last executing test programs: 4.878072661s ago: executing program 0 (id=595): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400010404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000c680b8c93a84ed8800000000", @ANYRES32=0x0, @ANYRES16=r0, @ANYRES8], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x15, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000002e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xe, &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x8000}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) write$cgroup_devices(r7, &(0x7f0000000780)=ANY=[@ANYBLOB="61202a3a2a20776d000f24d94abbdaff6f1de6239ae5f56dca155f44e0e469d549add6108111d74fc9ad2a80217f7fd498dec968f7b17f8db6ddfc35f9dba6f64c8e5aec42fa94bc2c9bd866e1da971abaf64f55d51d6c424619e2f59f327f8170bba833b024d96cca3b2138ac137ebd287e6a3334f69b577cb77f4cd8c3a0557aba1ef4c37cef88996745bd"], 0x9) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x6}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}, 0x0, 0x2, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94908, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x2000000, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) sendmsg$kcm(r6, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x31}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000200)="f6313110b6468473237e58f6892f", 0xe}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={r10, 0x58, &(0x7f0000000840)}, 0x10) 4.768802206s ago: executing program 2 (id=597): perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xae7}, 0x14105, 0x32, 0xffeffbff, 0x5, 0x2, 0xfffffffe, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x2, 0x11) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x3, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xfc, 0x1, 0x0, 0x0, 0x0, 0x2112, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x7b424fbf19ce5f12, 0x32, 0x40, 0x3, 0x2, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() sendmsg$unix(r2, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4014}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000002000000e27f00000900000000000000", @ANYRES32, @ANYBLOB="070000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000007b8af8ff00000000bfa200000000010007020000f8ffffffb7030c0008000000b704000000000000850000000300000095000000090000000000000000000085799916fe6ee43a0806a7d50bc454b087d4e8a9d86ba47af10a561995d9185db886962f0cb5ec2949638b2bd9b61b182df67b7cdd67ab79c82996ba4a10353b21313cc970314492f76ab5e3f7648a654b17dc10ecde10a9f6fe5e433a2b7740772bbc5dc3587e03348b549ecc9d555425535af8ef258992a73f155746417f58d3d8a5793074e1b5e305982461e2ccb9451bbfcbd447df2670e77d470db0070b03"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x22082, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') 4.374285124s ago: executing program 0 (id=600): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x5, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r4], 0x12) 3.163349945s ago: executing program 1 (id=601): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x10, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="850000008900000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=0x1, 0x13, 0x0, 0x7, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0]}, 0x40) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000480), 0x2}, 0x2018, 0x68bb0998, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="db5c70cba58870472da21206ccda1c6a0300d4272488f5d03188e9cbf54c6900b3584d75b68b64766368b7fe903fb2b93a478924e437144ac25f6b905657c4b86ebbbaddb2786d65abdda9f868a90e68513435b6ea64ec59bea65a3d41bb02eb3806d308c52728173256212423b8bc2f5c75cf286214b65ba8415f10600b2c8cd019cda64eeb9e27c5bd48af451dd2a54dd4341c9f5928d52fc354a7522bed820abc3c87ad7949", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000de8400000006000000957c6feb33d4141748ab40448087a5455c3268cfd0e5dd6896593a806133367d0b4c443c13ac1ed0fc83a79d802c6adfa0e223847004717fbcf7645db59ae7366affb92d620d61c6aac5262944c2325f6e8747df08e03674594484224d7c20df44074cb72df522207f7eb058cc1d69638f247b00c642288ce6d12d0e08f3e24993701c0bfd24c2b1e5c0b16774c7144217dd5974487feaf465810d4bb746"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x86, @void, @value}, 0x94) getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r2}, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x922000000003, 0x11) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0) close(r3) socket$kcm(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000200)={'wlan1\x00'}) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0xf, &(0x7f00000002c0), 0x4) r5 = openat$cgroup_int(r3, &(0x7f0000000680)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000980)=0x2, 0x12) setsockopt$sock_attach_bpf(r4, 0x1, 0x44, &(0x7f0000000640), 0x4) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) 3.084158456s ago: executing program 4 (id=602): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x69, 0x11, 0x4e}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000000c0), 0x10, &(0x7f0000000300)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x200480c5}, 0x24040000) 2.994079735s ago: executing program 2 (id=603): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x56, 0x1, 0x0, 0x40, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x48) getpid() r1 = getpid() r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14125, 0x2e, 0xfffffbff, 0x3, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x18002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, @perf_config_ext={0x1, 0x5}, 0x10580, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r5}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000600ff0050010000000008000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a", 0xa0}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_0\x00', 0x1}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0xa06, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000004c0)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x33}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8924, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xfffffdef}], 0x11}, 0x0) socket$kcm(0xa, 0x1, 0x106) 2.84327665s ago: executing program 0 (id=604): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0xfd, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14325, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfff2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x2, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) recvmsg$unix(r1, &(0x7f0000000e00)={&(0x7f0000000d00), 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000100)=""/37, 0x25}], 0x1, &(0x7f0000000dc0)=[@cred={{0x1c}}], 0x20}, 0x20) r2 = getpid() r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xf0, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x111a1a, 0x0, 0x2, 0x8, 0x0, 0xfffffffd, 0x2000, 0x0, 0x0, 0x0, 0x40}, r2, 0x3, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x26e1, 0x0) close(r4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000014c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="ff00"}) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x41, 0x0, 0x8f00) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x6, 0xd, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1c00, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x3) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720a06fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed00000f030000000000001d44000000000000730a04fe0000000072030000000a0000b500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef77997e344e61482808c02b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) getpid() r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5cc, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001080)={@map, r8, 0x7, 0x201c, 0x0, @value}, 0x20) 2.51658147s ago: executing program 1 (id=606): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000001095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x70}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2, r2}, &(0x7f0000000600), &(0x7f0000000640)=r1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) 2.312350162s ago: executing program 4 (id=607): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000003200)=""/4046, 0xfce}, {&(0x7f0000000c00)=""/207, 0xcf}], 0x2}, 0x40002002) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 2.311617199s ago: executing program 1 (id=608): r0 = perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x40107446, &(0x7f0000000180)) r3 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) mkdir(&(0x7f0000001580)='./file0\x00', 0xc0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) r4 = getpid() r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0xc00, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b70700000000000063ef1c000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffff", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="feffffff00000005", &(0x7f0000000700)=""/8, 0x447, 0x6000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000200)=r8, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f92aa3c92b", 0x14}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000001540)={&(0x7f0000000100)=@phonet, 0x80, &(0x7f00000015c0)=[{0x0}, {0x0}, {&(0x7f0000000240)=""/53, 0x35}, {&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/69, 0x45}, {&(0x7f0000001940)=""/226, 0xe2}, {&(0x7f00000016c0)=""/237, 0xed}, {&(0x7f00000017c0)=""/190, 0xbe}], 0x9}, 0x60) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3b, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0x3}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.29187382s ago: executing program 0 (id=610): perf_event_open$cgroup(&(0x7f0000000740)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3832, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10048, 0x1000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r1 = socket$kcm(0x2c, 0x3, 0x0) r2 = socket$kcm(0x10, 0x3, 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74002000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00122800014007282800020004009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)=r1}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYRES16=r3], 0x8) close(r1) 2.151421377s ago: executing program 0 (id=611): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8040, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x5, 0x0, 0x210}, 0x0, 0x400000000000009, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="b2", 0x1}, {&(0x7f0000000180)="23480d95ed94c4265b88f5532b5a63b5a84615cc674c206880d2eade17b1b60edf2ac4126ba663cce2046c70b60f7f5cfd0c621f483e40757769dbdf76ebcf74e4400bc1d6a8", 0xffe0}], 0x3a, 0x0, 0xdc05}, 0x80) 2.141874149s ago: executing program 3 (id=612): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x13, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x7, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r1) 2.032030949s ago: executing program 3 (id=613): perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xae7}, 0x14105, 0x32, 0xffeffbff, 0x5, 0x2, 0xfffffffe, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x2, 0x11) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x3, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xfc, 0x1, 0x0, 0x0, 0x0, 0x2112, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x7b424fbf19ce5f12, 0x32, 0x40, 0x3, 0x2, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() sendmsg$unix(r2, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4014}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000002000000e27f00000900000000000000", @ANYRES32, @ANYBLOB="070000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000007b8af8ff00000000bfa200000000010007020000f8ffffffb7030c0008000000b704000000000000850000000300000095000000090000000000000000000085799916fe6ee43a0806a7d50bc454b087d4e8a9d86ba47af10a561995d9185db886962f0cb5ec2949638b2bd9b61b182df67b7cdd67ab79c82996ba4a10353b21313cc970314492f76ab5e3f7648a654b17dc10ecde10a9f6fe5e433a2b7740772bbc5dc3587e03348b549ecc9d555425535af8ef258992a73f155746417f58d3d8a5793074e1b5e305982461e2ccb9451bbfcbd447df2670e77d470db0070b03"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x22082, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') 2.026680804s ago: executing program 4 (id=614): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x2018, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b47880000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 2.024251538s ago: executing program 1 (id=615): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x4, 0x1001, 0x7, 0xce000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1.872028588s ago: executing program 0 (id=616): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0x15, 0x0, 0x2, 0x9e8}, {0x3, 0x20}, {0x0, 0x2, 0x0, 0xfffffffd}, {0x6, 0xb, 0x0, 0x5f}]}) (fail_nth: 4) 1.871529752s ago: executing program 2 (id=617): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xfffffdef}], 0x11, 0x0, 0x0, 0x2000000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000080)='tlb_flush\x00', r1, 0x0, 0x40000}, 0x18) 1.811589436s ago: executing program 1 (id=618): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00800000000000"], 0x48) 1.581791802s ago: executing program 4 (id=619): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x2}, 0x104141, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x4d}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102032908000000020000000000000000ac14140a000000000000000000000000ac1414aa"], 0xfdef) 1.375951531s ago: executing program 1 (id=620): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1a089, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4c3}, 0x2018, 0x4, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x1000000, 0x0, 0x15a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYRES8=r2], 0x10) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) close(r4) close(r3) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xfd, 0x0, 0x0, 0x6e, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffbfffff, 0xffffffffffffffff, 0x8) r6 = socket$kcm(0xa, 0x1, 0x106) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r5, 0x4) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f00000000c0)=@in6={0xa, 0x4001, 0x0, @private2, 0xfffffffc}, 0x80, 0x0}, 0x20000001) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7, @void, @value}, 0x94) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x7, 0x3, 0xfd, 0x7, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa75, 0x2, @perf_config_ext={0x8, 0x80}, 0x80, 0x7, 0x100, 0x0, 0xe, 0x7, 0x1, 0x0, 0x7, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r7}, 0x10) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000fbffffff00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000003"], 0x48) r8 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r8, &(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00f\x00'], 0xfe33) socketpair$unix(0x2d, 0x2, 0x88, &(0x7f0000000580)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x0, 0x0) 1.006222426s ago: executing program 3 (id=621): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20004808) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff3c, 0x0}, 0xe07e872420dfefca) r2 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r1, &(0x7f0000000580)={&(0x7f0000000200)=@nfc, 0x80, 0x0}, 0x10000) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000) (fail_nth: 6) 857.0422ms ago: executing program 4 (id=622): socket$kcm(0x10, 0x2, 0x4) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r3}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff29, 0x0}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x36}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000700000095000000000000006100000600000000bf91000000000000b7020000000000008500000000000000b7000000000000009500"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) gettid() r6 = getpid() perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14125, 0x2e, 0xfffffbff, 0x3, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) getpid() perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0xf8, 0x0, &(0x7f00000004c0)="b9180bb7600a070c009e40f086dd1fff310005e03300fd010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7473be0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773", 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea033c00fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 691.649753ms ago: executing program 2 (id=623): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e5ffffffffff"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x10, &(0x7f0000000000), 0xc) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 591.414898ms ago: executing program 3 (id=624): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [], {0x95, 0x0, 0x0, 0x1a03d3}}, &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x20000000, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) 588.271105ms ago: executing program 4 (id=625): r0 = perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x40107446, &(0x7f0000000180)) r3 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) mkdir(&(0x7f0000001580)='./file0\x00', 0xc0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) r4 = getpid() r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0xc00, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b70700000000000063ef1c000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffff", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="feffffff00000005", &(0x7f0000000700)=""/8, 0x447, 0x6000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000200)=r8, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f92aa3c92b", 0x14}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000001540)={&(0x7f0000000100)=@phonet, 0x80, &(0x7f00000015c0)=[{0x0}, {0x0}, {&(0x7f0000000240)=""/53, 0x35}, {&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/69, 0x45}, {&(0x7f0000001940)=""/226, 0xe2}, {&(0x7f00000016c0)=""/237, 0xed}, {&(0x7f00000017c0)=""/190, 0xbe}], 0x9}, 0x60) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3b, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0x3}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 280.308217ms ago: executing program 3 (id=626): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffe38, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000012006bcd9e3fe3dc6e48aa31086b8703130000001f030000000000ff040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 163.160594ms ago: executing program 2 (id=627): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={0x1, &(0x7f0000001240)="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", &(0x7f0000000040)=""/78}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 65.903333ms ago: executing program 2 (id=628): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = socket$kcm(0x18, 0x0, 0x0) sendmsg$sock(r0, &(0x7f00000008c0)={&(0x7f0000000740)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000a00)="f64ea61daa12a5640ff36be72995bf1938841a1edf0f369df358dc50b6165b218bb7fecfbf6e7bd58b3fc4192b8369c228b5bda9dac764ea8698e84f58c882b5289bbc42a87bf08113a6ca33", 0x4c}], 0x1, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0xf}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x8589}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x4d}}], 0xd8}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x82004000, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7b, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac141416441805034d2f87e5940c05ab845013f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d83", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007fc5f603ff65ec5deb000071673fa79d93014b8e7781c2", @ANYRES8=r1], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x6, &(0x7f0000000400)=ANY=[@ANYRESDEC=r0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, 0x1f00, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x82, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x19, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r6) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x6}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x17, 0x3, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x4, 0xfffffffe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 3 (id=629): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/19], 0x48) r1 = getpid() r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18af4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x2078, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000017c0)) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="1400000035000b45d30000000000000005d25a80", 0x14}], 0x1}, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x40000000}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) kernel console output (not intermixed with test programs): kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 106.993206][ T6053] lowmem_reserve[]: 0 0 0 0 0 [ 107.018020][ T6053] Node 1 Normal free:3903120kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:260kB local_pcp:100kB free_cma:0kB [ 107.078655][ T6053] lowmem_reserve[]: 0 0 0 0 0 [ 107.083472][ T6053] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 107.126876][ T6053] Node 0 DMA32: 416*4kB (UE) 210*8kB (UME) 228*16kB (U) 35*32kB (UME) 3*64kB (E) 3*128kB (UE) 1*256kB (E) 1*512kB (E) 1*1024kB (M) 1*2048kB (M) 330*4096kB (M) = 1364208kB [ 107.168735][ T6053] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 107.224126][ T6053] Node 1 Normal: 192*4kB (UE) 52*8kB (UME) 38*16kB (UME) 203*32kB (UME) 92*64kB (UME) 23*128kB (UME) 12*256kB (UME) 6*512kB (UM) 5*1024kB (UME) 2*2048kB (UE) 945*4096kB (UM) = 3903200kB [ 107.247121][ T6062] FAULT_INJECTION: forcing a failure. [ 107.247121][ T6062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.302903][ T6053] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 107.317336][ T6062] CPU: 1 UID: 0 PID: 6062 Comm: syz.3.45 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 107.317367][ T6062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 107.317386][ T6062] Call Trace: [ 107.317395][ T6062] [ 107.317405][ T6062] dump_stack_lvl+0x241/0x360 [ 107.317454][ T6062] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.317489][ T6062] ? __pfx__printk+0x10/0x10 [ 107.317584][ T6062] should_fail_ex+0x424/0x570 [ 107.317636][ T6062] _copy_from_user+0x2d/0xb0 [ 107.317671][ T6062] generic_map_update_batch+0x59f/0x8e0 [ 107.317737][ T6062] ? __pfx_generic_map_update_batch+0x10/0x10 [ 107.317756][ T6062] ? __fget_files+0x39d/0x420 [ 107.317777][ T6062] ? __fget_files+0x2a/0x420 [ 107.317828][ T6062] ? __pfx_generic_map_update_batch+0x10/0x10 [ 107.317847][ T6062] bpf_map_do_batch+0x39a/0x660 [ 107.317902][ T6062] __sys_bpf+0x3c1/0x8b0 [ 107.317939][ T6062] ? __pfx___sys_bpf+0x10/0x10 [ 107.318012][ T6062] ? ksys_write+0x275/0x2d0 [ 107.318085][ T6062] __x64_sys_bpf+0x7c/0x90 [ 107.318117][ T6062] do_syscall_64+0xf3/0x210 [ 107.318144][ T6062] ? clear_bhb_loop+0x45/0xa0 [ 107.318178][ T6062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.318199][ T6062] RIP: 0033:0x7f9b44f8e969 [ 107.318220][ T6062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.318237][ T6062] RSP: 002b:00007f9b45d1d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 107.318259][ T6062] RAX: ffffffffffffffda RBX: 00007f9b451b5fa0 RCX: 00007f9b44f8e969 [ 107.318275][ T6062] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 107.318288][ T6062] RBP: 00007f9b45d1d090 R08: 0000000000000000 R09: 0000000000000000 [ 107.318300][ T6062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.318312][ T6062] R13: 0000000000000000 R14: 00007f9b451b5fa0 R15: 00007ffe446077e8 [ 107.318384][ T6062] [ 107.342695][ T6053] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 107.477551][ T6066] Zero length message leads to an empty skb [ 107.569971][ T6069] netlink: 'syz.4.48': attribute type 4 has an invalid length. [ 107.577602][ T6069] netlink: 'syz.4.48': attribute type 7 has an invalid length. [ 107.638143][ T6053] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 107.726125][ T6053] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 107.748116][ T6053] 66128 total pagecache pages [ 107.755861][ T6053] 0 pages in swap cache [ 107.760737][ T6053] Free swap = 124996kB [ 107.764940][ T6053] Total swap = 124996kB [ 107.798039][ T6053] 2097051 pages RAM [ 107.801923][ T6053] 0 pages HighMem/MovableOnly [ 107.806641][ T6053] 428577 pages reserved [ 107.821458][ T6053] 0 pages cma reserved [ 108.285822][ T6077] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.49'. [ 109.333116][ T6098] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.57'. [ 110.122038][ T6115] FAULT_INJECTION: forcing a failure. [ 110.122038][ T6115] name failslab, interval 1, probability 0, space 0, times 0 [ 110.180509][ T6115] CPU: 0 UID: 0 PID: 6115 Comm: syz.2.64 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 110.180545][ T6115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 110.180559][ T6115] Call Trace: [ 110.180578][ T6115] [ 110.180597][ T6115] dump_stack_lvl+0x241/0x360 [ 110.180702][ T6115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.180763][ T6115] ? __pfx__printk+0x10/0x10 [ 110.181011][ T6115] should_fail_ex+0x424/0x570 [ 110.181148][ T6115] should_failslab+0xac/0x100 [ 110.181227][ T6115] __kmalloc_cache_noprof+0x73/0x370 [ 110.181254][ T6115] ? sctp_add_bind_addr+0x89/0x3a0 [ 110.181363][ T6115] sctp_add_bind_addr+0x89/0x3a0 [ 110.181475][ T6115] sctp_copy_local_addr_list+0x313/0x500 [ 110.181558][ T6115] ? sctp_copy_local_addr_list+0xad/0x500 [ 110.181623][ T6115] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 110.181731][ T6115] ? sctp_v4_is_any+0x35/0x60 [ 110.181765][ T6115] ? sctp_copy_one_addr+0x94/0x360 [ 110.181883][ T6115] sctp_bind_addr_copy+0x176/0x3b0 [ 110.182028][ T6115] sctp_connect_new_asoc+0x337/0x700 [ 110.182135][ T6115] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 110.182288][ T6115] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 110.182391][ T6115] __sctp_connect+0x6ab/0xe60 [ 110.182435][ T6115] ? perf_trace_preemptirq_template+0x2d4/0x400 [ 110.182586][ T6115] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 110.182645][ T6115] ? __pfx___sctp_connect+0x10/0x10 [ 110.182811][ T6115] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 110.182903][ T6115] sctp_setsockopt_connectx+0x183/0x2a0 [ 110.183003][ T6115] ? __pfx_sctp_setsockopt_connectx+0x10/0x10 [ 110.183033][ T6115] ? do_raw_spin_unlock+0x13c/0x8b0 [ 110.183212][ T6115] sctp_setsockopt+0x701/0x11e0 [ 110.183309][ T6115] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 110.183346][ T6115] do_sock_setsockopt+0x3b1/0x710 [ 110.183487][ T6115] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 110.183516][ T6115] ? __fget_files+0x2a/0x420 [ 110.183588][ T6115] ? __fget_files+0x39d/0x420 [ 110.183616][ T6115] ? __fget_files+0x2a/0x420 [ 110.183783][ T6115] __x64_sys_setsockopt+0x187/0x210 [ 110.183926][ T6115] do_syscall_64+0xf3/0x210 [ 110.183974][ T6115] ? clear_bhb_loop+0x45/0xa0 [ 110.184049][ T6115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.184080][ T6115] RIP: 0033:0x7fa2ec58e969 [ 110.184121][ T6115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.184137][ T6115] RSP: 002b:00007fa2ed35f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 110.184160][ T6115] RAX: ffffffffffffffda RBX: 00007fa2ec7b5fa0 RCX: 00007fa2ec58e969 [ 110.184175][ T6115] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000007 [ 110.184187][ T6115] RBP: 00007fa2ed35f090 R08: 0000000000000020 R09: 0000000000000000 [ 110.184199][ T6115] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 110.184212][ T6115] R13: 0000000000000000 R14: 00007fa2ec7b5fa0 R15: 00007fff5b429b08 [ 110.184450][ T6115] [ 111.445329][ T6130] netlink: 'syz.1.68': attribute type 33 has an invalid length. [ 111.471372][ T6130] netlink: 'syz.1.68': attribute type 13 has an invalid length. [ 111.499144][ T6130] netlink: 152 bytes leftover after parsing attributes in process `syz.1.68'. [ 111.527545][ T6135] FAULT_INJECTION: forcing a failure. [ 111.527545][ T6135] name failslab, interval 1, probability 0, space 0, times 0 [ 111.635783][ T6135] CPU: 0 UID: 0 PID: 6135 Comm: syz.3.70 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 111.635816][ T6135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 111.635829][ T6135] Call Trace: [ 111.635841][ T6135] [ 111.635853][ T6135] dump_stack_lvl+0x241/0x360 [ 111.635915][ T6135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.635965][ T6135] ? __pfx__printk+0x10/0x10 [ 111.636079][ T6135] should_fail_ex+0x424/0x570 [ 111.636150][ T6135] should_failslab+0xac/0x100 [ 111.636192][ T6135] __kmalloc_cache_noprof+0x73/0x370 [ 111.636222][ T6135] ? sctp_add_bind_addr+0x89/0x3a0 [ 111.636278][ T6135] sctp_add_bind_addr+0x89/0x3a0 [ 111.636336][ T6135] sctp_copy_local_addr_list+0x313/0x500 [ 111.636383][ T6135] ? sctp_copy_local_addr_list+0xad/0x500 [ 111.636422][ T6135] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 111.636479][ T6135] ? sctp_v4_is_any+0x35/0x60 [ 111.636506][ T6135] ? sctp_copy_one_addr+0x94/0x360 [ 111.636565][ T6135] sctp_bind_addr_copy+0xad/0x3b0 [ 111.636601][ T6135] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 111.636659][ T6135] sctp_connect_new_asoc+0x337/0x700 [ 111.636710][ T6135] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 111.636738][ T6135] ? sctp_sendmsg+0xf30/0x3620 [ 111.636815][ T6135] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 111.636843][ T6135] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 111.636893][ T6135] sctp_sendmsg+0x2009/0x3620 [ 111.637049][ T6135] ? __pfx_sctp_sendmsg+0x10/0x10 [ 111.637107][ T6135] ? aa_sk_perm+0x96f/0xac0 [ 111.637227][ T6135] ? inet_sendmsg+0x330/0x390 [ 111.637283][ T6135] __sock_sendmsg+0x1a6/0x270 [ 111.637338][ T6135] ____sys_sendmsg+0x523/0x860 [ 111.637426][ T6135] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.637455][ T6135] ? __fget_files+0x2a/0x420 [ 111.637501][ T6135] ? __fget_files+0x2a/0x420 [ 111.637581][ T6135] __sys_sendmsg+0x271/0x360 [ 111.637654][ T6135] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.637864][ T6135] ? perf_trace_preemptirq_template+0xfa/0x400 [ 111.638002][ T6135] ? do_syscall_64+0xb6/0x210 [ 111.638050][ T6135] do_syscall_64+0xf3/0x210 [ 111.638079][ T6135] ? clear_bhb_loop+0x45/0xa0 [ 111.638122][ T6135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.638144][ T6135] RIP: 0033:0x7f9b44f8e969 [ 111.638170][ T6135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.638187][ T6135] RSP: 002b:00007f9b45d1d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.638209][ T6135] RAX: ffffffffffffffda RBX: 00007f9b451b5fa0 RCX: 00007f9b44f8e969 [ 111.638225][ T6135] RDX: 0000000000000080 RSI: 0000200000000380 RDI: 0000000000000005 [ 111.638238][ T6135] RBP: 00007f9b45d1d090 R08: 0000000000000000 R09: 0000000000000000 [ 111.638250][ T6135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 111.638262][ T6135] R13: 0000000000000000 R14: 00007f9b451b5fa0 R15: 00007ffe446077e8 [ 111.638365][ T6135] [ 112.658516][ T6143] FAULT_INJECTION: forcing a failure. [ 112.658516][ T6143] name failslab, interval 1, probability 0, space 0, times 0 [ 112.720580][ T6143] CPU: 0 UID: 0 PID: 6143 Comm: syz.3.73 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 112.720613][ T6143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 112.720626][ T6143] Call Trace: [ 112.720635][ T6143] [ 112.720644][ T6143] dump_stack_lvl+0x241/0x360 [ 112.720685][ T6143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.720717][ T6143] ? __pfx__printk+0x10/0x10 [ 112.720753][ T6143] ? __pfx___might_resched+0x10/0x10 [ 112.720780][ T6143] should_fail_ex+0x424/0x570 [ 112.720819][ T6143] should_failslab+0xac/0x100 [ 112.720842][ T6143] ? __get_vm_area_node+0x132/0x2d0 [ 112.720863][ T6143] __kmalloc_cache_node_noprof+0x74/0x3c0 [ 112.720898][ T6143] __get_vm_area_node+0x132/0x2d0 [ 112.720938][ T6143] __vmalloc_node_range_noprof+0x349/0x1390 [ 112.720967][ T6143] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 112.720998][ T6143] ? kstrtoull+0x1d3/0x2f0 [ 112.721022][ T6143] ? __pfx_kstrtoull+0x10/0x10 [ 112.721068][ T6143] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 112.721108][ T6143] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 112.721141][ T6143] __vmalloc_noprof+0x79/0x90 [ 112.721166][ T6143] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 112.721196][ T6143] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 112.721223][ T6143] ? bpf_prog_alloc+0x28/0x1b0 [ 112.721255][ T6143] bpf_prog_alloc+0x3a/0x1b0 [ 112.721286][ T6143] bpf_prog_load+0x7f4/0x2250 [ 112.721331][ T6143] ? __pfx_bpf_prog_load+0x10/0x10 [ 112.721359][ T6143] ? __pfx_perf_trace_lock+0x10/0x10 [ 112.721407][ T6143] ? bpf_lsm_bpf+0x9/0x10 [ 112.721441][ T6143] __sys_bpf+0x5dd/0x8b0 [ 112.721472][ T6143] ? __pfx___sys_bpf+0x10/0x10 [ 112.721523][ T6143] ? ksys_write+0x275/0x2d0 [ 112.721571][ T6143] __x64_sys_bpf+0x7c/0x90 [ 112.721597][ T6143] do_syscall_64+0xf3/0x210 [ 112.721622][ T6143] ? clear_bhb_loop+0x45/0xa0 [ 112.721649][ T6143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.721669][ T6143] RIP: 0033:0x7f9b44f8e969 [ 112.721688][ T6143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.721705][ T6143] RSP: 002b:00007f9b45d1d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 112.721728][ T6143] RAX: ffffffffffffffda RBX: 00007f9b451b5fa0 RCX: 00007f9b44f8e969 [ 112.721743][ T6143] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 112.721756][ T6143] RBP: 00007f9b45d1d090 R08: 0000000000000000 R09: 0000000000000000 [ 112.721769][ T6143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.721781][ T6143] R13: 0000000000000000 R14: 00007f9b451b5fa0 R15: 00007ffe446077e8 [ 112.721816][ T6143] [ 113.618682][ T6159] FAULT_INJECTION: forcing a failure. [ 113.618682][ T6159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.661358][ T6159] CPU: 1 UID: 0 PID: 6159 Comm: syz.3.80 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 113.661385][ T6159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 113.661396][ T6159] Call Trace: [ 113.661413][ T6159] [ 113.661420][ T6159] dump_stack_lvl+0x241/0x360 [ 113.661454][ T6159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.661480][ T6159] ? __pfx__printk+0x10/0x10 [ 113.661516][ T6159] should_fail_ex+0x424/0x570 [ 113.661548][ T6159] _copy_to_user+0x31/0xb0 [ 113.661574][ T6159] simple_read_from_buffer+0xc4/0x170 [ 113.661605][ T6159] proc_fail_nth_read+0x1ef/0x260 [ 113.661626][ T6159] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.661646][ T6159] ? rw_verify_area+0x246/0x630 [ 113.661672][ T6159] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.661694][ T6159] vfs_read+0x21f/0xb90 [ 113.661728][ T6159] ? __pfx___mutex_lock+0x10/0x10 [ 113.661752][ T6159] ? __pfx_vfs_read+0x10/0x10 [ 113.661783][ T6159] ? __fget_files+0x2a/0x420 [ 113.661805][ T6159] ? __fget_files+0x39d/0x420 [ 113.661823][ T6159] ? __fget_files+0x2a/0x420 [ 113.661853][ T6159] ksys_read+0x19d/0x2d0 [ 113.661883][ T6159] ? __pfx_ksys_read+0x10/0x10 [ 113.661915][ T6159] ? do_syscall_64+0xb6/0x210 [ 113.661938][ T6159] do_syscall_64+0xf3/0x210 [ 113.661959][ T6159] ? clear_bhb_loop+0x45/0xa0 [ 113.661982][ T6159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.662000][ T6159] RIP: 0033:0x7f9b44f8d37c [ 113.662018][ T6159] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 113.662034][ T6159] RSP: 002b:00007f9b45d1d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 113.662055][ T6159] RAX: ffffffffffffffda RBX: 00007f9b451b5fa0 RCX: 00007f9b44f8d37c [ 113.662069][ T6159] RDX: 000000000000000f RSI: 00007f9b45d1d0a0 RDI: 0000000000000004 [ 113.662080][ T6159] RBP: 00007f9b45d1d090 R08: 0000000000000000 R09: 0000000000000000 [ 113.662092][ T6159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.662103][ T6159] R13: 0000000000000000 R14: 00007f9b451b5fa0 R15: 00007ffe446077e8 [ 113.662134][ T6159] [ 114.559723][ T6173] veth0_vlan: entered allmulticast mode [ 114.715784][ T6185] netlink: 'syz.4.89': attribute type 3 has an invalid length. [ 114.720483][ T6171] ªªªªªª: renamed from vlan0 [ 114.758120][ T6185] netlink: 'syz.4.89': attribute type 1 has an invalid length. [ 114.779444][ T6185] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.89'. [ 114.916279][ T6185] netlink: 'syz.4.89': attribute type 3 has an invalid length. [ 114.938546][ T6185] netlink: 199752 bytes leftover after parsing attributes in process `syz.4.89'. [ 116.084635][ T6213] netlink: 'syz.1.99': attribute type 21 has an invalid length. [ 116.094943][ T6213] netlink: 'syz.1.99': attribute type 6 has an invalid length. [ 116.097491][ T6205] netlink: 'syz.4.96': attribute type 33 has an invalid length. [ 116.104082][ T6213] netlink: 132 bytes leftover after parsing attributes in process `syz.1.99'. [ 116.122207][ T6213] netlink: 188 bytes leftover after parsing attributes in process `syz.1.99'. [ 116.135335][ T6213] netlink: 'syz.1.99': attribute type 21 has an invalid length. [ 116.147208][ T6213] netlink: 'syz.1.99': attribute type 6 has an invalid length. [ 116.158534][ T6213] netlink: 132 bytes leftover after parsing attributes in process `syz.1.99'. [ 116.547830][ T6228] FAULT_INJECTION: forcing a failure. [ 116.547830][ T6228] name failslab, interval 1, probability 0, space 0, times 0 [ 116.565545][ T6228] CPU: 1 UID: 0 PID: 6228 Comm: syz.0.102 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 116.565576][ T6228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 116.565589][ T6228] Call Trace: [ 116.565597][ T6228] [ 116.565606][ T6228] dump_stack_lvl+0x241/0x360 [ 116.565648][ T6228] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.565680][ T6228] ? __pfx__printk+0x10/0x10 [ 116.565716][ T6228] ? __pfx___might_resched+0x10/0x10 [ 116.565743][ T6228] should_fail_ex+0x424/0x570 [ 116.565782][ T6228] should_failslab+0xac/0x100 [ 116.565806][ T6228] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 116.565831][ T6228] ? __alloc_skb+0x1c2/0x480 [ 116.565866][ T6228] __alloc_skb+0x1c2/0x480 [ 116.565904][ T6228] ? __pfx___alloc_skb+0x10/0x10 [ 116.565937][ T6228] ? netlink_autobind+0xd6/0x2f0 [ 116.565963][ T6228] ? netlink_autobind+0x2b0/0x2f0 [ 116.565997][ T6228] netlink_sendmsg+0x638/0xcd0 [ 116.566040][ T6228] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.566073][ T6228] ? aa_sock_msg_perm+0x91/0x160 [ 116.566107][ T6228] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.566139][ T6228] __sock_sendmsg+0x221/0x270 [ 116.566170][ T6228] ____sys_sendmsg+0x523/0x860 [ 116.566215][ T6228] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.566244][ T6228] ? __fget_files+0x2a/0x420 [ 116.566269][ T6228] ? __fget_files+0x2a/0x420 [ 116.566302][ T6228] __sys_sendmsg+0x271/0x360 [ 116.566342][ T6228] ? __pfx___sys_sendmsg+0x10/0x10 [ 116.566448][ T6228] ? do_syscall_64+0xb6/0x210 [ 116.566476][ T6228] do_syscall_64+0xf3/0x210 [ 116.566499][ T6228] ? clear_bhb_loop+0x45/0xa0 [ 116.566526][ T6228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.566546][ T6228] RIP: 0033:0x7f78ea98e969 [ 116.566564][ T6228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.566581][ T6228] RSP: 002b:00007f78eb85c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.566604][ T6228] RAX: ffffffffffffffda RBX: 00007f78eabb5fa0 RCX: 00007f78ea98e969 [ 116.566619][ T6228] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000003 [ 116.566632][ T6228] RBP: 00007f78eb85c090 R08: 0000000000000000 R09: 0000000000000000 [ 116.566644][ T6228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.566655][ T6228] R13: 0000000000000000 R14: 00007f78eabb5fa0 R15: 00007fffc6c984b8 [ 116.566690][ T6228] [ 116.921193][ T6231] netlink: 'syz.0.103': attribute type 1 has an invalid length. [ 117.480973][ T6243] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.109'. [ 117.504785][ T6244] netlink: 'syz.3.107': attribute type 1 has an invalid length. [ 117.513323][ T6244] netlink: 17 bytes leftover after parsing attributes in process `syz.3.107'. [ 117.927531][ T6255] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.114'. [ 118.098290][ T6266] netlink: 703 bytes leftover after parsing attributes in process `syz.4.119'. [ 118.357520][ T5858] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 118.538602][ T6293] FAULT_INJECTION: forcing a failure. [ 118.538602][ T6293] name failslab, interval 1, probability 0, space 0, times 0 [ 118.564059][ T6293] CPU: 0 UID: 0 PID: 6293 Comm: syz.2.128 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 118.564090][ T6293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 118.564102][ T6293] Call Trace: [ 118.564110][ T6293] [ 118.564119][ T6293] dump_stack_lvl+0x241/0x360 [ 118.564157][ T6293] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.564193][ T6293] ? __pfx__printk+0x10/0x10 [ 118.564226][ T6293] ? __pfx___might_resched+0x10/0x10 [ 118.564250][ T6293] should_fail_ex+0x424/0x570 [ 118.564286][ T6293] should_failslab+0xac/0x100 [ 118.564308][ T6293] ? __get_vm_area_node+0x132/0x2d0 [ 118.564330][ T6293] __kmalloc_cache_node_noprof+0x74/0x3c0 [ 118.564361][ T6293] __get_vm_area_node+0x132/0x2d0 [ 118.564388][ T6293] __vmalloc_node_range_noprof+0x349/0x1390 [ 118.564415][ T6293] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 118.564444][ T6293] ? kstrtoull+0x1d3/0x2f0 [ 118.564467][ T6293] ? __pfx_kstrtoull+0x10/0x10 [ 118.564506][ T6293] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 118.564542][ T6293] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 118.564567][ T6293] __vmalloc_noprof+0x79/0x90 [ 118.564591][ T6293] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 118.564621][ T6293] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 118.564647][ T6293] ? bpf_prog_alloc+0x28/0x1b0 [ 118.564678][ T6293] bpf_prog_alloc+0x3a/0x1b0 [ 118.564708][ T6293] bpf_prog_load+0x7f4/0x2250 [ 118.564745][ T6293] ? __pfx_bpf_prog_load+0x10/0x10 [ 118.564796][ T6293] ? bpf_lsm_bpf+0x9/0x10 [ 118.564828][ T6293] __sys_bpf+0x5dd/0x8b0 [ 118.564857][ T6293] ? __pfx___sys_bpf+0x10/0x10 [ 118.564896][ T6293] ? ksys_write+0x275/0x2d0 [ 118.564939][ T6293] __x64_sys_bpf+0x7c/0x90 [ 118.564964][ T6293] do_syscall_64+0xf3/0x210 [ 118.564988][ T6293] ? clear_bhb_loop+0x45/0xa0 [ 118.565013][ T6293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.565033][ T6293] RIP: 0033:0x7fa2ec58e969 [ 118.565051][ T6293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.565075][ T6293] RSP: 002b:00007fa2ed35f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 118.565098][ T6293] RAX: ffffffffffffffda RBX: 00007fa2ec7b5fa0 RCX: 00007fa2ec58e969 [ 118.565113][ T6293] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 0000000000000005 [ 118.565126][ T6293] RBP: 00007fa2ed35f090 R08: 0000000000000000 R09: 0000000000000000 [ 118.565138][ T6293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.565149][ T6293] R13: 0000000000000001 R14: 00007fa2ec7b5fa0 R15: 00007fff5b429b08 [ 118.565187][ T6293] [ 118.565198][ T6293] warn_alloc: 1 callbacks suppressed [ 118.565209][ T6293] syz.2.128: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 118.592307][ T6294] FAULT_INJECTION: forcing a failure. [ 118.592307][ T6294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.650810][ T6296] FAULT_INJECTION: forcing a failure. [ 118.650810][ T6296] name failslab, interval 1, probability 0, space 0, times 0 [ 118.665347][ T6294] CPU: 1 UID: 0 PID: 6294 Comm: syz.4.127 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 118.665383][ T6294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 118.665396][ T6294] Call Trace: [ 118.665405][ T6294] [ 118.665414][ T6294] dump_stack_lvl+0x241/0x360 [ 118.665457][ T6294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.665489][ T6294] ? __pfx__printk+0x10/0x10 [ 118.665532][ T6294] should_fail_ex+0x424/0x570 [ 118.665572][ T6294] _copy_to_user+0x31/0xb0 [ 118.665605][ T6294] simple_read_from_buffer+0xc4/0x170 [ 118.665643][ T6294] proc_fail_nth_read+0x1ef/0x260 [ 118.665669][ T6294] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 118.665695][ T6294] ? rw_verify_area+0x246/0x630 [ 118.665723][ T6294] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 118.665747][ T6294] vfs_read+0x21f/0xb90 [ 118.665783][ T6294] ? __pfx___mutex_lock+0x10/0x10 [ 118.665808][ T6294] ? __pfx_vfs_read+0x10/0x10 [ 118.665842][ T6294] ? __fget_files+0x2a/0x420 [ 118.665865][ T6294] ? __fget_files+0x39d/0x420 [ 118.665885][ T6294] ? __fget_files+0x2a/0x420 [ 118.665925][ T6294] ksys_read+0x19d/0x2d0 [ 118.665957][ T6294] ? __pfx_ksys_read+0x10/0x10 [ 118.665995][ T6294] ? do_syscall_64+0xb6/0x210 [ 118.666023][ T6294] do_syscall_64+0xf3/0x210 [ 118.666046][ T6294] ? clear_bhb_loop+0x45/0xa0 [ 118.666073][ T6294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.666094][ T6294] RIP: 0033:0x7f8177b8d37c [ 118.666114][ T6294] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 118.666131][ T6294] RSP: 002b:00007f81759f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 118.666155][ T6294] RAX: ffffffffffffffda RBX: 00007f8177db6080 RCX: 00007f8177b8d37c [ 118.666171][ T6294] RDX: 000000000000000f RSI: 00007f81759f60a0 RDI: 0000000000000005 [ 118.666185][ T6294] RBP: 00007f81759f6090 R08: 0000000000000000 R09: 0000000000000000 [ 118.666199][ T6294] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 118.666212][ T6294] R13: 0000000000000001 R14: 00007f8177db6080 R15: 00007ffedbefe8c8 [ 118.666246][ T6294] [ 118.667251][ T6293] ,cpuset= [ 118.753749][ T6296] CPU: 0 UID: 0 PID: 6296 Comm: syz.3.126 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 118.753786][ T6296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 118.753801][ T6296] Call Trace: [ 118.753810][ T6296] [ 118.753822][ T6296] dump_stack_lvl+0x241/0x360 [ 118.753865][ T6296] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.753897][ T6296] ? __pfx__printk+0x10/0x10 [ 118.753934][ T6296] ? __pfx___might_resched+0x10/0x10 [ 118.753968][ T6296] should_fail_ex+0x424/0x570 [ 118.754008][ T6296] should_failslab+0xac/0x100 [ 118.754035][ T6296] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 118.754061][ T6296] ? __alloc_skb+0x1c2/0x480 [ 118.754099][ T6296] __alloc_skb+0x1c2/0x480 [ 118.754130][ T6296] ? tomoyo_check_open_permission+0x209/0x4f0 [ 118.754162][ T6296] ? __pfx___alloc_skb+0x10/0x10 [ 118.754206][ T6296] tipc_msg_build+0x14a/0x1050 [ 118.754236][ T6296] ? __lock_acquire+0xad5/0xd80 [ 118.754272][ T6296] ? __lock_acquire+0xad5/0xd80 [ 118.754304][ T6296] ? __pfx_tipc_msg_build+0x10/0x10 [ 118.754325][ T6296] ? aa_label_sk_perm+0x4f4/0x6d0 [ 118.754361][ T6296] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 118.754392][ T6296] __tipc_sendstream+0xa3b/0x14c0 [ 118.754456][ T6296] ? __pfx___tipc_sendstream+0x10/0x10 [ 118.754480][ T6296] ? __local_bh_enable_ip+0x168/0x200 [ 118.754515][ T6296] ? __pfx_woken_wake_function+0x10/0x10 [ 118.754545][ T6296] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 118.754577][ T6296] ? do_raw_spin_unlock+0x13c/0x8b0 [ 118.754614][ T6296] ? __pfx_tipc_sendstream+0x10/0x10 [ 118.754645][ T6296] tipc_sendstream+0x55/0x70 [ 118.754680][ T6296] __sock_sendmsg+0x221/0x270 [ 118.754712][ T6296] ____sys_sendmsg+0x523/0x860 [ 118.754757][ T6296] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.754788][ T6296] ? __fget_files+0x2a/0x420 [ 118.754814][ T6296] ? __fget_files+0x2a/0x420 [ 118.754845][ T6296] __sys_sendmsg+0x271/0x360 [ 118.754885][ T6296] ? __pfx___sys_sendmsg+0x10/0x10 [ 118.754958][ T6296] ? perf_trace_preemptirq_template+0xfa/0x400 [ 118.755016][ T6296] ? do_syscall_64+0xb6/0x210 [ 118.755044][ T6296] do_syscall_64+0xf3/0x210 [ 118.755068][ T6296] ? clear_bhb_loop+0x45/0xa0 [ 118.755095][ T6296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.755117][ T6296] RIP: 0033:0x7f9b44f8e969 [ 118.755138][ T6296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.755156][ T6296] RSP: 002b:00007f9b42df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.755180][ T6296] RAX: ffffffffffffffda RBX: 00007f9b451b6080 RCX: 00007f9b44f8e969 [ 118.755196][ T6296] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 118.755210][ T6296] RBP: 00007f9b42df6090 R08: 0000000000000000 R09: 0000000000000000 [ 118.755223][ T6296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.755236][ T6296] R13: 0000000000000001 R14: 00007f9b451b6080 R15: 00007ffe446077e8 [ 118.755271][ T6296] [ 119.017261][ T6300] FAULT_INJECTION: forcing a failure. [ 119.017261][ T6300] name failslab, interval 1, probability 0, space 0, times 0 [ 119.019647][ T6293] /,mems_allowed=0-1 [ 119.051905][ T6300] CPU: 0 UID: 0 PID: 6300 Comm: syz.0.130 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 119.051942][ T6300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 119.051955][ T6300] Call Trace: [ 119.051964][ T6300] [ 119.051974][ T6300] dump_stack_lvl+0x241/0x360 [ 119.052015][ T6300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.052048][ T6300] ? __pfx__printk+0x10/0x10 [ 119.052084][ T6300] ? __pfx___might_resched+0x10/0x10 [ 119.052119][ T6300] should_fail_ex+0x424/0x570 [ 119.052158][ T6300] should_failslab+0xac/0x100 [ 119.052184][ T6300] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 119.052209][ T6300] ? __alloc_skb+0x1c2/0x480 [ 119.052245][ T6300] __alloc_skb+0x1c2/0x480 [ 119.052283][ T6300] ? __pfx___alloc_skb+0x10/0x10 [ 119.052315][ T6300] ? tomoyo_check_path_number_acl+0x1e0/0x280 [ 119.052353][ T6300] alloc_skb_with_frags+0xc3/0x830 [ 119.052387][ T6300] ? __lock_acquire+0xad5/0xd80 [ 119.052425][ T6300] ? __lock_acquire+0xad5/0xd80 [ 119.052459][ T6300] sock_alloc_send_pskb+0x91c/0xa70 [ 119.052480][ T6300] ? __lock_acquire+0xad5/0xd80 [ 119.052531][ T6300] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 119.052565][ T6300] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 119.052599][ T6300] unix_dgram_sendmsg+0x6d4/0x1ea0 [ 119.052648][ T6300] ? aa_sk_perm+0x96f/0xac0 [ 119.052679][ T6300] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 119.052713][ T6300] ? __import_iovec+0x3c2/0x830 [ 119.052743][ T6300] ? aa_sock_msg_perm+0x91/0x160 [ 119.052778][ T6300] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 119.052803][ T6300] __sock_sendmsg+0x221/0x270 [ 119.052835][ T6300] ____sys_sendmsg+0x523/0x860 [ 119.052878][ T6300] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.052909][ T6300] ? __fget_files+0x2a/0x420 [ 119.052934][ T6300] ? __fget_files+0x2a/0x420 [ 119.052966][ T6300] __sys_sendmsg+0x271/0x360 [ 119.053007][ T6300] ? __pfx___sys_sendmsg+0x10/0x10 [ 119.053113][ T6300] ? do_syscall_64+0xb6/0x210 [ 119.053141][ T6300] do_syscall_64+0xf3/0x210 [ 119.053165][ T6300] ? clear_bhb_loop+0x45/0xa0 [ 119.053192][ T6300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.053214][ T6300] RIP: 0033:0x7f78ea98e969 [ 119.053233][ T6300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.053251][ T6300] RSP: 002b:00007f78eb83b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.053275][ T6300] RAX: ffffffffffffffda RBX: 00007f78eabb6080 RCX: 00007f78ea98e969 [ 119.053291][ T6300] RDX: 0000000000000000 RSI: 0000200000000b40 RDI: 0000000000000004 [ 119.053305][ T6300] RBP: 00007f78eb83b090 R08: 0000000000000000 R09: 0000000000000000 [ 119.053318][ T6300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.053331][ T6300] R13: 0000000000000000 R14: 00007f78eabb6080 R15: 00007fffc6c984b8 [ 119.053366][ T6300] [ 119.700689][ T6293] [ 119.703283][ T6293] CPU: 0 UID: 0 PID: 6293 Comm: syz.2.128 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 119.703310][ T6293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 119.703326][ T6293] Call Trace: [ 119.703335][ T6293] [ 119.703345][ T6293] dump_stack_lvl+0x241/0x360 [ 119.703390][ T6293] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.703419][ T6293] ? __pfx__printk+0x10/0x10 [ 119.703447][ T6293] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 119.703475][ T6293] ? __rcu_read_unlock+0xa1/0x110 [ 119.703506][ T6293] warn_alloc+0x27c/0x410 [ 119.703538][ T6293] ? __pfx_warn_alloc+0x10/0x10 [ 119.703574][ T6293] ? __get_vm_area_node+0x280/0x2d0 [ 119.703604][ T6293] __vmalloc_node_range_noprof+0x36e/0x1390 [ 119.703632][ T6293] ? kstrtoull+0x1d3/0x2f0 [ 119.703654][ T6293] ? __pfx_kstrtoull+0x10/0x10 [ 119.703695][ T6293] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 119.703731][ T6293] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 119.703758][ T6293] __vmalloc_noprof+0x79/0x90 [ 119.703802][ T6293] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 119.703831][ T6293] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 119.703858][ T6293] ? bpf_prog_alloc+0x28/0x1b0 [ 119.703888][ T6293] bpf_prog_alloc+0x3a/0x1b0 [ 119.703918][ T6293] bpf_prog_load+0x7f4/0x2250 [ 119.703959][ T6293] ? __pfx_bpf_prog_load+0x10/0x10 [ 119.704017][ T6293] ? bpf_lsm_bpf+0x9/0x10 [ 119.704049][ T6293] __sys_bpf+0x5dd/0x8b0 [ 119.704078][ T6293] ? __pfx___sys_bpf+0x10/0x10 [ 119.704119][ T6293] ? ksys_write+0x275/0x2d0 [ 119.704168][ T6293] __x64_sys_bpf+0x7c/0x90 [ 119.704192][ T6293] do_syscall_64+0xf3/0x210 [ 119.704216][ T6293] ? clear_bhb_loop+0x45/0xa0 [ 119.704240][ T6293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.704259][ T6293] RIP: 0033:0x7fa2ec58e969 [ 119.704283][ T6293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.704300][ T6293] RSP: 002b:00007fa2ed35f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 119.704321][ T6293] RAX: ffffffffffffffda RBX: 00007fa2ec7b5fa0 RCX: 00007fa2ec58e969 [ 119.704336][ T6293] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 0000000000000005 [ 119.704349][ T6293] RBP: 00007fa2ed35f090 R08: 0000000000000000 R09: 0000000000000000 [ 119.704361][ T6293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.704373][ T6293] R13: 0000000000000001 R14: 00007fa2ec7b5fa0 R15: 00007fff5b429b08 [ 119.704405][ T6293] [ 119.704573][ T6293] Mem-Info: [ 119.971628][ T6293] active_anon:4731 inactive_anon:0 isolated_anon:0 [ 119.971628][ T6293] active_file:10384 inactive_file:38323 isolated_file:0 [ 119.971628][ T6293] unevictable:768 dirty:15 writeback:0 [ 119.971628][ T6293] slab_reclaimable:9546 slab_unreclaimable:98273 [ 119.971628][ T6293] mapped:28738 shmem:1395 pagetables:830 [ 119.971628][ T6293] sec_pagetables:0 bounce:0 [ 119.971628][ T6293] kernel_misc_reclaimable:0 [ 119.971628][ T6293] free:1333250 free_pcp:512 free_cma:0 [ 120.026856][ T6293] Node 0 active_anon:18924kB inactive_anon:0kB active_file:41536kB inactive_file:153220kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114952kB dirty:60kB writeback:0kB shmem:4044kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10776kB pagetables:3320kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 120.138344][ T6293] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 120.227973][ T6293] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 120.235232][ T6303] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.131'. [ 120.276048][ T6293] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 120.311324][ T6293] Node 0 DMA32 free:1415336kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:19116kB inactive_anon:0kB active_file:41536kB inactive_file:153120kB unevictable:1536kB writepending:60kB present:3129332kB managed:2547264kB mlocked:0kB bounce:0kB free_pcp:1460kB local_pcp:692kB free_cma:0kB [ 120.352102][ T6293] lowmem_reserve[]: 0 0 0 0 0 [ 120.356994][ T6293] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 120.384547][ T6293] lowmem_reserve[]: 0 0 0 0 0 [ 120.389619][ T6293] Node 1 Normal free:3903328kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:164kB local_pcp:0kB free_cma:0kB [ 120.471805][ T6293] lowmem_reserve[]: 0 0 0 0 0 [ 120.488030][ T6293] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 120.548009][ T6293] Node 0 DMA32: 645*4kB (UM) 1082*8kB (UME) 914*16kB (UME) 467*32kB (UME) 374*64kB (UME) 116*128kB (UME) 54*256kB (UME) 27*512kB (ME) 15*1024kB (UM) 8*2048kB (M) 312*4096kB (M) = 1416932kB [ 120.572860][ T6312] IPv6: Can't replace route, no match found [ 120.580180][ T6312] netlink: 'syz.4.135': attribute type 20 has an invalid length. [ 120.621382][ T6293] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 120.647447][ T5858] Bluetooth: hci4: unexpected event 0x09 length: 15 > 3 [ 120.673461][ T6318] netlink: 'syz.1.138': attribute type 3 has an invalid length. [ 120.688095][ T6293] Node 1 Normal: 192*4kB (UE) 52*8kB (UME) 38*16kB (UME) 207*32kB (UME) 92*64kB (UME) 23*128kB (UME) 12*256kB (UME) [ 120.688393][ T6318] netlink: 'syz.1.138': attribute type 1 has an invalid length. [ 120.688398][ T6293] 6*512kB [ 120.713038][ T6318] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.138'. [ 120.778065][ T6293] (UM) 5*1024kB (UME) 2*2048kB (UE) 945*4096kB (UM) = 3903328kB [ 120.829723][ T6293] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 120.847695][ T6323] netlink: 'syz.0.139': attribute type 1 has an invalid length. [ 120.866708][ T6293] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 120.866911][ T6323] netlink: 'syz.0.139': attribute type 2 has an invalid length. [ 120.898016][ T6293] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 120.912549][ T6323] netlink: 'syz.0.139': attribute type 4 has an invalid length. [ 120.926357][ T6293] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 120.928046][ T6323] netlink: 'syz.0.139': attribute type 1 has an invalid length. [ 120.948530][ T6293] 50102 total pagecache pages [ 120.948554][ T6293] 0 pages in swap cache [ 120.948564][ T6293] Free swap = 124996kB [ 120.948575][ T6293] Total swap = 124996kB [ 120.948587][ T6293] 2097051 pages RAM [ 120.948596][ T6293] 0 pages HighMem/MovableOnly [ 120.948606][ T6293] 428577 pages reserved [ 120.948615][ T6293] 0 pages cma reserved [ 121.020251][ T6323] netlink: 'syz.0.139': attribute type 2 has an invalid length. [ 121.032152][ T6323] netlink: 129988 bytes leftover after parsing attributes in process `syz.0.139'. [ 121.080868][ T6332] @ÿÿ: renamed from bridge_slave_0 (while UP) [ 121.551659][ T6346] FAULT_INJECTION: forcing a failure. [ 121.551659][ T6346] name failslab, interval 1, probability 0, space 0, times 0 [ 121.589494][ T6346] CPU: 0 UID: 0 PID: 6346 Comm: syz.0.146 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 121.589526][ T6346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 121.589540][ T6346] Call Trace: [ 121.589550][ T6346] [ 121.589562][ T6346] dump_stack_lvl+0x241/0x360 [ 121.589614][ T6346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.589651][ T6346] ? __pfx__printk+0x10/0x10 [ 121.589705][ T6346] ? __pfx___might_resched+0x10/0x10 [ 121.589745][ T6346] should_fail_ex+0x424/0x570 [ 121.589800][ T6346] should_failslab+0xac/0x100 [ 121.589835][ T6346] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 121.589863][ T6346] ? __alloc_skb+0x1c2/0x480 [ 121.589919][ T6346] __alloc_skb+0x1c2/0x480 [ 121.589974][ T6346] ? __pfx___alloc_skb+0x10/0x10 [ 121.590018][ T6346] ? netlink_autobind+0xd6/0x2f0 [ 121.590049][ T6346] ? netlink_autobind+0x2b0/0x2f0 [ 121.590096][ T6346] netlink_sendmsg+0x638/0xcd0 [ 121.590169][ T6346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.590216][ T6346] ? aa_sock_msg_perm+0x91/0x160 [ 121.590268][ T6346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.590294][ T6346] __sock_sendmsg+0x221/0x270 [ 121.590337][ T6346] ____sys_sendmsg+0x523/0x860 [ 121.590406][ T6346] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.590436][ T6346] ? __fget_files+0x2a/0x420 [ 121.590473][ T6346] ? __fget_files+0x2a/0x420 [ 121.590530][ T6346] __sys_sendmsg+0x271/0x360 [ 121.590587][ T6346] ? __pfx___sys_sendmsg+0x10/0x10 [ 121.590732][ T6346] ? perf_trace_preemptirq_template+0xfa/0x400 [ 121.590827][ T6346] ? do_syscall_64+0xb6/0x210 [ 121.590864][ T6346] do_syscall_64+0xf3/0x210 [ 121.590892][ T6346] ? clear_bhb_loop+0x45/0xa0 [ 121.590934][ T6346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.590956][ T6346] RIP: 0033:0x7f78ea98e969 [ 121.590979][ T6346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.591002][ T6346] RSP: 002b:00007f78eb85c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.591026][ T6346] RAX: ffffffffffffffda RBX: 00007f78eabb5fa0 RCX: 00007f78ea98e969 [ 121.591041][ T6346] RDX: 0200000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 121.591056][ T6346] RBP: 00007f78eb85c090 R08: 0000000000000000 R09: 0000000000000000 [ 121.591069][ T6346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.591081][ T6346] R13: 0000000000000000 R14: 00007f78eabb5fa0 R15: 00007fffc6c984b8 [ 121.591151][ T6346] [ 122.123001][ T6351] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.147'. [ 122.428252][ T5858] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 122.524136][ T6363] validate_nla: 4 callbacks suppressed [ 122.524163][ T6363] netlink: 'syz.2.153': attribute type 27 has an invalid length. [ 123.363463][ T6362] syzkaller0: entered promiscuous mode [ 123.369461][ T6362] syzkaller0: entered allmulticast mode [ 123.420661][ T6363] bond0: (slave bond_slave_0): Releasing backup interface [ 124.490202][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 124.646045][ T6376] IPv6: NLM_F_CREATE should be specified when creating new route [ 124.806400][ T6381] FAULT_INJECTION: forcing a failure. [ 124.806400][ T6381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.868161][ T6381] CPU: 0 UID: 0 PID: 6381 Comm: syz.2.159 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 124.868193][ T6381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 124.868206][ T6381] Call Trace: [ 124.868218][ T6381] [ 124.868230][ T6381] dump_stack_lvl+0x241/0x360 [ 124.868289][ T6381] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.868330][ T6381] ? __pfx__printk+0x10/0x10 [ 124.868437][ T6381] should_fail_ex+0x424/0x570 [ 124.868505][ T6381] _copy_from_user+0x2d/0xb0 [ 124.868545][ T6381] move_addr_to_kernel+0x7f/0x170 [ 124.868585][ T6381] copy_msghdr_from_user+0x477/0x580 [ 124.868659][ T6381] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 124.868682][ T6381] ? __fget_files+0x2a/0x420 [ 124.868728][ T6381] ? __fget_files+0x2a/0x420 [ 124.868806][ T6381] __sys_sendmsg+0x20a/0x360 [ 124.868878][ T6381] ? __pfx___sys_sendmsg+0x10/0x10 [ 124.868908][ T6381] ? trace_call_bpf+0x61c/0x8a0 [ 124.869097][ T6381] ? perf_trace_preemptirq_template+0x2d4/0x400 [ 124.869240][ T6381] ? do_syscall_64+0xb6/0x210 [ 124.869287][ T6381] do_syscall_64+0xf3/0x210 [ 124.869317][ T6381] ? clear_bhb_loop+0x45/0xa0 [ 124.869366][ T6381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.869389][ T6381] RIP: 0033:0x7fa2ec58e969 [ 124.869415][ T6381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.869431][ T6381] RSP: 002b:00007fa2ed35f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.869454][ T6381] RAX: ffffffffffffffda RBX: 00007fa2ec7b5fa0 RCX: 00007fa2ec58e969 [ 124.869469][ T6381] RDX: 00000000200440e4 RSI: 00002000000004c0 RDI: 0000000000000007 [ 124.869482][ T6381] RBP: 00007fa2ed35f090 R08: 0000000000000000 R09: 0000000000000000 [ 124.869494][ T6381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.869506][ T6381] R13: 0000000000000000 R14: 00007fa2ec7b5fa0 R15: 00007fff5b429b08 [ 124.869610][ T6381] [ 125.793255][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.163'. [ 125.874644][ T5858] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 126.019485][ T6401] netlink: 'syz.0.164': attribute type 27 has an invalid length. [ 126.477383][ T6401] bond0: (slave bond_slave_0): Releasing backup interface [ 126.768457][ T6413] FAULT_INJECTION: forcing a failure. [ 126.768457][ T6413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.795393][ T6413] CPU: 1 UID: 0 PID: 6413 Comm: syz.2.170 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 126.795432][ T6413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 126.795445][ T6413] Call Trace: [ 126.795452][ T6413] [ 126.795460][ T6413] dump_stack_lvl+0x241/0x360 [ 126.795497][ T6413] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.795526][ T6413] ? __pfx__printk+0x10/0x10 [ 126.795568][ T6413] should_fail_ex+0x424/0x570 [ 126.795606][ T6413] _copy_to_user+0x31/0xb0 [ 126.795637][ T6413] bpf_test_finish+0x5b5/0x930 [ 126.795666][ T6413] ? irqentry_exit+0x63/0x90 [ 126.795690][ T6413] ? __pfx_bpf_test_finish+0x10/0x10 [ 126.795719][ T6413] ? bpf_prog_test_run_skb+0x70e/0x1850 [ 126.795744][ T6413] ? convert___skb_to_skb+0x41/0x630 [ 126.795765][ T6413] ? convert_skb_to___skb+0x2d7/0x510 [ 126.795791][ T6413] bpf_prog_test_run_skb+0x1018/0x1850 [ 126.795837][ T6413] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 126.795858][ T6413] ? __fget_files+0x2a/0x420 [ 126.795881][ T6413] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 126.795906][ T6413] bpf_prog_test_run+0x2e4/0x360 [ 126.795937][ T6413] __sys_bpf+0x4ee/0x8b0 [ 126.795964][ T6413] ? __pfx___sys_bpf+0x10/0x10 [ 126.796003][ T6413] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 126.796042][ T6413] __x64_sys_bpf+0x7c/0x90 [ 126.796067][ T6413] do_syscall_64+0xf3/0x210 [ 126.796089][ T6413] ? clear_bhb_loop+0x45/0xa0 [ 126.796114][ T6413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.796134][ T6413] RIP: 0033:0x7fa2ec58e969 [ 126.796151][ T6413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.796168][ T6413] RSP: 002b:00007fa2ed35f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 126.796190][ T6413] RAX: ffffffffffffffda RBX: 00007fa2ec7b5fa0 RCX: 00007fa2ec58e969 [ 126.796204][ T6413] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 126.796217][ T6413] RBP: 00007fa2ed35f090 R08: 0000000000000000 R09: 0000000000000000 [ 126.796229][ T6413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.796241][ T6413] R13: 0000000000000000 R14: 00007fa2ec7b5fa0 R15: 00007fff5b429b08 [ 126.796273][ T6413] [ 127.056146][ T6423] FAULT_INJECTION: forcing a failure. [ 127.056146][ T6423] name failslab, interval 1, probability 0, space 0, times 0 [ 127.171908][ T6423] CPU: 1 UID: 0 PID: 6423 Comm: syz.4.172 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 127.171940][ T6423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 127.171953][ T6423] Call Trace: [ 127.171962][ T6423] [ 127.171971][ T6423] dump_stack_lvl+0x241/0x360 [ 127.172009][ T6423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.172040][ T6423] ? __pfx__printk+0x10/0x10 [ 127.172081][ T6423] should_fail_ex+0x424/0x570 [ 127.172119][ T6423] should_failslab+0xac/0x100 [ 127.172154][ T6423] __kmalloc_noprof+0xdf/0x4d0 [ 127.172175][ T6423] ? iovec_from_user+0x87/0x240 [ 127.172207][ T6423] iovec_from_user+0x87/0x240 [ 127.172239][ T6423] __import_iovec+0x175/0x830 [ 127.172279][ T6423] import_iovec+0x7c/0xb0 [ 127.172311][ T6423] copy_msghdr_from_user+0x3ee/0x580 [ 127.172344][ T6423] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 127.172366][ T6423] ? __fget_files+0x2a/0x420 [ 127.172389][ T6423] ? __fget_files+0x2a/0x420 [ 127.172419][ T6423] __sys_sendmsg+0x20a/0x360 [ 127.172457][ T6423] ? __pfx___sys_sendmsg+0x10/0x10 [ 127.172486][ T6423] ? ktime_get+0x3e/0x200 [ 127.172543][ T6423] ? perf_trace_preemptirq_template+0xfa/0x400 [ 127.172590][ T6423] ? do_syscall_64+0xb6/0x210 [ 127.172616][ T6423] do_syscall_64+0xf3/0x210 [ 127.172638][ T6423] ? clear_bhb_loop+0x45/0xa0 [ 127.172663][ T6423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.172683][ T6423] RIP: 0033:0x7f8177b8e969 [ 127.172701][ T6423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.172718][ T6423] RSP: 002b:00007f81759f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.172740][ T6423] RAX: ffffffffffffffda RBX: 00007f8177db6080 RCX: 00007f8177b8e969 [ 127.172755][ T6423] RDX: 0000000000000000 RSI: 0000200000000880 RDI: 0000000000000005 [ 127.172768][ T6423] RBP: 00007f81759f6090 R08: 0000000000000000 R09: 0000000000000000 [ 127.172780][ T6423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.172792][ T6423] R13: 0000000000000000 R14: 00007f8177db6080 R15: 00007ffedbefe8c8 [ 127.172823][ T6423] [ 127.538605][ T6430] netlink: 'syz.3.178': attribute type 10 has an invalid length. [ 127.546623][ T6430] netlink: 40 bytes leftover after parsing attributes in process `syz.3.178'. [ 127.708308][ T6436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.179'. [ 127.929275][ T5858] Bluetooth: hci3: command 0x0406 tx timeout [ 128.243381][ T6445] netlink: 'syz.4.183': attribute type 2 has an invalid length. [ 128.267408][ T6445] netlink: 132 bytes leftover after parsing attributes in process `syz.4.183'. [ 128.767846][ T6447] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.184'. [ 129.155539][ T6464] netlink: 184 bytes leftover after parsing attributes in process `syz.1.189'. [ 129.229179][ T6468] FAULT_INJECTION: forcing a failure. [ 129.229179][ T6468] name failslab, interval 1, probability 0, space 0, times 0 [ 129.243633][ T6468] CPU: 1 UID: 0 PID: 6468 Comm: syz.2.191 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 129.243662][ T6468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 129.243674][ T6468] Call Trace: [ 129.243682][ T6468] [ 129.243691][ T6468] dump_stack_lvl+0x241/0x360 [ 129.243729][ T6468] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.243759][ T6468] ? __pfx__printk+0x10/0x10 [ 129.243790][ T6468] ? __pfx_snprintf+0x10/0x10 [ 129.243819][ T6468] ? __pfx___might_resched+0x10/0x10 [ 129.243847][ T6468] should_fail_ex+0x424/0x570 [ 129.243885][ T6468] should_failslab+0xac/0x100 [ 129.243908][ T6468] __kmalloc_noprof+0xdf/0x4d0 [ 129.243938][ T6468] ? traceprobe_set_print_fmt+0x5e/0xc0 [ 129.243966][ T6468] traceprobe_set_print_fmt+0x5e/0xc0 [ 129.243992][ T6468] create_local_trace_uprobe+0x332/0x4d0 [ 129.244024][ T6468] ? __pfx_create_local_trace_uprobe+0x10/0x10 [ 129.244055][ T6468] ? memdup_user+0x99/0xd0 [ 129.244078][ T6468] perf_uprobe_init+0xf1/0x190 [ 129.244112][ T6468] perf_uprobe_event_init+0x103/0x190 [ 129.244135][ T6468] perf_try_init_event+0x14c/0x7f0 [ 129.244164][ T6468] perf_event_alloc+0x11ce/0x2bf0 [ 129.244190][ T6468] ? perf_event_alloc+0xe30/0x2bf0 [ 129.244230][ T6468] ? __pfx_perf_event_alloc+0x10/0x10 [ 129.244251][ T6468] ? __fget_files+0x2a/0x420 [ 129.244273][ T6468] ? __fget_files+0x39d/0x420 [ 129.244291][ T6468] ? __fget_files+0x2a/0x420 [ 129.244319][ T6468] __se_sys_perf_event_open+0x785/0x34b0 [ 129.244361][ T6468] ? __fget_files+0x2a/0x420 [ 129.244384][ T6468] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 129.244406][ T6468] ? perf_trace_preemptirq_template+0xfa/0x400 [ 129.244446][ T6468] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 129.244484][ T6468] ? __x64_sys_perf_event_open+0x20/0xc0 [ 129.244512][ T6468] do_syscall_64+0xf3/0x210 [ 129.244534][ T6468] ? clear_bhb_loop+0x45/0xa0 [ 129.244559][ T6468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.244579][ T6468] RIP: 0033:0x7fa2ec58e969 [ 129.244598][ T6468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.244614][ T6468] RSP: 002b:00007fa2ed33e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 129.244636][ T6468] RAX: ffffffffffffffda RBX: 00007fa2ec7b6080 RCX: 00007fa2ec58e969 [ 129.244651][ T6468] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 129.244663][ T6468] RBP: 00007fa2ed33e090 R08: 000000000000000d R09: 0000000000000000 [ 129.244676][ T6468] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 129.244688][ T6468] R13: 0000000000000000 R14: 00007fa2ec7b6080 R15: 00007fff5b429b08 [ 129.244721][ T6468] [ 129.756149][ T6472] FAULT_INJECTION: forcing a failure. [ 129.756149][ T6472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.773027][ T6472] CPU: 1 UID: 0 PID: 6472 Comm: syz.0.193 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 129.773055][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 129.773067][ T6472] Call Trace: [ 129.773076][ T6472] [ 129.773085][ T6472] dump_stack_lvl+0x241/0x360 [ 129.773125][ T6472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.773155][ T6472] ? __pfx__printk+0x10/0x10 [ 129.773203][ T6472] should_fail_ex+0x424/0x570 [ 129.773241][ T6472] _copy_from_iter+0x211/0x1c70 [ 129.773274][ T6472] ? __build_skb_around+0x247/0x3d0 [ 129.773310][ T6472] ? __alloc_skb+0x298/0x480 [ 129.773338][ T6472] ? __pfx__copy_from_iter+0x10/0x10 [ 129.773366][ T6472] ? __pfx___alloc_skb+0x10/0x10 [ 129.773399][ T6472] ? skb_put+0x114/0x1f0 [ 129.773434][ T6472] netlink_sendmsg+0x73c/0xcd0 [ 129.773477][ T6472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.773510][ T6472] ? aa_sock_msg_perm+0x91/0x160 [ 129.773544][ T6472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.773568][ T6472] __sock_sendmsg+0x221/0x270 [ 129.773598][ T6472] ____sys_sendmsg+0x523/0x860 [ 129.773642][ T6472] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.773672][ T6472] ? __fget_files+0x2a/0x420 [ 129.773696][ T6472] ? __fget_files+0x2a/0x420 [ 129.773727][ T6472] __sys_sendmsg+0x271/0x360 [ 129.773767][ T6472] ? __pfx___sys_sendmsg+0x10/0x10 [ 129.773874][ T6472] ? do_syscall_64+0xb6/0x210 [ 129.773902][ T6472] do_syscall_64+0xf3/0x210 [ 129.773924][ T6472] ? clear_bhb_loop+0x45/0xa0 [ 129.773950][ T6472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.773970][ T6472] RIP: 0033:0x7f78ea98e969 [ 129.773989][ T6472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.774006][ T6472] RSP: 002b:00007f78eb85c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.774027][ T6472] RAX: ffffffffffffffda RBX: 00007f78eabb5fa0 RCX: 00007f78ea98e969 [ 129.774041][ T6472] RDX: 000000002400c000 RSI: 0000200000000040 RDI: 0000000000000005 [ 129.774055][ T6472] RBP: 00007f78eb85c090 R08: 0000000000000000 R09: 0000000000000000 [ 129.774067][ T6472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.774078][ T6472] R13: 0000000000000000 R14: 00007f78eabb5fa0 R15: 00007fffc6c984b8 [ 129.774113][ T6472] [ 130.219318][ T6479] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.197'. [ 130.360995][ T6477] netlink: 40 bytes leftover after parsing attributes in process `syz.1.195'. [ 130.524452][ T6481] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.196'. [ 130.682046][ T6491] veth0_vlan: entered allmulticast mode [ 130.792670][ T6498] veth0_vlan: left promiscuous mode [ 130.806623][ T6498] veth0_vlan: entered promiscuous mode [ 130.856591][ T6501] netlink: 'syz.1.203': attribute type 10 has an invalid length. [ 131.050456][ T6501] team0: Device hsr_slave_0 failed to register rx_handler [ 131.240413][ T6514] netlink: 'syz.0.207': attribute type 21 has an invalid length. [ 131.262923][ T6501] syz.1.203 (6501) used greatest stack depth: 16808 bytes left [ 131.265454][ T6512] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.206'. [ 131.323797][ T6509] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.206'. [ 131.584424][ T6523] netlink: 'syz.4.211': attribute type 10 has an invalid length. [ 131.819234][ T6531] netlink: 132 bytes leftover after parsing attributes in process `syz.2.212'. [ 131.994918][ T6523] bridge0: port 3(team0) entered blocking state [ 132.088506][ T5851] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 132.091925][ T6523] bridge0: port 3(team0) entered disabled state [ 132.393313][ T6523] team0: entered allmulticast mode [ 132.399792][ T6523] team_slave_0: entered allmulticast mode [ 132.406511][ T6523] team_slave_1: entered allmulticast mode [ 132.565291][ T6523] team0: entered promiscuous mode [ 132.570771][ T6523] team_slave_0: entered promiscuous mode [ 132.576821][ T6523] team_slave_1: entered promiscuous mode [ 132.584038][ T6523] bridge0: port 3(team0) entered blocking state [ 132.590543][ T6523] bridge0: port 3(team0) entered forwarding state [ 132.693808][ T6544] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.216'. [ 132.895353][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.902247][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.979826][ T6550] netlink: 'syz.1.219': attribute type 10 has an invalid length. [ 132.987772][ T6550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.043589][ T6550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.217340][ T6550] batadv_slave_0: entered promiscuous mode [ 133.295692][ T6550] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 133.917182][ T6572] FAULT_INJECTION: forcing a failure. [ 133.917182][ T6572] name failslab, interval 1, probability 0, space 0, times 0 [ 134.001905][ T6572] CPU: 0 UID: 0 PID: 6572 Comm: syz.1.229 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 134.001937][ T6572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 134.001950][ T6572] Call Trace: [ 134.001958][ T6572] [ 134.001967][ T6572] dump_stack_lvl+0x241/0x360 [ 134.002005][ T6572] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.002034][ T6572] ? __pfx__printk+0x10/0x10 [ 134.002075][ T6572] should_fail_ex+0x424/0x570 [ 134.002112][ T6572] should_failslab+0xac/0x100 [ 134.002134][ T6572] __kmalloc_cache_noprof+0x73/0x370 [ 134.002154][ T6572] ? sctp_add_bind_addr+0x89/0x3a0 [ 134.002182][ T6572] sctp_add_bind_addr+0x89/0x3a0 [ 134.002211][ T6572] sctp_copy_local_addr_list+0x313/0x500 [ 134.002238][ T6572] ? sctp_copy_local_addr_list+0xad/0x500 [ 134.002263][ T6572] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 134.002291][ T6572] ? sctp_v4_is_any+0x35/0x60 [ 134.002313][ T6572] ? sctp_copy_one_addr+0x94/0x360 [ 134.002368][ T6572] sctp_bind_addr_copy+0xad/0x3b0 [ 134.002391][ T6572] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 134.002428][ T6572] sctp_connect_new_asoc+0x337/0x700 [ 134.002459][ T6572] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 134.002486][ T6572] ? sctp_sendmsg+0xf30/0x3620 [ 134.002520][ T6572] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 134.002547][ T6572] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 134.002578][ T6572] sctp_sendmsg+0x2009/0x3620 [ 134.002630][ T6572] ? __pfx_sctp_sendmsg+0x10/0x10 [ 134.002662][ T6572] ? aa_sk_perm+0x96f/0xac0 [ 134.002706][ T6572] ? inet_sendmsg+0x330/0x390 [ 134.002730][ T6572] __sock_sendmsg+0x1a6/0x270 [ 134.002759][ T6572] ____sys_sendmsg+0x523/0x860 [ 134.002800][ T6572] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.002829][ T6572] ? __fget_files+0x2a/0x420 [ 134.002853][ T6572] ? __fget_files+0x2a/0x420 [ 134.002884][ T6572] __sys_sendmsg+0x271/0x360 [ 134.002927][ T6572] ? __pfx___sys_sendmsg+0x10/0x10 [ 134.002991][ T6572] ? perf_trace_preemptirq_template+0xfa/0x400 [ 134.003019][ T6572] ? do_syscall_64+0xb6/0x210 [ 134.003061][ T6572] ? do_syscall_64+0xb6/0x210 [ 134.003086][ T6572] do_syscall_64+0xf3/0x210 [ 134.003107][ T6572] ? clear_bhb_loop+0x45/0xa0 [ 134.003133][ T6572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.003154][ T6572] RIP: 0033:0x7f1f7d38e969 [ 134.003173][ T6572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.003189][ T6572] RSP: 002b:00007f1f7e16e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.003211][ T6572] RAX: ffffffffffffffda RBX: 00007f1f7d5b5fa0 RCX: 00007f1f7d38e969 [ 134.003226][ T6572] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 0000000000000003 [ 134.003239][ T6572] RBP: 00007f1f7e16e090 R08: 0000000000000000 R09: 0000000000000000 [ 134.003251][ T6572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 134.003263][ T6572] R13: 0000000000000000 R14: 00007f1f7d5b5fa0 R15: 00007ffe51863948 [ 134.003296][ T6572] [ 134.845343][ T5851] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 134.978868][ T6588] netlink: 'syz.3.233': attribute type 10 has an invalid length. [ 134.984389][ T6583] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.232'. [ 134.986963][ T6588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.058351][ T6588] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.124724][ T6588] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 135.827397][ T6614] FAULT_INJECTION: forcing a failure. [ 135.827397][ T6614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.951397][ T6614] CPU: 1 UID: 0 PID: 6614 Comm: syz.3.241 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 135.951432][ T6614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 135.951452][ T6614] Call Trace: [ 135.951462][ T6614] [ 135.951474][ T6614] dump_stack_lvl+0x241/0x360 [ 135.951523][ T6614] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.951559][ T6614] ? __pfx__printk+0x10/0x10 [ 135.951638][ T6614] should_fail_ex+0x424/0x570 [ 135.951691][ T6614] _copy_from_user+0x2d/0xb0 [ 135.951727][ T6614] generic_map_update_batch+0x59f/0x8e0 [ 135.951794][ T6614] ? __pfx_generic_map_update_batch+0x10/0x10 [ 135.951814][ T6614] ? __fget_files+0x39d/0x420 [ 135.951836][ T6614] ? __fget_files+0x2a/0x420 [ 135.951889][ T6614] ? __pfx_generic_map_update_batch+0x10/0x10 [ 135.951909][ T6614] bpf_map_do_batch+0x39a/0x660 [ 135.951960][ T6614] __sys_bpf+0x3c1/0x8b0 [ 135.952000][ T6614] ? __pfx___sys_bpf+0x10/0x10 [ 135.952082][ T6614] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 135.952150][ T6614] __x64_sys_bpf+0x7c/0x90 [ 135.952182][ T6614] do_syscall_64+0xf3/0x210 [ 135.952211][ T6614] ? clear_bhb_loop+0x45/0xa0 [ 135.952245][ T6614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.952266][ T6614] RIP: 0033:0x7f9b44f8e969 [ 135.952289][ T6614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.952306][ T6614] RSP: 002b:00007f9b45d1d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 135.952329][ T6614] RAX: ffffffffffffffda RBX: 00007f9b451b5fa0 RCX: 00007f9b44f8e969 [ 135.952344][ T6614] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 135.952357][ T6614] RBP: 00007f9b45d1d090 R08: 0000000000000000 R09: 0000000000000000 [ 135.952370][ T6614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.952382][ T6614] R13: 0000000000000000 R14: 00007f9b451b5fa0 R15: 00007ffe446077e8 [ 135.952453][ T6614] [ 136.436675][ T6619] FAULT_INJECTION: forcing a failure. [ 136.436675][ T6619] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 136.521063][ T6619] CPU: 1 UID: 0 PID: 6619 Comm: syz.0.242 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 136.521095][ T6619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 136.521109][ T6619] Call Trace: [ 136.521117][ T6619] [ 136.521126][ T6619] dump_stack_lvl+0x241/0x360 [ 136.521164][ T6619] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.521204][ T6619] ? __pfx__printk+0x10/0x10 [ 136.521247][ T6619] should_fail_ex+0x424/0x570 [ 136.521285][ T6619] prepare_alloc_pages+0x220/0x610 [ 136.521323][ T6619] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 136.521360][ T6619] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 136.521412][ T6619] alloc_pages_mpol+0x339/0x690 [ 136.521442][ T6619] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 136.521475][ T6619] alloc_pages_noprof+0x121/0x190 [ 136.521500][ T6619] get_free_pages_noprof+0xc/0x30 [ 136.521527][ T6619] kasan_populate_vmalloc_pte+0x38/0xe0 [ 136.521557][ T6619] __apply_to_page_range+0x90c/0xe40 [ 136.521602][ T6619] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 136.521638][ T6619] ? __pfx___apply_to_page_range+0x10/0x10 [ 136.521674][ T6619] ? do_raw_spin_unlock+0x13c/0x8b0 [ 136.521709][ T6619] alloc_vmap_area+0x1d48/0x2410 [ 136.521758][ T6619] ? __pfx_alloc_vmap_area+0x10/0x10 [ 136.521782][ T6619] ? __kasan_kmalloc+0x9d/0xb0 [ 136.521815][ T6619] ? __kmalloc_cache_node_noprof+0x26a/0x3c0 [ 136.521843][ T6619] ? htab_map_alloc+0x3c3/0xbb0 [ 136.521862][ T6619] __get_vm_area_node+0x1c8/0x2d0 [ 136.521893][ T6619] __vmalloc_node_range_noprof+0x349/0x1390 [ 136.521920][ T6619] ? htab_map_alloc+0x3c3/0xbb0 [ 136.521940][ T6619] ? pcpu_memcg_post_alloc_hook+0x12e/0x740 [ 136.521973][ T6619] ? __pfx_pcpu_memcg_post_alloc_hook+0x10/0x10 [ 136.522002][ T6619] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 136.522054][ T6619] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 136.522112][ T6619] bpf_map_area_alloc+0xfc/0x120 [ 136.522142][ T6619] ? htab_map_alloc+0x3c3/0xbb0 [ 136.522164][ T6619] htab_map_alloc+0x3c3/0xbb0 [ 136.522194][ T6619] ? htab_map_alloc_check+0x38c/0x470 [ 136.522221][ T6619] map_create+0x912/0x11a0 [ 136.522253][ T6619] ? bpf_lsm_bpf+0x9/0x10 [ 136.522286][ T6619] __sys_bpf+0x744/0x8b0 [ 136.522315][ T6619] ? __pfx___sys_bpf+0x10/0x10 [ 136.522361][ T6619] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 136.522402][ T6619] __x64_sys_bpf+0x7c/0x90 [ 136.522428][ T6619] do_syscall_64+0xf3/0x210 [ 136.522451][ T6619] ? clear_bhb_loop+0x45/0xa0 [ 136.522477][ T6619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.522497][ T6619] RIP: 0033:0x7f78ea98e969 [ 136.522516][ T6619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.522533][ T6619] RSP: 002b:00007f78eb83b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 136.522555][ T6619] RAX: ffffffffffffffda RBX: 00007f78eabb6080 RCX: 00007f78ea98e969 [ 136.522570][ T6619] RDX: 0000000000000050 RSI: 0000200000000500 RDI: 0000000000000000 [ 136.522583][ T6619] RBP: 00007f78eb83b090 R08: 0000000000000000 R09: 0000000000000000 [ 136.522596][ T6619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 136.522608][ T6619] R13: 0000000000000000 R14: 00007f78eabb6080 R15: 00007fffc6c984b8 [ 136.522640][ T6619] [ 136.888342][ T5851] Bluetooth: hci0: command tx timeout [ 136.934193][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.243'. [ 138.673525][ T6638] : renamed from bond0 [ 138.744002][ T6638] : left promiscuous mode [ 138.811451][ T6638] bond_slave_0: left promiscuous mode [ 138.897751][ T6638] bond_slave_1: left promiscuous mode [ 139.008303][ T6638] batadv0: left promiscuous mode [ 139.038823][ T6638] batadv_slave_0: left promiscuous mode [ 139.058318][ T6648] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.248'. [ 139.094630][ T6646] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.250'. [ 139.562330][ T6660] netlink: 'syz.0.253': attribute type 29 has an invalid length. [ 139.598376][ T6660] netlink: 'syz.0.253': attribute type 2 has an invalid length. [ 139.612506][ T6660] netlink: 60 bytes leftover after parsing attributes in process `syz.0.253'. [ 139.624247][ T6660] netlink: 'syz.0.253': attribute type 29 has an invalid length. [ 140.733426][ T6686] netlink: 60 bytes leftover after parsing attributes in process `syz.3.261'. [ 141.845614][ T6709] netlink: 'syz.2.268': attribute type 3 has an invalid length. [ 141.854027][ T6709] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.268'. [ 141.882780][ T6701] netlink: 'syz.0.265': attribute type 29 has an invalid length. [ 141.958795][ T6710] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.269'. [ 142.429111][ T6732] ipvlan0: entered promiscuous mode [ 142.443820][ T6732] ipvlan0: entered allmulticast mode [ 142.692662][ T5851] Bluetooth: hci4: unexpected event 0x07 length: 15 < 255 [ 143.592483][ T6753] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.284'. [ 143.707390][ T6763] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.288'. [ 143.806508][ T5851] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255 [ 146.258756][ T5851] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4 [ 148.330697][ T5851] Bluetooth: hci4: command 0x0406 tx timeout [ 148.841081][ T6848] netlink: 'syz.3.316': attribute type 13 has an invalid length. [ 148.908155][ T6848] netlink: 152 bytes leftover after parsing attributes in process `syz.3.316'. [ 149.136504][ T6848] erspan0: refused to change device tx_queue_len [ 149.157876][ T6848] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 149.668846][ T6858] C: renamed from team_slave_0 (while UP) [ 149.784412][ T6858] netlink: 'syz.0.320': attribute type 3 has an invalid length. [ 149.899016][ T6858] netlink: 152 bytes leftover after parsing attributes in process `syz.0.320'. [ 149.998337][ T6858] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 150.085046][ T5858] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 151.489298][ T6884] netlink: 'syz.3.331': attribute type 1 has an invalid length. [ 151.679339][ T6883] warning: `syz.4.329' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 151.783624][ T6878] can: request_module (can-proto-5) failed. [ 151.939908][ T6897] netlink: 'syz.4.334': attribute type 29 has an invalid length. [ 151.973593][ T6897] netlink: 'syz.4.334': attribute type 29 has an invalid length. [ 151.993814][ T6897] netlink: 'syz.4.334': attribute type 29 has an invalid length. [ 152.014354][ T6897] netlink: 'syz.4.334': attribute type 29 has an invalid length. [ 152.095932][ T5858] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4 [ 152.282783][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.337'. [ 152.418571][ T6907] netlink: 'syz.3.338': attribute type 10 has an invalid length. [ 152.455333][ T6907] team0: Device veth1_macvtap failed to register rx_handler [ 152.521415][ T6909] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 152.531511][ T6909] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 152.740640][ T6927] netlink: 48 bytes leftover after parsing attributes in process `syz.3.343'. [ 154.874149][ T6965] netlink: 'syz.0.349': attribute type 10 has an invalid length. [ 155.012421][ T6952] netlink: 60 bytes leftover after parsing attributes in process `syz.0.349'. [ 155.172896][ T6972] FAULT_INJECTION: forcing a failure. [ 155.172896][ T6972] name failslab, interval 1, probability 0, space 0, times 0 [ 155.208532][ T6972] CPU: 0 UID: 0 PID: 6972 Comm: syz.3.356 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 155.208574][ T6972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 155.208587][ T6972] Call Trace: [ 155.208597][ T6972] [ 155.208608][ T6972] dump_stack_lvl+0x241/0x360 [ 155.208658][ T6972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.208693][ T6972] ? __pfx__printk+0x10/0x10 [ 155.208745][ T6972] ? __pfx___might_resched+0x10/0x10 [ 155.208789][ T6972] should_fail_ex+0x424/0x570 [ 155.208841][ T6972] should_failslab+0xac/0x100 [ 155.208875][ T6972] __kmalloc_cache_noprof+0x73/0x370 [ 155.208897][ T6972] ? tcp_sendmsg_fastopen+0x1d8/0x5d0 [ 155.208937][ T6972] tcp_sendmsg_fastopen+0x1d8/0x5d0 [ 155.208984][ T6972] tcp_sendmsg_locked+0x4946/0x5030 [ 155.209004][ T6972] ? trace_call_bpf+0xb9/0x8a0 [ 155.209044][ T6972] ? __pfx_trace_call_bpf+0x10/0x10 [ 155.209096][ T6972] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 155.209149][ T6972] ? perf_trace_run_bpf_submit+0x10b/0x180 [ 155.209193][ T6972] ? perf_trace_preemptirq_template+0x2d4/0x400 [ 155.209230][ T6972] ? __local_bh_enable_ip+0x106/0x200 [ 155.209322][ T6972] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 155.209360][ T6972] ? tcp_sendmsg+0x22/0x50 [ 155.209384][ T6972] ? do_raw_spin_unlock+0x13c/0x8b0 [ 155.209440][ T6972] tcp_sendmsg+0x30/0x50 [ 155.209468][ T6972] __sock_sendmsg+0x1a6/0x270 [ 155.209510][ T6972] ____sys_sendmsg+0x523/0x860 [ 155.209582][ T6972] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.209611][ T6972] ? __fget_files+0x2a/0x420 [ 155.209645][ T6972] ? __fget_files+0x2a/0x420 [ 155.209697][ T6972] __sys_sendmsg+0x271/0x360 [ 155.209751][ T6972] ? __pfx___sys_sendmsg+0x10/0x10 [ 155.209779][ T6972] ? trace_call_bpf+0x61c/0x8a0 [ 155.209904][ T6972] ? perf_trace_preemptirq_template+0x2d4/0x400 [ 155.209998][ T6972] ? do_syscall_64+0xb6/0x210 [ 155.210034][ T6972] do_syscall_64+0xf3/0x210 [ 155.210060][ T6972] ? clear_bhb_loop+0x45/0xa0 [ 155.210093][ T6972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.210115][ T6972] RIP: 0033:0x7f9b44f8e969 [ 155.210137][ T6972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.210154][ T6972] RSP: 002b:00007f9b45d1d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.210176][ T6972] RAX: ffffffffffffffda RBX: 00007f9b451b5fa0 RCX: 00007f9b44f8e969 [ 155.210192][ T6972] RDX: 00000000200440e4 RSI: 00002000000004c0 RDI: 0000000000000007 [ 155.210205][ T6972] RBP: 00007f9b45d1d090 R08: 0000000000000000 R09: 0000000000000000 [ 155.210218][ T6972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.210230][ T6972] R13: 0000000000000000 R14: 00007f9b451b5fa0 R15: 00007ffe446077e8 [ 155.210296][ T6972] [ 156.966366][ T6945] netlink: 60 bytes leftover after parsing attributes in process `syz.0.349'. [ 157.220310][ T6990] netlink: 40 bytes leftover after parsing attributes in process `syz.3.361'. [ 159.273029][ T7030] netlink: 'syz.0.374': attribute type 7 has an invalid length. [ 160.204827][ T7046] netlink: 176 bytes leftover after parsing attributes in process `syz.2.378'. [ 160.320801][ T7050] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.379'. [ 161.554524][ T7078] netlink: 60 bytes leftover after parsing attributes in process `syz.1.391'. [ 161.750597][ T7083] can: request_module (can-proto-5) failed. [ 164.211559][ T7144] FAULT_INJECTION: forcing a failure. [ 164.211559][ T7144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.272552][ T7144] CPU: 0 UID: 0 PID: 7144 Comm: syz.2.412 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 164.272583][ T7144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 164.272603][ T7144] Call Trace: [ 164.272612][ T7144] [ 164.272621][ T7144] dump_stack_lvl+0x241/0x360 [ 164.272660][ T7144] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.272691][ T7144] ? __pfx__printk+0x10/0x10 [ 164.272737][ T7144] should_fail_ex+0x424/0x570 [ 164.272775][ T7144] _copy_to_user+0x31/0xb0 [ 164.272807][ T7144] bpf_test_finish+0x626/0x930 [ 164.272846][ T7144] ? __pfx_bpf_test_finish+0x10/0x10 [ 164.272875][ T7144] ? convert___skb_to_skb+0x445/0x630 [ 164.272902][ T7144] ? convert___skb_to_skb+0x41/0x630 [ 164.272924][ T7144] ? convert_skb_to___skb+0x2d7/0x510 [ 164.272953][ T7144] bpf_prog_test_run_skb+0x1018/0x1850 [ 164.273008][ T7144] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 164.273031][ T7144] ? __fget_files+0x2a/0x420 [ 164.273059][ T7144] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 164.273087][ T7144] bpf_prog_test_run+0x2e4/0x360 [ 164.273121][ T7144] __sys_bpf+0x4ee/0x8b0 [ 164.273152][ T7144] ? __pfx___sys_bpf+0x10/0x10 [ 164.273200][ T7144] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 164.273242][ T7144] __x64_sys_bpf+0x7c/0x90 [ 164.273267][ T7144] do_syscall_64+0xf3/0x210 [ 164.273291][ T7144] ? clear_bhb_loop+0x45/0xa0 [ 164.273316][ T7144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.273337][ T7144] RIP: 0033:0x7fa2ec58e969 [ 164.273355][ T7144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.273372][ T7144] RSP: 002b:00007fa2ed35f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 164.273394][ T7144] RAX: ffffffffffffffda RBX: 00007fa2ec7b5fa0 RCX: 00007fa2ec58e969 [ 164.273409][ T7144] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 164.273422][ T7144] RBP: 00007fa2ed35f090 R08: 0000000000000000 R09: 0000000000000000 [ 164.273434][ T7144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.273446][ T7144] R13: 0000000000000000 R14: 00007fa2ec7b5fa0 R15: 00007fff5b429b08 [ 164.273482][ T7144] [ 164.712085][ T7157] netlink: 'syz.0.417': attribute type 21 has an invalid length. [ 165.783120][ T7174] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 166.249436][ T7176] netlink: 22 bytes leftover after parsing attributes in process `syz.3.423'. [ 166.753764][ T7194] FAULT_INJECTION: forcing a failure. [ 166.753764][ T7194] name failslab, interval 1, probability 0, space 0, times 0 [ 166.809519][ T7194] CPU: 0 UID: 0 PID: 7194 Comm: syz.4.429 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 166.809552][ T7194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 166.809565][ T7194] Call Trace: [ 166.809573][ T7194] [ 166.809582][ T7194] dump_stack_lvl+0x241/0x360 [ 166.809621][ T7194] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.809651][ T7194] ? __pfx__printk+0x10/0x10 [ 166.809695][ T7194] should_fail_ex+0x424/0x570 [ 166.809732][ T7194] should_failslab+0xac/0x100 [ 166.809756][ T7194] __kmalloc_cache_noprof+0x73/0x370 [ 166.809776][ T7194] ? sctp_add_bind_addr+0x89/0x3a0 [ 166.809805][ T7194] sctp_add_bind_addr+0x89/0x3a0 [ 166.809834][ T7194] sctp_copy_local_addr_list+0x313/0x500 [ 166.809862][ T7194] ? sctp_copy_local_addr_list+0xad/0x500 [ 166.809886][ T7194] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 166.809916][ T7194] ? sctp_v4_is_any+0x35/0x60 [ 166.809939][ T7194] ? sctp_copy_one_addr+0x94/0x360 [ 166.809968][ T7194] sctp_bind_addr_copy+0xad/0x3b0 [ 166.809992][ T7194] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 166.810030][ T7194] sctp_connect_new_asoc+0x337/0x700 [ 166.810063][ T7194] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 166.810090][ T7194] ? sctp_sendmsg+0xf30/0x3620 [ 166.810132][ T7194] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 166.810160][ T7194] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 166.810192][ T7194] sctp_sendmsg+0x2009/0x3620 [ 166.810245][ T7194] ? __pfx_sctp_sendmsg+0x10/0x10 [ 166.810278][ T7194] ? aa_sk_perm+0x96f/0xac0 [ 166.810322][ T7194] ? inet_sendmsg+0x330/0x390 [ 166.810347][ T7194] __sock_sendmsg+0x1a6/0x270 [ 166.810376][ T7194] ____sys_sendmsg+0x523/0x860 [ 166.810419][ T7194] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.810448][ T7194] ? __fget_files+0x2a/0x420 [ 166.810472][ T7194] ? __fget_files+0x2a/0x420 [ 166.810503][ T7194] __sys_sendmsg+0x271/0x360 [ 166.810547][ T7194] ? __pfx___sys_sendmsg+0x10/0x10 [ 166.810641][ T7194] ? do_syscall_64+0xb6/0x210 [ 166.810667][ T7194] do_syscall_64+0xf3/0x210 [ 166.810689][ T7194] ? clear_bhb_loop+0x45/0xa0 [ 166.810715][ T7194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.810735][ T7194] RIP: 0033:0x7f8177b8e969 [ 166.810753][ T7194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.810770][ T7194] RSP: 002b:00007f8178925038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.810792][ T7194] RAX: ffffffffffffffda RBX: 00007f8177db5fa0 RCX: 00007f8177b8e969 [ 166.810807][ T7194] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 0000000000000003 [ 166.810820][ T7194] RBP: 00007f8178925090 R08: 0000000000000000 R09: 0000000000000000 [ 166.810832][ T7194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 166.810844][ T7194] R13: 0000000000000000 R14: 00007f8177db5fa0 R15: 00007ffedbefe8c8 [ 166.810877][ T7194] [ 167.233621][ T7203] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x32 [ 168.157017][ T7214] netlink: 'syz.0.436': attribute type 10 has an invalid length. [ 168.165417][ T7214] netlink: 40 bytes leftover after parsing attributes in process `syz.0.436'. [ 168.176892][ T7214] dummy0: entered promiscuous mode [ 168.185595][ T7214] bridge0: port 3(dummy0) entered blocking state [ 168.196861][ T7210] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.434'. [ 168.225849][ T7214] bridge0: port 3(dummy0) entered disabled state [ 168.239758][ T7214] dummy0: entered allmulticast mode [ 168.260572][ T7214] bridge0: port 3(dummy0) entered blocking state [ 168.267324][ T7214] bridge0: port 3(dummy0) entered forwarding state [ 168.280846][ T7217] netlink: 'syz.3.437': attribute type 10 has an invalid length. [ 168.293021][ T7212] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.435'. [ 169.035014][ T7239] netlink: 'syz.0.447': attribute type 13 has an invalid length. [ 169.054995][ T7239] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.447'. [ 169.708898][ T7253] netlink: 'syz.3.452': attribute type 4 has an invalid length. [ 169.730180][ T7253] netlink: 'syz.3.452': attribute type 3 has an invalid length. [ 169.757598][ T7253] netlink: 132 bytes leftover after parsing attributes in process `syz.3.452'. [ 169.937251][ T7260] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.453'. [ 172.225363][ T7282] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.470097][ T7289] netlink: 60 bytes leftover after parsing attributes in process `syz.4.465'. [ 172.776838][ T7300] FAULT_INJECTION: forcing a failure. [ 172.776838][ T7300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.814659][ T7300] CPU: 1 UID: 0 PID: 7300 Comm: syz.4.468 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 172.814692][ T7300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 172.814705][ T7300] Call Trace: [ 172.814713][ T7300] [ 172.814722][ T7300] dump_stack_lvl+0x241/0x360 [ 172.814767][ T7300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.814798][ T7300] ? __pfx__printk+0x10/0x10 [ 172.814841][ T7300] should_fail_ex+0x424/0x570 [ 172.814878][ T7300] _copy_from_user+0x2d/0xb0 [ 172.814907][ T7300] generic_map_update_batch+0x53b/0x8e0 [ 172.814944][ T7300] ? __pfx_generic_map_update_batch+0x10/0x10 [ 172.814964][ T7300] ? __fget_files+0x39d/0x420 [ 172.814983][ T7300] ? __fget_files+0x2a/0x420 [ 172.815012][ T7300] ? __pfx_generic_map_update_batch+0x10/0x10 [ 172.815031][ T7300] bpf_map_do_batch+0x39a/0x660 [ 172.815066][ T7300] __sys_bpf+0x3c1/0x8b0 [ 172.815095][ T7300] ? __pfx___sys_bpf+0x10/0x10 [ 172.815136][ T7300] ? ksys_write+0x275/0x2d0 [ 172.815180][ T7300] __x64_sys_bpf+0x7c/0x90 [ 172.815205][ T7300] do_syscall_64+0xf3/0x210 [ 172.815229][ T7300] ? clear_bhb_loop+0x45/0xa0 [ 172.815254][ T7300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.815274][ T7300] RIP: 0033:0x7f8177b8e969 [ 172.815294][ T7300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.815311][ T7300] RSP: 002b:00007f81759f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 172.815334][ T7300] RAX: ffffffffffffffda RBX: 00007f8177db6080 RCX: 00007f8177b8e969 [ 172.815349][ T7300] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 172.815362][ T7300] RBP: 00007f81759f6090 R08: 0000000000000000 R09: 0000000000000000 [ 172.815375][ T7300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.815387][ T7300] R13: 0000000000000000 R14: 00007f8177db6080 R15: 00007ffedbefe8c8 [ 172.815419][ T7300] [ 173.057419][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.469'. [ 173.218944][ T7312] FAULT_INJECTION: forcing a failure. [ 173.218944][ T7312] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 173.233737][ T7312] CPU: 1 UID: 0 PID: 7312 Comm: syz.0.471 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 173.233767][ T7312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 173.233781][ T7312] Call Trace: [ 173.233789][ T7312] [ 173.233798][ T7312] dump_stack_lvl+0x241/0x360 [ 173.233838][ T7312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.233869][ T7312] ? __pfx__printk+0x10/0x10 [ 173.233910][ T7312] should_fail_ex+0x424/0x570 [ 173.233947][ T7312] prepare_alloc_pages+0x220/0x610 [ 173.233985][ T7312] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 173.234018][ T7312] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 173.234046][ T7312] ? stack_trace_save+0x11a/0x1d0 [ 173.234092][ T7312] alloc_pages_mpol+0x339/0x690 [ 173.234119][ T7312] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 173.234152][ T7312] alloc_pages_noprof+0x121/0x190 [ 173.234177][ T7312] get_free_pages_noprof+0xc/0x30 [ 173.234203][ T7312] kasan_populate_vmalloc_pte+0x38/0xe0 [ 173.234233][ T7312] __apply_to_page_range+0x90c/0xe40 [ 173.234278][ T7312] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 173.234314][ T7312] ? __pfx___apply_to_page_range+0x10/0x10 [ 173.234349][ T7312] ? do_raw_spin_unlock+0x13c/0x8b0 [ 173.234383][ T7312] alloc_vmap_area+0x1d48/0x2410 [ 173.234431][ T7312] ? __pfx_alloc_vmap_area+0x10/0x10 [ 173.234455][ T7312] ? __kasan_kmalloc+0x9d/0xb0 [ 173.234487][ T7312] ? __kmalloc_cache_node_noprof+0x26a/0x3c0 [ 173.234515][ T7312] ? htab_map_alloc+0x3c3/0xbb0 [ 173.234534][ T7312] __get_vm_area_node+0x1c8/0x2d0 [ 173.234565][ T7312] __vmalloc_node_range_noprof+0x349/0x1390 [ 173.234591][ T7312] ? htab_map_alloc+0x3c3/0xbb0 [ 173.234611][ T7312] ? pcpu_memcg_post_alloc_hook+0x12e/0x740 [ 173.234643][ T7312] ? __pfx_pcpu_memcg_post_alloc_hook+0x10/0x10 [ 173.234672][ T7312] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 173.234729][ T7312] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 173.234770][ T7312] bpf_map_area_alloc+0xfc/0x120 [ 173.234799][ T7312] ? htab_map_alloc+0x3c3/0xbb0 [ 173.234821][ T7312] htab_map_alloc+0x3c3/0xbb0 [ 173.234845][ T7312] ? htab_map_alloc_check+0x38c/0x470 [ 173.234871][ T7312] map_create+0x912/0x11a0 [ 173.234902][ T7312] ? bpf_lsm_bpf+0x9/0x10 [ 173.234934][ T7312] __sys_bpf+0x744/0x8b0 [ 173.234963][ T7312] ? __pfx___sys_bpf+0x10/0x10 [ 173.235007][ T7312] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 173.235048][ T7312] __x64_sys_bpf+0x7c/0x90 [ 173.235072][ T7312] do_syscall_64+0xf3/0x210 [ 173.235096][ T7312] ? clear_bhb_loop+0x45/0xa0 [ 173.235120][ T7312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.235141][ T7312] RIP: 0033:0x7f78ea98e969 [ 173.235160][ T7312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.235178][ T7312] RSP: 002b:00007f78eb83b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 173.235200][ T7312] RAX: ffffffffffffffda RBX: 00007f78eabb6080 RCX: 00007f78ea98e969 [ 173.235216][ T7312] RDX: 0000000000000050 RSI: 0000200000000500 RDI: 0000000000000000 [ 173.235229][ T7312] RBP: 00007f78eb83b090 R08: 0000000000000000 R09: 0000000000000000 [ 173.235242][ T7312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 173.235254][ T7312] R13: 0000000000000000 R14: 00007f78eabb6080 R15: 00007fffc6c984b8 [ 173.235287][ T7312] [ 173.772215][ T7316] netlink: 132 bytes leftover after parsing attributes in process `syz.1.474'. [ 174.402837][ T7342] netlink: 'syz.2.486': attribute type 29 has an invalid length. [ 174.412877][ T7342] netlink: 'syz.2.486': attribute type 29 has an invalid length. [ 174.424204][ T7342] netlink: 'syz.2.486': attribute type 29 has an invalid length. [ 175.536048][ T7364] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.492'. [ 175.803600][ T7368] FAULT_INJECTION: forcing a failure. [ 175.803600][ T7368] name failslab, interval 1, probability 0, space 0, times 0 [ 175.822100][ T7368] CPU: 0 UID: 0 PID: 7368 Comm: syz.0.493 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 175.822133][ T7368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 175.822148][ T7368] Call Trace: [ 175.822158][ T7368] [ 175.822170][ T7368] dump_stack_lvl+0x241/0x360 [ 175.822231][ T7368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.822268][ T7368] ? __pfx__printk+0x10/0x10 [ 175.822319][ T7368] ? __pfx___might_resched+0x10/0x10 [ 175.822360][ T7368] should_fail_ex+0x424/0x570 [ 175.822414][ T7368] should_failslab+0xac/0x100 [ 175.822447][ T7368] kmem_cache_alloc_lru_noprof+0x7d/0x390 [ 175.822472][ T7368] ? __d_alloc+0x31/0x740 [ 175.822516][ T7368] __d_alloc+0x31/0x740 [ 175.822562][ T7368] path_from_stashed+0x46c/0x9a0 [ 175.822628][ T7368] ? __pfx_path_from_stashed+0x10/0x10 [ 175.822669][ T7368] ? _raw_spin_unlock+0x28/0x50 [ 175.822700][ T7368] ? ipcns_get+0xd8/0x120 [ 175.822744][ T7368] proc_ns_get_link+0xfb/0x240 [ 175.822769][ T7368] ? __pfx_proc_ns_get_link+0x10/0x10 [ 175.822798][ T7368] ? try_to_unlazy+0x350/0x5a0 [ 175.822837][ T7368] ? __pfx_proc_ns_get_link+0x10/0x10 [ 175.822857][ T7368] pick_link+0x66a/0xdc0 [ 175.822916][ T7368] step_into+0xc5f/0x1000 [ 175.822989][ T7368] ? __pfx_step_into+0x10/0x10 [ 175.823022][ T7368] ? lookup_fast+0x344/0x5a0 [ 175.823073][ T7368] path_openat+0x1d8a/0x35d0 [ 175.823184][ T7368] ? kasan_save_track+0x51/0x80 [ 175.823234][ T7368] ? __pfx_path_openat+0x10/0x10 [ 175.823263][ T7368] ? perf_trace_run_bpf_submit+0x100/0x180 [ 175.823312][ T7368] ? perf_trace_lock+0x39c/0x4a0 [ 175.823336][ T7368] ? perf_trace_lock+0x39c/0x4a0 [ 175.823375][ T7368] do_filp_open+0x284/0x4e0 [ 175.823415][ T7368] ? __pfx_do_filp_open+0x10/0x10 [ 175.823439][ T7368] ? do_raw_spin_lock+0x151/0x370 [ 175.823579][ T7368] do_sys_openat2+0x12b/0x1d0 [ 175.823617][ T7368] ? __pfx_do_sys_openat2+0x10/0x10 [ 175.823658][ T7368] ? perf_trace_preemptirq_template+0xfa/0x400 [ 175.823710][ T7368] __x64_sys_openat+0x249/0x2a0 [ 175.823748][ T7368] ? __pfx___x64_sys_openat+0x10/0x10 [ 175.823806][ T7368] ? do_syscall_64+0xb6/0x210 [ 175.823839][ T7368] do_syscall_64+0xf3/0x210 [ 175.823860][ T7368] ? exc_debug_user+0xda/0x110 [ 175.823886][ T7368] ? clear_bhb_loop+0x45/0xa0 [ 175.823917][ T7368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.823938][ T7368] RIP: 0033:0x7f78ea98d2d0 [ 175.823961][ T7368] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 175.823979][ T7368] RSP: 002b:00007f78eb85bf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 175.824001][ T7368] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f78ea98d2d0 [ 175.824015][ T7368] RDX: 0000000000000000 RSI: 00007f78eb85bfa0 RDI: 00000000ffffff9c [ 175.824028][ T7368] RBP: 00007f78eb85bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 175.824040][ T7368] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 175.824050][ T7368] R13: 0000000000000000 R14: 00007f78eabb5fa0 R15: 00007fffc6c984b8 [ 175.824114][ T7368] [ 176.308588][ T7373] netlink: 'syz.3.494': attribute type 6 has an invalid length. [ 176.465238][ T7378] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.496'. [ 176.544708][ T7382] netlink: 'syz.2.497': attribute type 29 has an invalid length. [ 176.557630][ T7382] netlink: 'syz.2.497': attribute type 29 has an invalid length. [ 176.570884][ T7382] netlink: 'syz.2.497': attribute type 29 has an invalid length. [ 176.582400][ T7382] netlink: 'syz.2.497': attribute type 29 has an invalid length. [ 176.763447][ T7386] FAULT_INJECTION: forcing a failure. [ 176.763447][ T7386] name failslab, interval 1, probability 0, space 0, times 0 [ 176.804577][ T7386] CPU: 1 UID: 0 PID: 7386 Comm: syz.1.499 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 176.804611][ T7386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 176.804624][ T7386] Call Trace: [ 176.804633][ T7386] [ 176.804643][ T7386] dump_stack_lvl+0x241/0x360 [ 176.804684][ T7386] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.804715][ T7386] ? __pfx__printk+0x10/0x10 [ 176.804760][ T7386] should_fail_ex+0x424/0x570 [ 176.804800][ T7386] should_failslab+0xac/0x100 [ 176.804826][ T7386] __kmalloc_cache_noprof+0x73/0x370 [ 176.804848][ T7386] ? sctp_add_bind_addr+0x89/0x3a0 [ 176.804878][ T7386] sctp_add_bind_addr+0x89/0x3a0 [ 176.804908][ T7386] sctp_copy_local_addr_list+0x313/0x500 [ 176.804937][ T7386] ? sctp_copy_local_addr_list+0xad/0x500 [ 176.804963][ T7386] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 176.804992][ T7386] ? sctp_v4_is_any+0x35/0x60 [ 176.805017][ T7386] ? sctp_copy_one_addr+0x94/0x360 [ 176.805046][ T7386] sctp_bind_addr_copy+0xad/0x3b0 [ 176.805072][ T7386] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 176.805111][ T7386] sctp_connect_new_asoc+0x337/0x700 [ 176.805146][ T7386] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 176.805175][ T7386] ? sctp_sendmsg+0xf30/0x3620 [ 176.805211][ T7386] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 176.805240][ T7386] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 176.805273][ T7386] sctp_sendmsg+0x2009/0x3620 [ 176.805328][ T7386] ? __pfx_sctp_sendmsg+0x10/0x10 [ 176.805362][ T7386] ? aa_sk_perm+0x96f/0xac0 [ 176.805418][ T7386] ? inet_sendmsg+0x330/0x390 [ 176.805444][ T7386] __sock_sendmsg+0x1a6/0x270 [ 176.805476][ T7386] ____sys_sendmsg+0x523/0x860 [ 176.805519][ T7386] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.805550][ T7386] ? __fget_files+0x2a/0x420 [ 176.805575][ T7386] ? __fget_files+0x2a/0x420 [ 176.805611][ T7386] __sys_sendmsg+0x271/0x360 [ 176.805652][ T7386] ? __pfx___sys_sendmsg+0x10/0x10 [ 176.805725][ T7386] ? perf_trace_preemptirq_template+0xfa/0x400 [ 176.805776][ T7386] ? do_syscall_64+0xb6/0x210 [ 176.805804][ T7386] do_syscall_64+0xf3/0x210 [ 176.805826][ T7386] ? clear_bhb_loop+0x45/0xa0 [ 176.805852][ T7386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.805873][ T7386] RIP: 0033:0x7f1f7d38e969 [ 176.805893][ T7386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.805912][ T7386] RSP: 002b:00007f1f7e16e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.805935][ T7386] RAX: ffffffffffffffda RBX: 00007f1f7d5b5fa0 RCX: 00007f1f7d38e969 [ 176.805951][ T7386] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 0000000000000003 [ 176.805964][ T7386] RBP: 00007f1f7e16e090 R08: 0000000000000000 R09: 0000000000000000 [ 176.805977][ T7386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 176.805990][ T7386] R13: 0000000000000000 R14: 00007f1f7d5b5fa0 R15: 00007ffe51863948 [ 176.806024][ T7386] [ 177.403956][ T7399] netlink: 'syz.2.506': attribute type 10 has an invalid length. [ 177.514864][ T7399] team0: Port device dummy0 added [ 177.538827][ T7407] netlink: 'syz.4.505': attribute type 10 has an invalid length. [ 177.713175][ T7416] netlink: 'syz.4.510': attribute type 29 has an invalid length. [ 177.735817][ T7416] netlink: 'syz.4.510': attribute type 29 has an invalid length. [ 177.751005][ T7416] netlink: 'syz.4.510': attribute type 29 has an invalid length. [ 178.447534][ T7441] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.518'. [ 178.710902][ T5858] Bluetooth: hci4: unexpected event 0x07 length: 15 < 255 [ 179.795485][ T7482] FAULT_INJECTION: forcing a failure. [ 179.795485][ T7482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.878152][ T7482] CPU: 1 UID: 0 PID: 7482 Comm: syz.4.533 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 179.878186][ T7482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 179.878200][ T7482] Call Trace: [ 179.878209][ T7482] [ 179.878218][ T7482] dump_stack_lvl+0x241/0x360 [ 179.878260][ T7482] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.878292][ T7482] ? __pfx__printk+0x10/0x10 [ 179.878340][ T7482] should_fail_ex+0x424/0x570 [ 179.878381][ T7482] _copy_from_user+0x2d/0xb0 [ 179.878412][ T7482] dev_ethtool+0xe3/0x1ff0 [ 179.878456][ T7482] ? __pfx_perf_trace_lock+0x10/0x10 [ 179.878478][ T7482] ? __pfx_dev_ethtool+0x10/0x10 [ 179.878527][ T7482] ? dev_load+0x21/0x1f0 [ 179.878558][ T7482] ? dev_load+0x21/0x1f0 [ 179.878585][ T7482] dev_ioctl+0x42b/0x1260 [ 179.878619][ T7482] sock_do_ioctl+0x22f/0x400 [ 179.878650][ T7482] ? __pfx_sock_do_ioctl+0x10/0x10 [ 179.878702][ T7482] sock_ioctl+0x644/0x900 [ 179.878730][ T7482] ? __pfx_sock_ioctl+0x10/0x10 [ 179.878751][ T7482] ? __fget_files+0x2a/0x420 [ 179.878771][ T7482] ? __fget_files+0x2a/0x420 [ 179.878796][ T7482] ? __fget_files+0x2a/0x420 [ 179.878827][ T7482] ? __pfx_sock_ioctl+0x10/0x10 [ 179.878853][ T7482] __se_sys_ioctl+0xf1/0x160 [ 179.878886][ T7482] do_syscall_64+0xf3/0x210 [ 179.878910][ T7482] ? clear_bhb_loop+0x45/0xa0 [ 179.878937][ T7482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.878958][ T7482] RIP: 0033:0x7f8177b8e969 [ 179.878978][ T7482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.878996][ T7482] RSP: 002b:00007f81759f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.879030][ T7482] RAX: ffffffffffffffda RBX: 00007f8177db6080 RCX: 00007f8177b8e969 [ 179.879046][ T7482] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000005 [ 179.879060][ T7482] RBP: 00007f81759f6090 R08: 0000000000000000 R09: 0000000000000000 [ 179.879073][ T7482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.879085][ T7482] R13: 0000000000000000 R14: 00007f8177db6080 R15: 00007ffedbefe8c8 [ 179.879123][ T7482] [ 180.305630][ T5858] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255 [ 182.082349][ T7520] FAULT_INJECTION: forcing a failure. [ 182.082349][ T7520] name failslab, interval 1, probability 0, space 0, times 0 [ 182.124641][ T7520] CPU: 1 UID: 0 PID: 7520 Comm: syz.4.547 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 182.124674][ T7520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 182.124687][ T7520] Call Trace: [ 182.124695][ T7520] [ 182.124703][ T7520] dump_stack_lvl+0x241/0x360 [ 182.124742][ T7520] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.124772][ T7520] ? __pfx__printk+0x10/0x10 [ 182.124820][ T7520] should_fail_ex+0x424/0x570 [ 182.124867][ T7520] should_failslab+0xac/0x100 [ 182.124892][ T7520] kmem_cache_alloc_noprof+0x78/0x390 [ 182.124912][ T7520] ? skb_clone+0x20c/0x390 [ 182.124939][ T7520] skb_clone+0x20c/0x390 [ 182.124965][ T7520] __netlink_deliver_tap+0x3c4/0x7f0 [ 182.125006][ T7520] ? netlink_deliver_tap+0x2e/0x1b0 [ 182.125031][ T7520] netlink_deliver_tap+0x19d/0x1b0 [ 182.125059][ T7520] netlink_unicast+0x7c6/0x9a0 [ 182.125096][ T7520] ? __pfx_netlink_unicast+0x10/0x10 [ 182.125124][ T7520] ? skb_put+0x114/0x1f0 [ 182.125160][ T7520] netlink_sendmsg+0x8c3/0xcd0 [ 182.125205][ T7520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.125236][ T7520] ? __pfx_aa_file_perm+0x10/0x10 [ 182.125261][ T7520] ? aa_sock_msg_perm+0x91/0x160 [ 182.125295][ T7520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.125318][ T7520] __sock_sendmsg+0x221/0x270 [ 182.125347][ T7520] sock_write_iter+0x2d9/0x3f0 [ 182.125375][ T7520] ? __pfx_sock_write_iter+0x10/0x10 [ 182.125415][ T7520] ? bpf_lsm_file_permission+0x9/0x10 [ 182.125455][ T7520] vfs_write+0x70f/0xd10 [ 182.125495][ T7520] ? __pfx_sock_write_iter+0x10/0x10 [ 182.125522][ T7520] ? __pfx_vfs_write+0x10/0x10 [ 182.125556][ T7520] ? __fget_files+0x2a/0x420 [ 182.125583][ T7520] ? __fget_files+0x2a/0x420 [ 182.125618][ T7520] ksys_write+0x19d/0x2d0 [ 182.125652][ T7520] ? __pfx_ksys_write+0x10/0x10 [ 182.125688][ T7520] ? do_syscall_64+0xb6/0x210 [ 182.125715][ T7520] do_syscall_64+0xf3/0x210 [ 182.125738][ T7520] ? clear_bhb_loop+0x45/0xa0 [ 182.125764][ T7520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.125782][ T7520] RIP: 0033:0x7f8177b8e969 [ 182.125802][ T7520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.125818][ T7520] RSP: 002b:00007f81759f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 182.125847][ T7520] RAX: ffffffffffffffda RBX: 00007f8177db6080 RCX: 00007f8177b8e969 [ 182.125864][ T7520] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000005 [ 182.125877][ T7520] RBP: 00007f81759f6090 R08: 0000000000000000 R09: 0000000000000000 [ 182.125890][ T7520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.125902][ T7520] R13: 0000000000000000 R14: 00007f8177db6080 R15: 00007ffedbefe8c8 [ 182.125939][ T7520] [ 182.653072][ T7532] validate_nla: 10 callbacks suppressed [ 182.653097][ T7532] netlink: 'syz.3.552': attribute type 29 has an invalid length. [ 182.671314][ T7532] netlink: 'syz.3.552': attribute type 29 has an invalid length. [ 182.679656][ T7532] netlink: 'syz.3.552': attribute type 29 has an invalid length. [ 182.783558][ T5858] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 183.155822][ T7532] netlink: 'syz.3.552': attribute type 29 has an invalid length. [ 183.291090][ T7539] FAULT_INJECTION: forcing a failure. [ 183.291090][ T7539] name failslab, interval 1, probability 0, space 0, times 0 [ 183.349625][ T7539] CPU: 0 UID: 0 PID: 7539 Comm: syz.0.554 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 183.349658][ T7539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 183.349672][ T7539] Call Trace: [ 183.349681][ T7539] [ 183.349691][ T7539] dump_stack_lvl+0x241/0x360 [ 183.349753][ T7539] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.349784][ T7539] ? __pfx__printk+0x10/0x10 [ 183.349813][ T7539] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 183.349850][ T7539] ? __pfx___might_resched+0x10/0x10 [ 183.349876][ T7539] should_fail_ex+0x424/0x570 [ 183.349913][ T7539] should_failslab+0xac/0x100 [ 183.349937][ T7539] __kmalloc_noprof+0xdf/0x4d0 [ 183.349959][ T7539] ? security_task_alloc+0x4a/0x340 [ 183.349988][ T7539] security_task_alloc+0x4a/0x340 [ 183.350015][ T7539] copy_process+0x1605/0x3d10 [ 183.350055][ T7539] ? copy_process+0xa07/0x3d10 [ 183.350086][ T7539] ? __pfx_copy_process+0x10/0x10 [ 183.350126][ T7539] kernel_clone+0x242/0x930 [ 183.350148][ T7539] ? vfs_write+0xb29/0xd10 [ 183.350181][ T7539] ? __pfx_kernel_clone+0x10/0x10 [ 183.350215][ T7539] ? __mutex_unlock_slowpath+0x229/0x800 [ 183.350247][ T7539] __x64_sys_clone+0x268/0x2e0 [ 183.350271][ T7539] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 183.350299][ T7539] ? __pfx___x64_sys_clone+0x10/0x10 [ 183.350321][ T7539] ? __fget_files+0x2a/0x420 [ 183.350368][ T7539] ? do_syscall_64+0xb6/0x210 [ 183.350395][ T7539] do_syscall_64+0xf3/0x210 [ 183.350417][ T7539] ? clear_bhb_loop+0x45/0xa0 [ 183.350443][ T7539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.350464][ T7539] RIP: 0033:0x7f78ea98e969 [ 183.350483][ T7539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.350501][ T7539] RSP: 002b:00007f78eb85bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 183.350524][ T7539] RAX: ffffffffffffffda RBX: 00007f78eabb5fa0 RCX: 00007f78ea98e969 [ 183.350540][ T7539] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.350552][ T7539] RBP: 00007f78eb85c090 R08: 0000000000000000 R09: 0000000000000000 [ 183.350565][ T7539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.350578][ T7539] R13: 0000000000000000 R14: 00007f78eabb5fa0 R15: 00007fffc6c984b8 [ 183.350610][ T7539] [ 183.693308][ T7545] Driver unsupported XDP return value 0 on prog (id 401) dev N/A, expect packet loss! [ 183.799441][ T7546] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.556'. [ 184.158419][ T7562] netlink: 'syz.0.561': attribute type 2 has an invalid length. [ 184.222641][ T7562] netlink: 'syz.0.561': attribute type 6 has an invalid length. [ 184.288867][ T7570] netlink: 'syz.2.566': attribute type 29 has an invalid length. [ 184.318268][ T7570] netlink: 'syz.2.566': attribute type 29 has an invalid length. [ 184.352447][ T7570] netlink: 'syz.2.566': attribute type 29 has an invalid length. [ 184.361848][ T7570] netlink: 'syz.2.566': attribute type 29 has an invalid length. [ 184.812535][ T5858] Bluetooth: hci2: command 0x0406 tx timeout [ 185.970107][ T7603] netlink: 140 bytes leftover after parsing attributes in process `syz.2.574'. [ 186.103029][ T7607] batman_adv: batadv0: Adding interface: wlan0 [ 186.131973][ T7607] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.163528][ T7607] batman_adv: batadv0: Interface activated: wlan0 [ 187.355884][ T7651] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.589'. [ 188.143189][ T7672] validate_nla: 10 callbacks suppressed [ 188.143214][ T7672] netlink: 'syz.3.599': attribute type 27 has an invalid length. [ 188.998013][ T5851] Bluetooth: hci0: unexpected event 0x07 length: 15 < 255 [ 189.026732][ T7677] FAULT_INJECTION: forcing a failure. [ 189.026732][ T7677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.043823][ T7672] bond0: (slave bond_slave_0): Releasing backup interface [ 189.050232][ T7677] CPU: 0 UID: 0 PID: 7677 Comm: syz.4.598 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 189.050268][ T7677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 189.050283][ T7677] Call Trace: [ 189.050293][ T7677] [ 189.050304][ T7677] dump_stack_lvl+0x241/0x360 [ 189.050347][ T7677] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.050381][ T7677] ? __pfx__printk+0x10/0x10 [ 189.050428][ T7677] should_fail_ex+0x424/0x570 [ 189.050471][ T7677] _copy_to_user+0x31/0xb0 [ 189.050504][ T7677] bpf_test_finish+0x626/0x930 [ 189.050546][ T7677] ? __pfx_bpf_test_finish+0x10/0x10 [ 189.050583][ T7677] ? convert___skb_to_skb+0x41/0x630 [ 189.050607][ T7677] ? convert_skb_to___skb+0x2d7/0x510 [ 189.050638][ T7677] bpf_prog_test_run_skb+0x1018/0x1850 [ 189.050697][ T7677] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 189.050722][ T7677] ? __fget_files+0x2a/0x420 [ 189.050752][ T7677] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 189.050782][ T7677] bpf_prog_test_run+0x2e4/0x360 [ 189.050819][ T7677] __sys_bpf+0x4ee/0x8b0 [ 189.050851][ T7677] ? __pfx___sys_bpf+0x10/0x10 [ 189.050901][ T7677] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 189.050950][ T7677] __x64_sys_bpf+0x7c/0x90 [ 189.050976][ T7677] do_syscall_64+0xf3/0x210 [ 189.050998][ T7677] ? clear_bhb_loop+0x45/0xa0 [ 189.051023][ T7677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.051049][ T7677] RIP: 0033:0x7f8177b8e969 [ 189.051068][ T7677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.051086][ T7677] RSP: 002b:00007f81759f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 189.051109][ T7677] RAX: ffffffffffffffda RBX: 00007f8177db6080 RCX: 00007f8177b8e969 [ 189.051124][ T7677] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 189.051137][ T7677] RBP: 00007f81759f6090 R08: 0000000000000000 R09: 0000000000000000 [ 189.051150][ T7677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.051162][ T7677] R13: 0000000000000000 R14: 00007f8177db6080 R15: 00007ffedbefe8c8 [ 189.051197][ T7677] [ 189.762827][ T7695] netlink: 40 bytes leftover after parsing attributes in process `syz.3.605'. [ 190.243532][ T7702] netlink: 'syz.4.607': attribute type 29 has an invalid length. [ 190.281774][ T7702] netlink: 'syz.4.607': attribute type 29 has an invalid length. [ 190.329326][ T7702] netlink: 'syz.4.607': attribute type 29 has an invalid length. [ 190.382417][ T7702] netlink: 'syz.4.607': attribute type 29 has an invalid length. [ 190.765064][ T7724] FAULT_INJECTION: forcing a failure. [ 190.765064][ T7724] name failslab, interval 1, probability 0, space 0, times 0 [ 190.778484][ T7724] CPU: 1 UID: 0 PID: 7724 Comm: syz.0.616 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 190.778513][ T7724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 190.778526][ T7724] Call Trace: [ 190.778535][ T7724] [ 190.778544][ T7724] dump_stack_lvl+0x241/0x360 [ 190.778583][ T7724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.778613][ T7724] ? __pfx__printk+0x10/0x10 [ 190.778649][ T7724] ? __pfx___might_resched+0x10/0x10 [ 190.778675][ T7724] should_fail_ex+0x424/0x570 [ 190.778721][ T7724] should_failslab+0xac/0x100 [ 190.778743][ T7724] ? __get_vm_area_node+0x132/0x2d0 [ 190.778765][ T7724] __kmalloc_cache_node_noprof+0x74/0x3c0 [ 190.778790][ T7724] ? do_vfs_ioctl+0xef8/0x2750 [ 190.778822][ T7724] __get_vm_area_node+0x132/0x2d0 [ 190.778852][ T7724] __vmalloc_node_range_noprof+0x349/0x1390 [ 190.778878][ T7724] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 190.778920][ T7724] ? __lock_acquire+0xad5/0xd80 [ 190.778963][ T7724] ? __local_bh_enable_ip+0x106/0x200 [ 190.779000][ T7724] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 190.779027][ T7724] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 190.779056][ T7724] ? __lock_acquire+0xad5/0xd80 [ 190.779085][ T7724] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 190.779111][ T7724] __vmalloc_noprof+0x79/0x90 [ 190.779136][ T7724] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 190.779164][ T7724] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 190.779192][ T7724] ? bpf_prog_alloc+0x28/0x1b0 [ 190.779222][ T7724] bpf_prog_alloc+0x3a/0x1b0 [ 190.779252][ T7724] __get_filter+0xf8/0x410 [ 190.779282][ T7724] sk_attach_filter+0x22/0x140 [ 190.779306][ T7724] tun_attach_filter+0x16e/0x270 [ 190.779345][ T7724] __tun_chr_ioctl+0x1657/0x1f90 [ 190.779387][ T7724] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 190.779415][ T7724] ? __fget_files+0x2a/0x420 [ 190.779443][ T7724] ? __fget_files+0x2a/0x420 [ 190.779468][ T7724] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 190.779500][ T7724] __se_sys_ioctl+0xf1/0x160 [ 190.779529][ T7724] do_syscall_64+0xf3/0x210 [ 190.779552][ T7724] ? clear_bhb_loop+0x45/0xa0 [ 190.779577][ T7724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.779598][ T7724] RIP: 0033:0x7f78ea98e969 [ 190.779617][ T7724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.779635][ T7724] RSP: 002b:00007f78eb85c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.779658][ T7724] RAX: ffffffffffffffda RBX: 00007f78eabb5fa0 RCX: 00007f78ea98e969 [ 190.779673][ T7724] RDX: 00002000000000c0 RSI: 00000000401054d5 RDI: 0000000000000003 [ 190.779686][ T7724] RBP: 00007f78eb85c090 R08: 0000000000000000 R09: 0000000000000000 [ 190.779700][ T7724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.779719][ T7724] R13: 0000000000000000 R14: 00007f78eabb5fa0 R15: 00007fffc6c984b8 [ 190.779753][ T7724] [ 190.781035][ T7724] syz.0.616: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 191.110261][ T7724] CPU: 1 UID: 0 PID: 7724 Comm: syz.0.616 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 191.110294][ T7724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 191.110307][ T7724] Call Trace: [ 191.110315][ T7724] [ 191.110323][ T7724] dump_stack_lvl+0x241/0x360 [ 191.110363][ T7724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.110393][ T7724] ? __pfx__printk+0x10/0x10 [ 191.110421][ T7724] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 191.110448][ T7724] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 191.110470][ T7724] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 191.110497][ T7724] warn_alloc+0x27c/0x410 [ 191.110530][ T7724] ? __pfx_warn_alloc+0x10/0x10 [ 191.110568][ T7724] ? __get_vm_area_node+0x280/0x2d0 [ 191.110600][ T7724] __vmalloc_node_range_noprof+0x36e/0x1390 [ 191.110639][ T7724] ? __lock_acquire+0xad5/0xd80 [ 191.110687][ T7724] ? __local_bh_enable_ip+0x106/0x200 [ 191.110720][ T7724] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 191.110748][ T7724] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 191.110777][ T7724] ? __lock_acquire+0xad5/0xd80 [ 191.110808][ T7724] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 191.110836][ T7724] __vmalloc_noprof+0x79/0x90 [ 191.110861][ T7724] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 191.110890][ T7724] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 191.110917][ T7724] ? bpf_prog_alloc+0x28/0x1b0 [ 191.110948][ T7724] bpf_prog_alloc+0x3a/0x1b0 [ 191.110979][ T7724] __get_filter+0xf8/0x410 [ 191.111010][ T7724] sk_attach_filter+0x22/0x140 [ 191.111035][ T7724] tun_attach_filter+0x16e/0x270 [ 191.111073][ T7724] __tun_chr_ioctl+0x1657/0x1f90 [ 191.111115][ T7724] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 191.111144][ T7724] ? __fget_files+0x2a/0x420 [ 191.111170][ T7724] ? __fget_files+0x2a/0x420 [ 191.111194][ T7724] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 191.111224][ T7724] __se_sys_ioctl+0xf1/0x160 [ 191.111254][ T7724] do_syscall_64+0xf3/0x210 [ 191.111281][ T7724] ? clear_bhb_loop+0x45/0xa0 [ 191.111307][ T7724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.111328][ T7724] RIP: 0033:0x7f78ea98e969 [ 191.111345][ T7724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.111363][ T7724] RSP: 002b:00007f78eb85c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.111385][ T7724] RAX: ffffffffffffffda RBX: 00007f78eabb5fa0 RCX: 00007f78ea98e969 [ 191.111399][ T7724] RDX: 00002000000000c0 RSI: 00000000401054d5 RDI: 0000000000000003 [ 191.111413][ T7724] RBP: 00007f78eb85c090 R08: 0000000000000000 R09: 0000000000000000 [ 191.111426][ T7724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.111439][ T7724] R13: 0000000000000000 R14: 00007f78eabb5fa0 R15: 00007fffc6c984b8 [ 191.111470][ T7724] [ 191.112669][ T7724] Mem-Info: [ 191.401334][ T7724] active_anon:4822 inactive_anon:0 isolated_anon:0 [ 191.401334][ T7724] active_file:13899 inactive_file:38352 isolated_file:0 [ 191.401334][ T7724] unevictable:768 dirty:136 writeback:0 [ 191.401334][ T7724] slab_reclaimable:9825 slab_unreclaimable:97208 [ 191.401334][ T7724] mapped:30040 shmem:1428 pagetables:869 [ 191.401334][ T7724] sec_pagetables:0 bounce:0 [ 191.401334][ T7724] kernel_misc_reclaimable:0 [ 191.401334][ T7724] free:1327284 free_pcp:543 free_cma:0 [ 191.477689][ T7735] netlink: 'syz.1.620': attribute type 10 has an invalid length. [ 191.493303][ T7724] Node 0 active_anon:19188kB inactive_anon:0kB active_file:55596kB inactive_file:153336kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120160kB dirty:544kB writeback:0kB shmem:4176kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11064kB pagetables:3576kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 191.534724][ T7724] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 191.576316][ T7724] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 191.583834][ T7739] FAULT_INJECTION: forcing a failure. [ 191.583834][ T7739] name failslab, interval 1, probability 0, space 0, times 0 [ 191.644200][ T7739] CPU: 1 UID: 0 PID: 7739 Comm: syz.3.621 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 191.644235][ T7739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 191.644249][ T7739] Call Trace: [ 191.644257][ T7739] [ 191.644267][ T7739] dump_stack_lvl+0x241/0x360 [ 191.644307][ T7739] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.644339][ T7739] ? __pfx__printk+0x10/0x10 [ 191.644373][ T7739] ? __pfx___might_resched+0x10/0x10 [ 191.644401][ T7739] should_fail_ex+0x424/0x570 [ 191.644439][ T7739] should_failslab+0xac/0x100 [ 191.644463][ T7739] __kmalloc_noprof+0xdf/0x4d0 [ 191.644485][ T7739] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 191.644505][ T7739] ? apparmor_capable+0x13b/0x1b0 [ 191.644530][ T7739] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 191.644560][ T7739] genl_rcv_msg+0x819/0xf00 [ 191.644602][ T7739] ? __pfx_genl_rcv_msg+0x10/0x10 [ 191.644631][ T7739] ? __dev_queue_xmit+0x1780/0x3f60 [ 191.644651][ T7739] ? kasan_save_track+0x3f/0x80 [ 191.644678][ T7739] ? __kasan_slab_alloc+0x66/0x80 [ 191.644715][ T7739] ? do_syscall_64+0xf3/0x210 [ 191.644757][ T7739] ? __lock_acquire+0xad5/0xd80 [ 191.644788][ T7739] ? __pfx_mptcp_pm_nl_flush_addrs_doit+0x10/0x10 [ 191.644846][ T7739] netlink_rcv_skb+0x208/0x480 [ 191.644874][ T7739] ? __pfx_genl_rcv_msg+0x10/0x10 [ 191.644908][ T7739] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 191.644957][ T7739] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.644991][ T7739] genl_rcv+0x28/0x40 [ 191.645020][ T7739] netlink_unicast+0x7f8/0x9a0 [ 191.645054][ T7739] ? __pfx_netlink_unicast+0x10/0x10 [ 191.645079][ T7739] ? skb_put+0x114/0x1f0 [ 191.645113][ T7739] netlink_sendmsg+0x8c3/0xcd0 [ 191.645153][ T7739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.645183][ T7739] ? aa_sock_msg_perm+0x91/0x160 [ 191.645215][ T7739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.645244][ T7739] __sock_sendmsg+0x221/0x270 [ 191.645271][ T7739] ____sys_sendmsg+0x523/0x860 [ 191.645313][ T7739] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.645341][ T7739] ? __fget_files+0x2a/0x420 [ 191.645363][ T7739] ? __fget_files+0x2a/0x420 [ 191.645393][ T7739] __sys_sendmsg+0x271/0x360 [ 191.645429][ T7739] ? __pfx___sys_sendmsg+0x10/0x10 [ 191.645495][ T7739] ? perf_trace_preemptirq_template+0xfa/0x400 [ 191.645544][ T7739] ? do_syscall_64+0xb6/0x210 [ 191.645571][ T7739] do_syscall_64+0xf3/0x210 [ 191.645594][ T7739] ? clear_bhb_loop+0x45/0xa0 [ 191.645620][ T7739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.645640][ T7739] RIP: 0033:0x7f9b44f8e969 [ 191.645659][ T7739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.645678][ T7739] RSP: 002b:00007f9b45d1d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.645702][ T7739] RAX: ffffffffffffffda RBX: 00007f9b451b5fa0 RCX: 00007f9b44f8e969 [ 191.645718][ T7739] RDX: 000000002400c000 RSI: 0000200000000040 RDI: 0000000000000005 [ 191.645732][ T7739] RBP: 00007f9b45d1d090 R08: 0000000000000000 R09: 0000000000000000 [ 191.645745][ T7739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.645757][ T7739] R13: 0000000000000000 R14: 00007f9b451b5fa0 R15: 00007ffe446077e8 [ 191.645791][ T7739] [ 191.646277][ T7724] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 191.999072][ T7724] Node 0 DMA32 free:1391376kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:19044kB inactive_anon:0kB active_file:55596kB inactive_file:153236kB unevictable:1536kB writepending:600kB present:3129332kB managed:2547264kB mlocked:0kB bounce:0kB free_pcp:1364kB local_pcp:656kB free_cma:0kB [ 192.040079][ T7724] lowmem_reserve[]: 0 0 0 0 0 [ 192.045022][ T7724] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 192.079291][ T7724] lowmem_reserve[]: 0 0 0 0 0 [ 192.081915][ T7745] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.623'. [ 192.084251][ T7724] Node 1 Normal free:3903500kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:260kB local_pcp:228kB free_cma:0kB [ 192.108045][ T7745] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 192.137193][ T7724] lowmem_reserve[]: 0 0 0 0 0 [ 192.145794][ T7724] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 192.164942][ T7724] Node 0 DMA32: 135*4kB (UME) 695*8kB (UM) 734*16kB (UME) 509*32kB (UME) 381*64kB (UME) 173*128kB (UME) 68*256kB (UME) 26*512kB (UME) 19*1024kB (UME) 11*2048kB (UME) 302*4096kB (UM) = 1390356kB [ 192.191491][ T7745] openvswitch: netlink: Message has 8454 unknown bytes. [ 192.197447][ T7724] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 192.225340][ T7724] Node 1 Normal: 201*4kB (UE) 53*8kB (UME) 38*16kB (UME) 207*32kB (UME) 92*64kB (UME) 24*128kB (UME) 12*256kB (UME) 6*512kB (UM) 5*1024kB (UME) 2*2048kB (UE) 945*4096kB (UM) = 3903500kB [ 192.244652][ T7724] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 192.255632][ T7724] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 192.265061][ T7724] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 192.275258][ T7724] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 192.284752][ T7724] 53682 total pagecache pages [ 192.290463][ T7724] 0 pages in swap cache [ 192.294679][ T7724] Free swap = 124996kB [ 192.305146][ T7724] Total swap = 124996kB [ 192.312109][ T7724] 2097051 pages RAM [ 192.322082][ T7724] 0 pages HighMem/MovableOnly [ 192.336741][ T7724] 428577 pages reserved [ 192.344158][ T7724] 0 pages cma reserved [ 192.371581][ T7735] team0: Port device netdevsim0 added [ 192.389658][ T7751] netlink: 'syz.3.626': attribute type 10 has an invalid length. [ 192.401209][ T7751] netlink: 40 bytes leftover after parsing attributes in process `syz.3.626'. [ 192.430126][ T1155] [ 192.432506][ T1155] ====================================================== [ 192.439648][ T1155] WARNING: possible circular locking dependency detected [ 192.446700][ T1155] 6.15.0-rc3-syzkaller-gf2858f308131 #0 Not tainted [ 192.453324][ T1155] ------------------------------------------------------ [ 192.460367][ T1155] kworker/u8:7/1155 is trying to acquire lock: [ 192.466564][ T1155] ffff88804f4ece00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_port_change_check+0x51/0x1e0 [ 192.476911][ T1155] [ 192.476911][ T1155] but task is already holding lock: [ 192.484283][ T1155] ffff88804dc94d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __linkwatch_run_queue+0x616/0x940 [ 192.494927][ T1155] [ 192.494927][ T1155] which lock already depends on the new lock. [ 192.494927][ T1155] [ 192.505420][ T1155] [ 192.505420][ T1155] the existing dependency chain (in reverse order) is: [ 192.514437][ T1155] [ 192.514437][ T1155] -> #1 (&dev_instance_lock_key#20){+.+.}-{4:4}: [ 192.522976][ T1155] lock_acquire+0x116/0x2f0 [ 192.528017][ T1155] __mutex_lock+0x1a5/0x10c0 [ 192.533239][ T1155] dev_set_mtu+0x11c/0x270 [ 192.538189][ T1155] team_add_slave+0x83b/0x28b0 [ 192.543496][ T1155] do_set_master+0x579/0x730 [ 192.548702][ T1155] do_setlink+0xf76/0x4390 [ 192.553666][ T1155] rtnl_newlink+0x17e2/0x1fe0 [ 192.558885][ T1155] rtnetlink_rcv_msg+0x80f/0xd70 [ 192.564871][ T1155] netlink_rcv_skb+0x208/0x480 [ 192.570457][ T1155] netlink_unicast+0x7f8/0x9a0 [ 192.575949][ T1155] netlink_sendmsg+0x8c3/0xcd0 [ 192.581268][ T1155] __sock_sendmsg+0x221/0x270 [ 192.586621][ T1155] ____sys_sendmsg+0x523/0x860 [ 192.591938][ T1155] __sys_sendmsg+0x271/0x360 [ 192.597060][ T1155] do_syscall_64+0xf3/0x210 [ 192.602092][ T1155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.608512][ T1155] [ 192.608512][ T1155] -> #0 (team->team_lock_key#2){+.+.}-{4:4}: [ 192.616700][ T1155] validate_chain+0xa69/0x24e0 [ 192.622078][ T1155] __lock_acquire+0xad5/0xd80 [ 192.627290][ T1155] lock_acquire+0x116/0x2f0 [ 192.632328][ T1155] __mutex_lock+0x1a5/0x10c0 [ 192.637448][ T1155] team_port_change_check+0x51/0x1e0 [ 192.643361][ T1155] team_device_event+0x437/0x5b0 [ 192.648839][ T1155] notifier_call_chain+0x1a5/0x3f0 [ 192.654480][ T1155] netif_state_change+0x12b/0x1b0 [ 192.660292][ T1155] linkwatch_do_dev+0x112/0x170 [ 192.665814][ T1155] __linkwatch_run_queue+0x63b/0x940 [ 192.671725][ T1155] linkwatch_event+0x4c/0x60 [ 192.676982][ T1155] process_scheduled_works+0xac3/0x18e0 [ 192.683090][ T1155] worker_thread+0x870/0xd50 [ 192.688318][ T1155] kthread+0x7b7/0x940 [ 192.693011][ T1155] ret_from_fork+0x4b/0x80 [ 192.698053][ T1155] ret_from_fork_asm+0x1a/0x30 [ 192.703386][ T1155] [ 192.703386][ T1155] other info that might help us debug this: [ 192.703386][ T1155] [ 192.713710][ T1155] Possible unsafe locking scenario: [ 192.713710][ T1155] [ 192.721167][ T1155] CPU0 CPU1 [ 192.726551][ T1155] ---- ---- [ 192.731939][ T1155] lock(&dev_instance_lock_key#20); [ 192.737289][ T1155] lock(team->team_lock_key#2); [ 192.744775][ T1155] lock(&dev_instance_lock_key#20); [ 192.752598][ T1155] lock(team->team_lock_key#2); [ 192.757642][ T1155] [ 192.757642][ T1155] *** DEADLOCK *** [ 192.757642][ T1155] [ 192.765785][ T1155] 4 locks held by kworker/u8:7/1155: [ 192.771082][ T1155] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 192.782878][ T1155] #1: ffffc90003dc7c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 192.794037][ T1155] #2: ffffffff900fd848 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 192.803019][ T1155] #3: ffff88804dc94d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __linkwatch_run_queue+0x616/0x940 [ 192.814131][ T1155] [ 192.814131][ T1155] stack backtrace: [ 192.820027][ T1155] CPU: 0 UID: 0 PID: 1155 Comm: kworker/u8:7 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 192.820049][ T1155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 192.820061][ T1155] Workqueue: events_unbound linkwatch_event [ 192.820081][ T1155] Call Trace: [ 192.820088][ T1155] [ 192.820095][ T1155] dump_stack_lvl+0x241/0x360 [ 192.820123][ T1155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.820145][ T1155] ? __pfx__printk+0x10/0x10 [ 192.820169][ T1155] ? print_lock+0x171/0x1a0 [ 192.820195][ T1155] print_circular_bug+0x2e1/0x300 [ 192.820214][ T1155] check_noncircular+0x142/0x160 [ 192.820234][ T1155] validate_chain+0xa69/0x24e0 [ 192.820260][ T1155] __lock_acquire+0xad5/0xd80 [ 192.820286][ T1155] lock_acquire+0x116/0x2f0 [ 192.820307][ T1155] ? team_port_change_check+0x51/0x1e0 [ 192.820330][ T1155] __mutex_lock+0x1a5/0x10c0 [ 192.820357][ T1155] ? team_port_change_check+0x51/0x1e0 [ 192.820380][ T1155] ? team_port_change_check+0x51/0x1e0 [ 192.820397][ T1155] ? bond_netdev_event+0xe0/0xfb0 [ 192.820413][ T1155] ? __pfx___mutex_lock+0x10/0x10 [ 192.820433][ T1155] ? __asan_memset+0x23/0x50 [ 192.820457][ T1155] team_port_change_check+0x51/0x1e0 [ 192.820477][ T1155] team_device_event+0x437/0x5b0 [ 192.820495][ T1155] ? notifier_call_chain+0x15a/0x3f0 [ 192.820512][ T1155] notifier_call_chain+0x1a5/0x3f0 [ 192.820530][ T1155] netif_state_change+0x12b/0x1b0 [ 192.820551][ T1155] ? __pfx_netif_state_change+0x10/0x10 [ 192.820573][ T1155] ? rfc2863_policy+0x1ce/0x3f0 [ 192.820598][ T1155] linkwatch_do_dev+0x112/0x170 [ 192.820624][ T1155] __linkwatch_run_queue+0x63b/0x940 [ 192.820639][ T1155] ? __pfx___mutex_lock+0x10/0x10 [ 192.820659][ T1155] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 192.820678][ T1155] ? process_scheduled_works+0x9cb/0x18e0 [ 192.820702][ T1155] linkwatch_event+0x4c/0x60 [ 192.820716][ T1155] process_scheduled_works+0xac3/0x18e0 [ 192.820757][ T1155] ? __pfx_process_scheduled_works+0x10/0x10 [ 192.820786][ T1155] ? assign_work+0x367/0x3d0 [ 192.820811][ T1155] worker_thread+0x870/0xd50 [ 192.820832][ T1155] ? __kthread_parkme+0x1a8/0x200 [ 192.820849][ T1155] ? __pfx_worker_thread+0x10/0x10 [ 192.820864][ T1155] kthread+0x7b7/0x940 [ 192.820883][ T1155] ? __pfx_worker_thread+0x10/0x10 [ 192.820898][ T1155] ? __pfx_kthread+0x10/0x10 [ 192.820915][ T1155] ? __pfx_kthread+0x10/0x10 [ 192.820933][ T1155] ? __pfx_kthread+0x10/0x10 [ 192.820950][ T1155] ? __pfx_kthread+0x10/0x10 [ 192.820968][ T1155] ? _raw_spin_unlock_irq+0x23/0x50 [ 192.820990][ T1155] ? lockdep_hardirqs_on+0x9d/0x150 [ 192.821005][ T1155] ? __pfx_kthread+0x10/0x10 [ 192.821024][ T1155] ret_from_fork+0x4b/0x80 [ 192.821039][ T1155] ? __pfx_kthread+0x10/0x10 [ 192.821057][ T1155] ret_from_fork_asm+0x1a/0x30 [ 192.821078][ T1155] [ 194.329815][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.336296][ T1303] ieee802154 phy1 wpan1: encryption failed: -22