last executing test programs: 5.132046632s ago: executing program 1 (id=735): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) write$cgroup_int(r4, &(0x7f00000000c0), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000380), 0x5, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.780973512s ago: executing program 2 (id=740): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080307000000e8fea4a1180015000600142603600e120800110000810401040016fc0a00104004000000036010fab94dcf5c0461c1d67f6f94067134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"/798], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff96, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000008c0)=r2, 0x4) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081184e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a80016000400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080307000000e8fea4a1180015000600142603600e120800110000810401040016fc0a00104004000000036010fab94dcf5c0461c1d67f6f94067134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"/798], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff96, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000008c0)=r2, 0x4) (async) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081184e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a80016000400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) 3.649469383s ago: executing program 1 (id=742): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x4}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 3.467095975s ago: executing program 3 (id=743): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(r1, 0x0, 0x0) 3.327454526s ago: executing program 2 (id=744): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(r1, 0x0, 0x0) (fail_nth: 1) 3.272705106s ago: executing program 3 (id=745): r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x60, 0x0, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000180), 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'macvtap0\x00', @random="2b0100000400"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'macsec0\x00', 0x400}) 2.77497098s ago: executing program 2 (id=747): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, @perf_config_ext={0x5, 0x7ff}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x34, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8002, 0x2, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x68}, 0x10100) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 2.77463077s ago: executing program 4 (id=748): bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x66) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00'}, 0x10) 2.74423227s ago: executing program 0 (id=749): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb840, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000380), 0x5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.71895617s ago: executing program 3 (id=750): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, @perf_config_ext={0x5, 0x7ff}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x34, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8002, 0x2, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000740)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x68}, 0x10100) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 2.527454512s ago: executing program 1 (id=751): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x70}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 2.435031852s ago: executing program 4 (id=752): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x2, 0x0, @local}, 0x1, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) close(r1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x40047451, &(0x7f0000000180)) close(r1) 2.343539033s ago: executing program 2 (id=753): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) write$cgroup_int(r4, &(0x7f00000000c0), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000380), 0x5, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.109608595s ago: executing program 0 (id=754): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.068560115s ago: executing program 1 (id=755): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) close(r0) 1.946986376s ago: executing program 0 (id=756): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, @perf_config_ext={0x5, 0x7ff}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x34, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8002, 0x2, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000740)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x68}, 0x10100) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 1.784106387s ago: executing program 0 (id=757): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) close(r0) (fail_nth: 1) 1.724428968s ago: executing program 4 (id=758): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5411, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='\x00') recvmsg(r2, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x3}, @func, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xf}]}, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x96, &(0x7f0000000340)=""/150, 0x40f00, 0x40, '\x00', r3, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0x9, 0x6, 0x3}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000580)=[{0x0, 0x2, 0x6, 0xb}, {0x0, 0x2, 0x5, 0x8}, {0x4, 0x5, 0x8, 0x8}], 0x10, 0x34, @void, @value}, 0x94) syz_clone(0x80800, &(0x7f0000000580), 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x7f, 0x17, 0x7, 0x9, 0x0, 0x9, 0x0, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x100041, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0x9, r2, 0x6) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r1, 0x0, 0x1) 1.668538378s ago: executing program 2 (id=759): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe00000000a4080000000000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x891d, &(0x7f00000002c0)={'ip6_vti0\x00', @random="0600002000"}) socket$kcm(0x2, 0x3, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1c, 0x6, 0x8, 0xb, 0xd73, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu~\'\'\t|\t') syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 1.621844689s ago: executing program 3 (id=760): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket$kcm(0x2, 0x3, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1c, 0x6, 0x8, 0xb, 0xd73, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu~\'\'\t|\t') syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 1.34620914s ago: executing program 1 (id=761): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x4}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 1.125288692s ago: executing program 4 (id=762): bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x66) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00'}, 0x10) 828.643894ms ago: executing program 0 (id=763): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, @perf_config_ext={0x5, 0x7ff}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x34, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8002, 0x2, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x68}, 0x10100) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 732.630525ms ago: executing program 4 (id=764): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb840, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000380), 0x5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 324.768118ms ago: executing program 3 (id=765): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x70}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 310.223768ms ago: executing program 4 (id=766): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000350000009c0000000000000025000006000000009500000d00000000"], &(0x7f00000005c0)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xa) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0000000005000000020000000400000005000000", @ANYRES32, @ANYBLOB="000000004c3833616c09a364a39bb6863463b7e71d50a7c7e4cd612799d4de6c48cdfa8d76da", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) unlink(&(0x7f0000000200)='./cgroup\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.time\x00', 0x7a05, 0x1700) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="85000000b200000018400000050000000000000000000000181c0000", @ANYRES32=r2, @ANYBLOB="0000ddff00000000"], &(0x7f0000000480)='syzkaller\x00', 0xc7, 0x2c, &(0x7f0000000580)=""/44, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0xfffffffe, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000640)=[r2, r1, r1, r2], &(0x7f0000000680)=[{0x5, 0x3, 0xc}, {0x5, 0x5, 0x4, 0x6}], 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20044818) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x4, @perf_config_ext={0x7fff, 0xfff}, 0x14105, 0x32, 0xfffffbff, 0x3, 0xe, 0x4, 0xfffa, 0x0, 0x0, 0x0, 0x802009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = socket$kcm(0x10, 0x2, 0x4) (async) r6 = socket$kcm(0x2, 0x6, 0x0) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000130081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c1f01400b080c00bdad01409bbc7a46e3988285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async) r7 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x1, 0x45, &(0x7f0000000000), 0x4) (async) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f00000003c0)) (async) ioctl$TUNSETOFFLOAD(r4, 0x800c6613, 0x20ffffff) (async, rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x10, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061113c00000000001800000000000000000000000000000095000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32) perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0x5, 0x8, 0x0, 0x0, 0x0, 0x5, 0x9c261, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) openat$cgroup_subtree(r3, &(0x7f0000000400), 0x2, 0x0) (rerun: 64) 230.281769ms ago: executing program 1 (id=767): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket$kcm(0x2, 0x3, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1c, 0x6, 0x8, 0xb, 0xd73, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu~\'\'\t|\t') syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 143.074739ms ago: executing program 2 (id=768): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, @perf_config_ext={0x5, 0x7ff}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x34, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8002, 0x2, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000740)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x68}, 0x10100) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 59.34643ms ago: executing program 3 (id=769): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB=',\n'], 0x6a) sendmsg$inet(r0, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x468}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1c, 0x6, 0x8, 0xb, 0xd73, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu~\'\'\t|\t') bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=770): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, @perf_config_ext={0x5, 0x7ff}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x34, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8002, 0x2, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000740)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x68}, 0x10100) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) kernel console output (not intermixed with test programs): =2048kB [ 397.464900][ T5245] 49985 total pagecache pages [ 397.469669][ T5245] 0 pages in swap cache [ 397.486724][ T5245] Free swap = 124996kB [ 397.490943][ T5245] Total swap = 124996kB [ 397.499165][ T5245] 2097051 pages RAM [ 397.505425][ T5245] 0 pages HighMem/MovableOnly [ 397.516108][ T5245] 417415 pages reserved [ 397.520311][ T5245] 0 pages cma reserved [ 398.109283][ T5310] FAULT_INJECTION: forcing a failure. [ 398.109283][ T5310] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 398.140124][ T5310] CPU: 1 PID: 5310 Comm: syz.0.343 Not tainted 6.1.131-syzkaller #0 [ 398.148176][ T5310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 398.158309][ T5310] Call Trace: [ 398.161615][ T5310] [ 398.164577][ T5310] dump_stack_lvl+0x1e3/0x2cb [ 398.169295][ T5310] ? nf_tcp_handle_invalid+0x647/0x647 [ 398.174789][ T5310] ? panic+0x764/0x764 [ 398.178906][ T5310] should_fail_ex+0x3a6/0x4d0 [ 398.183719][ T5310] prepare_alloc_pages+0x1d9/0x5b0 [ 398.188887][ T5310] __alloc_pages+0x16a/0x770 [ 398.193519][ T5310] ? zone_statistics+0x160/0x160 [ 398.198591][ T5310] ? mark_lock+0x9a/0x340 [ 398.202954][ T5310] __folio_alloc+0xf/0x30 [ 398.207315][ T5310] vma_alloc_folio+0x486/0x990 [ 398.212122][ T5310] ? mpol_shared_policy_lookup+0x144/0x1e0 [ 398.217964][ T5310] shmem_alloc_and_acct_folio+0x5a8/0xd50 [ 398.223772][ T5310] ? shmem_replace_folio+0xee0/0xee0 [ 398.229114][ T5310] ? xas_load+0x11a/0x140 [ 398.233492][ T5310] ? __filemap_get_folio+0xbf2/0xe80 [ 398.238899][ T5310] ? __filemap_get_folio+0x150/0xe80 [ 398.244306][ T5310] ? page_cache_prev_miss+0x500/0x500 [ 398.249742][ T5310] shmem_get_folio_gfp+0x13f0/0x3470 [ 398.255071][ T5310] ? mark_lock+0x9a/0x340 [ 398.259432][ T5310] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 398.265602][ T5310] ? shmem_get_folio+0xa0/0xa0 [ 398.270416][ T5310] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 398.277147][ T5310] ? ktime_get_real_ts64+0x460/0x460 [ 398.282498][ T5310] ? simple_xattr_get+0x103/0x120 [ 398.287584][ T5310] shmem_write_begin+0x16e/0x4e0 [ 398.292562][ T5310] ? shmem_writepage+0x1c90/0x1c90 [ 398.297727][ T5310] ? fault_in_iov_iter_readable+0xdb/0x270 [ 398.303597][ T5310] generic_perform_write+0x2fc/0x5e0 [ 398.308958][ T5310] ? generic_file_direct_write+0x460/0x460 [ 398.314893][ T5310] ? __file_remove_privs+0x640/0x640 [ 398.320214][ T5310] ? generic_write_checks+0x15c/0x1c0 [ 398.325628][ T5310] ? clear_nonspinnable+0x60/0x60 [ 398.330711][ T5310] __generic_file_write_iter+0x176/0x400 [ 398.336389][ T5310] generic_file_write_iter+0xab/0x310 [ 398.341810][ T5310] vfs_write+0x857/0xbc0 [ 398.346095][ T5310] ? file_end_write+0x250/0x250 [ 398.350981][ T5310] ? __fget_files+0x28/0x4a0 [ 398.355610][ T5310] ? __fget_files+0x435/0x4a0 [ 398.360335][ T5310] ? __fdget_pos+0x2ba/0x360 [ 398.364959][ T5310] ? ksys_write+0x77/0x2c0 [ 398.369418][ T5310] ksys_write+0x19c/0x2c0 [ 398.373792][ T5310] ? print_irqtrace_events+0x210/0x210 [ 398.379292][ T5310] ? __ia32_sys_read+0x80/0x80 [ 398.384092][ T5310] ? syscall_enter_from_user_mode+0x2e/0x230 [ 398.390100][ T5310] ? lockdep_hardirqs_on+0x94/0x130 [ 398.395338][ T5310] ? syscall_enter_from_user_mode+0x2e/0x230 [ 398.401341][ T5310] do_syscall_64+0x3b/0xb0 [ 398.405780][ T5310] ? clear_bhb_loop+0x45/0xa0 [ 398.410519][ T5310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 398.416428][ T5310] RIP: 0033:0x7fdf7cd8d169 [ 398.421039][ T5310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.440829][ T5310] RSP: 002b:00007fdf7db71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 398.449253][ T5310] RAX: ffffffffffffffda RBX: 00007fdf7cfa5fa0 RCX: 00007fdf7cd8d169 [ 398.457241][ T5310] RDX: 0000000000000012 RSI: 0000400000000980 RDI: 0000000000000004 [ 398.465223][ T5310] RBP: 00007fdf7db71090 R08: 0000000000000000 R09: 0000000000000000 [ 398.473386][ T5310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.481358][ T5310] R13: 0000000000000000 R14: 00007fdf7cfa5fa0 R15: 00007ffe8d040708 [ 398.489365][ T5310] [ 398.540207][ T5312] delete_channel: no stack [ 398.731385][ T5320] netlink: 'syz.0.349': attribute type 10 has an invalid length. [ 398.771675][ T5320] device bridge_slave_1 left promiscuous mode [ 398.804561][ T5320] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.847790][ T5320] device bridge_slave_0 left promiscuous mode [ 398.862967][ T5325] FAULT_INJECTION: forcing a failure. [ 398.862967][ T5325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.876456][ T5320] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.903743][ T5325] CPU: 1 PID: 5325 Comm: syz.3.350 Not tainted 6.1.131-syzkaller #0 [ 398.911893][ T5325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 398.922065][ T5325] Call Trace: [ 398.925400][ T5325] [ 398.928371][ T5325] dump_stack_lvl+0x1e3/0x2cb [ 398.933095][ T5325] ? nf_tcp_handle_invalid+0x647/0x647 [ 398.938593][ T5325] ? panic+0x764/0x764 [ 398.942893][ T5325] ? __lock_acquire+0x1f80/0x1f80 [ 398.947964][ T5325] should_fail_ex+0x3a6/0x4d0 [ 398.952678][ T5325] _copy_from_user+0x2b/0x170 [ 398.957384][ T5325] __sys_bpf+0x226/0x6c0 [ 398.961740][ T5325] ? __fget_files+0x435/0x4a0 [ 398.966488][ T5325] ? bpf_link_show_fdinfo+0x300/0x300 [ 398.972934][ T5325] ? perf_trace_preemptirq_template+0xf4/0x3d0 [ 398.981748][ T5325] ? print_irqtrace_events+0x210/0x210 [ 398.987724][ T5325] ? print_irqtrace_events+0x210/0x210 [ 398.993739][ T5325] ? syscall_enter_from_user_mode+0x2e/0x230 [ 398.999748][ T5325] ? lockdep_hardirqs_on+0x94/0x130 [ 399.004973][ T5325] __x64_sys_bpf+0x78/0x90 [ 399.010945][ T5325] do_syscall_64+0x3b/0xb0 [ 399.017627][ T5325] ? clear_bhb_loop+0x45/0xa0 [ 399.024133][ T5325] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 399.030053][ T5325] RIP: 0033:0x7f91e058d169 [ 399.034743][ T5325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.054385][ T5325] RSP: 002b:00007f91e03ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 399.062820][ T5325] RAX: ffffffffffffffda RBX: 00007f91e07a5fa0 RCX: 00007f91e058d169 [ 399.071255][ T5325] RDX: 0000000000000025 RSI: 0000400000000500 RDI: 000000000000000a [ 399.080451][ T5325] RBP: 00007f91e03ff090 R08: 0000000000000000 R09: 0000000000000000 [ 399.088518][ T5325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.096587][ T5325] R13: 0000000000000000 R14: 00007f91e07a5fa0 R15: 00007fff8c282e58 [ 399.104691][ T5325] [ 399.560832][ T5331] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.353'. [ 399.650158][ T5331] netlink: zone id is out of range [ 399.679469][ T5331] netlink: zone id is out of range [ 399.711644][ T5331] netlink: zone id is out of range [ 399.718682][ T5331] netlink: zone id is out of range [ 399.745993][ T5331] netlink: zone id is out of range [ 399.752230][ T5331] netlink: zone id is out of range [ 399.778081][ T5331] netlink: zone id is out of range [ 399.803484][ T5331] netlink: zone id is out of range [ 399.817449][ T5331] netlink: zone id is out of range [ 399.823997][ T5331] netlink: zone id is out of range [ 400.066132][ T5352] FAULT_INJECTION: forcing a failure. [ 400.066132][ T5352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.139688][ T5352] CPU: 0 PID: 5352 Comm: syz.2.361 Not tainted 6.1.131-syzkaller #0 [ 400.147759][ T5352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 400.157859][ T5352] Call Trace: [ 400.161174][ T5352] [ 400.164136][ T5352] dump_stack_lvl+0x1e3/0x2cb [ 400.168869][ T5352] ? nf_tcp_handle_invalid+0x647/0x647 [ 400.174383][ T5352] ? panic+0x764/0x764 [ 400.178514][ T5352] ? __lock_acquire+0x1f80/0x1f80 [ 400.184655][ T5352] should_fail_ex+0x3a6/0x4d0 [ 400.189411][ T5352] _copy_from_user+0x2b/0x170 [ 400.194164][ T5352] copy_msghdr_from_user+0xaa/0x670 [ 400.199430][ T5352] ? sendmsg_copy_msghdr+0x70/0x70 [ 400.204625][ T5352] __sys_sendmsg+0x236/0x390 [ 400.209268][ T5352] ? ____sys_sendmsg+0x9a0/0x9a0 [ 400.214262][ T5352] ? vfs_write+0x6cf/0xbc0 [ 400.218784][ T5352] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 400.224858][ T5352] ? syscall_enter_from_user_mode+0x2e/0x230 [ 400.230923][ T5352] ? lockdep_hardirqs_on+0x94/0x130 [ 400.236199][ T5352] ? syscall_enter_from_user_mode+0x2e/0x230 [ 400.242248][ T5352] do_syscall_64+0x3b/0xb0 [ 400.246702][ T5352] ? clear_bhb_loop+0x45/0xa0 [ 400.251447][ T5352] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.257483][ T5352] RIP: 0033:0x7fd71478d169 [ 400.262210][ T5352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.282209][ T5352] RSP: 002b:00007fd71556f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.290714][ T5352] RAX: ffffffffffffffda RBX: 00007fd7149a5fa0 RCX: 00007fd71478d169 [ 400.298747][ T5352] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 400.306763][ T5352] RBP: 00007fd71556f090 R08: 0000000000000000 R09: 0000000000000000 [ 400.315915][ T5352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.323947][ T5352] R13: 0000000000000000 R14: 00007fd7149a5fa0 R15: 00007ffc4c606be8 [ 400.333579][ T5352] [ 401.360044][ T5378] FAULT_INJECTION: forcing a failure. [ 401.360044][ T5378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.621998][ T5378] CPU: 1 PID: 5378 Comm: syz.1.370 Not tainted 6.1.131-syzkaller #0 [ 401.630049][ T5378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 401.640129][ T5378] Call Trace: [ 401.643418][ T5378] [ 401.646351][ T5378] dump_stack_lvl+0x1e3/0x2cb [ 401.651040][ T5378] ? nf_tcp_handle_invalid+0x647/0x647 [ 401.656529][ T5378] ? panic+0x764/0x764 [ 401.660609][ T5378] ? __lock_acquire+0x1f80/0x1f80 [ 401.665681][ T5378] should_fail_ex+0x3a6/0x4d0 [ 401.670463][ T5378] _copy_from_user+0x2b/0x170 [ 401.675166][ T5378] __sys_bpf+0x226/0x6c0 [ 401.679507][ T5378] ? bpf_link_show_fdinfo+0x300/0x300 [ 401.684898][ T5378] ? print_irqtrace_events+0x210/0x210 [ 401.690387][ T5378] ? print_irqtrace_events+0x210/0x210 [ 401.695866][ T5378] ? syscall_enter_from_user_mode+0x2e/0x230 [ 401.701856][ T5378] ? lockdep_hardirqs_on+0x94/0x130 [ 401.707068][ T5378] __x64_sys_bpf+0x78/0x90 [ 401.711509][ T5378] do_syscall_64+0x3b/0xb0 [ 401.715934][ T5378] ? clear_bhb_loop+0x45/0xa0 [ 401.720645][ T5378] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.726572][ T5378] RIP: 0033:0x7f2ae4d8d169 [ 401.731019][ T5378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.750741][ T5378] RSP: 002b:00007f2ae5c57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 401.759174][ T5378] RAX: ffffffffffffffda RBX: 00007f2ae4fa5fa0 RCX: 00007f2ae4d8d169 [ 401.767153][ T5378] RDX: 0000000000000010 RSI: 00004000000021c0 RDI: 000000000000000a [ 401.775129][ T5378] RBP: 00007f2ae5c57090 R08: 0000000000000000 R09: 0000000000000000 [ 401.783110][ T5378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.791092][ T5378] R13: 0000000000000000 R14: 00007f2ae4fa5fa0 R15: 00007ffc2a936c48 [ 401.799167][ T5378] [ 402.234052][ T5398] FAULT_INJECTION: forcing a failure. [ 402.234052][ T5398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.271441][ T5398] CPU: 0 PID: 5398 Comm: syz.4.377 Not tainted 6.1.131-syzkaller #0 [ 402.279505][ T5398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 402.289599][ T5398] Call Trace: [ 402.292998][ T5398] [ 402.295964][ T5398] dump_stack_lvl+0x1e3/0x2cb [ 402.300686][ T5398] ? nf_tcp_handle_invalid+0x647/0x647 [ 402.306184][ T5398] ? panic+0x764/0x764 [ 402.310306][ T5398] ? __lock_acquire+0x1f80/0x1f80 [ 402.315416][ T5398] should_fail_ex+0x3a6/0x4d0 [ 402.320142][ T5398] _copy_from_user+0x2b/0x170 [ 402.324891][ T5398] __sys_bpf+0x226/0x6c0 [ 402.329166][ T5398] ? __fget_files+0x435/0x4a0 [ 402.333883][ T5398] ? bpf_link_show_fdinfo+0x300/0x300 [ 402.339305][ T5398] ? print_irqtrace_events+0x210/0x210 [ 402.344812][ T5398] ? print_irqtrace_events+0x210/0x210 [ 402.350322][ T5398] ? syscall_enter_from_user_mode+0x2e/0x230 [ 402.356343][ T5398] ? lockdep_hardirqs_on+0x94/0x130 [ 402.361585][ T5398] __x64_sys_bpf+0x78/0x90 [ 402.366049][ T5398] do_syscall_64+0x3b/0xb0 [ 402.370478][ T5398] ? clear_bhb_loop+0x45/0xa0 [ 402.375192][ T5398] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 402.381124][ T5398] RIP: 0033:0x7fc38df8d169 [ 402.385579][ T5398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.405231][ T5398] RSP: 002b:00007fc38eeb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 402.413691][ T5398] RAX: ffffffffffffffda RBX: 00007fc38e1a5fa0 RCX: 00007fc38df8d169 [ 402.421700][ T5398] RDX: 000000000000004c RSI: 0000400000000640 RDI: 000000000000000a [ 402.429706][ T5398] RBP: 00007fc38eeb6090 R08: 0000000000000000 R09: 0000000000000000 [ 402.433975][ T5403] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.380'. [ 402.437686][ T5398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.437706][ T5398] R13: 0000000000000000 R14: 00007fc38e1a5fa0 R15: 00007fff019f58f8 [ 402.437740][ T5398] [ 405.581945][ T5443] FAULT_INJECTION: forcing a failure. [ 405.581945][ T5443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.680024][ T5442] netlink: 'syz.3.394': attribute type 3 has an invalid length. [ 405.732705][ T5443] CPU: 1 PID: 5443 Comm: syz.1.393 Not tainted 6.1.131-syzkaller #0 [ 405.740750][ T5443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 405.750834][ T5443] Call Trace: [ 405.754151][ T5443] [ 405.757106][ T5443] dump_stack_lvl+0x1e3/0x2cb [ 405.761820][ T5443] ? nf_tcp_handle_invalid+0x647/0x647 [ 405.767305][ T5443] ? panic+0x764/0x764 [ 405.771426][ T5443] ? __lock_acquire+0x1f80/0x1f80 [ 405.776521][ T5443] should_fail_ex+0x3a6/0x4d0 [ 405.781267][ T5443] _copy_from_user+0x2b/0x170 [ 405.786266][ T5443] perf_copy_attr+0x163/0x810 [ 405.791012][ T5443] __se_sys_perf_event_open+0xd7/0x4960 [ 405.796612][ T5443] ? file_end_write+0x250/0x250 [ 405.801632][ T5443] ? mutex_unlock+0x10/0x10 [ 405.806187][ T5443] ? __fget_files+0x435/0x4a0 [ 405.810995][ T5443] ? perf_trace_preemptirq_template+0xf4/0x3d0 [ 405.817234][ T5443] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 405.822934][ T5443] ? syscall_enter_from_user_mode+0x2e/0x230 [ 405.828950][ T5443] ? lockdep_hardirqs_on+0x94/0x130 [ 405.834191][ T5443] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 405.839868][ T5443] do_syscall_64+0x3b/0xb0 [ 405.844323][ T5443] ? clear_bhb_loop+0x45/0xa0 [ 405.849042][ T5443] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.854966][ T5443] RIP: 0033:0x7f2ae4d8d169 [ 405.859404][ T5443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.879049][ T5443] RSP: 002b:00007f2ae5c57038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 405.887612][ T5443] RAX: ffffffffffffffda RBX: 00007f2ae4fa5fa0 RCX: 00007f2ae4d8d169 [ 405.895616][ T5443] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000400000000140 [ 405.903613][ T5443] RBP: 00007f2ae5c57090 R08: 0000000000000000 R09: 0000000000000000 [ 405.911609][ T5443] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 405.919602][ T5443] R13: 0000000000000001 R14: 00007f2ae4fa5fa0 R15: 00007ffc2a936c48 [ 405.927613][ T5443] [ 406.001033][ T5442] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.394'. [ 406.879083][ T5458] netlink: 'syz.1.399': attribute type 2 has an invalid length. [ 407.674505][ T5465] FAULT_INJECTION: forcing a failure. [ 407.674505][ T5465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.697741][ T5465] CPU: 1 PID: 5465 Comm: syz.4.402 Not tainted 6.1.131-syzkaller #0 [ 407.705892][ T5465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 407.715977][ T5465] Call Trace: [ 407.719371][ T5465] [ 407.722329][ T5465] dump_stack_lvl+0x1e3/0x2cb [ 407.727045][ T5465] ? nf_tcp_handle_invalid+0x647/0x647 [ 407.732539][ T5465] ? panic+0x764/0x764 [ 407.736672][ T5465] ? __lock_acquire+0x1f80/0x1f80 [ 407.741754][ T5465] should_fail_ex+0x3a6/0x4d0 [ 407.746485][ T5465] _copy_from_user+0x2b/0x170 [ 407.751201][ T5465] __sys_bpf+0x226/0x6c0 [ 407.755479][ T5465] ? bpf_link_show_fdinfo+0x300/0x300 [ 407.760910][ T5465] ? print_irqtrace_events+0x210/0x210 [ 407.766426][ T5465] ? print_irqtrace_events+0x210/0x210 [ 407.771948][ T5465] ? syscall_enter_from_user_mode+0x2e/0x230 [ 407.778062][ T5465] ? lockdep_hardirqs_on+0x94/0x130 [ 407.783310][ T5465] __x64_sys_bpf+0x78/0x90 [ 407.787778][ T5465] do_syscall_64+0x3b/0xb0 [ 407.792233][ T5465] ? clear_bhb_loop+0x45/0xa0 [ 407.796947][ T5465] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 407.802985][ T5465] RIP: 0033:0x7fc38df8d169 [ 407.807432][ T5465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.827070][ T5465] RSP: 002b:00007fc38eeb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 407.835519][ T5465] RAX: ffffffffffffffda RBX: 00007fc38e1a5fa0 RCX: 00007fc38df8d169 [ 407.843520][ T5465] RDX: 0000000000000038 RSI: 00004000000003c0 RDI: 0000000000000018 [ 407.851509][ T5465] RBP: 00007fc38eeb6090 R08: 0000000000000000 R09: 0000000000000000 [ 407.859503][ T5465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.867599][ T5465] R13: 0000000000000000 R14: 00007fc38e1a5fa0 R15: 00007fff019f58f8 [ 407.875630][ T5465] [ 408.336884][ T5480] netlink: 'syz.4.409': attribute type 29 has an invalid length. [ 408.346033][ T5480] netlink: 'syz.4.409': attribute type 29 has an invalid length. [ 409.338545][ T5507] FAULT_INJECTION: forcing a failure. [ 409.338545][ T5507] name failslab, interval 1, probability 0, space 0, times 0 [ 409.379123][ T5507] CPU: 1 PID: 5507 Comm: syz.2.418 Not tainted 6.1.131-syzkaller #0 [ 409.387176][ T5507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 409.397265][ T5507] Call Trace: [ 409.400562][ T5507] [ 409.403524][ T5507] dump_stack_lvl+0x1e3/0x2cb [ 409.408240][ T5507] ? nf_tcp_handle_invalid+0x647/0x647 [ 409.413735][ T5507] ? panic+0x764/0x764 [ 409.417839][ T5507] ? __might_sleep+0xb0/0xb0 [ 409.422465][ T5507] ? __lock_acquire+0x125b/0x1f80 [ 409.427533][ T5507] should_fail_ex+0x3a6/0x4d0 [ 409.432253][ T5507] should_failslab+0x5/0x20 [ 409.436780][ T5507] slab_pre_alloc_hook+0x59/0x300 [ 409.441838][ T5507] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 409.447586][ T5507] __kmem_cache_alloc_node+0x47/0x260 [ 409.452991][ T5507] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 409.458762][ T5507] __kmalloc+0xa1/0x230 [ 409.462951][ T5507] ? rcu_is_watching+0x11/0xb0 [ 409.467746][ T5507] tomoyo_realpath_from_path+0xcb/0x5d0 [ 409.473334][ T5507] tomoyo_path_number_perm+0x21f/0x7f0 [ 409.478823][ T5507] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 409.484487][ T5507] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 409.490006][ T5507] ? __fget_files+0x28/0x4a0 [ 409.494644][ T5507] ? __fget_files+0x28/0x4a0 [ 409.499257][ T5507] ? __fget_files+0x435/0x4a0 [ 409.503958][ T5507] ? __fget_files+0x28/0x4a0 [ 409.508663][ T5507] security_file_ioctl+0x6d/0xa0 [ 409.513648][ T5507] __se_sys_ioctl+0x47/0x160 [ 409.518267][ T5507] do_syscall_64+0x3b/0xb0 [ 409.522704][ T5507] ? clear_bhb_loop+0x45/0xa0 [ 409.527416][ T5507] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 409.533332][ T5507] RIP: 0033:0x7fd71478d169 [ 409.537857][ T5507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.557569][ T5507] RSP: 002b:00007fd71556f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 409.566008][ T5507] RAX: ffffffffffffffda RBX: 00007fd7149a5fa0 RCX: 00007fd71478d169 [ 409.574000][ T5507] RDX: 0000400000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 409.581989][ T5507] RBP: 00007fd71556f090 R08: 0000000000000000 R09: 0000000000000000 [ 409.589979][ T5507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.597964][ T5507] R13: 0000000000000000 R14: 00007fd7149a5fa0 R15: 00007ffc4c606be8 [ 409.605966][ T5507] [ 409.651676][ T5507] ERROR: Out of memory at tomoyo_realpath_from_path. [ 410.771407][ T5538] FAULT_INJECTION: forcing a failure. [ 410.771407][ T5538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.811133][ T5538] CPU: 0 PID: 5538 Comm: syz.2.428 Not tainted 6.1.131-syzkaller #0 [ 410.819188][ T5538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 410.829273][ T5538] Call Trace: [ 410.832578][ T5538] [ 410.835537][ T5538] dump_stack_lvl+0x1e3/0x2cb [ 410.840253][ T5538] ? nf_tcp_handle_invalid+0x647/0x647 [ 410.845740][ T5538] ? panic+0x764/0x764 [ 410.849813][ T5538] ? __lock_acquire+0x1f80/0x1f80 [ 410.854864][ T5538] should_fail_ex+0x3a6/0x4d0 [ 410.859578][ T5538] _copy_from_user+0x2b/0x170 [ 410.864277][ T5538] udp_lib_setsockopt+0x124/0xad0 [ 410.869359][ T5538] ? udp_destroy_sock+0x2c0/0x2c0 [ 410.874411][ T5538] udpv6_setsockopt+0x63/0xa0 [ 410.879118][ T5538] ? udp_v6_send_skb+0x18b0/0x18b0 [ 410.884232][ T5538] ? sock_common_recvmsg+0x240/0x240 [ 410.889535][ T5538] __sys_setsockopt+0x57e/0xa00 [ 410.894401][ T5538] ? __ia32_sys_recv+0xb0/0xb0 [ 410.899176][ T5538] ? syscall_enter_from_user_mode+0x2e/0x230 [ 410.905161][ T5538] __x64_sys_setsockopt+0xb1/0xc0 [ 410.910208][ T5538] do_syscall_64+0x3b/0xb0 [ 410.914655][ T5538] ? clear_bhb_loop+0x45/0xa0 [ 410.919364][ T5538] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 410.925293][ T5538] RIP: 0033:0x7fd71478d169 [ 410.929725][ T5538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.951521][ T5538] RSP: 002b:00007fd71556f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 410.959944][ T5538] RAX: ffffffffffffffda RBX: 00007fd7149a5fa0 RCX: 00007fd71478d169 [ 410.967928][ T5538] RDX: 000000000000000a RSI: 0000000000000088 RDI: 0000000000000004 [ 410.975920][ T5538] RBP: 00007fd71556f090 R08: 0000000000000004 R09: 0000000000000000 [ 410.983987][ T5538] R10: 00004000000009c0 R11: 0000000000000246 R12: 0000000000000001 [ 410.991968][ T5538] R13: 0000000000000000 R14: 00007fd7149a5fa0 R15: 00007ffc4c606be8 [ 410.999963][ T5538] [ 411.210527][ T5550] FAULT_INJECTION: forcing a failure. [ 411.210527][ T5550] name failslab, interval 1, probability 0, space 0, times 0 [ 411.224208][ T5550] CPU: 0 PID: 5550 Comm: syz.4.433 Not tainted 6.1.131-syzkaller #0 [ 411.232240][ T5550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 411.242318][ T5550] Call Trace: [ 411.245611][ T5550] [ 411.248550][ T5550] dump_stack_lvl+0x1e3/0x2cb [ 411.253261][ T5550] ? nf_tcp_handle_invalid+0x647/0x647 [ 411.258753][ T5550] ? panic+0x764/0x764 [ 411.262843][ T5550] ? __might_sleep+0xb0/0xb0 [ 411.267463][ T5550] should_fail_ex+0x3a6/0x4d0 [ 411.272185][ T5550] should_failslab+0x5/0x20 [ 411.276711][ T5550] slab_pre_alloc_hook+0x59/0x300 [ 411.281762][ T5550] ? read_lock_is_recursive+0x10/0x10 [ 411.287163][ T5550] ? kernfs_fop_write_iter+0x157/0x4f0 [ 411.292646][ T5550] __kmem_cache_alloc_node+0x47/0x260 [ 411.298046][ T5550] ? kernfs_fop_write_iter+0x157/0x4f0 [ 411.303528][ T5550] __kmalloc+0xa1/0x230 [ 411.307712][ T5550] ? end_current_label_crit_section+0x147/0x170 [ 411.313978][ T5550] kernfs_fop_write_iter+0x157/0x4f0 [ 411.319298][ T5550] vfs_write+0x857/0xbc0 [ 411.323569][ T5550] ? file_end_write+0x250/0x250 [ 411.328449][ T5550] ? __fget_files+0x28/0x4a0 [ 411.333076][ T5550] ? __fget_files+0x435/0x4a0 [ 411.337786][ T5550] ? __fdget_pos+0x2ba/0x360 [ 411.342396][ T5550] ? ksys_write+0x77/0x2c0 [ 411.346853][ T5550] ksys_write+0x19c/0x2c0 [ 411.351338][ T5550] ? print_irqtrace_events+0x210/0x210 [ 411.356853][ T5550] ? __ia32_sys_read+0x80/0x80 [ 411.361999][ T5550] ? syscall_enter_from_user_mode+0x2e/0x230 [ 411.368014][ T5550] ? lockdep_hardirqs_on+0x94/0x130 [ 411.373250][ T5550] ? syscall_enter_from_user_mode+0x2e/0x230 [ 411.379261][ T5550] do_syscall_64+0x3b/0xb0 [ 411.383703][ T5550] ? clear_bhb_loop+0x45/0xa0 [ 411.388407][ T5550] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 411.394352][ T5550] RIP: 0033:0x7fc38df8d169 [ 411.398794][ T5550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.418511][ T5550] RSP: 002b:00007fc38eeb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 411.426949][ T5550] RAX: ffffffffffffffda RBX: 00007fc38e1a5fa0 RCX: 00007fc38df8d169 [ 411.434938][ T5550] RDX: 0000000000000012 RSI: 00004000000002c0 RDI: 0000000000000004 [ 411.442939][ T5550] RBP: 00007fc38eeb6090 R08: 0000000000000000 R09: 0000000000000000 [ 411.450926][ T5550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.458914][ T5550] R13: 0000000000000000 R14: 00007fc38e1a5fa0 R15: 00007fff019f58f8 [ 411.466924][ T5550] [ 411.545507][ T5544] delete_channel: no stack [ 412.007838][ T5569] FAULT_INJECTION: forcing a failure. [ 412.007838][ T5569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.067581][ T5569] CPU: 1 PID: 5569 Comm: syz.0.440 Not tainted 6.1.131-syzkaller #0 [ 412.075639][ T5569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 412.085823][ T5569] Call Trace: [ 412.089318][ T5569] [ 412.094913][ T5569] dump_stack_lvl+0x1e3/0x2cb [ 412.099733][ T5569] ? nf_tcp_handle_invalid+0x647/0x647 [ 412.105251][ T5569] ? panic+0x764/0x764 [ 412.109390][ T5569] ? __lock_acquire+0x1f80/0x1f80 [ 412.114513][ T5569] should_fail_ex+0x3a6/0x4d0 [ 412.119276][ T5569] _copy_from_user+0x2b/0x170 [ 412.124016][ T5569] __sys_bpf+0x226/0x6c0 [ 412.128295][ T5569] ? __fget_files+0x435/0x4a0 [ 412.133001][ T5569] ? bpf_link_show_fdinfo+0x300/0x300 [ 412.140415][ T5569] ? print_irqtrace_events+0x210/0x210 [ 412.146944][ T5569] ? print_irqtrace_events+0x210/0x210 [ 412.152426][ T5569] ? syscall_enter_from_user_mode+0x2e/0x230 [ 412.158419][ T5569] ? lockdep_hardirqs_on+0x94/0x130 [ 412.163628][ T5569] __x64_sys_bpf+0x78/0x90 [ 412.168059][ T5569] do_syscall_64+0x3b/0xb0 [ 412.172482][ T5569] ? clear_bhb_loop+0x45/0xa0 [ 412.177177][ T5569] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 412.183179][ T5569] RIP: 0033:0x7fdf7cd8d169 [ 412.187598][ T5569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.207207][ T5569] RSP: 002b:00007fdf7db71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 412.215737][ T5569] RAX: ffffffffffffffda RBX: 00007fdf7cfa5fa0 RCX: 00007fdf7cd8d169 [ 412.223717][ T5569] RDX: 0000000000000090 RSI: 0000400000000180 RDI: 0000000000000005 [ 412.231697][ T5569] RBP: 00007fdf7db71090 R08: 0000000000000000 R09: 0000000000000000 [ 412.239680][ T5569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.247655][ T5569] R13: 0000000000000000 R14: 00007fdf7cfa5fa0 R15: 00007ffe8d040708 [ 412.255645][ T5569] [ 413.346355][ T5597] netlink: 'syz.3.450': attribute type 3 has an invalid length. [ 413.360335][ T5597] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.450'. [ 413.430325][ T5600] FAULT_INJECTION: forcing a failure. [ 413.430325][ T5600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.461889][ T5600] CPU: 0 PID: 5600 Comm: syz.2.452 Not tainted 6.1.131-syzkaller #0 [ 413.469970][ T5600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 413.480063][ T5600] Call Trace: [ 413.483369][ T5600] [ 413.486329][ T5600] dump_stack_lvl+0x1e3/0x2cb [ 413.491046][ T5600] ? nf_tcp_handle_invalid+0x647/0x647 [ 413.496534][ T5600] ? panic+0x764/0x764 [ 413.500623][ T5600] ? snprintf+0xd6/0x120 [ 413.504882][ T5600] should_fail_ex+0x3a6/0x4d0 [ 413.509580][ T5600] _copy_to_user+0x2b/0x130 [ 413.514103][ T5600] simple_read_from_buffer+0xc6/0x150 [ 413.519494][ T5600] proc_fail_nth_read+0x1a3/0x210 [ 413.524538][ T5600] ? proc_fault_inject_write+0x390/0x390 [ 413.530191][ T5600] ? fsnotify_perm+0x439/0x590 [ 413.534972][ T5600] ? proc_fault_inject_write+0x390/0x390 [ 413.540619][ T5600] vfs_read+0x2ed/0xbf0 [ 413.544795][ T5600] ? __fdget_pos+0x2ba/0x360 [ 413.549396][ T5600] ? kernel_read+0x1f0/0x1f0 [ 413.553998][ T5600] ? __fget_files+0x28/0x4a0 [ 413.558598][ T5600] ? __fget_files+0x435/0x4a0 [ 413.563317][ T5600] ? __fdget_pos+0x2ba/0x360 [ 413.567931][ T5600] ? ksys_read+0x77/0x2c0 [ 413.572279][ T5600] ksys_read+0x19c/0x2c0 [ 413.576530][ T5600] ? print_irqtrace_events+0x210/0x210 [ 413.582004][ T5600] ? vfs_write+0xbc0/0xbc0 [ 413.586454][ T5600] ? syscall_enter_from_user_mode+0x2e/0x230 [ 413.592444][ T5600] ? lockdep_hardirqs_on+0x94/0x130 [ 413.597656][ T5600] ? syscall_enter_from_user_mode+0x2e/0x230 [ 413.603658][ T5600] do_syscall_64+0x3b/0xb0 [ 413.608081][ T5600] ? clear_bhb_loop+0x45/0xa0 [ 413.612772][ T5600] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 413.618676][ T5600] RIP: 0033:0x7fd71478bb7c [ 413.623111][ T5600] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 413.642736][ T5600] RSP: 002b:00007fd71556f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 413.651251][ T5600] RAX: ffffffffffffffda RBX: 00007fd7149a5fa0 RCX: 00007fd71478bb7c [ 413.659265][ T5600] RDX: 000000000000000f RSI: 00007fd71556f0a0 RDI: 0000000000000004 [ 413.667270][ T5600] RBP: 00007fd71556f090 R08: 0000000000000000 R09: 0000000000000000 [ 413.675269][ T5600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.683684][ T5600] R13: 0000000000000000 R14: 00007fd7149a5fa0 R15: 00007ffc4c606be8 [ 413.691778][ T5600] [ 414.116489][ T5610] netlink: 'syz.1.454': attribute type 1 has an invalid length. [ 414.169881][ T5610] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.454'. [ 414.794024][ T5628] FAULT_INJECTION: forcing a failure. [ 414.794024][ T5628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.866568][ T5628] CPU: 1 PID: 5628 Comm: syz.2.460 Not tainted 6.1.131-syzkaller #0 [ 414.874615][ T5628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 414.884701][ T5628] Call Trace: [ 414.888011][ T5628] [ 414.890971][ T5628] dump_stack_lvl+0x1e3/0x2cb [ 414.895686][ T5628] ? nf_tcp_handle_invalid+0x647/0x647 [ 414.901178][ T5628] ? panic+0x764/0x764 [ 414.905389][ T5628] ? __lock_acquire+0x1f80/0x1f80 [ 414.910473][ T5628] should_fail_ex+0x3a6/0x4d0 [ 414.915200][ T5628] _copy_from_user+0x2b/0x170 [ 414.919920][ T5628] __sys_bpf+0x226/0x6c0 [ 414.924201][ T5628] ? __fget_files+0x435/0x4a0 [ 414.928911][ T5628] ? bpf_link_show_fdinfo+0x300/0x300 [ 414.934327][ T5628] ? print_irqtrace_events+0x210/0x210 [ 414.939827][ T5628] ? print_irqtrace_events+0x210/0x210 [ 414.945332][ T5628] ? syscall_enter_from_user_mode+0x2e/0x230 [ 414.951353][ T5628] ? lockdep_hardirqs_on+0x94/0x130 [ 414.956592][ T5628] __x64_sys_bpf+0x78/0x90 [ 414.961067][ T5628] do_syscall_64+0x3b/0xb0 [ 414.965598][ T5628] ? clear_bhb_loop+0x45/0xa0 [ 414.970491][ T5628] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 414.976416][ T5628] RIP: 0033:0x7fd71478d169 [ 414.980840][ T5628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.000460][ T5628] RSP: 002b:00007fd71556f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 415.008885][ T5628] RAX: ffffffffffffffda RBX: 00007fd7149a5fa0 RCX: 00007fd71478d169 [ 415.016864][ T5628] RDX: 0000000000000090 RSI: 0000400000000140 RDI: 0000000000000005 [ 415.024839][ T5628] RBP: 00007fd71556f090 R08: 0000000000000000 R09: 0000000000000000 [ 415.032814][ T5628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.040788][ T5628] R13: 0000000000000000 R14: 00007fd7149a5fa0 R15: 00007ffc4c606be8 [ 415.048778][ T5628] [ 415.107424][ T5630] device macvlan0 entered promiscuous mode [ 415.466767][ T5630] delete_channel: no stack [ 415.479388][ T5630] delete_channel: no stack [ 415.539707][ T5650] FAULT_INJECTION: forcing a failure. [ 415.539707][ T5650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.592132][ T5650] CPU: 0 PID: 5650 Comm: syz.0.467 Not tainted 6.1.131-syzkaller #0 [ 415.600186][ T5650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 415.610266][ T5650] Call Trace: [ 415.613552][ T5650] [ 415.616485][ T5650] dump_stack_lvl+0x1e3/0x2cb [ 415.621176][ T5650] ? nf_tcp_handle_invalid+0x647/0x647 [ 415.626641][ T5650] ? panic+0x764/0x764 [ 415.630719][ T5650] ? __lock_acquire+0x1f80/0x1f80 [ 415.635806][ T5650] should_fail_ex+0x3a6/0x4d0 [ 415.640505][ T5650] _copy_from_user+0x2b/0x170 [ 415.645192][ T5650] __sys_bpf+0x226/0x6c0 [ 415.649438][ T5650] ? __fget_files+0x435/0x4a0 [ 415.654122][ T5650] ? bpf_link_show_fdinfo+0x300/0x300 [ 415.659496][ T5650] ? perf_trace_preemptirq_template+0xf4/0x3d0 [ 415.665671][ T5650] ? print_irqtrace_events+0x210/0x210 [ 415.671166][ T5650] ? print_irqtrace_events+0x210/0x210 [ 415.676669][ T5650] ? syscall_enter_from_user_mode+0x2e/0x230 [ 415.682686][ T5650] ? lockdep_hardirqs_on+0x94/0x130 [ 415.687915][ T5650] __x64_sys_bpf+0x78/0x90 [ 415.692363][ T5650] do_syscall_64+0x3b/0xb0 [ 415.696796][ T5650] ? clear_bhb_loop+0x45/0xa0 [ 415.701508][ T5650] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.707424][ T5650] RIP: 0033:0x7fdf7cd8d169 [ 415.711847][ T5650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.731476][ T5650] RSP: 002b:00007fdf7db71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 415.739930][ T5650] RAX: ffffffffffffffda RBX: 00007fdf7cfa5fa0 RCX: 00007fdf7cd8d169 [ 415.747918][ T5650] RDX: 0000000000000070 RSI: 00004000000000c0 RDI: 0000000000000005 [ 415.755900][ T5650] RBP: 00007fdf7db71090 R08: 0000000000000000 R09: 0000000000000000 [ 415.763892][ T5650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.771866][ T5650] R13: 0000000000000000 R14: 00007fdf7cfa5fa0 R15: 00007ffe8d040708 [ 415.779861][ T5650] [ 417.114708][ T5684] FAULT_INJECTION: forcing a failure. [ 417.114708][ T5684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.161701][ T5684] CPU: 0 PID: 5684 Comm: syz.3.480 Not tainted 6.1.131-syzkaller #0 [ 417.169745][ T5684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 417.179835][ T5684] Call Trace: [ 417.183146][ T5684] [ 417.186124][ T5684] dump_stack_lvl+0x1e3/0x2cb [ 417.190944][ T5684] ? nf_tcp_handle_invalid+0x647/0x647 [ 417.196709][ T5684] ? panic+0x764/0x764 [ 417.200824][ T5684] ? __lock_acquire+0x1f80/0x1f80 [ 417.205908][ T5684] should_fail_ex+0x3a6/0x4d0 [ 417.210636][ T5684] _copy_from_user+0x2b/0x170 [ 417.215443][ T5684] __sys_bpf+0x226/0x6c0 [ 417.219716][ T5684] ? __fget_files+0x435/0x4a0 [ 417.224432][ T5684] ? bpf_link_show_fdinfo+0x300/0x300 [ 417.229835][ T5684] ? print_irqtrace_events+0x210/0x210 [ 417.235321][ T5684] ? print_irqtrace_events+0x210/0x210 [ 417.240801][ T5684] ? syscall_enter_from_user_mode+0x2e/0x230 [ 417.246859][ T5684] ? lockdep_hardirqs_on+0x94/0x130 [ 417.252102][ T5684] __x64_sys_bpf+0x78/0x90 [ 417.256549][ T5684] do_syscall_64+0x3b/0xb0 [ 417.260971][ T5684] ? clear_bhb_loop+0x45/0xa0 [ 417.265661][ T5684] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.271601][ T5684] RIP: 0033:0x7f91e058d169 [ 417.276113][ T5684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.295738][ T5684] RSP: 002b:00007f91e03ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 417.304191][ T5684] RAX: ffffffffffffffda RBX: 00007f91e07a5fa0 RCX: 00007f91e058d169 [ 417.312187][ T5684] RDX: 00000000000000a0 RSI: 0000400000000680 RDI: 0000000000000005 [ 417.320176][ T5684] RBP: 00007f91e03ff090 R08: 0000000000000000 R09: 0000000000000000 [ 417.328178][ T5684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.336177][ T5684] R13: 0000000000000000 R14: 00007f91e07a5fa0 R15: 00007fff8c282e58 [ 417.344176][ T5684] [ 417.505045][ T5691] netlink: 14 bytes leftover after parsing attributes in process `syz.0.483'. [ 417.545253][ T5697] FAULT_INJECTION: forcing a failure. [ 417.545253][ T5697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.562993][ T5697] CPU: 1 PID: 5697 Comm: syz.1.485 Not tainted 6.1.131-syzkaller #0 [ 417.571025][ T5697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 417.581204][ T5697] Call Trace: [ 417.584513][ T5697] [ 417.587479][ T5697] dump_stack_lvl+0x1e3/0x2cb [ 417.592194][ T5697] ? nf_tcp_handle_invalid+0x647/0x647 [ 417.597689][ T5697] ? panic+0x764/0x764 [ 417.601797][ T5697] ? __lock_acquire+0x1f80/0x1f80 [ 417.606868][ T5697] should_fail_ex+0x3a6/0x4d0 [ 417.611605][ T5697] _copy_from_user+0x2b/0x170 [ 417.616364][ T5697] __sys_bpf+0x226/0x6c0 [ 417.620641][ T5697] ? bpf_link_show_fdinfo+0x300/0x300 [ 417.626055][ T5697] ? print_irqtrace_events+0x210/0x210 [ 417.631563][ T5697] ? print_irqtrace_events+0x210/0x210 [ 417.637069][ T5697] ? syscall_enter_from_user_mode+0x2e/0x230 [ 417.643088][ T5697] ? lockdep_hardirqs_on+0x94/0x130 [ 417.648325][ T5697] __x64_sys_bpf+0x78/0x90 [ 417.652785][ T5697] do_syscall_64+0x3b/0xb0 [ 417.657229][ T5697] ? clear_bhb_loop+0x45/0xa0 [ 417.661943][ T5697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.667877][ T5697] RIP: 0033:0x7f2ae4d8d169 [ 417.672337][ T5697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.691974][ T5697] RSP: 002b:00007f2ae5c57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 417.700428][ T5697] RAX: ffffffffffffffda RBX: 00007f2ae4fa5fa0 RCX: 00007f2ae4d8d169 [ 417.708436][ T5697] RDX: 0000000000000050 RSI: 0000400000000e00 RDI: 0000000000000000 [ 417.716442][ T5697] RBP: 00007f2ae5c57090 R08: 0000000000000000 R09: 0000000000000000 [ 417.724452][ T5697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.732457][ T5697] R13: 0000000000000000 R14: 00007f2ae4fa5fa0 R15: 00007ffc2a936c48 [ 417.740479][ T5697] [ 417.897571][ T5691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.920269][ T5691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.940876][ T5691] bond0 (unregistering): Released all slaves [ 418.244301][ T5707] FAULT_INJECTION: forcing a failure. [ 418.244301][ T5707] name failslab, interval 1, probability 0, space 0, times 0 [ 418.282285][ T5707] CPU: 0 PID: 5707 Comm: syz.1.487 Not tainted 6.1.131-syzkaller #0 [ 418.290329][ T5707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 418.300414][ T5707] Call Trace: [ 418.303724][ T5707] [ 418.306689][ T5707] dump_stack_lvl+0x1e3/0x2cb [ 418.311400][ T5707] ? nf_tcp_handle_invalid+0x647/0x647 [ 418.316886][ T5707] ? panic+0x764/0x764 [ 418.320965][ T5707] ? __might_sleep+0xb0/0xb0 [ 418.325571][ T5707] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 418.331767][ T5707] ? lockdep_hardirqs_on+0x94/0x130 [ 418.336994][ T5707] should_fail_ex+0x3a6/0x4d0 [ 418.341701][ T5707] should_failslab+0x5/0x20 [ 418.346233][ T5707] slab_pre_alloc_hook+0x59/0x300 [ 418.351287][ T5707] ? bpf_trace_run2+0x110/0x410 [ 418.356175][ T5707] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 418.361930][ T5707] __kmem_cache_alloc_node+0x47/0x260 [ 418.367335][ T5707] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 418.373095][ T5707] __kmalloc+0xa1/0x230 [ 418.377284][ T5707] ? rcu_is_watching+0x11/0xb0 [ 418.382078][ T5707] tomoyo_realpath_from_path+0xcb/0x5d0 [ 418.387678][ T5707] tomoyo_path_number_perm+0x21f/0x7f0 [ 418.393175][ T5707] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 418.398843][ T5707] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 418.404360][ T5707] ? __fget_files+0x28/0x4a0 [ 418.409027][ T5707] ? __fget_files+0x28/0x4a0 [ 418.413655][ T5707] ? __fget_files+0x435/0x4a0 [ 418.418371][ T5707] ? __fget_files+0x28/0x4a0 [ 418.423003][ T5707] security_file_ioctl+0x6d/0xa0 [ 418.427986][ T5707] __se_sys_ioctl+0x47/0x160 [ 418.432617][ T5707] do_syscall_64+0x3b/0xb0 [ 418.437077][ T5707] ? clear_bhb_loop+0x45/0xa0 [ 418.441803][ T5707] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 418.447734][ T5707] RIP: 0033:0x7f2ae4d8d169 [ 418.452353][ T5707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.471989][ T5707] RSP: 002b:00007f2ae5c57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.480425][ T5707] RAX: ffffffffffffffda RBX: 00007f2ae4fa5fa0 RCX: 00007f2ae4d8d169 [ 418.488416][ T5707] RDX: 0000400000000080 RSI: 00000000000089f1 RDI: 0000000000000009 [ 418.496407][ T5707] RBP: 00007f2ae5c57090 R08: 0000000000000000 R09: 0000000000000000 [ 418.504397][ T5707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.512388][ T5707] R13: 0000000000000000 R14: 00007f2ae4fa5fa0 R15: 00007ffc2a936c48 [ 418.520503][ T5707] [ 418.560666][ T5707] ERROR: Out of memory at tomoyo_realpath_from_path. [ 419.156752][ T5722] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.492'. [ 420.945964][ T5759] FAULT_INJECTION: forcing a failure. [ 420.945964][ T5759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.011739][ T5759] CPU: 1 PID: 5759 Comm: syz.3.507 Not tainted 6.1.131-syzkaller #0 [ 421.019824][ T5759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 421.029937][ T5759] Call Trace: [ 421.033477][ T5759] [ 421.036500][ T5759] dump_stack_lvl+0x1e3/0x2cb [ 421.041268][ T5759] ? nf_tcp_handle_invalid+0x647/0x647 [ 421.046787][ T5759] ? panic+0x764/0x764 [ 421.050929][ T5759] ? __lock_acquire+0x1f80/0x1f80 [ 421.056058][ T5759] should_fail_ex+0x3a6/0x4d0 [ 421.060828][ T5759] _copy_from_user+0x2b/0x170 [ 421.065577][ T5759] copy_msghdr_from_user+0xaa/0x670 [ 421.070860][ T5759] ? sendmsg_copy_msghdr+0x70/0x70 [ 421.076086][ T5759] __sys_sendmsg+0x236/0x390 [ 421.080755][ T5759] ? ____sys_sendmsg+0x9a0/0x9a0 [ 421.085837][ T5759] ? vfs_write+0x6cf/0xbc0 [ 421.090431][ T5759] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 421.096521][ T5759] ? syscall_enter_from_user_mode+0x2e/0x230 [ 421.102563][ T5759] ? lockdep_hardirqs_on+0x94/0x130 [ 421.107825][ T5759] ? syscall_enter_from_user_mode+0x2e/0x230 [ 421.113876][ T5759] do_syscall_64+0x3b/0xb0 [ 421.118413][ T5759] ? clear_bhb_loop+0x45/0xa0 [ 421.123141][ T5759] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.129104][ T5759] RIP: 0033:0x7f91e058d169 [ 421.133573][ T5759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.153242][ T5759] RSP: 002b:00007f91e03ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.161723][ T5759] RAX: ffffffffffffffda RBX: 00007f91e07a5fa0 RCX: 00007f91e058d169 [ 421.169749][ T5759] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000005 [ 421.177765][ T5759] RBP: 00007f91e03ff090 R08: 0000000000000000 R09: 0000000000000000 [ 421.185783][ T5759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.193804][ T5759] R13: 0000000000000000 R14: 00007f91e07a5fa0 R15: 00007fff8c282e58 [ 421.201883][ T5759] [ 421.943279][ T48] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 422.187123][ T5790] FAULT_INJECTION: forcing a failure. [ 422.187123][ T5790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.254524][ T5790] CPU: 1 PID: 5790 Comm: syz.4.518 Not tainted 6.1.131-syzkaller #0 [ 422.262582][ T5790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 422.272673][ T5790] Call Trace: [ 422.275980][ T5790] [ 422.278936][ T5790] dump_stack_lvl+0x1e3/0x2cb [ 422.283651][ T5790] ? nf_tcp_handle_invalid+0x647/0x647 [ 422.289137][ T5790] ? panic+0x764/0x764 [ 422.293235][ T5790] ? __lock_acquire+0x1f80/0x1f80 [ 422.298309][ T5790] should_fail_ex+0x3a6/0x4d0 [ 422.303036][ T5790] _copy_from_user+0x2b/0x170 [ 422.307819][ T5790] copy_msghdr_from_user+0xaa/0x670 [ 422.313053][ T5790] ? sendmsg_copy_msghdr+0x70/0x70 [ 422.318199][ T5790] __sys_sendmsg+0x236/0x390 [ 422.322804][ T5790] ? ____sys_sendmsg+0x9a0/0x9a0 [ 422.327777][ T5790] ? seqcount_lockdep_reader_access+0x1bd/0x220 [ 422.334055][ T5790] ? perf_trace_run_bpf_submit+0xf7/0x1d0 [ 422.339890][ T5790] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 422.345921][ T5790] ? syscall_enter_from_user_mode+0x2e/0x230 [ 422.351935][ T5790] ? lockdep_hardirqs_on+0x94/0x130 [ 422.357144][ T5790] ? syscall_enter_from_user_mode+0x2e/0x230 [ 422.363138][ T5790] do_syscall_64+0x3b/0xb0 [ 422.367559][ T5790] ? clear_bhb_loop+0x45/0xa0 [ 422.372256][ T5790] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 422.378158][ T5790] RIP: 0033:0x7fc38df8d169 [ 422.382580][ T5790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.402191][ T5790] RSP: 002b:00007fc38eeb6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.410612][ T5790] RAX: ffffffffffffffda RBX: 00007fc38e1a5fa0 RCX: 00007fc38df8d169 [ 422.418761][ T5790] RDX: 00000000200048cc RSI: 0000400000000240 RDI: 0000000000000006 [ 422.426748][ T5790] RBP: 00007fc38eeb6090 R08: 0000000000000000 R09: 0000000000000000 [ 422.434808][ T5790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.442779][ T5790] R13: 0000000000000000 R14: 00007fc38e1a5fa0 R15: 00007fff019f58f8 [ 422.450769][ T5790] [ 422.485418][ T5795] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.521'. [ 423.163265][ T5813] FAULT_INJECTION: forcing a failure. [ 423.163265][ T5813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.195340][ T5813] CPU: 0 PID: 5813 Comm: syz.0.528 Not tainted 6.1.131-syzkaller #0 [ 423.203399][ T5813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 423.213489][ T5813] Call Trace: [ 423.216794][ T5813] [ 423.219750][ T5813] dump_stack_lvl+0x1e3/0x2cb [ 423.224465][ T5813] ? nf_tcp_handle_invalid+0x647/0x647 [ 423.229968][ T5813] ? panic+0x764/0x764 [ 423.234076][ T5813] ? __lock_acquire+0x1f80/0x1f80 [ 423.239153][ T5813] should_fail_ex+0x3a6/0x4d0 [ 423.243877][ T5813] _copy_from_user+0x2b/0x170 [ 423.248596][ T5813] copy_msghdr_from_user+0xaa/0x670 [ 423.253842][ T5813] ? sendmsg_copy_msghdr+0x70/0x70 [ 423.258999][ T5813] __sys_sendmsg+0x236/0x390 [ 423.263618][ T5813] ? ____sys_sendmsg+0x9a0/0x9a0 [ 423.268588][ T5813] ? seqcount_lockdep_reader_access+0x1bd/0x220 [ 423.274969][ T5813] ? perf_trace_run_bpf_submit+0xf7/0x1d0 [ 423.280735][ T5813] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 423.286767][ T5813] ? syscall_enter_from_user_mode+0x2e/0x230 [ 423.292786][ T5813] ? lockdep_hardirqs_on+0x94/0x130 [ 423.298017][ T5813] ? syscall_enter_from_user_mode+0x2e/0x230 [ 423.304037][ T5813] do_syscall_64+0x3b/0xb0 [ 423.308845][ T5813] ? clear_bhb_loop+0x45/0xa0 [ 423.313562][ T5813] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 423.319490][ T5813] RIP: 0033:0x7fdf7cd8d169 [ 423.323940][ T5813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.343580][ T5813] RSP: 002b:00007fdf7db71038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.352034][ T5813] RAX: ffffffffffffffda RBX: 00007fdf7cfa5fa0 RCX: 00007fdf7cd8d169 [ 423.360049][ T5813] RDX: 00000000200048cc RSI: 0000400000000240 RDI: 0000000000000006 [ 423.368060][ T5813] RBP: 00007fdf7db71090 R08: 0000000000000000 R09: 0000000000000000 [ 423.376066][ T5813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.384072][ T5813] R13: 0000000000000000 R14: 00007fdf7cfa5fa0 R15: 00007ffe8d040708 [ 423.392176][ T5813] [ 423.871419][ T5831] FAULT_INJECTION: forcing a failure. [ 423.871419][ T5831] name failslab, interval 1, probability 0, space 0, times 0 [ 423.932864][ T5831] CPU: 0 PID: 5831 Comm: syz.3.534 Not tainted 6.1.131-syzkaller #0 [ 423.940911][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 423.950990][ T5831] Call Trace: [ 423.954287][ T5831] [ 423.957221][ T5831] dump_stack_lvl+0x1e3/0x2cb [ 423.961913][ T5831] ? nf_tcp_handle_invalid+0x647/0x647 [ 423.967377][ T5831] ? panic+0x764/0x764 [ 423.971456][ T5831] ? __might_sleep+0xb0/0xb0 [ 423.976059][ T5831] ? __lock_acquire+0x125b/0x1f80 [ 423.981100][ T5831] should_fail_ex+0x3a6/0x4d0 [ 423.985811][ T5831] should_failslab+0x5/0x20 [ 423.990322][ T5831] slab_pre_alloc_hook+0x59/0x300 [ 423.995364][ T5831] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 424.001217][ T5831] __kmem_cache_alloc_node+0x47/0x260 [ 424.006608][ T5831] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 424.012343][ T5831] __kmalloc+0xa1/0x230 [ 424.016516][ T5831] ? rcu_is_watching+0x11/0xb0 [ 424.021289][ T5831] tomoyo_realpath_from_path+0xcb/0x5d0 [ 424.026878][ T5831] tomoyo_path_number_perm+0x21f/0x7f0 [ 424.032351][ T5831] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 424.037995][ T5831] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 424.043486][ T5831] ? __fget_files+0x28/0x4a0 [ 424.048096][ T5831] ? __fget_files+0x28/0x4a0 [ 424.052693][ T5831] ? __fget_files+0x435/0x4a0 [ 424.057378][ T5831] ? __fget_files+0x28/0x4a0 [ 424.061982][ T5831] security_file_ioctl+0x6d/0xa0 [ 424.066938][ T5831] __se_sys_ioctl+0x47/0x160 [ 424.071535][ T5831] do_syscall_64+0x3b/0xb0 [ 424.075957][ T5831] ? clear_bhb_loop+0x45/0xa0 [ 424.080642][ T5831] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 424.086547][ T5831] RIP: 0033:0x7f91e058d169 [ 424.090966][ T5831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.110588][ T5831] RSP: 002b:00007f91e03ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 424.119010][ T5831] RAX: ffffffffffffffda RBX: 00007f91e07a5fa0 RCX: 00007f91e058d169 [ 424.126991][ T5831] RDX: 0000400000000080 RSI: 0000000000008946 RDI: 0000000000000011 [ 424.134967][ T5831] RBP: 00007f91e03ff090 R08: 0000000000000000 R09: 0000000000000000 [ 424.142940][ T5831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.150913][ T5831] R13: 0000000000000000 R14: 00007f91e07a5fa0 R15: 00007fff8c282e58 [ 424.158900][ T5831] [ 424.164219][ T48] Bluetooth: hci3: command 0x2016 tx timeout [ 424.191811][ T5831] ERROR: Out of memory at tomoyo_realpath_from_path. [ 425.040307][ T5852] FAULT_INJECTION: forcing a failure. [ 425.040307][ T5852] name failslab, interval 1, probability 0, space 0, times 0 [ 425.091861][ T5852] CPU: 1 PID: 5852 Comm: syz.2.543 Not tainted 6.1.131-syzkaller #0 [ 425.099908][ T5852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 425.110002][ T5852] Call Trace: [ 425.113306][ T5852] [ 425.116253][ T5852] dump_stack_lvl+0x1e3/0x2cb [ 425.120974][ T5852] ? nf_tcp_handle_invalid+0x647/0x647 [ 425.126470][ T5852] ? panic+0x764/0x764 [ 425.130586][ T5852] ? __might_sleep+0xb0/0xb0 [ 425.135205][ T5852] ? __lock_acquire+0x125b/0x1f80 [ 425.140279][ T5852] should_fail_ex+0x3a6/0x4d0 [ 425.145008][ T5852] should_failslab+0x5/0x20 [ 425.149526][ T5852] slab_pre_alloc_hook+0x59/0x300 [ 425.154577][ T5852] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 425.160314][ T5852] __kmem_cache_alloc_node+0x47/0x260 [ 425.165699][ T5852] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 425.171442][ T5852] __kmalloc+0xa1/0x230 [ 425.175606][ T5852] ? rcu_is_watching+0x11/0xb0 [ 425.180377][ T5852] tomoyo_realpath_from_path+0xcb/0x5d0 [ 425.185964][ T5852] tomoyo_path_number_perm+0x21f/0x7f0 [ 425.191468][ T5852] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 425.197308][ T5852] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 425.202799][ T5852] ? __fget_files+0x28/0x4a0 [ 425.207418][ T5852] ? __fget_files+0x28/0x4a0 [ 425.212036][ T5852] ? __fget_files+0x435/0x4a0 [ 425.216742][ T5852] ? __fget_files+0x28/0x4a0 [ 425.221374][ T5852] security_file_ioctl+0x6d/0xa0 [ 425.226339][ T5852] __se_sys_ioctl+0x47/0x160 [ 425.230957][ T5852] do_syscall_64+0x3b/0xb0 [ 425.235379][ T5852] ? clear_bhb_loop+0x45/0xa0 [ 425.240070][ T5852] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 425.245975][ T5852] RIP: 0033:0x7fd71478d169 [ 425.250396][ T5852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.270179][ T5852] RSP: 002b:00007fd71556f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 425.278603][ T5852] RAX: ffffffffffffffda RBX: 00007fd7149a5fa0 RCX: 00007fd71478d169 [ 425.286583][ T5852] RDX: 0000400000000080 RSI: 0000000000008946 RDI: 0000000000000010 [ 425.294561][ T5852] RBP: 00007fd71556f090 R08: 0000000000000000 R09: 0000000000000000 [ 425.302540][ T5852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.310516][ T5852] R13: 0000000000000000 R14: 00007fd7149a5fa0 R15: 00007ffc4c606be8 [ 425.318506][ T5852] [ 425.503131][ T5852] ERROR: Out of memory at tomoyo_realpath_from_path. [ 426.144671][ T5877] netlink: 188 bytes leftover after parsing attributes in process `syz.4.548'. [ 426.655594][ T5877] ksmbd: Unknown IPC event: 10, ignore. [ 427.735830][ T5898] FAULT_INJECTION: forcing a failure. [ 427.735830][ T5898] name failslab, interval 1, probability 0, space 0, times 0 [ 427.907709][ T5898] CPU: 0 PID: 5898 Comm: syz.0.555 Not tainted 6.1.131-syzkaller #0 [ 427.915764][ T5898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 427.925862][ T5898] Call Trace: [ 427.929162][ T5898] [ 427.932111][ T5898] dump_stack_lvl+0x1e3/0x2cb [ 427.936835][ T5898] ? nf_tcp_handle_invalid+0x647/0x647 [ 427.942338][ T5898] ? panic+0x764/0x764 [ 427.946463][ T5898] ? __might_sleep+0xb0/0xb0 [ 427.951084][ T5898] ? __lock_acquire+0x125b/0x1f80 [ 427.956155][ T5898] should_fail_ex+0x3a6/0x4d0 [ 427.960877][ T5898] should_failslab+0x5/0x20 [ 427.965422][ T5898] slab_pre_alloc_hook+0x59/0x300 [ 427.970485][ T5898] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 427.976332][ T5898] __kmem_cache_alloc_node+0x47/0x260 [ 427.981749][ T5898] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 427.987511][ T5898] __kmalloc+0xa1/0x230 [ 427.991710][ T5898] ? rcu_is_watching+0x11/0xb0 [ 427.996524][ T5898] tomoyo_realpath_from_path+0xcb/0x5d0 [ 428.002127][ T5898] tomoyo_path_number_perm+0x21f/0x7f0 [ 428.007631][ T5898] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 428.013305][ T5898] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 428.018831][ T5898] ? __fget_files+0x28/0x4a0 [ 428.023481][ T5898] ? __fget_files+0x28/0x4a0 [ 428.028102][ T5898] ? __fget_files+0x435/0x4a0 [ 428.032809][ T5898] ? __fget_files+0x28/0x4a0 [ 428.037437][ T5898] security_file_ioctl+0x6d/0xa0 [ 428.042418][ T5898] __se_sys_ioctl+0x47/0x160 [ 428.047042][ T5898] do_syscall_64+0x3b/0xb0 [ 428.051486][ T5898] ? clear_bhb_loop+0x45/0xa0 [ 428.056196][ T5898] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 428.062131][ T5898] RIP: 0033:0x7fdf7cd8d169 [ 428.066582][ T5898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.086225][ T5898] RSP: 002b:00007fdf7db50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.094675][ T5898] RAX: ffffffffffffffda RBX: 00007fdf7cfa6080 RCX: 00007fdf7cd8d169 [ 428.102679][ T5898] RDX: 00004000000001c0 RSI: 00000000400454e2 RDI: 0000000000000007 [ 428.110678][ T5898] RBP: 00007fdf7db50090 R08: 0000000000000000 R09: 0000000000000000 [ 428.118672][ T5898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.126668][ T5898] R13: 0000000000000000 R14: 00007fdf7cfa6080 R15: 00007ffe8d040708 [ 428.134684][ T5898] [ 428.148806][ T5898] ERROR: Out of memory at tomoyo_realpath_from_path. [ 428.425590][ T5911] FAULT_INJECTION: forcing a failure. [ 428.425590][ T5911] name failslab, interval 1, probability 0, space 0, times 0 [ 428.486052][ T5911] CPU: 1 PID: 5911 Comm: syz.3.562 Not tainted 6.1.131-syzkaller #0 [ 428.494095][ T5911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 428.504159][ T5911] Call Trace: [ 428.507442][ T5911] [ 428.510377][ T5911] dump_stack_lvl+0x1e3/0x2cb [ 428.515075][ T5911] ? nf_tcp_handle_invalid+0x647/0x647 [ 428.520539][ T5911] ? panic+0x764/0x764 [ 428.524622][ T5911] ? __might_sleep+0xb0/0xb0 [ 428.529236][ T5911] ? __lock_acquire+0x125b/0x1f80 [ 428.534280][ T5911] should_fail_ex+0x3a6/0x4d0 [ 428.538977][ T5911] should_failslab+0x5/0x20 [ 428.543492][ T5911] slab_pre_alloc_hook+0x59/0x300 [ 428.548533][ T5911] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 428.554290][ T5911] __kmem_cache_alloc_node+0x47/0x260 [ 428.559706][ T5911] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 428.565455][ T5911] __kmalloc+0xa1/0x230 [ 428.569628][ T5911] ? rcu_is_watching+0x11/0xb0 [ 428.574400][ T5911] tomoyo_realpath_from_path+0xcb/0x5d0 [ 428.579986][ T5911] tomoyo_path_number_perm+0x21f/0x7f0 [ 428.585471][ T5911] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 428.591139][ T5911] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 428.596634][ T5911] ? __fget_files+0x28/0x4a0 [ 428.601266][ T5911] ? __fget_files+0x28/0x4a0 [ 428.605955][ T5911] ? __fget_files+0x435/0x4a0 [ 428.610663][ T5911] ? __fget_files+0x28/0x4a0 [ 428.615325][ T5911] security_file_ioctl+0x6d/0xa0 [ 428.620342][ T5911] __se_sys_ioctl+0x47/0x160 [ 428.624955][ T5911] do_syscall_64+0x3b/0xb0 [ 428.629415][ T5911] ? clear_bhb_loop+0x45/0xa0 [ 428.634132][ T5911] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 428.640133][ T5911] RIP: 0033:0x7f91e058d169 [ 428.644582][ T5911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.664206][ T5911] RSP: 002b:00007f91e03ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.672718][ T5911] RAX: ffffffffffffffda RBX: 00007f91e07a5fa0 RCX: 00007f91e058d169 [ 428.680702][ T5911] RDX: 0000400000000080 RSI: 0000000000008946 RDI: 0000000000000013 [ 428.688685][ T5911] RBP: 00007f91e03ff090 R08: 0000000000000000 R09: 0000000000000000 [ 428.696665][ T5911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.704658][ T5911] R13: 0000000000000000 R14: 00007f91e07a5fa0 R15: 00007fff8c282e58 [ 428.712664][ T5911] [ 428.751679][ T5911] ERROR: Out of memory at tomoyo_realpath_from_path. [ 429.447327][ T5933] FAULT_INJECTION: forcing a failure. [ 429.447327][ T5933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.506349][ T5933] CPU: 1 PID: 5933 Comm: syz.1.570 Not tainted 6.1.131-syzkaller #0 [ 429.514438][ T5933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 429.524533][ T5933] Call Trace: [ 429.527844][ T5933] [ 429.533138][ T5933] dump_stack_lvl+0x1e3/0x2cb [ 429.538297][ T5933] ? nf_tcp_handle_invalid+0x647/0x647 [ 429.543786][ T5933] ? panic+0x764/0x764 [ 429.547988][ T5933] ? __lock_acquire+0x1f80/0x1f80 [ 429.553065][ T5933] should_fail_ex+0x3a6/0x4d0 [ 429.557791][ T5933] _copy_from_user+0x2b/0x170 [ 429.562512][ T5933] copy_msghdr_from_user+0xaa/0x670 [ 429.567752][ T5933] ? sendmsg_copy_msghdr+0x70/0x70 [ 429.572913][ T5933] __sys_sendmsg+0x236/0x390 [ 429.577547][ T5933] ? ____sys_sendmsg+0x9a0/0x9a0 [ 429.582512][ T5933] ? vfs_write+0x6cf/0xbc0 [ 429.586988][ T5933] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 429.593018][ T5933] ? syscall_enter_from_user_mode+0x2e/0x230 [ 429.599027][ T5933] ? lockdep_hardirqs_on+0x94/0x130 [ 429.604260][ T5933] ? syscall_enter_from_user_mode+0x2e/0x230 [ 429.610279][ T5933] do_syscall_64+0x3b/0xb0 [ 429.614722][ T5933] ? clear_bhb_loop+0x45/0xa0 [ 429.619435][ T5933] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.625367][ T5933] RIP: 0033:0x7f2ae4d8d169 [ 429.629810][ T5933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.649439][ T5933] RSP: 002b:00007f2ae5c57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.657885][ T5933] RAX: ffffffffffffffda RBX: 00007f2ae4fa5fa0 RCX: 00007f2ae4d8d169 [ 429.665876][ T5933] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 429.673872][ T5933] RBP: 00007f2ae5c57090 R08: 0000000000000000 R09: 0000000000000000 [ 429.681873][ T5933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.689872][ T5933] R13: 0000000000000000 R14: 00007f2ae4fa5fa0 R15: 00007ffc2a936c48 [ 429.697882][ T5933] [ 430.128444][ T5946] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 430.146241][ T5946] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 430.670666][ T5958] FAULT_INJECTION: forcing a failure. [ 430.670666][ T5958] name failslab, interval 1, probability 0, space 0, times 0 [ 430.710866][ T5958] CPU: 1 PID: 5958 Comm: syz.3.579 Not tainted 6.1.131-syzkaller #0 [ 430.718910][ T5958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 430.729011][ T5958] Call Trace: [ 430.732322][ T5958] [ 430.735282][ T5958] dump_stack_lvl+0x1e3/0x2cb [ 430.740031][ T5958] ? nf_tcp_handle_invalid+0x647/0x647 [ 430.745525][ T5958] ? panic+0x764/0x764 [ 430.749635][ T5958] ? __might_sleep+0xb0/0xb0 [ 430.754253][ T5958] ? __lock_acquire+0x125b/0x1f80 [ 430.759325][ T5958] should_fail_ex+0x3a6/0x4d0 [ 430.764064][ T5958] should_failslab+0x5/0x20 [ 430.768601][ T5958] slab_pre_alloc_hook+0x59/0x300 [ 430.773675][ T5958] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 430.779438][ T5958] __kmem_cache_alloc_node+0x47/0x260 [ 430.784855][ T5958] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 430.790619][ T5958] __kmalloc+0xa1/0x230 [ 430.794825][ T5958] ? rcu_is_watching+0x11/0xb0 [ 430.799622][ T5958] tomoyo_realpath_from_path+0xcb/0x5d0 [ 430.805218][ T5958] tomoyo_path_number_perm+0x21f/0x7f0 [ 430.810721][ T5958] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 430.816393][ T5958] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 430.821910][ T5958] ? __fget_files+0x28/0x4a0 [ 430.826551][ T5958] ? __fget_files+0x28/0x4a0 [ 430.831172][ T5958] ? __fget_files+0x435/0x4a0 [ 430.835884][ T5958] ? __fget_files+0x28/0x4a0 [ 430.840514][ T5958] security_file_ioctl+0x6d/0xa0 [ 430.845488][ T5958] __se_sys_ioctl+0x47/0x160 [ 430.850113][ T5958] do_syscall_64+0x3b/0xb0 [ 430.854555][ T5958] ? clear_bhb_loop+0x45/0xa0 [ 430.859268][ T5958] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 430.865195][ T5958] RIP: 0033:0x7f91e058d169 [ 430.869640][ T5958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.889278][ T5958] RSP: 002b:00007f91e03ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 430.897728][ T5958] RAX: ffffffffffffffda RBX: 00007f91e07a5fa0 RCX: 00007f91e058d169 [ 430.905738][ T5958] RDX: 0000400000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 430.913746][ T5958] RBP: 00007f91e03ff090 R08: 0000000000000000 R09: 0000000000000000 [ 430.921757][ T5958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.929758][ T5958] R13: 0000000000000000 R14: 00007f91e07a5fa0 R15: 00007fff8c282e58 [ 430.937781][ T5958] [ 430.982250][ T5958] ERROR: Out of memory at tomoyo_realpath_from_path. [ 432.107405][ T5980] FAULT_INJECTION: forcing a failure. [ 432.107405][ T5980] name failslab, interval 1, probability 0, space 0, times 0 [ 432.151721][ T5980] CPU: 1 PID: 5980 Comm: syz.4.589 Not tainted 6.1.131-syzkaller #0 [ 432.159764][ T5980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 432.169848][ T5980] Call Trace: [ 432.173153][ T5980] [ 432.176105][ T5980] dump_stack_lvl+0x1e3/0x2cb [ 432.180821][ T5980] ? nf_tcp_handle_invalid+0x647/0x647 [ 432.186318][ T5980] ? panic+0x764/0x764 [ 432.190434][ T5980] ? __might_sleep+0xb0/0xb0 [ 432.195054][ T5980] ? __lock_acquire+0x125b/0x1f80 [ 432.200122][ T5980] should_fail_ex+0x3a6/0x4d0 [ 432.204848][ T5980] should_failslab+0x5/0x20 [ 432.209383][ T5980] slab_pre_alloc_hook+0x59/0x300 [ 432.214446][ T5980] ? bpf_trace_run2+0x110/0x410 [ 432.219337][ T5980] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 432.225097][ T5980] __kmem_cache_alloc_node+0x47/0x260 [ 432.230508][ T5980] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 432.236276][ T5980] __kmalloc+0xa1/0x230 [ 432.240560][ T5980] ? rcu_is_watching+0x11/0xb0 [ 432.245366][ T5980] tomoyo_realpath_from_path+0xcb/0x5d0 [ 432.250980][ T5980] tomoyo_path_number_perm+0x21f/0x7f0 [ 432.256493][ T5980] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 432.262179][ T5980] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 432.267704][ T5980] ? __fget_files+0x28/0x4a0 [ 432.272350][ T5980] ? __fget_files+0x28/0x4a0 [ 432.276977][ T5980] ? __fget_files+0x435/0x4a0 [ 432.281691][ T5980] ? __fget_files+0x28/0x4a0 [ 432.286318][ T5980] security_file_ioctl+0x6d/0xa0 [ 432.291301][ T5980] __se_sys_ioctl+0x47/0x160 [ 432.295935][ T5980] do_syscall_64+0x3b/0xb0 [ 432.300378][ T5980] ? clear_bhb_loop+0x45/0xa0 [ 432.305094][ T5980] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 432.311028][ T5980] RIP: 0033:0x7fc38df8d169 [ 432.315473][ T5980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.335110][ T5980] RSP: 002b:00007fc38eeb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 432.343564][ T5980] RAX: ffffffffffffffda RBX: 00007fc38e1a5fa0 RCX: 00007fc38df8d169 [ 432.351570][ T5980] RDX: 0000400000000080 RSI: 00000000000089f2 RDI: 0000000000000004 [ 432.359577][ T5980] RBP: 00007fc38eeb6090 R08: 0000000000000000 R09: 0000000000000000 [ 432.367582][ T5980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.375588][ T5980] R13: 0000000000000000 R14: 00007fc38e1a5fa0 R15: 00007fff019f58f8 [ 432.383608][ T5980] [ 432.481677][ T5980] ERROR: Out of memory at tomoyo_realpath_from_path. [ 432.766101][ T48] Bluetooth: hci3: unexpected subevent 0x04 length: 14 > 11 [ 432.774682][ T48] Bluetooth: hci3: unexpected subevent 0x04 length: 14 > 11 [ 432.833605][ T5989] netlink: 114704 bytes leftover after parsing attributes in process `syz.3.594'. [ 432.878161][ T5996] FAULT_INJECTION: forcing a failure. [ 432.878161][ T5996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.927799][ T5996] CPU: 0 PID: 5996 Comm: syz.1.595 Not tainted 6.1.131-syzkaller #0 [ 432.935878][ T5996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 432.945962][ T5996] Call Trace: [ 432.949263][ T5996] [ 432.952203][ T5996] dump_stack_lvl+0x1e3/0x2cb [ 432.956897][ T5996] ? nf_tcp_handle_invalid+0x647/0x647 [ 432.962368][ T5996] ? panic+0x764/0x764 [ 432.966448][ T5996] ? __lock_acquire+0x1f80/0x1f80 [ 432.971504][ T5996] should_fail_ex+0x3a6/0x4d0 [ 432.976210][ T5996] _copy_from_user+0x2b/0x170 [ 432.980908][ T5996] __sys_bpf+0x226/0x6c0 [ 432.985162][ T5996] ? __fget_files+0x435/0x4a0 [ 432.989860][ T5996] ? bpf_link_show_fdinfo+0x300/0x300 [ 432.995252][ T5996] ? print_irqtrace_events+0x210/0x210 [ 433.000727][ T5996] ? print_irqtrace_events+0x210/0x210 [ 433.006202][ T5996] ? syscall_enter_from_user_mode+0x2e/0x230 [ 433.012199][ T5996] ? lockdep_hardirqs_on+0x94/0x130 [ 433.017412][ T5996] __x64_sys_bpf+0x78/0x90 [ 433.021846][ T5996] do_syscall_64+0x3b/0xb0 [ 433.026273][ T5996] ? clear_bhb_loop+0x45/0xa0 [ 433.030959][ T5996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 433.036868][ T5996] RIP: 0033:0x7f2ae4d8d169 [ 433.041287][ T5996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.060897][ T5996] RSP: 002b:00007f2ae5c57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 433.069321][ T5996] RAX: ffffffffffffffda RBX: 00007f2ae4fa5fa0 RCX: 00007f2ae4d8d169 [ 433.077305][ T5996] RDX: 0000000000000020 RSI: 0000400000000280 RDI: 0000000000000002 [ 433.085281][ T5996] RBP: 00007f2ae5c57090 R08: 0000000000000000 R09: 0000000000000000 [ 433.093257][ T5996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.101229][ T5996] R13: 0000000000000000 R14: 00007f2ae4fa5fa0 R15: 00007ffc2a936c48 [ 433.109219][ T5996] [ 433.113170][ T5990] netlink: 114704 bytes leftover after parsing attributes in process `syz.3.594'. [ 433.196807][ T5990] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 433.221843][ T5990] CPU: 1 PID: 5990 Comm: syz.3.594 Not tainted 6.1.131-syzkaller #0 [ 433.229991][ T5990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 433.240092][ T5990] Call Trace: [ 433.243403][ T5990] [ 433.246356][ T5990] dump_stack_lvl+0x1e3/0x2cb [ 433.251093][ T5990] ? nf_tcp_handle_invalid+0x647/0x647 [ 433.256616][ T5990] ? panic+0x764/0x764 [ 433.260783][ T5990] sysfs_warn_dup+0x8a/0xa0 [ 433.265333][ T5990] sysfs_do_create_link_sd+0xbe/0x100 [ 433.270765][ T5990] device_add+0x7d4/0xfd0 [ 433.275177][ T5990] wiphy_register+0x1e91/0x2d10 [ 433.280104][ T5990] ? cfg80211_event_work+0x40/0x40 [ 433.285255][ T5990] ? minstrel_ht_alloc+0x874/0x9e0 [ 433.290419][ T5990] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 433.296547][ T5990] ieee80211_register_hw+0x31bd/0x3f10 [ 433.302074][ T5990] ? ieee80211_register_hw+0x11d1/0x3f10 [ 433.307761][ T5990] ? ieee80211_register_hw+0x10d1/0x3f10 [ 433.313446][ T5990] ? ieee80211_tasklet_handler+0x20/0x20 [ 433.319129][ T5990] ? __debug_object_init+0xe9/0x450 [ 433.324383][ T5990] ? memset+0x1f/0x40 [ 433.328411][ T5990] ? __hrtimer_init+0x181/0x260 [ 433.333319][ T5990] mac80211_hwsim_new_radio+0x2355/0x41c0 [ 433.339138][ T5990] hwsim_new_radio_nl+0xc54/0x1190 [ 433.344323][ T5990] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 433.350721][ T5990] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 433.357121][ T5990] genl_rcv_msg+0xbfa/0xf50 [ 433.361700][ T5990] ? genl_bind+0x400/0x400 [ 433.366216][ T5990] ? read_lock_is_recursive+0x10/0x10 [ 433.371664][ T5990] ? ref_tracker_free+0x638/0x7d0 [ 433.376757][ T5990] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 433.383142][ T5990] ? refcount_inc+0x80/0x80 [ 433.387738][ T5990] netlink_rcv_skb+0x1cd/0x410 [ 433.392551][ T5990] ? genl_bind+0x400/0x400 [ 433.397015][ T5990] ? netlink_ack+0x12a0/0x12a0 [ 433.401864][ T5990] genl_rcv+0x24/0x40 [ 433.405886][ T5990] netlink_unicast+0x7e2/0x970 [ 433.410711][ T5990] ? netlink_detachskb+0x90/0x90 [ 433.415689][ T5990] ? find_vmap_area+0xf3/0x100 [ 433.420513][ T5990] ? __phys_addr_symbol+0x2b/0x70 [ 433.425579][ T5990] ? __check_object_size+0x4dd/0xa30 [ 433.430907][ T5990] ? bpf_lsm_netlink_send+0x5/0x10 [ 433.436089][ T5990] netlink_sendmsg+0xa26/0xd60 [ 433.440926][ T5990] ? netlink_getsockopt+0x580/0x580 [ 433.446273][ T5990] ? aa_sock_msg_perm+0x91/0x150 [ 433.451259][ T5990] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 433.456596][ T5990] ? security_socket_sendmsg+0x7d/0xa0 [ 433.462107][ T5990] ? netlink_getsockopt+0x580/0x580 [ 433.467347][ T5990] ____sys_sendmsg+0x5d3/0x9a0 [ 433.472176][ T5990] ? __sys_sendmsg_sock+0x30/0x30 [ 433.477281][ T5990] __sys_sendmsg+0x2a9/0x390 [ 433.481923][ T5990] ? ____sys_sendmsg+0x9a0/0x9a0 [ 433.486972][ T5990] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 433.493032][ T5990] ? syscall_enter_from_user_mode+0x2e/0x230 [ 433.499061][ T5990] ? lockdep_hardirqs_on+0x94/0x130 [ 433.504313][ T5990] ? syscall_enter_from_user_mode+0x2e/0x230 [ 433.510348][ T5990] do_syscall_64+0x3b/0xb0 [ 433.514800][ T5990] ? clear_bhb_loop+0x45/0xa0 [ 433.519522][ T5990] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 433.525455][ T5990] RIP: 0033:0x7f91e058d169 [ 433.529910][ T5990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.549569][ T5990] RSP: 002b:00007f91e03de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.558033][ T5990] RAX: ffffffffffffffda RBX: 00007f91e07a6080 RCX: 00007f91e058d169 [ 433.566043][ T5990] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 000000000000000f [ 433.574043][ T5990] RBP: 00007f91e060e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 433.582031][ T5990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.590014][ T5990] R13: 0000000000000000 R14: 00007f91e07a6080 R15: 00007fff8c282e58 [ 433.598026][ T5990] [ 435.115692][ T6045] FAULT_INJECTION: forcing a failure. [ 435.115692][ T6045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.129145][ T6045] CPU: 1 PID: 6045 Comm: syz.2.610 Not tainted 6.1.131-syzkaller #0 [ 435.137161][ T6045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 435.147340][ T6045] Call Trace: [ 435.150638][ T6045] [ 435.153601][ T6045] dump_stack_lvl+0x1e3/0x2cb [ 435.158316][ T6045] ? nf_tcp_handle_invalid+0x647/0x647 [ 435.163827][ T6045] ? panic+0x764/0x764 [ 435.167927][ T6045] ? __lock_acquire+0x1f80/0x1f80 [ 435.173002][ T6045] should_fail_ex+0x3a6/0x4d0 [ 435.177724][ T6045] _copy_from_user+0x2b/0x170 [ 435.182437][ T6045] copy_msghdr_from_user+0xaa/0x670 [ 435.187671][ T6045] ? sendmsg_copy_msghdr+0x70/0x70 [ 435.192827][ T6045] __sys_sendmsg+0x236/0x390 [ 435.197449][ T6045] ? ____sys_sendmsg+0x9a0/0x9a0 [ 435.202422][ T6045] ? vfs_write+0x6cf/0xbc0 [ 435.206920][ T6045] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 435.212956][ T6045] ? syscall_enter_from_user_mode+0x2e/0x230 [ 435.218974][ T6045] ? syscall_enter_from_user_mode+0x2e/0x230 [ 435.224986][ T6045] ? lockdep_hardirqs_on+0x94/0x130 [ 435.230217][ T6045] ? syscall_enter_from_user_mode+0x2e/0x230 [ 435.236244][ T6045] do_syscall_64+0x3b/0xb0 [ 435.240693][ T6045] ? clear_bhb_loop+0x45/0xa0 [ 435.245742][ T6045] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 435.251660][ T6045] RIP: 0033:0x7fd71478d169 [ 435.256089][ T6045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.275716][ T6045] RSP: 002b:00007fd71556f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.284271][ T6045] RAX: ffffffffffffffda RBX: 00007fd7149a5fa0 RCX: 00007fd71478d169 [ 435.292261][ T6045] RDX: 0000000000000080 RSI: 0000400000000380 RDI: 0000000000000003 [ 435.300248][ T6045] RBP: 00007fd71556f090 R08: 0000000000000000 R09: 0000000000000000 [ 435.308235][ T6045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.316210][ T6045] R13: 0000000000000000 R14: 00007fd7149a5fa0 R15: 00007ffc4c606be8 [ 435.324203][ T6045] [ 435.486798][ T6049] netlink: 'syz.4.613': attribute type 10 has an invalid length. [ 435.498132][ T6049] netlink: 40 bytes leftover after parsing attributes in process `syz.4.613'. [ 435.563615][ T6049] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 435.621638][ T6049] syz.4.613 (6049) used greatest stack depth: 19960 bytes left [ 436.653705][ T6088] FAULT_INJECTION: forcing a failure. [ 436.653705][ T6088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.722093][ T6088] CPU: 1 PID: 6088 Comm: syz.3.623 Not tainted 6.1.131-syzkaller #0 [ 436.730174][ T6088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 436.740266][ T6088] Call Trace: [ 436.743572][ T6088] [ 436.746527][ T6088] dump_stack_lvl+0x1e3/0x2cb [ 436.751243][ T6088] ? nf_tcp_handle_invalid+0x647/0x647 [ 436.756743][ T6088] ? panic+0x764/0x764 [ 436.760860][ T6088] ? snprintf+0xd6/0x120 [ 436.765146][ T6088] should_fail_ex+0x3a6/0x4d0 [ 436.769875][ T6088] _copy_to_user+0x2b/0x130 [ 436.774423][ T6088] simple_read_from_buffer+0xc6/0x150 [ 436.779844][ T6088] proc_fail_nth_read+0x1a3/0x210 [ 436.784921][ T6088] ? proc_fault_inject_write+0x390/0x390 [ 436.790606][ T6088] ? fsnotify_perm+0x439/0x590 [ 436.795419][ T6088] ? proc_fault_inject_write+0x390/0x390 [ 436.801103][ T6088] vfs_read+0x2ed/0xbf0 [ 436.805300][ T6088] ? __fdget_pos+0x2ba/0x360 [ 436.809940][ T6088] ? kernel_read+0x1f0/0x1f0 [ 436.814567][ T6088] ? __fget_files+0x28/0x4a0 [ 436.819193][ T6088] ? __fget_files+0x435/0x4a0 [ 436.824065][ T6088] ? __fdget_pos+0x2ba/0x360 [ 436.828675][ T6088] ? ksys_read+0x77/0x2c0 [ 436.833025][ T6088] ksys_read+0x19c/0x2c0 [ 436.837282][ T6088] ? print_irqtrace_events+0x210/0x210 [ 436.842779][ T6088] ? vfs_write+0xbc0/0xbc0 [ 436.847205][ T6088] ? syscall_enter_from_user_mode+0x2e/0x230 [ 436.853213][ T6088] ? lockdep_hardirqs_on+0x94/0x130 [ 436.858453][ T6088] ? syscall_enter_from_user_mode+0x2e/0x230 [ 436.864464][ T6088] do_syscall_64+0x3b/0xb0 [ 436.868900][ T6088] ? clear_bhb_loop+0x45/0xa0 [ 436.873605][ T6088] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 436.879517][ T6088] RIP: 0033:0x7f91e058bb7c [ 436.883946][ T6088] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 436.903664][ T6088] RSP: 002b:00007f91e03ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 436.912111][ T6088] RAX: ffffffffffffffda RBX: 00007f91e07a5fa0 RCX: 00007f91e058bb7c [ 436.920116][ T6088] RDX: 000000000000000f RSI: 00007f91e03ff0a0 RDI: 0000000000000005 [ 436.928101][ T6088] RBP: 00007f91e03ff090 R08: 0000000000000000 R09: 0000000000000000 [ 436.936096][ T6088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.944127][ T6088] R13: 0000000000000000 R14: 00007f91e07a5fa0 R15: 00007fff8c282e58 [ 436.952596][ T6088] [ 437.127741][ T6100] FAULT_INJECTION: forcing a failure. [ 437.127741][ T6100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.171629][ T6100] CPU: 1 PID: 6100 Comm: syz.2.628 Not tainted 6.1.131-syzkaller #0 [ 437.179726][ T6100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 437.189802][ T6100] Call Trace: [ 437.193096][ T6100] [ 437.196037][ T6100] dump_stack_lvl+0x1e3/0x2cb [ 437.200734][ T6100] ? nf_tcp_handle_invalid+0x647/0x647 [ 437.206233][ T6100] ? panic+0x764/0x764 [ 437.210321][ T6100] ? __lock_acquire+0x1f80/0x1f80 [ 437.215371][ T6100] should_fail_ex+0x3a6/0x4d0 [ 437.220071][ T6100] _copy_from_user+0x2b/0x170 [ 437.224765][ T6100] __sys_bpf+0x226/0x6c0 [ 437.229022][ T6100] ? __fget_files+0x435/0x4a0 [ 437.233734][ T6100] ? bpf_link_show_fdinfo+0x300/0x300 [ 437.239964][ T6100] ? perf_trace_preemptirq_template+0xf4/0x3d0 [ 437.246951][ T6100] ? print_irqtrace_events+0x210/0x210 [ 437.252436][ T6100] ? print_irqtrace_events+0x210/0x210 [ 437.257923][ T6100] ? syscall_enter_from_user_mode+0x2e/0x230 [ 437.263927][ T6100] ? lockdep_hardirqs_on+0x94/0x130 [ 437.269144][ T6100] __x64_sys_bpf+0x78/0x90 [ 437.273678][ T6100] do_syscall_64+0x3b/0xb0 [ 437.278124][ T6100] ? clear_bhb_loop+0x45/0xa0 [ 437.282821][ T6100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.288729][ T6100] RIP: 0033:0x7fd71478d169 [ 437.293155][ T6100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.312768][ T6100] RSP: 002b:00007fd71556f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 437.321193][ T6100] RAX: ffffffffffffffda RBX: 00007fd7149a5fa0 RCX: 00007fd71478d169 [ 437.329193][ T6100] RDX: 0000000000000028 RSI: 0000400000000280 RDI: 0000000000000012 [ 437.337177][ T6100] RBP: 00007fd71556f090 R08: 0000000000000000 R09: 0000000000000000 [ 437.345157][ T6100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.353138][ T6100] R13: 0000000000000001 R14: 00007fd7149a5fa0 R15: 00007ffc4c606be8 [ 437.361155][ T6100] [ 438.395855][ T6127] netlink: 76 bytes leftover after parsing attributes in process `syz.0.639'. [ 438.457186][ T6130] FAULT_INJECTION: forcing a failure. [ 438.457186][ T6130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.539500][ T6130] CPU: 1 PID: 6130 Comm: syz.1.640 Not tainted 6.1.131-syzkaller #0 [ 438.547565][ T6130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 438.557665][ T6130] Call Trace: [ 438.560979][ T6130] [ 438.563950][ T6130] dump_stack_lvl+0x1e3/0x2cb [ 438.568669][ T6130] ? nf_tcp_handle_invalid+0x647/0x647 [ 438.574165][ T6130] ? panic+0x764/0x764 [ 438.578538][ T6130] ? __lock_acquire+0x1f80/0x1f80 [ 438.583621][ T6130] should_fail_ex+0x3a6/0x4d0 [ 438.588359][ T6130] _copy_from_user+0x2b/0x170 [ 438.593080][ T6130] __sys_bpf+0x226/0x6c0 [ 438.597349][ T6130] ? __fget_files+0x435/0x4a0 [ 438.602068][ T6130] ? bpf_link_show_fdinfo+0x300/0x300 [ 438.607486][ T6130] ? print_irqtrace_events+0x210/0x210 [ 438.612993][ T6130] ? print_irqtrace_events+0x210/0x210 [ 438.618505][ T6130] ? syscall_enter_from_user_mode+0x2e/0x230 [ 438.624533][ T6130] ? lockdep_hardirqs_on+0x94/0x130 [ 438.629778][ T6130] __x64_sys_bpf+0x78/0x90 [ 438.634257][ T6130] do_syscall_64+0x3b/0xb0 [ 438.638713][ T6130] ? clear_bhb_loop+0x45/0xa0 [ 438.643436][ T6130] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 438.649471][ T6130] RIP: 0033:0x7f2ae4d8d169 [ 438.653923][ T6130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.673573][ T6130] RSP: 002b:00007f2ae5c57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 438.682134][ T6130] RAX: ffffffffffffffda RBX: 00007f2ae4fa5fa0 RCX: 00007f2ae4d8d169 [ 438.690239][ T6130] RDX: 0000000000000050 RSI: 0000400000000600 RDI: 000000000000000a [ 438.698248][ T6130] RBP: 00007f2ae5c57090 R08: 0000000000000000 R09: 0000000000000000 [ 438.706266][ T6130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.714282][ T6130] R13: 0000000000000000 R14: 00007f2ae4fa5fa0 R15: 00007ffc2a936c48 [ 438.722322][ T6130] [ 439.238028][ T6145] FAULT_INJECTION: forcing a failure. [ 439.238028][ T6145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.259809][ T6145] CPU: 1 PID: 6145 Comm: syz.1.646 Not tainted 6.1.131-syzkaller #0 [ 439.267860][ T6145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 439.277957][ T6145] Call Trace: [ 439.281265][ T6145] [ 439.284228][ T6145] dump_stack_lvl+0x1e3/0x2cb [ 439.288956][ T6145] ? nf_tcp_handle_invalid+0x647/0x647 [ 439.294460][ T6145] ? panic+0x764/0x764 [ 439.298579][ T6145] ? __lock_acquire+0x1f80/0x1f80 [ 439.303663][ T6145] should_fail_ex+0x3a6/0x4d0 [ 439.308543][ T6145] _copy_from_user+0x2b/0x170 [ 439.313270][ T6145] __sys_bpf+0x226/0x6c0 [ 439.317550][ T6145] ? __fget_files+0x435/0x4a0 [ 439.322261][ T6145] ? bpf_link_show_fdinfo+0x300/0x300 [ 439.327664][ T6145] ? print_irqtrace_events+0x210/0x210 [ 439.333150][ T6145] ? print_irqtrace_events+0x210/0x210 [ 439.338724][ T6145] ? syscall_enter_from_user_mode+0x2e/0x230 [ 439.344985][ T6145] ? lockdep_hardirqs_on+0x94/0x130 [ 439.350206][ T6145] __x64_sys_bpf+0x78/0x90 [ 439.354648][ T6145] do_syscall_64+0x3b/0xb0 [ 439.359115][ T6145] ? clear_bhb_loop+0x45/0xa0 [ 439.363815][ T6145] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 439.369727][ T6145] RIP: 0033:0x7f2ae4d8d169 [ 439.374157][ T6145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.393777][ T6145] RSP: 002b:00007f2ae5c57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 439.402206][ T6145] RAX: ffffffffffffffda RBX: 00007f2ae4fa5fa0 RCX: 00007f2ae4d8d169 [ 439.410191][ T6145] RDX: 0000000000000048 RSI: 00004000000054c0 RDI: 0000000000000005 [ 439.418174][ T6145] RBP: 00007f2ae5c57090 R08: 0000000000000000 R09: 0000000000000000 [ 439.426242][ T6145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.434223][ T6145] R13: 0000000000000001 R14: 00007f2ae4fa5fa0 R15: 00007ffc2a936c48 [ 439.442228][ T6145] [ 439.828192][ T6154] netlink: 4031 bytes leftover after parsing attributes in process `syz.3.651'. [ 439.971092][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.978538][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.055139][ T6160] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.652'. [ 440.637825][ T6174] FAULT_INJECTION: forcing a failure. [ 440.637825][ T6174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.683545][ T6176] FAULT_INJECTION: forcing a failure. [ 440.683545][ T6176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.687537][ T6174] CPU: 0 PID: 6174 Comm: syz.3.657 Not tainted 6.1.131-syzkaller #0 [ 440.704627][ T6174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 440.714718][ T6174] Call Trace: [ 440.718017][ T6174] [ 440.720969][ T6174] dump_stack_lvl+0x1e3/0x2cb [ 440.725684][ T6174] ? nf_tcp_handle_invalid+0x647/0x647 [ 440.731171][ T6174] ? panic+0x764/0x764 [ 440.735285][ T6174] ? __lock_acquire+0x1f80/0x1f80 [ 440.740334][ T6174] should_fail_ex+0x3a6/0x4d0 [ 440.745036][ T6174] _copy_from_user+0x2b/0x170 [ 440.749820][ T6174] __sys_bpf+0x226/0x6c0 [ 440.754071][ T6174] ? __fget_files+0x435/0x4a0 [ 440.758859][ T6174] ? bpf_link_show_fdinfo+0x300/0x300 [ 440.764249][ T6174] ? print_irqtrace_events+0x210/0x210 [ 440.769726][ T6174] ? print_irqtrace_events+0x210/0x210 [ 440.775211][ T6174] ? syscall_enter_from_user_mode+0x2e/0x230 [ 440.781222][ T6174] ? lockdep_hardirqs_on+0x94/0x130 [ 440.786431][ T6174] __x64_sys_bpf+0x78/0x90 [ 440.790864][ T6174] do_syscall_64+0x3b/0xb0 [ 440.795288][ T6174] ? clear_bhb_loop+0x45/0xa0 [ 440.799982][ T6174] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 440.805888][ T6174] RIP: 0033:0x7f91e058d169 [ 440.810315][ T6174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.829931][ T6174] RSP: 002b:00007f91e03ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 440.838363][ T6174] RAX: ffffffffffffffda RBX: 00007f91e07a5fa0 RCX: 00007f91e058d169 [ 440.846343][ T6174] RDX: 0000000000000050 RSI: 0000400000000c80 RDI: 000000000000000a [ 440.854322][ T6174] RBP: 00007f91e03ff090 R08: 0000000000000000 R09: 0000000000000000 [ 440.862300][ T6174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.870276][ T6174] R13: 0000000000000000 R14: 00007f91e07a5fa0 R15: 00007fff8c282e58 [ 440.878305][ T6174] [ 440.889304][ T6176] CPU: 0 PID: 6176 Comm: syz.1.658 Not tainted 6.1.131-syzkaller #0 [ 440.897337][ T6176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 440.907405][ T6176] Call Trace: [ 440.910691][ T6176] [ 440.913636][ T6176] dump_stack_lvl+0x1e3/0x2cb [ 440.918360][ T6176] ? nf_tcp_handle_invalid+0x647/0x647 [ 440.923840][ T6176] ? panic+0x764/0x764 [ 440.927947][ T6176] ? __lock_acquire+0x1f80/0x1f80 [ 440.933009][ T6176] should_fail_ex+0x3a6/0x4d0 [ 440.937731][ T6176] _copy_from_user+0x2b/0x170 [ 440.942432][ T6176] __sys_bpf+0x226/0x6c0 [ 440.946689][ T6176] ? __fget_files+0x435/0x4a0 [ 440.951387][ T6176] ? bpf_link_show_fdinfo+0x300/0x300 [ 440.956870][ T6176] ? print_irqtrace_events+0x210/0x210 [ 440.962436][ T6176] ? print_irqtrace_events+0x210/0x210 [ 440.967917][ T6176] ? syscall_enter_from_user_mode+0x2e/0x230 [ 440.973916][ T6176] ? lockdep_hardirqs_on+0x94/0x130 [ 440.979129][ T6176] __x64_sys_bpf+0x78/0x90 [ 440.983567][ T6176] do_syscall_64+0x3b/0xb0 [ 440.987993][ T6176] ? clear_bhb_loop+0x45/0xa0 [ 440.992685][ T6176] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 440.998593][ T6176] RIP: 0033:0x7f2ae4d8d169 [ 441.003023][ T6176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.022827][ T6176] RSP: 002b:00007f2ae5c57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 441.031362][ T6176] RAX: ffffffffffffffda RBX: 00007f2ae4fa5fa0 RCX: 00007f2ae4d8d169 [ 441.039364][ T6176] RDX: 0000000000000050 RSI: 0000400000000180 RDI: 000000000000000a [ 441.047354][ T6176] RBP: 00007f2ae5c57090 R08: 0000000000000000 R09: 0000000000000000 [ 441.055430][ T6176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.063410][ T6176] R13: 0000000000000000 R14: 00007f2ae4fa5fa0 R15: 00007ffc2a936c48 [ 441.071424][ T6176] [ 441.914702][ T6202] FAULT_INJECTION: forcing a failure. [ 441.914702][ T6202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.931678][ T6202] CPU: 1 PID: 6202 Comm: syz.4.670 Not tainted 6.1.131-syzkaller #0 [ 441.939715][ T6202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 441.949826][ T6202] Call Trace: [ 441.953142][ T6202] [ 441.956107][ T6202] dump_stack_lvl+0x1e3/0x2cb [ 441.960829][ T6202] ? nf_tcp_handle_invalid+0x647/0x647 [ 441.966411][ T6202] ? panic+0x764/0x764 [ 441.970521][ T6202] ? __lock_acquire+0x1f80/0x1f80 [ 441.975606][ T6202] should_fail_ex+0x3a6/0x4d0 [ 441.980594][ T6202] _copy_from_user+0x2b/0x170 [ 441.985311][ T6202] __sys_bpf+0x226/0x6c0 [ 441.989598][ T6202] ? bpf_link_show_fdinfo+0x300/0x300 [ 441.995109][ T6202] ? print_irqtrace_events+0x210/0x210 [ 442.000612][ T6202] ? print_irqtrace_events+0x210/0x210 [ 442.006122][ T6202] ? syscall_enter_from_user_mode+0x2e/0x230 [ 442.012144][ T6202] ? lockdep_hardirqs_on+0x94/0x130 [ 442.017383][ T6202] __x64_sys_bpf+0x78/0x90 [ 442.021856][ T6202] do_syscall_64+0x3b/0xb0 [ 442.026304][ T6202] ? clear_bhb_loop+0x45/0xa0 [ 442.031023][ T6202] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 442.036963][ T6202] RIP: 0033:0x7fc38df8d169 [ 442.041411][ T6202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.061074][ T6202] RSP: 002b:00007fc38eeb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 442.069534][ T6202] RAX: ffffffffffffffda RBX: 00007fc38e1a5fa0 RCX: 00007fc38df8d169 [ 442.077554][ T6202] RDX: 0000000000000080 RSI: 0000400000000300 RDI: 0000000000000005 [ 442.085575][ T6202] RBP: 00007fc38eeb6090 R08: 0000000000000000 R09: 0000000000000000 [ 442.093607][ T6202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.101691][ T6202] R13: 0000000000000000 R14: 00007fc38e1a5fa0 R15: 00007fff019f58f8 [ 442.109728][ T6202] [ 442.140413][ T6195] netlink: 'syz.1.666': attribute type 10 has an invalid length. [ 442.191723][ T6195] netlink: 55 bytes leftover after parsing attributes in process `syz.1.666'. [ 443.611386][ T6229] FAULT_INJECTION: forcing a failure. [ 443.611386][ T6229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.679014][ T6229] CPU: 0 PID: 6229 Comm: syz.2.679 Not tainted 6.1.131-syzkaller #0 [ 443.687137][ T6229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 443.697237][ T6229] Call Trace: [ 443.700649][ T6229] [ 443.703619][ T6229] dump_stack_lvl+0x1e3/0x2cb [ 443.708334][ T6229] ? nf_tcp_handle_invalid+0x647/0x647 [ 443.713827][ T6229] ? panic+0x764/0x764 [ 443.717926][ T6229] ? __lock_acquire+0x1f80/0x1f80 [ 443.722980][ T6229] should_fail_ex+0x3a6/0x4d0 [ 443.727680][ T6229] _copy_from_user+0x2b/0x170 [ 443.732389][ T6229] __sys_bpf+0x226/0x6c0 [ 443.736658][ T6229] ? __fget_files+0x435/0x4a0 [ 443.741354][ T6229] ? bpf_link_show_fdinfo+0x300/0x300 [ 443.746748][ T6229] ? print_irqtrace_events+0x210/0x210 [ 443.752228][ T6229] ? print_irqtrace_events+0x210/0x210 [ 443.757711][ T6229] ? syscall_enter_from_user_mode+0x2e/0x230 [ 443.763709][ T6229] ? lockdep_hardirqs_on+0x94/0x130 [ 443.768928][ T6229] __x64_sys_bpf+0x78/0x90 [ 443.773365][ T6229] do_syscall_64+0x3b/0xb0 [ 443.777796][ T6229] ? clear_bhb_loop+0x45/0xa0 [ 443.782494][ T6229] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 443.788403][ T6229] RIP: 0033:0x7fd71478d169 [ 443.792830][ T6229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.812565][ T6229] RSP: 002b:00007fd71556f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 443.821016][ T6229] RAX: ffffffffffffffda RBX: 00007fd7149a5fa0 RCX: 00007fd71478d169 [ 443.829001][ T6229] RDX: 0000000000000050 RSI: 0000400000000280 RDI: 000000000000000a [ 443.836981][ T6229] RBP: 00007fd71556f090 R08: 0000000000000000 R09: 0000000000000000 [ 443.844964][ T6229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.852944][ T6229] R13: 0000000000000000 R14: 00007fd7149a5fa0 R15: 00007ffc4c606be8 [ 443.860944][ T6229] [ 443.920358][ T6233] Driver unsupported XDP return value 0 on prog (id 235) dev N/A, expect packet loss! [ 444.190073][ T6237] netlink: 'syz.3.684': attribute type 3 has an invalid length. [ 444.253602][ T6237] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.684'. [ 444.400853][ T6244] netlink: 'syz.4.686': attribute type 10 has an invalid length. [ 444.510752][ T6244] team0: Device hsr_slave_0 failed to register rx_handler [ 444.977857][ T6244] syz.4.686 (6244) used greatest stack depth: 19840 bytes left [ 445.330868][ T6257] netlink: 'syz.4.689': attribute type 10 has an invalid length. [ 445.373258][ T6257] team0: Device hsr_slave_0 failed to register rx_handler [ 445.658492][ T6270] FAULT_INJECTION: forcing a failure. [ 445.658492][ T6270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.754440][ T6270] CPU: 0 PID: 6270 Comm: syz.1.695 Not tainted 6.1.131-syzkaller #0 [ 445.762497][ T6270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 445.772598][ T6270] Call Trace: [ 445.775906][ T6270] [ 445.778863][ T6270] dump_stack_lvl+0x1e3/0x2cb [ 445.783575][ T6270] ? nf_tcp_handle_invalid+0x647/0x647 [ 445.789059][ T6270] ? panic+0x764/0x764 [ 445.793156][ T6270] ? __lock_acquire+0x1f80/0x1f80 [ 445.798208][ T6270] should_fail_ex+0x3a6/0x4d0 [ 445.802940][ T6270] _copy_from_user+0x2b/0x170 [ 445.807632][ T6270] copy_msghdr_from_user+0xaa/0x670 [ 445.812863][ T6270] ? sendmsg_copy_msghdr+0x70/0x70 [ 445.818001][ T6270] __sys_sendmsg+0x236/0x390 [ 445.822611][ T6270] ? ____sys_sendmsg+0x9a0/0x9a0 [ 445.827586][ T6270] ? vfs_write+0x6cf/0xbc0 [ 445.832050][ T6270] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 445.838070][ T6270] ? syscall_enter_from_user_mode+0x2e/0x230 [ 445.844070][ T6270] ? lockdep_hardirqs_on+0x94/0x130 [ 445.849279][ T6270] ? syscall_enter_from_user_mode+0x2e/0x230 [ 445.855285][ T6270] do_syscall_64+0x3b/0xb0 [ 445.859747][ T6270] ? clear_bhb_loop+0x45/0xa0 [ 445.864440][ T6270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 445.870356][ T6270] RIP: 0033:0x7f2ae4d8d169 [ 445.874796][ T6270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.894432][ T6270] RSP: 002b:00007f2ae5c57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.902866][ T6270] RAX: ffffffffffffffda RBX: 00007f2ae4fa5fa0 RCX: 00007f2ae4d8d169 [ 445.910849][ T6270] RDX: 0000000000000000 RSI: 0000400000000600 RDI: 0000000000000003 [ 445.918873][ T6270] RBP: 00007f2ae5c57090 R08: 0000000000000000 R09: 0000000000000000 [ 445.926864][ T6270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.934930][ T6270] R13: 0000000000000000 R14: 00007f2ae4fa5fa0 R15: 00007ffc2a936c48 [ 445.942948][ T6270] [ 446.289302][ T6284] FAULT_INJECTION: forcing a failure. [ 446.289302][ T6284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.337949][ T6284] CPU: 0 PID: 6284 Comm: syz.3.700 Not tainted 6.1.131-syzkaller #0 [ 446.346094][ T6284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 446.356183][ T6284] Call Trace: [ 446.359487][ T6284] [ 446.362445][ T6284] dump_stack_lvl+0x1e3/0x2cb [ 446.367155][ T6284] ? nf_tcp_handle_invalid+0x647/0x647 [ 446.372648][ T6284] ? panic+0x764/0x764 [ 446.376757][ T6284] ? __lock_acquire+0x1f80/0x1f80 [ 446.381829][ T6284] should_fail_ex+0x3a6/0x4d0 [ 446.386566][ T6284] _copy_from_user+0x2b/0x170 [ 446.391286][ T6284] __sys_bpf+0x226/0x6c0 [ 446.395563][ T6284] ? __fget_files+0x435/0x4a0 [ 446.400267][ T6284] ? bpf_link_show_fdinfo+0x300/0x300 [ 446.405661][ T6284] ? print_irqtrace_events+0x210/0x210 [ 446.411138][ T6284] ? print_irqtrace_events+0x210/0x210 [ 446.416616][ T6284] ? syscall_enter_from_user_mode+0x2e/0x230 [ 446.422610][ T6284] ? lockdep_hardirqs_on+0x94/0x130 [ 446.427825][ T6284] __x64_sys_bpf+0x78/0x90 [ 446.432263][ T6284] do_syscall_64+0x3b/0xb0 [ 446.436690][ T6284] ? clear_bhb_loop+0x45/0xa0 [ 446.441381][ T6284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 446.447288][ T6284] RIP: 0033:0x7f91e058d169 [ 446.451716][ T6284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.471335][ T6284] RSP: 002b:00007f91e03ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 446.479766][ T6284] RAX: ffffffffffffffda RBX: 00007f91e07a5fa0 RCX: 00007f91e058d169 [ 446.487743][ T6284] RDX: 0000000000000094 RSI: 0000400000000000 RDI: 0000000000000005 [ 446.495752][ T6284] RBP: 00007f91e03ff090 R08: 0000000000000000 R09: 0000000000000000 [ 446.503728][ T6284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.511704][ T6284] R13: 0000000000000000 R14: 00007f91e07a5fa0 R15: 00007fff8c282e58 [ 446.519695][ T6284] [ 446.829707][ T6298] FAULT_INJECTION: forcing a failure. [ 446.829707][ T6298] name failslab, interval 1, probability 0, space 0, times 0 [ 446.914947][ T6298] CPU: 0 PID: 6298 Comm: syz.1.704 Not tainted 6.1.131-syzkaller #0 [ 446.922994][ T6298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 446.933083][ T6298] Call Trace: [ 446.936386][ T6298] [ 446.939343][ T6298] dump_stack_lvl+0x1e3/0x2cb [ 446.944052][ T6298] ? nf_tcp_handle_invalid+0x647/0x647 [ 446.949551][ T6298] ? panic+0x764/0x764 [ 446.953654][ T6298] ? __might_sleep+0xb0/0xb0 [ 446.958284][ T6298] should_fail_ex+0x3a6/0x4d0 [ 446.963009][ T6298] should_failslab+0x5/0x20 [ 446.967547][ T6298] slab_pre_alloc_hook+0x59/0x300 [ 446.972614][ T6298] ? read_lock_is_recursive+0x10/0x10 [ 446.978033][ T6298] ? kernfs_fop_write_iter+0x157/0x4f0 [ 446.983523][ T6298] __kmem_cache_alloc_node+0x47/0x260 [ 446.988953][ T6298] ? kernfs_fop_write_iter+0x157/0x4f0 [ 446.994437][ T6298] __kmalloc+0xa1/0x230 [ 446.998621][ T6298] ? end_current_label_crit_section+0x147/0x170 [ 447.004898][ T6298] kernfs_fop_write_iter+0x157/0x4f0 [ 447.010226][ T6298] vfs_write+0x857/0xbc0 [ 447.014514][ T6298] ? file_end_write+0x250/0x250 [ 447.019455][ T6298] ? __fget_files+0x28/0x4a0 [ 447.024085][ T6298] ? __fget_files+0x435/0x4a0 [ 447.028889][ T6298] ? __fdget_pos+0x2ba/0x360 [ 447.033506][ T6298] ? ksys_write+0x77/0x2c0 [ 447.037974][ T6298] ksys_write+0x19c/0x2c0 [ 447.042337][ T6298] ? print_irqtrace_events+0x210/0x210 [ 447.047838][ T6298] ? __ia32_sys_read+0x80/0x80 [ 447.052635][ T6298] ? syscall_enter_from_user_mode+0x2e/0x230 [ 447.058652][ T6298] ? lockdep_hardirqs_on+0x94/0x130 [ 447.063884][ T6298] ? syscall_enter_from_user_mode+0x2e/0x230 [ 447.069911][ T6298] do_syscall_64+0x3b/0xb0 [ 447.074364][ T6298] ? clear_bhb_loop+0x45/0xa0 [ 447.079074][ T6298] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 447.085007][ T6298] RIP: 0033:0x7f2ae4d8d169 [ 447.089448][ T6298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.109085][ T6298] RSP: 002b:00007f2ae5c57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 447.117512][ T6298] RAX: ffffffffffffffda RBX: 00007f2ae4fa5fa0 RCX: 00007f2ae4d8d169 [ 447.125498][ T6298] RDX: 0000000000000027 RSI: 0000400000000040 RDI: 0000000000000004 [ 447.133480][ T6298] RBP: 00007f2ae5c57090 R08: 0000000000000000 R09: 0000000000000000 [ 447.141460][ T6298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.149447][ T6298] R13: 0000000000000000 R14: 00007f2ae4fa5fa0 R15: 00007ffc2a936c48 [ 447.157437][ T6298] [ 447.691808][ T6316] netlink: 'syz.1.713': attribute type 10 has an invalid length. [ 447.936330][ T6326] netlink: 'syz.3.717': attribute type 10 has an invalid length. [ 447.943011][ T6328] FAULT_INJECTION: forcing a failure. [ 447.943011][ T6328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 447.965571][ T6328] CPU: 0 PID: 6328 Comm: syz.1.716 Not tainted 6.1.131-syzkaller #0 [ 447.973613][ T6328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 447.983713][ T6328] Call Trace: [ 447.987024][ T6328] [ 447.989982][ T6328] dump_stack_lvl+0x1e3/0x2cb [ 447.994699][ T6328] ? nf_tcp_handle_invalid+0x647/0x647 [ 448.000450][ T6328] ? panic+0x764/0x764 [ 448.004561][ T6328] ? __lock_acquire+0x1f80/0x1f80 [ 448.009636][ T6328] should_fail_ex+0x3a6/0x4d0 [ 448.014454][ T6328] _copy_from_user+0x2b/0x170 [ 448.019178][ T6328] copy_msghdr_from_user+0xaa/0x670 [ 448.024420][ T6328] ? sendmsg_copy_msghdr+0x70/0x70 [ 448.029584][ T6328] __sys_sendmsg+0x236/0x390 [ 448.034217][ T6328] ? ____sys_sendmsg+0x9a0/0x9a0 [ 448.039187][ T6328] ? vfs_write+0x6cf/0xbc0 [ 448.043761][ T6328] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 448.049796][ T6328] ? syscall_enter_from_user_mode+0x2e/0x230 [ 448.055815][ T6328] ? lockdep_hardirqs_on+0x94/0x130 [ 448.061052][ T6328] ? syscall_enter_from_user_mode+0x2e/0x230 [ 448.067068][ T6328] do_syscall_64+0x3b/0xb0 [ 448.071511][ T6328] ? clear_bhb_loop+0x45/0xa0 [ 448.076226][ T6328] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 448.082183][ T6328] RIP: 0033:0x7f2ae4d8d169 [ 448.086620][ T6328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.106247][ T6328] RSP: 002b:00007f2ae5c57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.114682][ T6328] RAX: ffffffffffffffda RBX: 00007f2ae4fa5fa0 RCX: 00007f2ae4d8d169 [ 448.122672][ T6328] RDX: 0000000000000000 RSI: 0000400000000600 RDI: 0000000000000003 [ 448.130665][ T6328] RBP: 00007f2ae5c57090 R08: 0000000000000000 R09: 0000000000000000 [ 448.138656][ T6328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.146654][ T6328] R13: 0000000000000000 R14: 00007f2ae4fa5fa0 R15: 00007ffc2a936c48 [ 448.154662][ T6328] [ 448.168033][ T6326] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 449.145267][ T6345] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.724'. [ 449.176459][ T6345] netlink: 6296 bytes leftover after parsing attributes in process `syz.0.724'. [ 449.259296][ T6345] netlink: 32 bytes leftover after parsing attributes in process `syz.0.724'. [ 449.278121][ T6350] FAULT_INJECTION: forcing a failure. [ 449.278121][ T6350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.296862][ T6348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.317824][ T6348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.326374][ T6350] CPU: 1 PID: 6350 Comm: syz.4.726 Not tainted 6.1.131-syzkaller #0 [ 449.334399][ T6350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 449.344476][ T6350] Call Trace: [ 449.347780][ T6350] [ 449.350736][ T6350] dump_stack_lvl+0x1e3/0x2cb [ 449.355452][ T6350] ? nf_tcp_handle_invalid+0x647/0x647 [ 449.360943][ T6350] ? panic+0x764/0x764 [ 449.365049][ T6350] ? __lock_acquire+0x1f80/0x1f80 [ 449.370118][ T6350] should_fail_ex+0x3a6/0x4d0 [ 449.374840][ T6350] _copy_from_user+0x2b/0x170 [ 449.379551][ T6350] copy_msghdr_from_user+0xaa/0x670 [ 449.384792][ T6350] ? sendmsg_copy_msghdr+0x70/0x70 [ 449.389942][ T6350] __sys_sendmsg+0x236/0x390 [ 449.394566][ T6350] ? ____sys_sendmsg+0x9a0/0x9a0 [ 449.399535][ T6350] ? vfs_write+0x6cf/0xbc0 [ 449.404001][ T6350] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 449.410014][ T6350] ? syscall_enter_from_user_mode+0x2e/0x230 [ 449.416009][ T6350] ? lockdep_hardirqs_on+0x94/0x130 [ 449.421218][ T6350] ? syscall_enter_from_user_mode+0x2e/0x230 [ 449.427214][ T6350] do_syscall_64+0x3b/0xb0 [ 449.431644][ T6350] ? clear_bhb_loop+0x45/0xa0 [ 449.436331][ T6350] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 449.442244][ T6350] RIP: 0033:0x7fc38df8d169 [ 449.446670][ T6350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.466287][ T6350] RSP: 002b:00007fc38eeb6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.474707][ T6350] RAX: ffffffffffffffda RBX: 00007fc38e1a5fa0 RCX: 00007fc38df8d169 [ 449.482688][ T6350] RDX: 0000000000000000 RSI: 00004000000002c0 RDI: 0000000000000004 [ 449.490663][ T6350] RBP: 00007fc38eeb6090 R08: 0000000000000000 R09: 0000000000000000 [ 449.498641][ T6350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.506619][ T6350] R13: 0000000000000000 R14: 00007fc38e1a5fa0 R15: 00007fff019f58f8 [ 449.514613][ T6350] [ 449.528955][ T6348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.554511][ T6348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.724946][ T6359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.734115][ T6359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.752602][ T6359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.760285][ T6359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.901696][ T6361] netlink: 'syz.3.730': attribute type 22 has an invalid length. [ 450.357372][ T6373] FAULT_INJECTION: forcing a failure. [ 450.357372][ T6373] name failslab, interval 1, probability 0, space 0, times 0 [ 450.376531][ T6373] CPU: 0 PID: 6373 Comm: syz.4.734 Not tainted 6.1.131-syzkaller #0 [ 450.384571][ T6373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 450.394664][ T6373] Call Trace: [ 450.397973][ T6373] [ 450.400935][ T6373] dump_stack_lvl+0x1e3/0x2cb [ 450.405654][ T6373] ? nf_tcp_handle_invalid+0x647/0x647 [ 450.411150][ T6373] ? panic+0x764/0x764 [ 450.415259][ T6373] ? __might_sleep+0xb0/0xb0 [ 450.419889][ T6373] should_fail_ex+0x3a6/0x4d0 [ 450.424624][ T6373] should_failslab+0x5/0x20 [ 450.429166][ T6373] slab_pre_alloc_hook+0x59/0x300 [ 450.434242][ T6373] ? __get_vm_area_node+0x126/0x360 [ 450.439492][ T6373] __kmem_cache_alloc_node+0x47/0x260 [ 450.444919][ T6373] ? __get_vm_area_node+0x126/0x360 [ 450.450165][ T6373] kmalloc_node_trace+0x23/0xe0 [ 450.455056][ T6373] __get_vm_area_node+0x126/0x360 [ 450.460139][ T6373] __vmalloc_node_range+0x37d/0x14b0 [ 450.465457][ T6373] ? netlink_sendmsg+0x644/0xd60 [ 450.470434][ T6373] ? netlink_insert+0x10dc/0x1540 [ 450.475493][ T6373] ? netlink_insert+0x30d/0x1540 [ 450.480482][ T6373] ? free_vm_area+0x50/0x50 [ 450.485047][ T6373] ? netlink_sendmsg+0x644/0xd60 [ 450.490023][ T6373] vmalloc+0x75/0x80 [ 450.493946][ T6373] ? netlink_sendmsg+0x644/0xd60 [ 450.498916][ T6373] netlink_sendmsg+0x644/0xd60 [ 450.503725][ T6373] ? netlink_getsockopt+0x580/0x580 [ 450.508956][ T6373] ? aa_sock_msg_perm+0x91/0x150 [ 450.513927][ T6373] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 450.519252][ T6373] ? security_socket_sendmsg+0x7d/0xa0 [ 450.524811][ T6373] ? netlink_getsockopt+0x580/0x580 [ 450.530063][ T6373] sock_write_iter+0x394/0x4e0 [ 450.534879][ T6373] ? sock_read_iter+0x4b0/0x4b0 [ 450.539768][ T6373] ? common_file_perm+0x17d/0x1d0 [ 450.544879][ T6373] vfs_write+0x857/0xbc0 [ 450.549170][ T6373] ? file_end_write+0x250/0x250 [ 450.554062][ T6373] ? __fget_files+0x28/0x4a0 [ 450.558690][ T6373] ? __fget_files+0x435/0x4a0 [ 450.563384][ T6373] ? __fdget_pos+0x1db/0x360 [ 450.567983][ T6373] ? ksys_write+0x77/0x2c0 [ 450.572419][ T6373] ksys_write+0x19c/0x2c0 [ 450.576766][ T6373] ? print_irqtrace_events+0x210/0x210 [ 450.582250][ T6373] ? __ia32_sys_read+0x80/0x80 [ 450.587023][ T6373] ? syscall_enter_from_user_mode+0x2e/0x230 [ 450.593043][ T6373] ? lockdep_hardirqs_on+0x94/0x130 [ 450.598252][ T6373] ? syscall_enter_from_user_mode+0x2e/0x230 [ 450.604244][ T6373] do_syscall_64+0x3b/0xb0 [ 450.608665][ T6373] ? clear_bhb_loop+0x45/0xa0 [ 450.613357][ T6373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 450.619256][ T6373] RIP: 0033:0x7fc38df8d169 [ 450.623676][ T6373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.643292][ T6373] RSP: 002b:00007fc38eeb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 450.651712][ T6373] RAX: ffffffffffffffda RBX: 00007fc38e1a5fa0 RCX: 00007fc38df8d169 [ 450.659687][ T6373] RDX: 0000000000033fe0 RSI: 0000400000000000 RDI: 0000000000000003 [ 450.667662][ T6373] RBP: 00007fc38eeb6090 R08: 0000000000000000 R09: 0000000000000000 [ 450.675658][ T6373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.683659][ T6373] R13: 0000000000000000 R14: 00007fc38e1a5fa0 R15: 00007fff019f58f8 [ 450.691661][ T6373] [ 450.697287][ T6373] syz.4.734: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 450.922735][ T6373] CPU: 1 PID: 6373 Comm: syz.4.734 Not tainted 6.1.131-syzkaller #0 [ 450.930799][ T6373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 450.940902][ T6373] Call Trace: [ 450.944214][ T6373] [ 450.947181][ T6373] dump_stack_lvl+0x1e3/0x2cb [ 450.951912][ T6373] ? nf_tcp_handle_invalid+0x647/0x647 [ 450.957406][ T6373] ? panic+0x764/0x764 [ 450.961606][ T6373] ? cpuset_print_current_mems_allowed+0x1b/0x350 [ 450.968069][ T6373] ? cpuset_print_current_mems_allowed+0x30f/0x350 [ 450.974609][ T6373] warn_alloc+0x26f/0x400 [ 450.978976][ T6373] ? __get_vm_area_node+0x126/0x360 [ 450.984225][ T6373] ? zone_watermark_ok_safe+0x270/0x270 [ 450.989818][ T6373] ? __get_vm_area_node+0x351/0x360 [ 450.995077][ T6373] __vmalloc_node_range+0x3a2/0x14b0 [ 451.000499][ T6373] ? netlink_insert+0x10dc/0x1540 [ 451.005562][ T6373] ? netlink_insert+0x30d/0x1540 [ 451.010639][ T6373] ? free_vm_area+0x50/0x50 [ 451.015192][ T6373] ? netlink_sendmsg+0x644/0xd60 [ 451.020159][ T6373] vmalloc+0x75/0x80 [ 451.024093][ T6373] ? netlink_sendmsg+0x644/0xd60 [ 451.029071][ T6373] netlink_sendmsg+0x644/0xd60 [ 451.033886][ T6373] ? netlink_getsockopt+0x580/0x580 [ 451.039149][ T6373] ? aa_sock_msg_perm+0x91/0x150 [ 451.044129][ T6373] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 451.049455][ T6373] ? security_socket_sendmsg+0x7d/0xa0 [ 451.054956][ T6373] ? netlink_getsockopt+0x580/0x580 [ 451.060195][ T6373] sock_write_iter+0x394/0x4e0 [ 451.065001][ T6373] ? sock_read_iter+0x4b0/0x4b0 [ 451.069900][ T6373] ? common_file_perm+0x17d/0x1d0 [ 451.074969][ T6373] vfs_write+0x857/0xbc0 [ 451.079256][ T6373] ? file_end_write+0x250/0x250 [ 451.084145][ T6373] ? __fget_files+0x28/0x4a0 [ 451.088781][ T6373] ? __fget_files+0x435/0x4a0 [ 451.093486][ T6373] ? __fdget_pos+0x1db/0x360 [ 451.098091][ T6373] ? ksys_write+0x77/0x2c0 [ 451.102523][ T6373] ksys_write+0x19c/0x2c0 [ 451.106882][ T6373] ? print_irqtrace_events+0x210/0x210 [ 451.112370][ T6373] ? __ia32_sys_read+0x80/0x80 [ 451.117150][ T6373] ? syscall_enter_from_user_mode+0x2e/0x230 [ 451.123149][ T6373] ? lockdep_hardirqs_on+0x94/0x130 [ 451.128360][ T6373] ? syscall_enter_from_user_mode+0x2e/0x230 [ 451.134355][ T6373] do_syscall_64+0x3b/0xb0 [ 451.138784][ T6373] ? clear_bhb_loop+0x45/0xa0 [ 451.143477][ T6373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 451.149469][ T6373] RIP: 0033:0x7fc38df8d169 [ 451.153907][ T6373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.173533][ T6373] RSP: 002b:00007fc38eeb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 451.181958][ T6373] RAX: ffffffffffffffda RBX: 00007fc38e1a5fa0 RCX: 00007fc38df8d169 [ 451.189947][ T6373] RDX: 0000000000033fe0 RSI: 0000400000000000 RDI: 0000000000000003 [ 451.197920][ T6373] RBP: 00007fc38eeb6090 R08: 0000000000000000 R09: 0000000000000000 [ 451.205895][ T6373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.213867][ T6373] R13: 0000000000000000 R14: 00007fc38e1a5fa0 R15: 00007fff019f58f8 [ 451.221856][ T6373] [ 451.244916][ T6373] Mem-Info: [ 451.248077][ T6373] active_anon:4689 inactive_anon:0 isolated_anon:0 [ 451.248077][ T6373] active_file:12603 inactive_file:38342 isolated_file:0 [ 451.248077][ T6373] unevictable:768 dirty:425 writeback:0 [ 451.248077][ T6373] slab_reclaimable:20722 slab_unreclaimable:96706 [ 451.248077][ T6373] mapped:29062 shmem:1396 pagetables:567 [ 451.248077][ T6373] sec_pagetables:0 bounce:0 [ 451.248077][ T6373] kernel_misc_reclaimable:0 [ 451.248077][ T6373] free:1334305 free_pcp:6526 free_cma:0 [ 451.458071][ T6373] Node 0 active_anon:18756kB inactive_anon:0kB active_file:50412kB inactive_file:153292kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116148kB dirty:1696kB writeback:0kB shmem:4048kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10252kB pagetables:2268kB sec_pagetables:0kB all_unreclaimable? no [ 451.501655][ T6373] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 451.540429][ T6373] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 451.598996][ T6373] lowmem_reserve[]: 0 2519 2519 2519 2519 [ 451.621848][ T6373] Node 0 DMA32 free:1421116kB boost:0kB min:34628kB low:43284kB high:51940kB reserved_highatomic:0KB active_anon:18756kB inactive_anon:0kB active_file:50412kB inactive_file:153292kB unevictable:1536kB writepending:1696kB present:3129332kB managed:2585164kB mlocked:0kB bounce:0kB free_pcp:8064kB local_pcp:2828kB free_cma:0kB [ 451.678345][ T6388] netlink: 'syz.2.740': attribute type 17 has an invalid length. [ 451.704769][ T6388] netlink: 'syz.2.740': attribute type 16 has an invalid length. [ 451.721901][ T6373] lowmem_reserve[]: 0 0 0 0 0 [ 451.726688][ T6373] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 451.753258][ T6388] netlink: 152 bytes leftover after parsing attributes in process `syz.2.740'. [ 451.794362][ T6388] netlink: 152 bytes leftover after parsing attributes in process `syz.2.740'. [ 451.928273][ T6373] lowmem_reserve[]: 0 0 0 0 0 [ 451.933548][ T6373] Node 1 Normal free:3900808kB boost:0kB min:55268kB low:69084kB high:82900kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:18144kB local_pcp:8160kB free_cma:0kB [ 451.968491][ T6373] lowmem_reserve[]: 0 0 0 0 0 [ 451.974181][ T6373] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 451.994379][ T6373] Node 0 DMA32: 1185*4kB (UM) 1787*8kB (UME) 1244*16kB (UME) 885*32kB (UME) 321*64kB (UME) 43*128kB (UME) 31*256kB (UME) 14*512kB (ME) 6*1024kB (UME) 2*2048kB (UM) 318*4096kB (UM) = 1421180kB [ 452.051906][ T6373] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 452.077259][ T6373] Node 1 Normal: 216*4kB (UE) 55*8kB (UE) 33*16kB (UME) 43*32kB (UME) 30*64kB (UME) 11*128kB (UE) 6*256kB (UE) 1*512kB (U) 3*1024kB (UME) 1*2048kB (E) 949*4096kB (M) = 3900808kB [ 452.111685][ T6373] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 452.130892][ T6400] FAULT_INJECTION: forcing a failure. [ 452.130892][ T6400] name failslab, interval 1, probability 0, space 0, times 0 [ 452.137451][ T6373] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 452.153737][ T6400] CPU: 0 PID: 6400 Comm: syz.2.744 Not tainted 6.1.131-syzkaller #0 [ 452.161762][ T6400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 452.171838][ T6400] Call Trace: [ 452.175121][ T6400] [ 452.178084][ T6400] dump_stack_lvl+0x1e3/0x2cb [ 452.182796][ T6400] ? nf_tcp_handle_invalid+0x647/0x647 [ 452.188267][ T6400] ? panic+0x764/0x764 [ 452.192345][ T6400] ? __might_sleep+0xb0/0xb0 [ 452.196948][ T6400] should_fail_ex+0x3a6/0x4d0 [ 452.201644][ T6400] should_failslab+0x5/0x20 [ 452.206157][ T6400] slab_pre_alloc_hook+0x59/0x300 [ 452.211192][ T6400] ? read_lock_is_recursive+0x10/0x10 [ 452.216591][ T6400] ? kernfs_fop_write_iter+0x157/0x4f0 [ 452.222054][ T6400] __kmem_cache_alloc_node+0x47/0x260 [ 452.227440][ T6400] ? kernfs_fop_write_iter+0x157/0x4f0 [ 452.232904][ T6400] __kmalloc+0xa1/0x230 [ 452.237068][ T6400] ? end_current_label_crit_section+0x147/0x170 [ 452.243405][ T6400] kernfs_fop_write_iter+0x157/0x4f0 [ 452.248719][ T6400] vfs_write+0x857/0xbc0 [ 452.252997][ T6400] ? file_end_write+0x250/0x250 [ 452.257878][ T6400] ? __fget_files+0x28/0x4a0 [ 452.262490][ T6400] ? __fget_files+0x435/0x4a0 [ 452.267216][ T6400] ? __fdget_pos+0x2ba/0x360 [ 452.272095][ T6400] ? ksys_write+0x77/0x2c0 [ 452.276536][ T6400] ksys_write+0x19c/0x2c0 [ 452.280893][ T6400] ? print_irqtrace_events+0x210/0x210 [ 452.286408][ T6400] ? __ia32_sys_read+0x80/0x80 [ 452.291180][ T6400] ? syscall_enter_from_user_mode+0x2e/0x230 [ 452.297169][ T6400] ? lockdep_hardirqs_on+0x94/0x130 [ 452.302376][ T6400] ? syscall_enter_from_user_mode+0x2e/0x230 [ 452.308388][ T6400] do_syscall_64+0x3b/0xb0 [ 452.312841][ T6400] ? clear_bhb_loop+0x45/0xa0 [ 452.317538][ T6400] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.323460][ T6400] RIP: 0033:0x7fd71478d169 [ 452.327881][ T6400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.347490][ T6400] RSP: 002b:00007fd71556f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 452.355909][ T6400] RAX: ffffffffffffffda RBX: 00007fd7149a5fa0 RCX: 00007fd71478d169 [ 452.363888][ T6400] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 452.371859][ T6400] RBP: 00007fd71556f090 R08: 0000000000000000 R09: 0000000000000000 [ 452.379832][ T6400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.387831][ T6400] R13: 0000000000000000 R14: 00007fd7149a5fa0 R15: 00007ffc4c606be8 [ 452.395823][ T6400] [ 452.435429][ T6373] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 452.445547][ T6373] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 452.455549][ T6373] 52343 total pagecache pages [ 452.460392][ T6373] 0 pages in swap cache [ 452.466645][ T6373] Free swap = 124996kB [ 452.470979][ T6373] Total swap = 124996kB [ 452.491787][ T6373] 2097051 pages RAM [ 452.504723][ T6373] 0 pages HighMem/MovableOnly [ 452.512175][ T6373] 417415 pages reserved [ 452.517412][ T6373] 0 pages cma reserved [ 453.118378][ T6419] netlink: 'syz.4.752': attribute type 10 has an invalid length. [ 453.157477][ T6419] team0: Port device netdevsim0 added [ 453.185553][ T6421] netlink: 'syz.4.752': attribute type 10 has an invalid length. [ 453.242885][ T6421] team0: Port device netdevsim0 removed [ 453.313311][ T6421] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 453.649810][ T6432] FAULT_INJECTION: forcing a failure. [ 453.649810][ T6432] name failslab, interval 1, probability 0, space 0, times 0 [ 453.696381][ T6432] CPU: 0 PID: 6432 Comm: syz.0.757 Not tainted 6.1.131-syzkaller #0 [ 453.704427][ T6432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 453.714523][ T6432] Call Trace: [ 453.718099][ T6432] [ 453.721055][ T6432] dump_stack_lvl+0x1e3/0x2cb [ 453.725771][ T6432] ? nf_tcp_handle_invalid+0x647/0x647 [ 453.731449][ T6432] ? panic+0x764/0x764 [ 453.735563][ T6432] ? __might_sleep+0xb0/0xb0 [ 453.740191][ T6432] should_fail_ex+0x3a6/0x4d0 [ 453.744916][ T6432] should_failslab+0x5/0x20 [ 453.749557][ T6432] slab_pre_alloc_hook+0x59/0x300 [ 453.754651][ T6432] ? print_irqtrace_events+0x210/0x210 [ 453.760150][ T6432] kmem_cache_alloc_node+0x52/0x310 [ 453.765397][ T6432] ? __alloc_skb+0xd3/0x2c0 [ 453.769984][ T6432] __alloc_skb+0xd3/0x2c0 [ 453.774369][ T6432] inet_netconf_notify_devconf+0x156/0x210 [ 453.780225][ T6432] inetdev_event+0x72a/0x1480 [ 453.784924][ T6432] ? devinet_exit_net+0x230/0x230 [ 453.789964][ T6432] ? arp_netdev_event+0xd4/0x320 [ 453.795187][ T6432] raw_notifier_call_chain+0xd0/0x170 [ 453.800680][ T6432] unregister_netdevice_many+0xe48/0x1710 [ 453.806441][ T6432] ? __might_sleep+0xb0/0xb0 [ 453.811398][ T6432] ? trace_raw_output_contention_end+0xd0/0xd0 [ 453.817606][ T6432] ? alloc_netdev_mqs+0xef0/0xef0 [ 453.822724][ T6432] ? trace_contention_end+0x61/0x170 [ 453.828022][ T6432] ? __mutex_lock+0x2f7/0xd80 [ 453.832736][ T6432] ? memset+0x1f/0x40 [ 453.836731][ T6432] unregister_netdevice_queue+0x2e6/0x350 [ 453.842461][ T6432] ? list_netdevice+0x650/0x650 [ 453.847325][ T6432] ? task_work_run+0x1fc/0x300 [ 453.852108][ T6432] ppp_release+0xec/0x1f0 [ 453.856451][ T6432] ? ppp_open+0x70/0x70 [ 453.860619][ T6432] __fput+0x3f6/0x8d0 [ 453.864622][ T6432] task_work_run+0x246/0x300 [ 453.869231][ T6432] ? task_work_cancel+0x2e0/0x2e0 [ 453.875076][ T6432] ? exit_to_user_mode_loop+0x39/0x100 [ 453.880576][ T6432] exit_to_user_mode_loop+0xde/0x100 [ 453.885885][ T6432] exit_to_user_mode_prepare+0xb1/0x140 [ 453.891907][ T6432] syscall_exit_to_user_mode+0x60/0x270 [ 453.897481][ T6432] do_syscall_64+0x47/0xb0 [ 453.901923][ T6432] ? clear_bhb_loop+0x45/0xa0 [ 453.906615][ T6432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 453.912531][ T6432] RIP: 0033:0x7fdf7cd8d169 [ 453.917039][ T6432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.936928][ T6432] RSP: 002b:00007fdf7db71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 453.945358][ T6432] RAX: 0000000000000000 RBX: 00007fdf7cfa5fa0 RCX: 00007fdf7cd8d169 [ 453.953437][ T6432] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 453.961443][ T6432] RBP: 00007fdf7db71090 R08: 0000000000000000 R09: 0000000000000000 [ 453.969533][ T6432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.977517][ T6432] R13: 0000000000000000 R14: 00007fdf7cfa5fa0 R15: 00007ffe8d040708 [ 453.985603][ T6432] [ 455.381658][ T6462] FAULT_INJECTION: forcing a failure. [ 455.381658][ T6462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.382675][ T6462] [ 455.382682][ T6462] ====================================================== [ 455.382689][ T6462] WARNING: possible circular locking dependency detected [ 455.382696][ T6462] 6.1.131-syzkaller #0 Not tainted [ 455.382705][ T6462] ------------------------------------------------------ [ 455.382711][ T6462] syz.1.767/6462 is trying to acquire lock: [ 455.382721][ T6462] ffffffff8d322880 (console_owner){-...}-{0:0}, at: console_emit_next_record+0x74f/0xc30 [ 455.382773][ T6462] [ 455.382773][ T6462] but task is already holding lock: [ 455.382777][ T6462] ffff8880b8e3a9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 455.382823][ T6462] [ 455.382823][ T6462] which lock already depends on the new lock. [ 455.382823][ T6462] [ 455.382829][ T6462] [ 455.382829][ T6462] the existing dependency chain (in reverse order) is: [ 455.382837][ T6462] [ 455.382837][ T6462] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 455.382859][ T6462] lock_acquire+0x1f8/0x5a0 [ 455.382887][ T6462] _raw_spin_lock_nested+0x2d/0x40 [ 455.382908][ T6462] raw_spin_rq_lock_nested+0x26/0x140 [ 455.382929][ T6462] task_fork_fair+0x5d/0x350 [ 455.382952][ T6462] sched_cgroup_fork+0x374/0x400 [ 455.382976][ T6462] copy_process+0x2482/0x40a0 [ 455.382993][ T6462] kernel_clone+0x222/0x920 [ 455.383010][ T6462] user_mode_thread+0x140/0x1b0 [ 455.383027][ T6462] rest_init+0x23/0x300 [ 455.383049][ T6462] start_kernel+0x0/0x53f [ 455.383067][ T6462] start_kernel+0x496/0x53f [ 455.383081][ T6462] secondary_startup_64_no_verify+0xcf/0xdb [ 455.383105][ T6462] [ 455.383105][ T6462] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 455.383128][ T6462] lock_acquire+0x1f8/0x5a0 [ 455.383153][ T6462] _raw_spin_lock_irqsave+0xd1/0x120 [ 455.383171][ T6462] try_to_wake_up+0xad/0x1250 [ 455.383194][ T6462] __wake_up_common+0x2a0/0x4e0 [ 455.383219][ T6462] __wake_up+0x11a/0x1c0 [ 455.383243][ T6462] tty_port_default_wakeup+0xa2/0xf0 [ 455.383264][ T6462] serial8250_tx_chars+0x60d/0x800 [ 455.383293][ T6462] serial8250_handle_irq+0x4ff/0x6a0 [ 455.383316][ T6462] serial8250_default_handle_irq+0xc8/0x1e0 [ 455.383340][ T6462] serial8250_interrupt+0xa1/0x1e0 [ 455.383361][ T6462] __handle_irq_event_percpu+0x2a8/0xb20 [ 455.383382][ T6462] handle_irq_event+0x85/0x1e0 [ 455.383403][ T6462] handle_edge_irq+0x245/0xbf0 [ 455.383429][ T6462] __common_interrupt+0xd7/0x1f0 [ 455.383454][ T6462] common_interrupt+0xae/0xd0 [ 455.383471][ T6462] asm_common_interrupt+0x22/0x40 [ 455.383492][ T6462] __sanitizer_cov_trace_cmp8+0x4/0x80 [ 455.383515][ T6462] mas_next_entry+0x54/0xfb0 [ 455.383542][ T6462] validate_mm+0x297/0x380 [ 455.383556][ T6462] __vma_adjust+0x1d41/0x1f40 [ 455.383573][ T6462] __split_vma+0x36c/0x4c0 [ 455.383590][ T6462] do_mas_align_munmap+0x42f/0x15a0 [ 455.383607][ T6462] do_mas_munmap+0x246/0x2b0 [ 455.383624][ T6462] mmap_region+0x8d4/0x2660 [ 455.383641][ T6462] do_mmap+0x8c5/0xf60 [ 455.383655][ T6462] vm_mmap_pgoff+0x1ca/0x2d0 [ 455.383675][ T6462] ksys_mmap_pgoff+0x4f5/0x6d0 [ 455.383692][ T6462] do_syscall_64+0x3b/0xb0 [ 455.383708][ T6462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 455.383729][ T6462] [ 455.383729][ T6462] -> #2 (&tty->write_wait){-...}-{2:2}: [ 455.383752][ T6462] lock_acquire+0x1f8/0x5a0 [ 455.383777][ T6462] _raw_spin_lock_irqsave+0xd1/0x120 [ 455.383795][ T6462] __wake_up+0xfd/0x1c0 [ 455.383819][ T6462] tty_port_default_wakeup+0xa2/0xf0 [ 455.383837][ T6462] serial8250_tx_chars+0x60d/0x800 [ 455.383859][ T6462] serial8250_handle_irq+0x4ff/0x6a0 [ 455.383881][ T6462] serial8250_default_handle_irq+0xc8/0x1e0 [ 455.383905][ T6462] serial8250_interrupt+0xa1/0x1e0 [ 455.383926][ T6462] __handle_irq_event_percpu+0x2a8/0xb20 [ 455.383947][ T6462] handle_irq_event+0x85/0x1e0 [ 455.383966][ T6462] handle_edge_irq+0x245/0xbf0 [ 455.383990][ T6462] __common_interrupt+0xd7/0x1f0 [ 455.384014][ T6462] common_interrupt+0xae/0xd0 [ 455.384031][ T6462] asm_common_interrupt+0x22/0x40 [ 455.384051][ T6462] _raw_spin_unlock_irqrestore+0xd4/0x130 [ 455.384071][ T6462] uart_write+0x66d/0x8d0 [ 455.384087][ T6462] n_tty_write+0xd7f/0x1260 [ 455.384113][ T6462] file_tty_write+0x504/0x890 [ 455.384135][ T6462] vfs_write+0x857/0xbc0 [ 455.384152][ T6462] ksys_write+0x19c/0x2c0 [ 455.384169][ T6462] do_syscall_64+0x3b/0xb0 [ 455.384186][ T6462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 455.384207][ T6462] [ 455.384207][ T6462] -> #1 (&port_lock_key){-...}-{2:2}: [ 455.384229][ T6462] lock_acquire+0x1f8/0x5a0 [ 455.384254][ T6462] _raw_spin_lock_irqsave+0xd1/0x120 [ 455.384271][ T6462] serial8250_console_write+0x19f/0x1a30 [ 455.384301][ T6462] console_emit_next_record+0x86d/0xc30 [ 455.384319][ T6462] console_unlock+0x278/0x7c0 [ 455.384334][ T6462] vprintk_emit+0x523/0x740 [ 455.384349][ T6462] _printk+0xd1/0x111 [ 455.384367][ T6462] register_console+0x6b9/0x9a0 [ 455.384382][ T6462] univ8250_console_init+0x41/0x43 [ 455.384406][ T6462] console_init+0x1d6/0x7f3 [ 455.384431][ T6462] start_kernel+0x30b/0x53f [ 455.384447][ T6462] secondary_startup_64_no_verify+0xcf/0xdb [ 455.384470][ T6462] [ 455.384470][ T6462] -> #0 (console_owner){-...}-{0:0}: [ 455.384492][ T6462] validate_chain+0x1661/0x5950 [ 455.384509][ T6462] __lock_acquire+0x125b/0x1f80 [ 455.384535][ T6462] lock_acquire+0x1f8/0x5a0 [ 455.384561][ T6462] console_emit_next_record+0x76c/0xc30 [ 455.384579][ T6462] console_unlock+0x278/0x7c0 [ 455.384593][ T6462] vprintk_emit+0x523/0x740 [ 455.384608][ T6462] _printk+0xd1/0x111 [ 455.384626][ T6462] should_fail_ex+0x387/0x4d0 [ 455.384654][ T6462] strncpy_from_user+0x32/0x360 [ 455.384678][ T6462] strncpy_from_user_nofault+0x6c/0x130 [ 455.384703][ T6462] bpf_probe_read_compat_str+0xe4/0x180 [ 455.384721][ T6462] bpf_prog_c1796171ffc7efef+0x35/0x37 [ 455.384738][ T6462] bpf_trace_run4+0x253/0x470 [ 455.384756][ T6462] __traceiter_sched_switch+0x91/0xc0 [ 455.384774][ T6462] __schedule+0x2128/0x4570 [ 455.384797][ T6462] preempt_schedule_irq+0xf7/0x1c0 [ 455.384820][ T6462] irqentry_exit+0x53/0x80 [ 455.384840][ T6462] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 455.384862][ T6462] tsk_fork_get_node+0x10/0x60 [ 455.384889][ T6462] dup_task_struct+0x40/0x6d0 [ 455.384906][ T6462] copy_process+0x637/0x40a0 [ 455.384922][ T6462] kernel_clone+0x222/0x920 [ 455.384940][ T6462] __x64_sys_clone+0x242/0x2c0 [ 455.384957][ T6462] do_syscall_64+0x3b/0xb0 [ 455.384971][ T6462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 455.384992][ T6462] [ 455.384992][ T6462] other info that might help us debug this: [ 455.384992][ T6462] [ 455.384998][ T6462] Chain exists of: [ 455.384998][ T6462] console_owner --> &p->pi_lock --> &rq->__lock [ 455.384998][ T6462] [ 455.385024][ T6462] Possible unsafe locking scenario: [ 455.385024][ T6462] [ 455.385029][ T6462] CPU0 CPU1 [ 455.385034][ T6462] ---- ---- [ 455.385037][ T6462] lock(&rq->__lock); [ 455.385047][ T6462] lock(&p->pi_lock); [ 455.385060][ T6462] lock(&rq->__lock); [ 455.385071][ T6462] lock(console_owner); [ 455.385082][ T6462] [ 455.385082][ T6462] *** DEADLOCK *** [ 455.385082][ T6462] [ 455.385085][ T6462] 3 locks held by syz.1.767/6462: [ 455.385095][ T6462] #0: ffff8880b8e3a9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 455.385143][ T6462] #1: ffffffff8d32e6c0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x16a/0x470 [ 455.385188][ T6462] #2: ffffffff8d20a5e0 (console_lock){+.+.}-{0:0}, at: _printk+0xd1/0x111 [ 455.385232][ T6462] [ 455.385232][ T6462] stack backtrace: [ 455.385238][ T6462] CPU: 0 PID: 6462 Comm: syz.1.767 Not tainted 6.1.131-syzkaller #0 [ 455.385273][ T6462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 455.385370][ T6462] Call Trace: [ 455.385379][ T6462] [ 455.385388][ T6462] dump_stack_lvl+0x1e3/0x2cb [ 455.385417][ T6462] ? nf_tcp_handle_invalid+0x647/0x647 [ 455.385442][ T6462] ? print_circular_bug+0x12b/0x1a0 [ 455.385464][ T6462] check_noncircular+0x2fa/0x3b0 [ 455.385486][ T6462] ? add_chain_block+0x850/0x850 [ 455.385505][ T6462] ? lockdep_lock+0x11f/0x2a0 [ 455.385533][ T6462] ? add_lock_to_list+0x1de/0x2e0 [ 455.385558][ T6462] validate_chain+0x1661/0x5950 [ 455.385587][ T6462] ? vsnprintf+0x1b93/0x1c70 [ 455.385611][ T6462] ? reacquire_held_locks+0x660/0x660 [ 455.385641][ T6462] ? _prb_read_valid+0xbcc/0xbe0 [ 455.385664][ T6462] ? mark_lock+0x9a/0x340 [ 455.385684][ T6462] __lock_acquire+0x125b/0x1f80 [ 455.385721][ T6462] lock_acquire+0x1f8/0x5a0 [ 455.385749][ T6462] ? console_emit_next_record+0x74f/0xc30 [ 455.385773][ T6462] ? read_lock_is_recursive+0x10/0x10 [ 455.385802][ T6462] ? __lock_acquire+0x1f80/0x1f80 [ 455.385829][ T6462] ? do_raw_spin_lock+0x14a/0x370 [ 455.385852][ T6462] ? do_raw_spin_unlock+0x137/0x8a0 [ 455.385874][ T6462] ? console_emit_next_record+0x74f/0xc30 [ 455.385895][ T6462] console_emit_next_record+0x76c/0xc30 [ 455.385914][ T6462] ? console_emit_next_record+0x74f/0xc30 [ 455.385941][ T6462] ? info_print_prefix+0x300/0x300 [ 455.385984][ T6462] console_unlock+0x278/0x7c0 [ 455.386005][ T6462] ? vprintk_emit+0x740/0x740 [ 455.386027][ T6462] ? _printk+0xd1/0x111 [ 455.386048][ T6462] vprintk_emit+0x523/0x740 [ 455.386066][ T6462] ? printk_sprint+0x490/0x490 [ 455.386087][ T6462] ? mark_lock+0x9a/0x340 [ 455.386105][ T6462] _printk+0xd1/0x111 [ 455.386130][ T6462] ? panic+0x764/0x764 [ 455.386157][ T6462] should_fail_ex+0x387/0x4d0 [ 455.386190][ T6462] strncpy_from_user+0x32/0x360 [ 455.386218][ T6462] strncpy_from_user_nofault+0x6c/0x130 [ 455.386253][ T6462] bpf_probe_read_compat_str+0xe4/0x180 [ 455.386276][ T6462] ? bpf_trace_run4+0x16a/0x470 [ 455.386307][ T6462] bpf_prog_c1796171ffc7efef+0x35/0x37 [ 455.386326][ T6462] bpf_trace_run4+0x253/0x470 [ 455.386349][ T6462] ? bpf_trace_run3+0x440/0x440 [ 455.386373][ T6462] ? probe_sched_wakeup+0x80/0x80 [ 455.386403][ T6462] ? tracing_record_taskinfo_sched_switch+0x77/0x390 [ 455.386433][ T6462] ? __bpf_trace_sched_wakeup_template+0x10/0x10 [ 455.386458][ T6462] __traceiter_sched_switch+0x91/0xc0 [ 455.386589][ T6462] __schedule+0x2128/0x4570 [ 455.386630][ T6462] ? release_firmware_map_entry+0x18b/0x18b [ 455.386658][ T6462] ? print_irqtrace_events+0x210/0x210 [ 455.386686][ T6462] ? irqentry_enter+0x33/0x50 [ 455.386710][ T6462] ? preempt_schedule_irq+0xec/0x1c0 [ 455.386736][ T6462] preempt_schedule_irq+0xf7/0x1c0 [ 455.386761][ T6462] ? preempt_schedule_notrace+0x140/0x140 [ 455.386791][ T6462] ? rcu_is_watching+0x11/0xb0 [ 455.386813][ T6462] irqentry_exit+0x53/0x80 [ 455.386835][ T6462] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 455.386861][ T6462] RIP: 0010:tsk_fork_get_node+0x10/0x60 [ 455.386893][ T6462] Code: 00 e8 f4 f7 85 00 4c 89 f7 e8 6c ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 48 89 fb e8 27 a0 2e 00 48 39 1d c0 44 c1 0e <74> 0c e8 19 a0 2e 00 b8 ff ff ff ff 5b c3 e8 0d a0 2e 00 48 81 c3 [ 455.386910][ T6462] RSP: 0018:ffffc90004e179d8 EFLAGS: 00000206 [ 455.386927][ T6462] RAX: ffffffff815c0999 RBX: ffff88802fbb9dc0 RCX: ffff88802fbb9dc0 [ 455.386943][ T6462] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffff88802fbb9dc0 [ 455.386956][ T6462] RBP: ffff88802fbb9dc0 R08: ffffffff81526ba6 R09: ffffed1005f773b9 [ 455.386971][ T6462] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920009c2f70 [ 455.386985][ T6462] R13: 00000000ffffffff R14: ffff88802fbb9dc0 R15: dffffc0000000000 [ 455.387002][ T6462] ? dup_task_struct+0x26/0x6d0 [ 455.387023][ T6462] ? tsk_fork_get_node+0x9/0x60 [ 455.387054][ T6462] ? tsk_fork_get_node+0x9/0x60 [ 455.387083][ T6462] dup_task_struct+0x40/0x6d0 [ 455.387107][ T6462] copy_process+0x637/0x40a0 [ 455.387126][ T6462] ? perf_trace_run_bpf_submit+0x1d0/0x1d0 [ 455.387165][ T6462] ? idle_dummy+0x10/0x10 [ 455.387189][ T6462] kernel_clone+0x222/0x920 [ 455.387211][ T6462] ? create_io_thread+0x1a0/0x1a0 [ 455.387235][ T6462] ? irqentry_enter+0x33/0x50 [ 455.387261][ T6462] __x64_sys_clone+0x242/0x2c0 [ 455.387293][ T6462] ? __do_sys_vfork+0x140/0x140 [ 455.387324][ T6462] ? syscall_enter_from_user_mode+0x37/0x230 [ 455.387350][ T6462] ? syscall_enter_from_user_mode+0x2e/0x230 [ 455.387376][ T6462] do_syscall_64+0x3b/0xb0 [ 455.387395][ T6462] ? clear_bhb_loop+0x45/0xa0 [ 455.387420][ T6462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 455.387443][ T6462] RIP: 0033:0x7f2ae4d8d169 [ 455.387461][ T6462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.387476][ T6462] RSP: 002b:00007f2ae5c56fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 455.387495][ T6462] RAX: ffffffffffffffda RBX: 00007f2ae4fa5fa0 RCX: 00007f2ae4d8d169 [ 455.387511][ T6462] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 455.387521][ T6462] RBP: 00007f2ae5c57090 R08: 0000000000000000 R09: 0000000000000000 [ 455.387533][ T6462] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 455.387724][ T6462] R13: 0000000000000000 R14: 00007f2ae4fa5fa0 R15: 00007ffc2a936c48 [ 455.387749][ T6462] [ 456.727318][ T6462] CPU: 0 PID: 6462 Comm: syz.1.767 Not tainted 6.1.131-syzkaller #0 [ 456.735425][ T6462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 456.745519][ T6462] Call Trace: [ 456.748826][ T6462] [ 456.751770][ T6462] dump_stack_lvl+0x1e3/0x2cb [ 456.756667][ T6462] ? nf_tcp_handle_invalid+0x647/0x647 [ 456.762144][ T6462] ? panic+0x764/0x764 [ 456.766258][ T6462] should_fail_ex+0x3a6/0x4d0 [ 456.770996][ T6462] strncpy_from_user+0x32/0x360 [ 456.775892][ T6462] strncpy_from_user_nofault+0x6c/0x130 [ 456.781513][ T6462] bpf_probe_read_compat_str+0xe4/0x180 [ 456.787200][ T6462] ? bpf_trace_run4+0x16a/0x470 [ 456.792085][ T6462] bpf_prog_c1796171ffc7efef+0x35/0x37 [ 456.797563][ T6462] bpf_trace_run4+0x253/0x470 [ 456.802266][ T6462] ? bpf_trace_run3+0x440/0x440 [ 456.807163][ T6462] ? probe_sched_wakeup+0x80/0x80 [ 456.812216][ T6462] ? tracing_record_taskinfo_sched_switch+0x77/0x390 [ 456.818923][ T6462] ? __bpf_trace_sched_wakeup_template+0x10/0x10 [ 456.825358][ T6462] __traceiter_sched_switch+0x91/0xc0 [ 456.831644][ T6462] __schedule+0x2128/0x4570 [ 456.836252][ T6462] ? release_firmware_map_entry+0x18b/0x18b [ 456.842185][ T6462] ? print_irqtrace_events+0x210/0x210 [ 456.848124][ T6462] ? irqentry_enter+0x33/0x50 [ 456.853362][ T6462] ? preempt_schedule_irq+0xec/0x1c0 [ 456.858705][ T6462] preempt_schedule_irq+0xf7/0x1c0 [ 456.864028][ T6462] ? preempt_schedule_notrace+0x140/0x140 [ 456.869780][ T6462] ? rcu_is_watching+0x11/0xb0 [ 456.874570][ T6462] irqentry_exit+0x53/0x80 [ 456.879006][ T6462] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 456.885021][ T6462] RIP: 0010:tsk_fork_get_node+0x10/0x60 [ 456.890619][ T6462] Code: 00 e8 f4 f7 85 00 4c 89 f7 e8 6c ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 48 89 fb e8 27 a0 2e 00 48 39 1d c0 44 c1 0e <74> 0c e8 19 a0 2e 00 b8 ff ff ff ff 5b c3 e8 0d a0 2e 00 48 81 c3 [ 456.910680][ T6462] RSP: 0018:ffffc90004e179d8 EFLAGS: 00000206 [ 456.916762][ T6462] RAX: ffffffff815c0999 RBX: ffff88802fbb9dc0 RCX: ffff88802fbb9dc0 [ 456.924935][ T6462] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffff88802fbb9dc0 [ 456.932929][ T6462] RBP: ffff88802fbb9dc0 R08: ffffffff81526ba6 R09: ffffed1005f773b9 [ 456.940948][ T6462] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920009c2f70 [ 456.948944][ T6462] R13: 00000000ffffffff R14: ffff88802fbb9dc0 R15: dffffc0000000000 [ 456.956950][ T6462] ? dup_task_struct+0x26/0x6d0 [ 456.962276][ T6462] ? tsk_fork_get_node+0x9/0x60 [ 456.967228][ T6462] ? tsk_fork_get_node+0x9/0x60 [ 456.972110][ T6462] dup_task_struct+0x40/0x6d0 [ 456.976929][ T6462] copy_process+0x637/0x40a0 [ 456.981536][ T6462] ? perf_trace_run_bpf_submit+0x1d0/0x1d0 [ 456.987376][ T6462] ? idle_dummy+0x10/0x10 [ 456.991725][ T6462] kernel_clone+0x222/0x920 [ 456.996247][ T6462] ? create_io_thread+0x1a0/0x1a0 [ 457.001286][ T6462] ? irqentry_enter+0x33/0x50 [ 457.005985][ T6462] __x64_sys_clone+0x242/0x2c0 [ 457.010781][ T6462] ? __do_sys_vfork+0x140/0x140 [ 457.015671][ T6462] ? syscall_enter_from_user_mode+0x37/0x230 [ 457.021691][ T6462] ? syscall_enter_from_user_mode+0x2e/0x230 [ 457.027728][ T6462] do_syscall_64+0x3b/0xb0 [ 457.032167][ T6462] ? clear_bhb_loop+0x45/0xa0 [ 457.036985][ T6462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 457.042901][ T6462] RIP: 0033:0x7f2ae4d8d169 [ 457.047362][ T6462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.067158][ T6462] RSP: 002b:00007f2ae5c56fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 457.075763][ T6462] RAX: ffffffffffffffda RBX: 00007f2ae4fa5fa0 RCX: 00007f2ae4d8d169 [ 457.083746][ T6462] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 457.091914][ T6462] RBP: 00007f2ae5c57090 R08: 0000000000000000 R09: 0000000000000000 [ 457.099916][ T6462] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 457.108026][ T6462] R13: 0000000000000000 R14: 00007f2ae4fa5fa0 R15: 00007ffc2a936c48 [ 457.116039][ T6462] [ 462.401606][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 462.401628][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 462.401657][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 462.418235][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 462.419665][ T4287] Bluetooth: hci2: command 0x0406 tx timeout