last executing test programs: 5.986966322s ago: executing program 4 (id=1115): sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000300)="bf1549cccd5434daa69b5123045b27355770cbd826964c92fba7b3bcd5ce8cca83bdc473ecb867099df0a8a9c5ab179eaa7e692d7d6d74924f356f7bf6dbe4a2d951ef5695c8d0ca40ae3d", 0x4b}], 0x2}, 0x800) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002c80)={&(0x7f0000002b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0xb, [@func={0xb, 0x0, 0x0, 0xc, 0x1}, @const={0x2, 0x0, 0x0, 0xa, 0x3}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x4, 0x4}, @var={0xb, 0x0, 0x0, 0xe, 0x3, 0x2}]}, {0x0, [0x0, 0x30, 0x0, 0x61, 0x30, 0x0, 0x61, 0x2e, 0x3d]}}, &(0x7f0000002bc0)=""/170, 0x5b, 0xaa, 0x0, 0x8, 0x10000, @value}, 0x28) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002d40)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002e40)=@bpf_lsm={0x1d, 0x9, &(0x7f0000001ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7fffffff}, [@call={0x85, 0x0, 0x0, 0x87}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffd}, @cb_func={0x18, 0xb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000400)='syzkaller\x00', 0xfffffff7, 0x1000, &(0x7f0000001b40)=""/4096, 0x41000, 0x48, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000002cc0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002d00)={0x4, 0x5, 0x6, 0x7ff}, 0x10, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002dc0)=[r1], &(0x7f0000002e00)=[{0x4, 0x1, 0xa, 0xa}], 0x10, 0x61, @void, @value}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="0f0200003a000517d25a80648c63940d0324fc600b000000280008c321d51f000200080000003e37eb248833c33ccf43bf38", 0x32}, {&(0x7f0000000240)="14ea6b09a80fdd9810700f03d15a4c5ed13c5c9768b359f879a6db6ee18a54321484f4f48481dc5f007ccb4e5142a37bb45726fa7e5362f171c9a4ee99949c6e867251ba84edb024a97e8be1ad62727bb4bed90e4a62941a8336517c6f875606f41898dd831b4a7aec1b41c0c135332020604e9c34ccde232d5b9c76f91adf73c72a6cd62933753ec2263f5067bff09d4bcc1c5665c74e9bb7bc525daaffd17491087a5ffd5fd65eb611c415a9c885535e7d8f4c8058ad267e61da6db9585f4b41357e4823de2a70f4399ed933edbc", 0xcf}, {&(0x7f0000000900)="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", 0x10e}], 0x3, 0x0, 0x0, 0x6c000000}, 0x4880) 5.557702419s ago: executing program 4 (id=1121): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f00000002c0)=""/155, 0x9b, 0x0, &(0x7f0000000580)=""/227, 0xe3}}, 0x10) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 4.162156739s ago: executing program 4 (id=1131): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) (fail_nth: 73) 3.244060825s ago: executing program 4 (id=1140): socket$kcm(0x15, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000500)='kvm_mmio\x00', r1}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffe000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x34}, 0x10) 3.16732551s ago: executing program 0 (id=1141): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000006100000600000000bf91000000000000b7020000000000008500000000000000b700000000000000950000000000000060196912bf8bed129121bb22faf6c7f85805ed09fdb7048b325afa3086e6fea310568bd551217363fc977f29f449cf87d8ac8cdfcaf0c0e615e4c2706210cca97abea2d25edf6d0bf96ffe90149cd0f2a881b918efe1c88f1ed97cd9005d9f12b4449ad0"], &(0x7f0000000100)='GPL\x00', 0x4, 0x103, &(0x7f0000000140)=""/259, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) 3.043600558s ago: executing program 3 (id=1143): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000002c0), 0x2}, 0x110104, 0x800, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x6, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x6, 0xf, 0xaa, 0x9, 0x0, 0x2, 0x201, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x4f, 0x4f4f}, 0x15244, 0xffff, 0x10000, 0x7, 0x100000000, 0x7, 0x8, 0x0, 0x2, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4d, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b7b, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r1, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000cf2ffffb607000000000000180100002020702500000000002020207b1af8ff00000000bfa100000500000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000", @ANYRES32, @ANYBLOB="0000000000000000ca030000000114a426f32a170e000000b7000000000000009500000000000000"], &(0x7f0000000540)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8924, &(0x7f0000000080)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90224fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4d, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b7b, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x3, 0x800, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x61]}}, &(0x7f0000000100)=""/253, 0x27, 0xfd, 0x1, 0xffffffff, 0x0, @void, @value}, 0x28) r3 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xee01}}}], 0x20}, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x10, 0x8, 0x33, 0x0, 0x0, 0x1db4, 0x6200, 0xe, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x41, 0xc}, 0x80008, 0xef9, 0x5, 0x4, 0x3, 0x7, 0x7, 0x0, 0x3, 0x0, 0x80000000}, r3, 0xd, 0xffffffffffffffff, 0x2) 2.878527465s ago: executing program 0 (id=1146): sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000300)="bf1549cccd5434daa69b5123045b27355770cbd826964c92fba7b3bcd5ce8cca83bdc473ecb867099df0a8a9c5ab179eaa7e692d7d6d74924f356f7bf6dbe4a2d951ef5695c8d0ca40ae3d", 0x4b}], 0x2}, 0x800) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002c80)={&(0x7f0000002b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0xb, [@func={0xb, 0x0, 0x0, 0xc, 0x1}, @const={0x2, 0x0, 0x0, 0xa, 0x3}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x4, 0x4}, @var={0xb, 0x0, 0x0, 0xe, 0x3, 0x2}]}, {0x0, [0x0, 0x30, 0x0, 0x61, 0x30, 0x0, 0x61, 0x2e, 0x3d]}}, &(0x7f0000002bc0)=""/170, 0x5b, 0xaa, 0x0, 0x8, 0x10000, @value}, 0x28) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="0f0200003a000517d25a80648c63940d0324fc600b000000280008c321d51f000200080000003e37eb248833c33ccf43bf38", 0x32}, {&(0x7f0000000240)="14ea6b09a80fdd9810700f03d15a4c5ed13c5c9768b359f879a6db6ee18a54321484f4f48481dc5f007ccb4e5142a37bb45726fa7e5362f171c9a4ee99949c6e867251ba84edb024a97e8be1ad62727bb4bed90e4a62941a8336517c6f875606f41898dd831b4a7aec1b41c0c135332020604e9c34ccde232d5b9c76f91adf73c72a6cd62933753ec2263f5067bff09d4bcc1c5665c74e9bb7bc525daaffd17491087a5ffd5fd65eb611c415a9c885535e7d8f4c8058ad267e61da6db9585f4b41357e4823de2a70f4399ed933edbc", 0xcf}, {&(0x7f0000000900)="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", 0x10e}], 0x3, 0x0, 0x0, 0x6c000000}, 0x4880) 2.594118058s ago: executing program 2 (id=1148): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1b, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000000000000000009500000000000000b07963e3e210fbd5dd6a14c4"], &(0x7f0000000980)='GPL\x00', 0xaaed, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000}, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r3}, 0x10) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) 2.590063694s ago: executing program 4 (id=1149): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1b, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000000000000000009500000000000000b07963e3e210fbd5dd6a14c4"], &(0x7f0000000980)='GPL\x00', 0xaaed, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000}, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f90824fc60", 0x14}], 0x1}, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r5}, 0x10) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) 2.447252266s ago: executing program 3 (id=1150): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x10, &(0x7f0000000740)=@framed={{0x18, 0x8}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r2, &(0x7f0000000240), 0x20000000}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000440), &(0x7f0000000480)=r1}, 0x20) 2.352668161s ago: executing program 2 (id=1151): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) (async) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) r3 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x11b, 0x2, &(0x7f0000000900)=r2, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688474c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r2, &(0x7f0000000940)="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"}, 0x20) 2.305731995s ago: executing program 0 (id=1152): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000580)={'wlan1\x00', @broadcast}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000070000000000000000000000085000000270000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = getpid() r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc60100c044002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r8 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r8, 0x2401, 0x0) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r9}, &(0x7f0000000480), &(0x7f00000004c0)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000380)=r10, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x13, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r12, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66}, 0x0) sendmsg$tipc(r13, &(0x7f0000000240)={0x0, 0x2, &(0x7f00000000c0), 0x31}, 0x0) sendmsg$tipc(r12, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r11) r14 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r14, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300440f1) setsockopt$sock_attach_bpf(r14, 0x1, 0x12, &(0x7f0000000500), 0x4) 2.265336499s ago: executing program 1 (id=1153): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8904, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000004c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, 0x0, &(0x7f00000002c0)=""/26}, 0x20) 2.264755111s ago: executing program 3 (id=1154): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d80000003e0081064e81f782db44b9040a1d08040300000000070aa11800150006f7132603600e1208000f0000810401a80016", 0x33}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r0, 0x5, 0x1, 0xffffff01, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0]}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d80000003e0081064e81f782db44b9040a1d08040300000000070aa11800150006f7132603600e1208000f0000810401a80016", 0x33}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r0, 0x5, 0x1, 0xffffff01, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0]}, 0x40) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) (async) 1.959066136s ago: executing program 3 (id=1155): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0xd0008080, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="8510000000000000180000800000040000950000000000000045000000d12c9b25111d6ae8b975fcffffffd4e7e8d968c2ce878c892e67a2716f5d61d4662bfc9f0de38053c37962da79852dd987de22a815247c48b9a9df43fe2d822f4310ba0000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe14, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000080)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='fib_table_lookup\x00', r3}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e80)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000600000000000000fc730000090000000002000095000000cbcf440183ec47cb7c884ede5ac4cf10861bec8111e8241f9886d0a4c461727c32e1994179c545dcca70087a605663c9d3a7d9af1ed7986ee6709211223d367a50bd2deba0531ec8e8d6d7f13dc571d6d8dcc8c81452e38f93c8251f6b3be089"], &(0x7f0000000880)='GPL\x00', 0x1f, 0x93, &(0x7f0000000cc0)=""/147, 0x0, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x9}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000004000000fd01e5450900000081000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="09000000050000"], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r2, 0x4, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$inet(r4, &(0x7f00000075c0)={&(0x7f0000001080)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000074c0)=[{&(0x7f00000001c0)="9b", 0x1}], 0x1}, 0x20000040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r5 = getpid() r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, r5, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) close(r6) 1.95828443s ago: executing program 1 (id=1165): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8904, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000004c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, 0x0, &(0x7f00000002c0)=""/26}, 0x20) 1.543439052s ago: executing program 1 (id=1156): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_clone(0x820000, 0x0, 0x80000, 0x0, 0x0, 0x0) 1.400372376s ago: executing program 2 (id=1157): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="000000e54aefb08535e9428881f065e3907bddce9546996ffa315a88564ebd64c58f284bdaad2f14bdd4fed70249fa99321ad59bf6a6e9e62404583efc27c2e8c0e943479d864bb7b9bc0000000000000001fbc21f09a034cb8075a925f7e310a0855d800cedfd87e31b153bc33062538626e2c65c9bbf1d81", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup=r3, 0x2, 0x1, 0x0, &(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100ff80000000000000080005007a010401a80036002000034011000000035c0461b1d67f6f940071342e875f077cb6cec6cf6efbbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8724730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e000000003bf700"/216, 0xd8}], 0x1}, 0x0) r6 = gettid() r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff, 0x3, 0x1000000000000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES64=r7, @ANYRES32, @ANYRES16=r6, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB="e44ec871929a53857771976a582ff6e3614b970ae0107c44c53fd02979013dc6665b131603b0f6d3931df2aa4ddba4872d12cccae91f93995dd0dabc690c9d48582235b00163"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1804000001000000000000df0000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$kcm(0xa, 0x6, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xa3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x4000, 0x7, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x6009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xd5, 0x9c}, 0x400, 0x4, 0x0, 0x0, 0x85b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe356}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_int(r9, &(0x7f0000000140)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) r10 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x8}, 0x8080, 0x2, 0x0, 0x0, 0x7fffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b00)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r10, @ANYRES64=r11, @ANYBLOB="13"], 0x20) 1.222067139s ago: executing program 4 (id=1158): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="4c00000014006b04000000d86e6c1d001000250002000fc00e0017d34460bc24feb556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r1, 0x8004745a, 0x2000000c) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB="140000000000000000400000", @ANYRES32, @ANYBLOB="fad45ba80ed94eaf9b3700bd561430bbfaf30a3955574c1618beb71294bcf8", @ANYRES64=0x0], 0x10) sendmsg$tipc(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)="b8d3d8e48974aae5039847936746be1d81a34f9b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd8cbb6f069a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f90698aa2d9c57276322b82e8976f5a4d98066", 0x90}, {&(0x7f0000000100)="8d039b2a7adc54fb5b97", 0xa}, {&(0x7f00000001c0)="8a56506966b6", 0x6}], 0x3}, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0x100000000}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000039c51261c866f7d3009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e40)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r3) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) recvmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r10 = gettid() perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x40, 0xb, 0x6, 0x30, 0x0, 0x100000000, 0x20000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x40, 0x1, @perf_config_ext={0x2, 0x3}, 0x80, 0xff, 0x5, 0x8, 0x40, 0x200, 0x59, 0x0, 0x0, 0x0, 0xc}, r10, 0x1, 0xffffffffffffffff, 0x19) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x1, 0x7f, 0x5, 0x1, 0x0, 0x7fffffff, 0x40d, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xe1, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x40, 0x5, 0x5, 0x1, 0x7f, 0x1, 0x1, 0x0, 0x2af, 0x0, 0x6}, r10, 0x2, r5, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="7a0a00fffaffffe871107a000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_pid(r8, &(0x7f00000005c0), 0x12) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b016c1d0015007ea608640b0af3657b183257f5ca768530cdef1b76446c8a50cea86ff97a5c6dd693d94ff05a3c9d15af9bf35abc7141cd2c5fa94873cb60a3927088b60159214c19c31a1fa478ef2b2c665567e8d0e2b19c8d980636a8376bd789959fc32438c97ee793219bc7c750ea93", 0x83}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r11 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r11, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 1.171119345s ago: executing program 1 (id=1159): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000005e030000000000008500000083000000bf090000000300005509010000000000950000000000000085100000f5ffffffbf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 854.992122ms ago: executing program 2 (id=1160): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x1f, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 843.403274ms ago: executing program 3 (id=1161): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x1589, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext, 0x2140, 0x1, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x120, 0x0, 0x0, 0x6, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000001040)={0x0, 0x64, 0x0}, 0x40002022) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002d000b02d25a806f8c6394f9111a0400", 0x14}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1600000000000000ff0f0000050000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) 703.183412ms ago: executing program 0 (id=1162): sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000300)="bf1549cccd5434daa69b5123045b27355770cbd826964c92fba7b3bcd5ce8cca83bdc473ecb867099df0a8a9c5ab179eaa7e692d7d6d74924f356f7bf6dbe4a2d951ef5695c8d0ca40ae3d", 0x4b}], 0x2}, 0x800) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002c80)={&(0x7f0000002b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0xb, [@func={0xb, 0x0, 0x0, 0xc, 0x1}, @const={0x2, 0x0, 0x0, 0xa, 0x3}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x4, 0x4}, @var={0xb, 0x0, 0x0, 0xe, 0x3, 0x2}]}, {0x0, [0x0, 0x30, 0x0, 0x61, 0x30, 0x0, 0x61, 0x2e, 0x3d]}}, &(0x7f0000002bc0)=""/170, 0x5b, 0xaa, 0x0, 0x8, 0x10000, @value}, 0x28) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="0f0200003a000517d25a80648c63940d0324fc600b000000280008c321d51f000200080000003e37eb248833c33ccf43bf38", 0x32}, {&(0x7f0000000240)="14ea6b09a80fdd9810700f03d15a4c5ed13c5c9768b359f879a6db6ee18a54321484f4f48481dc5f007ccb4e5142a37bb45726fa7e5362f171c9a4ee99949c6e867251ba84edb024a97e8be1ad62727bb4bed90e4a62941a8336517c6f875606f41898dd831b4a7aec1b41c0c135332020604e9c34ccde232d5b9c76f91adf73c72a6cd62933753ec2263f5067bff09d4bcc1c5665c74e9bb7bc525daaffd17491087a5ffd5fd65eb611c415a9c885535e7d8f4c8058ad267e61da6db9585f4b41357e4823de2a70f4399ed933edbc", 0xcf}, {&(0x7f0000000900)="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", 0x10e}], 0x3, 0x0, 0x0, 0x6c000000}, 0x4880) 702.77054ms ago: executing program 1 (id=1163): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0xaec}, 0x110104, 0x32, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = socket$kcm(0x21, 0x2, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r1}, 0x10) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfc79, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac0008032500000004000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 649.583959ms ago: executing program 2 (id=1164): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x3ff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x98}, [@ldst={0x4}], {0x95, 0x0, 0x0, 0x2000000}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 284.797486ms ago: executing program 0 (id=1166): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4d, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b7b, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711206000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 256.313211ms ago: executing program 3 (id=1167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000ff7f00000000f800000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x8}, 0x0, 0x0, 0x1, 0x4, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90324fc60100005000b0c0900053582c137153e37000c0480fc0b1000f80b", 0x33fe0}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_clone(0x820000, 0x0, 0x0, 0x0, 0x0, 0x0) 175.24354ms ago: executing program 2 (id=1168): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4d, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x14a0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b7b, 0x0, @perf_config_ext={0x7ffe, 0xaea}, 0x110100, 0x32, 0x0, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, r0, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d649379071c33390e418ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000030085000000a80000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 69.863177ms ago: executing program 1 (id=1169): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1b, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000000000000000009500000000000000b07963e3e210fbd5dd6a14c4"], &(0x7f0000000980)='GPL\x00', 0xaaed, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000}, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f90824fc60", 0x14}], 0x1}, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r5}, 0x10) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) 0s ago: executing program 0 (id=1170): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = perf_event_open(&(0x7f0000000c40)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x10, &(0x7f0000000740)=@framed={{0x18, 0x8}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @local}) write$cgroup_subtree(r5, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005", 0x17}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20004014) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfdef) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): adv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.496373][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.516521][ T5839] hsr_slave_0: entered promiscuous mode [ 74.523105][ T5839] hsr_slave_1: entered promiscuous mode [ 74.528848][ T5846] Bluetooth: hci4: command tx timeout [ 74.544611][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.551958][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.578126][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.590901][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.597961][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.624375][ T5855] Bluetooth: hci3: command tx timeout [ 74.624380][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.641076][ T54] Bluetooth: hci2: command tx timeout [ 74.646823][ T5846] Bluetooth: hci1: command tx timeout [ 74.664616][ T5840] hsr_slave_0: entered promiscuous mode [ 74.671145][ T5840] hsr_slave_1: entered promiscuous mode [ 74.678567][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.686383][ T5840] Cannot create hsr debugfs directory [ 74.708226][ T5847] hsr_slave_0: entered promiscuous mode [ 74.714510][ T5847] hsr_slave_1: entered promiscuous mode [ 74.720954][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.729038][ T5847] Cannot create hsr debugfs directory [ 74.823074][ T5837] hsr_slave_0: entered promiscuous mode [ 74.830112][ T5837] hsr_slave_1: entered promiscuous mode [ 74.836187][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.844257][ T5837] Cannot create hsr debugfs directory [ 74.872744][ T5838] hsr_slave_0: entered promiscuous mode [ 74.880106][ T5838] hsr_slave_1: entered promiscuous mode [ 74.886265][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.894540][ T5838] Cannot create hsr debugfs directory [ 75.206369][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.220216][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.231017][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.256079][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.286225][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.314486][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.337309][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.349481][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.416273][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.449860][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.460345][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.484025][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.503284][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.513778][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.525870][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.553658][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.625798][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.638534][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.650565][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.670392][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.681062][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.715436][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.771614][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.778971][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.838748][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.845865][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.874853][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.921358][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.935199][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.955612][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.962807][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.993783][ T5839] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.005300][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.019712][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.026818][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.063229][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.095303][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.124018][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.160803][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.181292][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.196898][ T772] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.204305][ T772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.225695][ T772] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.233012][ T772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.254238][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.261420][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.293900][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.301111][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.322353][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.329544][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.373777][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.380980][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.479197][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.546543][ T5855] Bluetooth: hci0: command tx timeout [ 76.561721][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.608245][ T5855] Bluetooth: hci4: command tx timeout [ 76.689339][ T5855] Bluetooth: hci3: command tx timeout [ 76.694838][ T5855] Bluetooth: hci1: command tx timeout [ 76.701022][ T5846] Bluetooth: hci2: command tx timeout [ 76.712874][ T5839] veth0_vlan: entered promiscuous mode [ 76.747050][ T5839] veth1_vlan: entered promiscuous mode [ 76.878685][ T5847] veth0_vlan: entered promiscuous mode [ 76.888871][ T5839] veth0_macvtap: entered promiscuous mode [ 76.910831][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.921444][ T5839] veth1_macvtap: entered promiscuous mode [ 76.930714][ T5847] veth1_vlan: entered promiscuous mode [ 76.993755][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.024361][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.055385][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.069369][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.081485][ T5847] veth0_macvtap: entered promiscuous mode [ 77.106783][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.121491][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.132178][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.141892][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.155604][ T5847] veth1_macvtap: entered promiscuous mode [ 77.210625][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.222054][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.234811][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.258019][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.269188][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.281019][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.312931][ T5847] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.323400][ T5847] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.333393][ T5847] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.342356][ T5847] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.395792][ T5837] veth0_vlan: entered promiscuous mode [ 77.426266][ T5837] veth1_vlan: entered promiscuous mode [ 77.460330][ T5838] veth0_vlan: entered promiscuous mode [ 77.482452][ T5838] veth1_vlan: entered promiscuous mode [ 77.496371][ T3012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.519739][ T3012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.558965][ T5840] veth0_vlan: entered promiscuous mode [ 77.605111][ T5837] veth0_macvtap: entered promiscuous mode [ 77.629834][ T5840] veth1_vlan: entered promiscuous mode [ 77.638820][ T5837] veth1_macvtap: entered promiscuous mode [ 77.646645][ T3012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.654489][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.654530][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.673840][ T3012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.694499][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.707284][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.717188][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.728446][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.743113][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.764711][ T5838] veth0_macvtap: entered promiscuous mode [ 77.784615][ T5838] veth1_macvtap: entered promiscuous mode [ 77.802213][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.818499][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.828913][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.839574][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.851387][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.870994][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.871985][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.879692][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.905491][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.917326][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.928786][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.939673][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.949836][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.960772][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.972720][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.014143][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.025774][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.035605][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.060501][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.119100][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.132568][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.144193][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.156692][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.168120][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.181278][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.195317][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.217673][ T5840] veth0_macvtap: entered promiscuous mode [ 78.271339][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.293759][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.313474][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.331691][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.370081][ T5840] veth1_macvtap: entered promiscuous mode [ 78.492507][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.523616][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.542695][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.558075][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.568323][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.579762][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.589966][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.600724][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.608495][ T54] Bluetooth: hci0: command tx timeout [ 78.613489][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.652871][ T5928] netlink: 'syz.1.2': attribute type 29 has an invalid length. [ 78.668860][ C1] hrtimer: interrupt took 57994 ns [ 78.684899][ T5931] netlink: 'syz.1.2': attribute type 29 has an invalid length. [ 78.687416][ T54] Bluetooth: hci4: command tx timeout [ 78.698723][ T5933] netlink: 'syz.1.2': attribute type 29 has an invalid length. [ 78.711015][ T5928] netlink: 'syz.1.2': attribute type 29 has an invalid length. [ 78.730144][ T5928] netlink: 'syz.1.2': attribute type 29 has an invalid length. [ 78.737521][ T3012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.745646][ T3012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.754006][ T5928] netlink: 'syz.1.2': attribute type 29 has an invalid length. [ 78.767388][ T54] Bluetooth: hci1: command tx timeout [ 78.768082][ T5846] Bluetooth: hci3: command tx timeout [ 78.772829][ T54] Bluetooth: hci2: command tx timeout [ 78.791729][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.802382][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.812289][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.822823][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.833187][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.846503][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.859624][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.870560][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.882308][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.955078][ T5840] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.974991][ T5840] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.010713][ T5840] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.036405][ T5840] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.099778][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.153148][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.227850][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.447402][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.507075][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.515457][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.793251][ T772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.830059][ T772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.869093][ T5943] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1'. [ 79.969292][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.011233][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.727404][ T54] Bluetooth: hci0: command tx timeout [ 80.769420][ T54] Bluetooth: hci4: command tx timeout [ 80.847330][ T54] Bluetooth: hci2: command tx timeout [ 80.888062][ T54] Bluetooth: hci3: command tx timeout [ 80.888283][ T5855] Bluetooth: hci1: command tx timeout [ 81.109164][ T5963] syzkaller0: entered promiscuous mode [ 81.123905][ T5963] syzkaller0: entered allmulticast mode [ 81.486005][ T5973] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16'. [ 81.558158][ T5979] netlink: 'syz.1.16': attribute type 3 has an invalid length. [ 81.603521][ T5979] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.16'. [ 83.691233][ T5995] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.23'. [ 83.708667][ T5997] netlink: 'syz.0.22': attribute type 21 has an invalid length. [ 83.718319][ T5997] netlink: 128 bytes leftover after parsing attributes in process `syz.0.22'. [ 83.763358][ T5997] netlink: 'syz.0.22': attribute type 5 has an invalid length. [ 83.844867][ T5997] netlink: 'syz.0.22': attribute type 6 has an invalid length. [ 83.853228][ T5997] netlink: 3 bytes leftover after parsing attributes in process `syz.0.22'. [ 84.157238][ T6006] Zero length message leads to an empty skb [ 84.382790][ T6002] netlink: 'syz.4.24': attribute type 33 has an invalid length. [ 84.805398][ T6019] netlink: 'syz.0.29': attribute type 10 has an invalid length. [ 85.026154][ T6019] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 85.186257][ T6031] pim6reg1: entered promiscuous mode [ 85.191918][ T6031] pim6reg1: entered allmulticast mode [ 85.420387][ T6021] netlink: 'syz.3.31': attribute type 3 has an invalid length. [ 85.434612][ T6021] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.31'. [ 86.932790][ T6040] netlink: 'syz.0.36': attribute type 39 has an invalid length. [ 86.990758][ T9] cfg80211: failed to load regulatory.db [ 87.833660][ T6057] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.019633][ T6062] netlink: 'syz.0.41': attribute type 3 has an invalid length. [ 88.088077][ T6062] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.41'. [ 88.165743][ T6051] syz.3.40 (6051) used greatest stack depth: 17440 bytes left [ 88.866485][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.873858][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.971700][ T6068] netlink: 'syz.2.45': attribute type 11 has an invalid length. [ 88.985993][ T6073] netlink: 'syz.0.46': attribute type 10 has an invalid length. [ 89.385116][ T6081] netlink: 'syz.3.44': attribute type 3 has an invalid length. [ 89.393022][ T6081] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.44'. [ 89.586675][ T6085] syz.1.47 uses obsolete (PF_INET,SOCK_PACKET) [ 89.622567][ T6073] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.636139][ T6073] bond0: (slave team0): Enslaving as an active interface with an up link [ 89.949781][ T6100] netlink: 'syz.1.52': attribute type 3 has an invalid length. [ 89.957639][ T6100] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.52'. [ 90.052098][ T6090] netlink: 1 bytes leftover after parsing attributes in process `syz.4.48'. [ 90.488204][ T6092] pim6reg1: entered promiscuous mode [ 90.494574][ T6092] pim6reg1: entered allmulticast mode [ 90.726838][ T6121] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.60'. [ 90.762578][ T6121] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 90.813192][ T6125] netlink: 'syz.4.62': attribute type 2 has an invalid length. [ 90.826119][ T6125] netlink: 'syz.4.62': attribute type 1 has an invalid length. [ 90.923383][ T6125] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.62'. [ 91.035647][ T6127] syzkaller0: entered promiscuous mode [ 91.044458][ T6127] syzkaller0: entered allmulticast mode [ 91.111752][ T6129] netlink: 'syz.1.64': attribute type 1 has an invalid length. [ 91.120364][ T6129] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.64'. [ 92.649456][ T6150] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.404865][ T6149] netlink: 'syz.2.71': attribute type 10 has an invalid length. [ 96.471202][ T6149] batman_adv: batadv0: Adding interface: team0 [ 96.479979][ T6149] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.569163][ T6149] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 97.076658][ T6190] netlink: 'syz.2.83': attribute type 13 has an invalid length. [ 97.156612][ T6190] veth0_macvtap: left promiscuous mode [ 97.218329][ T6190] macvtap0: entered promiscuous mode [ 97.723185][ T6194] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.84'. [ 98.796146][ T6210] netlink: 'syz.0.91': attribute type 10 has an invalid length. [ 99.032109][ T6220] netlink: 204732 bytes leftover after parsing attributes in process `syz.1.94'. [ 99.115661][ T6210] team0: Port device geneve1 added [ 99.375030][ T6224] netlink: 'syz.4.96': attribute type 3 has an invalid length. [ 99.441483][ T6224] netlink: 173820 bytes leftover after parsing attributes in process `syz.4.96'. [ 99.458294][ T6227] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.98'. [ 100.031807][ T6239] netlink: 'syz.2.101': attribute type 29 has an invalid length. [ 100.048096][ T6239] netlink: 'syz.2.101': attribute type 29 has an invalid length. [ 100.086878][ T6245] netlink: 132 bytes leftover after parsing attributes in process `syz.0.103'. [ 100.192003][ T6248] netlink: 132 bytes leftover after parsing attributes in process `syz.0.103'. [ 100.906755][ T6273] netlink: 'syz.2.110': attribute type 3 has an invalid length. [ 100.949855][ T6273] netlink: 'syz.2.110': attribute type 26 has an invalid length. [ 100.986093][ T6273] netlink: 'syz.2.110': attribute type 28 has an invalid length. [ 101.047334][ T6273] netlink: 'syz.2.110': attribute type 29 has an invalid length. [ 102.438541][ T6302] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.121'. [ 102.552115][ T6306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.581959][ T6306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.630631][ T6302] netlink: get zone limit has 8 unknown bytes [ 102.673554][ T6306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.724281][ T6306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.452952][ T6340] validate_nla: 1 callbacks suppressed [ 104.452972][ T6340] netlink: 'syz.4.138': attribute type 21 has an invalid length. [ 104.477832][ T6340] netlink: 'syz.4.138': attribute type 4 has an invalid length. [ 104.806556][ T6357] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.142'. [ 105.668054][ T6372] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 105.756406][ T6377] netlink: 'syz.3.149': attribute type 2 has an invalid length. [ 105.829684][ T6377] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.149'. [ 105.858407][ T6377] netlink: 'syz.3.149': attribute type 10 has an invalid length. [ 105.867452][ T6377] netlink: 40 bytes leftover after parsing attributes in process `syz.3.149'. [ 105.902762][ T6377] veth0_vlan: entered allmulticast mode [ 106.243036][ T6377] bridge0: port 3(veth0_vlan) entered blocking state [ 106.292075][ T6377] bridge0: port 3(veth0_vlan) entered disabled state [ 106.652334][ T6377] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 107.014909][ T6412] netlink: 'syz.0.159': attribute type 3 has an invalid length. [ 107.075442][ T6412] netlink: 132 bytes leftover after parsing attributes in process `syz.0.159'. [ 107.364243][ T6433] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.166'. [ 107.419936][ T6433] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.166'. [ 107.606118][ T6435] syzkaller0: entered promiscuous mode [ 107.635599][ T6435] syzkaller0: entered allmulticast mode [ 111.081120][ T6469] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.179'. [ 111.091134][ T6469] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.179'. [ 111.292449][ T6492] FAULT_INJECTION: forcing a failure. [ 111.292449][ T6492] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 111.351353][ T6492] CPU: 0 UID: 0 PID: 6492 Comm: syz.1.185 Not tainted 6.12.0-syzkaller #0 [ 111.359946][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 111.370071][ T6492] Call Trace: [ 111.373370][ T6492] [ 111.376316][ T6492] dump_stack_lvl+0x241/0x360 [ 111.381042][ T6492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.386264][ T6492] ? __pfx__printk+0x10/0x10 [ 111.390893][ T6492] should_fail_ex+0x3b0/0x4e0 [ 111.395597][ T6492] _copy_to_user+0x31/0xb0 [ 111.400053][ T6492] generic_map_lookup_batch+0x8f5/0xf90 [ 111.405631][ T6492] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 111.411716][ T6492] ? __fget_files+0x29/0x470 [ 111.416349][ T6492] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 111.422522][ T6492] bpf_map_do_batch+0x288/0x660 [ 111.427415][ T6492] __sys_bpf+0x654/0x810 [ 111.431691][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 111.436482][ T6492] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 111.442492][ T6492] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 111.448873][ T6492] ? do_syscall_64+0x100/0x230 [ 111.453661][ T6492] __x64_sys_bpf+0x7c/0x90 [ 111.458096][ T6492] do_syscall_64+0xf3/0x230 [ 111.462620][ T6492] ? clear_bhb_loop+0x35/0x90 [ 111.467323][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.473256][ T6492] RIP: 0033:0x7fe41497e759 [ 111.477694][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.497317][ T6492] RSP: 002b:00007fe415838038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 111.505766][ T6492] RAX: ffffffffffffffda RBX: 00007fe414b35f80 RCX: 00007fe41497e759 [ 111.513757][ T6492] RDX: 0000000000000038 RSI: 00000000200003c0 RDI: 0000000000000018 [ 111.521738][ T6492] RBP: 00007fe415838090 R08: 0000000000000000 R09: 0000000000000000 [ 111.529727][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 111.537716][ T6492] R13: 0000000000000000 R14: 00007fe414b35f80 R15: 00007fff0d8ec518 [ 111.545714][ T6492] [ 112.648363][ T6523] syzkaller0: entered promiscuous mode [ 112.677574][ T6523] syzkaller0: entered allmulticast mode [ 112.899546][ T6543] netlink: 131752 bytes leftover after parsing attributes in process `syz.3.205'. [ 112.986251][ T6549] FAULT_INJECTION: forcing a failure. [ 112.986251][ T6549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.013223][ T6549] CPU: 0 UID: 0 PID: 6549 Comm: syz.2.207 Not tainted 6.12.0-syzkaller #0 [ 113.021810][ T6549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 113.031917][ T6549] Call Trace: [ 113.035243][ T6549] [ 113.038213][ T6549] dump_stack_lvl+0x241/0x360 [ 113.042954][ T6549] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.048208][ T6549] ? __pfx__printk+0x10/0x10 [ 113.052860][ T6549] should_fail_ex+0x3b0/0x4e0 [ 113.057631][ T6549] _copy_to_user+0x31/0xb0 [ 113.062094][ T6549] generic_map_lookup_batch+0x95d/0xf90 [ 113.067705][ T6549] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 113.073813][ T6549] ? __fget_files+0x29/0x470 [ 113.078452][ T6549] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 113.084557][ T6549] bpf_map_do_batch+0x288/0x660 [ 113.089433][ T6549] __sys_bpf+0x654/0x810 [ 113.093694][ T6549] ? __pfx___sys_bpf+0x10/0x10 [ 113.098489][ T6549] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 113.104514][ T6549] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 113.110888][ T6549] ? do_syscall_64+0x100/0x230 [ 113.115683][ T6549] __x64_sys_bpf+0x7c/0x90 [ 113.120117][ T6549] do_syscall_64+0xf3/0x230 [ 113.124658][ T6549] ? clear_bhb_loop+0x35/0x90 [ 113.129376][ T6549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.135301][ T6549] RIP: 0033:0x7ff13af7e759 [ 113.139736][ T6549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.159367][ T6549] RSP: 002b:00007ff13bdcb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 113.167822][ T6549] RAX: ffffffffffffffda RBX: 00007ff13b135f80 RCX: 00007ff13af7e759 [ 113.175902][ T6549] RDX: 0000000000000038 RSI: 00000000200003c0 RDI: 0000000000000018 [ 113.183891][ T6549] RBP: 00007ff13bdcb090 R08: 0000000000000000 R09: 0000000000000000 [ 113.191889][ T6549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 113.199875][ T6549] R13: 0000000000000000 R14: 00007ff13b135f80 R15: 00007ffc0a429b28 [ 113.207873][ T6549] [ 115.802892][ T6548] netlink: 'syz.4.206': attribute type 10 has an invalid length. [ 115.828753][ T6548] team0: Port device wlan1 added [ 115.834792][ T6543] netlink: 'syz.3.205': attribute type 22 has an invalid length. [ 115.861799][ T6543] netlink: 14378 bytes leftover after parsing attributes in process `syz.3.205'. [ 115.922651][ T6578] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.217'. [ 115.969013][ T6578] netlink: 6332 bytes leftover after parsing attributes in process `syz.4.217'. [ 116.390633][ T6594] netlink: 'syz.3.223': attribute type 3 has an invalid length. [ 116.427401][ T6594] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.223'. [ 116.682637][ T6602] FAULT_INJECTION: forcing a failure. [ 116.682637][ T6602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.729309][ T6602] CPU: 1 UID: 0 PID: 6602 Comm: syz.1.226 Not tainted 6.12.0-syzkaller #0 [ 116.737937][ T6602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 116.748163][ T6602] Call Trace: [ 116.751528][ T6602] [ 116.754538][ T6602] dump_stack_lvl+0x241/0x360 [ 116.759327][ T6602] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.764629][ T6602] ? __pfx__printk+0x10/0x10 [ 116.769383][ T6602] should_fail_ex+0x3b0/0x4e0 [ 116.774169][ T6602] _copy_to_user+0x31/0xb0 [ 116.778675][ T6602] generic_map_lookup_batch+0x8f5/0xf90 [ 116.784403][ T6602] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 116.790527][ T6602] ? __fget_files+0x29/0x470 [ 116.795148][ T6602] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 116.801258][ T6602] bpf_map_do_batch+0x288/0x660 [ 116.806143][ T6602] __sys_bpf+0x654/0x810 [ 116.810413][ T6602] ? __pfx___sys_bpf+0x10/0x10 [ 116.815211][ T6602] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 116.821219][ T6602] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 116.827574][ T6602] ? do_syscall_64+0x100/0x230 [ 116.832369][ T6602] __x64_sys_bpf+0x7c/0x90 [ 116.836830][ T6602] do_syscall_64+0xf3/0x230 [ 116.841358][ T6602] ? clear_bhb_loop+0x35/0x90 [ 116.846090][ T6602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.852068][ T6602] RIP: 0033:0x7fe41497e759 [ 116.856508][ T6602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.876323][ T6602] RSP: 002b:00007fe415838038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 116.885292][ T6602] RAX: ffffffffffffffda RBX: 00007fe414b35f80 RCX: 00007fe41497e759 [ 116.893308][ T6602] RDX: 0000000000000038 RSI: 00000000200003c0 RDI: 0000000000000018 [ 116.901307][ T6602] RBP: 00007fe415838090 R08: 0000000000000000 R09: 0000000000000000 [ 116.909294][ T6602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 116.917293][ T6602] R13: 0000000000000000 R14: 00007fe414b35f80 R15: 00007fff0d8ec518 [ 116.925298][ T6602] [ 117.042693][ T6606] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.225'. [ 117.310955][ T6613] syzkaller0: entered promiscuous mode [ 117.338823][ T6613] syzkaller0: entered allmulticast mode [ 117.358110][ T6620] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.233'. [ 117.389335][ T6620] netlink: 6332 bytes leftover after parsing attributes in process `syz.4.233'. [ 118.605725][ T6651] netlink: 'syz.0.245': attribute type 3 has an invalid length. [ 118.621067][ T6651] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.245'. [ 119.597392][ T6654] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.246'. [ 119.606724][ T6654] netlink: 6332 bytes leftover after parsing attributes in process `syz.4.246'. [ 119.785959][ T6661] netlink: 'syz.2.248': attribute type 39 has an invalid length. [ 119.995913][ T6667] netlink: 'syz.4.249': attribute type 3 has an invalid length. [ 120.209114][ T6667] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.249'. [ 120.656257][ T6681] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.257'. [ 120.963180][ T6685] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.259'. [ 121.129352][ T6693] FAULT_INJECTION: forcing a failure. [ 121.129352][ T6693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.155645][ T6693] CPU: 0 UID: 0 PID: 6693 Comm: syz.3.260 Not tainted 6.12.0-syzkaller #0 [ 121.164221][ T6693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 121.174316][ T6693] Call Trace: [ 121.177615][ T6693] [ 121.180567][ T6693] dump_stack_lvl+0x241/0x360 [ 121.185287][ T6693] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.190618][ T6693] ? __pfx__printk+0x10/0x10 [ 121.195241][ T6693] should_fail_ex+0x3b0/0x4e0 [ 121.199957][ T6693] _copy_to_user+0x31/0xb0 [ 121.204388][ T6693] generic_map_lookup_batch+0x8f5/0xf90 [ 121.209969][ T6693] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 121.216050][ T6693] ? __fget_files+0x29/0x470 [ 121.220674][ T6693] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 121.226764][ T6693] bpf_map_do_batch+0x288/0x660 [ 121.231667][ T6693] __sys_bpf+0x654/0x810 [ 121.235934][ T6693] ? __pfx___sys_bpf+0x10/0x10 [ 121.240734][ T6693] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 121.246753][ T6693] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 121.253119][ T6693] ? do_syscall_64+0x100/0x230 [ 121.257916][ T6693] __x64_sys_bpf+0x7c/0x90 [ 121.262354][ T6693] do_syscall_64+0xf3/0x230 [ 121.266879][ T6693] ? clear_bhb_loop+0x35/0x90 [ 121.271582][ T6693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.277500][ T6693] RIP: 0033:0x7ff620f7e759 [ 121.281946][ T6693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.301800][ T6693] RSP: 002b:00007ff621e34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 121.310238][ T6693] RAX: ffffffffffffffda RBX: 00007ff621135f80 RCX: 00007ff620f7e759 [ 121.318313][ T6693] RDX: 0000000000000038 RSI: 00000000200003c0 RDI: 0000000000000018 [ 121.326300][ T6693] RBP: 00007ff621e34090 R08: 0000000000000000 R09: 0000000000000000 [ 121.334289][ T6693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 121.342274][ T6693] R13: 0000000000000000 R14: 00007ff621135f80 R15: 00007fffd8b7c298 [ 121.350278][ T6693] [ 121.722681][ T6706] netlink: 'syz.4.266': attribute type 3 has an invalid length. [ 121.746898][ T6706] __nla_validate_parse: 1 callbacks suppressed [ 121.758465][ T6706] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.266'. [ 122.736695][ T6740] FAULT_INJECTION: forcing a failure. [ 122.736695][ T6740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.771913][ T6740] CPU: 1 UID: 0 PID: 6740 Comm: syz.0.281 Not tainted 6.12.0-syzkaller #0 [ 122.780498][ T6740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 122.790584][ T6740] Call Trace: [ 122.793883][ T6740] [ 122.796848][ T6740] dump_stack_lvl+0x241/0x360 [ 122.801591][ T6740] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.806813][ T6740] ? __pfx__printk+0x10/0x10 [ 122.811438][ T6740] should_fail_ex+0x3b0/0x4e0 [ 122.816131][ T6740] _copy_to_user+0x31/0xb0 [ 122.820559][ T6740] generic_map_lookup_batch+0x95d/0xf90 [ 122.826130][ T6740] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 122.832212][ T6740] ? __fget_files+0x29/0x470 [ 122.836825][ T6740] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 122.842909][ T6740] bpf_map_do_batch+0x288/0x660 [ 122.847786][ T6740] __sys_bpf+0x654/0x810 [ 122.852052][ T6740] ? __pfx___sys_bpf+0x10/0x10 [ 122.856851][ T6740] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 122.862856][ T6740] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 122.869210][ T6740] ? do_syscall_64+0x100/0x230 [ 122.874012][ T6740] __x64_sys_bpf+0x7c/0x90 [ 122.878445][ T6740] do_syscall_64+0xf3/0x230 [ 122.882980][ T6740] ? clear_bhb_loop+0x35/0x90 [ 122.887689][ T6740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.893613][ T6740] RIP: 0033:0x7fee7cb7e759 [ 122.898061][ T6740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.917692][ T6740] RSP: 002b:00007fee7d9d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 122.926145][ T6740] RAX: ffffffffffffffda RBX: 00007fee7cd35f80 RCX: 00007fee7cb7e759 [ 122.934132][ T6740] RDX: 0000000000000038 RSI: 00000000200003c0 RDI: 0000000000000018 [ 122.942119][ T6740] RBP: 00007fee7d9d3090 R08: 0000000000000000 R09: 0000000000000000 [ 122.950103][ T6740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 122.958088][ T6740] R13: 0000000000000000 R14: 00007fee7cd35f80 R15: 00007ffd259f5098 [ 122.966141][ T6740] [ 122.985621][ T6743] netlink: 'syz.4.282': attribute type 10 has an invalid length. [ 123.043427][ T6743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.059322][ T6743] team0: Port device batadv0 added [ 124.160611][ T6769] FAULT_INJECTION: forcing a failure. [ 124.160611][ T6769] name failslab, interval 1, probability 0, space 0, times 1 [ 124.182333][ T6769] CPU: 1 UID: 0 PID: 6769 Comm: syz.1.292 Not tainted 6.12.0-syzkaller #0 [ 124.191009][ T6769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 124.201116][ T6769] Call Trace: [ 124.204431][ T6769] [ 124.207400][ T6769] dump_stack_lvl+0x241/0x360 [ 124.212138][ T6769] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.217394][ T6769] ? __pfx__printk+0x10/0x10 [ 124.222041][ T6769] ? __kmalloc_noprof+0xb0/0x400 [ 124.227025][ T6769] ? __pfx___might_resched+0x10/0x10 [ 124.232354][ T6769] should_fail_ex+0x3b0/0x4e0 [ 124.237065][ T6769] ? kernfs_fop_write_iter+0x15a/0x500 [ 124.242557][ T6769] should_failslab+0xac/0x100 [ 124.247264][ T6769] ? kernfs_fop_write_iter+0x15a/0x500 [ 124.252750][ T6769] __kmalloc_noprof+0xd8/0x400 [ 124.257556][ T6769] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 124.263480][ T6769] kernfs_fop_write_iter+0x15a/0x500 [ 124.268794][ T6769] vfs_write+0xaeb/0xd30 [ 124.273081][ T6769] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 124.278908][ T6769] ? __pfx_vfs_write+0x10/0x10 [ 124.283797][ T6769] ? fdget_pos+0x24e/0x320 [ 124.288325][ T6769] ksys_write+0x183/0x2b0 [ 124.292675][ T6769] ? __pfx_ksys_write+0x10/0x10 [ 124.297553][ T6769] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 124.303910][ T6769] ? __irq_exit_rcu+0x100/0x1c0 [ 124.308785][ T6769] ? do_syscall_64+0xb6/0x230 [ 124.313482][ T6769] do_syscall_64+0xf3/0x230 [ 124.318090][ T6769] ? clear_bhb_loop+0x35/0x90 [ 124.322791][ T6769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.328719][ T6769] RIP: 0033:0x7fe41497e759 [ 124.333152][ T6769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.352783][ T6769] RSP: 002b:00007fe415838038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 124.361216][ T6769] RAX: ffffffffffffffda RBX: 00007fe414b35f80 RCX: 00007fe41497e759 [ 124.369206][ T6769] RDX: 000000000000000a RSI: 0000000020000200 RDI: 0000000000000007 [ 124.377196][ T6769] RBP: 00007fe415838090 R08: 0000000000000000 R09: 0000000000000000 [ 124.385190][ T6769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.393175][ T6769] R13: 0000000000000000 R14: 00007fe414b35f80 R15: 00007fff0d8ec518 [ 124.401187][ T6769] [ 124.509468][ T6779] netlink: 'syz.0.293': attribute type 29 has an invalid length. [ 124.569617][ T6775] netlink: 'syz.0.293': attribute type 29 has an invalid length. [ 124.582738][ T6775] netlink: 'syz.0.293': attribute type 29 has an invalid length. [ 124.650719][ T6779] netlink: 'syz.0.293': attribute type 29 has an invalid length. [ 124.793935][ T6784] netlink: 132 bytes leftover after parsing attributes in process `syz.4.296'. [ 125.556462][ T6795] netlink: 'syz.4.300': attribute type 39 has an invalid length. [ 126.034709][ T6805] FAULT_INJECTION: forcing a failure. [ 126.034709][ T6805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.069142][ T6805] CPU: 1 UID: 0 PID: 6805 Comm: syz.4.305 Not tainted 6.12.0-syzkaller #0 [ 126.077727][ T6805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 126.087908][ T6805] Call Trace: [ 126.091218][ T6805] [ 126.094187][ T6805] dump_stack_lvl+0x241/0x360 [ 126.098923][ T6805] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.104185][ T6805] ? __pfx__printk+0x10/0x10 [ 126.108839][ T6805] should_fail_ex+0x3b0/0x4e0 [ 126.113601][ T6805] _copy_to_user+0x31/0xb0 [ 126.118060][ T6805] generic_map_lookup_batch+0x8f5/0xf90 [ 126.123659][ T6805] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 126.129748][ T6805] ? __fget_files+0x29/0x470 [ 126.134538][ T6805] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 126.140624][ T6805] bpf_map_do_batch+0x288/0x660 [ 126.145525][ T6805] __sys_bpf+0x654/0x810 [ 126.149788][ T6805] ? __pfx___sys_bpf+0x10/0x10 [ 126.154579][ T6805] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 126.160584][ T6805] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 126.166937][ T6805] ? do_syscall_64+0x100/0x230 [ 126.171735][ T6805] __x64_sys_bpf+0x7c/0x90 [ 126.176172][ T6805] do_syscall_64+0xf3/0x230 [ 126.180696][ T6805] ? clear_bhb_loop+0x35/0x90 [ 126.185397][ T6805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.191309][ T6805] RIP: 0033:0x7faaabb7e759 [ 126.195736][ T6805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.215356][ T6805] RSP: 002b:00007faaac9de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 126.223787][ T6805] RAX: ffffffffffffffda RBX: 00007faaabd35f80 RCX: 00007faaabb7e759 [ 126.231770][ T6805] RDX: 0000000000000038 RSI: 00000000200003c0 RDI: 0000000000000018 [ 126.239751][ T6805] RBP: 00007faaac9de090 R08: 0000000000000000 R09: 0000000000000000 [ 126.247735][ T6805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 126.255814][ T6805] R13: 0000000000000000 R14: 00007faaabd35f80 R15: 00007ffeefe565e8 [ 126.263900][ T6805] [ 126.336922][ T6812] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.307'. [ 126.346389][ T6812] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.307'. [ 127.295592][ T6831] netlink: 'syz.3.316': attribute type 39 has an invalid length. [ 127.837611][ T6842] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.320'. [ 127.846817][ T6842] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.320'. [ 128.382819][ T6864] netlink: set zone limit has 8 unknown bytes [ 129.511880][ T6882] netlink: 'syz.0.336': attribute type 39 has an invalid length. [ 129.588878][ T6884] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.337'. [ 129.603875][ T6884] netlink: 6332 bytes leftover after parsing attributes in process `syz.4.337'. [ 129.920140][ T6898] FAULT_INJECTION: forcing a failure. [ 129.920140][ T6898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.961447][ T6898] CPU: 0 UID: 0 PID: 6898 Comm: syz.2.344 Not tainted 6.12.0-syzkaller #0 [ 129.970069][ T6898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 129.980210][ T6898] Call Trace: [ 129.983565][ T6898] [ 129.986567][ T6898] dump_stack_lvl+0x241/0x360 [ 129.991346][ T6898] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.996641][ T6898] ? __pfx__printk+0x10/0x10 [ 130.001350][ T6898] ? snprintf+0xda/0x120 [ 130.005742][ T6898] should_fail_ex+0x3b0/0x4e0 [ 130.010532][ T6898] _copy_to_user+0x31/0xb0 [ 130.015044][ T6898] simple_read_from_buffer+0xca/0x150 [ 130.020536][ T6898] proc_fail_nth_read+0x1e9/0x250 [ 130.025654][ T6898] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 130.031290][ T6898] ? rw_verify_area+0x37a/0x6f0 [ 130.036229][ T6898] ? rw_verify_area+0x55e/0x6f0 [ 130.041367][ T6898] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 130.047095][ T6898] vfs_read+0x1fc/0xb70 [ 130.051354][ T6898] ? fdget_pos+0x24e/0x320 [ 130.055886][ T6898] ? __pfx_vfs_read+0x10/0x10 [ 130.060723][ T6898] ? irqentry_enter+0x39/0x60 [ 130.065511][ T6898] ? __fget_files+0x3f3/0x470 [ 130.070303][ T6898] ? fdget_pos+0x24e/0x320 [ 130.074820][ T6898] ksys_read+0x183/0x2b0 [ 130.079160][ T6898] ? __pfx_ksys_read+0x10/0x10 [ 130.084015][ T6898] ? rcu_is_watching+0x15/0xb0 [ 130.088870][ T6898] ? trace_sys_enter+0x1f/0xd0 [ 130.093733][ T6898] do_syscall_64+0xf3/0x230 [ 130.098330][ T6898] ? clear_bhb_loop+0x35/0x90 [ 130.103131][ T6898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.109114][ T6898] RIP: 0033:0x7ff13af7d19c [ 130.113612][ T6898] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 130.133576][ T6898] RSP: 002b:00007ff13bdcb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 130.142089][ T6898] RAX: ffffffffffffffda RBX: 00007ff13b135f80 RCX: 00007ff13af7d19c [ 130.150236][ T6898] RDX: 000000000000000f RSI: 00007ff13bdcb0a0 RDI: 0000000000000008 [ 130.158294][ T6898] RBP: 00007ff13bdcb090 R08: 0000000000000000 R09: 0000000000000000 [ 130.166342][ T6898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.174390][ T6898] R13: 0000000000000000 R14: 00007ff13b135f80 R15: 00007ffc0a429b28 [ 130.182503][ T6898] [ 130.801823][ T6922] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.351'. [ 130.839207][ T6922] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.351'. [ 131.504242][ T6924] netlink: 'syz.0.352': attribute type 39 has an invalid length. [ 132.059980][ T6953] netlink: 'syz.3.364': attribute type 3 has an invalid length. [ 132.117287][ T6953] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.364'. [ 132.168840][ T6956] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.366'. [ 132.184398][ T6956] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.366'. [ 132.959011][ T6975] netlink: 'syz.4.373': attribute type 39 has an invalid length. [ 133.030014][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.036489][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.727831][ T6997] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.381'. [ 133.737664][ T6997] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.381'. [ 134.106057][ T7009] netlink: 'syz.2.385': attribute type 3 has an invalid length. [ 134.129702][ T7009] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.385'. [ 134.162212][ T7011] netlink: 'syz.3.387': attribute type 39 has an invalid length. [ 134.677641][ T7032] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.395'. [ 134.697253][ T7032] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.395'. [ 134.971333][ T7041] netlink: 'syz.4.400': attribute type 10 has an invalid length. [ 135.059815][ T7041] team0: Port device netdevsim0 added [ 135.343101][ T7057] netlink: 'syz.3.402': attribute type 3 has an invalid length. [ 135.394763][ T7057] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.402'. [ 135.406181][ T7059] FAULT_INJECTION: forcing a failure. [ 135.406181][ T7059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.442970][ T7052] netlink: 'syz.2.403': attribute type 39 has an invalid length. [ 135.457483][ T7059] CPU: 0 UID: 0 PID: 7059 Comm: syz.1.404 Not tainted 6.12.0-syzkaller #0 [ 135.466064][ T7059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 135.476153][ T7059] Call Trace: [ 135.479492][ T7059] [ 135.482439][ T7059] dump_stack_lvl+0x241/0x360 [ 135.487153][ T7059] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.492463][ T7059] ? __pfx__printk+0x10/0x10 [ 135.497093][ T7059] should_fail_ex+0x3b0/0x4e0 [ 135.501809][ T7059] _copy_to_user+0x31/0xb0 [ 135.506246][ T7059] generic_map_lookup_batch+0x95d/0xf90 [ 135.511832][ T7059] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 135.517915][ T7059] ? __fget_files+0x29/0x470 [ 135.522530][ T7059] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 135.528705][ T7059] bpf_map_do_batch+0x288/0x660 [ 135.533587][ T7059] __sys_bpf+0x654/0x810 [ 135.537853][ T7059] ? __pfx___sys_bpf+0x10/0x10 [ 135.542649][ T7059] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 135.548657][ T7059] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 135.555012][ T7059] ? do_syscall_64+0x100/0x230 [ 135.559829][ T7059] __x64_sys_bpf+0x7c/0x90 [ 135.564267][ T7059] do_syscall_64+0xf3/0x230 [ 135.568811][ T7059] ? clear_bhb_loop+0x35/0x90 [ 135.573525][ T7059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.579451][ T7059] RIP: 0033:0x7fe41497e759 [ 135.583887][ T7059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.603530][ T7059] RSP: 002b:00007fe415838038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 135.612063][ T7059] RAX: ffffffffffffffda RBX: 00007fe414b35f80 RCX: 00007fe41497e759 [ 135.620318][ T7059] RDX: 0000000000000038 RSI: 00000000200003c0 RDI: 0000000000000018 [ 135.628314][ T7059] RBP: 00007fe415838090 R08: 0000000000000000 R09: 0000000000000000 [ 135.636517][ T7059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 135.644506][ T7059] R13: 0000000000000000 R14: 00007fe414b35f80 R15: 00007fff0d8ec518 [ 135.652509][ T7059] [ 136.000480][ T7071] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.408'. [ 136.068701][ T7071] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.408'. [ 136.618832][ T7078] syz.3.411 (7078) used greatest stack depth: 16672 bytes left [ 136.914139][ T7095] netlink: 'syz.0.418': attribute type 3 has an invalid length. [ 136.940922][ T7095] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.418'. [ 136.959902][ T7101] netlink: 'syz.4.419': attribute type 39 has an invalid length. [ 137.135946][ T7104] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.421'. [ 138.103435][ T7131] netlink: 'syz.2.433': attribute type 3 has an invalid length. [ 138.104280][ T7129] netlink: 'syz.0.432': attribute type 39 has an invalid length. [ 138.990506][ T7165] __nla_validate_parse: 6 callbacks suppressed [ 138.990534][ T7165] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.446'. [ 139.670298][ T7188] warning: `syz.1.454' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 139.851673][ T7197] netlink: 'syz.3.457': attribute type 3 has an invalid length. [ 139.860101][ T7197] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.457'. [ 140.074230][ T7207] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.460'. [ 140.602676][ T7218] netlink: 'syz.3.466': attribute type 39 has an invalid length. [ 141.104389][ T7242] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.475'. [ 141.373246][ T7245] netlink: 'syz.1.476': attribute type 3 has an invalid length. [ 141.382740][ T7245] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.476'. [ 141.626723][ T7256] netlink: 'syz.3.482': attribute type 39 has an invalid length. [ 142.029187][ T7274] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.488'. [ 142.193214][ T7281] netlink: 'syz.3.490': attribute type 3 has an invalid length. [ 142.207408][ T7281] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.490'. [ 142.425979][ T7283] netlink: 'syz.4.495': attribute type 39 has an invalid length. [ 142.980548][ T7313] FAULT_INJECTION: forcing a failure. [ 142.980548][ T7313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.017658][ T7313] CPU: 1 UID: 0 PID: 7313 Comm: syz.2.503 Not tainted 6.12.0-syzkaller #0 [ 143.026248][ T7313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 143.036358][ T7313] Call Trace: [ 143.039680][ T7313] [ 143.042654][ T7313] dump_stack_lvl+0x241/0x360 [ 143.047394][ T7313] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.052651][ T7313] ? __pfx__printk+0x10/0x10 [ 143.057298][ T7313] ? __pfx_lock_release+0x10/0x10 [ 143.062403][ T7313] should_fail_ex+0x3b0/0x4e0 [ 143.067140][ T7313] _copy_from_user+0x2f/0xc0 [ 143.071778][ T7313] __sys_bpf+0x1a4/0x810 [ 143.076077][ T7313] ? __pfx___sys_bpf+0x10/0x10 [ 143.080903][ T7313] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 143.086956][ T7313] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 143.093366][ T7313] ? do_syscall_64+0x100/0x230 [ 143.098205][ T7313] __x64_sys_bpf+0x7c/0x90 [ 143.102678][ T7313] do_syscall_64+0xf3/0x230 [ 143.107237][ T7313] ? clear_bhb_loop+0x35/0x90 [ 143.111973][ T7313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.117932][ T7313] RIP: 0033:0x7ff13af7e759 [ 143.122398][ T7313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.142049][ T7313] RSP: 002b:00007ff13bdcb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 143.150491][ T7313] RAX: ffffffffffffffda RBX: 00007ff13b135f80 RCX: 00007ff13af7e759 [ 143.158481][ T7313] RDX: 0000000000000050 RSI: 00000000200000c0 RDI: 000000000000000a [ 143.166564][ T7313] RBP: 00007ff13bdcb090 R08: 0000000000000000 R09: 0000000000000000 [ 143.174563][ T7313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.182566][ T7313] R13: 0000000000000000 R14: 00007ff13b135f80 R15: 00007ffc0a429b28 [ 143.190587][ T7313] [ 143.261582][ T7322] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.505'. [ 144.736827][ T7346] FAULT_INJECTION: forcing a failure. [ 144.736827][ T7346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.767402][ T7346] CPU: 0 UID: 0 PID: 7346 Comm: syz.1.514 Not tainted 6.12.0-syzkaller #0 [ 144.775992][ T7346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 144.786093][ T7346] Call Trace: [ 144.789395][ T7346] [ 144.792348][ T7346] dump_stack_lvl+0x241/0x360 [ 144.797057][ T7346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.802290][ T7346] ? __pfx__printk+0x10/0x10 [ 144.806946][ T7346] should_fail_ex+0x3b0/0x4e0 [ 144.811649][ T7346] _copy_to_user+0x31/0xb0 [ 144.816085][ T7346] generic_map_lookup_batch+0x8f5/0xf90 [ 144.821657][ T7346] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 144.827747][ T7346] ? __fget_files+0x29/0x470 [ 144.832365][ T7346] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 144.838449][ T7346] bpf_map_do_batch+0x288/0x660 [ 144.843337][ T7346] __sys_bpf+0x654/0x810 [ 144.847688][ T7346] ? __pfx___sys_bpf+0x10/0x10 [ 144.852492][ T7346] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 144.858498][ T7346] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 144.864913][ T7346] ? do_syscall_64+0x100/0x230 [ 144.869703][ T7346] __x64_sys_bpf+0x7c/0x90 [ 144.874135][ T7346] do_syscall_64+0xf3/0x230 [ 144.878665][ T7346] ? clear_bhb_loop+0x35/0x90 [ 144.883373][ T7346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.889287][ T7346] RIP: 0033:0x7fe41497e759 [ 144.893718][ T7346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.913349][ T7346] RSP: 002b:00007fe415838038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 144.921828][ T7346] RAX: ffffffffffffffda RBX: 00007fe414b35f80 RCX: 00007fe41497e759 [ 144.929845][ T7346] RDX: 0000000000000038 RSI: 00000000200003c0 RDI: 0000000000000018 [ 144.937920][ T7346] RBP: 00007fe415838090 R08: 0000000000000000 R09: 0000000000000000 [ 144.945913][ T7346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.953924][ T7346] R13: 0000000000000000 R14: 00007fe414b35f80 R15: 00007fff0d8ec518 [ 144.961947][ T7346] [ 146.023009][ T7366] syzkaller0: entered promiscuous mode [ 146.039406][ T7366] syzkaller0: entered allmulticast mode [ 146.343025][ T7376] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.521'. [ 149.203888][ T7419] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.538'. [ 149.515235][ T7432] netlink: 2227 bytes leftover after parsing attributes in process `syz.2.542'. [ 150.159202][ T7459] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.551'. [ 152.488645][ T7496] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.562'. [ 152.859803][ T7506] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.567'. [ 152.901305][ T7506] openvswitch: netlink: Flow key attribute not present in set flow. [ 154.166033][ T7535] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.576'. [ 154.782929][ T7544] netlink: 'syz.1.580': attribute type 21 has an invalid length. [ 154.812210][ T7544] netlink: 'syz.1.580': attribute type 1 has an invalid length. [ 154.862458][ T7544] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.580'. [ 154.890349][ T7544] netlink: 183228 bytes leftover after parsing attributes in process `syz.1.580'. [ 155.706122][ T7560] netlink: 'syz.1.585': attribute type 3 has an invalid length. [ 155.720629][ T7560] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.585'. [ 156.883266][ T7577] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.590'. [ 157.140241][ T7584] netlink: 'syz.3.595': attribute type 29 has an invalid length. [ 157.158503][ T7584] netlink: 'syz.3.595': attribute type 29 has an invalid length. [ 157.244602][ T7585] netlink: 'syz.3.595': attribute type 46 has an invalid length. [ 158.534089][ T7599] netlink: 180 bytes leftover after parsing attributes in process `syz.0.599'. [ 158.903128][ T7611] netlink: 'syz.0.605': attribute type 21 has an invalid length. [ 158.917366][ T7611] netlink: 'syz.0.605': attribute type 1 has an invalid length. [ 158.947384][ T7611] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.605'. [ 158.967234][ T7611] netlink: 183228 bytes leftover after parsing attributes in process `syz.0.605'. [ 159.003152][ T7614] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.606'. [ 159.175106][ T7626] FAULT_INJECTION: forcing a failure. [ 159.175106][ T7626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.188992][ T7626] CPU: 0 UID: 0 PID: 7626 Comm: syz.0.611 Not tainted 6.12.0-syzkaller #0 [ 159.197555][ T7626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 159.207701][ T7626] Call Trace: [ 159.211050][ T7626] [ 159.214028][ T7626] dump_stack_lvl+0x241/0x360 [ 159.218760][ T7626] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.224099][ T7626] ? __pfx__printk+0x10/0x10 [ 159.228762][ T7626] should_fail_ex+0x3b0/0x4e0 [ 159.233588][ T7626] _copy_to_user+0x31/0xb0 [ 159.238047][ T7626] bpf_test_finish+0x212/0x890 [ 159.242875][ T7626] ? __pfx_bpf_test_finish+0x10/0x10 [ 159.248232][ T7626] ? _copy_from_user+0x99/0xc0 [ 159.253049][ T7626] ? bpf_test_init+0x15a/0x180 [ 159.257872][ T7626] bpf_prog_test_run_xdp+0x8f4/0x11e0 [ 159.263304][ T7626] ? __pfx_lock_release+0x10/0x10 [ 159.268421][ T7626] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 159.274286][ T7626] ? __fget_files+0x29/0x470 [ 159.278937][ T7626] ? fput+0x1a8/0x230 [ 159.282971][ T7626] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 159.288842][ T7626] bpf_prog_test_run+0x2e4/0x360 [ 159.293831][ T7626] __sys_bpf+0x48d/0x810 [ 159.298125][ T7626] ? __pfx___sys_bpf+0x10/0x10 [ 159.302951][ T7626] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 159.309014][ T7626] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 159.315366][ T7626] ? do_syscall_64+0x100/0x230 [ 159.320152][ T7626] __x64_sys_bpf+0x7c/0x90 [ 159.324585][ T7626] do_syscall_64+0xf3/0x230 [ 159.329111][ T7626] ? clear_bhb_loop+0x35/0x90 [ 159.333811][ T7626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.339746][ T7626] RIP: 0033:0x7fee7cb7e759 [ 159.344210][ T7626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.363843][ T7626] RSP: 002b:00007fee7d9d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 159.372302][ T7626] RAX: ffffffffffffffda RBX: 00007fee7cd35f80 RCX: 00007fee7cb7e759 [ 159.380387][ T7626] RDX: 0000000000000050 RSI: 00000000200000c0 RDI: 000000000000000a [ 159.388376][ T7626] RBP: 00007fee7d9d3090 R08: 0000000000000000 R09: 0000000000000000 [ 159.396359][ T7626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.404343][ T7626] R13: 0000000000000000 R14: 00007fee7cd35f80 R15: 00007ffd259f5098 [ 159.412350][ T7626] [ 159.909291][ T7648] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.619'. [ 160.661978][ T7666] netlink: 'syz.3.622': attribute type 3 has an invalid length. [ 160.672080][ T7666] netlink: 196520 bytes leftover after parsing attributes in process `syz.3.622'. [ 160.886765][ T7675] netlink: 180 bytes leftover after parsing attributes in process `syz.0.629'. [ 160.973973][ T7677] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.630'. [ 161.188797][ T7680] netlink: 180 bytes leftover after parsing attributes in process `syz.4.631'. [ 162.073241][ T7689] FAULT_INJECTION: forcing a failure. [ 162.073241][ T7689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.119955][ T7689] CPU: 1 UID: 0 PID: 7689 Comm: syz.2.635 Not tainted 6.12.0-syzkaller #0 [ 162.128557][ T7689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 162.138661][ T7689] Call Trace: [ 162.141988][ T7689] [ 162.144959][ T7689] dump_stack_lvl+0x241/0x360 [ 162.149696][ T7689] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.154958][ T7689] ? __pfx__printk+0x10/0x10 [ 162.159692][ T7689] ? snprintf+0xda/0x120 [ 162.163992][ T7689] should_fail_ex+0x3b0/0x4e0 [ 162.168712][ T7689] _copy_to_user+0x31/0xb0 [ 162.173173][ T7689] simple_read_from_buffer+0xca/0x150 [ 162.178580][ T7689] proc_fail_nth_read+0x1e9/0x250 [ 162.183650][ T7689] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.189248][ T7689] ? rw_verify_area+0x55e/0x6f0 [ 162.194127][ T7689] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.199715][ T7689] vfs_read+0x1fc/0xb70 [ 162.203887][ T7689] ? fdget_pos+0x24e/0x320 [ 162.208319][ T7689] ? __pfx_vfs_read+0x10/0x10 [ 162.213012][ T7689] ? __fget_files+0x3f3/0x470 [ 162.217709][ T7689] ? fdget_pos+0x24e/0x320 [ 162.222142][ T7689] ksys_read+0x183/0x2b0 [ 162.226396][ T7689] ? __pfx_ksys_read+0x10/0x10 [ 162.231263][ T7689] ? do_syscall_64+0x100/0x230 [ 162.236045][ T7689] ? do_syscall_64+0xb6/0x230 [ 162.240744][ T7689] do_syscall_64+0xf3/0x230 [ 162.245268][ T7689] ? clear_bhb_loop+0x35/0x90 [ 162.249968][ T7689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.255879][ T7689] RIP: 0033:0x7ff13af7d19c [ 162.260310][ T7689] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 162.279929][ T7689] RSP: 002b:00007ff13bdcb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 162.288365][ T7689] RAX: ffffffffffffffda RBX: 00007ff13b135f80 RCX: 00007ff13af7d19c [ 162.296348][ T7689] RDX: 000000000000000f RSI: 00007ff13bdcb0a0 RDI: 0000000000000005 [ 162.304334][ T7689] RBP: 00007ff13bdcb090 R08: 0000000000000000 R09: 0000000000000000 [ 162.312340][ T7689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.320327][ T7689] R13: 0000000000000000 R14: 00007ff13b135f80 R15: 00007ffc0a429b28 [ 162.328331][ T7689] [ 162.594659][ T7706] netlink: 'syz.1.643': attribute type 3 has an invalid length. [ 162.627424][ T7706] netlink: 132 bytes leftover after parsing attributes in process `syz.1.643'. [ 162.902646][ T7709] syzkaller0: entered promiscuous mode [ 162.947681][ T7709] syzkaller0: entered allmulticast mode [ 166.032510][ T7729] __nla_validate_parse: 1 callbacks suppressed [ 166.032534][ T7729] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.651'. [ 166.388650][ T7750] netlink: 'syz.0.656': attribute type 3 has an invalid length. [ 166.396667][ T7750] netlink: 132 bytes leftover after parsing attributes in process `syz.0.656'. [ 166.438026][ T7749] netlink: 180 bytes leftover after parsing attributes in process `syz.1.658'. [ 166.881587][ T7760] netlink: 204732 bytes leftover after parsing attributes in process `syz.0.662'. [ 167.186893][ T7764] netlink: 'syz.4.665': attribute type 33 has an invalid length. [ 167.242780][ T7764] netlink: 164 bytes leftover after parsing attributes in process `syz.4.665'. [ 167.572605][ T7775] syzkaller0: entered promiscuous mode [ 167.589001][ T7775] syzkaller0: entered allmulticast mode [ 167.636196][ T7783] netlink: 'syz.1.672': attribute type 3 has an invalid length. [ 167.657689][ T7783] netlink: 132 bytes leftover after parsing attributes in process `syz.1.672'. [ 168.745260][ T7794] netlink: 204732 bytes leftover after parsing attributes in process `syz.3.677'. [ 170.580591][ T7792] netlink: 'syz.4.676': attribute type 39 has an invalid length. [ 170.816497][ T7805] netlink: 'syz.4.682': attribute type 10 has an invalid length. [ 170.844434][ T7805] netlink: 'syz.4.682': attribute type 10 has an invalid length. [ 170.885342][ T7805] team0: Port device netdevsim0 removed [ 170.902543][ T7805] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 170.913882][ T7807] netlink: 'syz.4.682': attribute type 10 has an invalid length. [ 170.944183][ T7809] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.680'. [ 171.137935][ T7822] netlink: 180 bytes leftover after parsing attributes in process `syz.3.688'. [ 171.476713][ T7834] netlink: 204732 bytes leftover after parsing attributes in process `syz.1.693'. [ 171.764993][ T7843] netlink: 'syz.0.694': attribute type 3 has an invalid length. [ 171.773410][ T7843] netlink: 132 bytes leftover after parsing attributes in process `syz.0.694'. [ 172.018519][ T7837] syzkaller0: entered promiscuous mode [ 172.024102][ T7837] syzkaller0: entered allmulticast mode [ 174.383087][ T7886] netlink: 204732 bytes leftover after parsing attributes in process `syz.0.708'. [ 175.523213][ T7857] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.698'. [ 175.532897][ T7869] netlink: 180 bytes leftover after parsing attributes in process `syz.3.703'. [ 175.654764][ T7889] netlink: 'syz.0.710': attribute type 3 has an invalid length. [ 175.663078][ T7889] netlink: 132 bytes leftover after parsing attributes in process `syz.0.710'. [ 175.942594][ T7895] syzkaller0: entered promiscuous mode [ 175.949682][ T7895] syzkaller0: entered allmulticast mode [ 175.962348][ T7896] FAULT_INJECTION: forcing a failure. [ 175.962348][ T7896] name failslab, interval 1, probability 0, space 0, times 0 [ 175.984769][ T7896] CPU: 1 UID: 0 PID: 7896 Comm: syz.3.714 Not tainted 6.12.0-syzkaller #0 [ 175.993358][ T7896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 176.003460][ T7896] Call Trace: [ 176.006767][ T7896] [ 176.009754][ T7896] dump_stack_lvl+0x241/0x360 [ 176.014480][ T7896] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.019722][ T7896] ? __pfx__printk+0x10/0x10 [ 176.024361][ T7896] ? fs_reclaim_acquire+0x93/0x130 [ 176.029509][ T7896] ? __pfx___might_resched+0x10/0x10 [ 176.034959][ T7896] should_fail_ex+0x3b0/0x4e0 [ 176.039705][ T7896] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 176.045473][ T7896] should_failslab+0xac/0x100 [ 176.050194][ T7896] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 176.055959][ T7896] __kmalloc_noprof+0xd8/0x400 [ 176.060794][ T7896] tomoyo_realpath_from_path+0xcf/0x5e0 [ 176.066408][ T7896] tomoyo_path_number_perm+0x23a/0x880 [ 176.071917][ T7896] ? tomoyo_path_number_perm+0x208/0x880 [ 176.077594][ T7896] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 176.083680][ T7896] ? __fget_files+0x29/0x470 [ 176.088329][ T7896] ? __fget_files+0x3f3/0x470 [ 176.093066][ T7896] security_file_ioctl+0xc6/0x2a0 [ 176.098145][ T7896] __se_sys_ioctl+0x47/0x170 [ 176.102822][ T7896] do_syscall_64+0xf3/0x230 [ 176.107373][ T7896] ? clear_bhb_loop+0x35/0x90 [ 176.112099][ T7896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.118058][ T7896] RIP: 0033:0x7ff620f7e759 [ 176.122536][ T7896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.142258][ T7896] RSP: 002b:00007ff621e34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.150719][ T7896] RAX: ffffffffffffffda RBX: 00007ff621135f80 RCX: 00007ff620f7e759 [ 176.158798][ T7896] RDX: 00000000200005c0 RSI: 0000000000008903 RDI: 0000000000000006 [ 176.166910][ T7896] RBP: 00007ff621e34090 R08: 0000000000000000 R09: 0000000000000000 [ 176.174991][ T7896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.182989][ T7896] R13: 0000000000000000 R14: 00007ff621135f80 R15: 00007fffd8b7c298 [ 176.191016][ T7896] [ 176.195629][ T7896] ERROR: Out of memory at tomoyo_realpath_from_path. [ 176.304633][ T7901] FAULT_INJECTION: forcing a failure. [ 176.304633][ T7901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.328283][ T7901] CPU: 0 UID: 0 PID: 7901 Comm: syz.4.716 Not tainted 6.12.0-syzkaller #0 [ 176.336865][ T7901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 176.346964][ T7901] Call Trace: [ 176.350286][ T7901] [ 176.353253][ T7901] dump_stack_lvl+0x241/0x360 [ 176.357984][ T7901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.363243][ T7901] ? __pfx__printk+0x10/0x10 [ 176.367898][ T7901] should_fail_ex+0x3b0/0x4e0 [ 176.372629][ T7901] _copy_to_user+0x31/0xb0 [ 176.377090][ T7901] generic_map_lookup_batch+0x8f5/0xf90 [ 176.382702][ T7901] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 176.388819][ T7901] ? __fget_files+0x29/0x470 [ 176.393506][ T7901] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 176.399620][ T7901] bpf_map_do_batch+0x288/0x660 [ 176.404526][ T7901] __sys_bpf+0x654/0x810 [ 176.408814][ T7901] ? __pfx___sys_bpf+0x10/0x10 [ 176.413637][ T7901] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 176.419679][ T7901] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 176.426063][ T7901] ? do_syscall_64+0x100/0x230 [ 176.430878][ T7901] __x64_sys_bpf+0x7c/0x90 [ 176.435340][ T7901] do_syscall_64+0xf3/0x230 [ 176.439891][ T7901] ? clear_bhb_loop+0x35/0x90 [ 176.444709][ T7901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.450658][ T7901] RIP: 0033:0x7faaabb7e759 [ 176.455113][ T7901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.474765][ T7901] RSP: 002b:00007faaac9de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 176.483223][ T7901] RAX: ffffffffffffffda RBX: 00007faaabd35f80 RCX: 00007faaabb7e759 [ 176.491214][ T7901] RDX: 0000000000000038 RSI: 00000000200003c0 RDI: 0000000000000018 [ 176.499197][ T7901] RBP: 00007faaac9de090 R08: 0000000000000000 R09: 0000000000000000 [ 176.507179][ T7901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 176.515157][ T7901] R13: 0000000000000000 R14: 00007faaabd35f80 R15: 00007ffeefe565e8 [ 176.523177][ T7901] [ 176.769171][ T7909] netlink: 'syz.0.719': attribute type 3 has an invalid length. [ 176.776896][ T7909] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.719'. [ 176.911116][ T7920] syzkaller0: entered promiscuous mode [ 176.918771][ T7920] syzkaller0: entered allmulticast mode [ 177.070724][ T7926] netlink: 204732 bytes leftover after parsing attributes in process `syz.3.723'. [ 178.303660][ T7937] netlink: 'syz.4.727': attribute type 3 has an invalid length. [ 178.315083][ T7937] netlink: 132 bytes leftover after parsing attributes in process `syz.4.727'. [ 179.572947][ T7930] netlink: 180 bytes leftover after parsing attributes in process `syz.0.724'. [ 179.582736][ T7933] netlink: 'syz.1.725': attribute type 39 has an invalid length. [ 179.879392][ T7946] netlink: 'syz.2.732': attribute type 3 has an invalid length. [ 179.889212][ T7946] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.732'. [ 180.226683][ T7962] FAULT_INJECTION: forcing a failure. [ 180.226683][ T7962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.247207][ T7962] CPU: 1 UID: 0 PID: 7962 Comm: syz.1.737 Not tainted 6.12.0-syzkaller #0 [ 180.255962][ T7962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 180.266067][ T7962] Call Trace: [ 180.269389][ T7962] [ 180.272354][ T7962] dump_stack_lvl+0x241/0x360 [ 180.277081][ T7962] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.282325][ T7962] ? __pfx__printk+0x10/0x10 [ 180.286981][ T7962] should_fail_ex+0x3b0/0x4e0 [ 180.291711][ T7962] _copy_to_user+0x31/0xb0 [ 180.296163][ T7962] generic_map_lookup_batch+0x95d/0xf90 [ 180.301769][ T7962] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 180.307869][ T7962] ? __fget_files+0x29/0x470 [ 180.312502][ T7962] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 180.318605][ T7962] bpf_map_do_batch+0x288/0x660 [ 180.323502][ T7962] __sys_bpf+0x654/0x810 [ 180.327784][ T7962] ? __pfx___sys_bpf+0x10/0x10 [ 180.332597][ T7962] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 180.338631][ T7962] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 180.345018][ T7962] ? do_syscall_64+0x100/0x230 [ 180.349834][ T7962] __x64_sys_bpf+0x7c/0x90 [ 180.354296][ T7962] do_syscall_64+0xf3/0x230 [ 180.358844][ T7962] ? clear_bhb_loop+0x35/0x90 [ 180.363572][ T7962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.369511][ T7962] RIP: 0033:0x7fe41497e759 [ 180.373963][ T7962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.393612][ T7962] RSP: 002b:00007fe415838038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 180.402078][ T7962] RAX: ffffffffffffffda RBX: 00007fe414b35f80 RCX: 00007fe41497e759 [ 180.410258][ T7962] RDX: 0000000000000038 RSI: 00000000200003c0 RDI: 0000000000000018 [ 180.418258][ T7962] RBP: 00007fe415838090 R08: 0000000000000000 R09: 0000000000000000 [ 180.426346][ T7962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 180.434433][ T7962] R13: 0000000000000000 R14: 00007fe414b35f80 R15: 00007fff0d8ec518 [ 180.442474][ T7962] [ 180.525937][ T7965] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.739'. [ 180.621645][ T7970] netlink: 'syz.3.741': attribute type 3 has an invalid length. [ 180.630356][ T7970] netlink: 132 bytes leftover after parsing attributes in process `syz.3.741'. [ 180.712684][ T7968] netlink: 204732 bytes leftover after parsing attributes in process `syz.1.740'. [ 180.986667][ T7972] netlink: 180 bytes leftover after parsing attributes in process `syz.4.742'. [ 181.315365][ T7982] netlink: 204732 bytes leftover after parsing attributes in process `syz.4.748'. [ 181.782044][ T7995] FAULT_INJECTION: forcing a failure. [ 181.782044][ T7995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.831667][ T7995] CPU: 1 UID: 0 PID: 7995 Comm: syz.0.751 Not tainted 6.12.0-syzkaller #0 [ 181.840273][ T7995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 181.850416][ T7995] Call Trace: [ 181.853754][ T7995] [ 181.856734][ T7995] dump_stack_lvl+0x241/0x360 [ 181.861511][ T7995] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.866788][ T7995] ? __pfx__printk+0x10/0x10 [ 181.871458][ T7995] ? snprintf+0xda/0x120 [ 181.875787][ T7995] should_fail_ex+0x3b0/0x4e0 [ 181.880545][ T7995] _copy_to_user+0x31/0xb0 [ 181.885045][ T7995] simple_read_from_buffer+0xca/0x150 [ 181.890519][ T7995] proc_fail_nth_read+0x1e9/0x250 [ 181.895607][ T7995] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 181.901206][ T7995] ? rw_verify_area+0x55e/0x6f0 [ 181.906093][ T7995] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 181.911671][ T7995] vfs_read+0x1fc/0xb70 [ 181.915868][ T7995] ? fdget_pos+0x24e/0x320 [ 181.920307][ T7995] ? __pfx_vfs_read+0x10/0x10 [ 181.925010][ T7995] ? lockdep_hardirqs_on+0x99/0x150 [ 181.930245][ T7995] ? __fget_files+0x3f3/0x470 [ 181.934959][ T7995] ? fdget_pos+0x24e/0x320 [ 181.939416][ T7995] ksys_read+0x183/0x2b0 [ 181.943684][ T7995] ? __pfx_ksys_read+0x10/0x10 [ 181.948469][ T7995] ? do_syscall_64+0x100/0x230 [ 181.953262][ T7995] ? do_syscall_64+0xb6/0x230 [ 181.957968][ T7995] do_syscall_64+0xf3/0x230 [ 181.962532][ T7995] ? clear_bhb_loop+0x35/0x90 [ 181.967266][ T7995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.973203][ T7995] RIP: 0033:0x7fee7cb7d19c [ 181.977669][ T7995] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 181.997310][ T7995] RSP: 002b:00007fee7d9d3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 182.005755][ T7995] RAX: ffffffffffffffda RBX: 00007fee7cd35f80 RCX: 00007fee7cb7d19c [ 182.013747][ T7995] RDX: 000000000000000f RSI: 00007fee7d9d30a0 RDI: 0000000000000007 [ 182.021738][ T7995] RBP: 00007fee7d9d3090 R08: 0000000000000000 R09: 0000000000000000 [ 182.029733][ T7995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.037724][ T7995] R13: 0000000000000000 R14: 00007fee7cd35f80 R15: 00007ffd259f5098 [ 182.045741][ T7995] [ 182.087435][ T7996] __nla_validate_parse: 1 callbacks suppressed [ 182.087457][ T7996] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.752'. [ 182.143784][ T7998] netlink: 204732 bytes leftover after parsing attributes in process `syz.2.755'. [ 182.409893][ T8003] netlink: 'syz.0.756': attribute type 3 has an invalid length. [ 182.456942][ T8003] netlink: 132 bytes leftover after parsing attributes in process `syz.0.756'. [ 182.688346][ T8006] GPL: entered promiscuous mode [ 182.850773][ T8012] netlink: 180 bytes leftover after parsing attributes in process `syz.2.759'. [ 182.866030][ T8013] netlink: 'syz.4.758': attribute type 3 has an invalid length. [ 182.939184][ T8013] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.758'. [ 183.973750][ T8029] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.767'. [ 184.368373][ T8045] netlink: 180 bytes leftover after parsing attributes in process `syz.2.771'. [ 184.505940][ T8052] FAULT_INJECTION: forcing a failure. [ 184.505940][ T8052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.545516][ T8052] CPU: 1 UID: 0 PID: 8052 Comm: syz.0.774 Not tainted 6.12.0-syzkaller #0 [ 184.554095][ T8052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 184.564188][ T8052] Call Trace: [ 184.567492][ T8052] [ 184.570438][ T8052] dump_stack_lvl+0x241/0x360 [ 184.575576][ T8052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.580795][ T8052] ? __pfx__printk+0x10/0x10 [ 184.585417][ T8052] should_fail_ex+0x3b0/0x4e0 [ 184.590208][ T8052] _copy_to_user+0x31/0xb0 [ 184.594643][ T8052] generic_map_lookup_batch+0x8f5/0xf90 [ 184.600222][ T8052] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 184.606302][ T8052] ? __fget_files+0x29/0x470 [ 184.610924][ T8052] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 184.617005][ T8052] bpf_map_do_batch+0x288/0x660 [ 184.621881][ T8052] __sys_bpf+0x654/0x810 [ 184.626170][ T8052] ? __pfx___sys_bpf+0x10/0x10 [ 184.630966][ T8052] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 184.637248][ T8052] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 184.643621][ T8052] ? do_syscall_64+0x100/0x230 [ 184.648418][ T8052] __x64_sys_bpf+0x7c/0x90 [ 184.652858][ T8052] do_syscall_64+0xf3/0x230 [ 184.657386][ T8052] ? clear_bhb_loop+0x35/0x90 [ 184.662089][ T8052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.668004][ T8052] RIP: 0033:0x7fee7cb7e759 [ 184.672438][ T8052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.692069][ T8052] RSP: 002b:00007fee7d9d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 184.700508][ T8052] RAX: ffffffffffffffda RBX: 00007fee7cd35f80 RCX: 00007fee7cb7e759 [ 184.708511][ T8052] RDX: 0000000000000038 RSI: 00000000200003c0 RDI: 0000000000000018 [ 184.716603][ T8052] RBP: 00007fee7d9d3090 R08: 0000000000000000 R09: 0000000000000000 [ 184.724595][ T8052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 184.732590][ T8052] R13: 0000000000000000 R14: 00007fee7cd35f80 R15: 00007ffd259f5098 [ 184.740601][ T8052] [ 184.775386][ T8056] netlink: 'syz.3.775': attribute type 3 has an invalid length. [ 184.794439][ T8056] netlink: 132 bytes leftover after parsing attributes in process `syz.3.775'. [ 186.039954][ T8080] netlink: 204732 bytes leftover after parsing attributes in process `syz.4.783'. [ 186.565233][ T8100] netlink: 'syz.4.789': attribute type 3 has an invalid length. [ 186.825351][ T8104] FAULT_INJECTION: forcing a failure. [ 186.825351][ T8104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.854076][ T8104] CPU: 0 UID: 0 PID: 8104 Comm: syz.1.794 Not tainted 6.12.0-syzkaller #0 [ 186.862698][ T8104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 186.872834][ T8104] Call Trace: [ 186.876183][ T8104] [ 186.879183][ T8104] dump_stack_lvl+0x241/0x360 [ 186.883969][ T8104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.889259][ T8104] ? __pfx__printk+0x10/0x10 [ 186.894007][ T8104] should_fail_ex+0x3b0/0x4e0 [ 186.898779][ T8104] _copy_to_user+0x31/0xb0 [ 186.903282][ T8104] generic_map_lookup_batch+0x95d/0xf90 [ 186.908975][ T8104] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 186.915108][ T8104] ? __fget_files+0x29/0x470 [ 186.919799][ T8104] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 186.925952][ T8104] bpf_map_do_batch+0x288/0x660 [ 186.930903][ T8104] __sys_bpf+0x654/0x810 [ 186.935239][ T8104] ? __pfx___sys_bpf+0x10/0x10 [ 186.940216][ T8104] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 186.946292][ T8104] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 186.952706][ T8104] ? do_syscall_64+0x100/0x230 [ 186.957586][ T8104] __x64_sys_bpf+0x7c/0x90 [ 186.962092][ T8104] do_syscall_64+0xf3/0x230 [ 186.966686][ T8104] ? clear_bhb_loop+0x35/0x90 [ 186.971460][ T8104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.977426][ T8104] RIP: 0033:0x7fe41497e759 [ 186.981914][ T8104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.001602][ T8104] RSP: 002b:00007fe415838038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 187.010101][ T8104] RAX: ffffffffffffffda RBX: 00007fe414b35f80 RCX: 00007fe41497e759 [ 187.018141][ T8104] RDX: 0000000000000038 RSI: 00000000200003c0 RDI: 0000000000000018 [ 187.026193][ T8104] RBP: 00007fe415838090 R08: 0000000000000000 R09: 0000000000000000 [ 187.034229][ T8104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 187.042264][ T8104] R13: 0000000000000000 R14: 00007fe414b35f80 R15: 00007fff0d8ec518 [ 187.050371][ T8104] [ 187.127327][ T8100] netlink: 132 bytes leftover after parsing attributes in process `syz.4.789'. [ 187.474412][ T8107] netlink: 'syz.2.788': attribute type 3 has an invalid length. [ 187.491122][ T8107] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.788'. [ 187.831286][ T8110] netlink: 64 bytes leftover after parsing attributes in process `syz.0.795'. [ 189.404486][ T8141] netlink: 'syz.4.807': attribute type 2 has an invalid length. [ 189.413958][ T8141] netlink: 'syz.4.807': attribute type 8 has an invalid length. [ 189.423469][ T8141] netlink: 132 bytes leftover after parsing attributes in process `syz.4.807'. [ 189.581724][ T8145] netlink: 'syz.2.809': attribute type 3 has an invalid length. [ 189.632161][ T8145] netlink: 132 bytes leftover after parsing attributes in process `syz.2.809'. [ 190.150100][ T8162] netlink: 15487 bytes leftover after parsing attributes in process `syz.4.816'. [ 190.173523][ T8162] netlink: 208040 bytes leftover after parsing attributes in process `syz.4.816'. [ 190.996836][ T8190] netlink: 'syz.1.825': attribute type 3 has an invalid length. [ 191.026242][ T8190] netlink: 132 bytes leftover after parsing attributes in process `syz.1.825'. [ 191.158423][ T8195] netlink: 'syz.3.827': attribute type 16 has an invalid length. [ 191.166332][ T8195] netlink: 'syz.3.827': attribute type 4 has an invalid length. [ 191.225506][ T8195] netlink: 132 bytes leftover after parsing attributes in process `syz.3.827'. [ 191.295658][ T8199] netlink: 204732 bytes leftover after parsing attributes in process `syz.0.829'. [ 193.279884][ T8230] netlink: 'syz.1.840': attribute type 3 has an invalid length. [ 193.314792][ T8230] netlink: 132 bytes leftover after parsing attributes in process `syz.1.840'. [ 193.333198][ T8234] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.842'. [ 193.379428][ T8234] netlink: 'syz.2.842': attribute type 2 has an invalid length. [ 193.398662][ T8234] tipc: Started in network mode [ 193.439822][ T8234] tipc: Node identity a, cluster identity 4711 [ 193.507586][ T8234] tipc: Node number set to 10 [ 194.270655][ T8250] netlink: 204732 bytes leftover after parsing attributes in process `syz.0.846'. [ 194.520690][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.531876][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.667878][ T8262] netlink: 'syz.0.850': attribute type 3 has an invalid length. [ 194.751652][ T8262] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.850'. [ 194.966484][ T8265] netlink: 'syz.2.853': attribute type 3 has an invalid length. [ 194.982321][ T8265] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.853'. [ 195.111512][ T8277] netlink: 'syz.4.857': attribute type 3 has an invalid length. [ 195.124368][ T8277] netlink: 132 bytes leftover after parsing attributes in process `syz.4.857'. [ 195.315735][ T8283] netlink: 'syz.3.860': attribute type 3 has an invalid length. [ 195.353535][ T8283] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.860'. [ 196.469708][ T8321] netlink: 'syz.0.876': attribute type 3 has an invalid length. [ 196.484559][ T8321] netlink: 132 bytes leftover after parsing attributes in process `syz.0.876'. [ 196.540086][ T5854] Bluetooth: hci0: command 0x0406 tx timeout [ 196.607334][ T5854] Bluetooth: hci4: command 0x0406 tx timeout [ 196.647427][ T5854] Bluetooth: hci3: command 0x0406 tx timeout [ 196.653577][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 196.706223][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 196.808785][ T8327] FAULT_INJECTION: forcing a failure. [ 196.808785][ T8327] name failslab, interval 1, probability 0, space 0, times 0 [ 196.822166][ T8327] CPU: 1 UID: 0 PID: 8327 Comm: syz.4.878 Not tainted 6.12.0-syzkaller #0 [ 196.830762][ T8327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 196.840995][ T8327] Call Trace: [ 196.844346][ T8327] [ 196.847352][ T8327] dump_stack_lvl+0x241/0x360 [ 196.852106][ T8327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.857366][ T8327] ? __pfx__printk+0x10/0x10 [ 196.862008][ T8327] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 196.868063][ T8327] ? __pfx___might_resched+0x10/0x10 [ 196.874102][ T8327] should_fail_ex+0x3b0/0x4e0 [ 196.878834][ T8327] should_failslab+0xac/0x100 [ 196.883558][ T8327] ? dup_task_struct+0x57/0x8c0 [ 196.888457][ T8327] kmem_cache_alloc_node_noprof+0x71/0x320 [ 196.894335][ T8327] dup_task_struct+0x57/0x8c0 [ 196.899058][ T8327] ? _raw_spin_unlock_irq+0x23/0x50 [ 196.904300][ T8327] ? lockdep_hardirqs_on+0x99/0x150 [ 196.909552][ T8327] copy_process+0x5d1/0x3d50 [ 196.914202][ T8327] ? get_pid_task+0x23/0x1f0 [ 196.918831][ T8327] ? __pfx_lock_release+0x10/0x10 [ 196.923911][ T8327] ? kstrtouint_from_user+0x128/0x190 [ 196.929389][ T8327] ? __pfx_copy_process+0x10/0x10 [ 196.934478][ T8327] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 196.940441][ T8327] kernel_clone+0x226/0x8f0 [ 196.945009][ T8327] ? __pfx_kernel_clone+0x10/0x10 [ 196.950217][ T8327] __x64_sys_clone+0x258/0x2a0 [ 196.955035][ T8327] ? __pfx___x64_sys_clone+0x10/0x10 [ 196.960403][ T8327] ? do_syscall_64+0x100/0x230 [ 196.965219][ T8327] ? do_syscall_64+0xb6/0x230 [ 196.969947][ T8327] do_syscall_64+0xf3/0x230 [ 196.974496][ T8327] ? clear_bhb_loop+0x35/0x90 [ 196.979232][ T8327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.985240][ T8327] RIP: 0033:0x7faaabb7e759 [ 196.989698][ T8327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.009344][ T8327] RSP: 002b:00007faaac9ddfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 197.017804][ T8327] RAX: ffffffffffffffda RBX: 00007faaabd35f80 RCX: 00007faaabb7e759 [ 197.025812][ T8327] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000820000 [ 197.033919][ T8327] RBP: 00007faaac9de090 R08: 0000000000000000 R09: 0000000000000000 [ 197.041929][ T8327] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 197.049941][ T8327] R13: 0000000000000000 R14: 00007faaabd35f80 R15: 00007ffeefe565e8 [ 197.057993][ T8327] [ 197.266766][ T8335] netlink: 'syz.2.879': attribute type 25 has an invalid length. [ 197.274967][ T8335] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.879'. [ 197.377683][ T8341] netlink: 'syz.1.881': attribute type 10 has an invalid length. [ 197.416326][ T8332] netlink: 204732 bytes leftover after parsing attributes in process `syz.4.882'. [ 197.558359][ T8341] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.615584][ T8341] bond0: (slave team0): Enslaving as an active interface with an up link [ 197.627023][ T8340] netlink: 'syz.3.883': attribute type 3 has an invalid length. [ 197.675868][ T8343] bond0: (slave team0): Releasing backup interface [ 197.741251][ T8343] bridge0: port 3(team0) entered blocking state [ 197.781234][ T8343] bridge0: port 3(team0) entered disabled state [ 197.789046][ T8343] team0: entered allmulticast mode [ 197.794365][ T8343] team_slave_0: entered allmulticast mode [ 197.801730][ T8343] team_slave_1: entered allmulticast mode [ 197.809838][ T8343] team0: entered promiscuous mode [ 197.814942][ T8343] team_slave_0: entered promiscuous mode [ 197.821865][ T8343] team_slave_1: entered promiscuous mode [ 198.569879][ T8372] validate_nla: 1 callbacks suppressed [ 198.569904][ T8372] netlink: 'syz.0.894': attribute type 9 has an invalid length. [ 198.678533][ T8372] __nla_validate_parse: 2 callbacks suppressed [ 198.678558][ T8372] netlink: 43531 bytes leftover after parsing attributes in process `syz.0.894'. [ 198.805362][ T8374] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.895'. [ 198.898037][ T8376] IPv6: Can't replace route, no match found [ 199.014468][ T8375] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.893'. [ 199.134534][ T8375] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.893'. [ 199.595904][ T8392] netlink: 61959 bytes leftover after parsing attributes in process `syz.1.900'. [ 199.720584][ T8398] FAULT_INJECTION: forcing a failure. [ 199.720584][ T8398] name failslab, interval 1, probability 0, space 0, times 0 [ 199.772967][ T8398] CPU: 1 UID: 0 PID: 8398 Comm: syz.2.903 Not tainted 6.12.0-syzkaller #0 [ 199.781553][ T8398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 199.791652][ T8398] Call Trace: [ 199.794948][ T8398] [ 199.797896][ T8398] dump_stack_lvl+0x241/0x360 [ 199.802601][ T8398] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.807821][ T8398] ? __pfx__printk+0x10/0x10 [ 199.812429][ T8398] ? __kmalloc_cache_node_noprof+0x4c/0x300 [ 199.818342][ T8398] ? __pfx___might_resched+0x10/0x10 [ 199.823662][ T8398] should_fail_ex+0x3b0/0x4e0 [ 199.828363][ T8398] should_failslab+0xac/0x100 [ 199.833059][ T8398] __kmalloc_cache_node_noprof+0x74/0x300 [ 199.838796][ T8398] ? __get_vm_area_node+0x113/0x270 [ 199.844010][ T8398] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 199.850365][ T8398] __get_vm_area_node+0x113/0x270 [ 199.855414][ T8398] __vmalloc_node_range_noprof+0x3a6/0x13f0 [ 199.861328][ T8398] ? copy_process+0x5d1/0x3d50 [ 199.866119][ T8398] ? mod_objcg_state+0x125/0x930 [ 199.871094][ T8398] ? __pfx_mod_objcg_state+0x10/0x10 [ 199.876408][ T8398] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 199.882784][ T8398] ? dup_task_struct+0x57/0x8c0 [ 199.887657][ T8398] ? rcu_is_watching+0x15/0xb0 [ 199.892431][ T8398] ? arch_dup_task_struct+0x44/0xa0 [ 199.897659][ T8398] dup_task_struct+0x444/0x8c0 [ 199.902449][ T8398] ? copy_process+0x5d1/0x3d50 [ 199.907242][ T8398] ? _raw_spin_unlock_irq+0x23/0x50 [ 199.912460][ T8398] copy_process+0x5d1/0x3d50 [ 199.917075][ T8398] ? get_pid_task+0x23/0x1f0 [ 199.921688][ T8398] ? __pfx_lock_release+0x10/0x10 [ 199.926732][ T8398] ? kstrtouint_from_user+0x128/0x190 [ 199.932136][ T8398] ? __pfx_copy_process+0x10/0x10 [ 199.937191][ T8398] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 199.943115][ T8398] kernel_clone+0x226/0x8f0 [ 199.947662][ T8398] ? __pfx_kernel_clone+0x10/0x10 [ 199.952733][ T8398] __x64_sys_clone+0x258/0x2a0 [ 199.957528][ T8398] ? __pfx___x64_sys_clone+0x10/0x10 [ 199.962845][ T8398] ? perf_trace_preemptirq_template+0xf8/0x3f0 [ 199.969034][ T8398] ? do_syscall_64+0x100/0x230 [ 199.973834][ T8398] ? do_syscall_64+0xb6/0x230 [ 199.978534][ T8398] do_syscall_64+0xf3/0x230 [ 199.983061][ T8398] ? clear_bhb_loop+0x35/0x90 [ 199.987845][ T8398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.993758][ T8398] RIP: 0033:0x7ff13af7e759 [ 199.998193][ T8398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.017838][ T8398] RSP: 002b:00007ff13bdcafe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 200.026275][ T8398] RAX: ffffffffffffffda RBX: 00007ff13b135f80 RCX: 00007ff13af7e759 [ 200.034268][ T8398] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000820000 [ 200.042252][ T8398] RBP: 00007ff13bdcb090 R08: 0000000000000000 R09: 0000000000000000 [ 200.050256][ T8398] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 200.058262][ T8398] R13: 0000000000000000 R14: 00007ff13b135f80 R15: 00007ffc0a429b28 [ 200.066270][ T8398] [ 200.082178][ T8398] syz.2.903: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 200.150386][ T8398] CPU: 0 UID: 0 PID: 8398 Comm: syz.2.903 Not tainted 6.12.0-syzkaller #0 [ 200.159034][ T8398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 200.169163][ T8398] Call Trace: [ 200.172514][ T8398] [ 200.175520][ T8398] dump_stack_lvl+0x241/0x360 [ 200.180345][ T8398] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.185632][ T8398] ? __pfx__printk+0x10/0x10 [ 200.190338][ T8398] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 200.196859][ T8398] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 200.203456][ T8398] warn_alloc+0x278/0x410 [ 200.207890][ T8398] ? __pfx_warn_alloc+0x10/0x10 [ 200.212836][ T8398] ? __get_vm_area_node+0x113/0x270 [ 200.218134][ T8398] ? __get_vm_area_node+0x261/0x270 [ 200.223453][ T8398] __vmalloc_node_range_noprof+0x3cb/0x13f0 [ 200.229450][ T8398] ? mod_objcg_state+0x125/0x930 [ 200.234474][ T8398] ? __pfx_mod_objcg_state+0x10/0x10 [ 200.239920][ T8398] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 200.246350][ T8398] ? dup_task_struct+0x57/0x8c0 [ 200.251300][ T8398] ? rcu_is_watching+0x15/0xb0 [ 200.256148][ T8398] ? arch_dup_task_struct+0x44/0xa0 [ 200.261465][ T8398] dup_task_struct+0x444/0x8c0 [ 200.266338][ T8398] ? copy_process+0x5d1/0x3d50 [ 200.271204][ T8398] ? _raw_spin_unlock_irq+0x23/0x50 [ 200.276523][ T8398] copy_process+0x5d1/0x3d50 [ 200.281240][ T8398] ? get_pid_task+0x23/0x1f0 [ 200.285918][ T8398] ? __pfx_lock_release+0x10/0x10 [ 200.291038][ T8398] ? kstrtouint_from_user+0x128/0x190 [ 200.296569][ T8398] ? __pfx_copy_process+0x10/0x10 [ 200.301727][ T8398] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 200.307747][ T8398] kernel_clone+0x226/0x8f0 [ 200.312381][ T8398] ? __pfx_kernel_clone+0x10/0x10 [ 200.317605][ T8398] __x64_sys_clone+0x258/0x2a0 [ 200.322478][ T8398] ? __pfx___x64_sys_clone+0x10/0x10 [ 200.327872][ T8398] ? perf_trace_preemptirq_template+0xf8/0x3f0 [ 200.334170][ T8398] ? do_syscall_64+0x100/0x230 [ 200.339043][ T8398] ? do_syscall_64+0xb6/0x230 [ 200.343815][ T8398] do_syscall_64+0xf3/0x230 [ 200.348416][ T8398] ? clear_bhb_loop+0x35/0x90 [ 200.353185][ T8398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.359248][ T8398] RIP: 0033:0x7ff13af7e759 [ 200.363746][ T8398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.383429][ T8398] RSP: 002b:00007ff13bdcafe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 200.391933][ T8398] RAX: ffffffffffffffda RBX: 00007ff13b135f80 RCX: 00007ff13af7e759 [ 200.400068][ T8398] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000820000 [ 200.408116][ T8398] RBP: 00007ff13bdcb090 R08: 0000000000000000 R09: 0000000000000000 [ 200.416154][ T8398] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 200.424212][ T8398] R13: 0000000000000000 R14: 00007ff13b135f80 R15: 00007ffc0a429b28 [ 200.432366][ T8398] [ 200.500628][ T8398] Mem-Info: [ 200.504156][ T8398] active_anon:4237 inactive_anon:0 isolated_anon:0 [ 200.504156][ T8398] active_file:14406 inactive_file:38237 isolated_file:0 [ 200.504156][ T8398] unevictable:768 dirty:148 writeback:0 [ 200.504156][ T8398] slab_reclaimable:10039 slab_unreclaimable:97533 [ 200.504156][ T8398] mapped:21279 shmem:1406 pagetables:709 [ 200.504156][ T8398] sec_pagetables:0 bounce:0 [ 200.504156][ T8398] kernel_misc_reclaimable:0 [ 200.504156][ T8398] free:1342697 free_pcp:393 free_cma:0 [ 200.551007][ T8398] Node 0 active_anon:16948kB inactive_anon:0kB active_file:57624kB inactive_file:152872kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:85116kB dirty:592kB writeback:0kB shmem:4088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10992kB pagetables:2836kB sec_pagetables:0kB all_unreclaimable? no [ 200.592174][ T8398] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 200.630630][ T8398] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 200.658825][ T8398] lowmem_reserve[]: 0 2463 2464 0 0 [ 200.664385][ T8398] Node 0 DMA32 free:1446536kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:16908kB inactive_anon:0kB active_file:57624kB inactive_file:152292kB unevictable:1536kB writepending:592kB present:3129332kB managed:2550460kB mlocked:0kB bounce:0kB free_pcp:1468kB local_pcp:716kB free_cma:0kB [ 200.773194][ T8398] lowmem_reserve[]: 0 0 0 0 0 [ 200.810822][ T8398] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:580kB unevictable:0kB writepending:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 200.837914][ T8410] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.908'. [ 200.848716][ T8410] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.908'. [ 200.885499][ T8398] lowmem_reserve[]: 0 0 0 0 0 [ 200.890825][ T8398] Node 1 Normal free:3909708kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 201.037303][ T8398] lowmem_reserve[]: 0 0 0 0 0 [ 201.042327][ T8398] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 201.108518][ T8398] Node 0 DMA32: 577*4kB (UME) 839*8kB (UME) 734*16kB (UME) 112*32kB (UME) 446*64kB (UME) 143*128kB (UME) 78*256kB (UM) 55*512kB (UME) 31*1024kB (UM) 9*2048kB (UM) 312*4096kB (UM) = 1447452kB [ 201.216208][ T8398] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 201.272069][ T8398] Node 1 Normal: 213*4kB (UM) 53*8kB (UME) 45*16kB (UME) 196*32kB (UME) 98*64kB (UME) 19*128kB (UE) 16*256kB (UME) 7*512kB (UM) 4*1024kB (UME) 3*2048kB (UE) 946*4096kB (UM) = 3909708kB [ 201.325003][ T8398] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 201.341972][ T8398] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 201.353604][ T8398] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 201.394719][ T8398] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 201.427843][ T8398] 54053 total pagecache pages [ 201.458614][ T8398] 0 pages in swap cache [ 201.462843][ T8398] Free swap = 124996kB [ 201.467035][ T8398] Total swap = 124996kB [ 201.493238][ T8398] 2097051 pages RAM [ 201.518969][ T8398] 0 pages HighMem/MovableOnly [ 201.539435][ T8398] 427650 pages reserved [ 201.556081][ T8398] 0 pages cma reserved [ 201.755932][ T8426] netlink: 61959 bytes leftover after parsing attributes in process `syz.4.914'. [ 203.107034][ T8465] netlink: 61959 bytes leftover after parsing attributes in process `syz.2.929'. [ 204.048471][ T8479] netlink: 'syz.2.932': attribute type 3 has an invalid length. [ 204.106053][ T8479] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.932'. [ 204.882697][ T8501] netlink: 61959 bytes leftover after parsing attributes in process `syz.2.942'. [ 206.749221][ T8541] netlink: 61959 bytes leftover after parsing attributes in process `syz.0.954'. [ 207.896279][ T8564] netlink: 'syz.0.962': attribute type 10 has an invalid length. [ 207.921560][ T8564] netlink: 55 bytes leftover after parsing attributes in process `syz.0.962'. [ 208.436597][ T8575] netlink: 61959 bytes leftover after parsing attributes in process `syz.2.966'. [ 208.736330][ T8595] FAULT_INJECTION: forcing a failure. [ 208.736330][ T8595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.773296][ T8595] CPU: 1 UID: 0 PID: 8595 Comm: syz.4.973 Not tainted 6.12.0-syzkaller #0 [ 208.781886][ T8595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 208.784920][ T8598] netlink: 'syz.1.974': attribute type 27 has an invalid length. [ 208.791957][ T8595] Call Trace: [ 208.791973][ T8595] [ 208.791984][ T8595] dump_stack_lvl+0x241/0x360 [ 208.792023][ T8595] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.792052][ T8595] ? __pfx__printk+0x10/0x10 [ 208.792090][ T8595] should_fail_ex+0x3b0/0x4e0 [ 208.792119][ T8595] _copy_to_user+0x31/0xb0 [ 208.792142][ T8595] generic_map_lookup_batch+0x8f5/0xf90 [ 208.806496][ T8598] netlink: 'syz.1.974': attribute type 3 has an invalid length. [ 208.810811][ T8595] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 208.810841][ T8595] ? __fget_files+0x29/0x470 [ 208.810875][ T8595] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 208.810901][ T8595] bpf_map_do_batch+0x288/0x660 [ 208.810936][ T8595] __sys_bpf+0x654/0x810 [ 208.823808][ T8598] netlink: 132 bytes leftover after parsing attributes in process `syz.1.974'. [ 208.825491][ T8595] ? __pfx___sys_bpf+0x10/0x10 [ 208.882752][ T8595] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 208.888801][ T8595] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 208.895159][ T8595] ? do_syscall_64+0x100/0x230 [ 208.899949][ T8595] __x64_sys_bpf+0x7c/0x90 [ 208.904387][ T8595] do_syscall_64+0xf3/0x230 [ 208.908951][ T8595] ? clear_bhb_loop+0x35/0x90 [ 208.913666][ T8595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.919598][ T8595] RIP: 0033:0x7faaabb7e759 [ 208.924060][ T8595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.943794][ T8595] RSP: 002b:00007faaac9de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 208.952234][ T8595] RAX: ffffffffffffffda RBX: 00007faaabd35f80 RCX: 00007faaabb7e759 [ 208.960220][ T8595] RDX: 0000000000000038 RSI: 00000000200003c0 RDI: 0000000000000018 [ 208.968222][ T8595] RBP: 00007faaac9de090 R08: 0000000000000000 R09: 0000000000000000 [ 208.976238][ T8595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 208.984253][ T8595] R13: 0000000000000000 R14: 00007faaabd35f80 R15: 00007ffeefe565e8 [ 208.992257][ T8595] [ 210.517648][ T8612] netlink: 'syz.0.978': attribute type 3 has an invalid length. [ 210.536420][ T8612] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.978'. [ 210.664925][ T8619] netlink: 'syz.4.981': attribute type 2 has an invalid length. [ 210.687449][ T8619] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.981'. [ 211.635385][ T8643] netlink: 'syz.3.990': attribute type 29 has an invalid length. [ 212.244389][ T8657] FAULT_INJECTION: forcing a failure. [ 212.244389][ T8657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.263678][ T8652] netlink: 'syz.1.992': attribute type 7 has an invalid length. [ 212.279390][ T8652] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.992'. [ 212.293118][ T8657] CPU: 1 UID: 0 PID: 8657 Comm: syz.4.993 Not tainted 6.12.0-syzkaller #0 [ 212.301695][ T8657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 212.311796][ T8657] Call Trace: [ 212.315111][ T8657] [ 212.318072][ T8657] dump_stack_lvl+0x241/0x360 [ 212.322804][ T8657] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.328039][ T8657] ? __pfx__printk+0x10/0x10 [ 212.332672][ T8657] should_fail_ex+0x3b0/0x4e0 [ 212.337383][ T8657] _copy_to_user+0x31/0xb0 [ 212.341832][ T8657] generic_map_lookup_batch+0x95d/0xf90 [ 212.347540][ T8657] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 212.353661][ T8657] ? __fget_files+0x29/0x470 [ 212.358303][ T8657] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 212.364415][ T8657] bpf_map_do_batch+0x288/0x660 [ 212.369317][ T8657] __sys_bpf+0x654/0x810 [ 212.373601][ T8657] ? __pfx___sys_bpf+0x10/0x10 [ 212.378413][ T8657] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 212.384465][ T8657] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 212.390927][ T8657] ? do_syscall_64+0x100/0x230 [ 212.395745][ T8657] __x64_sys_bpf+0x7c/0x90 [ 212.400214][ T8657] do_syscall_64+0xf3/0x230 [ 212.404756][ T8657] ? clear_bhb_loop+0x35/0x90 [ 212.409479][ T8657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.415410][ T8657] RIP: 0033:0x7faaabb7e759 [ 212.419859][ T8657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.439502][ T8657] RSP: 002b:00007faaac9de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 212.447958][ T8657] RAX: ffffffffffffffda RBX: 00007faaabd35f80 RCX: 00007faaabb7e759 [ 212.456049][ T8657] RDX: 0000000000000038 RSI: 00000000200003c0 RDI: 0000000000000018 [ 212.464052][ T8657] RBP: 00007faaac9de090 R08: 0000000000000000 R09: 0000000000000000 [ 212.472051][ T8657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 212.480055][ T8657] R13: 0000000000000000 R14: 00007faaabd35f80 R15: 00007ffeefe565e8 [ 212.488078][ T8657] [ 212.522576][ T8660] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.995'. [ 212.666760][ T8660] netlink: get zone limit has 8 unknown bytes [ 215.706105][ T8715] netlink: 204732 bytes leftover after parsing attributes in process `syz.3.1013'. [ 215.905789][ T8726] netlink: 'syz.1.1019': attribute type 12 has an invalid length. [ 215.937937][ T8726] netlink: 'syz.1.1019': attribute type 11 has an invalid length. [ 215.945841][ T8726] netlink: 190940 bytes leftover after parsing attributes in process `syz.1.1019'. [ 215.968613][ T8731] netlink: 61959 bytes leftover after parsing attributes in process `syz.3.1021'. [ 216.109179][ T8734] netlink: 'syz.3.1023': attribute type 3 has an invalid length. [ 216.116996][ T8734] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1023'. [ 217.644351][ T8756] netlink: 'syz.3.1029': attribute type 2 has an invalid length. [ 217.660750][ T8762] netlink: 204732 bytes leftover after parsing attributes in process `syz.0.1032'. [ 217.673903][ T8756] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1029'. [ 217.806871][ T8764] netlink: 61959 bytes leftover after parsing attributes in process `syz.2.1033'. [ 218.126516][ T8772] netlink: 'syz.0.1037': attribute type 12 has an invalid length. [ 218.159917][ T8772] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1037'. [ 218.647713][ T8781] netlink: 'syz.2.1041': attribute type 29 has an invalid length. [ 219.074890][ T8788] netlink: 'syz.2.1041': attribute type 29 has an invalid length. [ 219.521312][ T8780] delete_channel: no stack [ 220.085217][ T8803] netlink: 'syz.2.1046': attribute type 3 has an invalid length. [ 220.093709][ T8803] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1046'. [ 220.159403][ T8805] netlink: 61959 bytes leftover after parsing attributes in process `syz.1.1047'. [ 220.746643][ T8828] FAULT_INJECTION: forcing a failure. [ 220.746643][ T8828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.760855][ T8828] CPU: 1 UID: 0 PID: 8828 Comm: syz.2.1055 Not tainted 6.12.0-syzkaller #0 [ 220.769559][ T8828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 220.779658][ T8828] Call Trace: [ 220.782960][ T8828] [ 220.785921][ T8828] dump_stack_lvl+0x241/0x360 [ 220.790646][ T8828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.795884][ T8828] ? __pfx__printk+0x10/0x10 [ 220.800536][ T8828] ? snprintf+0xda/0x120 [ 220.804807][ T8828] should_fail_ex+0x3b0/0x4e0 [ 220.809502][ T8828] _copy_to_user+0x31/0xb0 [ 220.813925][ T8828] simple_read_from_buffer+0xca/0x150 [ 220.819325][ T8828] proc_fail_nth_read+0x1e9/0x250 [ 220.824364][ T8828] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 220.829925][ T8828] ? rw_verify_area+0x55e/0x6f0 [ 220.834797][ T8828] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 220.840356][ T8828] vfs_read+0x1fc/0xb70 [ 220.844531][ T8828] ? fdget_pos+0x24e/0x320 [ 220.848962][ T8828] ? __pfx_vfs_read+0x10/0x10 [ 220.853656][ T8828] ? __fget_files+0x3f3/0x470 [ 220.858356][ T8828] ? fdget_pos+0x24e/0x320 [ 220.862791][ T8828] ksys_read+0x183/0x2b0 [ 220.867053][ T8828] ? __pfx_ksys_read+0x10/0x10 [ 220.871843][ T8828] ? do_syscall_64+0x100/0x230 [ 220.876729][ T8828] ? do_syscall_64+0xb6/0x230 [ 220.881433][ T8828] do_syscall_64+0xf3/0x230 [ 220.886050][ T8828] ? clear_bhb_loop+0x35/0x90 [ 220.890756][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.896673][ T8828] RIP: 0033:0x7ff13af7d19c [ 220.901103][ T8828] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 220.920726][ T8828] RSP: 002b:00007ff13bdcb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 220.929164][ T8828] RAX: ffffffffffffffda RBX: 00007ff13b135f80 RCX: 00007ff13af7d19c [ 220.937169][ T8828] RDX: 000000000000000f RSI: 00007ff13bdcb0a0 RDI: 0000000000000005 [ 220.945169][ T8828] RBP: 00007ff13bdcb090 R08: 0000000000000000 R09: 0000000000000000 [ 220.953182][ T8828] R10: 0000000020000500 R11: 0000000000000246 R12: 0000000000000001 [ 220.961174][ T8828] R13: 0000000000000000 R14: 00007ff13b135f80 R15: 00007ffc0a429b28 [ 220.969177][ T8828] [ 221.108918][ T8838] FAULT_INJECTION: forcing a failure. [ 221.108918][ T8838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.158813][ T8838] CPU: 0 UID: 0 PID: 8838 Comm: syz.4.1057 Not tainted 6.12.0-syzkaller #0 [ 221.167581][ T8838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 221.177696][ T8838] Call Trace: [ 221.181027][ T8838] [ 221.184010][ T8838] dump_stack_lvl+0x241/0x360 [ 221.188756][ T8838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.194017][ T8838] ? __pfx__printk+0x10/0x10 [ 221.198667][ T8838] should_fail_ex+0x3b0/0x4e0 [ 221.203393][ T8838] _copy_to_user+0x31/0xb0 [ 221.207875][ T8838] generic_map_lookup_batch+0x95d/0xf90 [ 221.213503][ T8838] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 221.219629][ T8838] ? __fget_files+0x29/0x470 [ 221.224286][ T8838] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 221.230399][ T8838] bpf_map_do_batch+0x288/0x660 [ 221.235306][ T8838] __sys_bpf+0x654/0x810 [ 221.239596][ T8838] ? __pfx___sys_bpf+0x10/0x10 [ 221.244419][ T8838] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 221.250454][ T8838] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 221.256844][ T8838] ? do_syscall_64+0x100/0x230 [ 221.261669][ T8838] __x64_sys_bpf+0x7c/0x90 [ 221.266151][ T8838] do_syscall_64+0xf3/0x230 [ 221.270709][ T8838] ? clear_bhb_loop+0x35/0x90 [ 221.275438][ T8838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.281378][ T8838] RIP: 0033:0x7faaabb7e759 [ 221.285834][ T8838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.305490][ T8838] RSP: 002b:00007faaac9de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 221.313951][ T8838] RAX: ffffffffffffffda RBX: 00007faaabd35f80 RCX: 00007faaabb7e759 [ 221.321962][ T8838] RDX: 0000000000000038 RSI: 00000000200003c0 RDI: 0000000000000018 [ 221.329962][ T8838] RBP: 00007faaac9de090 R08: 0000000000000000 R09: 0000000000000000 [ 221.337956][ T8838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 221.345956][ T8838] R13: 0000000000000000 R14: 00007faaabd35f80 R15: 00007ffeefe565e8 [ 221.353969][ T8838] [ 222.017366][ T8845] netlink: 61959 bytes leftover after parsing attributes in process `syz.1.1061'. [ 222.718945][ T8870] netlink: 'syz.3.1070': attribute type 3 has an invalid length. [ 222.752098][ T8870] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1070'. [ 223.466449][ T8885] netlink: 61959 bytes leftover after parsing attributes in process `syz.1.1076'. [ 224.399512][ T8907] netlink: 'syz.0.1085': attribute type 3 has an invalid length. [ 224.422144][ T8907] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1085'. [ 225.471869][ T8923] netlink: 61775 bytes leftover after parsing attributes in process `syz.1.1091'. [ 225.524154][ T8919] netlink: 'syz.0.1089': attribute type 39 has an invalid length. [ 225.952061][ T8935] FAULT_INJECTION: forcing a failure. [ 225.952061][ T8935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.966354][ T8935] CPU: 0 UID: 0 PID: 8935 Comm: syz.3.1096 Not tainted 6.12.0-syzkaller #0 [ 225.975054][ T8935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 225.985207][ T8935] Call Trace: [ 225.988580][ T8935] [ 225.991604][ T8935] dump_stack_lvl+0x241/0x360 [ 225.996394][ T8935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.001701][ T8935] ? __pfx__printk+0x10/0x10 [ 226.006470][ T8935] should_fail_ex+0x3b0/0x4e0 [ 226.011281][ T8935] _copy_to_user+0x31/0xb0 [ 226.015810][ T8935] generic_map_lookup_batch+0x8f5/0xf90 [ 226.021566][ T8935] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 226.027724][ T8935] ? __fget_files+0x29/0x470 [ 226.032451][ T8935] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 226.038641][ T8935] bpf_map_do_batch+0x288/0x660 [ 226.043633][ T8935] __sys_bpf+0x654/0x810 [ 226.047992][ T8935] ? __pfx___sys_bpf+0x10/0x10 [ 226.052922][ T8935] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 226.059028][ T8935] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 226.065470][ T8935] ? do_syscall_64+0x100/0x230 [ 226.070367][ T8935] __x64_sys_bpf+0x7c/0x90 [ 226.074888][ T8935] do_syscall_64+0xf3/0x230 [ 226.079491][ T8935] ? clear_bhb_loop+0x35/0x90 [ 226.084284][ T8935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.090274][ T8935] RIP: 0033:0x7ff620f7e759 [ 226.094790][ T8935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.114595][ T8935] RSP: 002b:00007ff621e34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 226.123136][ T8935] RAX: ffffffffffffffda RBX: 00007ff621135f80 RCX: 00007ff620f7e759 [ 226.131210][ T8935] RDX: 0000000000000038 RSI: 00000000200003c0 RDI: 0000000000000018 [ 226.139282][ T8935] RBP: 00007ff621e34090 R08: 0000000000000000 R09: 0000000000000000 [ 226.147352][ T8935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 226.155502][ T8935] R13: 0000000000000000 R14: 00007ff621135f80 R15: 00007fffd8b7c298 [ 226.163670][ T8935] [ 226.441393][ T8942] netlink: 'syz.2.1099': attribute type 3 has an invalid length. [ 226.457363][ T8942] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1099'. [ 227.043769][ T8954] netlink: 61775 bytes leftover after parsing attributes in process `syz.0.1104'. [ 228.146900][ T8987] netlink: 'syz.2.1113': attribute type 3 has an invalid length. [ 228.183609][ T8987] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1113'. [ 228.242068][ T8976] netlink: 'syz.3.1112': attribute type 39 has an invalid length. [ 229.871607][ T9018] netlink: 'syz.2.1128': attribute type 3 has an invalid length. [ 229.914733][ T9018] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1128'. [ 230.432396][ T9034] FAULT_INJECTION: forcing a failure. [ 230.432396][ T9034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.543070][ T9034] CPU: 1 UID: 0 PID: 9034 Comm: syz.4.1131 Not tainted 6.12.0-syzkaller #0 [ 230.551747][ T9034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 230.561852][ T9034] Call Trace: [ 230.565178][ T9034] [ 230.568162][ T9034] dump_stack_lvl+0x241/0x360 [ 230.572897][ T9034] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.578152][ T9034] ? __pfx__printk+0x10/0x10 [ 230.582806][ T9034] should_fail_ex+0x3b0/0x4e0 [ 230.587532][ T9034] _copy_to_user+0x31/0xb0 [ 230.591994][ T9034] generic_map_lookup_batch+0x95d/0xf90 [ 230.597601][ T9034] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 230.603713][ T9034] ? __fget_files+0x29/0x470 [ 230.608374][ T9034] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 230.614491][ T9034] bpf_map_do_batch+0x288/0x660 [ 230.619409][ T9034] __sys_bpf+0x654/0x810 [ 230.623701][ T9034] ? __pfx___sys_bpf+0x10/0x10 [ 230.628524][ T9034] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 230.634556][ T9034] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 230.641016][ T9034] ? do_syscall_64+0x100/0x230 [ 230.645916][ T9034] __x64_sys_bpf+0x7c/0x90 [ 230.650373][ T9034] do_syscall_64+0xf3/0x230 [ 230.654928][ T9034] ? clear_bhb_loop+0x35/0x90 [ 230.659649][ T9034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.665581][ T9034] RIP: 0033:0x7faaabb7e759 [ 230.670029][ T9034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.689762][ T9034] RSP: 002b:00007faaac9de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 230.698227][ T9034] RAX: ffffffffffffffda RBX: 00007faaabd35f80 RCX: 00007faaabb7e759 [ 230.706241][ T9034] RDX: 0000000000000038 RSI: 00000000200003c0 RDI: 0000000000000018 [ 230.714251][ T9034] RBP: 00007faaac9de090 R08: 0000000000000000 R09: 0000000000000000 [ 230.722263][ T9034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 230.730280][ T9034] R13: 0000000000000000 R14: 00007faaabd35f80 R15: 00007ffeefe565e8 [ 230.738306][ T9034] [ 230.778096][ T9037] netlink: 'syz.3.1136': attribute type 10 has an invalid length. [ 230.851596][ T9037] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.859286][ T9037] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.011353][ T9037] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.018612][ T9037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.026114][ T9037] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.033360][ T9037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.089820][ T9037] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 231.388616][ T9055] netlink: 'syz.1.1144': attribute type 3 has an invalid length. [ 231.396451][ T9055] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1144'. [ 231.538670][ T9057] netlink: 'syz.3.1143': attribute type 3 has an invalid length. [ 231.572090][ T9057] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1143'. [ 231.853675][ T9069] netlink: 'syz.1.1147': attribute type 10 has an invalid length. [ 231.911887][ T9068] netlink: 'syz.1.1147': attribute type 10 has an invalid length. [ 232.961366][ T9088] netlink: 'syz.0.1152': attribute type 4 has an invalid length. [ 233.067764][ T9100] netlink: 'syz.2.1157': attribute type 3 has an invalid length. [ 233.101846][ T9088] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1152'. [ 233.138667][ T9100] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1157'. [ 233.925122][ T9110] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1158'. [ 234.293364][ T9124] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1167'. [ 234.343705][ T9124] openvswitch: netlink: ufid size 3079 bytes exceeds the range (1, 16) [ 234.352838][ T9126] ------------[ cut here ]------------ [ 234.359108][ T9126] WARNING: CPU: 1 PID: 9126 at kernel/trace/bpf_trace.c:1829 bpf_get_stack_raw_tp+0x1c9/0x240 [ 234.369631][ T9126] Modules linked in: [ 234.373601][ T9126] CPU: 1 UID: 0 PID: 9126 Comm: syz.3.1167 Not tainted 6.12.0-syzkaller #0 [ 234.382394][ T9126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 234.392580][ T9126] RIP: 0010:bpf_get_stack_raw_tp+0x1c9/0x240 [ 234.397594][ T9124] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 234.399208][ T9126] Code: 3d 7c 1f 00 65 ff 0d e6 c9 62 7e 4c 63 f0 4c 89 f0 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 a8 4f f4 ff 90 <0f> 0b 90 65 ff 0d bd c9 62 7e 49 c7 c6 f0 ff ff ff eb d1 44 89 e9 [ 234.428052][ T9126] RSP: 0018:ffffc90002ebe6d0 EFLAGS: 00010283 [ 234.434241][ T9126] RAX: ffffffff81a09a68 RBX: 0000000000000003 RCX: 0000000000040000 [ 234.442356][ T9126] RDX: ffffc9000d021000 RSI: 000000000000026a RDI: 000000000000026b [ 234.450446][ T9126] RBP: ffffc90002ebe710 R08: ffffffff81a09937 R09: 1ffffffff285a100 [ 234.458552][ T9126] R10: dffffc0000000000 R11: ffffffffa0002034 R12: ffff8880b8736238 [ 234.466588][ T9126] R13: 0000000000000900 R14: 0000000000000000 R15: ffffc90002ebe728 [ 234.474687][ T9126] FS: 00007ff621e136c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 234.483739][ T9126] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 234.490417][ T9126] CR2: 0000000000000000 CR3: 0000000024432000 CR4: 00000000003526f0 [ 234.498516][ T9126] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 234.507014][ T9126] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 234.515373][ T9126] Call Trace: [ 234.518755][ T9126] [ 234.521743][ T9126] ? __warn+0x168/0x4e0 [ 234.525951][ T9126] ? bpf_get_stack_raw_tp+0x1c9/0x240 [ 234.531506][ T9126] ? report_bug+0x2b3/0x500 [ 234.536067][ T9126] ? bpf_get_stack_raw_tp+0x1c9/0x240 [ 234.541596][ T9126] ? handle_bug+0x60/0x90 [ 234.545991][ T9126] ? exc_invalid_op+0x1a/0x50 [ 234.550791][ T9126] ? asm_exc_invalid_op+0x1a/0x20 [ 234.555876][ T9126] ? 0xffffffffa0002034 [ 234.560124][ T9126] ? bpf_get_stack_raw_tp+0x97/0x240 [ 234.565462][ T9126] ? bpf_get_stack_raw_tp+0x1c8/0x240 [ 234.570942][ T9126] ? bpf_get_stack_raw_tp+0x1c9/0x240 [ 234.576383][ T9126] ? bpf_trace_run4+0x244/0x590 [ 234.581377][ T9126] bpf_prog_ec3b2eefa702d8d3+0x43/0x47 [ 234.586892][ T9126] bpf_trace_run4+0x334/0x590 [ 234.591688][ T9126] ? get_mm_memcg_path+0x110/0x380 [ 234.596865][ T9126] ? __pfx_bpf_trace_run4+0x10/0x10 [ 234.602216][ T9126] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 234.608299][ T9126] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 234.615749][ T9126] __traceiter_mmap_lock_acquire_returned+0x93/0xf0 [ 234.622807][ T9126] __mmap_lock_do_trace_acquire_returned+0x286/0x2f0 [ 234.629601][ T9126] ? __pfx_lock_acquire+0x10/0x10 [ 234.634706][ T9126] ? __pfx___mmap_lock_do_trace_acquire_returned+0x10/0x10 [ 234.642081][ T9126] ? __pfx_down_read_trylock+0x10/0x10 [ 234.647664][ T9126] stack_map_get_build_id_offset+0x84d/0x870 [ 234.653729][ T9126] ? __pfx_get_perf_callchain+0x10/0x10 [ 234.659414][ T9126] ? __pfx_stack_map_get_build_id_offset+0x10/0x10 [ 234.665990][ T9126] __bpf_get_stack+0x8da/0xad0 [ 234.670876][ T9126] ? __pfx___bpf_get_stack+0x10/0x10 [ 234.676223][ T9126] ? __pfx_lock_acquire+0x10/0x10 [ 234.681389][ T9126] bpf_get_stack+0x33/0x50 [ 234.685879][ T9126] bpf_get_stack_raw_tp+0x1a3/0x240 [ 234.691215][ T9126] ? bpf_trace_run4+0x244/0x590 [ 234.696194][ T9126] bpf_prog_ec3b2eefa702d8d3+0x43/0x47 [ 234.702145][ T9126] bpf_trace_run4+0x334/0x590 [ 234.706980][ T9126] ? get_mm_memcg_path+0x110/0x380 [ 234.713329][ T9126] ? __pfx_bpf_trace_run4+0x10/0x10 [ 234.719616][ T9126] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 234.725217][ T9126] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 234.732895][ T9126] __traceiter_mmap_lock_acquire_returned+0x93/0xf0 [ 234.739788][ T9126] __mmap_lock_do_trace_acquire_returned+0x286/0x2f0 [ 234.746601][ T9126] ? __pfx_lock_acquire+0x10/0x10 [ 234.751852][ T9126] ? __pfx___mmap_lock_do_trace_acquire_returned+0x10/0x10 [ 234.759488][ T9126] ? __pfx_down_read_trylock+0x10/0x10 [ 234.765148][ T9126] stack_map_get_build_id_offset+0x84d/0x870 [ 234.771894][ T9126] ? __pfx_get_perf_callchain+0x10/0x10 [ 234.777786][ T9126] ? __pfx_stack_map_get_build_id_offset+0x10/0x10 [ 234.784562][ T9126] __bpf_get_stack+0x8da/0xad0 [ 234.788901][ T9131] netlink: 'syz.2.1171': attribute type 3 has an invalid length. [ 234.789650][ T9126] ? __pfx___bpf_get_stack+0x10/0x10 [ 234.802817][ T9126] ? __pfx_lock_acquire+0x10/0x10 [ 234.808189][ T9131] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1171'. [ 234.808210][ T9126] bpf_get_stack+0x33/0x50 [ 234.824283][ T9126] bpf_get_stack_raw_tp+0x1a3/0x240 [ 234.829910][ T9126] ? bpf_trace_run4+0x244/0x590 [ 234.834930][ T9126] bpf_prog_ec3b2eefa702d8d3+0x43/0x47 [ 234.840813][ T9126] bpf_trace_run4+0x334/0x590 [ 234.845717][ T9126] ? get_mm_memcg_path+0x110/0x380 [ 234.852552][ T9126] ? __pfx_bpf_trace_run4+0x10/0x10 [ 234.858399][ T9126] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 234.864033][ T9126] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 234.871630][ T9126] __traceiter_mmap_lock_acquire_returned+0x93/0xf0 [ 234.878604][ T9126] __mmap_lock_do_trace_acquire_returned+0x286/0x2f0 [ 234.885540][ T9126] ? __pfx_lock_acquire+0x10/0x10 [ 234.890921][ T9126] ? __pfx___mmap_lock_do_trace_acquire_returned+0x10/0x10 [ 234.898655][ T9126] ? __pfx_down_read_trylock+0x10/0x10 [ 234.904389][ T9126] stack_map_get_build_id_offset+0x84d/0x870 [ 234.910718][ T9126] ? __pfx_get_perf_callchain+0x10/0x10 [ 234.917978][ T9126] ? __pfx_stack_map_get_build_id_offset+0x10/0x10 [ 234.924797][ T9126] __bpf_get_stack+0x8da/0xad0 [ 234.930902][ T9126] ? __pfx___bpf_get_stack+0x10/0x10 [ 234.936380][ T9126] ? __pfx_lock_acquire+0x10/0x10 [ 234.941870][ T9126] bpf_get_stack+0x33/0x50 [ 234.946492][ T9126] bpf_get_stack_raw_tp+0x1a3/0x240 [ 234.952163][ T9126] ? bpf_trace_run4+0x244/0x590 [ 234.957454][ T9126] bpf_prog_ec3b2eefa702d8d3+0x43/0x47 [ 234.963096][ T9126] bpf_trace_run4+0x334/0x590 [ 234.968093][ T9126] ? get_mm_memcg_path+0x110/0x380 [ 234.973394][ T9126] ? __pfx_bpf_trace_run4+0x10/0x10 [ 234.979037][ T9126] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 234.984673][ T9126] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 234.992273][ T9126] __traceiter_mmap_lock_acquire_returned+0x93/0xf0 [ 234.999253][ T9126] __mmap_lock_do_trace_acquire_returned+0x286/0x2f0 [ 235.006102][ T9126] ? __pfx_lock_acquire+0x10/0x10 [ 235.012187][ T9126] ? __pfx___mmap_lock_do_trace_acquire_returned+0x10/0x10 [ 235.021311][ T9126] ? __pfx_down_read_trylock+0x10/0x10 [ 235.026934][ T9126] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 235.034149][ T9126] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 235.040923][ T9126] lock_mm_and_find_vma+0x213/0x2f0 [ 235.046335][ T9126] exc_page_fault+0x1bf/0x8c0 [ 235.051395][ T9126] asm_exc_page_fault+0x26/0x30 [ 235.056397][ T9126] RIP: 0010:__put_user_4+0x11/0x20 [ 235.061835][ T9126] Code: 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 235.081810][ T9126] RSP: 0018:ffffc90002ebfdd8 EFLAGS: 00050246 [ 235.088335][ T9126] RAX: 000000000000000b RBX: 0000000000000000 RCX: 0000000000000000 [ 235.096467][ T9126] RDX: 0000000000000000 RSI: ffffffff8c0adc20 RDI: ffffffff8c610ca0 [ 235.104835][ T9126] RBP: ffffc90002ebfed0 R08: ffffffff901d0def R09: 1ffffffff203a1bd [ 235.113119][ T9126] R10: dffffc0000000000 R11: fffffbfff203a1be R12: 0000000000000000 [ 235.122661][ T9126] R13: 1ffff920005d7fc4 R14: 1ffff920005d7fcc R15: 0000000000000000 [ 235.131932][ T9126] __sys_socketpair+0x186/0x720 [ 235.137230][ T9126] ? __pfx___sys_socketpair+0x10/0x10 [ 235.142794][ T9126] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 235.149295][ T9126] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 235.155837][ T9126] ? do_syscall_64+0x100/0x230 [ 235.160965][ T9126] __x64_sys_socketpair+0x9b/0xb0 [ 235.166182][ T9126] do_syscall_64+0xf3/0x230 [ 235.172092][ T9126] ? clear_bhb_loop+0x35/0x90 [ 235.176978][ T9126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.183509][ T9126] RIP: 0033:0x7ff620f7e759 [ 235.188234][ T9126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.208173][ T9126] RSP: 002b:00007ff621e13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 235.216785][ T9126] RAX: ffffffffffffffda RBX: 00007ff621136058 RCX: 00007ff620f7e759 [ 235.226460][ T9126] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 235.235590][ T9126] RBP: 00007ff620ff175e R08: 0000000000000000 R09: 0000000000000000 [ 235.243911][ T9126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.252792][ T9126] R13: 0000000000000000 R14: 00007ff621136058 R15: 00007fffd8b7c298 [ 235.261207][ T9126] [ 235.264391][ T9126] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 235.271778][ T9126] CPU: 1 UID: 0 PID: 9126 Comm: syz.3.1167 Not tainted 6.12.0-syzkaller #0 [ 235.280477][ T9126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 235.290654][ T9126] Call Trace: [ 235.294039][ T9126] [ 235.297082][ T9126] dump_stack_lvl+0x241/0x360 [ 235.301931][ T9126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.307266][ T9126] ? __pfx__printk+0x10/0x10 [ 235.311973][ T9126] ? _printk+0xd5/0x120 [ 235.316376][ T9126] ? __init_begin+0x41000/0x41000 [ 235.321589][ T9126] ? vscnprintf+0x5d/0x90 [ 235.326102][ T9126] panic+0x349/0x880 [ 235.330164][ T9126] ? __warn+0x177/0x4e0 [ 235.334458][ T9126] ? __pfx_panic+0x10/0x10 [ 235.338997][ T9126] ? show_trace_log_lvl+0x3b2/0x410 [ 235.344539][ T9126] __warn+0x34b/0x4e0 [ 235.348667][ T9126] ? bpf_get_stack_raw_tp+0x1c9/0x240 [ 235.354217][ T9126] report_bug+0x2b3/0x500 [ 235.358675][ T9126] ? bpf_get_stack_raw_tp+0x1c9/0x240 [ 235.364316][ T9126] handle_bug+0x60/0x90 [ 235.368729][ T9126] exc_invalid_op+0x1a/0x50 [ 235.375337][ T9126] asm_exc_invalid_op+0x1a/0x20 [ 235.380315][ T9126] RIP: 0010:bpf_get_stack_raw_tp+0x1c9/0x240 [ 235.386401][ T9126] Code: 3d 7c 1f 00 65 ff 0d e6 c9 62 7e 4c 63 f0 4c 89 f0 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 a8 4f f4 ff 90 <0f> 0b 90 65 ff 0d bd c9 62 7e 49 c7 c6 f0 ff ff ff eb d1 44 89 e9 [ 235.406108][ T9126] RSP: 0018:ffffc90002ebe6d0 EFLAGS: 00010283 [ 235.412300][ T9126] RAX: ffffffff81a09a68 RBX: 0000000000000003 RCX: 0000000000040000 [ 235.420388][ T9126] RDX: ffffc9000d021000 RSI: 000000000000026a RDI: 000000000000026b [ 235.428446][ T9126] RBP: ffffc90002ebe710 R08: ffffffff81a09937 R09: 1ffffffff285a100 [ 235.436492][ T9126] R10: dffffc0000000000 R11: ffffffffa0002034 R12: ffff8880b8736238 [ 235.444550][ T9126] R13: 0000000000000900 R14: 0000000000000000 R15: ffffc90002ebe728 [ 235.452657][ T9126] ? 0xffffffffa0002034 [ 235.456992][ T9126] ? bpf_get_stack_raw_tp+0x97/0x240 [ 235.462353][ T9126] ? bpf_get_stack_raw_tp+0x1c8/0x240 [ 235.467883][ T9126] ? bpf_trace_run4+0x244/0x590 [ 235.472810][ T9126] bpf_prog_ec3b2eefa702d8d3+0x43/0x47 [ 235.478362][ T9126] bpf_trace_run4+0x334/0x590 [ 235.483144][ T9126] ? get_mm_memcg_path+0x110/0x380 [ 235.488343][ T9126] ? __pfx_bpf_trace_run4+0x10/0x10 [ 235.493686][ T9126] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 235.499231][ T9126] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 235.506603][ T9126] __traceiter_mmap_lock_acquire_returned+0x93/0xf0 [ 235.513299][ T9126] __mmap_lock_do_trace_acquire_returned+0x286/0x2f0 [ 235.520048][ T9126] ? __pfx_lock_acquire+0x10/0x10 [ 235.525165][ T9126] ? __pfx___mmap_lock_do_trace_acquire_returned+0x10/0x10 [ 235.532628][ T9126] ? __pfx_down_read_trylock+0x10/0x10 [ 235.538311][ T9126] stack_map_get_build_id_offset+0x84d/0x870 [ 235.544466][ T9126] ? __pfx_get_perf_callchain+0x10/0x10 [ 235.550142][ T9126] ? __pfx_stack_map_get_build_id_offset+0x10/0x10 [ 235.556792][ T9126] __bpf_get_stack+0x8da/0xad0 [ 235.561701][ T9126] ? __pfx___bpf_get_stack+0x10/0x10 [ 235.567074][ T9126] ? __pfx_lock_acquire+0x10/0x10 [ 235.572257][ T9126] bpf_get_stack+0x33/0x50 [ 235.576773][ T9126] bpf_get_stack_raw_tp+0x1a3/0x240 [ 235.582079][ T9126] ? bpf_trace_run4+0x244/0x590 [ 235.587214][ T9126] bpf_prog_ec3b2eefa702d8d3+0x43/0x47 [ 235.592765][ T9126] bpf_trace_run4+0x334/0x590 [ 235.597553][ T9126] ? get_mm_memcg_path+0x110/0x380 [ 235.602757][ T9126] ? __pfx_bpf_trace_run4+0x10/0x10 [ 235.608094][ T9126] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 235.613649][ T9126] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 235.621028][ T9126] __traceiter_mmap_lock_acquire_returned+0x93/0xf0 [ 235.627742][ T9126] __mmap_lock_do_trace_acquire_returned+0x286/0x2f0 [ 235.634519][ T9126] ? __pfx_lock_acquire+0x10/0x10 [ 235.639648][ T9126] ? __pfx___mmap_lock_do_trace_acquire_returned+0x10/0x10 [ 235.647137][ T9126] ? __pfx_down_read_trylock+0x10/0x10 [ 235.652775][ T9126] stack_map_get_build_id_offset+0x84d/0x870 [ 235.658882][ T9126] ? __pfx_get_perf_callchain+0x10/0x10 [ 235.664572][ T9126] ? __pfx_stack_map_get_build_id_offset+0x10/0x10 [ 235.671234][ T9126] __bpf_get_stack+0x8da/0xad0 [ 235.676130][ T9126] ? __pfx___bpf_get_stack+0x10/0x10 [ 235.681517][ T9126] ? __pfx_lock_acquire+0x10/0x10 [ 235.686688][ T9126] bpf_get_stack+0x33/0x50 [ 235.691208][ T9126] bpf_get_stack_raw_tp+0x1a3/0x240 [ 235.696540][ T9126] ? bpf_trace_run4+0x244/0x590 [ 235.701504][ T9126] bpf_prog_ec3b2eefa702d8d3+0x43/0x47 [ 235.707122][ T9126] bpf_trace_run4+0x334/0x590 [ 235.711937][ T9126] ? get_mm_memcg_path+0x110/0x380 [ 235.717159][ T9126] ? __pfx_bpf_trace_run4+0x10/0x10 [ 235.722519][ T9126] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 235.728082][ T9126] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 235.735621][ T9126] __traceiter_mmap_lock_acquire_returned+0x93/0xf0 [ 235.742327][ T9126] __mmap_lock_do_trace_acquire_returned+0x286/0x2f0 [ 235.749096][ T9126] ? __pfx_lock_acquire+0x10/0x10 [ 235.754202][ T9126] ? __pfx___mmap_lock_do_trace_acquire_returned+0x10/0x10 [ 235.761685][ T9126] ? __pfx_down_read_trylock+0x10/0x10 [ 235.767357][ T9126] stack_map_get_build_id_offset+0x84d/0x870 [ 235.773455][ T9126] ? __pfx_get_perf_callchain+0x10/0x10 [ 235.779106][ T9126] ? __pfx_stack_map_get_build_id_offset+0x10/0x10 [ 235.785745][ T9126] __bpf_get_stack+0x8da/0xad0 [ 235.790638][ T9126] ? __pfx___bpf_get_stack+0x10/0x10 [ 235.795995][ T9126] ? __pfx_lock_acquire+0x10/0x10 [ 235.801151][ T9126] bpf_get_stack+0x33/0x50 [ 235.805663][ T9126] bpf_get_stack_raw_tp+0x1a3/0x240 [ 235.810978][ T9126] ? bpf_trace_run4+0x244/0x590 [ 235.815907][ T9126] bpf_prog_ec3b2eefa702d8d3+0x43/0x47 [ 235.821459][ T9126] bpf_trace_run4+0x334/0x590 [ 235.826231][ T9126] ? get_mm_memcg_path+0x110/0x380 [ 235.831429][ T9126] ? __pfx_bpf_trace_run4+0x10/0x10 [ 235.836828][ T9126] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 235.842401][ T9126] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 235.849795][ T9126] __traceiter_mmap_lock_acquire_returned+0x93/0xf0 [ 235.856499][ T9126] __mmap_lock_do_trace_acquire_returned+0x286/0x2f0 [ 235.863262][ T9126] ? __pfx_lock_acquire+0x10/0x10 [ 235.868375][ T9126] ? __pfx___mmap_lock_do_trace_acquire_returned+0x10/0x10 [ 235.875824][ T9126] ? __pfx_down_read_trylock+0x10/0x10 [ 235.881348][ T9126] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 235.887443][ T9126] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 235.893891][ T9126] lock_mm_and_find_vma+0x213/0x2f0 [ 235.899194][ T9126] exc_page_fault+0x1bf/0x8c0 [ 235.904008][ T9126] asm_exc_page_fault+0x26/0x30 [ 235.908922][ T9126] RIP: 0010:__put_user_4+0x11/0x20 [ 235.914092][ T9126] Code: 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 235.933760][ T9126] RSP: 0018:ffffc90002ebfdd8 EFLAGS: 00050246 [ 235.939919][ T9126] RAX: 000000000000000b RBX: 0000000000000000 RCX: 0000000000000000 [ 235.947978][ T9126] RDX: 0000000000000000 RSI: ffffffff8c0adc20 RDI: ffffffff8c610ca0 [ 235.956093][ T9126] RBP: ffffc90002ebfed0 R08: ffffffff901d0def R09: 1ffffffff203a1bd [ 235.964141][ T9126] R10: dffffc0000000000 R11: fffffbfff203a1be R12: 0000000000000000 [ 235.972176][ T9126] R13: 1ffff920005d7fc4 R14: 1ffff920005d7fcc R15: 0000000000000000 [ 235.980352][ T9126] __sys_socketpair+0x186/0x720 [ 235.985334][ T9126] ? __pfx___sys_socketpair+0x10/0x10 [ 235.990778][ T9126] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 235.996863][ T9126] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 236.003279][ T9126] ? do_syscall_64+0x100/0x230 [ 236.008152][ T9126] __x64_sys_socketpair+0x9b/0xb0 [ 236.013285][ T9126] do_syscall_64+0xf3/0x230 [ 236.017862][ T9126] ? clear_bhb_loop+0x35/0x90 [ 236.022647][ T9126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.028622][ T9126] RIP: 0033:0x7ff620f7e759 [ 236.033109][ T9126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.052797][ T9126] RSP: 002b:00007ff621e13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 236.061312][ T9126] RAX: ffffffffffffffda RBX: 00007ff621136058 RCX: 00007ff620f7e759 [ 236.069351][ T9126] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 236.077408][ T9126] RBP: 00007ff620ff175e R08: 0000000000000000 R09: 0000000000000000 [ 236.085462][ T9126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.093501][ T9126] R13: 0000000000000000 R14: 00007ff621136058 R15: 00007fffd8b7c298 [ 236.101661][ T9126] [ 236.105121][ T9126] Kernel Offset: disabled [ 236.109684][ T9126] Rebooting in 86400 seconds..