invalid length. [ 195.964568][ T6864] netlink: 'syz.3.966': attribute type 10 has an invalid length. [ 196.262194][ T6873] netlink: 152 bytes leftover after parsing attributes in process `syz.3.971'. [ 196.328162][ T4271] Bluetooth: hci3: command 0x0406 tx timeout [ 196.328184][ T4266] Bluetooth: hci0: command 0x0406 tx timeout [ 196.328222][ T4266] Bluetooth: hci4: command 0x0406 tx timeout [ 196.334280][ T4271] Bluetooth: hci2: command 0x0406 tx timeout [ 196.340867][ T4272] Bluetooth: hci1: command 0x0406 tx timeout [ 196.721614][ T6884] delete_channel: no stack [ 196.726336][ T6884] delete_channel: no stack [ 196.916807][ T6888] netlink: 156 bytes leftover after parsing attributes in process `syz.0.976'. [ 197.612060][ T6900] netlink: 'syz.3.980': attribute type 4 has an invalid length. [ 197.663520][ T6899] netlink: 'syz.4.981': attribute type 27 has an invalid length. [ 197.829997][ T6905] netlink: 152 bytes leftover after parsing attributes in process `syz.1.984'. [ 197.942321][ T6908] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 198.023305][ T6908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.085914][ T6917] netlink: 156 bytes leftover after parsing attributes in process `syz.3.989'. [ 198.135728][ T6918] FAULT_INJECTION: forcing a failure. [ 198.135728][ T6918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.195688][ T6918] CPU: 0 PID: 6918 Comm: syz.4.988 Not tainted 6.1.129-syzkaller #0 [ 198.203949][ T6918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 198.214036][ T6918] Call Trace: [ 198.217355][ T6918] [ 198.220326][ T6918] dump_stack_lvl+0x1e3/0x2cb [ 198.225071][ T6918] ? nf_tcp_handle_invalid+0x647/0x647 [ 198.230734][ T6918] ? panic+0x764/0x764 [ 198.234828][ T6918] ? __might_fault+0xa1/0x110 [ 198.239527][ T6918] ? __lock_acquire+0x1f80/0x1f80 [ 198.244576][ T6918] should_fail_ex+0x3a6/0x4d0 [ 198.249275][ T6918] copyin+0x1a/0x120 [ 198.253226][ T6918] _copy_from_iter+0x493/0xff0 [ 198.258021][ T6918] ? copyout_mc+0x100/0x100 [ 198.262649][ T6918] ? __virt_addr_valid+0x17f/0x530 [ 198.267783][ T6918] ? __virt_addr_valid+0x17f/0x530 [ 198.272912][ T6918] ? __virt_addr_valid+0x45b/0x530 [ 198.278223][ T6918] ? __phys_addr_symbol+0x2b/0x70 [ 198.283374][ T6918] ? __check_object_size+0x4dd/0xa30 [ 198.288686][ T6918] netlink_sendmsg+0x800/0xd60 [ 198.293471][ T6918] ? netlink_getsockopt+0x580/0x580 [ 198.298727][ T6918] ? aa_sock_msg_perm+0x91/0x150 [ 198.303703][ T6918] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 198.309007][ T6918] ? security_socket_sendmsg+0x7d/0xa0 [ 198.314484][ T6918] ? netlink_getsockopt+0x580/0x580 [ 198.319793][ T6918] ____sys_sendmsg+0x5d3/0x9a0 [ 198.324586][ T6918] ? __sys_sendmsg_sock+0x30/0x30 [ 198.329632][ T6918] __sys_sendmsg+0x2a9/0x390 [ 198.334344][ T6918] ? ____sys_sendmsg+0x9a0/0x9a0 [ 198.339484][ T6918] ? seqcount_lockdep_reader_access+0x1bd/0x220 [ 198.345954][ T6918] ? perf_trace_run_bpf_submit+0xf7/0x1d0 [ 198.351715][ T6918] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 198.357959][ T6918] ? syscall_enter_from_user_mode+0x2e/0x230 [ 198.364572][ T6918] ? lockdep_hardirqs_on+0x94/0x130 [ 198.369843][ T6918] ? syscall_enter_from_user_mode+0x2e/0x230 [ 198.376060][ T6918] do_syscall_64+0x3b/0xb0 [ 198.380511][ T6918] ? clear_bhb_loop+0x45/0xa0 [ 198.385224][ T6918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.391230][ T6918] RIP: 0033:0x7fa12638d169 [ 198.395674][ T6918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.415572][ T6918] RSP: 002b:00007fa12719f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.424000][ T6918] RAX: ffffffffffffffda RBX: 00007fa1265a5fa0 RCX: 00007fa12638d169 [ 198.432766][ T6918] RDX: 0000000000000000 RSI: 0000400000000180 RDI: 0000000000000008 [ 198.440748][ T6918] RBP: 00007fa12719f090 R08: 0000000000000000 R09: 0000000000000000 [ 198.448724][ T6918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.456725][ T6918] R13: 0000000000000000 R14: 00007fa1265a5fa0 R15: 00007fff7ea8f5a8 [ 198.464748][ T6918] [ 198.623913][ T6927] delete_channel: no stack [ 198.632688][ T6927] delete_channel: no stack [ 199.148387][ T6932] netlink: 60 bytes leftover after parsing attributes in process `syz.0.994'. [ 199.184850][ T6931] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.994'. [ 199.212907][ T6933] validate_nla: 1 callbacks suppressed [ 199.212929][ T6933] netlink: 'syz.0.994': attribute type 10 has an invalid length. [ 199.309990][ T6933] batman_adv: batadv0: Adding interface: team0 [ 199.340332][ T6933] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.414756][ T6933] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 199.428892][ T6938] netlink: 'syz.1.996': attribute type 4 has an invalid length. [ 199.804775][ T6939] netlink: 'syz.4.997': attribute type 27 has an invalid length. [ 199.840319][ T6939] netlink: 'syz.4.997': attribute type 10 has an invalid length. [ 199.875563][ T6944] netlink: 152 bytes leftover after parsing attributes in process `syz.2.998'. [ 200.167123][ T6950] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 200.271426][ T6950] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.347200][ T6957] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1003'. [ 200.765758][ T6968] netlink: 'syz.4.1008': attribute type 22 has an invalid length. [ 200.811128][ T6968] netlink: 'syz.4.1008': attribute type 2 has an invalid length. [ 200.838178][ T6968] netlink: 9062 bytes leftover after parsing attributes in process `syz.4.1008'. [ 201.175613][ T6975] FAULT_INJECTION: forcing a failure. [ 201.175613][ T6975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.245873][ T6975] CPU: 1 PID: 6975 Comm: syz.1.1011 Not tainted 6.1.129-syzkaller #0 [ 201.254012][ T6975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 201.264102][ T6975] Call Trace: [ 201.267403][ T6975] [ 201.270448][ T6975] dump_stack_lvl+0x1e3/0x2cb [ 201.275192][ T6975] ? nf_tcp_handle_invalid+0x647/0x647 [ 201.280704][ T6975] ? panic+0x764/0x764 [ 201.284808][ T6975] ? __might_fault+0xa1/0x110 [ 201.289531][ T6975] ? __lock_acquire+0x1f80/0x1f80 [ 201.294661][ T6975] should_fail_ex+0x3a6/0x4d0 [ 201.299397][ T6975] copyin+0x1a/0x120 [ 201.303348][ T6975] _copy_from_iter+0x493/0xff0 [ 201.308174][ T6975] ? copyout_mc+0x100/0x100 [ 201.312737][ T6975] ? __virt_addr_valid+0x17f/0x530 [ 201.317893][ T6975] ? __virt_addr_valid+0x17f/0x530 [ 201.323042][ T6975] ? __virt_addr_valid+0x45b/0x530 [ 201.328191][ T6975] ? __phys_addr_symbol+0x2b/0x70 [ 201.333254][ T6975] ? __check_object_size+0x4dd/0xa30 [ 201.338596][ T6975] netlink_sendmsg+0x800/0xd60 [ 201.343410][ T6975] ? netlink_getsockopt+0x580/0x580 [ 201.348647][ T6975] ? aa_sock_msg_perm+0x91/0x150 [ 201.349563][ T6983] netlink: 'syz.3.1015': attribute type 27 has an invalid length. [ 201.353596][ T6975] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 201.353633][ T6975] ? security_socket_sendmsg+0x7d/0xa0 [ 201.353665][ T6975] ? netlink_getsockopt+0x580/0x580 [ 201.353691][ T6975] ____sys_sendmsg+0x5d3/0x9a0 [ 201.353722][ T6975] ? __sys_sendmsg_sock+0x30/0x30 [ 201.353760][ T6975] __sys_sendmsg+0x2a9/0x390 [ 201.353792][ T6975] ? ____sys_sendmsg+0x9a0/0x9a0 [ 201.353813][ T6975] ? vfs_write+0x6cf/0xbc0 [ 201.353867][ T6975] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 201.353922][ T6975] do_syscall_64+0x3b/0xb0 [ 201.353954][ T6975] ? clear_bhb_loop+0x45/0xa0 [ 201.353981][ T6975] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.354005][ T6975] RIP: 0033:0x7fb074f8d169 [ 201.354025][ T6975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.354043][ T6975] RSP: 002b:00007fb075d0d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.354068][ T6975] RAX: ffffffffffffffda RBX: 00007fb0751a5fa0 RCX: 00007fb074f8d169 [ 201.354085][ T6975] RDX: 0000000000000000 RSI: 0000400000000600 RDI: 000000000000000d [ 201.354099][ T6975] RBP: 00007fb075d0d090 R08: 0000000000000000 R09: 0000000000000000 [ 201.354113][ T6975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.354126][ T6975] R13: 0000000000000000 R14: 00007fb0751a5fa0 R15: 00007fff879aa688 [ 201.354158][ T6975] [ 201.532337][ T6982] netlink: 'syz.3.1015': attribute type 10 has an invalid length. [ 201.549951][ T6985] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 201.610171][ T6985] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.090474][ T7006] netlink: 'syz.0.1025': attribute type 22 has an invalid length. [ 202.115845][ T7003] netlink: 'syz.1.1024': attribute type 21 has an invalid length. [ 202.135036][ T7006] netlink: 9062 bytes leftover after parsing attributes in process `syz.0.1025'. [ 202.492801][ T7021] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 202.548620][ T7021] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.174382][ T7036] FAULT_INJECTION: forcing a failure. [ 203.174382][ T7036] name failslab, interval 1, probability 0, space 0, times 0 [ 203.207960][ T7036] CPU: 0 PID: 7036 Comm: syz.2.1039 Not tainted 6.1.129-syzkaller #0 [ 203.216097][ T7036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 203.226538][ T7036] Call Trace: [ 203.229858][ T7036] [ 203.232822][ T7036] dump_stack_lvl+0x1e3/0x2cb [ 203.237558][ T7036] ? nf_tcp_handle_invalid+0x647/0x647 [ 203.243086][ T7036] ? panic+0x764/0x764 [ 203.247192][ T7036] ? __might_sleep+0xb0/0xb0 [ 203.251823][ T7036] should_fail_ex+0x3a6/0x4d0 [ 203.256540][ T7036] should_failslab+0x5/0x20 [ 203.261065][ T7036] slab_pre_alloc_hook+0x59/0x300 [ 203.266121][ T7036] ? apparmor_sk_alloc_security+0x73/0x100 [ 203.271958][ T7036] __kmem_cache_alloc_node+0x47/0x260 [ 203.277363][ T7036] ? apparmor_sk_alloc_security+0x73/0x100 [ 203.283195][ T7036] kmalloc_trace+0x26/0xe0 [ 203.287634][ T7036] apparmor_sk_alloc_security+0x73/0x100 [ 203.293325][ T7036] security_sk_alloc+0x6d/0xa0 [ 203.298156][ T7036] sk_prot_alloc+0xfa/0x200 [ 203.302683][ T7036] ? sk_alloc+0x23/0x350 [ 203.306950][ T7036] sk_alloc+0x36/0x350 [ 203.311053][ T7036] bpf_prog_test_run_skb+0x384/0x13a0 [ 203.316467][ T7036] ? cpu_online+0xb0/0xb0 [ 203.320820][ T7036] ? cpu_online+0xb0/0xb0 [ 203.325173][ T7036] bpf_prog_test_run+0x32f/0x3a0 [ 203.330150][ T7036] __sys_bpf+0x3eb/0x6c0 [ 203.334423][ T7036] ? __fget_files+0x435/0x4a0 [ 203.339141][ T7036] ? bpf_link_show_fdinfo+0x300/0x300 [ 203.344560][ T7036] ? print_irqtrace_events+0x210/0x210 [ 203.350048][ T7036] ? print_irqtrace_events+0x210/0x210 [ 203.355585][ T7036] ? syscall_enter_from_user_mode+0x2e/0x230 [ 203.361634][ T7036] ? lockdep_hardirqs_on+0x94/0x130 [ 203.366869][ T7036] __x64_sys_bpf+0x78/0x90 [ 203.371354][ T7036] do_syscall_64+0x3b/0xb0 [ 203.375800][ T7036] ? clear_bhb_loop+0x45/0xa0 [ 203.380495][ T7036] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.386550][ T7036] RIP: 0033:0x7fe6e1b8d169 [ 203.390983][ T7036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.410609][ T7036] RSP: 002b:00007fe6e29d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 203.419035][ T7036] RAX: ffffffffffffffda RBX: 00007fe6e1da5fa0 RCX: 00007fe6e1b8d169 [ 203.427012][ T7036] RDX: 0000000000000028 RSI: 0000400000000080 RDI: 000000000000000a [ 203.434997][ T7036] RBP: 00007fe6e29d7090 R08: 0000000000000000 R09: 0000000000000000 [ 203.443071][ T7036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.451161][ T7036] R13: 0000000000000000 R14: 00007fe6e1da5fa0 R15: 00007ffeb6178d08 [ 203.459275][ T7036] [ 203.588428][ T7040] netlink: 9062 bytes leftover after parsing attributes in process `syz.1.1041'. [ 204.761841][ T7076] validate_nla: 8 callbacks suppressed [ 204.761864][ T7076] netlink: 'syz.1.1053': attribute type 9 has an invalid length. [ 204.795676][ T7076] netlink: 118396 bytes leftover after parsing attributes in process `syz.1.1053'. [ 204.860900][ T7078] netlink: 'syz.3.1056': attribute type 27 has an invalid length. [ 205.163271][ T7086] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1067'. [ 205.228829][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.266339][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.297498][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.324492][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.352503][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.377802][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.392711][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.415953][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.443376][ T7086] device batadv_slave_1 entered promiscuous mode [ 205.463793][ T7092] netlink: 'syz.4.1067': attribute type 10 has an invalid length. [ 205.591844][ T7092] team0: Port device wlan1 added [ 205.625274][ T7095] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1060'. [ 205.663067][ T7095] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.869227][ T7099] netlink: 'syz.2.1061': attribute type 27 has an invalid length. [ 205.920320][ T7099] netlink: 'syz.2.1061': attribute type 10 has an invalid length. [ 206.024500][ T7109] netlink: 'syz.0.1065': attribute type 22 has an invalid length. [ 206.045425][ T7109] netlink: 'syz.0.1065': attribute type 2 has an invalid length. [ 206.062376][ T7109] netlink: 9062 bytes leftover after parsing attributes in process `syz.0.1065'. [ 206.236300][ T7117] netlink: 'syz.3.1066': attribute type 4 has an invalid length. [ 206.462768][ T7122] netlink: 'syz.0.1070': attribute type 27 has an invalid length. [ 206.481182][ T7124] netlink: 'syz.2.1069': attribute type 22 has an invalid length. [ 206.506485][ T7126] netlink: 9062 bytes leftover after parsing attributes in process `syz.1.1071'. [ 206.562658][ T7124] netlink: 9062 bytes leftover after parsing attributes in process `syz.2.1069'. [ 206.837787][ T7135] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1075'. [ 206.878919][ T7135] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.232709][ T7145] netlink: 9062 bytes leftover after parsing attributes in process `syz.3.1081'. [ 208.234315][ T7177] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1095'. [ 209.641902][ T7209] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1108'. [ 209.930488][ T7218] validate_nla: 8 callbacks suppressed [ 209.930529][ T7218] netlink: 'syz.1.1112': attribute type 27 has an invalid length. [ 210.261072][ T7226] netlink: 'syz.1.1117': attribute type 27 has an invalid length. [ 210.457764][ T7232] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 210.520616][ T7232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.606914][ T7239] netlink: 'syz.0.1121': attribute type 4 has an invalid length. [ 210.941515][ T7245] netlink: 'syz.2.1124': attribute type 21 has an invalid length. [ 210.977785][ T7245] __nla_validate_parse: 1 callbacks suppressed [ 210.977806][ T7245] netlink: 16162 bytes leftover after parsing attributes in process `syz.2.1124'. [ 211.030761][ T7249] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1126'. [ 211.133539][ T7252] netlink: 'syz.0.1128': attribute type 27 has an invalid length. [ 211.977639][ T7272] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1136'. [ 212.066094][ T7277] netlink: 'syz.3.1135': attribute type 10 has an invalid length. [ 212.114809][ T7277] team0: Port device wlan1 added [ 212.487152][ T7283] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1141'. [ 212.517452][ T7286] netlink: 'syz.3.1140': attribute type 4 has an invalid length. [ 212.600949][ T7288] netlink: 'syz.0.1142': attribute type 27 has an invalid length. [ 213.235376][ T7303] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1150'. [ 213.668679][ T7309] netlink: 'syz.4.1153': attribute type 27 has an invalid length. [ 213.719185][ T7309] netlink: 'syz.4.1153': attribute type 10 has an invalid length. [ 213.835253][ T7315] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1155'. [ 214.389515][ T7335] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1164'. [ 215.021018][ T7345] validate_nla: 4 callbacks suppressed [ 215.021038][ T7345] netlink: 'syz.3.1168': attribute type 29 has an invalid length. [ 215.089123][ T7345] netlink: 'syz.3.1168': attribute type 29 has an invalid length. [ 215.099364][ T7348] FAULT_INJECTION: forcing a failure. [ 215.099364][ T7348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.117286][ T7348] CPU: 1 PID: 7348 Comm: syz.3.1168 Not tainted 6.1.129-syzkaller #0 [ 215.125688][ T7348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 215.136225][ T7348] Call Trace: [ 215.139621][ T7348] [ 215.142628][ T7348] dump_stack_lvl+0x1e3/0x2cb [ 215.147538][ T7348] ? nf_tcp_handle_invalid+0x647/0x647 [ 215.153267][ T7348] ? panic+0x764/0x764 [ 215.157602][ T7348] ? __might_fault+0xa1/0x110 [ 215.163109][ T7348] ? __lock_acquire+0x1f80/0x1f80 [ 215.168411][ T7348] ? __virt_addr_valid+0x17f/0x530 [ 215.173580][ T7348] should_fail_ex+0x3a6/0x4d0 [ 215.178296][ T7348] copyout+0x1a/0x120 [ 215.182305][ T7348] _copy_to_iter+0x4a6/0x1000 [ 215.187025][ T7348] ? iov_iter_init+0x1b0/0x1b0 [ 215.191807][ T7348] ? __virt_addr_valid+0x17f/0x530 [ 215.197053][ T7348] ? __virt_addr_valid+0x17f/0x530 [ 215.202584][ T7348] ? __virt_addr_valid+0x45b/0x530 [ 215.208120][ T7348] ? __phys_addr_symbol+0x2b/0x70 [ 215.213164][ T7348] ? __check_object_size+0x4dd/0xa30 [ 215.218484][ T7348] __skb_datagram_iter+0xdd/0x7c0 [ 215.223638][ T7348] ? skb_copy_datagram_iter+0x2b0/0x2b0 [ 215.229328][ T7348] skb_copy_datagram_iter+0xe1/0x2b0 [ 215.234631][ T7348] netlink_recvmsg+0x2b6/0x1180 [ 215.239502][ T7348] ? netlink_sendmsg+0xd60/0xd60 [ 215.244551][ T7348] ? _copy_from_user+0x109/0x170 [ 215.249513][ T7348] ? aa_af_perm+0x350/0x350 [ 215.254049][ T7348] ? iovec_from_user+0x2f2/0x380 [ 215.259113][ T7348] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 215.264458][ T7348] ? security_socket_recvmsg+0x86/0xb0 [ 215.270666][ T7348] ? netlink_sendmsg+0xd60/0xd60 [ 215.275826][ T7348] ____sys_recvmsg+0x285/0x530 [ 215.280894][ T7348] ? __sys_recvmsg_sock+0x40/0x40 [ 215.286610][ T7348] __sys_recvmsg+0x2e9/0x3d0 [ 215.291860][ T7348] ? ____sys_recvmsg+0x530/0x530 [ 215.297927][ T7348] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 215.305676][ T7348] ? syscall_enter_from_user_mode+0x2e/0x230 [ 215.312852][ T7348] ? lockdep_hardirqs_on+0x94/0x130 [ 215.318252][ T7348] ? syscall_enter_from_user_mode+0x2e/0x230 [ 215.324733][ T7348] do_syscall_64+0x3b/0xb0 [ 215.329383][ T7348] ? clear_bhb_loop+0x45/0xa0 [ 215.334465][ T7348] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.341695][ T7348] RIP: 0033:0x7f124d18d169 [ 215.347438][ T7348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.368486][ T7348] RSP: 002b:00007f124df4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 215.377780][ T7348] RAX: ffffffffffffffda RBX: 00007f124d3a6080 RCX: 00007f124d18d169 [ 215.386090][ T7348] RDX: 0000000000000000 RSI: 0000400000000180 RDI: 0000000000000003 [ 215.394434][ T7348] RBP: 00007f124df4b090 R08: 0000000000000000 R09: 0000000000000000 [ 215.403238][ T7348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.411346][ T7348] R13: 0000000000000001 R14: 00007f124d3a6080 R15: 00007ffc0ad96da8 [ 215.419533][ T7348] [ 215.438432][ T7348] netlink: 'syz.3.1168': attribute type 29 has an invalid length. [ 215.478356][ T7351] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1170'. [ 215.508949][ T7353] netlink: 'syz.0.1171': attribute type 27 has an invalid length. [ 215.826290][ T7361] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1175'. [ 216.080671][ T7368] netlink: 'syz.2.1177': attribute type 4 has an invalid length. [ 216.701305][ T7382] netlink: 'syz.1.1184': attribute type 27 has an invalid length. [ 216.782665][ T7382] netlink: 'syz.1.1184': attribute type 10 has an invalid length. [ 216.879545][ T7385] netlink: 'syz.2.1185': attribute type 27 has an invalid length. [ 216.940580][ T7387] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1186'. [ 217.188588][ T7397] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1191'. [ 217.492192][ T7404] netlink: 'syz.1.1193': attribute type 4 has an invalid length. [ 218.063969][ T7419] netlink: 'syz.2.1200': attribute type 27 has an invalid length. [ 218.095081][ T7421] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1201'. [ 218.227532][ T7423] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1202'. [ 218.374217][ T7429] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1205'. [ 219.204796][ T7457] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1215'. [ 219.441884][ T7462] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1218'. [ 219.739836][ T7469] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1220'. [ 220.286283][ T7483] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 220.455623][ T7483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.107737][ T7489] validate_nla: 2 callbacks suppressed [ 221.107776][ T7489] netlink: 'syz.3.1229': attribute type 27 has an invalid length. [ 221.185477][ T7489] netlink: 'syz.3.1229': attribute type 10 has an invalid length. [ 221.656940][ T7493] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1231'. [ 222.124939][ T7506] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1237'. [ 222.546734][ T7516] netlink: 'syz.0.1241': attribute type 4 has an invalid length. [ 222.751216][ T7518] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 222.880639][ T7518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.008297][ T7522] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1243'. [ 223.153390][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 223.275407][ T7524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.409990][ T7530] netlink: 'syz.2.1246': attribute type 27 has an invalid length. [ 223.447441][ T7530] netlink: 'syz.2.1246': attribute type 10 has an invalid length. [ 224.177673][ T7548] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 224.265704][ T7548] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.504766][ T7551] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1256'. [ 225.160931][ T7561] netlink: 'syz.3.1261': attribute type 21 has an invalid length. [ 225.189870][ T7561] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1261'. [ 225.234361][ T7562] netlink: 'syz.3.1261': attribute type 21 has an invalid length. [ 225.259884][ T7562] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1261'. [ 225.333445][ T7565] netlink: 'syz.2.1262': attribute type 27 has an invalid length. [ 225.398735][ T7565] netlink: 'syz.2.1262': attribute type 10 has an invalid length. [ 225.960356][ T7584] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1269'. [ 225.991042][ T7582] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 226.032798][ T7582] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.869888][ T7596] netlink: 'syz.1.1284': attribute type 27 has an invalid length. [ 226.965412][ T7602] netlink: 'syz.0.1275': attribute type 4 has an invalid length. [ 227.193637][ T7606] netlink: 'syz.4.1277': attribute type 27 has an invalid length. [ 227.271357][ T7606] netlink: 'syz.4.1277': attribute type 10 has an invalid length. [ 228.064475][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 228.185468][ T7625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 228.622393][ T7637] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1290'. [ 228.670823][ T7637] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1290'. [ 228.748606][ T7633] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1290'. [ 228.792963][ T7639] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1290'. [ 228.881537][ T7633] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1290'. [ 229.009395][ T7643] netlink: 'syz.3.1292': attribute type 4 has an invalid length. [ 229.305861][ T7652] netlink: 'syz.1.1293': attribute type 27 has an invalid length. [ 229.465591][ T7647] netlink: 'syz.1.1293': attribute type 10 has an invalid length. [ 229.671846][ T7658] delete_channel: no stack [ 229.693714][ T7662] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 229.766735][ T7662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.979788][ T7657] delete_channel: no stack [ 231.043344][ T7684] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.1309'. [ 231.128591][ T7684] openvswitch: netlink: Message has 41214 unknown bytes. [ 231.530878][ T7695] netlink: 'syz.1.1312': attribute type 27 has an invalid length. [ 231.564420][ T7697] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 231.679937][ T7697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.708333][ T7695] netlink: 'syz.1.1312': attribute type 10 has an invalid length. [ 232.543623][ T7726] netlink: 'syz.3.1324': attribute type 4 has an invalid length. [ 232.876297][ T7737] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1326'. [ 233.167162][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 233.265770][ T7743] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.321544][ T7751] netlink: 'syz.1.1329': attribute type 27 has an invalid length. [ 233.420259][ T7745] netlink: 'syz.1.1329': attribute type 10 has an invalid length. [ 234.177668][ T7769] netlink: 'syz.1.1340': attribute type 27 has an invalid length. [ 234.645412][ T7775] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1342'. [ 235.108639][ T7783] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 235.165396][ T7783] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.520211][ T7786] netlink: 'syz.0.1346': attribute type 27 has an invalid length. [ 235.572609][ T7786] netlink: 'syz.0.1346': attribute type 10 has an invalid length. [ 235.898133][ T7803] netlink: 'syz.0.1353': attribute type 27 has an invalid length. [ 236.020788][ T7805] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1354'. [ 236.596214][ T7818] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 236.746447][ T7818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.814928][ T7820] netlink: 'syz.4.1359': attribute type 10 has an invalid length. [ 236.918504][ T7820] netlink: 'syz.4.1359': attribute type 4 has an invalid length. [ 236.969666][ T7820] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1359'. [ 237.528415][ T7836] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1368'. [ 237.634576][ T7833] netlink: 'syz.0.1365': attribute type 27 has an invalid length. [ 237.660005][ T7838] netlink: 'syz.0.1365': attribute type 10 has an invalid length. [ 238.411070][ T7856] netlink: 'syz.1.1375': attribute type 39 has an invalid length. [ 238.439065][ T7856] device veth0_macvtap left promiscuous mode [ 238.757441][ T7864] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1379'. [ 239.121153][ T7870] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1382'. [ 239.357509][ T7874] netlink: 'syz.4.1384': attribute type 27 has an invalid length. [ 239.412038][ T7874] netlink: 'syz.4.1384': attribute type 10 has an invalid length. [ 240.598398][ T7892] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1392'. [ 240.775763][ T7897] FAULT_INJECTION: forcing a failure. [ 240.775763][ T7897] name failslab, interval 1, probability 0, space 0, times 0 [ 240.800473][ T7898] netlink: 'syz.0.1394': attribute type 27 has an invalid length. [ 240.847698][ T7897] CPU: 1 PID: 7897 Comm: syz.2.1395 Not tainted 6.1.129-syzkaller #0 [ 240.855849][ T7897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 240.865944][ T7897] Call Trace: [ 240.869254][ T7897] [ 240.872214][ T7897] dump_stack_lvl+0x1e3/0x2cb [ 240.876945][ T7897] ? nf_tcp_handle_invalid+0x647/0x647 [ 240.882455][ T7897] ? panic+0x764/0x764 [ 240.886579][ T7897] ? __might_sleep+0xb0/0xb0 [ 240.891214][ T7897] ? netlink_insert+0x10dc/0x1540 [ 240.896289][ T7897] should_fail_ex+0x3a6/0x4d0 [ 240.901025][ T7897] should_failslab+0x5/0x20 [ 240.905759][ T7897] slab_pre_alloc_hook+0x59/0x300 [ 240.910844][ T7897] ? netlink_data_ready+0x10/0x10 [ 240.915921][ T7897] kmem_cache_alloc_node+0x52/0x310 [ 240.921190][ T7897] ? __alloc_skb+0xd3/0x2c0 [ 240.925744][ T7897] __alloc_skb+0xd3/0x2c0 [ 240.930127][ T7897] netlink_sendmsg+0x6f8/0xd60 [ 240.934950][ T7897] ? netlink_getsockopt+0x580/0x580 [ 240.940193][ T7897] ? aa_sock_msg_perm+0x91/0x150 [ 240.945174][ T7897] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 240.950506][ T7897] ? security_socket_sendmsg+0x7d/0xa0 [ 240.956018][ T7897] ? netlink_getsockopt+0x580/0x580 [ 240.961265][ T7897] ____sys_sendmsg+0x5d3/0x9a0 [ 240.966088][ T7897] ? __sys_sendmsg_sock+0x30/0x30 [ 240.971172][ T7897] __sys_sendmsg+0x2a9/0x390 [ 240.975812][ T7897] ? ____sys_sendmsg+0x9a0/0x9a0 [ 240.980786][ T7897] ? vfs_write+0x6cf/0xbc0 [ 240.985273][ T7897] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 240.991324][ T7897] ? syscall_enter_from_user_mode+0x2e/0x230 [ 240.997347][ T7897] ? lockdep_hardirqs_on+0x94/0x130 [ 241.002592][ T7897] ? syscall_enter_from_user_mode+0x2e/0x230 [ 241.008625][ T7897] do_syscall_64+0x3b/0xb0 [ 241.013093][ T7897] ? clear_bhb_loop+0x45/0xa0 [ 241.017821][ T7897] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.024283][ T7897] RIP: 0033:0x7fe6e1b8d169 [ 241.028732][ T7897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.048475][ T7897] RSP: 002b:00007fe6e29d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.057021][ T7897] RAX: ffffffffffffffda RBX: 00007fe6e1da5fa0 RCX: 00007fe6e1b8d169 [ 241.065034][ T7897] RDX: 0000000000000000 RSI: 0000400000000600 RDI: 0000000000000003 [ 241.073048][ T7897] RBP: 00007fe6e29d7090 R08: 0000000000000000 R09: 0000000000000000 [ 241.081061][ T7897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.089072][ T7897] R13: 0000000000000000 R14: 00007fe6e1da5fa0 R15: 00007ffeb6178d08 [ 241.097103][ T7897] [ 241.930940][ T7916] netlink: 'syz.2.1401': attribute type 27 has an invalid length. [ 241.965996][ T7916] netlink: 'syz.2.1401': attribute type 10 has an invalid length. [ 242.344554][ T7930] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1406'. [ 242.705207][ T7943] netlink: 'syz.3.1409': attribute type 27 has an invalid length. [ 243.463489][ T7953] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1416'. [ 243.616371][ T7956] netlink: 'syz.1.1417': attribute type 29 has an invalid length. [ 243.654740][ T7956] netlink: 'syz.1.1417': attribute type 29 has an invalid length. [ 243.676278][ T7956] netlink: 'syz.1.1417': attribute type 29 has an invalid length. [ 243.896921][ T7968] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1421'. [ 244.232779][ T7973] netlink: 'syz.2.1423': attribute type 27 has an invalid length. [ 244.544392][ T7981] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1428'. [ 245.390775][ T7995] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1434'. [ 245.964997][ T7998] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1435'. [ 246.188934][ T8011] netlink: 'syz.2.1439': attribute type 27 has an invalid length. [ 246.310501][ T8017] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1442'. [ 246.833779][ T8034] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1448'. [ 247.483151][ T8043] netlink: 'syz.3.1451': attribute type 27 has an invalid length. [ 247.524131][ T8043] netlink: 'syz.3.1451': attribute type 10 has an invalid length. [ 247.731802][ T8047] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 247.820323][ T8051] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1456'. [ 248.178114][ T8061] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1460'. [ 248.907677][ T8071] netlink: 'syz.1.1465': attribute type 27 has an invalid length. [ 249.010392][ T8071] netlink: 'syz.1.1465': attribute type 10 has an invalid length. [ 249.416697][ T8077] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1467'. [ 249.813379][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 249.881920][ T8086] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.217318][ T8107] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1481'. [ 252.687043][ T8133] netlink: 'syz.2.1489': attribute type 10 has an invalid length. [ 253.934579][ T8152] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.902232][ T8167] netlink: 'syz.2.1502': attribute type 10 has an invalid length. [ 255.246324][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 255.346109][ T8177] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.691345][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.698349][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.126843][ T8200] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.1516'. [ 256.484780][ T8206] netlink: 'syz.1.1519': attribute type 10 has an invalid length. [ 256.537188][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 256.594702][ T8208] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.845001][ T8212] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 256.883009][ T8212] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 257.453257][ T8232] netlink: 'syz.3.1530': attribute type 13 has an invalid length. [ 257.464571][ T8232] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1530'. [ 257.516517][ T8232] syz_tun: refused to change device tx_queue_len [ 257.524824][ T8232] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 257.605658][ T8212] syz.0.1522 (8212) used greatest stack depth: 18496 bytes left [ 258.041969][ T8238] FAULT_INJECTION: forcing a failure. [ 258.041969][ T8238] name failslab, interval 1, probability 0, space 0, times 0 [ 258.137106][ T8238] CPU: 1 PID: 8238 Comm: syz.3.1533 Not tainted 6.1.129-syzkaller #0 [ 258.145256][ T8238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 258.155352][ T8238] Call Trace: [ 258.158662][ T8238] [ 258.161613][ T8238] dump_stack_lvl+0x1e3/0x2cb [ 258.166346][ T8238] ? nf_tcp_handle_invalid+0x647/0x647 [ 258.171852][ T8238] ? panic+0x764/0x764 [ 258.175953][ T8238] ? __might_sleep+0xb0/0xb0 [ 258.180574][ T8238] ? netlink_insert+0x10dc/0x1540 [ 258.185643][ T8238] should_fail_ex+0x3a6/0x4d0 [ 258.190373][ T8238] should_failslab+0x5/0x20 [ 258.194913][ T8238] slab_pre_alloc_hook+0x59/0x300 [ 258.199970][ T8238] ? netlink_data_ready+0x10/0x10 [ 258.205007][ T8238] kmem_cache_alloc_node+0x52/0x310 [ 258.210219][ T8238] ? __alloc_skb+0xd3/0x2c0 [ 258.214734][ T8238] __alloc_skb+0xd3/0x2c0 [ 258.219106][ T8238] netlink_sendmsg+0x6f8/0xd60 [ 258.223890][ T8238] ? netlink_getsockopt+0x580/0x580 [ 258.229100][ T8238] ? aa_sock_msg_perm+0x91/0x150 [ 258.234136][ T8238] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 258.239434][ T8238] ? security_socket_sendmsg+0x7d/0xa0 [ 258.244912][ T8238] ? netlink_getsockopt+0x580/0x580 [ 258.250207][ T8238] ____sys_sendmsg+0x5d3/0x9a0 [ 258.254983][ T8238] ? __sys_sendmsg_sock+0x30/0x30 [ 258.260026][ T8238] __sys_sendmsg+0x2a9/0x390 [ 258.264627][ T8238] ? ____sys_sendmsg+0x9a0/0x9a0 [ 258.269570][ T8238] ? vfs_write+0x6cf/0xbc0 [ 258.274016][ T8238] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 258.280026][ T8238] ? syscall_enter_from_user_mode+0x2e/0x230 [ 258.286021][ T8238] ? lockdep_hardirqs_on+0x94/0x130 [ 258.291255][ T8238] ? syscall_enter_from_user_mode+0x2e/0x230 [ 258.297258][ T8238] do_syscall_64+0x3b/0xb0 [ 258.301696][ T8238] ? clear_bhb_loop+0x45/0xa0 [ 258.306382][ T8238] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.312290][ T8238] RIP: 0033:0x7f124d18d169 [ 258.316710][ T8238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.336582][ T8238] RSP: 002b:00007f124df6c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.345031][ T8238] RAX: ffffffffffffffda RBX: 00007f124d3a5fa0 RCX: 00007f124d18d169 [ 258.353011][ T8238] RDX: 0000000000000000 RSI: 0000400000000940 RDI: 0000000000000003 [ 258.360987][ T8238] RBP: 00007f124df6c090 R08: 0000000000000000 R09: 0000000000000000 [ 258.368973][ T8238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.376949][ T8238] R13: 0000000000000000 R14: 00007f124d3a5fa0 R15: 00007ffc0ad96da8 [ 258.384939][ T8238] [ 258.650672][ T8240] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1534'. [ 258.668717][ T8245] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.837226][ T8252] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1549'. [ 259.932881][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 260.030098][ T8280] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.232212][ T8289] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1553'. [ 260.303313][ T8288] netlink: 'syz.3.1554': attribute type 10 has an invalid length. [ 261.452061][ T8326] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 261.490027][ T8326] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.822044][ T8331] netlink: 'syz.0.1569': attribute type 10 has an invalid length. [ 262.033625][ T8339] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 262.137946][ T8339] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 263.494646][ T8364] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.1584'. [ 263.696859][ T8373] netlink: 'syz.4.1585': attribute type 27 has an invalid length. [ 263.761924][ T8368] netlink: 'syz.4.1585': attribute type 10 has an invalid length. [ 264.640135][ T8398] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1598'. [ 265.413703][ T8419] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1607'. [ 265.586127][ T8424] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 265.662049][ T8424] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.750017][ T8492] netlink: 'syz.4.1642': attribute type 2 has an invalid length. [ 268.818341][ T8492] netlink: 'syz.4.1642': attribute type 8 has an invalid length. [ 268.826155][ T8492] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1642'. [ 269.614839][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 269.710721][ T8509] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.420564][ T8527] FAULT_INJECTION: forcing a failure. [ 270.420564][ T8527] name failslab, interval 1, probability 0, space 0, times 0 [ 270.498459][ T8527] CPU: 1 PID: 8527 Comm: syz.4.1656 Not tainted 6.1.129-syzkaller #0 [ 270.506629][ T8527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 270.516743][ T8527] Call Trace: [ 270.520624][ T8527] [ 270.523590][ T8527] dump_stack_lvl+0x1e3/0x2cb [ 270.528336][ T8527] ? nf_tcp_handle_invalid+0x647/0x647 [ 270.533851][ T8527] ? panic+0x764/0x764 [ 270.537961][ T8527] ? __might_sleep+0xb0/0xb0 [ 270.542605][ T8527] ? __lock_acquire+0x125b/0x1f80 [ 270.547693][ T8527] should_fail_ex+0x3a6/0x4d0 [ 270.552411][ T8527] should_failslab+0x5/0x20 [ 270.552470][ T8527] slab_pre_alloc_hook+0x59/0x300 [ 270.552511][ T8527] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 270.552545][ T8527] __kmem_cache_alloc_node+0x47/0x260 [ 270.552585][ T8527] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 270.552627][ T8527] __kmalloc+0xa1/0x230 [ 270.552655][ T8527] ? rcu_is_watching+0x11/0xb0 [ 270.552684][ T8527] tomoyo_realpath_from_path+0xcb/0x5d0 [ 270.552734][ T8527] tomoyo_path_number_perm+0x21f/0x7f0 [ 270.552770][ T8527] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 270.552806][ T8527] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 270.552837][ T8527] ? user_path_create+0x40/0x50 [ 270.552869][ T8527] ? kasan_set_track+0x60/0x70 [ 270.552891][ T8527] ? kasan_set_track+0x4b/0x70 [ 270.552913][ T8527] ? kasan_save_free_info+0x27/0x40 [ 270.552940][ T8527] ? ____kasan_slab_free+0xd6/0x120 [ 270.552964][ T8527] ? kmem_cache_free+0x292/0x510 [ 270.552994][ T8527] ? user_path_create+0x40/0x50 [ 270.553023][ T8527] ? bpf_obj_pin_user+0x126/0x350 [ 270.553101][ T8527] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 270.553139][ T8527] ? hook_path_mknod+0x15a/0x470 [ 270.553173][ T8527] ? print_irqtrace_events+0x210/0x210 [ 270.553214][ T8527] tomoyo_path_mknod+0x172/0x1b0 [ 270.553249][ T8527] ? hook_path_mkdir+0x410/0x410 [ 270.553284][ T8527] ? tomoyo_path_symlink+0x110/0x110 [ 270.553324][ T8527] ? kmem_cache_free+0x292/0x510 [ 270.553360][ T8527] security_path_mknod+0xf1/0x150 [ 270.692083][ T8527] bpf_obj_pin_user+0x170/0x350 [ 270.697021][ T8527] ? verifier_remove_insns+0x1320/0x1320 [ 270.702716][ T8527] __sys_bpf+0x396/0x6c0 [ 270.706986][ T8527] ? __fget_files+0x435/0x4a0 [ 270.711706][ T8527] ? bpf_link_show_fdinfo+0x300/0x300 [ 270.717110][ T8527] ? perf_trace_preemptirq_template+0xf4/0x3d0 [ 270.723359][ T8527] ? print_irqtrace_events+0x210/0x210 [ 270.728868][ T8527] ? print_irqtrace_events+0x210/0x210 [ 270.734380][ T8527] ? syscall_enter_from_user_mode+0x2e/0x230 [ 270.740404][ T8527] ? lockdep_hardirqs_on+0x94/0x130 [ 270.745659][ T8527] __x64_sys_bpf+0x78/0x90 [ 270.750131][ T8527] do_syscall_64+0x3b/0xb0 [ 270.754634][ T8527] ? clear_bhb_loop+0x45/0xa0 [ 270.759360][ T8527] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 270.765301][ T8527] RIP: 0033:0x7fa12638d169 [ 270.769749][ T8527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.789396][ T8527] RSP: 002b:00007fa12719f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 270.797848][ T8527] RAX: ffffffffffffffda RBX: 00007fa1265a5fa0 RCX: 00007fa12638d169 [ 270.805850][ T8527] RDX: 0000000000000018 RSI: 00004000000007c0 RDI: 0000000000000006 [ 270.813863][ T8527] RBP: 00007fa12719f090 R08: 0000000000000000 R09: 0000000000000000 [ 270.821876][ T8527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.829978][ T8527] R13: 0000000000000000 R14: 00007fa1265a5fa0 R15: 00007fff7ea8f5a8 [ 270.838015][ T8527] [ 270.868445][ T8527] ERROR: Out of memory at tomoyo_realpath_from_path. [ 270.876324][ T8531] netlink: 'syz.3.1657': attribute type 10 has an invalid length. [ 271.233303][ T8544] netlink: 'syz.2.1662': attribute type 10 has an invalid length. [ 271.381106][ T8544] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 271.560851][ T8553] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 271.687379][ T8553] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 275.256471][ T8641] netlink: 'syz.4.1701': attribute type 27 has an invalid length. [ 275.385793][ T8641] netlink: 'syz.4.1701': attribute type 10 has an invalid length. [ 276.542408][ T8677] netlink: 'syz.2.1718': attribute type 27 has an invalid length. [ 276.654131][ T8677] netlink: 'syz.2.1718': attribute type 10 has an invalid length. [ 277.165252][ T8684] netlink: 'syz.0.1721': attribute type 3 has an invalid length. [ 277.174877][ T8684] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1721'. [ 277.207741][ T8684] netlink: 'syz.0.1721': attribute type 2 has an invalid length. [ 277.216081][ T8684] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1721'. [ 277.363827][ T8692] netlink: 'syz.4.1724': attribute type 3 has an invalid length. [ 277.419502][ T8692] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1724'. [ 277.473889][ T8692] FAULT_INJECTION: forcing a failure. [ 277.473889][ T8692] name failslab, interval 1, probability 0, space 0, times 0 [ 277.498363][ T8692] CPU: 0 PID: 8692 Comm: syz.4.1724 Not tainted 6.1.129-syzkaller #0 [ 277.506507][ T8692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 277.516593][ T8692] Call Trace: [ 277.519886][ T8692] [ 277.522860][ T8692] dump_stack_lvl+0x1e3/0x2cb [ 277.527569][ T8692] ? nf_tcp_handle_invalid+0x647/0x647 [ 277.533056][ T8692] ? panic+0x764/0x764 [ 277.537151][ T8692] ? __might_sleep+0xb0/0xb0 [ 277.541767][ T8692] ? netlink_insert+0x10dc/0x1540 [ 277.546805][ T8692] should_fail_ex+0x3a6/0x4d0 [ 277.551515][ T8692] should_failslab+0x5/0x20 [ 277.556028][ T8692] slab_pre_alloc_hook+0x59/0x300 [ 277.561068][ T8692] ? netlink_data_ready+0x10/0x10 [ 277.566117][ T8692] kmem_cache_alloc_node+0x52/0x310 [ 277.571329][ T8692] ? __alloc_skb+0xd3/0x2c0 [ 277.575848][ T8692] __alloc_skb+0xd3/0x2c0 [ 277.580187][ T8692] netlink_sendmsg+0x6f8/0xd60 [ 277.584979][ T8692] ? netlink_getsockopt+0x580/0x580 [ 277.590192][ T8692] ? aa_sock_msg_perm+0x91/0x150 [ 277.595151][ T8692] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 277.600551][ T8692] ? security_socket_sendmsg+0x7d/0xa0 [ 277.606036][ T8692] ? netlink_getsockopt+0x580/0x580 [ 277.611278][ T8692] ____sys_sendmsg+0x5d3/0x9a0 [ 277.616061][ T8692] ? __sys_sendmsg_sock+0x30/0x30 [ 277.621106][ T8692] __sys_sendmsg+0x2a9/0x390 [ 277.625706][ T8692] ? ____sys_sendmsg+0x9a0/0x9a0 [ 277.630649][ T8692] ? vfs_write+0x6cf/0xbc0 [ 277.635100][ T8692] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 277.641127][ T8692] ? syscall_enter_from_user_mode+0x2e/0x230 [ 277.647143][ T8692] ? lockdep_hardirqs_on+0x94/0x130 [ 277.652355][ T8692] ? syscall_enter_from_user_mode+0x2e/0x230 [ 277.658348][ T8692] do_syscall_64+0x3b/0xb0 [ 277.662780][ T8692] ? clear_bhb_loop+0x45/0xa0 [ 277.667473][ T8692] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 277.673378][ T8692] RIP: 0033:0x7fa12638d169 [ 277.677807][ T8692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.697429][ T8692] RSP: 002b:00007fa12719f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.705974][ T8692] RAX: ffffffffffffffda RBX: 00007fa1265a5fa0 RCX: 00007fa12638d169 [ 277.714392][ T8692] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000005 [ 277.722370][ T8692] RBP: 00007fa12719f090 R08: 0000000000000000 R09: 0000000000000000 [ 277.730610][ T8692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.738588][ T8692] R13: 0000000000000000 R14: 00007fa1265a5fa0 R15: 00007fff7ea8f5a8 [ 277.746582][ T8692] [ 277.825534][ T8700] netlink: 114704 bytes leftover after parsing attributes in process `syz.1.1727'. [ 278.053243][ T8708] netlink: 'syz.4.1729': attribute type 27 has an invalid length. [ 278.086894][ T8708] netlink: 'syz.4.1729': attribute type 10 has an invalid length. [ 278.712823][ T8728] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1737'. [ 278.785555][ T8733] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 278.793257][ T8733] IPv6: NLM_F_CREATE should be set when creating new route [ 278.800594][ T8733] IPv6: NLM_F_CREATE should be set when creating new route [ 279.322300][ T8746] netlink: 'syz.4.1746': attribute type 27 has an invalid length. [ 279.327014][ T8748] netlink: 114704 bytes leftover after parsing attributes in process `syz.3.1745'. [ 279.396864][ T8748] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 279.964047][ T8768] FAULT_INJECTION: forcing a failure. [ 279.964047][ T8768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.992124][ T8768] CPU: 1 PID: 8768 Comm: syz.1.1755 Not tainted 6.1.129-syzkaller #0 [ 280.000290][ T8768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 280.010387][ T8768] Call Trace: [ 280.013740][ T8768] [ 280.016700][ T8768] dump_stack_lvl+0x1e3/0x2cb [ 280.022050][ T8768] ? nf_tcp_handle_invalid+0x647/0x647 [ 280.027572][ T8768] ? panic+0x764/0x764 [ 280.031687][ T8768] ? __lock_acquire+0x1f80/0x1f80 [ 280.036776][ T8768] should_fail_ex+0x3a6/0x4d0 [ 280.041525][ T8768] _copy_from_user+0x2b/0x170 [ 280.046338][ T8768] copy_msghdr_from_user+0xaa/0x670 [ 280.051599][ T8768] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 280.057822][ T8768] ? sendmsg_copy_msghdr+0x70/0x70 [ 280.063073][ T8768] ? __sys_sendmsg+0x21f/0x390 [ 280.067879][ T8768] __sys_sendmsg+0x236/0x390 [ 280.072683][ T8768] ? ____sys_sendmsg+0x9a0/0x9a0 [ 280.078591][ T8768] ? seqcount_lockdep_reader_access+0x1bd/0x220 [ 280.086045][ T8768] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 280.092094][ T8768] ? syscall_enter_from_user_mode+0x2e/0x230 [ 280.098132][ T8768] ? syscall_enter_from_user_mode+0x2e/0x230 [ 280.104167][ T8768] ? lockdep_hardirqs_on+0x94/0x130 [ 280.109420][ T8768] ? syscall_enter_from_user_mode+0x2e/0x230 [ 280.115455][ T8768] do_syscall_64+0x3b/0xb0 [ 280.119921][ T8768] ? clear_bhb_loop+0x45/0xa0 [ 280.124646][ T8768] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.130637][ T8768] RIP: 0033:0x7fb074f8d169 [ 280.135085][ T8768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.154820][ T8768] RSP: 002b:00007fb075d0d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.163280][ T8768] RAX: ffffffffffffffda RBX: 00007fb0751a5fa0 RCX: 00007fb074f8d169 [ 280.171303][ T8768] RDX: 0000000000000000 RSI: 0000400000000600 RDI: 0000000000000010 [ 280.179319][ T8768] RBP: 00007fb075d0d090 R08: 0000000000000000 R09: 0000000000000000 [ 280.187427][ T8768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.195443][ T8768] R13: 0000000000000000 R14: 00007fb0751a5fa0 R15: 00007fff879aa688 [ 280.203470][ T8768] [ 280.557540][ T8778] validate_nla: 1 callbacks suppressed [ 280.557581][ T8778] netlink: 'syz.0.1760': attribute type 27 has an invalid length. [ 280.629533][ T8783] netlink: 'syz.0.1760': attribute type 10 has an invalid length. [ 280.692237][ T8782] netlink: 114704 bytes leftover after parsing attributes in process `syz.4.1762'. [ 280.760656][ T8782] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 281.717578][ T8812] netlink: 'syz.4.1775': attribute type 27 has an invalid length. [ 281.850242][ T8811] netlink: 'syz.4.1775': attribute type 10 has an invalid length. [ 282.834842][ T8842] netlink: 'syz.4.1788': attribute type 27 has an invalid length. [ 282.872312][ T8842] netlink: 'syz.4.1788': attribute type 10 has an invalid length. [ 283.023652][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 283.122534][ T8846] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 283.247319][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 283.313383][ T8853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 284.514840][ T8887] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 284.551539][ T8887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 285.170059][ T8909] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 285.578555][ T8926] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 286.519939][ T8956] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 286.579543][ T8956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 286.613110][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 286.646771][ T8959] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 286.914214][ T8971] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1842'. [ 287.171063][ T8978] FAULT_INJECTION: forcing a failure. [ 287.171063][ T8978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.227985][ T8978] CPU: 1 PID: 8978 Comm: syz.1.1844 Not tainted 6.1.129-syzkaller #0 [ 287.236140][ T8978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 287.246235][ T8978] Call Trace: [ 287.249545][ T8978] [ 287.252520][ T8978] dump_stack_lvl+0x1e3/0x2cb [ 287.257247][ T8978] ? nf_tcp_handle_invalid+0x647/0x647 [ 287.262748][ T8978] ? panic+0x764/0x764 [ 287.266856][ T8978] ? __lock_acquire+0x1f80/0x1f80 [ 287.271932][ T8978] ? migrate_enable+0x1a2/0x290 [ 287.276843][ T8978] should_fail_ex+0x3a6/0x4d0 [ 287.281569][ T8978] _copy_to_user+0x2b/0x130 [ 287.286116][ T8978] bpf_prog_test_run_syscall+0x347/0x4d0 [ 287.291802][ T8978] ? sock_gen_cookie+0x60/0x60 [ 287.296608][ T8978] ? sock_gen_cookie+0x60/0x60 [ 287.301410][ T8978] bpf_prog_test_run+0x32f/0x3a0 [ 287.306379][ T8978] __sys_bpf+0x3eb/0x6c0 [ 287.310646][ T8978] ? __fget_files+0x435/0x4a0 [ 287.315361][ T8978] ? bpf_link_show_fdinfo+0x300/0x300 [ 287.320963][ T8978] ? print_irqtrace_events+0x210/0x210 [ 287.326472][ T8978] ? print_irqtrace_events+0x210/0x210 [ 287.331980][ T8978] ? syscall_enter_from_user_mode+0x2e/0x230 [ 287.338020][ T8978] ? lockdep_hardirqs_on+0x94/0x130 [ 287.343247][ T8978] __x64_sys_bpf+0x78/0x90 [ 287.347684][ T8978] do_syscall_64+0x3b/0xb0 [ 287.352140][ T8978] ? clear_bhb_loop+0x45/0xa0 [ 287.356830][ T8978] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.362728][ T8978] RIP: 0033:0x7fb074f8d169 [ 287.367148][ T8978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.386772][ T8978] RSP: 002b:00007fb075d0d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 287.395198][ T8978] RAX: ffffffffffffffda RBX: 00007fb0751a5fa0 RCX: 00007fb074f8d169 [ 287.403176][ T8978] RDX: 0000000000000048 RSI: 0000400000000340 RDI: 000000000000000a [ 287.411241][ T8978] RBP: 00007fb075d0d090 R08: 0000000000000000 R09: 0000000000000000 [ 287.419214][ T8978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.427202][ T8978] R13: 0000000000000000 R14: 00007fb0751a5fa0 R15: 00007fff879aa688 [ 287.435207][ T8978] [ 287.993398][ T8996] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 288.046466][ T8998] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.1851'. [ 288.239169][ T8996] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.299050][ T8998] netlink: 114704 bytes leftover after parsing attributes in process `syz.0.1851'. [ 288.401522][ T8998] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 291.546829][ T9028] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.1862'. [ 291.614018][ T9028] openvswitch: netlink: Flow actions attr not present in new flow. [ 296.251332][ T9086] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1886'. [ 297.036108][ T9112] delete_channel: no stack [ 297.090422][ T9112] delete_channel: no stack [ 299.851449][ T9130] FAULT_INJECTION: forcing a failure. [ 299.851449][ T9130] name failslab, interval 1, probability 0, space 0, times 0 [ 299.933878][ T9130] CPU: 0 PID: 9130 Comm: syz.1.1898 Not tainted 6.1.129-syzkaller #0 [ 299.942046][ T9130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 299.952138][ T9130] Call Trace: [ 299.955439][ T9130] [ 299.958399][ T9130] dump_stack_lvl+0x1e3/0x2cb [ 299.963126][ T9130] ? nf_tcp_handle_invalid+0x647/0x647 [ 299.968638][ T9130] ? panic+0x764/0x764 [ 299.972786][ T9130] ? __might_sleep+0xb0/0xb0 [ 299.978627][ T9130] ? netlink_insert+0x10dc/0x1540 [ 299.983673][ T9130] should_fail_ex+0x3a6/0x4d0 [ 299.988384][ T9130] should_failslab+0x5/0x20 [ 299.992904][ T9130] slab_pre_alloc_hook+0x59/0x300 [ 299.997954][ T9130] ? netlink_data_ready+0x10/0x10 [ 300.003002][ T9130] kmem_cache_alloc_node+0x52/0x310 [ 300.008227][ T9130] ? __alloc_skb+0xd3/0x2c0 [ 300.012933][ T9130] __alloc_skb+0xd3/0x2c0 [ 300.017281][ T9130] netlink_sendmsg+0x6f8/0xd60 [ 300.022068][ T9130] ? netlink_getsockopt+0x580/0x580 [ 300.027799][ T9130] ? aa_sock_msg_perm+0x91/0x150 [ 300.032756][ T9130] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 300.038054][ T9130] ? security_socket_sendmsg+0x7d/0xa0 [ 300.043526][ T9130] ? netlink_getsockopt+0x580/0x580 [ 300.048743][ T9130] ____sys_sendmsg+0x5d3/0x9a0 [ 300.053520][ T9130] ? __sys_sendmsg_sock+0x30/0x30 [ 300.058735][ T9130] __sys_sendmsg+0x2a9/0x390 [ 300.063341][ T9130] ? ____sys_sendmsg+0x9a0/0x9a0 [ 300.068571][ T9130] ? vfs_write+0x6cf/0xbc0 [ 300.073403][ T9130] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 300.079685][ T9130] ? syscall_enter_from_user_mode+0x2e/0x230 [ 300.085688][ T9130] ? lockdep_hardirqs_on+0x94/0x130 [ 300.090911][ T9130] ? syscall_enter_from_user_mode+0x2e/0x230 [ 300.096909][ T9130] do_syscall_64+0x3b/0xb0 [ 300.101361][ T9130] ? clear_bhb_loop+0x45/0xa0 [ 300.106067][ T9130] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 300.111973][ T9130] RIP: 0033:0x7fb074f8d169 [ 300.116393][ T9130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.136006][ T9130] RSP: 002b:00007fb075d0d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.144447][ T9130] RAX: ffffffffffffffda RBX: 00007fb0751a5fa0 RCX: 00007fb074f8d169 [ 300.152435][ T9130] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000006 [ 300.160426][ T9130] RBP: 00007fb075d0d090 R08: 0000000000000000 R09: 0000000000000000 [ 300.168496][ T9130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.176477][ T9130] R13: 0000000000000000 R14: 00007fb0751a5fa0 R15: 00007fff879aa688 [ 300.184468][ T9130] [ 300.321949][ T9140] netlink: 'syz.3.1904': attribute type 27 has an invalid length. [ 300.353013][ T9140] netlink: 'syz.3.1904': attribute type 10 has an invalid length. [ 300.504810][ T9145] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 300.546362][ T9145] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 300.963822][ T9157] FAULT_INJECTION: forcing a failure. [ 300.963822][ T9157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.017149][ T9157] CPU: 0 PID: 9157 Comm: syz.3.1913 Not tainted 6.1.129-syzkaller #0 [ 301.025304][ T9157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 301.035394][ T9157] Call Trace: [ 301.038709][ T9157] [ 301.041663][ T9157] dump_stack_lvl+0x1e3/0x2cb [ 301.046385][ T9157] ? nf_tcp_handle_invalid+0x647/0x647 [ 301.051884][ T9157] ? panic+0x764/0x764 [ 301.055979][ T9157] ? __lock_acquire+0x1f80/0x1f80 [ 301.061066][ T9157] should_fail_ex+0x3a6/0x4d0 [ 301.065794][ T9157] _copy_from_user+0x2b/0x170 [ 301.070512][ T9157] generic_map_update_batch+0x526/0x920 [ 301.076118][ T9157] ? rcu_read_unlock+0xa0/0xa0 [ 301.080926][ T9157] ? __fdget+0x182/0x210 [ 301.085204][ T9157] ? rcu_read_unlock+0xa0/0xa0 [ 301.090041][ T9157] bpf_map_do_batch+0x4d0/0x620 [ 301.094956][ T9157] __sys_bpf+0x658/0x6c0 [ 301.099266][ T9157] ? bpf_link_show_fdinfo+0x300/0x300 [ 301.104683][ T9157] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 301.110881][ T9157] __x64_sys_bpf+0x78/0x90 [ 301.115337][ T9157] do_syscall_64+0x3b/0xb0 [ 301.119789][ T9157] ? clear_bhb_loop+0x45/0xa0 [ 301.124499][ T9157] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 301.130421][ T9157] RIP: 0033:0x7f124d18d169 [ 301.134862][ T9157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.154497][ T9157] RSP: 002b:00007f124df6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 301.162942][ T9157] RAX: ffffffffffffffda RBX: 00007f124d3a5fa0 RCX: 00007f124d18d169 [ 301.170939][ T9157] RDX: 0000000000000038 RSI: 00004000000001c0 RDI: 000000000000001a [ 301.178934][ T9157] RBP: 00007f124df6c090 R08: 0000000000000000 R09: 0000000000000000 [ 301.186928][ T9157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.194921][ T9157] R13: 0000000000000000 R14: 00007f124d3a5fa0 R15: 00007ffc0ad96da8 [ 301.202934][ T9157] [ 301.664539][ T9174] netlink: 'syz.2.1919': attribute type 27 has an invalid length. [ 301.781330][ T9174] netlink: 'syz.2.1919': attribute type 10 has an invalid length. [ 302.193234][ T9188] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.119739][ T9216] FAULT_INJECTION: forcing a failure. [ 303.119739][ T9216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.182447][ T9216] CPU: 0 PID: 9216 Comm: syz.1.1933 Not tainted 6.1.129-syzkaller #0 [ 303.187005][ T9218] netlink: 'syz.0.1935': attribute type 27 has an invalid length. [ 303.190554][ T9216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 303.190571][ T9216] Call Trace: [ 303.190579][ T9216] [ 303.190588][ T9216] dump_stack_lvl+0x1e3/0x2cb [ 303.190629][ T9216] ? nf_tcp_handle_invalid+0x647/0x647 [ 303.190664][ T9216] ? panic+0x764/0x764 [ 303.190692][ T9216] ? __lock_acquire+0x1f80/0x1f80 [ 303.190724][ T9216] ? bpf_test_run+0x7f1/0x8b0 [ 303.190763][ T9216] should_fail_ex+0x3a6/0x4d0 [ 303.190804][ T9216] _copy_to_user+0x2b/0x130 [ 303.190835][ T9216] bpf_test_finish+0x228/0x8b0 [ 303.190874][ T9216] ? convert_skb_to___skb+0x510/0x510 [ 303.190912][ T9216] ? convert___skb_to_skb+0x41/0x630 [ 303.190960][ T9216] ? convert_skb_to___skb+0x2d3/0x510 [ 303.190994][ T9216] bpf_prog_test_run_skb+0xcfd/0x13a0 [ 303.191048][ T9216] ? cpu_online+0xb0/0xb0 [ 303.191083][ T9216] ? cpu_online+0xb0/0xb0 [ 303.191114][ T9216] bpf_prog_test_run+0x32f/0x3a0 [ 303.191142][ T9216] __sys_bpf+0x3eb/0x6c0 [ 303.191162][ T9216] ? __fget_files+0x435/0x4a0 [ 303.191190][ T9216] ? bpf_link_show_fdinfo+0x300/0x300 [ 303.191227][ T9216] ? print_irqtrace_events+0x210/0x210 [ 303.191261][ T9216] ? print_irqtrace_events+0x210/0x210 [ 303.191299][ T9216] ? syscall_enter_from_user_mode+0x2e/0x230 [ 303.191328][ T9216] ? lockdep_hardirqs_on+0x94/0x130 [ 303.191357][ T9216] __x64_sys_bpf+0x78/0x90 [ 303.191392][ T9216] do_syscall_64+0x3b/0xb0 [ 303.191424][ T9216] ? clear_bhb_loop+0x45/0xa0 [ 303.191453][ T9216] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 303.191478][ T9216] RIP: 0033:0x7fb074f8d169 [ 303.191499][ T9216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.191518][ T9216] RSP: 002b:00007fb075d0d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 303.191543][ T9216] RAX: ffffffffffffffda RBX: 00007fb0751a5fa0 RCX: 00007fb074f8d169 [ 303.191561][ T9216] RDX: 0000000000000048 RSI: 00004000000003c0 RDI: 000000000000000a [ 303.191576][ T9216] RBP: 00007fb075d0d090 R08: 0000000000000000 R09: 0000000000000000 [ 303.191591][ T9216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.191605][ T9216] R13: 0000000000000000 R14: 00007fb0751a5fa0 R15: 00007fff879aa688 [ 303.191637][ T9216] [ 303.559247][ T9218] netlink: 'syz.0.1935': attribute type 10 has an invalid length. [ 303.869010][ T9236] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 304.806844][ T9252] FAULT_INJECTION: forcing a failure. [ 304.806844][ T9252] name failslab, interval 1, probability 0, space 0, times 0 [ 304.845758][ T9252] CPU: 0 PID: 9252 Comm: syz.4.1946 Not tainted 6.1.129-syzkaller #0 [ 304.853954][ T9252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 304.864056][ T9252] Call Trace: [ 304.867364][ T9252] [ 304.870315][ T9252] dump_stack_lvl+0x1e3/0x2cb [ 304.875028][ T9252] ? nf_tcp_handle_invalid+0x647/0x647 [ 304.880521][ T9252] ? panic+0x764/0x764 [ 304.884601][ T9252] ? __might_sleep+0xb0/0xb0 [ 304.889198][ T9252] ? __lock_acquire+0x125b/0x1f80 [ 304.894248][ T9252] should_fail_ex+0x3a6/0x4d0 [ 304.899015][ T9252] should_failslab+0x5/0x20 [ 304.903557][ T9252] slab_pre_alloc_hook+0x59/0x300 [ 304.908631][ T9252] ? bpf_test_init+0xe1/0x180 [ 304.913328][ T9252] __kmem_cache_alloc_node+0x47/0x260 [ 304.918723][ T9252] ? bpf_test_init+0xe1/0x180 [ 304.923417][ T9252] __kmalloc+0xa1/0x230 [ 304.927609][ T9252] bpf_test_init+0xe1/0x180 [ 304.932152][ T9252] bpf_prog_test_run_xdp+0x414/0x1130 [ 304.937578][ T9252] ? dev_put+0x80/0x80 [ 304.941704][ T9252] ? dev_put+0x80/0x80 [ 304.945794][ T9252] bpf_prog_test_run+0x32f/0x3a0 [ 304.950750][ T9252] __sys_bpf+0x3eb/0x6c0 [ 304.955042][ T9252] ? bpf_link_show_fdinfo+0x300/0x300 [ 304.960462][ T9252] ? syscall_enter_from_user_mode+0x37/0x230 [ 304.966464][ T9252] __x64_sys_bpf+0x78/0x90 [ 304.970905][ T9252] do_syscall_64+0x3b/0xb0 [ 304.975337][ T9252] ? clear_bhb_loop+0x45/0xa0 [ 304.980046][ T9252] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 304.985956][ T9252] RIP: 0033:0x7fa12638d169 [ 304.990379][ T9252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.010078][ T9252] RSP: 002b:00007fa12719f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 305.018499][ T9252] RAX: ffffffffffffffda RBX: 00007fa1265a5fa0 RCX: 00007fa12638d169 [ 305.026475][ T9252] RDX: 0000000000000048 RSI: 0000400000000600 RDI: 000000000000000a [ 305.034448][ T9252] RBP: 00007fa12719f090 R08: 0000000000000000 R09: 0000000000000000 [ 305.042421][ T9252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.050396][ T9252] R13: 0000000000000000 R14: 00007fa1265a5fa0 R15: 00007fff7ea8f5a8 [ 305.058385][ T9252] [ 308.168181][ T9312] netlink: 'syz.3.1970': attribute type 4 has an invalid length. [ 310.449372][ T9358] device veth0_macvtap entered promiscuous mode [ 310.526074][ T9361] netlink: 'syz.3.1987': attribute type 4 has an invalid length. [ 310.644112][ T9363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1989'. [ 311.121188][ T9376] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1994'. [ 312.494854][ T9396] netlink: 'syz.4.2000': attribute type 27 has an invalid length. [ 312.668082][ T9396] netlink: 'syz.4.2000': attribute type 10 has an invalid length. [ 313.048187][ T9405] netlink: 'syz.2.2002': attribute type 7 has an invalid length. [ 313.098154][ T9405] netlink: 'syz.2.2002': attribute type 6 has an invalid length. [ 314.902620][ T9444] netlink: 'syz.1.2017': attribute type 27 has an invalid length. [ 314.948841][ T9446] netlink: 'syz.1.2017': attribute type 10 has an invalid length. [ 315.532284][ T9457] netlink: 'syz.2.2022': attribute type 10 has an invalid length. [ 315.564376][ T9457] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2022'. [ 315.600434][ T9457] device bond0 entered promiscuous mode [ 315.626809][ T9457] device bond_slave_0 entered promiscuous mode [ 315.648680][ T9457] device bond_slave_1 entered promiscuous mode [ 315.667445][ T9457] device wlan1 entered promiscuous mode [ 315.715570][ T9457] bridge0: port 3(bond0) entered blocking state [ 315.730000][ T9457] bridge0: port 3(bond0) entered disabled state [ 315.791944][ T9457] bridge0: port 3(bond0) entered blocking state [ 315.799674][ T9457] bridge0: port 3(bond0) entered forwarding state [ 315.833498][ T9461] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2022'. [ 316.320303][ T9483] netlink: 'syz.0.2035': attribute type 27 has an invalid length. [ 316.357505][ T9483] netlink: 'syz.0.2035': attribute type 10 has an invalid length. [ 317.134133][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.140541][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.709891][ T9515] FAULT_INJECTION: forcing a failure. [ 317.709891][ T9515] name failslab, interval 1, probability 0, space 0, times 0 [ 317.745364][ T9515] CPU: 0 PID: 9515 Comm: syz.2.2049 Not tainted 6.1.129-syzkaller #0 [ 317.753522][ T9515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 317.763709][ T9515] Call Trace: [ 317.767019][ T9515] [ 317.769983][ T9515] dump_stack_lvl+0x1e3/0x2cb [ 317.774723][ T9515] ? nf_tcp_handle_invalid+0x647/0x647 [ 317.780331][ T9515] ? panic+0x764/0x764 [ 317.784902][ T9515] ? __might_sleep+0xb0/0xb0 [ 317.789658][ T9515] should_fail_ex+0x3a6/0x4d0 [ 317.794412][ T9515] should_failslab+0x5/0x20 [ 317.798997][ T9515] slab_pre_alloc_hook+0x59/0x300 [ 317.804062][ T9515] ? __might_fault+0xa1/0x110 [ 317.808781][ T9515] ? __might_sleep+0xb0/0xb0 [ 317.813402][ T9515] ? sk_prot_alloc+0xe0/0x200 [ 317.818114][ T9515] __kmem_cache_alloc_node+0x47/0x260 [ 317.823578][ T9515] ? sk_prot_alloc+0xe0/0x200 [ 317.828312][ T9515] __kmalloc+0xa1/0x230 [ 317.832511][ T9515] ? __might_fault+0xa1/0x110 [ 317.837236][ T9515] sk_prot_alloc+0xe0/0x200 [ 317.841828][ T9515] ? sk_alloc+0x23/0x350 [ 317.846133][ T9515] sk_alloc+0x36/0x350 [ 317.850254][ T9515] bpf_prog_test_run_skb+0x384/0x13a0 [ 317.855704][ T9515] ? cpu_online+0xb0/0xb0 [ 317.860089][ T9515] ? cpu_online+0xb0/0xb0 [ 317.864473][ T9515] bpf_prog_test_run+0x32f/0x3a0 [ 317.869467][ T9515] __sys_bpf+0x3eb/0x6c0 [ 317.873746][ T9515] ? __fget_files+0x435/0x4a0 [ 317.878467][ T9515] ? bpf_link_show_fdinfo+0x300/0x300 [ 317.883914][ T9515] ? print_irqtrace_events+0x210/0x210 [ 317.889439][ T9515] ? print_irqtrace_events+0x210/0x210 [ 317.894987][ T9515] ? syscall_enter_from_user_mode+0x2e/0x230 [ 317.901016][ T9515] ? syscall_enter_from_user_mode+0x2e/0x230 [ 317.907048][ T9515] ? lockdep_hardirqs_on+0x94/0x130 [ 317.912327][ T9515] __x64_sys_bpf+0x78/0x90 [ 317.916797][ T9515] do_syscall_64+0x3b/0xb0 [ 317.921265][ T9515] ? clear_bhb_loop+0x45/0xa0 [ 317.925988][ T9515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.931929][ T9515] RIP: 0033:0x7fe6e1b8d169 [ 317.936470][ T9515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.956209][ T9515] RSP: 002b:00007fe6e29d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 317.964706][ T9515] RAX: ffffffffffffffda RBX: 00007fe6e1da5fa0 RCX: 00007fe6e1b8d169 [ 317.972841][ T9515] RDX: 0000000000000050 RSI: 0000400000000180 RDI: 000000000000000a [ 317.980850][ T9515] RBP: 00007fe6e29d7090 R08: 0000000000000000 R09: 0000000000000000 [ 317.988890][ T9515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.996894][ T9515] R13: 0000000000000000 R14: 00007fe6e1da5fa0 R15: 00007ffeb6178d08 [ 318.004932][ T9515] [ 318.048587][ T9520] netlink: 'syz.3.2050': attribute type 27 has an invalid length. [ 318.079434][ T9520] netlink: 'syz.3.2050': attribute type 10 has an invalid length. [ 320.158161][ T9561] netlink: 'syz.4.2067': attribute type 27 has an invalid length. [ 320.228982][ T9561] netlink: 'syz.4.2067': attribute type 10 has an invalid length. [ 320.254861][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 320.320336][ T9569] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 320.598663][ T9580] netlink: 'syz.0.2073': attribute type 7 has an invalid length. [ 320.702463][ T9580] netlink: 'syz.0.2073': attribute type 6 has an invalid length. [ 321.128953][ T9594] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2078'. [ 321.941454][ T9605] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 321.989056][ T9605] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 322.218744][ T9613] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2089'. [ 322.581629][ T9624] netlink: 'syz.1.2092': attribute type 3 has an invalid length. [ 322.648004][ T9624] netlink: 'syz.1.2092': attribute type 4 has an invalid length. [ 322.658768][ T9624] netlink: 9067 bytes leftover after parsing attributes in process `syz.1.2092'. [ 323.710132][ T9645] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 323.834476][ T9645] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 325.600564][ T9683] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 325.668723][ T9683] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.523195][ T9710] netlink: 'syz.2.2124': attribute type 10 has an invalid length. [ 326.544517][ T9710] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2124'. [ 326.555456][ T9710] bridge0: port 4(macvlan1) entered blocking state [ 326.562528][ T9710] bridge0: port 4(macvlan1) entered disabled state [ 326.576313][ T9710] device macvlan1 entered promiscuous mode [ 326.585516][ T9710] bridge0: port 4(macvlan1) entered blocking state [ 326.592215][ T9710] bridge0: port 4(macvlan1) entered forwarding state [ 326.869708][ T9719] netlink: 'syz.1.2125': attribute type 27 has an invalid length. [ 326.887785][ T9719] netlink: 'syz.1.2125': attribute type 10 has an invalid length. [ 327.567490][ T9733] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 327.645961][ T9733] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.654379][ T9746] netlink: 'syz.3.2134': attribute type 7 has an invalid length. [ 328.698443][ T9746] netlink: 'syz.3.2134': attribute type 6 has an invalid length. [ 328.764063][ T9759] netlink: 'syz.2.2138': attribute type 2 has an invalid length. [ 328.924612][ T9756] netlink: 'syz.0.2139': attribute type 1 has an invalid length. [ 328.934882][ T9763] netlink: 'syz.1.2140': attribute type 27 has an invalid length. [ 328.971279][ T9756] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.2139'. [ 329.114759][ T9759] device 0 entered promiscuous mode [ 329.150596][ T9766] netlink: 'syz.1.2140': attribute type 10 has an invalid length. [ 329.402861][ T9771] netlink: 'syz.3.2141': attribute type 4 has an invalid length. [ 329.731393][ T9775] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.333437][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 331.440766][ T9817] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.459750][ T9818] netlink: 35840 bytes leftover after parsing attributes in process `syz.4.2159'. [ 333.164362][ T9851] FAULT_INJECTION: forcing a failure. [ 333.164362][ T9851] name failslab, interval 1, probability 0, space 0, times 0 [ 333.187980][ T9851] CPU: 0 PID: 9851 Comm: syz.4.2170 Not tainted 6.1.129-syzkaller #0 [ 333.196212][ T9851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 333.206304][ T9851] Call Trace: [ 333.209621][ T9851] [ 333.212598][ T9851] dump_stack_lvl+0x1e3/0x2cb [ 333.217323][ T9851] ? nf_tcp_handle_invalid+0x647/0x647 [ 333.222826][ T9851] ? panic+0x764/0x764 [ 333.226941][ T9851] ? __might_sleep+0xb0/0xb0 [ 333.231582][ T9851] should_fail_ex+0x3a6/0x4d0 [ 333.236314][ T9851] should_failslab+0x5/0x20 [ 333.240852][ T9851] slab_pre_alloc_hook+0x59/0x300 [ 333.245937][ T9851] ? aa_label_sk_perm+0x4f7/0x6e0 [ 333.250999][ T9851] kmem_cache_alloc_node+0x52/0x310 [ 333.256250][ T9851] ? __alloc_skb+0xd3/0x2c0 [ 333.260778][ T9851] ? aa_sk_perm+0xa60/0xa60 [ 333.265322][ T9851] __alloc_skb+0xd3/0x2c0 [ 333.269686][ T9851] pfkey_sendmsg+0x183/0xfd0 [ 333.274315][ T9851] ? __might_sleep+0xb0/0xb0 [ 333.278950][ T9851] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 333.284985][ T9851] ? pfkey_release+0x330/0x330 [ 333.289799][ T9851] ? aa_sk_perm+0x92d/0xa60 [ 333.294347][ T9851] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 333.300589][ T9851] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 333.307356][ T9851] ? aa_af_perm+0x350/0x350 [ 333.311914][ T9851] ? tomoyo_socket_sendmsg_permission+0x129/0x410 [ 333.318368][ T9851] ? aa_sock_msg_perm+0x80/0x150 [ 333.323345][ T9851] ? aa_sk_perm+0x6/0xa60 [ 333.327715][ T9851] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 333.333040][ T9851] ? security_socket_sendmsg+0x7d/0xa0 [ 333.338544][ T9851] ? pfkey_release+0x330/0x330 [ 333.343351][ T9851] ____sys_sendmsg+0x5d3/0x9a0 [ 333.348159][ T9851] ? __sys_sendmsg_sock+0x30/0x30 [ 333.353325][ T9851] __sys_sendmsg+0x2a9/0x390 [ 333.357949][ T9851] ? ____sys_sendmsg+0x9a0/0x9a0 [ 333.363005][ T9851] ? seqcount_lockdep_reader_access+0x1bd/0x220 [ 333.369412][ T9851] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 333.375622][ T9851] ? lockdep_hardirqs_on+0x94/0x130 [ 333.380883][ T9851] ? syscall_enter_from_user_mode+0x37/0x230 [ 333.386908][ T9851] ? syscall_enter_from_user_mode+0x2e/0x230 [ 333.392934][ T9851] do_syscall_64+0x3b/0xb0 [ 333.397492][ T9851] ? clear_bhb_loop+0x45/0xa0 [ 333.402247][ T9851] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 333.408178][ T9851] RIP: 0033:0x7fa12638d169 [ 333.412624][ T9851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.432307][ T9851] RSP: 002b:00007fa12719f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.440763][ T9851] RAX: ffffffffffffffda RBX: 00007fa1265a5fa0 RCX: 00007fa12638d169 [ 333.448821][ T9851] RDX: 0000000000000000 RSI: 0000400000003780 RDI: 0000000000000006 [ 333.456918][ T9851] RBP: 00007fa12719f090 R08: 0000000000000000 R09: 0000000000000000 [ 333.464918][ T9851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.472927][ T9851] R13: 0000000000000000 R14: 00007fa1265a5fa0 R15: 00007fff7ea8f5a8 [ 333.480952][ T9851] [ 335.138837][ T9878] validate_nla: 2 callbacks suppressed [ 335.138860][ T9878] netlink: 'syz.3.2179': attribute type 1 has an invalid length. [ 335.153902][ T9878] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.2179'. [ 336.936424][ T9885] netlink: 'syz.4.2183': attribute type 10 has an invalid length. [ 337.050393][ T9885] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.133243][ T9885] bond0: (slave team0): Enslaving as an active interface with an up link [ 337.143501][ T9888] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 337.476499][ T9900] netlink: 'syz.2.2188': attribute type 27 has an invalid length. [ 337.519979][ T9906] netlink: 'syz.1.2186': attribute type 4 has an invalid length. [ 337.571279][ T9900] netlink: 'syz.2.2188': attribute type 10 has an invalid length. [ 338.827529][ T9924] netlink: 'syz.2.2196': attribute type 1 has an invalid length. [ 338.836762][ T9924] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.2196'. [ 338.965942][ T9933] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 338.985352][ T9935] netlink: 'syz.1.2202': attribute type 29 has an invalid length. [ 339.023027][ T9937] netlink: 154788 bytes leftover after parsing attributes in process `syz.4.2203'. [ 339.037041][ T9933] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 339.081305][ T9937] openvswitch: netlink: Message has 48126 unknown bytes. [ 339.097645][ T9935] netlink: 'syz.1.2202': attribute type 29 has an invalid length. [ 339.109176][ T9941] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2204'. [ 339.121226][ T9944] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.2202'. [ 339.178041][ T9939] netlink: 'syz.1.2202': attribute type 29 has an invalid length. [ 339.297688][ T9944] openvswitch: netlink: Message has 48126 unknown bytes. [ 339.569321][ T9953] netlink: 'syz.4.2208': attribute type 10 has an invalid length. [ 341.163184][ T9976] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 341.524763][ T9988] netlink: 'syz.3.2221': attribute type 10 has an invalid length. [ 341.614551][ T9989] netlink: 'syz.4.2222': attribute type 4 has an invalid length. [ 341.777457][ T9995] netlink: 'syz.2.2224': attribute type 1 has an invalid length. [ 342.471105][T10012] netlink: 'syz.0.2239': attribute type 4 has an invalid length. [ 344.364712][T10060] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 344.392145][T10060] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.415274][T10062] netlink: 'syz.3.2245': attribute type 4 has an invalid length. [ 346.821596][T10082] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2251'. [ 346.846183][T10085] netlink: 'syz.2.2251': attribute type 10 has an invalid length. [ 346.855334][T10085] bridge0: port 4(macvlan1) entered disabled state [ 346.862185][T10085] bridge0: port 3(bond0) entered disabled state [ 346.868865][T10085] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.876156][T10085] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.899555][T10085] bridge0: port 4(macvlan1) entered blocking state [ 346.906193][T10085] bridge0: port 4(macvlan1) entered forwarding state [ 346.913189][T10085] bridge0: port 3(bond0) entered blocking state [ 346.919594][T10085] bridge0: port 3(bond0) entered forwarding state [ 346.926225][T10085] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.933425][T10085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.941171][T10085] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.948421][T10085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.126069][T10085] bridge0: port 4(macvlan1) entered disabled state [ 347.132932][T10085] bridge0: port 3(bond0) entered disabled state [ 347.139475][T10085] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.146656][T10085] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.192748][T10098] netlink: 'syz.1.2264': attribute type 4 has an invalid length. [ 347.456103][T10111] netlink: 'syz.2.2257': attribute type 27 has an invalid length. [ 347.494091][T10111] netlink: 'syz.2.2257': attribute type 10 has an invalid length. [ 347.672155][T10117] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 347.752780][T10117] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.806679][T10123] netlink: 'syz.0.2270': attribute type 4 has an invalid length. [ 347.995622][T10129] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2263'. [ 348.581863][T10139] FAULT_INJECTION: forcing a failure. [ 348.581863][T10139] name failslab, interval 1, probability 0, space 0, times 0 [ 348.669410][T10139] CPU: 1 PID: 10139 Comm: syz.2.2268 Not tainted 6.1.129-syzkaller #0 [ 348.677713][T10139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 348.687994][T10139] Call Trace: [ 348.691381][T10139] [ 348.694341][T10139] dump_stack_lvl+0x1e3/0x2cb [ 348.699064][T10139] ? nf_tcp_handle_invalid+0x647/0x647 [ 348.704545][T10139] ? panic+0x764/0x764 [ 348.708628][T10139] ? __might_sleep+0xb0/0xb0 [ 348.713229][T10139] ? __lock_acquire+0x125b/0x1f80 [ 348.718277][T10139] should_fail_ex+0x3a6/0x4d0 [ 348.722979][T10139] should_failslab+0x5/0x20 [ 348.727516][T10139] slab_pre_alloc_hook+0x59/0x300 [ 348.732588][T10139] ? bpf_test_init+0xe1/0x180 [ 348.737296][T10139] __kmem_cache_alloc_node+0x47/0x260 [ 348.742686][T10139] ? bpf_test_init+0xe1/0x180 [ 348.747374][T10139] __kmalloc+0xa1/0x230 [ 348.751546][T10139] bpf_test_init+0xe1/0x180 [ 348.756081][T10139] bpf_prog_test_run_xdp+0x414/0x1130 [ 348.761670][T10139] ? dev_put+0x80/0x80 [ 348.765764][T10139] ? dev_put+0x80/0x80 [ 348.769858][T10139] bpf_prog_test_run+0x32f/0x3a0 [ 348.774808][T10139] __sys_bpf+0x3eb/0x6c0 [ 348.779150][T10139] ? __fget_files+0x435/0x4a0 [ 348.783942][T10139] ? bpf_link_show_fdinfo+0x300/0x300 [ 348.789348][T10139] ? perf_trace_preemptirq_template+0xf4/0x3d0 [ 348.795531][T10139] ? print_irqtrace_events+0x210/0x210 [ 348.801022][T10139] ? print_irqtrace_events+0x210/0x210 [ 348.806507][T10139] ? syscall_enter_from_user_mode+0x2e/0x230 [ 348.812499][T10139] ? lockdep_hardirqs_on+0x94/0x130 [ 348.817717][T10139] __x64_sys_bpf+0x78/0x90 [ 348.822152][T10139] do_syscall_64+0x3b/0xb0 [ 348.826581][T10139] ? clear_bhb_loop+0x45/0xa0 [ 348.831285][T10139] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 348.837188][T10139] RIP: 0033:0x7fe6e1b8d169 [ 348.841614][T10139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.861721][T10139] RSP: 002b:00007fe6e29d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 348.870499][T10139] RAX: ffffffffffffffda RBX: 00007fe6e1da5fa0 RCX: 00007fe6e1b8d169 [ 348.878570][T10139] RDX: 0000000000000010 RSI: 0000400000000740 RDI: 000000000000000a [ 348.886667][T10139] RBP: 00007fe6e29d7090 R08: 0000000000000000 R09: 0000000000000000 [ 348.894735][T10139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.902727][T10139] R13: 0000000000000000 R14: 00007fe6e1da5fa0 R15: 00007ffeb6178d08 [ 348.910722][T10139] [ 349.276456][T10151] netlink: 'syz.2.2274': attribute type 21 has an invalid length. [ 349.301096][T10151] IPv6: NLM_F_CREATE should be specified when creating new route [ 349.335989][T10151] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 349.343401][T10151] IPv6: NLM_F_CREATE should be set when creating new route [ 349.350787][T10151] IPv6: NLM_F_CREATE should be set when creating new route [ 349.358168][T10151] IPv6: NLM_F_CREATE should be set when creating new route [ 349.458526][T10161] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 349.509082][T10161] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.754498][T10172] netlink: 'syz.2.2279': attribute type 4 has an invalid length. [ 350.065232][T10180] device wg2 entered promiscuous mode [ 350.183768][T10187] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2284'. [ 351.225338][T10203] netlink: 'syz.2.2292': attribute type 5 has an invalid length. [ 351.281806][T10203] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2292'. [ 351.663483][T10218] netlink: 'syz.0.2297': attribute type 4 has an invalid length. [ 352.595987][T10234] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2300'. [ 353.466849][T10245] FAULT_INJECTION: forcing a failure. [ 353.466849][T10245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.533157][T10245] CPU: 0 PID: 10245 Comm: syz.0.2305 Not tainted 6.1.129-syzkaller #0 [ 353.541383][T10245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 353.551554][T10245] Call Trace: [ 353.554881][T10245] [ 353.557835][T10245] dump_stack_lvl+0x1e3/0x2cb [ 353.562558][T10245] ? nf_tcp_handle_invalid+0x647/0x647 [ 353.568074][T10245] ? panic+0x764/0x764 [ 353.572191][T10245] ? snprintf+0xd6/0x120 [ 353.576499][T10245] should_fail_ex+0x3a6/0x4d0 [ 353.581239][T10245] _copy_to_user+0x2b/0x130 [ 353.585788][T10245] simple_read_from_buffer+0xc6/0x150 [ 353.591209][T10245] proc_fail_nth_read+0x1a3/0x210 [ 353.596292][T10245] ? proc_fault_inject_write+0x390/0x390 [ 353.601974][T10245] ? fsnotify_perm+0x439/0x590 [ 353.606777][T10245] ? proc_fault_inject_write+0x390/0x390 [ 353.612452][T10245] vfs_read+0x2ed/0xbf0 [ 353.616641][T10245] ? __fdget_pos+0x2ba/0x360 [ 353.621269][T10245] ? kernel_read+0x1f0/0x1f0 [ 353.625893][T10245] ? __fget_files+0x28/0x4a0 [ 353.630516][T10245] ? __fget_files+0x435/0x4a0 [ 353.635239][T10245] ? __fdget_pos+0x2ba/0x360 [ 353.639857][T10245] ? ksys_read+0x77/0x2c0 [ 353.644220][T10245] ksys_read+0x19c/0x2c0 [ 353.648501][T10245] ? print_irqtrace_events+0x210/0x210 [ 353.654005][T10245] ? vfs_write+0xbc0/0xbc0 [ 353.658454][T10245] ? syscall_enter_from_user_mode+0x2e/0x230 [ 353.664576][T10245] ? lockdep_hardirqs_on+0x94/0x130 [ 353.669824][T10245] ? syscall_enter_from_user_mode+0x2e/0x230 [ 353.675846][T10245] do_syscall_64+0x3b/0xb0 [ 353.680306][T10245] ? clear_bhb_loop+0x45/0xa0 [ 353.685031][T10245] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 353.690964][T10245] RIP: 0033:0x7f1f4418bb7c [ 353.695508][T10245] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 353.715156][T10245] RSP: 002b:00007f1f45000030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 353.723618][T10245] RAX: ffffffffffffffda RBX: 00007f1f443a5fa0 RCX: 00007f1f4418bb7c [ 353.731628][T10245] RDX: 000000000000000f RSI: 00007f1f450000a0 RDI: 0000000000000004 [ 353.739638][T10245] RBP: 00007f1f45000090 R08: 0000000000000000 R09: 0000000000000000 [ 353.747678][T10245] R10: 0000400000000200 R11: 0000000000000246 R12: 0000000000000001 [ 353.755696][T10245] R13: 0000000000000000 R14: 00007f1f443a5fa0 R15: 00007fffa71a5028 [ 353.763726][T10245] [ 353.847964][T10257] netlink: 'syz.1.2309': attribute type 4 has an invalid length. [ 354.857531][T10285] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.2318'. [ 355.004862][T10288] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.2318'. [ 358.530117][T10367] netlink: 'syz.1.2353': attribute type 27 has an invalid length. [ 358.651446][T10367] netlink: 'syz.1.2353': attribute type 10 has an invalid length. [ 358.664259][T10366] raw_sendmsg: syz.3.2351 forgot to set AF_INET. Fix it! [ 360.083624][T10400] netlink: 'syz.4.2365': attribute type 21 has an invalid length. [ 360.150201][T10400] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2365'. [ 360.196130][T10400] netlink: 'syz.4.2365': attribute type 1 has an invalid length. [ 360.671638][T10412] netlink: 'syz.4.2369': attribute type 27 has an invalid length. [ 360.757519][T10412] netlink: 'syz.4.2369': attribute type 10 has an invalid length. [ 361.054177][T10423] netlink: 'syz.1.2372': attribute type 4 has an invalid length. [ 361.662365][T10436] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 362.572068][T10454] netlink: 'syz.3.2384': attribute type 27 has an invalid length. [ 362.629647][T10454] netlink: 'syz.3.2384': attribute type 10 has an invalid length. [ 362.964079][T10465] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2389'. [ 363.218988][T10472] FAULT_INJECTION: forcing a failure. [ 363.218988][T10472] name failslab, interval 1, probability 0, space 0, times 0 [ 363.264884][T10472] CPU: 0 PID: 10472 Comm: syz.3.2391 Not tainted 6.1.129-syzkaller #0 [ 363.273109][T10472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 363.283635][T10472] Call Trace: [ 363.286943][T10472] [ 363.289897][T10472] dump_stack_lvl+0x1e3/0x2cb [ 363.294611][T10472] ? sctp_sendmsg+0x1cfc/0x33b0 [ 363.299496][T10472] ? nf_tcp_handle_invalid+0x647/0x647 [ 363.305010][T10472] ? panic+0x764/0x764 [ 363.309129][T10472] should_fail_ex+0x3a6/0x4d0 [ 363.313939][T10472] should_failslab+0x5/0x20 [ 363.318469][T10472] slab_pre_alloc_hook+0x59/0x300 [ 363.323530][T10472] ? sctp_add_bind_addr+0x85/0x3a0 [ 363.328679][T10472] __kmem_cache_alloc_node+0x47/0x260 [ 363.334103][T10472] ? sctp_add_bind_addr+0x85/0x3a0 [ 363.339254][T10472] kmalloc_trace+0x26/0xe0 [ 363.343710][T10472] sctp_add_bind_addr+0x85/0x3a0 [ 363.348680][T10472] sctp_copy_local_addr_list+0x30d/0x4f0 [ 363.354354][T10472] ? sctp_copy_local_addr_list+0xa7/0x4f0 [ 363.360105][T10472] ? sctp_do_8_2_transport_strike+0x860/0x860 [ 363.366200][T10472] ? sctp_v4_is_any+0x31/0x50 [ 363.370903][T10472] ? sctp_copy_one_addr+0x8e/0x340 [ 363.376027][T10472] sctp_bind_addr_copy+0xa9/0x3b0 [ 363.381065][T10472] ? sctp_assoc_set_bind_addr_from_ep+0x71/0x190 [ 363.387505][T10472] sctp_connect_new_asoc+0x2ea/0x6b0 [ 363.392902][T10472] ? __sctp_connect+0xe10/0xe10 [ 363.397858][T10472] ? sctp_sendmsg+0xb11/0x33b0 [ 363.402640][T10472] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 363.408201][T10472] ? security_sctp_bind_connect+0x86/0xb0 [ 363.413937][T10472] sctp_sendmsg+0x1cfc/0x33b0 [ 363.418633][T10472] ? aa_sk_perm+0x8e1/0xa60 [ 363.423149][T10472] ? sctp_getsockopt+0x7f0/0x7f0 [ 363.428140][T10472] ? aa_af_perm+0x350/0x350 [ 363.432661][T10472] ? __import_iovec+0x316/0x4c0 [ 363.437522][T10472] ? inet_sendmsg+0xfc/0x310 [ 363.442123][T10472] ? inet_send_prepare+0x250/0x250 [ 363.447244][T10472] ____sys_sendmsg+0x5d3/0x9a0 [ 363.452025][T10472] ? __sys_sendmsg_sock+0x30/0x30 [ 363.457073][T10472] __sys_sendmsg+0x2a9/0x390 [ 363.461672][T10472] ? ____sys_sendmsg+0x9a0/0x9a0 [ 363.466613][T10472] ? vfs_write+0x6cf/0xbc0 [ 363.471063][T10472] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 363.477091][T10472] ? syscall_enter_from_user_mode+0x2e/0x230 [ 363.483079][T10472] ? lockdep_hardirqs_on+0x94/0x130 [ 363.488294][T10472] ? syscall_enter_from_user_mode+0x2e/0x230 [ 363.494287][T10472] do_syscall_64+0x3b/0xb0 [ 363.498743][T10472] ? clear_bhb_loop+0x45/0xa0 [ 363.503430][T10472] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.509330][T10472] RIP: 0033:0x7f124d18d169 [ 363.513751][T10472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.533483][T10472] RSP: 002b:00007f124df6c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.541915][T10472] RAX: ffffffffffffffda RBX: 00007f124d3a5fa0 RCX: 00007f124d18d169 [ 363.549894][T10472] RDX: 000000000000c8d4 RSI: 0000400000000800 RDI: 0000000000000003 [ 363.557895][T10472] RBP: 00007f124df6c090 R08: 0000000000000000 R09: 0000000000000000 [ 363.565866][T10472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 363.573836][T10472] R13: 0000000000000000 R14: 00007f124d3a5fa0 R15: 00007ffc0ad96da8 [ 363.581825][T10472] [ 363.611397][T10467] netlink: 'syz.1.2390': attribute type 4 has an invalid length. [ 364.075584][T10484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 364.244221][ T4272] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 364.377020][T10495] netlink: 'syz.2.2399': attribute type 27 has an invalid length. [ 364.432285][T10495] netlink: 'syz.2.2399': attribute type 10 has an invalid length. [ 365.086911][T10511] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 365.094271][T10511] IPv6: NLM_F_CREATE should be set when creating new route [ 365.101572][T10511] IPv6: NLM_F_CREATE should be set when creating new route [ 365.567888][T10519] FAULT_INJECTION: forcing a failure. [ 365.567888][T10519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.568997][T10519] [ 365.569004][T10519] ====================================================== [ 365.569014][T10519] WARNING: possible circular locking dependency detected [ 365.569021][T10519] 6.1.129-syzkaller #0 Not tainted [ 365.569031][T10519] ------------------------------------------------------ [ 365.569037][T10519] syz.3.2407/10519 is trying to acquire lock: [ 365.569046][T10519] ffffffff8d322840 (console_owner){-...}-{0:0}, at: console_emit_next_record+0x74f/0xc30 [ 365.569099][T10519] [ 365.569099][T10519] but task is already holding lock: [ 365.569104][T10519] ffff8880b8e3a9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 365.569149][T10519] [ 365.569149][T10519] which lock already depends on the new lock. [ 365.569149][T10519] [ 365.569154][T10519] [ 365.569154][T10519] the existing dependency chain (in reverse order) is: [ 365.569160][T10519] [ 365.569160][T10519] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 365.569182][T10519] lock_acquire+0x1f8/0x5a0 [ 365.569208][T10519] _raw_spin_lock_nested+0x2d/0x40 [ 365.569227][T10519] raw_spin_rq_lock_nested+0x26/0x140 [ 365.569248][T10519] task_fork_fair+0x5d/0x350 [ 365.569273][T10519] sched_cgroup_fork+0x374/0x400 [ 365.569296][T10519] copy_process+0x2482/0x40a0 [ 365.569313][T10519] kernel_clone+0x222/0x920 [ 365.569328][T10519] user_mode_thread+0x140/0x1b0 [ 365.569345][T10519] rest_init+0x23/0x300 [ 365.569364][T10519] start_kernel+0x0/0x53f [ 365.569387][T10519] start_kernel+0x496/0x53f [ 365.569408][T10519] secondary_startup_64_no_verify+0xcf/0xdb [ 365.569432][T10519] [ 365.569432][T10519] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 365.569455][T10519] lock_acquire+0x1f8/0x5a0 [ 365.569480][T10519] _raw_spin_lock_irqsave+0xd1/0x120 [ 365.569495][T10519] try_to_wake_up+0xad/0x1250 [ 365.569518][T10519] __wake_up_common+0x2a0/0x4e0 [ 365.569544][T10519] __wake_up+0x11a/0x1c0 [ 365.569567][T10519] tty_port_default_wakeup+0xa2/0xf0 [ 365.569586][T10519] serial8250_tx_chars+0x60d/0x800 [ 365.569607][T10519] serial8250_handle_irq+0x4ff/0x6a0 [ 365.569628][T10519] serial8250_default_handle_irq+0xc8/0x1e0 [ 365.569651][T10519] serial8250_interrupt+0xa1/0x1e0 [ 365.569670][T10519] __handle_irq_event_percpu+0x2a8/0xb20 [ 365.569690][T10519] handle_irq_event+0x85/0x1e0 [ 365.569709][T10519] handle_edge_irq+0x245/0xbf0 [ 365.569733][T10519] __common_interrupt+0xd7/0x1f0 [ 365.569757][T10519] common_interrupt+0xae/0xd0 [ 365.569773][T10519] asm_common_interrupt+0x22/0x40 [ 365.569792][T10519] memset_erms+0xb/0x10 [ 365.569808][T10519] unwind_next_frame+0xde7/0x2220 [ 365.569826][T10519] arch_stack_walk+0x10d/0x140 [ 365.569845][T10519] stack_trace_save+0x113/0x1c0 [ 365.569869][T10519] kasan_set_track+0x4b/0x70 [ 365.569890][T10519] __kasan_slab_alloc+0x65/0x70 [ 365.569908][T10519] slab_post_alloc_hook+0x52/0x3a0 [ 365.569930][T10519] kmem_cache_alloc+0x10c/0x2d0 [ 365.569952][T10519] anon_vma_clone+0x94/0x4d0 [ 365.569974][T10519] anon_vma_fork+0x83/0x580 [ 365.569995][T10519] copy_mm+0xc83/0x1990 [ 365.570012][T10519] copy_process+0x19fb/0x40a0 [ 365.570028][T10519] kernel_clone+0x222/0x920 [ 365.570044][T10519] __x64_sys_clone+0x242/0x2c0 [ 365.570061][T10519] do_syscall_64+0x3b/0xb0 [ 365.570086][T10519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 365.570105][T10519] [ 365.570105][T10519] -> #2 (&tty->write_wait){-...}-{2:2}: [ 365.570130][T10519] lock_acquire+0x1f8/0x5a0 [ 365.570155][T10519] _raw_spin_lock_irqsave+0xd1/0x120 [ 365.570171][T10519] __wake_up+0xfd/0x1c0 [ 365.570195][T10519] tty_port_default_wakeup+0xa2/0xf0 [ 365.570213][T10519] serial8250_tx_chars+0x60d/0x800 [ 365.570233][T10519] serial8250_handle_irq+0x4ff/0x6a0 [ 365.570254][T10519] serial8250_default_handle_irq+0xc8/0x1e0 [ 365.570278][T10519] serial8250_interrupt+0xa1/0x1e0 [ 365.570297][T10519] __handle_irq_event_percpu+0x2a8/0xb20 [ 365.570318][T10519] handle_irq_event+0x85/0x1e0 [ 365.570337][T10519] handle_edge_irq+0x245/0xbf0 [ 365.570361][T10519] __common_interrupt+0xd7/0x1f0 [ 365.570384][T10519] common_interrupt+0xae/0xd0 [ 365.570399][T10519] asm_common_interrupt+0x22/0x40 [ 365.570418][T10519] acpi_idle_do_entry+0x10f/0x340 [ 365.570433][T10519] acpi_idle_enter+0x352/0x4f0 [ 365.570447][T10519] cpuidle_enter_state+0x516/0xf80 [ 365.570462][T10519] cpuidle_enter+0x59/0x90 [ 365.570476][T10519] do_idle+0x3ce/0x680 [ 365.570501][T10519] cpu_startup_entry+0x3d/0x60 [ 365.570527][T10519] rest_init+0x2da/0x300 [ 365.570546][T10519] start_kernel+0x0/0x53f [ 365.570568][T10519] start_kernel+0x496/0x53f [ 365.570590][T10519] secondary_startup_64_no_verify+0xcf/0xdb [ 365.570612][T10519] [ 365.570612][T10519] -> #1 (&port_lock_key){-...}-{2:2}: [ 365.570636][T10519] lock_acquire+0x1f8/0x5a0 [ 365.570661][T10519] _raw_spin_lock_irqsave+0xd1/0x120 [ 365.570676][T10519] serial8250_console_write+0x19f/0x1a30 [ 365.570698][T10519] console_emit_next_record+0x86d/0xc30 [ 365.570716][T10519] console_unlock+0x278/0x7c0 [ 365.570730][T10519] vprintk_emit+0x523/0x740 [ 365.570744][T10519] _printk+0xd1/0x111 [ 365.570760][T10519] register_console+0x6b9/0x9a0 [ 365.570775][T10519] univ8250_console_init+0x41/0x43 [ 365.570793][T10519] console_init+0x1d6/0x7f3 [ 365.570813][T10519] start_kernel+0x30b/0x53f [ 365.570835][T10519] secondary_startup_64_no_verify+0xcf/0xdb [ 365.570858][T10519] [ 365.570858][T10519] -> #0 (console_owner){-...}-{0:0}: [ 365.570886][T10519] validate_chain+0x1661/0x5950 [ 365.570902][T10519] __lock_acquire+0x125b/0x1f80 [ 365.570927][T10519] lock_acquire+0x1f8/0x5a0 [ 365.570951][T10519] console_emit_next_record+0x76c/0xc30 [ 365.570969][T10519] console_unlock+0x278/0x7c0 [ 365.570983][T10519] vprintk_emit+0x523/0x740 [ 365.570997][T10519] _printk+0xd1/0x111 [ 365.571013][T10519] should_fail_ex+0x387/0x4d0 [ 365.571039][T10519] strncpy_from_user+0x32/0x360 [ 365.571062][T10519] strncpy_from_user_nofault+0x6c/0x130 [ 365.571087][T10519] bpf_probe_read_compat_str+0xe4/0x180 [ 365.571104][T10519] bpf_prog_c1796171ffc7efef+0x35/0x37 [ 365.571121][T10519] bpf_trace_run4+0x253/0x470 [ 365.571140][T10519] __traceiter_sched_switch+0x91/0xc0 [ 365.571156][T10519] __schedule+0x2128/0x4570 [ 365.571177][T10519] preempt_schedule_common+0x83/0xd0 [ 365.571199][T10519] preempt_schedule+0xd9/0xe0 [ 365.571219][T10519] preempt_schedule_thunk+0x16/0x18 [ 365.571244][T10519] _raw_spin_unlock_irqrestore+0x128/0x130 [ 365.571260][T10519] rcu_preempt_deferred_qs_irqrestore+0x873/0xc50 [ 365.571282][T10519] rcu_read_unlock_special+0x467/0x540 [ 365.571302][T10519] __rcu_read_unlock+0x92/0x100 [ 365.571321][T10519] sctp_copy_local_addr_list+0x47e/0x4f0 [ 365.571338][T10519] sctp_bind_addr_copy+0xa9/0x3b0 [ 365.571353][T10519] sctp_connect_new_asoc+0x2ea/0x6b0 [ 365.571372][T10519] sctp_sendmsg+0x1cfc/0x33b0 [ 365.571390][T10519] ____sys_sendmsg+0x5d3/0x9a0 [ 365.571406][T10519] __sys_sendmsg+0x2a9/0x390 [ 365.571421][T10519] do_syscall_64+0x3b/0xb0 [ 365.571446][T10519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 365.571465][T10519] [ 365.571465][T10519] other info that might help us debug this: [ 365.571465][T10519] [ 365.571470][T10519] Chain exists of: [ 365.571470][T10519] console_owner --> &p->pi_lock --> &rq->__lock [ 365.571470][T10519] [ 365.571497][T10519] Possible unsafe locking scenario: [ 365.571497][T10519] [ 365.571501][T10519] CPU0 CPU1 [ 365.571506][T10519] ---- ---- [ 365.571510][T10519] lock(&rq->__lock); [ 365.571520][T10519] lock(&p->pi_lock); [ 365.571531][T10519] lock(&rq->__lock); [ 365.571542][T10519] lock(console_owner); [ 365.571553][T10519] [ 365.571553][T10519] *** DEADLOCK *** [ 365.571553][T10519] [ 365.571556][T10519] 5 locks held by syz.3.2407/10519: [ 365.571567][T10519] #0: ffff888027b2c930 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sctp_sendmsg+0xb11/0x33b0 [ 365.571611][T10519] #1: ffffffff8d32e680 (rcu_read_lock){....}-{1:2}, at: sctp_copy_local_addr_list+0xa7/0x4f0 [ 365.571654][T10519] #2: ffff8880b8e3a9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 365.571701][T10519] #3: ffffffff8d32e680 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x16a/0x470 [ 365.571744][T10519] #4: ffffffff8d20a5a0 (console_lock){+.+.}-{0:0}, at: _printk+0xd1/0x111 [ 365.571785][T10519] [ 365.571785][T10519] stack backtrace: [ 365.571791][T10519] CPU: 0 PID: 10519 Comm: syz.3.2407 Not tainted 6.1.129-syzkaller #0 [ 365.571809][T10519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 365.571819][T10519] Call Trace: [ 365.571825][T10519] [ 365.571831][T10519] dump_stack_lvl+0x1e3/0x2cb [ 365.571862][T10519] ? nf_tcp_handle_invalid+0x647/0x647 [ 365.571903][T10519] ? print_circular_bug+0x12b/0x1a0 [ 365.571924][T10519] check_noncircular+0x2fa/0x3b0 [ 365.571946][T10519] ? add_chain_block+0x850/0x850 [ 365.571964][T10519] ? lockdep_lock+0x11f/0x2a0 [ 365.571992][T10519] ? add_lock_to_list+0x1de/0x2e0 [ 365.572015][T10519] validate_chain+0x1661/0x5950 [ 365.572046][T10519] ? vsnprintf+0x1b93/0x1c70 [ 365.572067][T10519] ? reacquire_held_locks+0x660/0x660 [ 365.572098][T10519] ? _prb_read_valid+0xbcc/0xbe0 [ 365.572121][T10519] ? mark_lock+0x9a/0x340 [ 365.572140][T10519] __lock_acquire+0x125b/0x1f80 [ 365.572176][T10519] lock_acquire+0x1f8/0x5a0 [ 365.572202][T10519] ? console_emit_next_record+0x74f/0xc30 [ 365.572227][T10519] ? read_lock_is_recursive+0x10/0x10 [ 365.572254][T10519] ? __lock_acquire+0x1f80/0x1f80 [ 365.572280][T10519] ? do_raw_spin_lock+0x14a/0x370 [ 365.572305][T10519] ? do_raw_spin_unlock+0x137/0x8a0 [ 365.572326][T10519] ? console_emit_next_record+0x74f/0xc30 [ 365.572346][T10519] console_emit_next_record+0x76c/0xc30 [ 365.572366][T10519] ? console_emit_next_record+0x74f/0xc30 [ 365.572393][T10519] ? info_print_prefix+0x300/0x300 [ 365.572434][T10519] console_unlock+0x278/0x7c0 [ 365.572454][T10519] ? vprintk_emit+0x740/0x740 [ 365.572471][T10519] ? perf_trace_lock+0x138/0x440 [ 365.572496][T10519] ? _printk+0xd1/0x111 [ 365.572514][T10519] vprintk_emit+0x523/0x740 [ 365.572533][T10519] ? printk_sprint+0x490/0x490 [ 365.572554][T10519] ? mark_lock+0x9a/0x340 [ 365.572573][T10519] _printk+0xd1/0x111 [ 365.572595][T10519] ? panic+0x764/0x764 [ 365.572621][T10519] should_fail_ex+0x387/0x4d0 [ 365.572652][T10519] strncpy_from_user+0x32/0x360 [ 365.572677][T10519] ? __schedule+0x9c4/0x4570 [ 365.572702][T10519] strncpy_from_user_nofault+0x6c/0x130 [ 365.572730][T10519] bpf_probe_read_compat_str+0xe4/0x180 [ 365.572749][T10519] ? bpf_trace_run4+0x16a/0x470 [ 365.572770][T10519] bpf_prog_c1796171ffc7efef+0x35/0x37 [ 365.572787][T10519] bpf_trace_run4+0x253/0x470 [ 365.572809][T10519] ? bpf_trace_run3+0x440/0x440 [ 365.572833][T10519] ? probe_sched_wakeup+0x80/0x80 [ 365.572859][T10519] ? tracing_record_taskinfo_sched_switch+0x77/0x390 [ 365.572893][T10519] ? __bpf_trace_sched_wakeup_template+0x10/0x10 [ 365.572916][T10519] __traceiter_sched_switch+0x91/0xc0 [ 365.572938][T10519] __schedule+0x2128/0x4570 [ 365.572975][T10519] ? release_firmware_map_entry+0x18b/0x18b [ 365.573002][T10519] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 365.573029][T10519] ? rcu_preempt_deferred_qs_irqrestore+0x873/0xc50 [ 365.573055][T10519] ? preempt_schedule+0xd9/0xe0 [ 365.573077][T10519] preempt_schedule_common+0x83/0xd0 [ 365.573101][T10519] preempt_schedule+0xd9/0xe0 [ 365.573124][T10519] ? schedule_preempt_disabled+0x20/0x20 [ 365.573148][T10519] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 365.573170][T10519] ? lockdep_hardirqs_on+0x94/0x130 [ 365.573192][T10519] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 365.573217][T10519] preempt_schedule_thunk+0x16/0x18 [ 365.573248][T10519] _raw_spin_unlock_irqrestore+0x128/0x130 [ 365.573267][T10519] ? _raw_spin_unlock+0x40/0x40 [ 365.573290][T10519] rcu_preempt_deferred_qs_irqrestore+0x873/0xc50 [ 365.573313][T10519] ? sctp_sendmsg+0x1cfc/0x33b0 [ 365.573331][T10519] ? ____sys_sendmsg+0x5d3/0x9a0 [ 365.573348][T10519] ? __sys_sendmsg+0x2a9/0x390 [ 365.573374][T10519] ? rcu_read_unlock_special+0x540/0x540 [ 365.573400][T10519] ? rcu_read_unlock_special+0x123/0x540 [ 365.573421][T10519] ? lockdep_hardirqs_off+0x70/0x100 [ 365.573443][T10519] rcu_read_unlock_special+0x467/0x540 [ 365.573467][T10519] ? __rcu_read_unlock+0x100/0x100 [ 365.573493][T10519] ? __ipv6_addr_type+0x10e/0x2e0 [ 365.573512][T10519] __rcu_read_unlock+0x92/0x100 [ 365.573535][T10519] sctp_copy_local_addr_list+0x47e/0x4f0 [ 365.573556][T10519] ? sctp_copy_local_addr_list+0xa7/0x4f0 [ 365.573575][T10519] ? sctp_do_8_2_transport_strike+0x860/0x860 [ 365.573596][T10519] ? sctp_v6_is_any+0x5c/0x70 [ 365.573620][T10519] ? sctp_copy_one_addr+0x8e/0x340 [ 365.573640][T10519] sctp_bind_addr_copy+0xa9/0x3b0 [ 365.573658][T10519] ? sctp_assoc_set_bind_addr_from_ep+0x71/0x190 [ 365.573684][T10519] sctp_connect_new_asoc+0x2ea/0x6b0 [ 365.573708][T10519] ? __sctp_connect+0xe10/0xe10 [ 365.573727][T10519] ? sctp_sendmsg+0xb11/0x33b0 [ 365.573749][T10519] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 365.573777][T10519] ? security_sctp_bind_connect+0x86/0xb0 [ 365.573798][T10519] sctp_sendmsg+0x1cfc/0x33b0 [ 365.573829][T10519] ? sctp_getsockopt+0x7f0/0x7f0 [ 365.573850][T10519] ? aa_af_perm+0x350/0x350 [ 365.573873][T10519] ? __import_iovec+0x316/0x4c0 [ 365.573900][T10519] ? inet_sendmsg+0xfc/0x310 [ 365.573922][T10519] ? inet_send_prepare+0x250/0x250 [ 365.573943][T10519] ____sys_sendmsg+0x5d3/0x9a0 [ 365.573966][T10519] ? __sys_sendmsg_sock+0x30/0x30 [ 365.573994][T10519] __sys_sendmsg+0x2a9/0x390 [ 365.574013][T10519] ? ____sys_sendmsg+0x9a0/0x9a0 [ 365.574031][T10519] ? vfs_write+0x6cf/0xbc0 [ 365.574068][T10519] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 365.574105][T10519] ? syscall_enter_from_user_mode+0x2e/0x230 [ 365.574127][T10519] ? lockdep_hardirqs_on+0x94/0x130 [ 365.574149][T10519] ? syscall_enter_from_user_mode+0x2e/0x230 [ 365.574173][T10519] do_syscall_64+0x3b/0xb0 [ 365.574200][T10519] ? clear_bhb_loop+0x45/0xa0 [ 365.574222][T10519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 365.574242][T10519] RIP: 0033:0x7f124d18d169 [ 365.574259][T10519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.574275][T10519] RSP: 002b:00007f124df6c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 365.574294][T10519] RAX: ffffffffffffffda RBX: 00007f124d3a5fa0 RCX: 00007f124d18d169 [ 365.574308][T10519] RDX: 0000000000000041 RSI: 0000400000000600 RDI: 0000000000000005 [ 365.574321][T10519] RBP: 00007f124df6c090 R08: 0000000000000000 R09: 0000000000000000 [ 365.574333][T10519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 365.574344][T10519] R13: 0000000000000000 R14: 00007f124d3a5fa0 R15: 00007ffc0ad96da8 [ 365.574367][T10519] [ 367.043536][T10519] CPU: 0 PID: 10519 Comm: syz.3.2407 Not tainted 6.1.129-syzkaller #0 [ 367.051682][T10519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 367.061731][T10519] Call Trace: [ 367.065002][T10519] [ 367.067928][T10519] dump_stack_lvl+0x1e3/0x2cb [ 367.072628][T10519] ? nf_tcp_handle_invalid+0x647/0x647 [ 367.078087][T10519] ? panic+0x764/0x764 [ 367.082155][T10519] should_fail_ex+0x3a6/0x4d0 [ 367.086850][T10519] strncpy_from_user+0x32/0x360 [ 367.091698][T10519] ? __schedule+0x9c4/0x4570 [ 367.096302][T10519] strncpy_from_user_nofault+0x6c/0x130 [ 367.101853][T10519] bpf_probe_read_compat_str+0xe4/0x180 [ 367.107395][T10519] ? bpf_trace_run4+0x16a/0x470 [ 367.112248][T10519] bpf_prog_c1796171ffc7efef+0x35/0x37 [ 367.117719][T10519] bpf_trace_run4+0x253/0x470 [ 367.122392][T10519] ? bpf_trace_run3+0x440/0x440 [ 367.127257][T10519] ? probe_sched_wakeup+0x80/0x80 [ 367.132282][T10519] ? tracing_record_taskinfo_sched_switch+0x77/0x390 [ 367.138975][T10519] ? __bpf_trace_sched_wakeup_template+0x10/0x10 [ 367.145308][T10519] __traceiter_sched_switch+0x91/0xc0 [ 367.150678][T10519] __schedule+0x2128/0x4570 [ 367.155191][T10519] ? release_firmware_map_entry+0x18b/0x18b [ 367.161086][T10519] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 367.167074][T10519] ? rcu_preempt_deferred_qs_irqrestore+0x873/0xc50 [ 367.173936][T10519] ? preempt_schedule+0xd9/0xe0 [ 367.178785][T10519] preempt_schedule_common+0x83/0xd0 [ 367.184098][T10519] preempt_schedule+0xd9/0xe0 [ 367.188777][T10519] ? schedule_preempt_disabled+0x20/0x20 [ 367.194422][T10519] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 367.200582][T10519] ? lockdep_hardirqs_on+0x94/0x130 [ 367.205798][T10519] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 367.211961][T10519] preempt_schedule_thunk+0x16/0x18 [ 367.217165][T10519] _raw_spin_unlock_irqrestore+0x128/0x130 [ 367.222964][T10519] ? _raw_spin_unlock+0x40/0x40 [ 367.227914][T10519] rcu_preempt_deferred_qs_irqrestore+0x873/0xc50 [ 367.234328][T10519] ? sctp_sendmsg+0x1cfc/0x33b0 [ 367.239173][T10519] ? ____sys_sendmsg+0x5d3/0x9a0 [ 367.244104][T10519] ? __sys_sendmsg+0x2a9/0x390 [ 367.248866][T10519] ? rcu_read_unlock_special+0x540/0x540 [ 367.254513][T10519] ? rcu_read_unlock_special+0x123/0x540 [ 367.260156][T10519] ? lockdep_hardirqs_off+0x70/0x100 [ 367.265530][T10519] rcu_read_unlock_special+0x467/0x540 [ 367.270991][T10519] ? __rcu_read_unlock+0x100/0x100 [ 367.276185][T10519] ? __ipv6_addr_type+0x10e/0x2e0 [ 367.281684][T10519] __rcu_read_unlock+0x92/0x100 [ 367.286573][T10519] sctp_copy_local_addr_list+0x47e/0x4f0 [ 367.292214][T10519] ? sctp_copy_local_addr_list+0xa7/0x4f0 [ 367.297946][T10519] ? sctp_do_8_2_transport_strike+0x860/0x860 [ 367.304045][T10519] ? sctp_v6_is_any+0x5c/0x70 [ 367.308745][T10519] ? sctp_copy_one_addr+0x8e/0x340 [ 367.313878][T10519] sctp_bind_addr_copy+0xa9/0x3b0 [ 367.318910][T10519] ? sctp_assoc_set_bind_addr_from_ep+0x71/0x190 [ 367.325247][T10519] sctp_connect_new_asoc+0x2ea/0x6b0 [ 367.330536][T10519] ? __sctp_connect+0xe10/0xe10 [ 367.335379][T10519] ? sctp_sendmsg+0xb11/0x33b0 [ 367.340139][T10519] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 367.345688][T10519] ? security_sctp_bind_connect+0x86/0xb0 [ 367.351410][T10519] sctp_sendmsg+0x1cfc/0x33b0 [ 367.356088][T10519] ? sctp_getsockopt+0x7f0/0x7f0 [ 367.361019][T10519] ? aa_af_perm+0x350/0x350 [ 367.365517][T10519] ? __import_iovec+0x316/0x4c0 [ 367.370382][T10519] ? inet_sendmsg+0xfc/0x310 [ 367.374967][T10519] ? inet_send_prepare+0x250/0x250 [ 367.380088][T10519] ____sys_sendmsg+0x5d3/0x9a0 [ 367.384852][T10519] ? __sys_sendmsg_sock+0x30/0x30 [ 367.389883][T10519] __sys_sendmsg+0x2a9/0x390 [ 367.394465][T10519] ? ____sys_sendmsg+0x9a0/0x9a0 [ 367.399405][T10519] ? vfs_write+0x6cf/0xbc0 [ 367.403835][T10519] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 367.409826][T10519] ? syscall_enter_from_user_mode+0x2e/0x230 [ 367.415803][T10519] ? lockdep_hardirqs_on+0x94/0x130 [ 367.421027][T10519] ? syscall_enter_from_user_mode+0x2e/0x230 [ 367.427020][T10519] do_syscall_64+0x3b/0xb0 [ 367.431519][T10519] ? clear_bhb_loop+0x45/0xa0 [ 367.436222][T10519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 367.442135][T10519] RIP: 0033:0x7f124d18d169 [ 367.446549][T10519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.466383][T10519] RSP: 002b:00007f124df6c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.474816][T10519] RAX: ffffffffffffffda RBX: 00007f124d3a5fa0 RCX: 00007f124d18d169 [ 367.482874][T10519] RDX: 0000000000000041 RSI: 0000400000000600 RDI: 0000000000000005 [ 367.490839][T10519] RBP: 00007f124df6c090 R08: 0000000000000000 R09: 0000000000000000 [ 367.498887][T10519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 367.506848][T10519] R13: 0000000000000000 R14: 00007f124d3a5fa0 R15: 00007ffc0ad96da8 [ 367.514845][T10519] [ 367.519900][ T4272] Bluetooth: hci1: command 0x2016 tx timeout [ 367.594649][T10524] netlink: 'syz.0.2408': attribute type 4 has an invalid length.