last executing test programs: 7.561944623s ago: executing program 3 (id=654): r0 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x17, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @call={0x85, 0x0, 0x0, 0x75}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xe}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0x6f, &(0x7f0000000280)=""/111, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x1, 0xd0, 0x80000001}, 0x10, 0x1bb43, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=[r0, r0, r0, r0], &(0x7f0000000380), 0x10, 0x5, @void, @value}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x2}, 0x104141, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0xc, 0x3, 0x0, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) close(r1) syz_clone(0xb00b000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETNOCSUM(r1, 0xff01, 0x0) 7.238560551s ago: executing program 3 (id=659): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x5, 0xd1, &(0x7f00000002c0)=""/209, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x100) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x10082, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7c, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x200002, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x9) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b80)="d80000001c0081044e81f782db44b904021d080201000000000018a118000c000600142603600e1208000f0100810401a8001600200001400300600803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e0852", 0x63}, {&(0x7f0000000580)="bf49498ca8a07dba227599c311a0bf08264860a910e5b37ab4ad33df43fa70ffc79eeeca2f38ba06e1ee93acd310f99a76337ed6de248944844da26865dceabeffe8a47ad8193b82f36fcbb3f27e052690d0c8ccbd8cbf72db", 0x59}, {&(0x7f0000000a00)="7e29d1a3098934975681c85ab33606d77b4970ba01a81851b3eb4ab5", 0x1c}], 0x3, 0x0, 0x0, 0x7400}, 0x4000) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0xfffffffe, 0x0, 0x2009}, 0x0, 0x4, 0xffffffffffffffff, 0x9) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000b05d25a806f8c6394f90524fc60", 0x14}], 0x1}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r1, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000002b00)=""/171, 0xab}}, 0x10) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r3}, 0x8) 6.859705786s ago: executing program 2 (id=663): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0x1}, 0x1, 0x7, 0xfffffbff, 0x6, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x400000002, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="2000000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f030000", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x9e0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)=@caif=@rfm={0x25, 0x2, "bf4c484a1fa00081a00200000000bb00"}, 0x80, 0x0}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x1a, &(0x7f0000000140), 0x4) sendmsg$inet(r2, &(0x7f0000000940)={&(0x7f0000000400)={0x2, 0x4e24, @broadcast}, 0x10, 0x0}, 0x40000) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0xfffffffffffffffe, 0x9}, 0x14185, 0x20032, 0xfffffbff, 0x2, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0xe, &(0x7f0000000100), 0xd8) 3.81387921s ago: executing program 0 (id=670): socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/2663], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="2d626c6b696f201363707520ff6fff4ec6776daa8fb666eaf9409f4b6b67b5d9d6efabbdcc9bcfc9ee97e7aae6d78562c4e520ef4cae6d36b1156e81b23762a284e763a5f0c028cc37c237e41e449877970908c54e7a5b9042b96ee2f95f311147e4455fec70ccd28f2e2ade23fd7192d2731511db5c3f8e08f975817ec758756b9538a66c9d0d042d0f70bf9fcbd199beb8fb9f5e7d0e7bf884d8bc5246fe28305f50576e"], 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r0, 0x1}, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xf0, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14905, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x58, &(0x7f0000001380)}, 0x10) socket$kcm(0x2, 0x5, 0x84) openat$tun(0xffffffffffffff9c, 0x0, 0x280000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x27, 0xd50, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r6 = getpid() perf_event_open(0x0, r6, 0x0, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 3.813453229s ago: executing program 2 (id=671): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xa, 0x0, 0x0, 0x16b6, 0x0, 0xda8a3fed8af0193c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x3, 0xffffffffffffffff, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r0}, 0x38) (fail_nth: 4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00037300005b686158bbcfe8875a060300000022000000000000000000000000ac1414aa"], 0xfdef) 3.439064467s ago: executing program 3 (id=673): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x20000001, 0x0, 0x9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x2, 0x5, 0x84) r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r3, 0x0, 0x0) 3.259613461s ago: executing program 4 (id=675): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8, 0x5, @perf_bp={0x0, 0x2}, 0x104141, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x101c0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000032000000c"], 0x50) close(0x3) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1700000000000000ff0f00000900000000000000", @ANYRES32, @ANYBLOB="e400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000005c0)={r6, 0x0, 0x0}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000f5ad62b1fea0f0304a347ebbd8aabacabad155f72116305b4dcd7530bd3316db", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[], 0x9a) (async) r8 = socket$kcm(0xa, 0x3, 0x3a) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000ff0100000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}, 0x8001) ioctl$SIOCSIFHWADDR(r10, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote}) (async) sendmsg$kcm(r8, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000100)=[{&(0x7f0000001840)="b564", 0x2}, {&(0x7f0000000000)="a927", 0x2}], 0x2, &(0x7f0000000d80)=[{0x18, 0x29, 0x4, '^'}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x8, 0xc, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000000000000000000000100085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 3.106173283s ago: executing program 2 (id=676): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}}, &(0x7f00000005c0)='GPL\x00', 0x5, 0xd1, &(0x7f00000002c0)=""/209, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r0, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000002b00)=""/171, 0xab}}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, @perf_bp={0x0, 0xb}, 0x1800, 0x101, 0x0, 0x3, 0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES64=0x0], 0x20) 3.053726838s ago: executing program 1 (id=677): r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x400448c9, 0x0) 2.940724126s ago: executing program 3 (id=678): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0xfffffffe, 0xfffc, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0x8) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000280)={r1}) r3 = getpid() perf_event_open(0x0, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1c00, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a15aa2bfe", 0x14}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x64) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000500), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 2.711759041s ago: executing program 0 (id=679): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711206000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200004600000000000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x0, 0xd50, 0x0, &(0x7f0000000380)="6d79737ebc0cc8fe242893208557", 0x0, 0xfff00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x9}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000180)={&(0x7f0000000700)="7641227c531e61be183956cfbe5b4091632eeed989ac9974f4ae1fae050aa04317fed5c02c1f131a7f6a765380d2e1baa39650226b3efe7dfe04788c51684eff97f7f1acde4f8067f1cdb18128cd41d25bf5e4e24d89a80776fb582bfa29cf224c44b6c2ad9e2ed64af8be7c14cb6767715b12a73e4252479530be8fcb5a15881109527ab7e1b8469531c01ce6a0129bd796d009f97d4f37755d1a86afa019ff47e591f2dd3503ec071e9c5496e69420dd9464a25dadd5fe539825218df46cf8c984290a1de4d04de2586b89dfc9", &(0x7f0000000140)=""/31, &(0x7f00000003c0)="5f4b65772bc8e9c02e3c16bda225359f723298e42814b94ed8466b10c0ccc28b18c580dc1d6f432b800ad94f99274f6b091db5432246e242ea9196f3b2044dab284cdb31c82fe16fdda3d3efaf9a461e8b48ca80ac746ecac4039e62fa8bd983298860b5e74011368c3c08891d919e486d849f166ff6f047a9a3055b619f5fdcf62f9cb9f96bb94a366d9598e95787b8ea7b8e8a95884f7ad37e9a3c6988b896c54988f9ad673e967f1fe7da", &(0x7f0000000980)="e2562716fde9862582bf4ae81949becddff59b36261980019993c3bda775b2ade0afe2be1387a50fd1bef780eb21345365f2e30e8df092b71fed89e99b561a710823103ccc82236647bf3c6a90e652e6fc7b21cf9638bd99d117400e4a6c6879a69dee2362aac908ee10bb9f3ec4f179951a91714a24967ab5759174fdd075178ed456befe0751dc6e4fbe7c95862b2b20b1b980182bb800550ae438407c285c72d01323c2e31d5a06c3bd8778fd8c904609ed0158fec3a548782ede7731f619c340a74fe2ed671588ef36e141e0fa0fe639e22e2faeac70809ec0727b9d831cb2fa57edb5f2503b78a676fef9c7d83110", 0xffffffff, r0, 0x4}, 0x38) socket$kcm(0x29, 0x0, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)}, 0x2100) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 2.622135352s ago: executing program 1 (id=680): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b80)="d80000001c0081044e81f782db44b904021d080201000000000018a118000c000600142603600e1208000f0100810401a8001600200001400300600803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e0852", 0x63}, {&(0x7f0000000580)="bf49498ca8a07dba227599c311a0bf08264860a910e5b37ab4ad33df43fa70ffc79eeeca2f38ba06e1ee93acd310f99a76337ed6de248944844da26865dceabeffe8a47ad8193b82f36fcbb3f27e052690d0c8ccbd8cbf72db", 0x59}, {&(0x7f0000000a00)="7e29d1a3098934975681c85ab33606d77b4970ba01a81851b3eb4ab5", 0x1c}], 0x3, 0x0, 0x0, 0x7400}, 0x4000) (fail_nth: 4) 2.620945127s ago: executing program 2 (id=681): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0, 0x7}, {0x0, 0x0, 0x0, 0x81}]}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 5) 2.294589363s ago: executing program 1 (id=682): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0x1}, 0x1, 0x7, 0xfffffbff, 0x6, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x400000002, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="2000000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f030000", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x9e0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)=@caif=@rfm={0x25, 0x2, "bf4c484a1fa00081a00200000000bb00"}, 0x80, 0x0}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x1a, &(0x7f0000000140), 0x4) sendmsg$inet(r2, &(0x7f0000000940)={&(0x7f0000000400)={0x2, 0x4e24, @broadcast}, 0x10, 0x0}, 0x40000) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0xfffffffffffffffe, 0x9}, 0x14185, 0x20032, 0xfffffbff, 0x2, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0xe, &(0x7f0000000100), 0xd8) 2.179853052s ago: executing program 2 (id=683): r0 = getpid() r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3, 0x400000000398}, 0x18020, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xf6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="5c00000012006b906fdfe1ef704ad931c605876c1d0000007ea60864160af3650400120038002e000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.774022351s ago: executing program 4 (id=684): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000006000000ff0f000005"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbfc, 0x3, 0x2, 0x0, 0xbffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0xfffffffe, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0xa, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0xe6a2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x9, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="18040000000000000000000000000000180000000000000000000000000000003c4401000000000095"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) 1.745207506s ago: executing program 0 (id=685): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000040)="62031400d755af176510120800afbcf711e12b7f96e5521c8cf21730087f5d2ae1b278c482c2be6770380e8ddd9aff775f8efffe0b0bc27de136f46c6858668084", 0x41}, {&(0x7f00000013c0)="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", 0xf29}], 0x2}, 0x4084) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010028080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0xff0f000020000080) 1.719617899s ago: executing program 1 (id=686): r0 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x17, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @call={0x85, 0x0, 0x0, 0x75}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xe}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0x6f, &(0x7f0000000280)=""/111, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x1, 0xd0, 0x80000001}, 0x10, 0x1bb43, 0xffffffffffffffff, 0x5, &(0x7f0000000340)=[r0, r0, r0, r0], &(0x7f0000000380)=[{0x3, 0x2, 0x9, 0x6}, {0x2, 0x4, 0x1, 0x1}, {0x3, 0x4, 0x9, 0x5}, {0x2, 0x1, 0xf, 0x8}, {0x5, 0x5, 0xf}], 0x10, 0x5, @void, @value}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x2}, 0x104141, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0xc, 0x3, 0x0, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) close(r1) syz_clone(0xb00b000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETNOCSUM(r1, 0xff01, 0x0) 1.622222725s ago: executing program 2 (id=687): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r1}, 0x18) r2 = socket$kcm(0x10, 0x3, 0x10) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r6}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r9}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r9}, 0x38) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x3a}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x194}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000580)='GPL\x00', 0xfff, 0x1000, &(0x7f0000001740)=""/4096, 0x41100, 0x40, '\x00', r8, 0x17, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1255c, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[r1, r9, r0], 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r10, 0x27, 0x25, 0x8, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0}, 0x40) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0xa, 0x8, 0x2, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r12, &(0x7f0000000300), 0x0}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r13}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) write$cgroup_type(r1, &(0x7f00000002c0), 0x9) sendmsg$kcm(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="1400000024000bdfd910e4069671e0621126b761", 0x14}], 0x1}, 0x0) r14 = socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(r14, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x12, 0x17, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f696e500000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095231fbe"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.566258581s ago: executing program 4 (id=688): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x20000001, 0x0, 0x9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x2, 0x5, 0x84) r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 1.507365067s ago: executing program 0 (id=689): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb04}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 7) 1.468075853s ago: executing program 1 (id=690): r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000340)={[{0x2d, 'perf_event'}, {0x2b, 'hugetlb'}, {0x2b, 'net_cls'}]}, 0x1e) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x5, @perf_bp={0x0, 0x2}, 0x104141, 0x0, 0xffffffff, 0xb, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x5, @perf_bp={0x0, 0x2}, 0x104141, 0x0, 0xffffffff, 0xb, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f80)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x18) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="5c00000014006b030231a6080c000af32c00e3f629c7b091ea1638d40df9056873fd7dc72e13bbb44a16d1009dfff1fc0000f800250f02000f00edaa000057d34060bc24cdb556bd05251e6194949a2756f475ce36c2ed1000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xf0, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)) getpid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0xffffffffffffffff, 0x100}, 0x104101, 0x0, 0x1, 0x1, 0x0, 0xc2, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000100)=[{&(0x7f0000000200)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a118001500060014000000001208000a0043000000a80016000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd", 0xd8}], 0x1}, 0x0) 1.164774792s ago: executing program 4 (id=691): r0 = gettid() r1 = socket$kcm(0x2, 0x5, 0x84) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a63c3e471f000140060404000a0484009bbc7a46e398826f9c00000000000068fec6019500100009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x78, &(0x7f0000000040)=r3, 0x4) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3, 0x2, 0x7, 0xac, 0x0, 0x0, 0x10011, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x7, 0x7ff}, 0x80, 0xf, 0x3, 0x0, 0xfffffffffffffff8, 0x1, 0xfff8, 0x0, 0x5, 0x0, 0x1}, r0, 0xd, r3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02008125d7e1"}) 1.03406332s ago: executing program 0 (id=692): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa1000000000000079c9b35c6a4fb92711cd0010000f801ffffb70200000800000f00000000040b0000850000000600"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.004651649s ago: executing program 4 (id=693): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='1\x00'], 0x20) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0xa, &(0x7f00000000c0)=@raw=[@map_idx={0x18, 0x3, 0x5, 0x0, 0xa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x3e}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}], &(0x7f0000000140)='syzkaller\x00', 0x5, 0x4b, &(0x7f0000000180)=""/75, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x4, 0xa, 0x442, 0x1}, 0x10, 0x19770, 0xffffffffffffffff, 0x1, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1], &(0x7f0000000400)=[{0x4, 0x5, 0xf}], 0x10, 0x927, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0xbc, 0x2, &(0x7f0000000500)="d7d737d42a58ea2e2fb1290fcc6fc6e5308a8663939c3a815c7d0133138362eded021229d35cf4d8e84bc2b5a2630271a339c4dd004621603ff7c80d5a7e51a73f583c94f0d2d7e5fd34741294ab5aa8e860a9448c89722baf4d0bd4dfc8bdd986a0257dd9d8cc3e1c58cb3d1c25e5a20258cfbef0ea400aea115932e3fd09ba64c1390a75dbedf0a0887af41b16457dc5033c0fd51c301b28d3702ba671f099252a42cd9ccf0588c8a0c7f747f09f9716420793d52b074d2f52a319", &(0x7f00000005c0)=""/2, 0x625a, 0x0, 0x75, 0xaf, &(0x7f0000000600)="65b4b388bb2793bc9097bb09817f641519880dde7da5b9e719ac50ccf9a014f2bd3ce2f9141bdc19008b87f9aff668d794194f936bdc7942e5fa9aa1b32f9f40d96dc7f346180aa5e5c21e00c376e221fa65bfae412eaccc485e1ee94bfceadf708b2a8b83a02e53ea8c00ec9b2a1929b45ad1727a", &(0x7f0000000680)="657014796525b15ac66a7346dd81405bac05ba01b603609c9972a15b87c2953f9ec4baa6e779dfb0e587d369d435d87f1859ba9ef7d6917b1094226da56eb5f0146b42440924aa40d4b2518d62038c8a37b63ed0750b161e09b70b08cfbf02bf082887d802e4090c360f536b2d8f2d817969b3d10fa6d0a9bbc0190c3777548427f808bef6c10ef27e15d733a84d7b1c426d8be2f205b6e186d85832a029cfbb4744df527e0ef1d378b2d6d9e65b76", 0x0, 0x0, 0x489}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x10000, 0x0, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x17) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x5e}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000008c0)='syzkaller\x00', 0xfffffff6, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, 0x0, r5, 0x8, &(0x7f0000000900)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000940)={0x4, 0x2, 0xbe4, 0x5}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000980)=[{0x4, 0x2, 0xb, 0xc}, {0x4, 0x4, 0x0, 0x7}, {0x1, 0x5, 0x1, 0x8}, {0x5, 0x4}, {0x3, 0x5, 0xb}, {0x1, 0x1, 0x10, 0xa}], 0x10, 0x8, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8c}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) 942.146879ms ago: executing program 3 (id=694): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b80)="d80000001c0081044e81f782db44b904021d080201000000000018a118000c000600142603600e1208000f0100810401a8001600200001400300600803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e0852", 0x63}, {&(0x7f0000000580)="bf49498ca8a07dba227599c311a0bf08264860a910e5b37ab4ad33df43fa70ffc79eeeca2f38ba06e1ee93acd310f99a76337ed6de248944844da26865dceabeffe8a47ad8193b82f36fcbb3f27e052690d0c8ccbd8cbf72db", 0x59}, {&(0x7f0000000a00)="7e29d1a3098934975681c85ab33606d77b4970ba01a81851b3eb4ab5", 0x1c}], 0x3, 0x0, 0x0, 0x7400}, 0x4000) 826.06504ms ago: executing program 1 (id=695): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 4) 825.079214ms ago: executing program 0 (id=696): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0x1}, 0x1, 0x7, 0xfffffbff, 0x6, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x400000002, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="2000000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f030000", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x9e0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)=@caif=@rfm={0x25, 0x2, "bf4c484a1fa00081a00200000000bb00"}, 0x80, 0x0}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x1a, &(0x7f0000000140), 0x4) sendmsg$inet(r2, &(0x7f0000000940)={&(0x7f0000000400)={0x2, 0x4e24, @broadcast}, 0x10, 0x0}, 0x40000) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0xfffffffffffffffe, 0x9}, 0x14185, 0x20032, 0xfffffbff, 0x2, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0xe, &(0x7f0000000100), 0xd8) 789.789709ms ago: executing program 3 (id=697): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711206000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200004600000000000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x0, 0xd50, 0x0, &(0x7f0000000380)="6d79737ebc0cc8fe242893208557", 0x0, 0xfff00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x9}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000180)={&(0x7f0000000700)="7641227c531e61be183956cfbe5b4091632eeed989ac9974f4ae1fae050aa04317fed5c02c1f131a7f6a765380d2e1baa39650226b3efe7dfe04788c51684eff97f7f1acde4f8067f1cdb18128cd41d25bf5e4e24d89a80776fb582bfa29cf224c44b6c2ad9e2ed64af8be7c14cb6767715b12a73e4252479530be8fcb5a15881109527ab7e1b8469531c01ce6a0129bd796d009f97d4f37755d1a86afa019ff47e591f2dd3503ec071e9c5496e69420dd9464a25dadd5fe539825218df46cf8c984290a1de4d04de2586b89dfc9", &(0x7f0000000140)=""/31, &(0x7f00000003c0)="5f4b65772bc8e9c02e3c16bda225359f723298e42814b94ed8466b10c0ccc28b18c580dc1d6f432b800ad94f99274f6b091db5432246e242ea9196f3b2044dab284cdb31c82fe16fdda3d3efaf9a461e8b48ca80ac746ecac4039e62fa8bd983298860b5e74011368c3c08891d919e486d849f166ff6f047a9a3055b619f5fdcf62f9cb9f96bb94a366d9598e95787b8ea7b8e8a95884f7ad37e9a3c6988b896c54988f9ad673e967f1fe7da", &(0x7f0000000980)="e2562716fde9862582bf4ae81949becddff59b36261980019993c3bda775b2ade0afe2be1387a50fd1bef780eb21345365f2e30e8df092b71fed89e99b561a710823103ccc82236647bf3c6a90e652e6fc7b21cf9638bd99d117400e4a6c6879a69dee2362aac908ee10bb9f3ec4f179951a91714a24967ab5759174fdd075178ed456befe0751dc6e4fbe7c95862b2b20b1b980182bb800550ae438407c285c72d01323c2e31d5a06c3bd8778fd8c904609ed0158fec3a548782ede7731f619c340a74fe2ed671588ef36e141e0fa0fe639e22e2faeac70809ec0727b9d831cb2fa57edb5f2503b78a676fef9c7d83110", 0xffffffff, r0, 0x4}, 0x38) socket$kcm(0x29, 0x0, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)}, 0x2100) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 0s ago: executing program 4 (id=698): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000006000000ff0f000005"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbfc, 0x3, 0x2, 0x0, 0xbffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0xfffffffe, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0xa, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0xe6a2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x9, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="18040000000000000000000000000000180000000000000000000000000000003c4401000000000095"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) kernel console output (not intermixed with test programs): 6798] fib6_new_table+0xfc/0x3f0 [ 144.053037][ T6798] ip6_route_info_create+0xfc/0x860 [ 144.053063][ T6798] ip6_route_add+0x28/0x190 [ 144.053084][ T6798] inet6_rtm_newroute+0x28c/0x18a0 [ 144.053117][ T6798] ? nlmon_xmit+0xb0/0x100 [ 144.053132][ T6798] ? kmem_cache_free+0x18f/0x400 [ 144.053154][ T6798] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 144.053182][ T6798] ? __local_bh_enable_ip+0x12d/0x1c0 [ 144.053209][ T6798] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.053233][ T6798] ? __local_bh_enable_ip+0x12d/0x1c0 [ 144.053258][ T6798] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 144.053288][ T6798] ? __dev_queue_xmit+0x27e/0x3a70 [ 144.053346][ T6798] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 144.053372][ T6798] rtnetlink_rcv_msg+0x7cc/0xb70 [ 144.053403][ T6798] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 144.053429][ T6798] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 144.053453][ T6798] ? ref_tracker_free+0x63a/0x7d0 [ 144.053477][ T6798] ? __copy_skb_header+0xa7/0x550 [ 144.053499][ T6798] ? __pfx_ref_tracker_free+0x10/0x10 [ 144.053524][ T6798] ? __skb_clone+0x63/0x7a0 [ 144.053551][ T6798] netlink_rcv_skb+0x208/0x470 [ 144.053571][ T6798] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 144.053599][ T6798] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 144.053629][ T6798] ? netlink_deliver_tap+0x2e/0x1b0 [ 144.053646][ T6798] ? netlink_deliver_tap+0x2e/0x1b0 [ 144.053668][ T6798] netlink_unicast+0x75b/0x8d0 [ 144.053705][ T6798] netlink_sendmsg+0x805/0xb30 [ 144.053732][ T6798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.053759][ T6798] ? aa_sock_msg_perm+0x94/0x160 [ 144.053785][ T6798] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 144.053809][ T6798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.053828][ T6798] __sock_sendmsg+0x21c/0x270 [ 144.053856][ T6798] ____sys_sendmsg+0x505/0x830 [ 144.053880][ T6798] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.053909][ T6798] ? import_iovec+0x74/0xa0 [ 144.053931][ T6798] ___sys_sendmsg+0x21f/0x2a0 [ 144.053953][ T6798] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.054006][ T6798] ? __fget_files+0x2a/0x420 [ 144.054026][ T6798] ? __fget_files+0x3a0/0x420 [ 144.054057][ T6798] __x64_sys_sendmsg+0x19b/0x260 [ 144.054079][ T6798] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 144.054108][ T6798] ? __pfx_ksys_write+0x10/0x10 [ 144.054123][ T6798] ? rcu_is_watching+0x15/0xb0 [ 144.054144][ T6798] ? do_syscall_64+0xbe/0x3b0 [ 144.054172][ T6798] do_syscall_64+0xfa/0x3b0 [ 144.054195][ T6798] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.054217][ T6798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.054235][ T6798] ? clear_bhb_loop+0x60/0xb0 [ 144.054256][ T6798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.054273][ T6798] RIP: 0033:0x7f621238e929 [ 144.054289][ T6798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.054302][ T6798] RSP: 002b:00007f62101f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.054320][ T6798] RAX: ffffffffffffffda RBX: 00007f62125b5fa0 RCX: 00007f621238e929 [ 144.054332][ T6798] RDX: 0000000024002040 RSI: 00002000000000c0 RDI: 0000000000000003 [ 144.054343][ T6798] RBP: 00007f62101f6090 R08: 0000000000000000 R09: 0000000000000000 [ 144.054353][ T6798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.054363][ T6798] R13: 0000000000000000 R14: 00007f62125b5fa0 R15: 00007ffc1e099058 [ 144.054389][ T6798] [ 144.623970][ T6806] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 144.824873][ T5157] Bluetooth: hci0: ISO packet for unknown connection handle 255 [ 145.633621][ T6846] netlink: 'syz.3.216': attribute type 4 has an invalid length. [ 145.668599][ T6846] netlink: 14345 bytes leftover after parsing attributes in process `syz.3.216'. [ 145.762891][ T6849] netlink: 'syz.2.217': attribute type 46 has an invalid length. [ 146.723604][ T6877] netlink: 'syz.0.227': attribute type 1 has an invalid length. [ 146.738828][ T6877] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.227'. [ 147.088977][ T6885] netlink: 'syz.1.230': attribute type 46 has an invalid length. [ 147.104712][ T6886] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.229'. [ 147.120402][ T6886] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.229'. [ 149.910407][ T6898] netlink: 'syz.4.235': attribute type 21 has an invalid length. [ 149.941688][ T6902] FAULT_INJECTION: forcing a failure. [ 149.941688][ T6902] name failslab, interval 1, probability 0, space 0, times 0 [ 150.011611][ T6902] CPU: 1 UID: 0 PID: 6902 Comm: syz.3.236 Not tainted 6.15.0-syzkaller-g3b55a9e6738b #0 PREEMPT(full) [ 150.011637][ T6902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.011648][ T6902] Call Trace: [ 150.011656][ T6902] [ 150.011664][ T6902] dump_stack_lvl+0x189/0x250 [ 150.011699][ T6902] ? __pfx____ratelimit+0x10/0x10 [ 150.011725][ T6902] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.011754][ T6902] ? __pfx__printk+0x10/0x10 [ 150.011777][ T6902] ? __pfx___might_resched+0x10/0x10 [ 150.011794][ T6902] ? fs_reclaim_acquire+0x7d/0x100 [ 150.011824][ T6902] should_fail_ex+0x414/0x560 [ 150.011856][ T6902] should_failslab+0xa8/0x100 [ 150.011879][ T6902] __kmalloc_noprof+0xcb/0x4f0 [ 150.011897][ T6902] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 150.011923][ T6902] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 150.011956][ T6902] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 150.011991][ T6902] genl_family_rcv_msg_doit+0xb8/0x300 [ 150.012024][ T6902] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 150.012052][ T6902] ? rcu_is_watching+0x15/0xb0 [ 150.012083][ T6902] ? apparmor_capable+0x137/0x1b0 [ 150.012104][ T6902] ? bpf_lsm_capable+0x9/0x20 [ 150.012121][ T6902] ? security_capable+0x7e/0x2e0 [ 150.012154][ T6902] genl_rcv_msg+0x60e/0x790 [ 150.012188][ T6902] ? __pfx_genl_rcv_msg+0x10/0x10 [ 150.012209][ T6902] ? ref_tracker_free+0x63a/0x7d0 [ 150.012233][ T6902] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 150.012263][ T6902] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 150.012286][ T6902] ? __pfx_nl80211_post_doit+0x10/0x10 [ 150.012307][ T6902] ? __pfx_ref_tracker_free+0x10/0x10 [ 150.012344][ T6902] netlink_rcv_skb+0x208/0x470 [ 150.012363][ T6902] ? __pfx_genl_rcv_msg+0x10/0x10 [ 150.012387][ T6902] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 150.012422][ T6902] ? down_read+0x1ad/0x2e0 [ 150.012452][ T6902] genl_rcv+0x28/0x40 [ 150.012472][ T6902] netlink_unicast+0x75b/0x8d0 [ 150.012511][ T6902] netlink_sendmsg+0x805/0xb30 [ 150.012541][ T6902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.012564][ T6902] ? aa_sock_msg_perm+0x94/0x160 [ 150.012590][ T6902] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 150.012613][ T6902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.012633][ T6902] __sock_sendmsg+0x21c/0x270 [ 150.012665][ T6902] ____sys_sendmsg+0x505/0x830 [ 150.012692][ T6902] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.012723][ T6902] ? import_iovec+0x74/0xa0 [ 150.012747][ T6902] ___sys_sendmsg+0x21f/0x2a0 [ 150.012770][ T6902] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.012832][ T6902] ? __fget_files+0x2a/0x420 [ 150.012852][ T6902] ? __fget_files+0x3a0/0x420 [ 150.012885][ T6902] __x64_sys_sendmsg+0x19b/0x260 [ 150.012909][ T6902] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 150.012926][ T6902] ? perf_trace_preemptirq_template+0xa3/0x340 [ 150.012960][ T6902] ? __pfx_ksys_write+0x10/0x10 [ 150.012975][ T6902] ? rcu_is_watching+0x15/0xb0 [ 150.012997][ T6902] ? do_syscall_64+0xbe/0x3b0 [ 150.013026][ T6902] do_syscall_64+0xfa/0x3b0 [ 150.013049][ T6902] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.013080][ T6902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.013096][ T6902] ? clear_bhb_loop+0x60/0xb0 [ 150.013117][ T6902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.013133][ T6902] RIP: 0033:0x7f7b2df8e929 [ 150.013149][ T6902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.013163][ T6902] RSP: 002b:00007f7b2ede1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.013181][ T6902] RAX: ffffffffffffffda RBX: 00007f7b2e1b5fa0 RCX: 00007f7b2df8e929 [ 150.013193][ T6902] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 150.013204][ T6902] RBP: 00007f7b2ede1090 R08: 0000000000000000 R09: 0000000000000000 [ 150.013214][ T6902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.013224][ T6902] R13: 0000000000000000 R14: 00007f7b2e1b5fa0 R15: 00007ffcaf7b1358 [ 150.013255][ T6902] [ 151.104943][ T6925] netlink: 'syz.0.244': attribute type 46 has an invalid length. [ 151.872046][ T6953] netlink: 'syz.0.251': attribute type 10 has an invalid length. [ 151.882893][ T6949] FAULT_INJECTION: forcing a failure. [ 151.882893][ T6949] name failslab, interval 1, probability 0, space 0, times 0 [ 151.935993][ T6949] CPU: 1 UID: 0 PID: 6949 Comm: syz.4.250 Not tainted 6.15.0-syzkaller-g3b55a9e6738b #0 PREEMPT(full) [ 151.936019][ T6949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 151.936030][ T6949] Call Trace: [ 151.936037][ T6949] [ 151.936045][ T6949] dump_stack_lvl+0x189/0x250 [ 151.936076][ T6949] ? __pfx____ratelimit+0x10/0x10 [ 151.936100][ T6949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.936126][ T6949] ? __pfx__printk+0x10/0x10 [ 151.936147][ T6949] ? __pfx___might_resched+0x10/0x10 [ 151.936170][ T6949] ? fs_reclaim_acquire+0x7d/0x100 [ 151.936196][ T6949] should_fail_ex+0x414/0x560 [ 151.936226][ T6949] should_failslab+0xa8/0x100 [ 151.936247][ T6949] __kmalloc_noprof+0xcb/0x4f0 [ 151.936265][ T6949] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 151.936295][ T6949] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 151.936327][ T6949] genl_family_rcv_msg_doit+0xb8/0x300 [ 151.936357][ T6949] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 151.936383][ T6949] ? rcu_is_watching+0x15/0xb0 [ 151.936403][ T6949] ? apparmor_capable+0x137/0x1b0 [ 151.936423][ T6949] ? bpf_lsm_capable+0x9/0x20 [ 151.936439][ T6949] ? security_capable+0x7e/0x2e0 [ 151.936469][ T6949] genl_rcv_msg+0x60e/0x790 [ 151.936499][ T6949] ? __pfx_genl_rcv_msg+0x10/0x10 [ 151.936519][ T6949] ? ref_tracker_free+0x63a/0x7d0 [ 151.936542][ T6949] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 151.936563][ T6949] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 151.936586][ T6949] ? __pfx_nl80211_post_doit+0x10/0x10 [ 151.936608][ T6949] ? __pfx_ref_tracker_free+0x10/0x10 [ 151.936643][ T6949] netlink_rcv_skb+0x208/0x470 [ 151.936662][ T6949] ? __pfx_genl_rcv_msg+0x10/0x10 [ 151.936687][ T6949] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 151.936722][ T6949] ? down_read+0x1ad/0x2e0 [ 151.936751][ T6949] genl_rcv+0x28/0x40 [ 151.936771][ T6949] netlink_unicast+0x75b/0x8d0 [ 151.936808][ T6949] netlink_sendmsg+0x805/0xb30 [ 151.936836][ T6949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.936857][ T6949] ? aa_sock_msg_perm+0x94/0x160 [ 151.936881][ T6949] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 151.936905][ T6949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.936923][ T6949] __sock_sendmsg+0x21c/0x270 [ 151.936951][ T6949] ____sys_sendmsg+0x505/0x830 [ 151.936977][ T6949] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.937005][ T6949] ? import_iovec+0x74/0xa0 [ 151.937028][ T6949] ___sys_sendmsg+0x21f/0x2a0 [ 151.937049][ T6949] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.937066][ T6949] ? migrate_enable+0x29c/0x3c0 [ 151.937120][ T6949] ? __fget_files+0x2a/0x420 [ 151.937139][ T6949] ? __fget_files+0x3a0/0x420 [ 151.937177][ T6949] __x64_sys_sendmsg+0x19b/0x260 [ 151.937199][ T6949] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 151.937228][ T6949] ? irqentry_exit_to_user_mode+0xd1/0x120 [ 151.937259][ T6949] ? do_syscall_64+0xbe/0x3b0 [ 151.937287][ T6949] do_syscall_64+0xfa/0x3b0 [ 151.937311][ T6949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.937327][ T6949] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 151.937345][ T6949] ? clear_bhb_loop+0x60/0xb0 [ 151.937366][ T6949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.937383][ T6949] RIP: 0033:0x7f00f858e929 [ 151.937399][ T6949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.937413][ T6949] RSP: 002b:00007f00f63f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.937431][ T6949] RAX: ffffffffffffffda RBX: 00007f00f87b6080 RCX: 00007f00f858e929 [ 151.937443][ T6949] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000c [ 151.937454][ T6949] RBP: 00007f00f63f6090 R08: 0000000000000000 R09: 0000000000000000 [ 151.937464][ T6949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.937474][ T6949] R13: 0000000000000000 R14: 00007f00f87b6080 R15: 00007ffc022f7bd8 [ 151.937503][ T6949] [ 152.429129][ T6953] veth0_macvtap: left promiscuous mode [ 152.442249][ T6953] veth0_macvtap: entered promiscuous mode [ 152.470067][ T6953] team0: Device macvtap0 failed to register rx_handler [ 152.628314][ T6953] veth0_macvtap: left promiscuous mode [ 153.089325][ T6965] netlink: 'syz.2.257': attribute type 46 has an invalid length. [ 153.102145][ T6968] FAULT_INJECTION: forcing a failure. [ 153.102145][ T6968] name failslab, interval 1, probability 0, space 0, times 0 [ 153.160248][ T6968] CPU: 1 UID: 0 PID: 6968 Comm: syz.3.255 Not tainted 6.15.0-syzkaller-g3b55a9e6738b #0 PREEMPT(full) [ 153.160275][ T6968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 153.160286][ T6968] Call Trace: [ 153.160294][ T6968] [ 153.160302][ T6968] dump_stack_lvl+0x189/0x250 [ 153.160337][ T6968] ? __pfx____ratelimit+0x10/0x10 [ 153.160362][ T6968] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.160390][ T6968] ? __pfx__printk+0x10/0x10 [ 153.160415][ T6968] ? __pfx___might_resched+0x10/0x10 [ 153.160438][ T6968] should_fail_ex+0x414/0x560 [ 153.160468][ T6968] should_failslab+0xa8/0x100 [ 153.160491][ T6968] __kmalloc_cache_noprof+0x70/0x3d0 [ 153.160511][ T6968] ? rtnl_newlink+0xed/0x1c70 [ 153.160536][ T6968] ? kasan_save_free_info+0x46/0x50 [ 153.160564][ T6968] rtnl_newlink+0xed/0x1c70 [ 153.160589][ T6968] ? netlink_sendmsg+0x805/0xb30 [ 153.160606][ T6968] ? __sock_sendmsg+0x21c/0x270 [ 153.160628][ T6968] ? ____sys_sendmsg+0x505/0x830 [ 153.160645][ T6968] ? ___sys_sendmsg+0x21f/0x2a0 [ 153.160662][ T6968] ? __x64_sys_sendmsg+0x19b/0x260 [ 153.160680][ T6968] ? do_syscall_64+0xfa/0x3b0 [ 153.160703][ T6968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.160729][ T6968] ? __pfx_rtnl_newlink+0x10/0x10 [ 153.160761][ T6968] ? perf_trace_preemptirq_template+0xa3/0x340 [ 153.160784][ T6968] ? kasan_quarantine_put+0xdd/0x220 [ 153.160812][ T6968] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 153.160851][ T6968] ? perf_trace_preemptirq_template+0xa3/0x340 [ 153.160874][ T6968] ? __local_bh_enable_ip+0x12d/0x1c0 [ 153.160903][ T6968] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 153.160932][ T6968] ? perf_trace_lock+0xec/0x3b0 [ 153.160948][ T6968] ? nlmon_xmit+0xb0/0x100 [ 153.160972][ T6968] ? __local_bh_enable_ip+0x12d/0x1c0 [ 153.160998][ T6968] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.161022][ T6968] ? __local_bh_enable_ip+0x12d/0x1c0 [ 153.161049][ T6968] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 153.161080][ T6968] ? __dev_queue_xmit+0x27e/0x3a70 [ 153.161107][ T6968] ? perf_trace_lock+0xec/0x3b0 [ 153.161129][ T6968] ? __pfx_perf_trace_lock+0x10/0x10 [ 153.161154][ T6968] ? rcu_read_unlock+0x87/0xa0 [ 153.161191][ T6968] ? __pfx_rtnl_newlink+0x10/0x10 [ 153.161218][ T6968] rtnetlink_rcv_msg+0x7cc/0xb70 [ 153.161249][ T6968] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 153.161275][ T6968] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 153.161300][ T6968] ? ref_tracker_free+0x63a/0x7d0 [ 153.161324][ T6968] ? __copy_skb_header+0xa7/0x550 [ 153.161347][ T6968] ? __pfx_ref_tracker_free+0x10/0x10 [ 153.161373][ T6968] ? __skb_clone+0x63/0x7a0 [ 153.161401][ T6968] netlink_rcv_skb+0x208/0x470 [ 153.161420][ T6968] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 153.161449][ T6968] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 153.161492][ T6968] ? netlink_deliver_tap+0x2e/0x1b0 [ 153.161508][ T6968] ? netlink_deliver_tap+0x2e/0x1b0 [ 153.161530][ T6968] netlink_unicast+0x75b/0x8d0 [ 153.161566][ T6968] netlink_sendmsg+0x805/0xb30 [ 153.161592][ T6968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.161613][ T6968] ? aa_sock_msg_perm+0x94/0x160 [ 153.161638][ T6968] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 153.161661][ T6968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.161679][ T6968] __sock_sendmsg+0x21c/0x270 [ 153.161705][ T6968] ____sys_sendmsg+0x505/0x830 [ 153.161729][ T6968] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.161756][ T6968] ? import_iovec+0x74/0xa0 [ 153.161779][ T6968] ___sys_sendmsg+0x21f/0x2a0 [ 153.161800][ T6968] ? __pfx____sys_sendmsg+0x10/0x10 [ 153.161838][ T6968] ? __fget_files+0x2a/0x420 [ 153.161869][ T6968] ? __fget_files+0x2a/0x420 [ 153.161888][ T6968] ? __fget_files+0x3a0/0x420 [ 153.161924][ T6968] __x64_sys_sendmsg+0x19b/0x260 [ 153.161946][ T6968] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 153.161963][ T6968] ? perf_trace_preemptirq_template+0xa3/0x340 [ 153.161995][ T6968] ? __pfx_ksys_write+0x10/0x10 [ 153.162009][ T6968] ? rcu_is_watching+0x15/0xb0 [ 153.162030][ T6968] ? do_syscall_64+0xbe/0x3b0 [ 153.162057][ T6968] do_syscall_64+0xfa/0x3b0 [ 153.162080][ T6968] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.162102][ T6968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.162118][ T6968] ? clear_bhb_loop+0x60/0xb0 [ 153.162139][ T6968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.162155][ T6968] RIP: 0033:0x7f7b2df8e929 [ 153.162172][ T6968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.162186][ T6968] RSP: 002b:00007f7b2ede1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.162204][ T6968] RAX: ffffffffffffffda RBX: 00007f7b2e1b5fa0 RCX: 00007f7b2df8e929 [ 153.162216][ T6968] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 153.162226][ T6968] RBP: 00007f7b2ede1090 R08: 0000000000000000 R09: 0000000000000000 [ 153.162237][ T6968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.162247][ T6968] R13: 0000000000000000 R14: 00007f7b2e1b5fa0 R15: 00007ffcaf7b1358 [ 153.162273][ T6968] [ 153.697201][ T6976] netlink: 'syz.4.260': attribute type 21 has an invalid length. [ 153.839797][ T6969] bond0: entered allmulticast mode [ 153.844999][ T6969] bond_slave_0: entered allmulticast mode [ 153.930534][ T6969] bond_slave_1: entered allmulticast mode [ 154.048313][ T6980] FAULT_INJECTION: forcing a failure. [ 154.048313][ T6980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.146923][ T6980] CPU: 0 UID: 0 PID: 6980 Comm: syz.3.261 Not tainted 6.15.0-syzkaller-g3b55a9e6738b #0 PREEMPT(full) [ 154.146949][ T6980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.146959][ T6980] Call Trace: [ 154.146967][ T6980] [ 154.146977][ T6980] dump_stack_lvl+0x189/0x250 [ 154.147013][ T6980] ? __pfx____ratelimit+0x10/0x10 [ 154.147042][ T6980] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.147072][ T6980] ? __pfx__printk+0x10/0x10 [ 154.147097][ T6980] ? __might_fault+0xb0/0x130 [ 154.147126][ T6980] ? __might_fault+0xb0/0x130 [ 154.147162][ T6980] should_fail_ex+0x414/0x560 [ 154.147203][ T6980] _copy_from_iter+0x1db/0x16f0 [ 154.147246][ T6980] ? rcu_is_watching+0x15/0xb0 [ 154.147270][ T6980] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 154.147296][ T6980] ? __pfx__copy_from_iter+0x10/0x10 [ 154.147332][ T6980] ? __build_skb_around+0x257/0x3e0 [ 154.147362][ T6980] ? netlink_sendmsg+0x642/0xb30 [ 154.147379][ T6980] ? skb_put+0x11b/0x210 [ 154.147411][ T6980] netlink_sendmsg+0x6b2/0xb30 [ 154.147458][ T6980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.147488][ T6980] ? aa_sock_msg_perm+0x94/0x160 [ 154.147520][ T6980] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 154.147545][ T6980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.147569][ T6980] __sock_sendmsg+0x21c/0x270 [ 154.147607][ T6980] ____sys_sendmsg+0x505/0x830 [ 154.147647][ T6980] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.147695][ T6980] ? import_iovec+0x74/0xa0 [ 154.147746][ T6980] ___sys_sendmsg+0x21f/0x2a0 [ 154.147778][ T6980] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.147868][ T6980] ? __fget_files+0x2a/0x420 [ 154.147934][ T6980] ? __fget_files+0x2a/0x420 [ 154.147956][ T6980] ? __fget_files+0x3a0/0x420 [ 154.148010][ T6980] __x64_sys_sendmsg+0x19b/0x260 [ 154.148044][ T6980] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 154.148063][ T6980] ? perf_trace_preemptirq_template+0xa3/0x340 [ 154.148119][ T6980] ? __pfx_ksys_write+0x10/0x10 [ 154.148135][ T6980] ? rcu_is_watching+0x15/0xb0 [ 154.148170][ T6980] ? do_syscall_64+0xbe/0x3b0 [ 154.148228][ T6980] do_syscall_64+0xfa/0x3b0 [ 154.148255][ T6980] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.148283][ T6980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.148304][ T6980] ? clear_bhb_loop+0x60/0xb0 [ 154.148338][ T6980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.148358][ T6980] RIP: 0033:0x7f7b2df8e929 [ 154.148379][ T6980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.148395][ T6980] RSP: 002b:00007f7b2ede1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.148415][ T6980] RAX: ffffffffffffffda RBX: 00007f7b2e1b5fa0 RCX: 00007f7b2df8e929 [ 154.148430][ T6980] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 154.148442][ T6980] RBP: 00007f7b2ede1090 R08: 0000000000000000 R09: 0000000000000000 [ 154.148454][ T6980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.148465][ T6980] R13: 0000000000000000 R14: 00007f7b2e1b5fa0 R15: 00007ffcaf7b1358 [ 154.148527][ T6980] [ 156.976984][ T7011] netlink: 'syz.4.273': attribute type 46 has an invalid length. [ 157.209446][ T7012] delete_channel: no stack [ 157.496645][ T7035] openvswitch: netlink: Flow key attr not present in new flow. [ 157.823123][ T7047] netlink: 'syz.0.285': attribute type 21 has an invalid length. [ 157.840712][ T7047] FAULT_INJECTION: forcing a failure. [ 157.840712][ T7047] name failslab, interval 1, probability 0, space 0, times 0 [ 157.867189][ T7047] CPU: 1 UID: 0 PID: 7047 Comm: syz.0.285 Not tainted 6.15.0-syzkaller-g3b55a9e6738b #0 PREEMPT(full) [ 157.867212][ T7047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.867223][ T7047] Call Trace: [ 157.867231][ T7047] [ 157.867240][ T7047] dump_stack_lvl+0x189/0x250 [ 157.867276][ T7047] ? __pfx____ratelimit+0x10/0x10 [ 157.867304][ T7047] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.867333][ T7047] ? __pfx__printk+0x10/0x10 [ 157.867370][ T7047] ? __pfx___might_resched+0x10/0x10 [ 157.867405][ T7047] should_fail_ex+0x414/0x560 [ 157.867447][ T7047] should_failslab+0xa8/0x100 [ 157.867474][ T7047] __kmalloc_noprof+0xcb/0x4f0 [ 157.867494][ T7047] ? fib_trie_table+0x33/0x1d0 [ 157.867530][ T7047] fib_trie_table+0x33/0x1d0 [ 157.867562][ T7047] fib_new_table+0x135/0x2d0 [ 157.867605][ T7047] inet_rtm_newroute+0x115/0x210 [ 157.867639][ T7047] ? __pfx_perf_trace_lock+0x10/0x10 [ 157.867660][ T7047] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 157.867753][ T7047] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 157.867781][ T7047] rtnetlink_rcv_msg+0x7cc/0xb70 [ 157.867823][ T7047] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 157.867850][ T7047] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 157.867874][ T7047] ? ref_tracker_free+0x63a/0x7d0 [ 157.867911][ T7047] ? perf_trace_run_bpf_submit+0xee/0x170 [ 157.867965][ T7047] netlink_rcv_skb+0x208/0x470 [ 157.867991][ T7047] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 157.868026][ T7047] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 157.868082][ T7047] ? netlink_deliver_tap+0x2e/0x1b0 [ 157.868101][ T7047] ? netlink_deliver_tap+0x2e/0x1b0 [ 157.868141][ T7047] netlink_unicast+0x75b/0x8d0 [ 157.868201][ T7047] netlink_sendmsg+0x805/0xb30 [ 157.868270][ T7047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.868305][ T7047] ? aa_sock_msg_perm+0x94/0x160 [ 157.868340][ T7047] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 157.868368][ T7047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.868396][ T7047] __sock_sendmsg+0x21c/0x270 [ 157.868436][ T7047] ____sys_sendmsg+0x505/0x830 [ 157.868480][ T7047] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.868535][ T7047] ? import_iovec+0x74/0xa0 [ 157.868574][ T7047] ___sys_sendmsg+0x21f/0x2a0 [ 157.868609][ T7047] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.868699][ T7047] ? __fget_files+0x2a/0x420 [ 157.868768][ T7047] ? __fget_files+0x2a/0x420 [ 157.868792][ T7047] ? __fget_files+0x3a0/0x420 [ 157.868851][ T7047] __x64_sys_sendmsg+0x19b/0x260 [ 157.868886][ T7047] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 157.868906][ T7047] ? perf_trace_preemptirq_template+0xa3/0x340 [ 157.868963][ T7047] ? __pfx_ksys_write+0x10/0x10 [ 157.868980][ T7047] ? rcu_is_watching+0x15/0xb0 [ 157.869017][ T7047] ? do_syscall_64+0xbe/0x3b0 [ 157.869060][ T7047] do_syscall_64+0xfa/0x3b0 [ 157.869087][ T7047] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.869115][ T7047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.869136][ T7047] ? clear_bhb_loop+0x60/0xb0 [ 157.869169][ T7047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.869189][ T7047] RIP: 0033:0x7f18acd8e929 [ 157.869210][ T7047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.869226][ T7047] RSP: 002b:00007f18adb14038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.869246][ T7047] RAX: ffffffffffffffda RBX: 00007f18acfb5fa0 RCX: 00007f18acd8e929 [ 157.869260][ T7047] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000004 [ 157.869272][ T7047] RBP: 00007f18adb14090 R08: 0000000000000000 R09: 0000000000000000 [ 157.869284][ T7047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.869294][ T7047] R13: 0000000000000000 R14: 00007f18acfb5fa0 R15: 00007ffebba22438 [ 157.869357][ T7047] [ 158.296991][ T7052] netlink: 'syz.1.287': attribute type 46 has an invalid length. [ 160.910072][ T7066] netlink: 'syz.0.291': attribute type 21 has an invalid length. [ 160.956804][ T7066] netlink: 152 bytes leftover after parsing attributes in process `syz.0.291'. [ 161.023191][ T7073] FAULT_INJECTION: forcing a failure. [ 161.023191][ T7073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.137467][ T7073] CPU: 1 UID: 0 PID: 7073 Comm: syz.3.294 Not tainted 6.15.0-syzkaller-g3b55a9e6738b #0 PREEMPT(full) [ 161.137504][ T7073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 161.137517][ T7073] Call Trace: [ 161.137525][ T7073] [ 161.137535][ T7073] dump_stack_lvl+0x189/0x250 [ 161.137573][ T7073] ? __pfx____ratelimit+0x10/0x10 [ 161.137604][ T7073] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.137637][ T7073] ? __pfx__printk+0x10/0x10 [ 161.137674][ T7073] should_fail_ex+0x414/0x560 [ 161.137710][ T7073] _copy_to_user+0x31/0xb0 [ 161.137736][ T7073] simple_read_from_buffer+0xe1/0x170 [ 161.137766][ T7073] proc_fail_nth_read+0x1df/0x250 [ 161.137798][ T7073] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 161.137829][ T7073] ? rw_verify_area+0x258/0x650 [ 161.137849][ T7073] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 161.137877][ T7073] vfs_read+0x200/0x980 [ 161.137903][ T7073] ? __pfx___mutex_lock+0x10/0x10 [ 161.137935][ T7073] ? __pfx_vfs_read+0x10/0x10 [ 161.137956][ T7073] ? __fget_files+0x2a/0x420 [ 161.137986][ T7073] ? __fget_files+0x3a0/0x420 [ 161.138009][ T7073] ? __fget_files+0x2a/0x420 [ 161.138043][ T7073] ksys_read+0x145/0x250 [ 161.138067][ T7073] ? __pfx_ksys_read+0x10/0x10 [ 161.138084][ T7073] ? rcu_is_watching+0x15/0xb0 [ 161.138109][ T7073] ? do_syscall_64+0xbe/0x3b0 [ 161.138143][ T7073] do_syscall_64+0xfa/0x3b0 [ 161.138170][ T7073] ? lockdep_hardirqs_on+0x9c/0x150 [ 161.138197][ T7073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.138217][ T7073] ? clear_bhb_loop+0x60/0xb0 [ 161.138242][ T7073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.138262][ T7073] RIP: 0033:0x7f7b2df8d33c [ 161.138281][ T7073] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 161.138298][ T7073] RSP: 002b:00007f7b2ede1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 161.138319][ T7073] RAX: ffffffffffffffda RBX: 00007f7b2e1b5fa0 RCX: 00007f7b2df8d33c [ 161.138334][ T7073] RDX: 000000000000000f RSI: 00007f7b2ede10a0 RDI: 0000000000000005 [ 161.138346][ T7073] RBP: 00007f7b2ede1090 R08: 0000000000000000 R09: 0000000000000000 [ 161.138358][ T7073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.138370][ T7073] R13: 0000000000000000 R14: 00007f7b2e1b5fa0 R15: 00007ffcaf7b1358 [ 161.138403][ T7073] [ 161.497483][ T7081] netlink: 'syz.4.296': attribute type 21 has an invalid length. [ 161.505791][ T7081] netlink: 156 bytes leftover after parsing attributes in process `syz.4.296'. [ 161.583357][ T7092] netlink: 'syz.2.300': attribute type 46 has an invalid length. [ 162.043312][ T7108] netlink: 'syz.2.305': attribute type 29 has an invalid length. [ 162.086993][ T7108] netlink: 'syz.2.305': attribute type 29 has an invalid length. [ 162.110650][ T7108] netlink: 'syz.2.305': attribute type 29 has an invalid length. [ 162.167259][ T7111] netlink: 'syz.2.305': attribute type 29 has an invalid length. [ 162.410516][ T7113] FAULT_INJECTION: forcing a failure. [ 162.410516][ T7113] name failslab, interval 1, probability 0, space 0, times 0 [ 162.473489][ T7113] CPU: 1 UID: 0 PID: 7113 Comm: syz.4.307 Not tainted 6.15.0-syzkaller-g3b55a9e6738b #0 PREEMPT(full) [ 162.473512][ T7113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.473522][ T7113] Call Trace: [ 162.473530][ T7113] [ 162.473536][ T7113] dump_stack_lvl+0x189/0x250 [ 162.473568][ T7113] ? __pfx____ratelimit+0x10/0x10 [ 162.473591][ T7113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.473616][ T7113] ? __pfx__printk+0x10/0x10 [ 162.473637][ T7113] ? __pfx___might_resched+0x10/0x10 [ 162.473652][ T7113] ? fs_reclaim_acquire+0x7d/0x100 [ 162.473677][ T7113] should_fail_ex+0x414/0x560 [ 162.473704][ T7113] should_failslab+0xa8/0x100 [ 162.473725][ T7113] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 162.473744][ T7113] ? page_pool_create_percpu+0x76/0xbe0 [ 162.473769][ T7113] page_pool_create_percpu+0x76/0xbe0 [ 162.473788][ T7113] ? __kvmalloc_node_noprof+0x331/0x5f0 [ 162.473806][ T7113] ? bpf_test_run_xdp_live+0x1b5/0x1b10 [ 162.473828][ T7113] bpf_test_run_xdp_live+0x1ca/0x1b10 [ 162.473849][ T7113] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 162.473879][ T7113] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 162.473911][ T7113] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 162.473927][ T7113] ? bpf_dispatcher_xdp+0x800/0x1000 [ 162.473945][ T7113] ? bpf_dispatcher_xdp+0x800/0x1000 [ 162.474020][ T7113] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 162.474047][ T7113] ? _copy_from_user+0x94/0xb0 [ 162.474067][ T7113] ? bpf_test_init+0x133/0x170 [ 162.474081][ T7113] ? xdp_convert_md_to_buff+0x5b/0x330 [ 162.474102][ T7113] bpf_prog_test_run_xdp+0x713/0x1000 [ 162.474143][ T7113] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 162.474167][ T7113] ? __fget_files+0x2a/0x420 [ 162.474195][ T7113] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 162.474215][ T7113] bpf_prog_test_run+0x2c7/0x340 [ 162.474247][ T7113] __sys_bpf+0x4a4/0x860 [ 162.474274][ T7113] ? __pfx___sys_bpf+0x10/0x10 [ 162.474310][ T7113] ? ksys_write+0x22a/0x250 [ 162.474331][ T7113] ? __pfx_ksys_write+0x10/0x10 [ 162.474347][ T7113] ? rcu_is_watching+0x15/0xb0 [ 162.474371][ T7113] __x64_sys_bpf+0x7c/0x90 [ 162.474408][ T7113] do_syscall_64+0xfa/0x3b0 [ 162.474431][ T7113] ? lockdep_hardirqs_on+0x9c/0x150 [ 162.474454][ T7113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.474471][ T7113] ? clear_bhb_loop+0x60/0xb0 [ 162.474491][ T7113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.474508][ T7113] RIP: 0033:0x7f00f858e929 [ 162.474523][ T7113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.474537][ T7113] RSP: 002b:00007f00f931d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 162.474555][ T7113] RAX: ffffffffffffffda RBX: 00007f00f87b5fa0 RCX: 00007f00f858e929 [ 162.474567][ T7113] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 162.474577][ T7113] RBP: 00007f00f931d090 R08: 0000000000000000 R09: 0000000000000000 [ 162.474587][ T7113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.474596][ T7113] R13: 0000000000000000 R14: 00007f00f87b5fa0 R15: 00007ffc022f7bd8 [ 162.474623][ T7113] [ 162.934481][ T7127] netlink: 'syz.3.313': attribute type 46 has an invalid length. [ 163.198056][ T7136] FAULT_INJECTION: forcing a failure. [ 163.198056][ T7136] name failslab, interval 1, probability 0, space 0, times 0 [ 163.215092][ T7136] CPU: 1 UID: 0 PID: 7136 Comm: syz.3.315 Not tainted 6.15.0-syzkaller-g3b55a9e6738b #0 PREEMPT(full) [ 163.215134][ T7136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 163.215146][ T7136] Call Trace: [ 163.215154][ T7136] [ 163.215162][ T7136] dump_stack_lvl+0x189/0x250 [ 163.215197][ T7136] ? __pfx____ratelimit+0x10/0x10 [ 163.215223][ T7136] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.215252][ T7136] ? __pfx__printk+0x10/0x10 [ 163.215277][ T7136] ? __pfx___might_resched+0x10/0x10 [ 163.215294][ T7136] ? fs_reclaim_acquire+0x7d/0x100 [ 163.215324][ T7136] should_fail_ex+0x414/0x560 [ 163.215366][ T7136] should_failslab+0xa8/0x100 [ 163.215388][ T7136] kmem_cache_alloc_noprof+0x73/0x3c0 [ 163.215423][ T7136] ? skb_clone+0x212/0x3a0 [ 163.215451][ T7136] skb_clone+0x212/0x3a0 [ 163.215471][ T7136] ? pfkey_promisc+0x27f/0x390 [ 163.215493][ T7136] pfkey_promisc+0x9b/0x390 [ 163.215515][ T7136] pfkey_sendmsg+0xbfb/0x1090 [ 163.215552][ T7136] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 163.215601][ T7136] ? aa_sock_msg_perm+0x94/0x160 [ 163.215629][ T7136] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 163.215657][ T7136] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 163.215676][ T7136] __sock_sendmsg+0x21c/0x270 [ 163.215706][ T7136] ____sys_sendmsg+0x505/0x830 [ 163.215734][ T7136] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.215767][ T7136] ? import_iovec+0x74/0xa0 [ 163.215793][ T7136] ___sys_sendmsg+0x21f/0x2a0 [ 163.215817][ T7136] ? __pfx____sys_sendmsg+0x10/0x10 [ 163.215865][ T7136] ? __fget_files+0x2a/0x420 [ 163.215903][ T7136] ? __fget_files+0x2a/0x420 [ 163.215924][ T7136] ? __fget_files+0x3a0/0x420 [ 163.215959][ T7136] __x64_sys_sendmsg+0x19b/0x260 [ 163.215984][ T7136] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 163.216018][ T7136] ? __pfx_ksys_write+0x10/0x10 [ 163.216034][ T7136] ? rcu_is_watching+0x15/0xb0 [ 163.216058][ T7136] ? do_syscall_64+0xbe/0x3b0 [ 163.216095][ T7136] do_syscall_64+0xfa/0x3b0 [ 163.216121][ T7136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.216138][ T7136] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 163.216157][ T7136] ? clear_bhb_loop+0x60/0xb0 [ 163.216180][ T7136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.216198][ T7136] RIP: 0033:0x7f7b2df8e929 [ 163.216215][ T7136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.216231][ T7136] RSP: 002b:00007f7b2edc0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.216250][ T7136] RAX: ffffffffffffffda RBX: 00007f7b2e1b6080 RCX: 00007f7b2df8e929 [ 163.216263][ T7136] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 163.216274][ T7136] RBP: 00007f7b2edc0090 R08: 0000000000000000 R09: 0000000000000000 [ 163.216285][ T7136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.216295][ T7136] R13: 0000000000000000 R14: 00007f7b2e1b6080 R15: 00007ffcaf7b1358 [ 163.216328][ T7136] [ 164.916740][ T7140] netlink: 'syz.0.317': attribute type 29 has an invalid length. [ 164.933878][ T7140] netlink: 'syz.0.317': attribute type 29 has an invalid length. [ 164.942724][ T7140] netlink: 'syz.0.317': attribute type 29 has an invalid length. [ 165.379211][ T7160] netlink: 'syz.4.325': attribute type 46 has an invalid length. [ 165.393859][ T7162] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.326'. [ 165.657178][ T7170] FAULT_INJECTION: forcing a failure. [ 165.657178][ T7170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.683274][ T7170] CPU: 0 UID: 0 PID: 7170 Comm: syz.1.329 Not tainted 6.15.0-syzkaller-g3b55a9e6738b #0 PREEMPT(full) [ 165.683298][ T7170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 165.683306][ T7170] Call Trace: [ 165.683313][ T7170] [ 165.683321][ T7170] dump_stack_lvl+0x189/0x250 [ 165.683351][ T7170] ? __pfx____ratelimit+0x10/0x10 [ 165.683375][ T7170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.683401][ T7170] ? __pfx__printk+0x10/0x10 [ 165.683421][ T7170] ? __might_fault+0xb0/0x130 [ 165.683450][ T7170] should_fail_ex+0x414/0x560 [ 165.683480][ T7170] _copy_from_iter+0x1db/0x16f0 [ 165.683511][ T7170] ? sock_alloc_send_pskb+0x875/0x990 [ 165.683539][ T7170] ? __pfx__copy_from_iter+0x10/0x10 [ 165.683575][ T7170] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 165.683600][ T7170] skb_copy_datagram_from_iter+0xf5/0x720 [ 165.683628][ T7170] ? skb_put+0x11b/0x210 [ 165.683650][ T7170] tun_get_user+0x15c3/0x3ce0 [ 165.683703][ T7170] ? aa_file_perm+0x11f/0xed0 [ 165.683733][ T7170] ? __pfx_tun_get_user+0x10/0x10 [ 165.683748][ T7170] ? aa_file_perm+0x11f/0xed0 [ 165.683773][ T7170] ? aa_file_perm+0x3e7/0xed0 [ 165.683812][ T7170] ? ref_tracker_alloc+0x318/0x460 [ 165.683837][ T7170] ? __lock_acquire+0xab9/0xd20 [ 165.683865][ T7170] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 165.683897][ T7170] ? tun_get+0x1c/0x2f0 [ 165.683920][ T7170] ? tun_get+0x1c/0x2f0 [ 165.683937][ T7170] ? tun_get+0x1c/0x2f0 [ 165.683970][ T7170] tun_chr_write_iter+0x113/0x200 [ 165.684000][ T7170] vfs_write+0x54b/0xa90 [ 165.684023][ T7170] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 165.684050][ T7170] ? __pfx_vfs_write+0x10/0x10 [ 165.684077][ T7170] ? __fget_files+0x2a/0x420 [ 165.684107][ T7170] ksys_write+0x145/0x250 [ 165.684127][ T7170] ? __pfx_ksys_write+0x10/0x10 [ 165.684142][ T7170] ? rcu_is_watching+0x15/0xb0 [ 165.684171][ T7170] ? do_syscall_64+0xbe/0x3b0 [ 165.684200][ T7170] do_syscall_64+0xfa/0x3b0 [ 165.684240][ T7170] ? lockdep_hardirqs_on+0x9c/0x150 [ 165.684264][ T7170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.684287][ T7170] ? clear_bhb_loop+0x60/0xb0 [ 165.684310][ T7170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.684328][ T7170] RIP: 0033:0x7f621238e929 [ 165.684345][ T7170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.684360][ T7170] RSP: 002b:00007f62101f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 165.684380][ T7170] RAX: ffffffffffffffda RBX: 00007f62125b5fa0 RCX: 00007f621238e929 [ 165.684393][ T7170] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8 [ 165.684405][ T7170] RBP: 00007f62101f6090 R08: 0000000000000000 R09: 0000000000000000 [ 165.684416][ T7170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.684426][ T7170] R13: 0000000000000000 R14: 00007f62125b5fa0 R15: 00007ffc1e099058 [ 165.684455][ T7170] [ 169.475542][ T7201] netlink: 'syz.2.338': attribute type 46 has an invalid length. [ 176.433539][ T7231] netlink: 60 bytes leftover after parsing attributes in process `syz.2.346'. [ 176.444304][ T7249] netlink: 'syz.1.351': attribute type 29 has an invalid length. [ 176.571970][ T7254] netlink: 'syz.4.352': attribute type 10 has an invalid length. [ 176.606145][ T7254] netlink: 2 bytes leftover after parsing attributes in process `syz.4.352'. [ 176.634084][ T7254] team0: entered promiscuous mode [ 176.644190][ T7254] team_slave_0: entered promiscuous mode [ 176.658809][ T7254] team_slave_1: entered promiscuous mode [ 176.683642][ T7254] bridge0: port 3(team0) entered blocking state [ 176.695331][ T7254] bridge0: port 3(team0) entered disabled state [ 176.721630][ T7254] team0: entered allmulticast mode [ 176.735978][ T7254] team_slave_0: entered allmulticast mode [ 176.752863][ T7254] team_slave_1: entered allmulticast mode [ 176.827967][ T7254] bridge0: port 3(team0) entered blocking state [ 176.834763][ T7254] bridge0: port 3(team0) entered forwarding state [ 176.912080][ T7259] netlink: 'syz.0.353': attribute type 29 has an invalid length. [ 177.017257][ T7258] netlink: 'syz.2.355': attribute type 46 has an invalid length. [ 177.051822][ T7261] netlink: 'syz.0.353': attribute type 29 has an invalid length. [ 177.104691][ T7264] netlink: 'syz.0.353': attribute type 29 has an invalid length. [ 177.113011][ T7267] netlink: 'syz.0.353': attribute type 29 has an invalid length. [ 177.157593][ T7271] netlink: 'syz.1.357': attribute type 10 has an invalid length. [ 177.180599][ T7271] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.357'. [ 177.222257][ T5157] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11 [ 177.414701][ T7281] netlink: 6955 bytes leftover after parsing attributes in process `syz.3.361'. [ 177.474761][ T7281] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.361'. [ 177.567917][ T7287] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.363'. [ 178.036670][ T7299] syzkaller0: entered promiscuous mode [ 178.294585][ T7299] syzkaller0: entered allmulticast mode [ 180.949529][ T7331] FAULT_INJECTION: forcing a failure. [ 180.949529][ T7331] name failslab, interval 1, probability 0, space 0, times 0 [ 180.976399][ T7331] CPU: 0 UID: 0 PID: 7331 Comm: syz.2.379 Not tainted 6.15.0-syzkaller-g3b55a9e6738b #0 PREEMPT(full) [ 180.976427][ T7331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 180.976438][ T7331] Call Trace: [ 180.976446][ T7331] [ 180.976455][ T7331] dump_stack_lvl+0x189/0x250 [ 180.976490][ T7331] ? __pfx____ratelimit+0x10/0x10 [ 180.976516][ T7331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.976545][ T7331] ? __pfx__printk+0x10/0x10 [ 180.976573][ T7331] ? __pfx___might_resched+0x10/0x10 [ 180.976597][ T7331] should_fail_ex+0x414/0x560 [ 180.976629][ T7331] should_failslab+0xa8/0x100 [ 180.976653][ T7331] __kmalloc_cache_noprof+0x70/0x3d0 [ 180.976672][ T7331] ? sctp_association_new+0x89/0x25f0 [ 180.976692][ T7331] ? __asan_memcpy+0x40/0x70 [ 180.976722][ T7331] sctp_association_new+0x89/0x25f0 [ 180.976743][ T7331] ? sctp_do_bind+0x65a/0x940 [ 180.976783][ T7331] sctp_connect_new_asoc+0x2c5/0x690 [ 180.976827][ T7331] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 180.976847][ T7331] ? __local_bh_enable_ip+0x12d/0x1c0 [ 180.976887][ T7331] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 180.976916][ T7331] ? security_sctp_bind_connect+0x7e/0x2e0 [ 180.976944][ T7331] sctp_sendmsg+0x155c/0x2810 [ 180.976982][ T7331] ? __pfx_sctp_sendmsg+0x10/0x10 [ 180.977018][ T7331] ? aa_sk_perm+0x81e/0x950 [ 180.977050][ T7331] ? __pfx_aa_sk_perm+0x10/0x10 [ 180.977079][ T7331] ? __might_fault+0xb0/0x130 [ 180.977097][ T7331] ? sock_rps_record_flow+0x19/0x410 [ 180.977130][ T7331] ? inet_sendmsg+0x2f4/0x370 [ 180.977164][ T7331] __sock_sendmsg+0x19c/0x270 [ 180.977197][ T7331] ____sys_sendmsg+0x505/0x830 [ 180.977228][ T7331] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.977264][ T7331] ? import_iovec+0x74/0xa0 [ 180.977291][ T7331] ___sys_sendmsg+0x21f/0x2a0 [ 180.977317][ T7331] ? __pfx____sys_sendmsg+0x10/0x10 [ 180.977369][ T7331] ? __fget_files+0x2a/0x420 [ 180.977410][ T7331] ? __fget_files+0x2a/0x420 [ 180.977443][ T7331] ? __fget_files+0x3a0/0x420 [ 180.977480][ T7331] __x64_sys_sendmsg+0x19b/0x260 [ 180.977506][ T7331] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 180.977542][ T7331] ? perf_trace_preemptirq_template+0xa3/0x340 [ 180.977585][ T7331] ? rcu_is_watching+0x15/0xb0 [ 180.977612][ T7331] ? do_syscall_64+0xbe/0x3b0 [ 180.977645][ T7331] do_syscall_64+0xfa/0x3b0 [ 180.977671][ T7331] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.977696][ T7331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.977715][ T7331] ? clear_bhb_loop+0x60/0xb0 [ 180.977741][ T7331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.977761][ T7331] RIP: 0033:0x7f9a5a98e929 [ 180.977780][ T7331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.977798][ T7331] RSP: 002b:00007f9a5b781038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.977820][ T7331] RAX: ffffffffffffffda RBX: 00007f9a5abb5fa0 RCX: 00007f9a5a98e929 [ 180.977836][ T7331] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 180.977849][ T7331] RBP: 00007f9a5b781090 R08: 0000000000000000 R09: 0000000000000000 [ 180.977861][ T7331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.977873][ T7331] R13: 0000000000000000 R14: 00007f9a5abb5fa0 R15: 00007ffff141db78 [ 180.977909][ T7331] [ 181.648733][ T7344] netlink: 'syz.3.384': attribute type 21 has an invalid length. [ 181.660428][ T7344] netlink: 14565 bytes leftover after parsing attributes in process `syz.3.384'. [ 183.125016][ T7316] netlink: 'syz.1.372': attribute type 46 has an invalid length. [ 183.135149][ T7345] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 183.145290][ T7345] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 183.165796][ T7345] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 183.422855][ T7352] netlink: 'syz.0.386': attribute type 10 has an invalid length. [ 183.494072][ T7352] geneve0: entered promiscuous mode [ 183.523602][ T7360] FAULT_INJECTION: forcing a failure. [ 183.523602][ T7360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.552946][ T7352] geneve0: entered allmulticast mode [ 183.569566][ T7360] CPU: 0 UID: 0 PID: 7360 Comm: syz.1.390 Not tainted 6.15.0-syzkaller-g3b55a9e6738b #0 PREEMPT(full) [ 183.569593][ T7360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 183.569613][ T7360] Call Trace: [ 183.569626][ T7360] [ 183.569638][ T7360] dump_stack_lvl+0x189/0x250 [ 183.569696][ T7360] ? __pfx____ratelimit+0x10/0x10 [ 183.569735][ T7360] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.569796][ T7360] ? __pfx__printk+0x10/0x10 [ 183.569854][ T7360] ? __might_fault+0xb0/0x130 [ 183.569928][ T7360] should_fail_ex+0x414/0x560 [ 183.570018][ T7360] _copy_to_user+0x31/0xb0 [ 183.570065][ T7360] simple_read_from_buffer+0xe1/0x170 [ 183.570127][ T7360] proc_fail_nth_read+0x1df/0x250 [ 183.570182][ T7360] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 183.570240][ T7360] ? rw_verify_area+0x258/0x650 [ 183.570267][ T7360] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 183.570314][ T7360] vfs_read+0x200/0x980 [ 183.570379][ T7360] ? __pfx___mutex_lock+0x10/0x10 [ 183.570433][ T7360] ? __pfx_vfs_read+0x10/0x10 [ 183.570494][ T7360] ? __fget_files+0x2a/0x420 [ 183.570565][ T7360] ? __fget_files+0x3a0/0x420 [ 183.570593][ T7360] ? __fget_files+0x2a/0x420 [ 183.570681][ T7360] ksys_read+0x145/0x250 [ 183.570729][ T7360] ? __pfx_ksys_read+0x10/0x10 [ 183.570747][ T7360] ? rcu_is_watching+0x15/0xb0 [ 183.570803][ T7360] ? do_syscall_64+0xbe/0x3b0 [ 183.570861][ T7360] do_syscall_64+0xfa/0x3b0 [ 183.570889][ T7360] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.570924][ T7360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.570948][ T7360] ? clear_bhb_loop+0x60/0xb0 [ 183.570996][ T7360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.571016][ T7360] RIP: 0033:0x7f621238d33c [ 183.571048][ T7360] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 183.571066][ T7360] RSP: 002b:00007f62101f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 183.571095][ T7360] RAX: ffffffffffffffda RBX: 00007f62125b5fa0 RCX: 00007f621238d33c [ 183.571110][ T7360] RDX: 000000000000000f RSI: 00007f62101f60a0 RDI: 0000000000000004 [ 183.571123][ T7360] RBP: 00007f62101f6090 R08: 0000000000000000 R09: 0000000000000000 [ 183.571149][ T7360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.571160][ T7360] R13: 0000000000000000 R14: 00007f62125b5fa0 R15: 00007ffc1e099058 [ 183.571260][ T7360] [ 183.607026][ T7352] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 183.855453][ T7364] netlink: 'syz.2.391': attribute type 1 has an invalid length. [ 183.855486][ T7364] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.391'. [ 184.123263][ T7370] netlink: 'syz.4.392': attribute type 6 has an invalid length. [ 184.308463][ T7368] netlink: 'syz.3.394': attribute type 1 has an invalid length. [ 184.327659][ T7368] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.394'. [ 184.415040][ T7376] netlink: 'syz.2.395': attribute type 46 has an invalid length. [ 184.865317][ T7391] netlink: 'syz.2.399': attribute type 1 has an invalid length. [ 184.905969][ T7391] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.399'. [ 188.093778][ T7414] FAULT_INJECTION: forcing a failure. [ 188.093778][ T7414] name failslab, interval 1, probability 0, space 0, times 0 [ 188.110753][ T7414] CPU: 0 UID: 0 PID: 7414 Comm: syz.3.405 Not tainted 6.15.0-syzkaller-g3b55a9e6738b #0 PREEMPT(full) [ 188.110780][ T7414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.110792][ T7414] Call Trace: [ 188.110800][ T7414] [ 188.110809][ T7414] dump_stack_lvl+0x189/0x250 [ 188.110845][ T7414] ? __pfx____ratelimit+0x10/0x10 [ 188.110872][ T7414] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.110902][ T7414] ? __pfx__printk+0x10/0x10 [ 188.110927][ T7414] ? __pfx___might_resched+0x10/0x10 [ 188.110946][ T7414] ? fs_reclaim_acquire+0x7d/0x100 [ 188.110977][ T7414] should_fail_ex+0x414/0x560 [ 188.111010][ T7414] should_failslab+0xa8/0x100 [ 188.111035][ T7414] __kmalloc_noprof+0xcb/0x4f0 [ 188.111054][ T7414] ? tomoyo_encode+0x28b/0x550 [ 188.111087][ T7414] tomoyo_encode+0x28b/0x550 [ 188.111122][ T7414] tomoyo_realpath_from_path+0x58d/0x5d0 [ 188.111154][ T7414] ? tomoyo_domain+0xd9/0x130 [ 188.111189][ T7414] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 188.111215][ T7414] tomoyo_path_number_perm+0x1e8/0x5a0 [ 188.111242][ T7414] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 188.111285][ T7414] ? __lock_acquire+0xab9/0xd20 [ 188.111335][ T7414] ? __fget_files+0x2a/0x420 [ 188.111361][ T7414] ? __fget_files+0x2a/0x420 [ 188.111383][ T7414] ? __fget_files+0x3a0/0x420 [ 188.111404][ T7414] ? __fget_files+0x2a/0x420 [ 188.111443][ T7414] security_file_ioctl+0xcb/0x2d0 [ 188.111467][ T7414] __se_sys_ioctl+0x47/0x170 [ 188.111498][ T7414] do_syscall_64+0xfa/0x3b0 [ 188.111533][ T7414] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.111557][ T7414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.111575][ T7414] ? clear_bhb_loop+0x60/0xb0 [ 188.111598][ T7414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.111616][ T7414] RIP: 0033:0x7f7b2df8e929 [ 188.111632][ T7414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.111648][ T7414] RSP: 002b:00007f7b2edc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.111686][ T7414] RAX: ffffffffffffffda RBX: 00007f7b2e1b6080 RCX: 00007f7b2df8e929 [ 188.111700][ T7414] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000027 [ 188.111713][ T7414] RBP: 00007f7b2edc0090 R08: 0000000000000000 R09: 0000000000000000 [ 188.111725][ T7414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.111737][ T7414] R13: 0000000000000000 R14: 00007f7b2e1b6080 R15: 00007ffcaf7b1358 [ 188.111768][ T7414] [ 188.111792][ T7414] ERROR: Out of memory at tomoyo_realpath_from_path. [ 188.542544][ T7426] netlink: 132 bytes leftover after parsing attributes in process `syz.3.409'. [ 188.595500][ T7428] netlink: 'syz.2.410': attribute type 46 has an invalid length. [ 188.602010][ T7424] FAULT_INJECTION: forcing a failure. [ 188.602010][ T7424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.633642][ T7424] CPU: 1 UID: 0 PID: 7424 Comm: syz.0.408 Not tainted 6.15.0-syzkaller-g3b55a9e6738b #0 PREEMPT(full) [ 188.633667][ T7424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.633677][ T7424] Call Trace: [ 188.633684][ T7424] [ 188.633692][ T7424] dump_stack_lvl+0x189/0x250 [ 188.633724][ T7424] ? __pfx____ratelimit+0x10/0x10 [ 188.633748][ T7424] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.633775][ T7424] ? __pfx__printk+0x10/0x10 [ 188.633807][ T7424] should_fail_ex+0x414/0x560 [ 188.633836][ T7424] _copy_from_user+0x2d/0xb0 [ 188.633855][ T7424] __copy_msghdr+0x3c5/0x5b0 [ 188.633878][ T7424] ___sys_sendmsg+0x1a5/0x2a0 [ 188.633898][ T7424] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.633914][ T7424] ? irqentry_exit+0x74/0x90 [ 188.633969][ T7424] ? __fget_files+0x2a/0x420 [ 188.633990][ T7424] ? __fget_files+0x3a0/0x420 [ 188.634020][ T7424] __x64_sys_sendmsg+0x19b/0x260 [ 188.634037][ T7424] ? clockevents_program_event+0x24d/0x360 [ 188.634061][ T7424] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 188.634097][ T7424] ? do_syscall_64+0xbe/0x3b0 [ 188.634125][ T7424] do_syscall_64+0xfa/0x3b0 [ 188.634149][ T7424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.634165][ T7424] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 188.634193][ T7424] ? clear_bhb_loop+0x60/0xb0 [ 188.634214][ T7424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.634230][ T7424] RIP: 0033:0x7f18acd8e929 [ 188.634245][ T7424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.634259][ T7424] RSP: 002b:00007f18aabf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.634278][ T7424] RAX: ffffffffffffffda RBX: 00007f18acfb6080 RCX: 00007f18acd8e929 [ 188.634290][ T7424] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 000000000000000a [ 188.634317][ T7424] RBP: 00007f18aabf6090 R08: 0000000000000000 R09: 0000000000000000 [ 188.634329][ T7424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.634339][ T7424] R13: 0000000000000000 R14: 00007f18acfb6080 R15: 00007ffebba22438 [ 188.634368][ T7424] [ 189.046872][ T7443] veth1_macvtap: left promiscuous mode [ 189.095695][ T7443] macsec0: entered promiscuous mode [ 189.114005][ T7443] veth1_macvtap: entered promiscuous mode [ 189.120093][ T7443] macsec0: entered allmulticast mode [ 189.125576][ T7443] veth1_macvtap: entered allmulticast mode [ 189.990414][ T7456] FAULT_INJECTION: forcing a failure. [ 189.990414][ T7456] name failslab, interval 1, probability 0, space 0, times 0 [ 190.015802][ T7456] CPU: 0 UID: 0 PID: 7456 Comm: syz.2.416 Not tainted 6.15.0-syzkaller-g3b55a9e6738b #0 PREEMPT(full) [ 190.015829][ T7456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.015841][ T7456] Call Trace: [ 190.015848][ T7456] [ 190.015856][ T7456] dump_stack_lvl+0x189/0x250 [ 190.015888][ T7456] ? __pfx____ratelimit+0x10/0x10 [ 190.015913][ T7456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.015941][ T7456] ? __pfx__printk+0x10/0x10 [ 190.015961][ T7456] ? irqentry_exit+0x74/0x90 [ 190.015985][ T7456] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.016017][ T7456] should_fail_ex+0x414/0x560 [ 190.016046][ T7456] should_failslab+0xa8/0x100 [ 190.016069][ T7456] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 190.016089][ T7456] ? __get_vm_area_node+0x13f/0x300 [ 190.016114][ T7456] __get_vm_area_node+0x13f/0x300 [ 190.016139][ T7456] __vmalloc_node_range_noprof+0x301/0x12f0 [ 190.016161][ T7456] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 190.016210][ T7456] ? perf_trace_preemptirq_template+0xa3/0x340 [ 190.016239][ T7456] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 190.016262][ T7456] ? __pfx_aa_get_newest_label+0x10/0x10 [ 190.016294][ T7456] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 190.016324][ T7456] __vmalloc_noprof+0xb1/0xf0 [ 190.016346][ T7456] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 190.016374][ T7456] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 190.016404][ T7456] bpf_prog_alloc+0x3c/0x1a0 [ 190.016434][ T7456] bpf_prog_load+0x735/0x1930 [ 190.016471][ T7456] ? __pfx_bpf_prog_load+0x10/0x10 [ 190.016519][ T7456] ? bpf_lsm_bpf+0x9/0x20 [ 190.016535][ T7456] ? security_bpf+0x7e/0x300 [ 190.016561][ T7456] __sys_bpf+0x5f1/0x860 [ 190.016588][ T7456] ? __pfx___sys_bpf+0x10/0x10 [ 190.016610][ T7456] ? sched_clock_cpu+0x74/0x430 [ 190.016653][ T7456] ? perf_trace_preemptirq_template+0xa3/0x340 [ 190.016677][ T7456] ? irqentry_exit_to_user_mode+0xd1/0x120 [ 190.016712][ T7456] __x64_sys_bpf+0x7c/0x90 [ 190.016736][ T7456] do_syscall_64+0xfa/0x3b0 [ 190.016763][ T7456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.016780][ T7456] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 190.016799][ T7456] ? clear_bhb_loop+0x60/0xb0 [ 190.016822][ T7456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.016840][ T7456] RIP: 0033:0x7f9a5a98e929 [ 190.016856][ T7456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.016872][ T7456] RSP: 002b:00007f9a5b781038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 190.016891][ T7456] RAX: ffffffffffffffda RBX: 00007f9a5abb5fa0 RCX: 00007f9a5a98e929 [ 190.016905][ T7456] RDX: 0000000000000094 RSI: 0000200000002c40 RDI: 0000000000000005 [ 190.016917][ T7456] RBP: 00007f9a5b781090 R08: 0000000000000000 R09: 0000000000000000 [ 190.016928][ T7456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.016938][ T7456] R13: 0000000000000000 R14: 00007f9a5abb5fa0 R15: 00007ffff141db78 [ 190.016966][ T7456] [ 190.017265][ T7456] syz.2.416: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 190.486652][ T7456] CPU: 1 UID: 0 PID: 7456 Comm: syz.2.416 Not tainted 6.15.0-syzkaller-g3b55a9e6738b #0 PREEMPT(full) [ 190.486680][ T7456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.486692][ T7456] Call Trace: [ 190.486699][ T7456] [ 190.486708][ T7456] dump_stack_lvl+0x189/0x250 [ 190.486742][ T7456] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 190.486770][ T7456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.486798][ T7456] ? __pfx__printk+0x10/0x10 [ 190.486819][ T7456] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 190.486841][ T7456] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 190.486869][ T7456] warn_alloc+0x214/0x310 [ 190.486898][ T7456] ? __pfx_warn_alloc+0x10/0x10 [ 190.486923][ T7456] ? __get_vm_area_node+0x13f/0x300 [ 190.486948][ T7456] ? __get_vm_area_node+0x2b5/0x300 [ 190.486976][ T7456] __vmalloc_node_range_noprof+0x326/0x12f0 [ 190.487018][ T7456] ? perf_trace_preemptirq_template+0xa3/0x340 [ 190.487060][ T7456] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 190.487084][ T7456] ? __pfx_aa_get_newest_label+0x10/0x10 [ 190.487118][ T7456] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 190.487144][ T7456] __vmalloc_noprof+0xb1/0xf0 [ 190.487165][ T7456] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 190.487194][ T7456] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 190.487227][ T7456] bpf_prog_alloc+0x3c/0x1a0 [ 190.487257][ T7456] bpf_prog_load+0x735/0x1930 [ 190.487295][ T7456] ? __pfx_bpf_prog_load+0x10/0x10 [ 190.487343][ T7456] ? bpf_lsm_bpf+0x9/0x20 [ 190.487360][ T7456] ? security_bpf+0x7e/0x300 [ 190.487385][ T7456] __sys_bpf+0x5f1/0x860 [ 190.487412][ T7456] ? __pfx___sys_bpf+0x10/0x10 [ 190.487435][ T7456] ? sched_clock_cpu+0x74/0x430 [ 190.487479][ T7456] ? perf_trace_preemptirq_template+0xa3/0x340 [ 190.487503][ T7456] ? irqentry_exit_to_user_mode+0xd1/0x120 [ 190.487539][ T7456] __x64_sys_bpf+0x7c/0x90 [ 190.487563][ T7456] do_syscall_64+0xfa/0x3b0 [ 190.487590][ T7456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.487608][ T7456] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 190.487627][ T7456] ? clear_bhb_loop+0x60/0xb0 [ 190.487649][ T7456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.487667][ T7456] RIP: 0033:0x7f9a5a98e929 [ 190.487683][ T7456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.487700][ T7456] RSP: 002b:00007f9a5b781038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 190.487719][ T7456] RAX: ffffffffffffffda RBX: 00007f9a5abb5fa0 RCX: 00007f9a5a98e929 [ 190.487733][ T7456] RDX: 0000000000000094 RSI: 0000200000002c40 RDI: 0000000000000005 [ 190.487744][ T7456] RBP: 00007f9a5b781090 R08: 0000000000000000 R09: 0000000000000000 [ 190.487755][ T7456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.487765][ T7456] R13: 0000000000000000 R14: 00007f9a5abb5fa0 R15: 00007ffff141db78 [ 190.487794][ T7456] [ 190.487879][ T7456] Mem-Info: [ 190.865203][ T7456] active_anon:5370 inactive_anon:0 isolated_anon:0 [ 190.865203][ T7456] active_file:13451 inactive_file:39869 isolated_file:0 [ 190.865203][ T7456] unevictable:768 dirty:254 writeback:0 [ 190.865203][ T7456] slab_reclaimable:9866 slab_unreclaimable:97143 [ 190.865203][ T7456] mapped:29546 shmem:1361 pagetables:1161 [ 190.865203][ T7456] sec_pagetables:0 bounce:0 [ 190.865203][ T7456] kernel_misc_reclaimable:0 [ 190.865203][ T7456] free:1320254 free_pcp:17477 free_cma:0 [ 191.155815][ T7456] Node 0 active_anon:21480kB inactive_anon:0kB active_file:53804kB inactive_file:159272kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118184kB dirty:1016kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10728kB pagetables:4288kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 191.235954][ T7456] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 191.291428][ T7475] netlink: 'syz.1.423': attribute type 46 has an invalid length. [ 191.378570][ T7456] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 191.379129][ T7472] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.424'. [ 191.432145][ T7456] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 191.443428][ T7456] Node 0 DMA32 free:1367588kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21436kB inactive_anon:0kB active_file:53804kB inactive_file:157440kB unevictable:1536kB writepending:1016kB present:3129332kB managed:2561064kB mlocked:0kB bounce:0kB free_pcp:47244kB local_pcp:20760kB free_cma:0kB [ 191.561253][ T7456] lowmem_reserve[]: 0 0 1 1 1 [ 191.572058][ T7456] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 191.613339][ T7456] lowmem_reserve[]: 0 0 0 0 0 [ 191.670539][ T7456] Node 1 Normal free:3898168kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:22660kB local_pcp:11520kB free_cma:0kB [ 191.717251][ T7456] lowmem_reserve[]: 0 0 0 0 0 [ 191.723795][ T7456] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 191.737248][ T7456] Node 0 DMA32: 1691*4kB (UM) 711*8kB (UM) 558*16kB (UME) 562*32kB (UME) 515*64kB (UME) 66*128kB (UME) 25*256kB (UME) 30*512kB (UME) 29*1024kB (UM) 5*2048kB (UME) 299*4096kB (UM) = 1367172kB [ 191.756714][ T7456] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 191.776431][ T7456] Node 1 Normal: 176*4kB (U) 49*8kB (UME) 41*16kB (UME) 53*32kB (UME) 25*64kB (UME) 7*128kB (UME) 6*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 948*4096kB (M) = 3898168kB [ 191.795102][ T7456] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 191.805432][ T7456] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 191.815272][ T7456] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 191.831484][ T7456] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 191.841332][ T7456] 54677 total pagecache pages [ 191.849987][ T7456] 0 pages in swap cache [ 191.854366][ T7456] Free swap = 124996kB [ 191.858978][ T7456] Total swap = 124996kB [ 191.863297][ T7456] 2097051 pages RAM [ 191.871294][ T7456] 0 pages HighMem/MovableOnly [ 191.879694][ T7456] 424679 pages reserved [ 191.884110][ T7456] 0 pages cma reserved [ 192.086169][ T7495] netlink: 'syz.2.430': attribute type 3 has an invalid length. [ 192.094258][ T7495] netlink: 'syz.2.430': attribute type 1 has an invalid length. [ 194.203352][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.213063][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.025245][ T7514] netlink: 'syz.3.438': attribute type 46 has an invalid length. [ 196.136370][ T7546] netlink: 'syz.3.451': attribute type 10 has an invalid length. [ 196.334189][ T7546] bond0: (slave bond_slave_0): Releasing backup interface [ 196.697515][ T7555] netlink: 60 bytes leftover after parsing attributes in process `syz.2.452'. [ 196.728863][ T7558] netlink: 'syz.4.454': attribute type 46 has an invalid length. [ 197.065568][ T7572] netlink: 60 bytes leftover after parsing attributes in process `syz.0.461'. [ 197.211898][ T7581] FAULT_INJECTION: forcing a failure. [ 197.211898][ T7581] name failslab, interval 1, probability 0, space 0, times 0 [ 197.224803][ T7581] CPU: 1 UID: 0 PID: 7581 Comm: syz.4.464 Not tainted 6.15.0-syzkaller-g3b55a9e6738b #0 PREEMPT(full) [ 197.224827][ T7581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 197.224838][ T7581] Call Trace: [ 197.224846][ T7581] [ 197.224854][ T7581] dump_stack_lvl+0x189/0x250 [ 197.224911][ T7581] ? __pfx____ratelimit+0x10/0x10 [ 197.224940][ T7581] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.224970][ T7581] ? __pfx__printk+0x10/0x10 [ 197.224995][ T7581] ? __lock_acquire+0xab9/0xd20 [ 197.225034][ T7581] should_fail_ex+0x414/0x560 [ 197.225067][ T7581] should_failslab+0xa8/0x100 [ 197.225093][ T7581] __kmalloc_cache_noprof+0x70/0x3d0 [ 197.225113][ T7581] ? tipc_nametbl_lookup_group+0x793/0xc20 [ 197.225139][ T7581] tipc_nametbl_lookup_group+0x793/0xc20 [ 197.225169][ T7581] ? tipc_nametbl_lookup_group+0xac/0xc20 [ 197.225205][ T7581] __tipc_sendmsg+0x1371/0x2960 [ 197.225248][ T7581] ? __pfx___tipc_sendmsg+0x10/0x10 [ 197.225270][ T7581] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 197.225294][ T7581] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 197.225322][ T7581] ? aa_label_sk_perm+0x413/0x560 [ 197.225370][ T7581] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 197.225424][ T7581] ? __lock_acquire+0xab9/0xd20 [ 197.225467][ T7581] ? __local_bh_enable_ip+0x12d/0x1c0 [ 197.225497][ T7581] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.225524][ T7581] ? __local_bh_enable_ip+0x12d/0x1c0 [ 197.225553][ T7581] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 197.225593][ T7581] tipc_sendmsg+0x55/0x70 [ 197.225618][ T7581] ? __pfx_tipc_sendmsg+0x10/0x10 [ 197.225648][ T7581] __sock_sendmsg+0x21c/0x270 [ 197.225679][ T7581] ____sys_sendmsg+0x505/0x830 [ 197.225707][ T7581] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.225740][ T7581] ? import_iovec+0x74/0xa0 [ 197.225765][ T7581] ___sys_sendmsg+0x21f/0x2a0 [ 197.225798][ T7581] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.225862][ T7581] ? __fget_files+0x2a/0x420 [ 197.225883][ T7581] ? __fget_files+0x3a0/0x420 [ 197.225920][ T7581] __x64_sys_sendmsg+0x19b/0x260 [ 197.225946][ T7581] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 197.225980][ T7581] ? __pfx_ksys_write+0x10/0x10 [ 197.225998][ T7581] ? rcu_is_watching+0x15/0xb0 [ 197.226022][ T7581] ? do_syscall_64+0xbe/0x3b0 [ 197.226055][ T7581] do_syscall_64+0xfa/0x3b0 [ 197.226092][ T7581] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.226115][ T7581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.226134][ T7581] ? clear_bhb_loop+0x60/0xb0 [ 197.226158][ T7581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.226175][ T7581] RIP: 0033:0x7f00f858e929 [ 197.226192][ T7581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.226207][ T7581] RSP: 002b:00007f00f931d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.226227][ T7581] RAX: ffffffffffffffda RBX: 00007f00f87b5fa0 RCX: 00007f00f858e929 [ 197.226241][ T7581] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 197.226252][ T7581] RBP: 00007f00f931d090 R08: 0000000000000000 R09: 0000000000000000 [ 197.226263][ T7581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.226274][ T7581] R13: 0000000000000000 R14: 00007f00f87b5fa0 R15: 00007ffc022f7bd8 [ 197.226305][ T7581] [ 198.092807][ T7601] netlink: 'syz.3.470': attribute type 46 has an invalid length. [ 200.904811][ T7634] netlink: 'syz.0.483': attribute type 46 has an invalid length. [ 201.067167][ T7641] FAULT_INJECTION: forcing a failure. [ 201.067167][ T7641] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 201.142889][ T7641] CPU: 0 UID: 0 PID: 7641 Comm: syz.3.485 Not tainted 6.15.0-syzkaller-g3b55a9e6738b #0 PREEMPT(full) [ 201.142916][ T7641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 201.142927][ T7641] Call Trace: [ 201.142934][ T7641] [ 201.142942][ T7641] dump_stack_lvl+0x189/0x250 [ 201.142974][ T7641] ? __pfx____ratelimit+0x10/0x10 [ 201.142999][ T7641] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.143025][ T7641] ? __pfx__printk+0x10/0x10 [ 201.143046][ T7641] ? fs_reclaim_acquire+0x7d/0x100 [ 201.143076][ T7641] should_fail_ex+0x414/0x560 [ 201.143105][ T7641] prepare_alloc_pages+0x213/0x610 [ 201.143135][ T7641] __alloc_frozen_pages_noprof+0x123/0x370 [ 201.143158][ T7641] ? __perf_event_account_interrupt+0x179/0x250 [ 201.143183][ T7641] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 201.143204][ T7641] ? __perf_event_overflow+0x8c1/0xe10 [ 201.143234][ T7641] ? policy_nodemask+0x27c/0x720 [ 201.143257][ T7641] ? __lock_acquire+0xab9/0xd20 [ 201.143286][ T7641] alloc_pages_mpol+0x232/0x4a0 [ 201.143311][ T7641] vma_alloc_folio_noprof+0xe4/0x200 [ 201.143333][ T7641] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 201.143365][ T7641] folio_prealloc+0x30/0x180 [ 201.143386][ T7641] __handle_mm_fault+0x2c88/0x5620 [ 201.143421][ T7641] ? __pfx___handle_mm_fault+0x10/0x10 [ 201.143455][ T7641] ? find_vma+0xe7/0x160 [ 201.143471][ T7641] ? __pfx_find_vma+0x10/0x10 [ 201.143493][ T7641] handle_mm_fault+0x40a/0x8e0 [ 201.143520][ T7641] do_user_addr_fault+0x764/0x1390 [ 201.143559][ T7641] exc_page_fault+0x76/0xf0 [ 201.143585][ T7641] asm_exc_page_fault+0x26/0x30 [ 201.143601][ T7641] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 201.143620][ T7641] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d f7 03 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 201.143635][ T7641] RSP: 0018:ffffc90003bff9c8 EFLAGS: 00050246 [ 201.143651][ T7641] RAX: 00441f0ffa1e0ff3 RBX: 0000000000000008 RCX: 0000000000000008 [ 201.143662][ T7641] RDX: 0000000000000000 RSI: ffffffffa0201a30 RDI: 0000200000001f00 [ 201.143673][ T7641] RBP: ffffc90003bffd30 R08: ffffffffa0201a37 R09: 1ffffffff4040346 [ 201.143685][ T7641] R10: dffffc0000000000 R11: fffffbfff4040347 R12: 0000200000001f08 [ 201.143697][ T7641] R13: 00007ffffffff000 R14: ffffffffa0201a30 R15: 0000200000001f00 [ 201.143710][ T7641] ? 0xffffffffa0201a30 [ 201.143729][ T7641] ? bpf_prog_5aa48c1881081915+0x7/0x29 [ 201.143746][ T7641] ? 0xffffffffa0201a30 [ 201.143765][ T7641] _copy_to_user+0x8a/0xb0 [ 201.143783][ T7641] ? 0xffffffffa0201a30 [ 201.143798][ T7641] bpf_obj_get_info_by_fd+0x232e/0x2f70 [ 201.143824][ T7641] ? tracing_gen_ctx_irq_test+0xc6/0x160 [ 201.143855][ T7641] ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10 [ 201.143885][ T7641] ? perf_tp_event+0x664/0x1380 [ 201.143954][ T7641] ? bpf_lsm_bpf+0x9/0x20 [ 201.143968][ T7641] ? security_bpf+0x7e/0x300 [ 201.143992][ T7641] __sys_bpf+0x77a/0x860 [ 201.144020][ T7641] ? __pfx___sys_bpf+0x10/0x10 [ 201.144056][ T7641] ? ksys_write+0x22a/0x250 [ 201.144076][ T7641] ? __pfx_ksys_write+0x10/0x10 [ 201.144091][ T7641] ? rcu_is_watching+0x15/0xb0 [ 201.144114][ T7641] __x64_sys_bpf+0x7c/0x90 [ 201.144138][ T7641] do_syscall_64+0xfa/0x3b0 [ 201.144160][ T7641] ? lockdep_hardirqs_on+0x9c/0x150 [ 201.144182][ T7641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.144199][ T7641] ? clear_bhb_loop+0x60/0xb0 [ 201.144220][ T7641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.144237][ T7641] RIP: 0033:0x7f7b2df8e929 [ 201.144256][ T7641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.144270][ T7641] RSP: 002b:00007f7b2ede1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 201.144287][ T7641] RAX: ffffffffffffffda RBX: 00007f7b2e1b5fa0 RCX: 00007f7b2df8e929 [ 201.144299][ T7641] RDX: 0000000000000010 RSI: 00002000000008c0 RDI: 000000000000000f [ 201.144310][ T7641] RBP: 00007f7b2ede1090 R08: 0000000000000000 R09: 0000000000000000 [ 201.144321][ T7641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.144331][ T7641] R13: 0000000000000000 R14: 00007f7b2e1b5fa0 R15: 00007ffcaf7b1358 [ 201.144359][ T7641] [ 201.808886][ T7656] FAULT_INJECTION: forcing a failure. [ 201.808886][ T7656] name failslab, interval 1, probability 0, space 0, times 0 [ 201.822142][ T7656] CPU: 0 UID: 0 PID: 7656 Comm: syz.4.491 Not tainted 6.15.0-syzkaller-g3b55a9e6738b #0 PREEMPT(full) [ 201.822168][ T7656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 201.822189][ T7656] Call Trace: [ 201.822196][ T7656] [ 201.822212][ T7656] dump_stack_lvl+0x189/0x250 [ 201.822246][ T7656] ? __pfx____ratelimit+0x10/0x10 [ 201.822272][ T7656] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.822301][ T7656] ? __pfx__printk+0x10/0x10 [ 201.822327][ T7656] ? __pfx___might_resched+0x10/0x10 [ 201.822344][ T7656] ? fs_reclaim_acquire+0x7d/0x100 [ 201.822373][ T7656] should_fail_ex+0x414/0x560 [ 201.822404][ T7656] should_failslab+0xa8/0x100 [ 201.822427][ T7656] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 201.822447][ T7656] ? __d_alloc+0x31/0x6f0 [ 201.822477][ T7656] __d_alloc+0x31/0x6f0 [ 201.822508][ T7656] d_alloc_parallel+0xe0/0x14e0 [ 201.822536][ T7656] ? kasan_save_track+0x4f/0x80 [ 201.822551][ T7656] ? kasan_save_track+0x3e/0x80 [ 201.822565][ T7656] ? kasan_save_free_info+0x46/0x50 [ 201.822588][ T7656] ? __kasan_slab_free+0x62/0x70 [ 201.822605][ T7656] ? kfree+0x18e/0x440 [ 201.822620][ T7656] ? link_path_walk+0x75b/0xea0 [ 201.822641][ T7656] ? path_openat+0x28c/0x3830 [ 201.822667][ T7656] ? do_sys_openat2+0x121/0x1c0 [ 201.822692][ T7656] ? do_syscall_64+0xfa/0x3b0 [ 201.822716][ T7656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.822741][ T7656] ? __lock_acquire+0xab9/0xd20 [ 201.822767][ T7656] ? __pfx_d_alloc_parallel+0x10/0x10 [ 201.822800][ T7656] ? __raw_spin_lock_init+0x45/0x100 [ 201.822823][ T7656] ? __init_waitqueue_head+0xa9/0x150 [ 201.822851][ T7656] __lookup_slow+0x116/0x3d0 [ 201.822881][ T7656] ? __pfx___lookup_slow+0x10/0x10 [ 201.822923][ T7656] ? down_read+0x1ad/0x2e0 [ 201.822953][ T7656] lookup_slow+0x53/0x70 [ 201.822980][ T7656] link_path_walk+0x935/0xea0 [ 201.823022][ T7656] path_openat+0x28c/0x3830 [ 201.823047][ T7656] ? arch_stack_walk+0xfc/0x150 [ 201.823100][ T7656] ? __pfx_path_openat+0x10/0x10 [ 201.823126][ T7656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.823166][ T7656] do_filp_open+0x1fa/0x410 [ 201.823199][ T7656] ? __lock_acquire+0xab9/0xd20 [ 201.823227][ T7656] ? __pfx_do_filp_open+0x10/0x10 [ 201.823265][ T7656] ? __pfx_kfree_link+0x10/0x10 [ 201.823296][ T7656] ? _raw_spin_unlock+0x28/0x50 [ 201.823317][ T7656] ? alloc_fd+0x64c/0x6c0 [ 201.823349][ T7656] do_sys_openat2+0x121/0x1c0 [ 201.823378][ T7656] ? __pfx_do_sys_openat2+0x10/0x10 [ 201.823407][ T7656] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 201.823436][ T7656] ? __pfx_notify_die+0x10/0x10 [ 201.823452][ T7656] ? rcu_is_watching+0x15/0xb0 [ 201.823473][ T7656] __x64_sys_openat+0x138/0x170 [ 201.823505][ T7656] do_syscall_64+0xfa/0x3b0 [ 201.823528][ T7656] ? lockdep_hardirqs_on+0x9c/0x150 [ 201.823552][ T7656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.823571][ T7656] ? clear_bhb_loop+0x60/0xb0 [ 201.823595][ T7656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.823613][ T7656] RIP: 0033:0x7f00f858d290 [ 201.823629][ T7656] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 201.823645][ T7656] RSP: 002b:00007f00f931cf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 201.823665][ T7656] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f00f858d290 [ 201.823678][ T7656] RDX: 0000000000000002 RSI: 00007f00f931cfa0 RDI: 00000000ffffff9c [ 201.823690][ T7656] RBP: 00007f00f931cfa0 R08: 0000000000000000 R09: 0000000000000000 [ 201.823702][ T7656] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 201.823713][ T7656] R13: 0000000000000000 R14: 00007f00f87b5fa0 R15: 00007ffc022f7bd8 [ 201.823743][ T7656] [ 203.165903][ T7677] netlink: 'syz.1.497': attribute type 46 has an invalid length. [ 203.731325][ T7696] netlink: 48 bytes leftover after parsing attributes in process `syz.3.506'. [ 203.837496][ T7700] netlink: 'syz.4.508': attribute type 10 has an invalid length. [ 203.845295][ T7700] netlink: 55 bytes leftover after parsing attributes in process `syz.4.508'. [ 203.967417][ T7707] netlink: 188 bytes leftover after parsing attributes in process `syz.1.511'. [ 204.126932][ T7713] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.510'. [ 204.387459][ T7719] netlink: 'syz.1.514': attribute type 10 has an invalid length. [ 205.057391][ T7721] netlink: 'syz.4.515': attribute type 46 has an invalid length. [ 205.739825][ T7750] netlink: 'syz.2.527': attribute type 3 has an invalid length. [ 205.761289][ T7750] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.527'. [ 205.913903][ T7755] netlink: 'syz.3.530': attribute type 46 has an invalid length. [ 205.947534][ T7759] FAULT_INJECTION: forcing a failure. [ 205.947534][ T7759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.977894][ T7759] CPU: 0 UID: 0 PID: 7759 Comm: syz.4.531 Not tainted 6.15.0-syzkaller-g3b55a9e6738b #0 PREEMPT(full) [ 205.977919][ T7759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 205.977930][ T7759] Call Trace: [ 205.977937][ T7759] [ 205.977946][ T7759] dump_stack_lvl+0x189/0x250 [ 205.977979][ T7759] ? __pfx____ratelimit+0x10/0x10 [ 205.978004][ T7759] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.978031][ T7759] ? __pfx__printk+0x10/0x10 [ 205.978052][ T7759] ? __might_fault+0xb0/0x130 [ 205.978074][ T7759] ? __might_fault+0xb0/0x130 [ 205.978098][ T7759] should_fail_ex+0x414/0x560 [ 205.978129][ T7759] _copy_from_user+0x2d/0xb0 [ 205.978150][ T7759] kstrtouint_from_user+0xc4/0x170 [ 205.978179][ T7759] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 205.978247][ T7759] proc_fail_nth_write+0x88/0x240 [ 205.978273][ T7759] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 205.978307][ T7759] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 205.978335][ T7759] vfs_write+0x27e/0xa90 [ 205.978367][ T7759] ? __pfx_vfs_write+0x10/0x10 [ 205.978390][ T7759] ? __fget_files+0x2a/0x420 [ 205.978420][ T7759] ? __fget_files+0x3a0/0x420 [ 205.978442][ T7759] ? __fget_files+0x2a/0x420 [ 205.978477][ T7759] ksys_write+0x145/0x250 [ 205.978501][ T7759] ? __pfx_ksys_write+0x10/0x10 [ 205.978518][ T7759] ? rcu_is_watching+0x15/0xb0 [ 205.978543][ T7759] ? do_syscall_64+0xbe/0x3b0 [ 205.978577][ T7759] do_syscall_64+0xfa/0x3b0 [ 205.978603][ T7759] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.978628][ T7759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.978649][ T7759] ? clear_bhb_loop+0x60/0xb0 [ 205.978675][ T7759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.978694][ T7759] RIP: 0033:0x7f00f858d3df [ 205.978712][ T7759] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 205.978729][ T7759] RSP: 002b:00007f00f931d030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 205.978749][ T7759] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f00f858d3df [ 205.978763][ T7759] RDX: 0000000000000001 RSI: 00007f00f931d0a0 RDI: 0000000000000005 [ 205.978775][ T7759] RBP: 00007f00f931d090 R08: 0000000000000000 R09: 0000000000000000 [ 205.978785][ T7759] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 205.978797][ T7759] R13: 0000000000000000 R14: 00007f00f87b5fa0 R15: 00007ffc022f7bd8 [ 205.978832][ T7759] [ 206.732389][ T7779] netlink: 495 bytes leftover after parsing attributes in process `syz.3.538'. [ 207.144033][ T7793] FAULT_INJECTION: forcing a failure. [ 207.144033][ T7793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.167359][ T7796] €Â: renamed from hsr0 (while UP) [ 207.179568][ T7793] CPU: 1 UID: 0 PID: 7793 Comm: syz.4.544 Not tainted 6.15.0-syzkaller-g3b55a9e6738b #0 PREEMPT(full) [ 207.179592][ T7793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 207.179604][ T7793] Call Trace: [ 207.179611][ T7793] [ 207.179619][ T7793] dump_stack_lvl+0x189/0x250 [ 207.179670][ T7793] ? __pfx____ratelimit+0x10/0x10 [ 207.179713][ T7793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.179742][ T7793] ? __pfx__printk+0x10/0x10 [ 207.179768][ T7793] ? __might_fault+0xb0/0x130 [ 207.179795][ T7793] should_fail_ex+0x414/0x560 [ 207.179828][ T7793] _copy_to_user+0x31/0xb0 [ 207.179862][ T7793] simple_read_from_buffer+0xe1/0x170 [ 207.179887][ T7793] proc_fail_nth_read+0x1df/0x250 [ 207.179914][ T7793] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 207.179941][ T7793] ? rw_verify_area+0x258/0x650 [ 207.179957][ T7793] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 207.179981][ T7793] vfs_read+0x200/0x980 [ 207.180005][ T7793] ? __pfx___mutex_lock+0x10/0x10 [ 207.180030][ T7793] ? __pfx_vfs_read+0x10/0x10 [ 207.180056][ T7793] ? __fget_files+0x2a/0x420 [ 207.180082][ T7793] ? __fget_files+0x3a0/0x420 [ 207.180119][ T7793] ? __fget_files+0x2a/0x420 [ 207.180152][ T7793] ksys_read+0x145/0x250 [ 207.180174][ T7793] ? __pfx_ksys_read+0x10/0x10 [ 207.180189][ T7793] ? rcu_is_watching+0x15/0xb0 [ 207.180214][ T7793] ? do_syscall_64+0xbe/0x3b0 [ 207.180245][ T7793] do_syscall_64+0xfa/0x3b0 [ 207.180279][ T7793] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.180319][ T7793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.180338][ T7793] ? clear_bhb_loop+0x60/0xb0 [ 207.180362][ T7793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.180379][ T7793] RIP: 0033:0x7f00f858d33c [ 207.180397][ T7793] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 207.180413][ T7793] RSP: 002b:00007f00f931d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 207.180432][ T7793] RAX: ffffffffffffffda RBX: 00007f00f87b5fa0 RCX: 00007f00f858d33c [ 207.180446][ T7793] RDX: 000000000000000f RSI: 00007f00f931d0a0 RDI: 0000000000000005 [ 207.180458][ T7793] RBP: 00007f00f931d090 R08: 0000000000000000 R09: 0000000000000000 [ 207.180469][ T7793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.180480][ T7793] R13: 0000000000000000 R14: 00007f00f87b5fa0 R15: 00007ffc022f7bd8 [ 207.180514][ T7793] [ 207.435343][ T7791] netlink: 22 bytes leftover after parsing attributes in process `syz.1.543'. [ 207.469886][ T7796] netlink: 'syz.3.545': attribute type 29 has an invalid length. [ 207.479880][ T7796] netlink: 'syz.3.545': attribute type 3 has an invalid length. [ 207.491758][ T7796] netlink: 132 bytes leftover after parsing attributes in process `syz.3.545'. [ 207.504787][ T7791] netlink: 132 bytes leftover after parsing attributes in process `syz.1.543'. [ 207.516870][ T7803] netlink: 'syz.0.546': attribute type 46 has an invalid length. [ 208.125028][ T5157] Bluetooth: hci1: ISO packet too small [ 208.592782][ T7837] netlink: 'syz.2.560': attribute type 10 has an invalid length. [ 208.802049][ T7841] IPv6: NLM_F_CREATE should be specified when creating new route [ 208.969359][ T7845] netlink: 'syz.4.564': attribute type 20 has an invalid length. [ 209.063445][ T7853] netlink: 10 bytes leftover after parsing attributes in process `syz.0.566'. [ 209.512675][ T7867] netlink: 'syz.2.572': attribute type 46 has an invalid length. [ 209.719114][ T7874] FAULT_INJECTION: forcing a failure. [ 209.719114][ T7874] name failslab, interval 1, probability 0, space 0, times 0 [ 209.769884][ T7874] CPU: 1 UID: 0 PID: 7874 Comm: syz.4.575 Not tainted 6.15.0-syzkaller-g3b55a9e6738b #0 PREEMPT(full) [ 209.769910][ T7874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 209.769922][ T7874] Call Trace: [ 209.769930][ T7874] [ 209.769939][ T7874] dump_stack_lvl+0x189/0x250 [ 209.769972][ T7874] ? __pfx____ratelimit+0x10/0x10 [ 209.769999][ T7874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.770028][ T7874] ? __pfx__printk+0x10/0x10 [ 209.770056][ T7874] ? __pfx___might_resched+0x10/0x10 [ 209.770079][ T7874] should_fail_ex+0x414/0x560 [ 209.770112][ T7874] should_failslab+0xa8/0x100 [ 209.770135][ T7874] __kmalloc_noprof+0xcb/0x4f0 [ 209.770154][ T7874] ? sk_prot_alloc+0xe7/0x220 [ 209.770179][ T7874] sk_prot_alloc+0xe7/0x220 [ 209.770197][ T7874] ? sk_alloc+0x24/0x370 [ 209.770219][ T7874] sk_alloc+0x3a/0x370 [ 209.770236][ T7874] ? bpf_ctx_init+0x167/0x1d0 [ 209.770257][ T7874] bpf_prog_test_run_skb+0x2ed/0x1560 [ 209.770275][ T7874] ? __fget_files+0x2a/0x420 [ 209.770315][ T7874] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 209.770335][ T7874] bpf_prog_test_run+0x2c7/0x340 [ 209.770367][ T7874] __sys_bpf+0x4a4/0x860 [ 209.770395][ T7874] ? __pfx___sys_bpf+0x10/0x10 [ 209.770437][ T7874] ? ksys_write+0x22a/0x250 [ 209.770456][ T7874] ? __pfx_ksys_write+0x10/0x10 [ 209.770469][ T7874] ? rcu_is_watching+0x15/0xb0 [ 209.770495][ T7874] __x64_sys_bpf+0x7c/0x90 [ 209.770519][ T7874] do_syscall_64+0xfa/0x3b0 [ 209.770543][ T7874] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.770568][ T7874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.770586][ T7874] ? clear_bhb_loop+0x60/0xb0 [ 209.770617][ T7874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.770635][ T7874] RIP: 0033:0x7f00f858e929 [ 209.770652][ T7874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.770668][ T7874] RSP: 002b:00007f00f931d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 209.770687][ T7874] RAX: ffffffffffffffda RBX: 00007f00f87b5fa0 RCX: 00007f00f858e929 [ 209.770701][ T7874] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 209.770713][ T7874] RBP: 00007f00f931d090 R08: 0000000000000000 R09: 0000000000000000 [ 209.770724][ T7874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.770735][ T7874] R13: 0000000000000000 R14: 00007f00f87b5fa0 R15: 00007ffc022f7bd8 [ 209.770767][ T7874] [ 210.022238][ T7879] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.576'. [ 210.076314][ T7882] FAULT_INJECTION: forcing a failure. [ 210.076314][ T7882] name failslab, interval 1, probability 0, space 0, times 0 [ 210.089160][ T7882] CPU: 0 UID: 0 PID: 7882 Comm: syz.4.578 Not tainted 6.15.0-syzkaller-g3b55a9e6738b #0 PREEMPT(full) [ 210.089185][ T7882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 210.089198][ T7882] Call Trace: [ 210.089206][ T7882] [ 210.089215][ T7882] dump_stack_lvl+0x189/0x250 [ 210.089250][ T7882] ? __pfx____ratelimit+0x10/0x10 [ 210.089278][ T7882] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.089308][ T7882] ? __pfx__printk+0x10/0x10 [ 210.089346][ T7882] should_fail_ex+0x414/0x560 [ 210.089380][ T7882] should_failslab+0xa8/0x100 [ 210.089405][ T7882] __kmalloc_cache_noprof+0x70/0x3d0 [ 210.089426][ T7882] ? tipc_nametbl_lookup_group+0x793/0xc20 [ 210.089463][ T7882] tipc_nametbl_lookup_group+0x793/0xc20 [ 210.089491][ T7882] ? tipc_nametbl_lookup_group+0xac/0xc20 [ 210.089513][ T7882] __tipc_sendmsg+0x1371/0x2960 [ 210.089558][ T7882] ? __pfx___tipc_sendmsg+0x10/0x10 [ 210.089579][ T7882] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 210.089603][ T7882] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 210.089637][ T7882] ? aa_label_sk_perm+0x413/0x560 [ 210.089667][ T7882] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 210.089715][ T7882] ? perf_trace_preemptirq_template+0xa3/0x340 [ 210.089740][ T7882] ? __local_bh_enable_ip+0x12d/0x1c0 [ 210.089767][ T7882] ? __lock_acquire+0xab9/0xd20 [ 210.089793][ T7882] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 210.089831][ T7882] ? __local_bh_enable_ip+0x12d/0x1c0 [ 210.089858][ T7882] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.089884][ T7882] ? __local_bh_enable_ip+0x12d/0x1c0 [ 210.089911][ T7882] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 210.089950][ T7882] tipc_sendmsg+0x55/0x70 [ 210.089974][ T7882] ? __pfx_tipc_sendmsg+0x10/0x10 [ 210.089997][ T7882] __sock_sendmsg+0x21c/0x270 [ 210.090028][ T7882] ____sys_sendmsg+0x505/0x830 [ 210.090054][ T7882] ? __pfx_____sys_sendmsg+0x10/0x10 [ 210.090086][ T7882] ? import_iovec+0x74/0xa0 [ 210.090110][ T7882] ___sys_sendmsg+0x21f/0x2a0 [ 210.090134][ T7882] ? __pfx____sys_sendmsg+0x10/0x10 [ 210.090200][ T7882] ? __fget_files+0x2a/0x420 [ 210.090221][ T7882] ? __fget_files+0x3a0/0x420 [ 210.090255][ T7882] __x64_sys_sendmsg+0x19b/0x260 [ 210.090278][ T7882] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 210.090297][ T7882] ? perf_trace_preemptirq_template+0xa3/0x340 [ 210.090331][ T7882] ? __pfx_ksys_write+0x10/0x10 [ 210.090347][ T7882] ? rcu_is_watching+0x15/0xb0 [ 210.090371][ T7882] ? do_syscall_64+0xbe/0x3b0 [ 210.090401][ T7882] do_syscall_64+0xfa/0x3b0 [ 210.090425][ T7882] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.090448][ T7882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.090465][ T7882] ? clear_bhb_loop+0x60/0xb0 [ 210.090489][ T7882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.090506][ T7882] RIP: 0033:0x7f00f858e929 [ 210.090523][ T7882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.090538][ T7882] RSP: 002b:00007f00f931d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.090557][ T7882] RAX: ffffffffffffffda RBX: 00007f00f87b5fa0 RCX: 00007f00f858e929 [ 210.090571][ T7882] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 210.090582][ T7882] RBP: 00007f00f931d090 R08: 0000000000000000 R09: 0000000000000000 [ 210.090594][ T7882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.090604][ T7882] R13: 0000000000000000 R14: 00007f00f87b5fa0 R15: 00007ffc022f7bd8 [ 210.090647][ T7882] [ 211.017722][ T7901] FAULT_INJECTION: forcing a failure. [ 211.017722][ T7901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.065747][ T7903] netlink: 'syz.1.587': attribute type 46 has an invalid length. [ 211.078899][ T7901] CPU: 0 UID: 0 PID: 7901 Comm: syz.3.586 Not tainted 6.15.0-syzkaller-g3b55a9e6738b #0 PREEMPT(full) [ 211.078926][ T7901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 211.078938][ T7901] Call Trace: [ 211.078947][ T7901] [ 211.078956][ T7901] dump_stack_lvl+0x189/0x250 [ 211.078993][ T7901] ? __pfx____ratelimit+0x10/0x10 [ 211.079020][ T7901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.079051][ T7901] ? __pfx__printk+0x10/0x10 [ 211.079074][ T7901] ? __might_fault+0xb0/0x130 [ 211.079098][ T7901] ? __might_fault+0xb0/0x130 [ 211.079125][ T7901] should_fail_ex+0x414/0x560 [ 211.079160][ T7901] _copy_from_user+0x2d/0xb0 [ 211.079184][ T7901] __sys_bpf+0x1ed/0x860 [ 211.079215][ T7901] ? __pfx___sys_bpf+0x10/0x10 [ 211.079260][ T7901] ? ksys_write+0x22a/0x250 [ 211.079283][ T7901] ? __pfx_ksys_write+0x10/0x10 [ 211.079300][ T7901] ? rcu_is_watching+0x15/0xb0 [ 211.079329][ T7901] __x64_sys_bpf+0x7c/0x90 [ 211.079372][ T7901] do_syscall_64+0xfa/0x3b0 [ 211.079399][ T7901] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.079425][ T7901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.079444][ T7901] ? clear_bhb_loop+0x60/0xb0 [ 211.079481][ T7901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.079498][ T7901] RIP: 0033:0x7f7b2df8e929 [ 211.079515][ T7901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.079531][ T7901] RSP: 002b:00007f7b2ede1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 211.079550][ T7901] RAX: ffffffffffffffda RBX: 00007f7b2e1b5fa0 RCX: 00007f7b2df8e929 [ 211.079564][ T7901] RDX: 0000000000000010 RSI: 0000200000000300 RDI: 000000000000000f [ 211.079575][ T7901] RBP: 00007f7b2ede1090 R08: 0000000000000000 R09: 0000000000000000 [ 211.079586][ T7901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.079596][ T7901] R13: 0000000000000000 R14: 00007f7b2e1b5fa0 R15: 00007ffcaf7b1358 [ 211.079628][ T7901] [ 211.646958][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 211.653130][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 211.659250][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 211.665735][ T5847] Bluetooth: hci4: command 0x0406 tx timeout [ 212.143019][ T7924] FAULT_INJECTION: forcing a failure. [ 212.143019][ T7924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.186992][ T7924] CPU: 1 UID: 0 PID: 7924 Comm: syz.3.594 Not tainted 6.15.0-syzkaller-g3b55a9e6738b #0 PREEMPT(full) [ 212.187021][ T7924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 212.187032][ T7924] Call Trace: [ 212.187040][ T7924] [ 212.187048][ T7924] dump_stack_lvl+0x189/0x250 [ 212.187082][ T7924] ? __pfx____ratelimit+0x10/0x10 [ 212.187108][ T7924] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.187136][ T7924] ? __pfx__printk+0x10/0x10 [ 212.187157][ T7924] ? __might_fault+0xb0/0x130 [ 212.187187][ T7924] should_fail_ex+0x414/0x560 [ 212.187218][ T7924] _copy_from_user+0x2d/0xb0 [ 212.187239][ T7924] __sys_bpf+0x1ed/0x860 [ 212.187267][ T7924] ? __pfx___sys_bpf+0x10/0x10 [ 212.187316][ T7924] ? ksys_write+0x22a/0x250 [ 212.187336][ T7924] ? __pfx_ksys_write+0x10/0x10 [ 212.187360][ T7924] __x64_sys_bpf+0x7c/0x90 [ 212.187382][ T7924] do_syscall_64+0xfa/0x3b0 [ 212.187412][ T7924] ? lockdep_hardirqs_on+0x9c/0x150 [ 212.187434][ T7924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.187451][ T7924] ? clear_bhb_loop+0x60/0xb0 [ 212.187473][ T7924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.187489][ T7924] RIP: 0033:0x7f7b2df8e929 [ 212.187504][ T7924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.187520][ T7924] RSP: 002b:00007f7b2ede1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 212.187539][ T7924] RAX: ffffffffffffffda RBX: 00007f7b2e1b5fa0 RCX: 00007f7b2df8e929 [ 212.187551][ T7924] RDX: 0000000000000020 RSI: 0000200000000240 RDI: 0000000000000009 [ 212.187562][ T7924] RBP: 00007f7b2ede1090 R08: 0000000000000000 R09: 0000000000000000 [ 212.187573][ T7924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.187583][ T7924] R13: 0000000000000001 R14: 00007f7b2e1b5fa0 R15: 00007ffcaf7b1358 [ 212.187610][ T7924] [ 213.109707][ T7947] netlink: 'syz.2.602': attribute type 46 has an invalid length. [ 215.024251][ T7966] FAULT_INJECTION: forcing a failure. [ 215.024251][ T7966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.074565][ T7966] CPU: 0 UID: 0 PID: 7966 Comm: syz.0.608 Not tainted 6.15.0-syzkaller-g3b55a9e6738b #0 PREEMPT(full) [ 215.074592][ T7966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 215.074603][ T7966] Call Trace: [ 215.074613][ T7966] [ 215.074622][ T7966] dump_stack_lvl+0x189/0x250 [ 215.074661][ T7966] ? __pfx____ratelimit+0x10/0x10 [ 215.074691][ T7966] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.074724][ T7966] ? __pfx__printk+0x10/0x10 [ 215.074751][ T7966] ? __might_fault+0xb0/0x130 [ 215.074805][ T7966] should_fail_ex+0x414/0x560 [ 215.074849][ T7966] _copy_from_user+0x2d/0xb0 [ 215.074875][ T7966] ___sys_sendmsg+0x158/0x2a0 [ 215.074909][ T7966] ? __pfx____sys_sendmsg+0x10/0x10 [ 215.075040][ T7966] ? __fget_files+0x2a/0x420 [ 215.075062][ T7966] ? __fget_files+0x3a0/0x420 [ 215.075113][ T7966] __x64_sys_sendmsg+0x19b/0x260 [ 215.075144][ T7966] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 215.075162][ T7966] ? perf_trace_preemptirq_template+0xa3/0x340 [ 215.075212][ T7966] ? __pfx_ksys_write+0x10/0x10 [ 215.075228][ T7966] ? rcu_is_watching+0x15/0xb0 [ 215.075261][ T7966] ? do_syscall_64+0xbe/0x3b0 [ 215.075299][ T7966] do_syscall_64+0xfa/0x3b0 [ 215.075323][ T7966] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.075348][ T7966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.075367][ T7966] ? clear_bhb_loop+0x60/0xb0 [ 215.075395][ T7966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.075413][ T7966] RIP: 0033:0x7f18acd8e929 [ 215.075432][ T7966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.075452][ T7966] RSP: 002b:00007f18adb14038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.075471][ T7966] RAX: ffffffffffffffda RBX: 00007f18acfb5fa0 RCX: 00007f18acd8e929 [ 215.075484][ T7966] RDX: 00000000000480c4 RSI: 00002000000017c0 RDI: 0000000000000004 [ 215.075495][ T7966] RBP: 00007f18adb14090 R08: 0000000000000000 R09: 0000000000000000 [ 215.075506][ T7966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.075516][ T7966] R13: 0000000000000000 R14: 00007f18acfb5fa0 R15: 00007ffebba22438 [ 215.075572][ T7966] [ 216.133450][ T7995] netlink: 'syz.0.618': attribute type 46 has an invalid length. [ 216.449899][ T7998] FAULT_INJECTION: forcing a failure. [ 216.449899][ T7998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.463861][ T7998] CPU: 1 UID: 0 PID: 7998 Comm: syz.2.619 Not tainted 6.15.0-syzkaller-g3b55a9e6738b #0 PREEMPT(full) [ 216.463888][ T7998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 216.463899][ T7998] Call Trace: [ 216.463908][ T7998] [ 216.463916][ T7998] dump_stack_lvl+0x189/0x250 [ 216.463950][ T7998] ? __pfx____ratelimit+0x10/0x10 [ 216.463976][ T7998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.464004][ T7998] ? __pfx__printk+0x10/0x10 [ 216.464028][ T7998] ? __might_fault+0xb0/0x130 [ 216.464055][ T7998] should_fail_ex+0x414/0x560 [ 216.464088][ T7998] _copy_from_user+0x2d/0xb0 [ 216.464110][ T7998] perf_copy_attr+0x167/0x880 [ 216.464142][ T7998] __se_sys_perf_event_open+0xdd/0x1d70 [ 216.464177][ T7998] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 216.464210][ T7998] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 216.464275][ T7998] ? __pfx_ksys_write+0x10/0x10 [ 216.464293][ T7998] ? rcu_is_watching+0x15/0xb0 [ 216.464319][ T7998] ? do_syscall_64+0xbe/0x3b0 [ 216.464352][ T7998] ? __x64_sys_perf_event_open+0x20/0xc0 [ 216.464394][ T7998] do_syscall_64+0xfa/0x3b0 [ 216.464418][ T7998] ? lockdep_hardirqs_on+0x9c/0x150 [ 216.464443][ T7998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.464461][ T7998] ? clear_bhb_loop+0x60/0xb0 [ 216.464485][ T7998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.464503][ T7998] RIP: 0033:0x7f9a5a98e929 [ 216.464520][ T7998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.464536][ T7998] RSP: 002b:00007f9a5b781038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 216.464556][ T7998] RAX: ffffffffffffffda RBX: 00007f9a5abb5fa0 RCX: 00007f9a5a98e929 [ 216.464569][ T7998] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 00002000000003c0 [ 216.464582][ T7998] RBP: 00007f9a5b781090 R08: 0000000000000000 R09: 0000000000000000 [ 216.464593][ T7998] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 216.464604][ T7998] R13: 0000000000000000 R14: 00007f9a5abb5fa0 R15: 00007ffff141db78 [ 216.464637][ T7998] [ 216.890674][ T8005] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.623'. [ 220.055000][ T8033] FAULT_INJECTION: forcing a failure. [ 220.055000][ T8033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.236102][ T8033] CPU: 0 UID: 0 PID: 8033 Comm: syz.1.630 Not tainted 6.15.0-syzkaller-g3b55a9e6738b #0 PREEMPT(full) [ 220.236131][ T8033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 220.236142][ T8033] Call Trace: [ 220.236154][ T8033] [ 220.236165][ T8033] dump_stack_lvl+0x189/0x250 [ 220.236210][ T8033] ? __pfx____ratelimit+0x10/0x10 [ 220.236245][ T8033] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.236284][ T8033] ? __pfx__printk+0x10/0x10 [ 220.236318][ T8033] ? __might_fault+0xb0/0x130 [ 220.236359][ T8033] ? __might_fault+0xb0/0x130 [ 220.236414][ T8033] should_fail_ex+0x414/0x560 [ 220.236474][ T8033] _copy_from_iter+0x3f5/0x16f0 [ 220.236534][ T8033] ? rcu_is_watching+0x15/0xb0 [ 220.236585][ T8033] ? __pfx__copy_from_iter+0x10/0x10 [ 220.236635][ T8033] ? __build_skb_around+0x257/0x3e0 [ 220.236680][ T8033] ? netlink_sendmsg+0x642/0xb30 [ 220.236698][ T8033] ? skb_put+0x11b/0x210 [ 220.236745][ T8033] netlink_sendmsg+0x6b2/0xb30 [ 220.236820][ T8033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.236863][ T8033] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 220.236891][ T8033] ? aa_sock_msg_perm+0x94/0x160 [ 220.236935][ T8033] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 220.236963][ T8033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.236997][ T8033] __sock_sendmsg+0x21c/0x270 [ 220.237049][ T8033] ____sys_sendmsg+0x505/0x830 [ 220.237107][ T8033] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.237184][ T8033] ? import_iovec+0x74/0xa0 [ 220.237238][ T8033] ___sys_sendmsg+0x21f/0x2a0 [ 220.237299][ T8033] ? __pfx____sys_sendmsg+0x10/0x10 [ 220.237441][ T8033] ? __fget_files+0x2a/0x420 [ 220.237549][ T8033] ? __fget_files+0x2a/0x420 [ 220.237573][ T8033] ? __fget_files+0x3a0/0x420 [ 220.237655][ T8033] __x64_sys_sendmsg+0x19b/0x260 [ 220.237699][ T8033] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 220.237718][ T8033] ? perf_trace_preemptirq_template+0xa3/0x340 [ 220.237796][ T8033] ? __pfx_ksys_write+0x10/0x10 [ 220.237813][ T8033] ? rcu_is_watching+0x15/0xb0 [ 220.237895][ T8033] ? do_syscall_64+0xbe/0x3b0 [ 220.237951][ T8033] do_syscall_64+0xfa/0x3b0 [ 220.237979][ T8033] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.238012][ T8033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.238036][ T8033] ? clear_bhb_loop+0x60/0xb0 [ 220.238080][ T8033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.238102][ T8033] RIP: 0033:0x7f621238e929 [ 220.238128][ T8033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.238146][ T8033] RSP: 002b:00007f62101f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.238167][ T8033] RAX: ffffffffffffffda RBX: 00007f62125b5fa0 RCX: 00007f621238e929 [ 220.238182][ T8033] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 220.238195][ T8033] RBP: 00007f62101f6090 R08: 0000000000000000 R09: 0000000000000000 [ 220.238207][ T8033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.238219][ T8033] R13: 0000000000000000 R14: 00007f62125b5fa0 R15: 00007ffc1e099058 [ 220.238354][ T8033] [ 220.720187][ T8044] netlink: 'syz.2.635': attribute type 46 has an invalid length. [ 224.229396][ T8072] FAULT_INJECTION: forcing a failure. [ 224.229396][ T8072] name failslab, interval 1, probability 0, space 0, times 0 [ 224.258747][ T8074] netlink: 'syz.4.644': attribute type 10 has an invalid length. [ 224.278077][ T8072] CPU: 0 UID: 0 PID: 8072 Comm: syz.0.643 Not tainted 6.15.0-syzkaller-g3b55a9e6738b #0 PREEMPT(full) [ 224.278105][ T8072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 224.278116][ T8072] Call Trace: [ 224.278123][ T8072] [ 224.278130][ T8072] dump_stack_lvl+0x189/0x250 [ 224.278162][ T8072] ? __pfx____ratelimit+0x10/0x10 [ 224.278185][ T8072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.278217][ T8072] ? __pfx__printk+0x10/0x10 [ 224.278257][ T8072] ? __pfx___might_resched+0x10/0x10 [ 224.278274][ T8072] ? fs_reclaim_acquire+0x7d/0x100 [ 224.278304][ T8072] should_fail_ex+0x414/0x560 [ 224.278334][ T8072] ? __pfx_sock_alloc_inode+0x10/0x10 [ 224.278375][ T8072] should_failslab+0xa8/0x100 [ 224.278400][ T8072] ? __pfx_sock_alloc_inode+0x10/0x10 [ 224.278424][ T8072] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 224.278444][ T8072] ? sock_alloc_inode+0x28/0xc0 [ 224.278474][ T8072] ? __pfx_sock_alloc_inode+0x10/0x10 [ 224.278499][ T8072] sock_alloc_inode+0x28/0xc0 [ 224.278532][ T8072] alloc_inode+0x67/0x1b0 [ 224.278556][ T8072] __sock_create+0x12d/0x9f0 [ 224.278596][ T8072] mptcp_subflow_create_socket+0xfd/0xb40 [ 224.278629][ T8072] ? perf_trace_run_bpf_submit+0xee/0x170 [ 224.278663][ T8072] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 224.278694][ T8072] ? __local_bh_enable_ip+0x12d/0x1c0 [ 224.278725][ T8072] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 224.278758][ T8072] __mptcp_nmpc_sk+0x148/0x750 [ 224.278780][ T8072] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 224.278796][ T8072] ? __local_bh_enable_ip+0x12d/0x1c0 [ 224.278825][ T8072] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.278861][ T8072] ? __local_bh_enable_ip+0x12d/0x1c0 [ 224.278893][ T8072] mptcp_sendmsg_fastopen+0xd4/0x580 [ 224.278930][ T8072] mptcp_sendmsg+0x176c/0x1970 [ 224.278958][ T8072] ? __pfx___might_resched+0x10/0x10 [ 224.278974][ T8072] ? __lock_acquire+0xab9/0xd20 [ 224.279018][ T8072] ? aa_sk_perm+0x81e/0x950 [ 224.279049][ T8072] ? __pfx_aa_sk_perm+0x10/0x10 [ 224.279073][ T8072] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 224.279109][ T8072] ? inet6_sendmsg+0x101/0x120 [ 224.279141][ T8072] __sock_sendmsg+0xe5/0x270 [ 224.279171][ T8072] ____sys_sendmsg+0x505/0x830 [ 224.279198][ T8072] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.279230][ T8072] ? import_iovec+0x74/0xa0 [ 224.279256][ T8072] ___sys_sendmsg+0x21f/0x2a0 [ 224.279281][ T8072] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.279342][ T8072] ? __fget_files+0x2a/0x420 [ 224.279365][ T8072] ? __fget_files+0x3a0/0x420 [ 224.279398][ T8072] __x64_sys_sendmsg+0x19b/0x260 [ 224.279433][ T8072] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 224.279482][ T8072] ? __pfx_ksys_write+0x10/0x10 [ 224.279497][ T8072] ? rcu_is_watching+0x15/0xb0 [ 224.279561][ T8072] ? do_syscall_64+0xbe/0x3b0 [ 224.279590][ T8072] do_syscall_64+0xfa/0x3b0 [ 224.279613][ T8072] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.279635][ T8072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.279653][ T8072] ? clear_bhb_loop+0x60/0xb0 [ 224.279675][ T8072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.279692][ T8072] RIP: 0033:0x7f18acd8e929 [ 224.279707][ T8072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.279722][ T8072] RSP: 002b:00007f18adb14038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.279741][ T8072] RAX: ffffffffffffffda RBX: 00007f18acfb5fa0 RCX: 00007f18acd8e929 [ 224.279754][ T8072] RDX: 0000000020000001 RSI: 0000200000000780 RDI: 0000000000000008 [ 224.279765][ T8072] RBP: 00007f18adb14090 R08: 0000000000000000 R09: 0000000000000000 [ 224.279776][ T8072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.279786][ T8072] R13: 0000000000000000 R14: 00007f18acfb5fa0 R15: 00007ffebba22438 [ 224.279813][ T8072] [ 224.281818][ T8074] bridge0: port 3(team0) entered disabled state [ 224.450372][ T8086] FAULT_INJECTION: forcing a failure. [ 224.450372][ T8086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.454638][ T8074] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.468016][ T8086] CPU: 1 UID: 0 PID: 8086 Comm: syz.3.648 Not tainted 6.15.0-syzkaller-g3b55a9e6738b #0 PREEMPT(full) [ 224.468045][ T8086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 224.468059][ T8086] Call Trace: [ 224.468067][ T8086] [ 224.468082][ T8086] dump_stack_lvl+0x189/0x250 [ 224.468121][ T8086] ? __pfx____ratelimit+0x10/0x10 [ 224.468153][ T8086] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.468185][ T8086] ? __pfx__printk+0x10/0x10 [ 224.468221][ T8086] should_fail_ex+0x414/0x560 [ 224.468273][ T8086] _copy_to_user+0x31/0xb0 [ 224.468300][ T8086] btf_get_info_by_fd+0x321/0x680 [ 224.468336][ T8086] ? __pfx_btf_get_info_by_fd+0x10/0x10 [ 224.468366][ T8086] ? __fget_files+0x2a/0x420 [ 224.468403][ T8086] bpf_obj_get_info_by_fd+0xb2e/0x2f70 [ 224.468437][ T8086] ? tracing_gen_ctx_irq_test+0xc6/0x160 [ 224.468458][ T8086] ? perf_swevent_event+0x33e/0x5e0 [ 224.468493][ T8086] ? __pfx_perf_swevent_event+0x10/0x10 [ 224.468527][ T8086] ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10 [ 224.468565][ T8086] ? perf_tp_event+0x664/0x1380 [ 224.468610][ T8086] ? __lock_acquire+0xab9/0xd20 [ 224.468654][ T8086] ? __might_fault+0xb0/0x130 [ 224.468697][ T8086] ? bpf_lsm_bpf+0x9/0x20 [ 224.468715][ T8086] ? security_bpf+0x7e/0x300 [ 224.468752][ T8086] __sys_bpf+0x77a/0x860 [ 224.468785][ T8086] ? __pfx___sys_bpf+0x10/0x10 [ 224.468831][ T8086] ? ksys_write+0x22a/0x250 [ 224.468856][ T8086] ? __pfx_ksys_write+0x10/0x10 [ 224.468876][ T8086] ? rcu_is_watching+0x15/0xb0 [ 224.468905][ T8086] __x64_sys_bpf+0x7c/0x90 [ 224.468933][ T8086] do_syscall_64+0xfa/0x3b0 [ 224.468964][ T8086] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.468992][ T8086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.469015][ T8086] ? clear_bhb_loop+0x60/0xb0 [ 224.469041][ T8086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.469062][ T8086] RIP: 0033:0x7f7b2df8e929 [ 224.469081][ T8086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.469102][ T8086] RSP: 002b:00007f7b2ede1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 224.469125][ T8086] RAX: ffffffffffffffda RBX: 00007f7b2e1b5fa0 RCX: 00007f7b2df8e929 [ 224.469141][ T8086] RDX: 0000000000000010 RSI: 0000200000000300 RDI: 000000000000000f [ 224.469156][ T8086] RBP: 00007f7b2ede1090 R08: 0000000000000000 R09: 0000000000000000 [ 224.469169][ T8086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.469183][ T8086] R13: 0000000000000000 R14: 00007f7b2e1b5fa0 R15: 00007ffcaf7b1358 [ 224.469218][ T8086] [ 224.508573][ T8072] socket: no more sockets [ 224.514478][ T8074] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.995300][ T8074] bridge0: port 3(team0) entered blocking state [ 225.001883][ T8074] bridge0: port 3(team0) entered forwarding state [ 225.009135][ T8074] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.016605][ T8074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.024236][ T8074] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.031816][ T8074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.052387][ T8074] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 225.226036][ T8096] netlink: 'syz.2.651': attribute type 46 has an invalid length. [ 225.314912][ T8100] netlink: 'syz.1.653': attribute type 12 has an invalid length. [ 225.332760][ T8100] netlink: 132 bytes leftover after parsing attributes in process `syz.1.653'. [ 225.481535][ T8105] netlink: 'syz.4.655': attribute type 39 has an invalid length. [ 225.922045][ T8123] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 228.478581][ T8122] netlink: 'syz.3.659': attribute type 12 has an invalid length. [ 228.487578][ T8122] netlink: 132 bytes leftover after parsing attributes in process `syz.3.659'. [ 228.507717][ T8142] netlink: 'syz.1.667': attribute type 46 has an invalid length. [ 228.570749][ T8144] FAULT_INJECTION: forcing a failure. [ 228.570749][ T8144] name failslab, interval 1, probability 0, space 0, times 0 [ 228.585089][ T8144] CPU: 1 UID: 0 PID: 8144 Comm: syz.0.668 Not tainted 6.15.0-syzkaller-g3b55a9e6738b #0 PREEMPT(full) [ 228.585113][ T8144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.585124][ T8144] Call Trace: [ 228.585131][ T8144] [ 228.585138][ T8144] dump_stack_lvl+0x189/0x250 [ 228.585179][ T8144] ? __pfx____ratelimit+0x10/0x10 [ 228.585203][ T8144] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.585231][ T8144] ? __pfx__printk+0x10/0x10 [ 228.585255][ T8144] ? __pfx___might_resched+0x10/0x10 [ 228.585270][ T8144] ? fs_reclaim_acquire+0x7d/0x100 [ 228.585296][ T8144] should_fail_ex+0x414/0x560 [ 228.585323][ T8144] should_failslab+0xa8/0x100 [ 228.585345][ T8144] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 228.585363][ T8144] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 228.585388][ T8144] ? __alloc_skb+0x112/0x2d0 [ 228.585409][ T8144] __alloc_skb+0x112/0x2d0 [ 228.585429][ T8144] netlink_ack+0x146/0xa50 [ 228.585450][ T8144] ? sock_diag_rcv_msg+0x188/0x600 [ 228.585480][ T8144] ? sock_diag_rcv_msg+0x4ed/0x600 [ 228.585508][ T8144] netlink_rcv_skb+0x28c/0x470 [ 228.585526][ T8144] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 228.585552][ T8144] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 228.585585][ T8144] ? netlink_deliver_tap+0x2e/0x1b0 [ 228.585602][ T8144] ? netlink_deliver_tap+0x2e/0x1b0 [ 228.585624][ T8144] netlink_unicast+0x75b/0x8d0 [ 228.585661][ T8144] netlink_sendmsg+0x805/0xb30 [ 228.585687][ T8144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.585708][ T8144] ? aa_sock_msg_perm+0x94/0x160 [ 228.585734][ T8144] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 228.585757][ T8144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.585775][ T8144] __sock_sendmsg+0x21c/0x270 [ 228.585801][ T8144] ____sys_sendmsg+0x505/0x830 [ 228.585825][ T8144] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.585852][ T8144] ? import_iovec+0x74/0xa0 [ 228.585874][ T8144] ___sys_sendmsg+0x21f/0x2a0 [ 228.585895][ T8144] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.585949][ T8144] ? __fget_files+0x2a/0x420 [ 228.585970][ T8144] ? __fget_files+0x3a0/0x420 [ 228.586000][ T8144] __x64_sys_sendmsg+0x19b/0x260 [ 228.586022][ T8144] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 228.586040][ T8144] ? perf_trace_preemptirq_template+0xa3/0x340 [ 228.586072][ T8144] ? __pfx_ksys_write+0x10/0x10 [ 228.586087][ T8144] ? rcu_is_watching+0x15/0xb0 [ 228.586107][ T8144] ? do_syscall_64+0xbe/0x3b0 [ 228.586136][ T8144] do_syscall_64+0xfa/0x3b0 [ 228.586159][ T8144] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.586189][ T8144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.586206][ T8144] ? clear_bhb_loop+0x60/0xb0 [ 228.586227][ T8144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.586243][ T8144] RIP: 0033:0x7f18acd8e929 [ 228.586259][ T8144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.586274][ T8144] RSP: 002b:00007f18adb14038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.586292][ T8144] RAX: ffffffffffffffda RBX: 00007f18acfb5fa0 RCX: 00007f18acd8e929 [ 228.586305][ T8144] RDX: 0000000000044010 RSI: 0000200000000180 RDI: 0000000000000003 [ 228.586315][ T8144] RBP: 00007f18adb14090 R08: 0000000000000000 R09: 0000000000000000 [ 228.586326][ T8144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.586335][ T8144] R13: 0000000000000000 R14: 00007f18acfb5fa0 R15: 00007ffebba22438 [ 228.586362][ T8144] [ 229.418467][ T8149] FAULT_INJECTION: forcing a failure. [ 229.418467][ T8149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.433711][ T8149] CPU: 1 UID: 0 PID: 8149 Comm: syz.2.671 Not tainted 6.15.0-syzkaller-g3b55a9e6738b #0 PREEMPT(full) [ 229.433734][ T8149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 229.433745][ T8149] Call Trace: [ 229.433752][ T8149] [ 229.433759][ T8149] dump_stack_lvl+0x189/0x250 [ 229.433792][ T8149] ? __pfx____ratelimit+0x10/0x10 [ 229.433816][ T8149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.433843][ T8149] ? __pfx__printk+0x10/0x10 [ 229.433865][ T8149] ? __pfx_migrate_enable+0x10/0x10 [ 229.433891][ T8149] should_fail_ex+0x414/0x560 [ 229.433921][ T8149] _copy_to_user+0x31/0xb0 [ 229.433944][ T8149] generic_map_lookup_batch+0x896/0xcc0 [ 229.433983][ T8149] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 229.434012][ T8149] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 229.434035][ T8149] bpf_map_do_batch+0x25b/0x5f0 [ 229.434066][ T8149] __sys_bpf+0x70c/0x860 [ 229.434094][ T8149] ? __pfx___sys_bpf+0x10/0x10 [ 229.434115][ T8149] ? sched_clock_cpu+0x74/0x430 [ 229.434175][ T8149] __x64_sys_bpf+0x7c/0x90 [ 229.434198][ T8149] do_syscall_64+0xfa/0x3b0 [ 229.434222][ T8149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.434239][ T8149] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 229.434256][ T8149] ? clear_bhb_loop+0x60/0xb0 [ 229.434278][ T8149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.434295][ T8149] RIP: 0033:0x7f9a5a98e929 [ 229.434311][ T8149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.434326][ T8149] RSP: 002b:00007f9a5b781038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 229.434344][ T8149] RAX: ffffffffffffffda RBX: 00007f9a5abb5fa0 RCX: 00007f9a5a98e929 [ 229.434357][ T8149] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 229.434367][ T8149] RBP: 00007f9a5b781090 R08: 0000000000000000 R09: 0000000000000000 [ 229.434387][ T8149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.434397][ T8149] R13: 0000000000000000 R14: 00007f9a5abb5fa0 R15: 00007ffff141db78 [ 229.434429][ T8149] [ 230.191856][ T8177] FAULT_INJECTION: forcing a failure. [ 230.191856][ T8177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.207647][ T8177] CPU: 0 UID: 0 PID: 8177 Comm: syz.1.680 Not tainted 6.15.0-syzkaller-g3b55a9e6738b #0 PREEMPT(full) [ 230.207674][ T8177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 230.207687][ T8177] Call Trace: [ 230.207695][ T8177] [ 230.207703][ T8177] dump_stack_lvl+0x189/0x250 [ 230.207739][ T8177] ? __pfx____ratelimit+0x10/0x10 [ 230.207766][ T8177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.207797][ T8177] ? __pfx__printk+0x10/0x10 [ 230.207819][ T8177] ? __might_fault+0xb0/0x130 [ 230.207850][ T8177] should_fail_ex+0x414/0x560 [ 230.207883][ T8177] _copy_from_iter+0x3f5/0x16f0 [ 230.207918][ T8177] ? rcu_is_watching+0x15/0xb0 [ 230.207943][ T8177] ? __pfx__copy_from_iter+0x10/0x10 [ 230.207976][ T8177] ? __build_skb_around+0x257/0x3e0 [ 230.208000][ T8177] ? netlink_sendmsg+0x642/0xb30 [ 230.208020][ T8177] ? skb_put+0x11b/0x210 [ 230.208044][ T8177] netlink_sendmsg+0x6b2/0xb30 [ 230.208083][ T8177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.208108][ T8177] ? aa_sock_msg_perm+0x94/0x160 [ 230.208137][ T8177] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 230.208164][ T8177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.208186][ T8177] __sock_sendmsg+0x21c/0x270 [ 230.208221][ T8177] ____sys_sendmsg+0x505/0x830 [ 230.208273][ T8177] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.208306][ T8177] ? import_iovec+0x74/0xa0 [ 230.208333][ T8177] ___sys_sendmsg+0x21f/0x2a0 [ 230.208358][ T8177] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.208422][ T8177] ? __fget_files+0x2a/0x420 [ 230.208445][ T8177] ? __fget_files+0x3a0/0x420 [ 230.208481][ T8177] __x64_sys_sendmsg+0x19b/0x260 [ 230.208508][ T8177] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 230.208542][ T8177] ? __pfx_ksys_write+0x10/0x10 [ 230.208560][ T8177] ? rcu_is_watching+0x15/0xb0 [ 230.208585][ T8177] ? do_syscall_64+0xbe/0x3b0 [ 230.208618][ T8177] do_syscall_64+0xfa/0x3b0 [ 230.208645][ T8177] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.208671][ T8177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.208691][ T8177] ? clear_bhb_loop+0x60/0xb0 [ 230.208716][ T8177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.208736][ T8177] RIP: 0033:0x7f621238e929 [ 230.208755][ T8177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.208772][ T8177] RSP: 002b:00007f62101f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.208794][ T8177] RAX: ffffffffffffffda RBX: 00007f62125b5fa0 RCX: 00007f621238e929 [ 230.208810][ T8177] RDX: 0000000000004000 RSI: 0000200000000940 RDI: 0000000000000003 [ 230.208823][ T8177] RBP: 00007f62101f6090 R08: 0000000000000000 R09: 0000000000000000 [ 230.208835][ T8177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.208847][ T8177] R13: 0000000000000000 R14: 00007f62125b5fa0 R15: 00007ffc1e099058 [ 230.208879][ T8177] [ 230.631148][ T8186] netlink: 'syz.3.678': attribute type 39 has an invalid length. [ 231.043836][ T8191] netlink: 'syz.2.683': attribute type 46 has an invalid length. [ 231.364746][ T8203] FAULT_INJECTION: forcing a failure. [ 231.364746][ T8203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.400509][ T8203] CPU: 0 UID: 0 PID: 8203 Comm: syz.0.689 Not tainted 6.15.0-syzkaller-g3b55a9e6738b #0 PREEMPT(full) [ 231.400538][ T8203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 231.400550][ T8203] Call Trace: [ 231.400559][ T8203] [ 231.400568][ T8203] dump_stack_lvl+0x189/0x250 [ 231.400604][ T8203] ? __pfx____ratelimit+0x10/0x10 [ 231.400633][ T8203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.400664][ T8203] ? __pfx__printk+0x10/0x10 [ 231.400703][ T8203] should_fail_ex+0x414/0x560 [ 231.400738][ T8203] _copy_to_user+0x31/0xb0 [ 231.400763][ T8203] bpf_test_finish+0x1ab/0x700 [ 231.400806][ T8203] ? __pfx_bpf_test_finish+0x10/0x10 [ 231.400832][ T8203] ? slab_build_skb+0x273/0x3e0 [ 231.400856][ T8203] bpf_prog_test_run_skb+0xed5/0x1560 [ 231.400915][ T8203] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 231.400936][ T8203] bpf_prog_test_run+0x2c7/0x340 [ 231.400981][ T8203] __sys_bpf+0x4a4/0x860 [ 231.401012][ T8203] ? __pfx___sys_bpf+0x10/0x10 [ 231.401057][ T8203] ? ksys_write+0x22a/0x250 [ 231.401081][ T8203] ? __pfx_ksys_write+0x10/0x10 [ 231.401097][ T8203] ? rcu_is_watching+0x15/0xb0 [ 231.401125][ T8203] __x64_sys_bpf+0x7c/0x90 [ 231.401152][ T8203] do_syscall_64+0xfa/0x3b0 [ 231.401178][ T8203] ? lockdep_hardirqs_on+0x9c/0x150 [ 231.401205][ T8203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.401225][ T8203] ? clear_bhb_loop+0x60/0xb0 [ 231.401250][ T8203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.401269][ T8203] RIP: 0033:0x7f18acd8e929 [ 231.401287][ T8203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.401305][ T8203] RSP: 002b:00007f18adb14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 231.401327][ T8203] RAX: ffffffffffffffda RBX: 00007f18acfb5fa0 RCX: 00007f18acd8e929 [ 231.401341][ T8203] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 231.401354][ T8203] RBP: 00007f18adb14090 R08: 0000000000000000 R09: 0000000000000000 [ 231.401366][ T8203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.401377][ T8203] R13: 0000000000000000 R14: 00007f18acfb5fa0 R15: 00007ffebba22438 [ 231.401413][ T8203] [ 231.975058][ T8220] netlink: 'syz.3.694': attribute type 12 has an invalid length. [ 232.001983][ T8220] netlink: 132 bytes leftover after parsing attributes in process `syz.3.694'. [ 232.118086][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 233.881333][ T8208] ================================================================== [ 233.889468][ T8208] BUG: KASAN: slab-use-after-free in do_check+0xb388/0xe170 [ 233.896787][ T8208] Read of size 1 at addr ffff88807d4b3379 by task syz.2.687/8208 [ 233.904605][ T8208] [ 233.906960][ T8208] CPU: 1 UID: 0 PID: 8208 Comm: syz.2.687 Not tainted 6.15.0-syzkaller-g3b55a9e6738b #0 PREEMPT(full) [ 233.906981][ T8208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 233.906993][ T8208] Call Trace: [ 233.907004][ T8208] [ 233.907013][ T8208] dump_stack_lvl+0x189/0x250 [ 233.907043][ T8208] ? rcu_is_watching+0x15/0xb0 [ 233.907060][ T8208] ? __kasan_check_byte+0x12/0x40 [ 233.907080][ T8208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.907106][ T8208] ? rcu_is_watching+0x15/0xb0 [ 233.907121][ T8208] ? __virt_addr_valid+0x1c8/0x5c0 [ 233.907140][ T8208] ? lock_release+0x4b/0x3e0 [ 233.907168][ T8208] ? __virt_addr_valid+0x1c8/0x5c0 [ 233.907186][ T8208] ? __virt_addr_valid+0x4a5/0x5c0 [ 233.907207][ T8208] print_report+0xd2/0x2b0 [ 233.907230][ T8208] ? do_check+0xb388/0xe170 [ 233.907253][ T8208] kasan_report+0x118/0x150 [ 233.907274][ T8208] ? do_check+0xb388/0xe170 [ 233.907304][ T8208] do_check+0xb388/0xe170 [ 233.907328][ T8208] ? stack_depot_save_flags+0x40/0x900 [ 233.907395][ T8208] ? __pfx_do_check+0x10/0x10 [ 233.907418][ T8208] ? __asan_memset+0x22/0x50 [ 233.907444][ T8208] ? init_func_state+0x1ddf/0x2d20 [ 233.907475][ T8208] do_check_common+0x168d/0x20b0 [ 233.907512][ T8208] bpf_check+0x1381e/0x19e50 [ 233.907541][ T8208] ? perf_trace_lock+0xec/0x3b0 [ 233.907565][ T8208] ? __pfx_perf_trace_lock+0x10/0x10 [ 233.907582][ T8208] ? htab_map_hash+0x1ea/0x340 [ 233.907608][ T8208] ? bpf_trace_run10+0x1f2/0x500 [ 233.907635][ T8208] ? bpf_trace_run10+0x1f2/0x500 [ 233.907659][ T8208] ? bpf_trace_run10+0x378/0x500 [ 233.907699][ T8208] ? bpf_trace_run10+0x1f2/0x500 [ 233.907723][ T8208] ? __pfx_bpf_trace_run10+0x10/0x10 [ 233.907748][ T8208] ? bpf_prog_alloc+0x65/0x1a0 [ 233.907785][ T8208] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 233.907810][ T8208] ? __bpf_trace_percpu_alloc_percpu+0x364/0x400 [ 233.907831][ T8208] ? __pfx_bpf_check+0x10/0x10 [ 233.907852][ T8208] ? __bpf_trace_percpu_alloc_percpu+0x364/0x400 [ 233.907878][ T8208] ? bpf_prog_alloc+0x65/0x1a0 [ 233.907916][ T8208] ? __pfx___bpf_trace_percpu_alloc_percpu+0x10/0x10 [ 233.907936][ T8208] ? bpf_prog_alloc+0x65/0x1a0 [ 233.907979][ T8208] ? perf_trace_lock+0xec/0x3b0 [ 233.907994][ T8208] ? bpf_prog_alloc+0x65/0x1a0 [ 233.908025][ T8208] ? trace_event_raw_event_lock+0x1f0/0x250 [ 233.908044][ T8208] ? perf_trace_lock+0xec/0x3b0 [ 233.908063][ T8208] ? perf_trace_lock+0xec/0x3b0 [ 233.908080][ T8208] ? perf_trace_lock+0xec/0x3b0 [ 233.908099][ T8208] ? __pfx_perf_trace_lock+0x10/0x10 [ 233.908121][ T8208] ? ktime_get_with_offset+0x8c/0x2a0 [ 233.908146][ T8208] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 233.908167][ T8208] ? lockdep_hardirqs_on+0x9c/0x150 [ 233.908191][ T8208] ? ktime_get_with_offset+0x8c/0x2a0 [ 233.908215][ T8208] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 233.908236][ T8208] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 233.908286][ T8208] ? bpf_obj_name_cpy+0x194/0x1e0 [ 233.908306][ T8208] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 233.908325][ T8208] ? security_bpf_prog_load+0x7f/0x310 [ 233.908354][ T8208] bpf_prog_load+0x1318/0x1930 [ 233.908392][ T8208] ? __pfx_bpf_prog_load+0x10/0x10 [ 233.908421][ T8208] ? __pfx_perf_trace_lock+0x10/0x10 [ 233.908456][ T8208] ? bpf_lsm_bpf+0x9/0x20 [ 233.908473][ T8208] ? security_bpf+0x7e/0x300 [ 233.908498][ T8208] __sys_bpf+0x5f1/0x860 [ 233.908527][ T8208] ? __pfx___sys_bpf+0x10/0x10 [ 233.908568][ T8208] ? rcu_is_watching+0x15/0xb0 [ 233.908591][ T8208] __x64_sys_bpf+0x7c/0x90 [ 233.908615][ T8208] do_syscall_64+0xfa/0x3b0 [ 233.908642][ T8208] ? lockdep_hardirqs_on+0x9c/0x150 [ 233.908666][ T8208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.908686][ T8208] ? clear_bhb_loop+0x60/0xb0 [ 233.908708][ T8208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.908726][ T8208] RIP: 0033:0x7f9a5a98e929 [ 233.908744][ T8208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.908768][ T8208] RSP: 002b:00007f9a5b760038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 233.908790][ T8208] RAX: ffffffffffffffda RBX: 00007f9a5abb6080 RCX: 00007f9a5a98e929 [ 233.908805][ T8208] RDX: 0000000000000094 RSI: 0000200000002c40 RDI: 0000000000000005 [ 233.908819][ T8208] RBP: 00007f9a5aa10b39 R08: 0000000000000000 R09: 0000000000000000 [ 233.908831][ T8208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.908844][ T8208] R13: 0000000000000000 R14: 00007f9a5abb6080 R15: 00007ffff141db78 [ 233.908871][ T8208] [ 233.908878][ T8208] [ 234.348403][ T8208] Allocated by task 8208: [ 234.352746][ T8208] kasan_save_track+0x3e/0x80 [ 234.357441][ T8208] __kasan_kmalloc+0x93/0xb0 [ 234.362045][ T8208] __kmalloc_cache_noprof+0x230/0x3d0 [ 234.367429][ T8208] do_check_common+0x13f/0x20b0 [ 234.372297][ T8208] bpf_check+0x1381e/0x19e50 [ 234.376900][ T8208] bpf_prog_load+0x1318/0x1930 [ 234.381683][ T8208] __sys_bpf+0x5f1/0x860 [ 234.385946][ T8208] __x64_sys_bpf+0x7c/0x90 [ 234.390391][ T8208] do_syscall_64+0xfa/0x3b0 [ 234.394910][ T8208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.400816][ T8208] [ 234.403143][ T8208] Freed by task 8208: [ 234.407136][ T8208] kasan_save_track+0x3e/0x80 [ 234.411831][ T8208] kasan_save_free_info+0x46/0x50 [ 234.416869][ T8208] __kasan_slab_free+0x62/0x70 [ 234.421645][ T8208] kfree+0x18e/0x440 [ 234.425556][ T8208] push_stack+0x247/0x3c0 [ 234.429900][ T8208] check_cond_jmp_op+0x1069/0x2340 [ 234.435039][ T8208] do_check+0x672c/0xe170 [ 234.439407][ T8208] do_check_common+0x168d/0x20b0 [ 234.444388][ T8208] bpf_check+0x1381e/0x19e50 [ 234.449007][ T8208] bpf_prog_load+0x1318/0x1930 [ 234.453801][ T8208] __sys_bpf+0x5f1/0x860 [ 234.458074][ T8208] __x64_sys_bpf+0x7c/0x90 [ 234.462518][ T8208] do_syscall_64+0xfa/0x3b0 [ 234.467049][ T8208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.472967][ T8208] [ 234.475308][ T8208] The buggy address belongs to the object at ffff88807d4b3300 [ 234.475308][ T8208] which belongs to the cache kmalloc-192 of size 192 [ 234.489383][ T8208] The buggy address is located 121 bytes inside of [ 234.489383][ T8208] freed 192-byte region [ffff88807d4b3300, ffff88807d4b33c0) [ 234.503197][ T8208] [ 234.505535][ T8208] The buggy address belongs to the physical page: [ 234.511959][ T8208] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d4b3 [ 234.520769][ T8208] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 234.527902][ T8208] page_type: f5(slab) [ 234.531906][ T8208] raw: 00fff00000000000 ffff88801a4413c0 dead000000000100 dead000000000122 [ 234.540510][ T8208] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 234.549116][ T8208] page dumped because: kasan: bad access detected [ 234.555546][ T8208] page_owner tracks the page as allocated [ 234.561271][ T8208] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6415, tgid 6414 (syz.3.116), ts 118929689323, free_ts 118910414583 [ 234.580477][ T8208] post_alloc_hook+0x240/0x2a0 [ 234.585262][ T8208] get_page_from_freelist+0x21e4/0x22c0 [ 234.590844][ T8208] __alloc_frozen_pages_noprof+0x181/0x370 [ 234.596673][ T8208] alloc_pages_mpol+0x232/0x4a0 [ 234.601545][ T8208] allocate_slab+0x8a/0x3b0 [ 234.606074][ T8208] ___slab_alloc+0xbfc/0x1480 [ 234.610776][ T8208] __kmalloc_cache_noprof+0x296/0x3d0 [ 234.616171][ T8208] do_check+0x3e77/0xe170 [ 234.620523][ T8208] do_check_common+0x168d/0x20b0 [ 234.625478][ T8208] bpf_check+0x1381e/0x19e50 [ 234.630085][ T8208] bpf_prog_load+0x1318/0x1930 [ 234.634875][ T8208] __sys_bpf+0x5f1/0x860 [ 234.639158][ T8208] __x64_sys_bpf+0x7c/0x90 [ 234.643608][ T8208] do_syscall_64+0xfa/0x3b0 [ 234.648156][ T8208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.654076][ T8208] page last free pid 5169 tgid 5169 stack trace: [ 234.660413][ T8208] __free_frozen_pages+0xc71/0xe70 [ 234.665553][ T8208] __tlb_remove_table+0x2d2/0x3b0 [ 234.670602][ T8208] tlb_remove_table_rcu+0x85/0x100 [ 234.675734][ T8208] rcu_core+0xca5/0x1710 [ 234.680005][ T8208] handle_softirqs+0x286/0x870 [ 234.684800][ T8208] do_softirq+0xec/0x180 [ 234.689074][ T8208] __local_bh_enable_ip+0x17d/0x1c0 [ 234.694304][ T8208] kernel_fpu_end+0xd2/0x120 [ 234.698921][ T8208] crc32c_arch+0x71/0x240 [ 234.703281][ T8208] jbd2_journal_commit_transaction+0x1b60/0x5a00 [ 234.709643][ T8208] kjournald2+0x3cf/0x750 [ 234.714001][ T8208] kthread+0x70e/0x8a0 [ 234.718083][ T8208] ret_from_fork+0x3f9/0x770 [ 234.722695][ T8208] ret_from_fork_asm+0x1a/0x30 [ 234.727478][ T8208] [ 234.729814][ T8208] Memory state around the buggy address: [ 234.735463][ T8208] ffff88807d4b3200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 234.743535][ T8208] ffff88807d4b3280: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 234.751612][ T8208] >ffff88807d4b3300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 234.759696][ T8208] ^ [ 234.767685][ T8208] ffff88807d4b3380: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 234.775765][ T8208] ffff88807d4b3400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 234.783839][ T8208] ================================================================== [ 234.818626][ T8208] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 234.825875][ T8208] CPU: 0 UID: 0 PID: 8208 Comm: syz.2.687 Not tainted 6.15.0-syzkaller-g3b55a9e6738b #0 PREEMPT(full) [ 234.837013][ T8208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 234.847097][ T8208] Call Trace: [ 234.850405][ T8208] [ 234.853372][ T8208] dump_stack_lvl+0x99/0x250 [ 234.858019][ T8208] ? __asan_memcpy+0x40/0x70 [ 234.862669][ T8208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.867910][ T8208] ? __pfx__printk+0x10/0x10 [ 234.872560][ T8208] panic+0x2db/0x790 [ 234.876477][ T8208] ? __pfx_panic+0x10/0x10 [ 234.880921][ T8208] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 234.886915][ T8208] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 234.893256][ T8208] ? print_memory_metadata+0x314/0x400 [ 234.898727][ T8208] ? do_check+0xb388/0xe170 [ 234.903239][ T8208] check_panic_on_warn+0x89/0xb0 [ 234.908181][ T8208] ? do_check+0xb388/0xe170 [ 234.912694][ T8208] end_report+0x78/0x160 [ 234.916965][ T8208] kasan_report+0x129/0x150 [ 234.921506][ T8208] ? do_check+0xb388/0xe170 [ 234.926050][ T8208] do_check+0xb388/0xe170 [ 234.930408][ T8208] ? stack_depot_save_flags+0x40/0x900 [ 234.935908][ T8208] ? __pfx_do_check+0x10/0x10 [ 234.940628][ T8208] ? __asan_memset+0x22/0x50 [ 234.945225][ T8208] ? init_func_state+0x1ddf/0x2d20 [ 234.950346][ T8208] do_check_common+0x168d/0x20b0 [ 234.955300][ T8208] bpf_check+0x1381e/0x19e50 [ 234.959909][ T8208] ? perf_trace_lock+0xec/0x3b0 [ 234.964770][ T8208] ? __pfx_perf_trace_lock+0x10/0x10 [ 234.970094][ T8208] ? htab_map_hash+0x1ea/0x340 [ 234.974887][ T8208] ? bpf_trace_run10+0x1f2/0x500 [ 234.979841][ T8208] ? bpf_trace_run10+0x1f2/0x500 [ 234.984792][ T8208] ? bpf_trace_run10+0x378/0x500 [ 234.989743][ T8208] ? bpf_trace_run10+0x1f2/0x500 [ 234.994692][ T8208] ? __pfx_bpf_trace_run10+0x10/0x10 [ 234.999989][ T8208] ? bpf_prog_alloc+0x65/0x1a0 [ 235.004766][ T8208] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 235.010935][ T8208] ? __bpf_trace_percpu_alloc_percpu+0x364/0x400 [ 235.017279][ T8208] ? __pfx_bpf_check+0x10/0x10 [ 235.022063][ T8208] ? __bpf_trace_percpu_alloc_percpu+0x364/0x400 [ 235.028404][ T8208] ? bpf_prog_alloc+0x65/0x1a0 [ 235.033184][ T8208] ? __pfx___bpf_trace_percpu_alloc_percpu+0x10/0x10 [ 235.039865][ T8208] ? bpf_prog_alloc+0x65/0x1a0 [ 235.044635][ T8208] ? perf_trace_lock+0xec/0x3b0 [ 235.049489][ T8208] ? bpf_prog_alloc+0x65/0x1a0 [ 235.054274][ T8208] ? trace_event_raw_event_lock+0x1f0/0x250 [ 235.060169][ T8208] ? perf_trace_lock+0xec/0x3b0 [ 235.065027][ T8208] ? perf_trace_lock+0xec/0x3b0 [ 235.069882][ T8208] ? perf_trace_lock+0xec/0x3b0 [ 235.074750][ T8208] ? __pfx_perf_trace_lock+0x10/0x10 [ 235.080036][ T8208] ? ktime_get_with_offset+0x8c/0x2a0 [ 235.085416][ T8208] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 235.091663][ T8208] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.096863][ T8208] ? ktime_get_with_offset+0x8c/0x2a0 [ 235.102232][ T8208] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 235.108479][ T8208] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 235.115082][ T8208] ? bpf_obj_name_cpy+0x194/0x1e0 [ 235.120112][ T8208] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 235.125311][ T8208] ? security_bpf_prog_load+0x7f/0x310 [ 235.130775][ T8208] bpf_prog_load+0x1318/0x1930 [ 235.135550][ T8208] ? __pfx_bpf_prog_load+0x10/0x10 [ 235.140692][ T8208] ? __pfx_perf_trace_lock+0x10/0x10 [ 235.145994][ T8208] ? bpf_lsm_bpf+0x9/0x20 [ 235.150322][ T8208] ? security_bpf+0x7e/0x300 [ 235.154912][ T8208] __sys_bpf+0x5f1/0x860 [ 235.159170][ T8208] ? __pfx___sys_bpf+0x10/0x10 [ 235.163967][ T8208] ? rcu_is_watching+0x15/0xb0 [ 235.168752][ T8208] __x64_sys_bpf+0x7c/0x90 [ 235.173196][ T8208] do_syscall_64+0xfa/0x3b0 [ 235.177714][ T8208] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.182921][ T8208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.188993][ T8208] ? clear_bhb_loop+0x60/0xb0 [ 235.193675][ T8208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.199565][ T8208] RIP: 0033:0x7f9a5a98e929 [ 235.203978][ T8208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.223585][ T8208] RSP: 002b:00007f9a5b760038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 235.232016][ T8208] RAX: ffffffffffffffda RBX: 00007f9a5abb6080 RCX: 00007f9a5a98e929 [ 235.239996][ T8208] RDX: 0000000000000094 RSI: 0000200000002c40 RDI: 0000000000000005 [ 235.247971][ T8208] RBP: 00007f9a5aa10b39 R08: 0000000000000000 R09: 0000000000000000 [ 235.255958][ T8208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.263947][ T8208] R13: 0000000000000000 R14: 00007f9a5abb6080 R15: 00007ffff141db78 [ 235.271933][ T8208] [ 235.275328][ T8208] Kernel Offset: disabled [ 235.279657][ T8208] Rebooting in 86400 seconds..