last executing test programs: 3m5.329446369s ago: executing program 3 (id=2246): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}], 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000), 0x10) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x34000}], 0x1}, 0x80d1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) close(r0) 3m4.790005612s ago: executing program 3 (id=2249): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14305, 0x2e, 0xfffffbfb, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1e, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x2, 0x5, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x7c, &(0x7f0000000000)=r4, 0x62) sendmsg$sock(r3, &(0x7f0000000800)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x1c100000, @mcast2, 0x2}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000440)="b3c727cff15192663e58b22d04b078d41aa12a6eb02d496529d2f637db1062d85e2ded70ddfee7e7b2319360b5f8b23ee34c14f6830d1341ec0540e4ea3e4a25b28b11ed18b727d151ed11204ba1a4a8c97486557b84aa8bf85a01e68ac629c32ef4a8d45f55895e0baad27829e523d571941761c7ae803183e7568a49cde14da829fbbc208e4314f4cc20becca13784a971ce61cf3e927c2592c34c897ca48e8b14e05599597b5920121ce79f7366d42d3847", 0xb3}, {&(0x7f0000000500)="bdbb7e0324d5e9041cd9c00020eb39e69f016a510708f5a7430098153cf1ca739dbdf80f2b74b3c25b9ef461adb3b98a32a5f5679a80a46ca4d2b099bceeb8e4d6c86e584120e001ebeaed89cf700195e7ac5d218cd4378088e4a1603a1394c514cd9a42d322fa8ce110d5e1faa74ea9bb725a3fdffa45d559213e7df3612c33dcf13e733f822cd90d43fb54a5f584002a1bce46cc72f5ab823ac54fe4d906b881a778791df6e6ac4c84dd42957c35f8aaa6265274d7765324ab5732faf82475fd238bfdbb38d79ab798c079687964a8b303", 0xd2}, {&(0x7f0000000600)="01686b3da8af8bf1fd57cef2ade6b88d491075f9264e5edf926817e8bb782c020ca21f1bb01fb627ff9a0860e8b41b2e1791fd314ca465dbc429acbf2e45de1784031920d58e87f6aeadb7ae3c1b7b0bffca96f07a898320d7cd727292e37f9c3767e46a870f61f5374d18ef228cbc5709f25d50b0b6dc5ef5e603ccfc2ab5b7d88c71bbb67f2560d61c7efeaab0a64ff1809bdeb627b5a58835753521192c179998e485434f0dce0c30120b83b5bb324aa9f77d3c554b538fb9a3e5913394d9", 0xc0}, {&(0x7f0000000380)="3b5d1b8f99319752b4260a0acb20a93e5f3502ec1ed62b981ec0002ba722a65f81662607b045a97f5dd4781c8950e7d82c82d845a3d7f70b", 0x38}, {&(0x7f00000006c0)="1f5e70308ad89ae5d470ec8678e99f08c698ab3fb390ef34c07909b57e9f449bf8d9d8eab41dc29bd4b35a1713a2e1167a138dd2cce34aa4c88b865424666b93869357fcb5d3a3e0bcc7a372a9de43169b696051", 0x54}], 0x5, &(0x7f00000007c0)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x62}}], 0x30}, 0x40084) recvmsg$unix(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000d00)=""/155, 0x9b}, {&(0x7f0000000980)=""/168, 0xa8}, {&(0x7f0000000a40)=""/183, 0xb7}], 0x3, &(0x7f0000000c40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x90}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x8}, 0x390, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x0) getpid() socket$kcm(0x2, 0x7, 0x84) 3m4.681761025s ago: executing program 0 (id=2251): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000003036e900"/20, @ANYRES32=0x0, @ANYRES32], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), 0x0}, 0x20) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='+i\v -cp'], 0xd) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x9, 0x9, 0x2, 0x9, 0x42, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r5, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r6}, &(0x7f0000000780)=0x40000000, &(0x7f00000007c0)='%pS \x00', 0x2}, 0x20) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r7, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r8 = socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x20044080) 3m3.730771241s ago: executing program 0 (id=2254): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.state\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'vcan0\x00', 0x800}) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r5}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0xa9) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r4, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r6, 0x4) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'dvmrp0\x00', 0x7c2}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009e0000000b"], 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8442a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 3m2.932962549s ago: executing program 3 (id=2258): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875"], 0xfe1b) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x800}) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='1\x00'], 0x20) setsockopt$sock_attach_bpf(r1, 0x84, 0x76, &(0x7f0000000000), 0x8) 3m2.810897544s ago: executing program 0 (id=2259): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}], 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000), 0x10) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x34000}], 0x1}, 0x80d1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) close(r0) 3m1.978698422s ago: executing program 3 (id=2261): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="98000000180081064e81f782db4cb904021d0800067c7c09e8fe0ba10a0008000200142603600e1208001e0003070401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798", 0x98}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [], {0x95, 0x0, 0x1200}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socketpair(0x6, 0x80000, 0x7fffffff, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000600)=r2, 0x4) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r5 = gettid() perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x1, 0x6, 0x9, 0xd, 0x0, 0x8000000000000000, 0x40004, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}, 0x10008, 0x8001, 0x8, 0x9, 0x0, 0x9, 0x86a9, 0x0, 0x3, 0x0, 0xffffffff}, r5, 0xe, r3, 0x1) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r3}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000062012d000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{}, 0x0, &(0x7f00000002c0)='%pB \x00'}, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000200000000000000004ac6d8cd4d9b64012cd7a2"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3m1.725517091s ago: executing program 0 (id=2262): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007300000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b26, 0x0) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000001000)) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10) syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./cgroup\x00', 0x0, 0x4008, r3}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r5, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x10080, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2, 0x1000000000000002, 0x0) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000dc0), 0x4) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000e40)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000e80), 0x2, 0x0) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000e00)={r6}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0], 0x0, 0x5b, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x59, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0x9, [@struct={0x6, 0x2, 0x0, 0x4, 0x1, 0x3ff, [{0x3, 0x1, 0x1000}, {0xb, 0x0, 0x8}]}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x1}, @var={0x9, 0x0, 0x0, 0xe, 0x2}, @float={0x3, 0x0, 0x0, 0x10, 0x8}, @enum64={0xb, 0x1, 0x0, 0x13, 0x0, 0x8, [{0x10, 0x8, 0x9}]}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x3, 0x6}, @func={0xe, 0x0, 0x0, 0xc, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x8}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0xc7}}]}, {0x0, [0x2e, 0x30, 0x61, 0x61, 0x5f, 0x61, 0x2e]}}, &(0x7f0000000840)=""/41, 0xd1, 0x29, 0x0, 0x5, 0x10000, @value}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r1, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000940)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000ac0)=[0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf0, &(0x7f0000000980)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0xcb, 0x8, 0x8, &(0x7f0000001040)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000f40)={r0, 0x58, &(0x7f0000000ec0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000f80)={r12, 0x7fff, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001f80)=@base={0x12, 0x0, 0x236a, 0x8001, 0x402, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000fc0)='\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xf, 0xc, &(0x7f0000001080)=ANY=[@ANYBLOB="18000000320e00000000000004000000851000efa45547af00f9ffffff185800000a0000000000000000000000184a0000050000000000000000000000183b0000020000000000000000000000dd741000fcffffff04520300060000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x400, 0x95, &(0x7f0000001100)=""/149, 0x41100, 0x68, '\x00', r9, @cgroup_device=0x6, r10, 0x8, &(0x7f00000008c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0xa, 0xfff78001, 0xa0}, 0x10, r11, r1, 0x4, &(0x7f0000000c80)=[r0, r0], &(0x7f0000000cc0)=[{0x2, 0x2, 0xe}, {0x1, 0x4, 0x10, 0x5}, {0x3, 0x2, 0x3, 0x5}, {0x1, 0x5, 0x4, 0x3}], 0x10, 0x5, @void, @value}, 0x94) 3m1.133453887s ago: executing program 3 (id=2265): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff, r0}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES8], 0x12) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x4, 0xfd, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xca, 0xffffffff, 0x2, 0xffffffffffffff81}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2020) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@fallback, r1, 0x38, 0x10, 0x0, @void, @value=r2}, 0x20) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000140)) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNGETVNETLE(r2, 0x40047459, &(0x7f00000002c0)) 3m0.650333971s ago: executing program 0 (id=2266): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = getpid() sendmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x1}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x10}}], 0x30}, 0x8841) perf_event_open(&(0x7f0000000a00)={0x81fdb8d5c3403b09, 0x80, 0x7, 0x1, 0x4, 0x5, 0x0, 0x8, 0x200, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000009c0)}, 0x2, 0x9, 0x8, 0x6, 0x2, 0x8, 0x2, 0x0, 0x2f, 0x0, 0x100000001}, r1, 0x2, 0xffffffffffffffff, 0x3) r2 = socket$kcm(0x2b, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r2, 0x6, 0x7, &(0x7f0000000200)=r3, 0x4) recvmsg$kcm(r2, &(0x7f0000000940)={&(0x7f0000000680)=@x25={0x9, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000700)=""/149, 0x95}, {&(0x7f00000007c0)=""/162, 0xa2}], 0x2, &(0x7f0000000880)=""/158, 0x9e}, 0x2002) 3m0.097312288s ago: executing program 3 (id=2269): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.state\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'vcan0\x00', 0x800}) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r5}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0xa9) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r4, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r6, 0x4) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'dvmrp0\x00', 0x7c2}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009e0000000b"], 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8442a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 2m58.011809607s ago: executing program 32 (id=2269): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.state\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'vcan0\x00', 0x800}) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r5}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0xa9) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r4, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r6, 0x4) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'dvmrp0\x00', 0x7c2}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009e0000000b"], 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8442a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 2m57.969372301s ago: executing program 0 (id=2273): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}], 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000), 0x10) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x34000}], 0x1}, 0x80d1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) close(r0) 2m57.484846124s ago: executing program 33 (id=2273): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}], 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000), 0x10) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x34000}], 0x1}, 0x80d1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) close(r0) 15.770686075s ago: executing program 1 (id=3782): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{}, &(0x7f0000000200), &(0x7f0000000140)='%pI4 \x00'}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x8, 0xe, 0x0, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 15.567851983s ago: executing program 1 (id=3785): write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)={'some', 0x20, 0x1}, 0x2f) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00'}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) 15.143767514s ago: executing program 1 (id=3791): close(0xffffffffffffffff) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa1000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x1}, 0x60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 14.945825727s ago: executing program 1 (id=3793): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x18010, 0xc8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000), 0xfdef) 14.838310966s ago: executing program 1 (id=3795): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="120000000300"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580)=0x2, 0x0}, 0x20) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x5460, &(0x7f0000000000)=0xfffffffffffff2ff) 3.169786529s ago: executing program 2 (id=3892): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x400081, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0xfdef) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x8d8, 0x7}, 0x106978, 0xfffffffffffffffe, 0x0, 0x9, 0x74, 0x7, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0xbae4d97256dae414) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x5, 0xfffffffffffffd73, 0xec, 0x5, 0x40, 0x7, 0x0, 0x7fffffff, 0x9d6d1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffffd, 0xf}, 0x10137f, 0x7ff, 0x7, 0x4, 0x81, 0x5, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x7, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) 1.873139523s ago: executing program 2 (id=3904): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0xff, 0x6, 0x2, 0x0, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) 1.75610069s ago: executing program 5 (id=3905): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000500)=ANY=[@ANYBLOB='a *:* r\x00'], 0x8) 1.701768937s ago: executing program 4 (id=3906): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x29}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.684694806s ago: executing program 6 (id=3907): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)=""/206, 0xce}, {&(0x7f0000000200)=""/205, 0x113}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/4116, 0x1004}, {&(0x7f0000000300)=""/50, 0x32}, {&(0x7f0000000340)=""/158, 0x9e}, {&(0x7f0000000500)=""/213, 0xd5}], 0x7}, 0x40012100) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40010022) 1.606318958s ago: executing program 5 (id=3908): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000b00)=""/255, 0xff}, {&(0x7f0000000d00)=""/214, 0xd6}, {&(0x7f0000003100)=""/4059, 0xfdb}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000940)=""/188, 0xbc}, {&(0x7f0000000e00)=""/223, 0xdf}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f0000000240)=""/174, 0xae}, {&(0x7f0000000c00)=""/208, 0xd0}, {&(0x7f0000000700)=""/86, 0x56}, {&(0x7f0000000140)=""/98, 0x62}, {&(0x7f0000000a00)=""/182, 0xb6}], 0xc}, 0x40012100) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 1.549359495s ago: executing program 4 (id=3909): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b00000005000000010001000a0000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x50) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) close(0x3) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.512476341s ago: executing program 2 (id=3910): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r0}, &(0x7f0000001780)=0x4, 0x0}, 0x20) 1.463420737s ago: executing program 6 (id=3911): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x10}, 0x0, 0x0, 0x2, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2f}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @exit={0x95, 0x0, 0xc00}], {0x95, 0x0, 0x7000}}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1.312834605s ago: executing program 5 (id=3912): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) 1.261899222s ago: executing program 2 (id=3913): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x48}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00'}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) gettid() setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.242143888s ago: executing program 4 (id=3914): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x8, 0x4, 0x4, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x25}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000808, 0x0, 0x0}}, 0x10) 1.241832327s ago: executing program 6 (id=3915): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001e00)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) gettid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000480)=ANY=[], 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 979.863072ms ago: executing program 4 (id=3916): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x7b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622e563a3", 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 857.932384ms ago: executing program 2 (id=3917): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) 825.226577ms ago: executing program 5 (id=3918): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc40}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb7532c2c84b67e7c, 0xe, &(0x7f0000000980)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0xc05}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x31) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x17, 0x1, 0x7f, &(0x7f00000028c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) close(0xffffffffffffffff) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000880), 0x12) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000800)={'some', 0x20, 0x8000000000000000, 0x20, 0x8}, 0x2f) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510850004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff9500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) close(0x3) 673.436144ms ago: executing program 4 (id=3919): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb7532c2c84b67e7c, 0xe, &(0x7f0000000980)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0xc05}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1000000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x41bc, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x31) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x17, 0x1, 0x7f, &(0x7f00000028c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x8, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x5f, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000500)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x10, 0x8, @void, @value}, 0x94) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000880), 0x12) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000800)={'some', 0x20, 0x8000000000000000, 0x20, 0x8}, 0x2f) write$cgroup_int(r1, &(0x7f0000000040), 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff9500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) close(0x3) 561.899899ms ago: executing program 6 (id=3920): mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 513.276108ms ago: executing program 5 (id=3921): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfff, '\x00', 0x0, r1, 0x0, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x1c, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xe8, 0x0, &(0x7f0000000280)="dd"}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000840)=""/262, 0x37, 0x106, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002a00)={r3, 0x0, 0x0}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x44) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000005c0)='cgroup.max.descendants\x00', 0x2, 0x0) socketpair(0x26, 0x3, 0x1, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg(r6, &(0x7f0000000440)={&(0x7f0000000200)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000000400)=[{&(0x7f00000003c0)}], 0x1}, 0x800) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYRESHEX=r5, @ANYRESOCT], 0x27) r7 = openat$cgroup_int(r4, &(0x7f0000000480)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f00000004c0)=0x1, 0x12) 349.560972ms ago: executing program 4 (id=3922): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="7a0af8ff75257025bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7000, 0x4000000}, 0x28) 297.790049ms ago: executing program 6 (id=3923): perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r3, 0x24, 0x0, 0x6, &(0x7f0000000240)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40) 249.520565ms ago: executing program 2 (id=3924): mkdir(0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff9500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0x1000000, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 80.65837ms ago: executing program 6 (id=3925): bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x8, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486"], 0xfdef) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/user\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xe40, 0x0, &(0x7f00000000c0)="5cdd3086ddffff6633c9bbac88a8862608dffd00139fb7a884bdfc14f4870800", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) 25.752859ms ago: executing program 5 (id=3926): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0xffff}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10}, [@ldst={0x7, 0xff05, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000040), &(0x7f0000000380)='%pS \x00'}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000080000000611000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x1a, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 0s ago: executing program 1 (id=3797): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6029c3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) kernel console output (not intermixed with test programs): utes in process `syz.1.2737'. [ 757.564689][T13681] netlink: 'syz.5.2747': attribute type 21 has an invalid length. [ 757.942191][T13691] FAULT_INJECTION: forcing a failure. [ 757.942191][T13691] name failslab, interval 1, probability 0, space 0, times 0 [ 757.955077][T13691] CPU: 1 UID: 0 PID: 13691 Comm: syz.6.2751 Not tainted 6.16.0-rc2-syzkaller-g190113989ae0 #0 PREEMPT(full) [ 757.955105][T13691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 757.955118][T13691] Call Trace: [ 757.955127][T13691] [ 757.955137][T13691] dump_stack_lvl+0x189/0x250 [ 757.955177][T13691] ? __pfx____ratelimit+0x10/0x10 [ 757.955211][T13691] ? __pfx_dump_stack_lvl+0x10/0x10 [ 757.955246][T13691] ? __pfx__printk+0x10/0x10 [ 757.955273][T13691] ? __pfx_css_rstat_updated+0x10/0x10 [ 757.955330][T13691] should_fail_ex+0x414/0x560 [ 757.955364][T13691] should_failslab+0xa8/0x100 [ 757.955400][T13691] kmem_cache_alloc_noprof+0x73/0x3c0 [ 757.955432][T13691] ? radix_tree_node_alloc+0x7e/0x3a0 [ 757.955466][T13691] radix_tree_node_alloc+0x7e/0x3a0 [ 757.955501][T13691] idr_get_free+0x2b3/0xa70 [ 757.955542][T13691] idr_alloc_u32+0x159/0x2d0 [ 757.955583][T13691] ? __pfx_idr_alloc_u32+0x10/0x10 [ 757.955617][T13691] ? do_raw_spin_lock+0x121/0x290 [ 757.955648][T13691] idr_alloc_cyclic+0x9b/0x1b0 [ 757.955685][T13691] bpf_map_alloc_id+0x40/0xe0 [ 757.955715][T13691] map_create+0xd59/0x1150 [ 757.955746][T13691] ? security_bpf+0x7e/0x300 [ 757.955772][T13691] __sys_bpf+0x67e/0x860 [ 757.955801][T13691] ? __pfx___sys_bpf+0x10/0x10 [ 757.955844][T13691] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 757.955872][T13691] ? __pfx_ksys_write+0x10/0x10 [ 757.955900][T13691] __x64_sys_bpf+0x7c/0x90 [ 757.955936][T13691] do_syscall_64+0xfa/0x3b0 [ 757.955952][T13691] ? lockdep_hardirqs_on+0x9c/0x150 [ 757.955980][T13691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.955998][T13691] ? clear_bhb_loop+0x60/0xb0 [ 757.956022][T13691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.956040][T13691] RIP: 0033:0x7fe0a3b8e929 [ 757.956056][T13691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 757.956072][T13691] RSP: 002b:00007fe0a4a45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 757.956109][T13691] RAX: ffffffffffffffda RBX: 00007fe0a3db6080 RCX: 00007fe0a3b8e929 [ 757.956123][T13691] RDX: 0000000000000048 RSI: 0000200000000180 RDI: 0000000000000000 [ 757.956136][T13691] RBP: 00007fe0a4a45090 R08: 0000000000000000 R09: 0000000000000000 [ 757.956148][T13691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.956160][T13691] R13: 0000000000000001 R14: 00007fe0a3db6080 R15: 00007ffed1e22ef8 [ 757.956202][T13691] [ 758.349509][T13696] netlink: 'syz.2.2753': attribute type 2 has an invalid length. [ 758.365768][T13696] netlink: 'syz.2.2753': attribute type 8 has an invalid length. [ 758.386105][T13696] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2753'. [ 758.621293][T13701] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2755'. [ 759.326444][T13727] syz.1.2763: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 759.404122][T13727] CPU: 0 UID: 0 PID: 13727 Comm: syz.1.2763 Not tainted 6.16.0-rc2-syzkaller-g190113989ae0 #0 PREEMPT(full) [ 759.404152][T13727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 759.404165][T13727] Call Trace: [ 759.404181][T13727] [ 759.404197][T13727] dump_stack_lvl+0x189/0x250 [ 759.404275][T13727] ? __pfx_dump_stack_lvl+0x10/0x10 [ 759.404320][T13727] ? __pfx__printk+0x10/0x10 [ 759.404373][T13727] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 759.404414][T13727] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 759.404464][T13727] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 759.404531][T13727] warn_alloc+0x214/0x310 [ 759.404572][T13727] ? stack_depot_save_flags+0x40/0x900 [ 759.404647][T13727] ? __pfx_warn_alloc+0x10/0x10 [ 759.404711][T13727] ? kasan_save_track+0x4f/0x80 [ 759.404762][T13727] ? xskq_create+0x56/0x170 [ 759.404789][T13727] ? xsk_init_queue+0xb0/0x110 [ 759.404813][T13727] ? xsk_setsockopt+0x4de/0x710 [ 759.404837][T13727] ? do_sock_setsockopt+0x257/0x3e0 [ 759.404859][T13727] ? __x64_sys_setsockopt+0x18b/0x220 [ 759.404882][T13727] ? do_syscall_64+0xfa/0x3b0 [ 759.404898][T13727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.404987][T13727] __vmalloc_node_range_noprof+0x125/0x12f0 [ 759.405369][T13727] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 759.405447][T13727] ? xskq_create+0x56/0x170 [ 759.405524][T13727] ? __kasan_kmalloc+0x93/0xb0 [ 759.405603][T13727] vmalloc_user_noprof+0xad/0xf0 [ 759.405651][T13727] ? xskq_create+0xbf/0x170 [ 759.405722][T13727] xskq_create+0xbf/0x170 [ 759.405814][T13727] xsk_init_queue+0xb0/0x110 [ 759.405894][T13727] xsk_setsockopt+0x4de/0x710 [ 759.405971][T13727] ? __pfx_xsk_setsockopt+0x10/0x10 [ 759.406016][T13727] ? __pfx_perf_trace_lock+0x10/0x10 [ 759.406103][T13727] ? aa_sock_opt_perm+0x74/0x110 [ 759.406172][T13727] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 759.406202][T13727] ? __pfx_xsk_setsockopt+0x10/0x10 [ 759.406269][T13727] do_sock_setsockopt+0x257/0x3e0 [ 759.406347][T13727] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 759.406459][T13727] ? __fget_files+0x2a/0x420 [ 759.406581][T13727] __x64_sys_setsockopt+0x18b/0x220 [ 759.406671][T13727] do_syscall_64+0xfa/0x3b0 [ 759.406694][T13727] ? lockdep_hardirqs_on+0x9c/0x150 [ 759.406733][T13727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.406759][T13727] ? clear_bhb_loop+0x60/0xb0 [ 759.406816][T13727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.406837][T13727] RIP: 0033:0x7f2fcf18e929 [ 759.406875][T13727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 759.406894][T13727] RSP: 002b:00007f2fcfffe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 759.406916][T13727] RAX: ffffffffffffffda RBX: 00007f2fcf3b5fa0 RCX: 00007f2fcf18e929 [ 759.406930][T13727] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 759.406942][T13727] RBP: 00007f2fcf210b39 R08: 0000000000000004 R09: 0000000000000000 [ 759.406954][T13727] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 759.406967][T13727] R13: 0000000000000000 R14: 00007f2fcf3b5fa0 R15: 00007ffc9c071f68 [ 759.407149][T13727] [ 759.841695][T13727] Mem-Info: [ 759.844930][T13727] active_anon:19307 inactive_anon:0 isolated_anon:0 [ 759.844930][T13727] active_file:21705 inactive_file:40093 isolated_file:0 [ 759.844930][T13727] unevictable:768 dirty:170 writeback:0 [ 759.844930][T13727] slab_reclaimable:10449 slab_unreclaimable:96940 [ 759.844930][T13727] mapped:39041 shmem:16247 pagetables:1037 [ 759.844930][T13727] sec_pagetables:0 bounce:0 [ 759.844930][T13727] kernel_misc_reclaimable:0 [ 759.844930][T13727] free:1304926 free_pcp:10778 free_cma:0 [ 760.071406][T13727] Node 0 active_anon:82684kB inactive_anon:0kB active_file:86820kB inactive_file:160176kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:149636kB dirty:672kB writeback:0kB shmem:69116kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11464kB pagetables:3920kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 760.137214][T13727] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 760.176822][T13737] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2768'. [ 760.227528][T13727] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 760.312764][T13727] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 760.393246][T13727] Node 0 DMA32 free:1299360kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:82740kB inactive_anon:0kB active_file:86820kB inactive_file:158332kB unevictable:1536kB writepending:672kB present:3129332kB managed:2561024kB mlocked:0kB bounce:0kB free_pcp:23296kB local_pcp:8396kB free_cma:0kB [ 760.454494][T13727] lowmem_reserve[]: 0 0 1 1 1 [ 760.459352][T13727] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1844kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 760.524207][T13727] lowmem_reserve[]: 0 0 0 0 0 [ 760.529016][T13727] Node 1 Normal free:3900648kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20588kB local_pcp:11236kB free_cma:0kB [ 760.642244][T13727] lowmem_reserve[]: 0 0 0 0 0 [ 760.690681][T13727] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 760.746858][T13727] Node 0 DMA32: 2*4kB (E) 9*8kB (ME) 3*16kB (U) 665*32kB (UM) 882*64kB (UME) 503*128kB (UME) 290*256kB (UM) 211*512kB (UME) 88*1024kB (UME) 32*2048kB (UME) 200*4096kB (M) = 1299360kB [ 760.772305][T13727] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 760.787352][T13727] Node 1 Normal: 222*4kB (UE) 58*8kB (UME) 42*16kB (UME) 66*32kB (UME) 23*64kB (UME) 10*128kB (UME) 2*256kB (M) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 949*4096kB (ME) = 3900648kB [ 760.834937][T13727] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 760.845106][T13727] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 760.958710][T13727] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 761.003488][T13727] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 761.085329][T13727] 72717 total pagecache pages [ 761.090197][T13727] 0 pages in swap cache [ 761.100340][T13727] Free swap = 124996kB [ 761.110487][T13727] Total swap = 124996kB [ 761.150595][T13727] 2097051 pages RAM [ 761.154456][T13727] 0 pages HighMem/MovableOnly [ 761.159522][T13727] 424689 pages reserved [ 761.165109][T13765] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2781'. [ 761.199479][T13765] FAULT_INJECTION: forcing a failure. [ 761.199479][T13765] name failslab, interval 1, probability 0, space 0, times 0 [ 761.238684][T13765] CPU: 1 UID: 0 PID: 13765 Comm: syz.2.2781 Not tainted 6.16.0-rc2-syzkaller-g190113989ae0 #0 PREEMPT(full) [ 761.238727][T13765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 761.238747][T13765] Call Trace: [ 761.238760][T13765] [ 761.238774][T13765] dump_stack_lvl+0x189/0x250 [ 761.238827][T13765] ? __pfx____ratelimit+0x10/0x10 [ 761.238875][T13765] ? __pfx_dump_stack_lvl+0x10/0x10 [ 761.238924][T13765] ? __pfx__printk+0x10/0x10 [ 761.238966][T13765] ? __pfx___might_resched+0x10/0x10 [ 761.239006][T13765] ? fs_reclaim_acquire+0x7d/0x100 [ 761.239035][T13765] should_fail_ex+0x414/0x560 [ 761.239065][T13765] should_failslab+0xa8/0x100 [ 761.239089][T13765] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 761.239108][T13765] ? rtnl_prop_list_size+0x1ba/0x1e0 [ 761.239138][T13765] ? __alloc_skb+0x112/0x2d0 [ 761.239165][T13765] __alloc_skb+0x112/0x2d0 [ 761.239192][T13765] rtmsg_ifinfo_build_skb+0x84/0x260 [ 761.239230][T13765] rtmsg_ifinfo+0x8c/0x1a0 [ 761.239273][T13765] netif_state_change+0x29e/0x3a0 [ 761.239293][T13765] ? __pfx_console_unlock+0x10/0x10 [ 761.239314][T13765] ? __pfx_netif_state_change+0x10/0x10 [ 761.239340][T13765] ? __nla_parse+0x40/0x60 [ 761.239373][T13765] do_setlink+0x35de/0x41c0 [ 761.239413][T13765] ? __pfx_do_setlink+0x10/0x10 [ 761.239437][T13765] ? _printk+0xcf/0x120 [ 761.239457][T13765] ? __pfx____ratelimit+0x10/0x10 [ 761.239498][T13765] ? __lock_acquire+0xab9/0xd20 [ 761.239535][T13765] ? __mutex_trylock_common+0x153/0x260 [ 761.239558][T13765] ? __pfx___mutex_trylock_common+0x10/0x10 [ 761.239584][T13765] ? rcu_is_watching+0x15/0xb0 [ 761.239614][T13765] ? trace_contention_end+0x39/0x120 [ 761.239634][T13765] ? __mutex_lock+0x330/0xe80 [ 761.239655][T13765] ? __pfx_aa_get_newest_label+0x10/0x10 [ 761.239692][T13765] ? __pfx___mutex_lock+0x10/0x10 [ 761.239720][T13765] ? ns_capable+0x8a/0xf0 [ 761.239757][T13765] rtnl_setlink+0x604/0x900 [ 761.239785][T13765] ? __pfx_rtnl_setlink+0x10/0x10 [ 761.239822][T13765] ? kasan_quarantine_put+0xdd/0x220 [ 761.239932][T13765] ? __pfx_rtnl_setlink+0x10/0x10 [ 761.239953][T13765] rtnetlink_rcv_msg+0x7cf/0xb70 [ 761.239977][T13765] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 761.239997][T13765] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 761.240016][T13765] ? ref_tracker_free+0x63a/0x7d0 [ 761.240041][T13765] ? __copy_skb_header+0xa7/0x550 [ 761.240069][T13765] ? __pfx_ref_tracker_free+0x10/0x10 [ 761.240096][T13765] ? __skb_clone+0x63/0x7a0 [ 761.240130][T13765] netlink_rcv_skb+0x205/0x470 [ 761.240154][T13765] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 761.240178][T13765] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 761.240215][T13765] ? netlink_deliver_tap+0x2e/0x1b0 [ 761.240238][T13765] ? netlink_deliver_tap+0x2e/0x1b0 [ 761.240273][T13765] netlink_unicast+0x758/0x8d0 [ 761.240305][T13765] netlink_sendmsg+0x805/0xb30 [ 761.240340][T13765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 761.240388][T13765] ? aa_sock_msg_perm+0x94/0x160 [ 761.240435][T13765] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 761.240463][T13765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 761.240491][T13765] __sock_sendmsg+0x21c/0x270 [ 761.240530][T13765] ____sys_sendmsg+0x505/0x830 [ 761.240568][T13765] ? __pfx_____sys_sendmsg+0x10/0x10 [ 761.240607][T13765] ? import_iovec+0x74/0xa0 [ 761.240633][T13765] ___sys_sendmsg+0x21f/0x2a0 [ 761.240665][T13765] ? __pfx____sys_sendmsg+0x10/0x10 [ 761.240736][T13765] ? __fget_files+0x2a/0x420 [ 761.240759][T13765] ? __fget_files+0x3a0/0x420 [ 761.240796][T13765] __x64_sys_sendmsg+0x19b/0x260 [ 761.240828][T13765] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 761.240869][T13765] ? __pfx_ksys_write+0x10/0x10 [ 761.240886][T13765] ? rcu_is_watching+0x15/0xb0 [ 761.240926][T13765] ? do_syscall_64+0xbe/0x3b0 [ 761.240950][T13765] do_syscall_64+0xfa/0x3b0 [ 761.240969][T13765] ? lockdep_hardirqs_on+0x9c/0x150 [ 761.241001][T13765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.241023][T13765] ? clear_bhb_loop+0x60/0xb0 [ 761.241050][T13765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.241071][T13765] RIP: 0033:0x7f4d6338e929 [ 761.241090][T13765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 761.241109][T13765] RSP: 002b:00007f4d6410f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 761.241131][T13765] RAX: ffffffffffffffda RBX: 00007f4d635b5fa0 RCX: 00007f4d6338e929 [ 761.241147][T13765] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 761.241161][T13765] RBP: 00007f4d6410f090 R08: 0000000000000000 R09: 0000000000000000 [ 761.241175][T13765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 761.241187][T13765] R13: 0000000000000000 R14: 00007f4d635b5fa0 R15: 00007ffebf27ac88 [ 761.241222][T13765] [ 761.253467][T13727] 0 pages cma reserved [ 761.279419][T13765] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 761.983221][T13785] netlink: 'syz.5.2790': attribute type 2 has an invalid length. [ 762.010857][T13785] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2790'. [ 762.221249][T13792] FAULT_INJECTION: forcing a failure. [ 762.221249][T13792] name failslab, interval 1, probability 0, space 0, times 0 [ 762.250083][T13792] CPU: 1 UID: 0 PID: 13792 Comm: syz.5.2793 Not tainted 6.16.0-rc2-syzkaller-g190113989ae0 #0 PREEMPT(full) [ 762.250109][T13792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 762.250121][T13792] Call Trace: [ 762.250129][T13792] [ 762.250138][T13792] dump_stack_lvl+0x189/0x250 [ 762.250172][T13792] ? __pfx____ratelimit+0x10/0x10 [ 762.250201][T13792] ? __pfx_dump_stack_lvl+0x10/0x10 [ 762.250231][T13792] ? __pfx__printk+0x10/0x10 [ 762.250258][T13792] ? __pfx___might_resched+0x10/0x10 [ 762.250287][T13792] ? fs_reclaim_acquire+0x7d/0x100 [ 762.250316][T13792] should_fail_ex+0x414/0x560 [ 762.250364][T13792] should_failslab+0xa8/0x100 [ 762.250387][T13792] __kmalloc_noprof+0xcb/0x4f0 [ 762.250424][T13792] ? kfree+0x4d/0x440 [ 762.250454][T13792] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 762.250494][T13792] tomoyo_realpath_from_path+0xe3/0x5d0 [ 762.250529][T13792] ? tomoyo_domain+0xd9/0x130 [ 762.250573][T13792] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 762.250601][T13792] tomoyo_path_number_perm+0x1e8/0x5a0 [ 762.250632][T13792] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 762.250683][T13792] ? __lock_acquire+0xab9/0xd20 [ 762.250742][T13792] ? __fget_files+0x2a/0x420 [ 762.250771][T13792] ? __fget_files+0x2a/0x420 [ 762.250794][T13792] ? __fget_files+0x3a0/0x420 [ 762.250817][T13792] ? __fget_files+0x2a/0x420 [ 762.250848][T13792] security_file_ioctl+0xcb/0x2d0 [ 762.250877][T13792] __se_sys_ioctl+0x47/0x170 [ 762.250914][T13792] do_syscall_64+0xfa/0x3b0 [ 762.250934][T13792] ? lockdep_hardirqs_on+0x9c/0x150 [ 762.250967][T13792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.250996][T13792] ? clear_bhb_loop+0x60/0xb0 [ 762.251024][T13792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.251045][T13792] RIP: 0033:0x7ffb6238e929 [ 762.251064][T13792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 762.251085][T13792] RSP: 002b:00007ffb632ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 762.251108][T13792] RAX: ffffffffffffffda RBX: 00007ffb625b5fa0 RCX: 00007ffb6238e929 [ 762.251124][T13792] RDX: 00002000000002c0 RSI: 0000000040047459 RDI: 0000000000000003 [ 762.251139][T13792] RBP: 00007ffb632ba090 R08: 0000000000000000 R09: 0000000000000000 [ 762.251153][T13792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.251165][T13792] R13: 0000000000000000 R14: 00007ffb625b5fa0 R15: 00007ffeaa1dac68 [ 762.251202][T13792] [ 762.522820][T13792] ERROR: Out of memory at tomoyo_realpath_from_path. [ 762.565624][T13802] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2797'. [ 762.633961][T13802] team_slave_0: entered allmulticast mode [ 762.676206][T13802] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 762.716971][T13808] FAULT_INJECTION: forcing a failure. [ 762.716971][T13808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 762.777257][T13808] CPU: 1 UID: 0 PID: 13808 Comm: syz.2.2800 Not tainted 6.16.0-rc2-syzkaller-g190113989ae0 #0 PREEMPT(full) [ 762.777284][T13808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 762.777295][T13808] Call Trace: [ 762.777302][T13808] [ 762.777310][T13808] dump_stack_lvl+0x189/0x250 [ 762.777343][T13808] ? __pfx____ratelimit+0x10/0x10 [ 762.777372][T13808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 762.777400][T13808] ? __pfx__printk+0x10/0x10 [ 762.777420][T13808] ? __might_fault+0xb0/0x130 [ 762.777449][T13808] should_fail_ex+0x414/0x560 [ 762.777478][T13808] _copy_from_user+0x2d/0xb0 [ 762.777498][T13808] kstrtouint_from_user+0xc4/0x170 [ 762.777527][T13808] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 762.777570][T13808] proc_fail_nth_write+0x88/0x240 [ 762.777592][T13808] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 762.777621][T13808] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 762.777645][T13808] vfs_write+0x27e/0xa90 [ 762.777683][T13808] ? __pfx_vfs_write+0x10/0x10 [ 762.777714][T13808] ? __fget_files+0x2a/0x420 [ 762.777739][T13808] ? __fget_files+0x3a0/0x420 [ 762.777758][T13808] ? __fget_files+0x2a/0x420 [ 762.777787][T13808] ksys_write+0x145/0x250 [ 762.777807][T13808] ? __pfx_ksys_write+0x10/0x10 [ 762.777821][T13808] ? rcu_is_watching+0x15/0xb0 [ 762.777855][T13808] ? do_syscall_64+0xbe/0x3b0 [ 762.777876][T13808] do_syscall_64+0xfa/0x3b0 [ 762.777892][T13808] ? lockdep_hardirqs_on+0x9c/0x150 [ 762.777919][T13808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.777937][T13808] ? clear_bhb_loop+0x60/0xb0 [ 762.777960][T13808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.777977][T13808] RIP: 0033:0x7f4d6338d3df [ 762.777993][T13808] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 762.778009][T13808] RSP: 002b:00007f4d6410f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 762.778027][T13808] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4d6338d3df [ 762.778040][T13808] RDX: 0000000000000001 RSI: 00007f4d6410f0a0 RDI: 0000000000000004 [ 762.778051][T13808] RBP: 00007f4d6410f090 R08: 0000000000000000 R09: 0000000000000000 [ 762.778062][T13808] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 762.778073][T13808] R13: 0000000000000000 R14: 00007f4d635b5fa0 R15: 00007ffebf27ac88 [ 762.778107][T13808] [ 763.134562][T13809] delete_channel: no stack [ 763.461244][T13834] netlink: 'syz.4.2810': attribute type 2 has an invalid length. [ 763.744018][T13845] bond_slave_1: mtu greater than device maximum [ 763.832423][T13849] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.2814'. [ 763.859849][T13848] tap0: tun_chr_ioctl cmd 1074025677 [ 763.873037][T13848] tap0: linktype set to 6 [ 763.878304][T13853] netlink: 'syz.2.2818': attribute type 10 has an invalid length. [ 764.000501][T13856] FAULT_INJECTION: forcing a failure. [ 764.000501][T13856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 764.074110][T13856] CPU: 0 UID: 0 PID: 13856 Comm: syz.5.2819 Not tainted 6.16.0-rc2-syzkaller-g190113989ae0 #0 PREEMPT(full) [ 764.074142][T13856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 764.074156][T13856] Call Trace: [ 764.074165][T13856] [ 764.074174][T13856] dump_stack_lvl+0x189/0x250 [ 764.074212][T13856] ? __pfx____ratelimit+0x10/0x10 [ 764.074246][T13856] ? __pfx_dump_stack_lvl+0x10/0x10 [ 764.074280][T13856] ? __pfx__printk+0x10/0x10 [ 764.074318][T13856] should_fail_ex+0x414/0x560 [ 764.074353][T13856] _copy_to_user+0x31/0xb0 [ 764.074377][T13856] simple_read_from_buffer+0xe1/0x170 [ 764.074406][T13856] proc_fail_nth_read+0x1df/0x250 [ 764.074437][T13856] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 764.074467][T13856] ? rw_verify_area+0x258/0x650 [ 764.074499][T13856] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 764.074527][T13856] vfs_read+0x200/0x980 [ 764.074566][T13856] ? __pfx___mutex_lock+0x10/0x10 [ 764.074587][T13856] ? __pfx_vfs_read+0x10/0x10 [ 764.074622][T13856] ? __fget_files+0x2a/0x420 [ 764.074651][T13856] ? __fget_files+0x3a0/0x420 [ 764.074675][T13856] ? __fget_files+0x2a/0x420 [ 764.074709][T13856] ksys_read+0x145/0x250 [ 764.074732][T13856] ? __pfx_ksys_read+0x10/0x10 [ 764.074762][T13856] ? rcu_is_watching+0x15/0xb0 [ 764.074815][T13856] ? do_syscall_64+0xbe/0x3b0 [ 764.074849][T13856] do_syscall_64+0xfa/0x3b0 [ 764.074864][T13856] ? lockdep_hardirqs_on+0x9c/0x150 [ 764.074891][T13856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.074910][T13856] ? clear_bhb_loop+0x60/0xb0 [ 764.074933][T13856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.074951][T13856] RIP: 0033:0x7ffb6238d33c [ 764.074967][T13856] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 764.074993][T13856] RSP: 002b:00007ffb632ba030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 764.075013][T13856] RAX: ffffffffffffffda RBX: 00007ffb625b5fa0 RCX: 00007ffb6238d33c [ 764.075026][T13856] RDX: 000000000000000f RSI: 00007ffb632ba0a0 RDI: 0000000000000006 [ 764.075038][T13856] RBP: 00007ffb632ba090 R08: 0000000000000000 R09: 0000000000000000 [ 764.075049][T13856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 764.075060][T13856] R13: 0000000000000000 R14: 00007ffb625b5fa0 R15: 00007ffeaa1dac68 [ 764.075088][T13856] [ 764.415100][T13862] netlink: 'syz.1.2824': attribute type 29 has an invalid length. [ 764.638911][T13877] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2826'. [ 764.675422][T13870] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2826'. [ 764.719096][T13877] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2826'. [ 764.816643][T13885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2831'. [ 764.976532][T13890] netlink: 'syz.4.2833': attribute type 10 has an invalid length. [ 765.252094][T13904] FAULT_INJECTION: forcing a failure. [ 765.252094][T13904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 765.273265][T13890] team0: Port device geneve1 added [ 765.311435][T13904] CPU: 0 UID: 0 PID: 13904 Comm: syz.2.2836 Not tainted 6.16.0-rc2-syzkaller-g190113989ae0 #0 PREEMPT(full) [ 765.311465][T13904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 765.311479][T13904] Call Trace: [ 765.311488][T13904] [ 765.311508][T13904] dump_stack_lvl+0x189/0x250 [ 765.311556][T13904] ? __pfx____ratelimit+0x10/0x10 [ 765.311585][T13904] ? __pfx_dump_stack_lvl+0x10/0x10 [ 765.311622][T13904] ? __pfx__printk+0x10/0x10 [ 765.311658][T13904] should_fail_ex+0x414/0x560 [ 765.311688][T13904] _copy_to_user+0x31/0xb0 [ 765.311711][T13904] simple_read_from_buffer+0xe1/0x170 [ 765.311737][T13904] proc_fail_nth_read+0x1df/0x250 [ 765.311764][T13904] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 765.311792][T13904] ? rw_verify_area+0x258/0x650 [ 765.311820][T13904] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 765.311844][T13904] vfs_read+0x200/0x980 [ 765.311884][T13904] ? __pfx_vfs_read+0x10/0x10 [ 765.311909][T13904] ? irqentry_exit+0x74/0x90 [ 765.311937][T13904] ? lockdep_hardirqs_on+0x9c/0x150 [ 765.311989][T13904] ksys_read+0x145/0x250 [ 765.312009][T13904] ? __pfx_ksys_read+0x10/0x10 [ 765.312053][T13904] do_syscall_64+0xfa/0x3b0 [ 765.312072][T13904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.312090][T13904] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 765.312108][T13904] ? clear_bhb_loop+0x60/0xb0 [ 765.312132][T13904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.312150][T13904] RIP: 0033:0x7f4d6338d33c [ 765.312166][T13904] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 765.312183][T13904] RSP: 002b:00007f4d6410f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 765.312202][T13904] RAX: ffffffffffffffda RBX: 00007f4d635b5fa0 RCX: 00007f4d6338d33c [ 765.312215][T13904] RDX: 000000000000000f RSI: 00007f4d6410f0a0 RDI: 0000000000000005 [ 765.312226][T13904] RBP: 00007f4d6410f090 R08: 0000000000000000 R09: 0000000000000000 [ 765.312238][T13904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.312248][T13904] R13: 0000000000000000 R14: 00007f4d635b5fa0 R15: 00007ffebf27ac88 [ 765.312281][T13904] [ 765.770070][T13908] netlink: 64720 bytes leftover after parsing attributes in process `syz.6.2837'. [ 766.152955][T13915] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2841'. [ 766.994181][T13953] netlink: 'syz.5.2856': attribute type 2 has an invalid length. [ 767.152742][T13961] netlink: 'syz.2.2859': attribute type 2 has an invalid length. [ 767.217807][T13961] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2859'. [ 767.423307][T13972] netlink: 'syz.4.2866': attribute type 2 has an invalid length. [ 767.431429][T13972] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2866'. [ 768.202891][T14000] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.2874'. [ 768.701052][T14015] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2881'. [ 768.798473][T14026] netlink: 'syz.4.2884': attribute type 2 has an invalid length. [ 768.822658][T14026] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2884'. [ 769.375735][T14046] netlink: 'syz.5.2890': attribute type 2 has an invalid length. [ 769.402995][T14046] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2890'. [ 769.424094][T14046] netlink: 'syz.5.2890': attribute type 22 has an invalid length. [ 769.439429][T14046] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2890'. [ 769.722211][T14055] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2892'. [ 769.744483][T14053] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2893'. [ 770.451880][T14067] netlink: 'syz.2.2898': attribute type 10 has an invalid length. [ 770.480662][T14067] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2898'. [ 770.489686][T14067] dummy0: entered promiscuous mode [ 770.529627][T14067] dummy0: entered allmulticast mode [ 770.547092][T14067] bridge0: port 3(dummy0) entered blocking state [ 770.571054][T14067] bridge0: port 3(dummy0) entered disabled state [ 770.599337][T14067] bridge0: port 3(dummy0) entered blocking state [ 770.606101][T14067] bridge0: port 3(dummy0) entered forwarding state [ 770.845139][T14081] netlink: 'syz.4.2903': attribute type 2 has an invalid length. [ 771.229281][T14090] FAULT_INJECTION: forcing a failure. [ 771.229281][T14090] name failslab, interval 1, probability 0, space 0, times 0 [ 771.304477][T14090] CPU: 1 UID: 0 PID: 14090 Comm: syz.5.2907 Not tainted 6.16.0-rc2-syzkaller-g190113989ae0 #0 PREEMPT(full) [ 771.304503][T14090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 771.304516][T14090] Call Trace: [ 771.304523][T14090] [ 771.304532][T14090] dump_stack_lvl+0x189/0x250 [ 771.304568][T14090] ? __pfx____ratelimit+0x10/0x10 [ 771.304598][T14090] ? __pfx_dump_stack_lvl+0x10/0x10 [ 771.304628][T14090] ? __pfx__printk+0x10/0x10 [ 771.304653][T14090] ? fs_reclaim_acquire+0x7d/0x100 [ 771.304686][T14090] should_fail_ex+0x414/0x560 [ 771.304717][T14090] should_failslab+0xa8/0x100 [ 771.304741][T14090] kmem_cache_alloc_noprof+0x73/0x3c0 [ 771.304771][T14090] ? alloc_empty_file+0x55/0x1d0 [ 771.304801][T14090] alloc_empty_file+0x55/0x1d0 [ 771.304826][T14090] alloc_file_pseudo+0x13d/0x210 [ 771.304854][T14090] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 771.304895][T14090] anon_inode_getfd+0xca/0x1b0 [ 771.304921][T14090] map_create+0xdb6/0x1150 [ 771.304953][T14090] ? security_bpf+0x7e/0x300 [ 771.304979][T14090] __sys_bpf+0x67e/0x860 [ 771.305007][T14090] ? __pfx___sys_bpf+0x10/0x10 [ 771.305051][T14090] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 771.305091][T14090] __x64_sys_bpf+0x7c/0x90 [ 771.305116][T14090] do_syscall_64+0xfa/0x3b0 [ 771.305135][T14090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.305153][T14090] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 771.305172][T14090] ? clear_bhb_loop+0x60/0xb0 [ 771.305196][T14090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.305215][T14090] RIP: 0033:0x7ffb6238e929 [ 771.305232][T14090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 771.305248][T14090] RSP: 002b:00007ffb632ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 771.305268][T14090] RAX: ffffffffffffffda RBX: 00007ffb625b5fa0 RCX: 00007ffb6238e929 [ 771.305283][T14090] RDX: 0000000000000048 RSI: 0000200000000180 RDI: 0000000000000000 [ 771.305297][T14090] RBP: 00007ffb632ba090 R08: 0000000000000000 R09: 0000000000000000 [ 771.305310][T14090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.305323][T14090] R13: 0000000000000000 R14: 00007ffb625b5fa0 R15: 00007ffeaa1dac68 [ 771.305360][T14090] [ 772.378254][T14111] __nla_validate_parse: 2 callbacks suppressed [ 772.378273][T14111] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2915'. [ 772.407657][T14108] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2915'. [ 772.493219][T14111] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2915'. [ 772.556111][T14115] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2918'. [ 772.592814][T14118] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2917'. [ 772.624739][T14113] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2917'. [ 772.644577][T14118] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2917'. [ 772.772345][T14120] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2920'. [ 772.897298][T14122] bond_slave_1: entered promiscuous mode [ 772.941171][T14122] bond_slave_1: entered allmulticast mode [ 773.204140][T14128] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2922'. [ 774.092733][T14141] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2925'. [ 775.366121][T14179] netlink: 'syz.6.2938': attribute type 11 has an invalid length. [ 775.445407][T14181] IPv6: Can't replace route, no match found [ 775.489717][T14175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 775.741162][T14190] FAULT_INJECTION: forcing a failure. [ 775.741162][T14190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 775.765465][T14190] CPU: 0 UID: 0 PID: 14190 Comm: syz.5.2944 Not tainted 6.16.0-rc2-syzkaller-g190113989ae0 #0 PREEMPT(full) [ 775.765493][T14190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 775.765506][T14190] Call Trace: [ 775.765514][T14190] [ 775.765523][T14190] dump_stack_lvl+0x189/0x250 [ 775.765559][T14190] ? __pfx____ratelimit+0x10/0x10 [ 775.765590][T14190] ? __pfx_dump_stack_lvl+0x10/0x10 [ 775.765622][T14190] ? __pfx__printk+0x10/0x10 [ 775.765657][T14190] should_fail_ex+0x414/0x560 [ 775.765699][T14190] _copy_to_user+0x31/0xb0 [ 775.765723][T14190] simple_read_from_buffer+0xe1/0x170 [ 775.765752][T14190] proc_fail_nth_read+0x1df/0x250 [ 775.765781][T14190] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 775.765811][T14190] ? rw_verify_area+0x258/0x650 [ 775.765841][T14190] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 775.765868][T14190] vfs_read+0x200/0x980 [ 775.765907][T14190] ? __pfx___mutex_lock+0x10/0x10 [ 775.765927][T14190] ? __pfx_vfs_read+0x10/0x10 [ 775.765961][T14190] ? __fget_files+0x2a/0x420 [ 775.765989][T14190] ? __fget_files+0x3a0/0x420 [ 775.766011][T14190] ? __fget_files+0x2a/0x420 [ 775.766045][T14190] ksys_read+0x145/0x250 [ 775.766067][T14190] ? __pfx_ksys_read+0x10/0x10 [ 775.766095][T14190] ? rcu_is_watching+0x15/0xb0 [ 775.766133][T14190] ? do_syscall_64+0xbe/0x3b0 [ 775.766157][T14190] do_syscall_64+0xfa/0x3b0 [ 775.766175][T14190] ? lockdep_hardirqs_on+0x9c/0x150 [ 775.766205][T14190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.766225][T14190] ? clear_bhb_loop+0x60/0xb0 [ 775.766251][T14190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.766271][T14190] RIP: 0033:0x7ffb6238d33c [ 775.766288][T14190] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 775.766307][T14190] RSP: 002b:00007ffb632ba030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 775.766339][T14190] RAX: ffffffffffffffda RBX: 00007ffb625b5fa0 RCX: 00007ffb6238d33c [ 775.766353][T14190] RDX: 000000000000000f RSI: 00007ffb632ba0a0 RDI: 0000000000000004 [ 775.766365][T14190] RBP: 00007ffb632ba090 R08: 0000000000000000 R09: 0000000000000000 [ 775.766377][T14190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.766388][T14190] R13: 0000000000000000 R14: 00007ffb625b5fa0 R15: 00007ffeaa1dac68 [ 775.766420][T14190] [ 776.407484][T14207] FAULT_INJECTION: forcing a failure. [ 776.407484][T14207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 776.534404][T14207] CPU: 1 UID: 0 PID: 14207 Comm: syz.2.2950 Not tainted 6.16.0-rc2-syzkaller-g190113989ae0 #0 PREEMPT(full) [ 776.534431][T14207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 776.534443][T14207] Call Trace: [ 776.534451][T14207] [ 776.534460][T14207] dump_stack_lvl+0x189/0x250 [ 776.534495][T14207] ? __pfx____ratelimit+0x10/0x10 [ 776.534542][T14207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 776.534574][T14207] ? __pfx__printk+0x10/0x10 [ 776.534597][T14207] ? __might_fault+0xb0/0x130 [ 776.534642][T14207] should_fail_ex+0x414/0x560 [ 776.534675][T14207] _copy_from_user+0x2d/0xb0 [ 776.534697][T14207] __sys_bpf+0x1ed/0x860 [ 776.534729][T14207] ? __pfx___sys_bpf+0x10/0x10 [ 776.534773][T14207] ? ksys_write+0x22a/0x250 [ 776.534795][T14207] ? __pfx_ksys_write+0x10/0x10 [ 776.534824][T14207] __x64_sys_bpf+0x7c/0x90 [ 776.534850][T14207] do_syscall_64+0xfa/0x3b0 [ 776.534867][T14207] ? lockdep_hardirqs_on+0x9c/0x150 [ 776.534897][T14207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.534917][T14207] ? clear_bhb_loop+0x60/0xb0 [ 776.534943][T14207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.534964][T14207] RIP: 0033:0x7f4d6338e929 [ 776.534982][T14207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 776.534999][T14207] RSP: 002b:00007f4d6410f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 776.535030][T14207] RAX: ffffffffffffffda RBX: 00007f4d635b5fa0 RCX: 00007f4d6338e929 [ 776.535044][T14207] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012 [ 776.535073][T14207] RBP: 00007f4d6410f090 R08: 0000000000000000 R09: 0000000000000000 [ 776.535085][T14207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 776.535097][T14207] R13: 0000000000000001 R14: 00007f4d635b5fa0 R15: 00007ffebf27ac88 [ 776.535130][T14207] [ 776.536807][T14212] netlink: 'syz.1.2952': attribute type 29 has an invalid length. [ 776.751476][T14202] lo: entered allmulticast mode [ 776.760767][T14214] lo: entered promiscuous mode [ 776.765755][T14214] lo: left allmulticast mode [ 776.813025][T14215] netlink: 'syz.6.2953': attribute type 29 has an invalid length. [ 777.210852][T14227] FAULT_INJECTION: forcing a failure. [ 777.210852][T14227] name failslab, interval 1, probability 0, space 0, times 0 [ 777.290210][T14227] CPU: 0 UID: 0 PID: 14227 Comm: syz.5.2957 Not tainted 6.16.0-rc2-syzkaller-g190113989ae0 #0 PREEMPT(full) [ 777.290239][T14227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 777.290251][T14227] Call Trace: [ 777.290260][T14227] [ 777.290269][T14227] dump_stack_lvl+0x189/0x250 [ 777.290307][T14227] ? __pfx____ratelimit+0x10/0x10 [ 777.290343][T14227] ? __pfx_dump_stack_lvl+0x10/0x10 [ 777.290404][T14227] ? __pfx__printk+0x10/0x10 [ 777.290426][T14227] ? ref_tracker_free+0x63a/0x7d0 [ 777.290461][T14227] ? __pfx_ref_tracker_free+0x10/0x10 [ 777.290501][T14227] should_fail_ex+0x414/0x560 [ 777.290540][T14227] should_failslab+0xa8/0x100 [ 777.290574][T14227] __kmalloc_noprof+0xcb/0x4f0 [ 777.290595][T14227] ? cfg80211_wext_siwscan+0x246/0x1270 [ 777.290635][T14227] cfg80211_wext_siwscan+0x246/0x1270 [ 777.290683][T14227] ? rcu_is_watching+0x15/0xb0 [ 777.290719][T14227] ? trace_kmalloc+0x1f/0xd0 [ 777.290739][T14227] ? ioctl_standard_iw_point+0x4d5/0xd40 [ 777.290772][T14227] ioctl_standard_iw_point+0x689/0xd40 [ 777.290815][T14227] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 777.290850][T14227] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 777.290879][T14227] ? __pfx___mutex_lock+0x10/0x10 [ 777.290907][T14227] ? full_name_hash+0x92/0xe0 [ 777.290938][T14227] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 777.290974][T14227] ioctl_standard_call+0xaf/0x1b0 [ 777.291004][T14227] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 777.291037][T14227] wext_ioctl_dispatch+0xeb/0x410 [ 777.291061][T14227] ? __pfx_ioctl_standard_call+0x10/0x10 [ 777.291091][T14227] wext_handle_ioctl+0x100/0x1c0 [ 777.291121][T14227] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 777.291145][T14227] ? __lock_acquire+0xab9/0xd20 [ 777.291195][T14227] sock_ioctl+0x15f/0x790 [ 777.291232][T14227] ? __pfx_sock_ioctl+0x10/0x10 [ 777.291265][T14227] ? __fget_files+0x2a/0x420 [ 777.291290][T14227] ? __fget_files+0x3a0/0x420 [ 777.291314][T14227] ? __fget_files+0x2a/0x420 [ 777.291343][T14227] ? bpf_lsm_file_ioctl+0x9/0x20 [ 777.291377][T14227] ? __pfx_sock_ioctl+0x10/0x10 [ 777.291409][T14227] __se_sys_ioctl+0xf9/0x170 [ 777.291446][T14227] do_syscall_64+0xfa/0x3b0 [ 777.291466][T14227] ? lockdep_hardirqs_on+0x9c/0x150 [ 777.291512][T14227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.291534][T14227] ? clear_bhb_loop+0x60/0xb0 [ 777.291569][T14227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.291591][T14227] RIP: 0033:0x7ffb6238e929 [ 777.291619][T14227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 777.291637][T14227] RSP: 002b:00007ffb632ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 777.291657][T14227] RAX: ffffffffffffffda RBX: 00007ffb625b5fa0 RCX: 00007ffb6238e929 [ 777.291672][T14227] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000003 [ 777.291684][T14227] RBP: 00007ffb632ba090 R08: 0000000000000000 R09: 0000000000000000 [ 777.291696][T14227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.291708][T14227] R13: 0000000000000000 R14: 00007ffb625b5fa0 R15: 00007ffeaa1dac68 [ 777.291744][T14227] [ 777.709144][T14229] __nla_validate_parse: 12 callbacks suppressed [ 777.709165][T14229] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2959'. [ 777.918640][T14237] netlink: 'syz.1.2965': attribute type 29 has an invalid length. [ 778.149454][T14250] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2968'. [ 779.082525][T14264] warn_alloc: 3 callbacks suppressed [ 779.082545][T14264] syz.2.2972: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 779.121833][T14264] CPU: 0 UID: 0 PID: 14264 Comm: syz.2.2972 Not tainted 6.16.0-rc2-syzkaller-g190113989ae0 #0 PREEMPT(full) [ 779.121861][T14264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 779.121874][T14264] Call Trace: [ 779.121887][T14264] [ 779.121899][T14264] dump_stack_lvl+0x189/0x250 [ 779.121958][T14264] ? __pfx_dump_stack_lvl+0x10/0x10 [ 779.122002][T14264] ? __pfx__printk+0x10/0x10 [ 779.122037][T14264] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 779.122067][T14264] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 779.122108][T14264] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 779.122152][T14264] warn_alloc+0x214/0x310 [ 779.122183][T14264] ? stack_depot_save_flags+0x40/0x900 [ 779.122234][T14264] ? __pfx_warn_alloc+0x10/0x10 [ 779.122278][T14264] ? kasan_save_track+0x4f/0x80 [ 779.122320][T14264] ? xskq_create+0x56/0x170 [ 779.122348][T14264] ? xsk_init_queue+0xb0/0x110 [ 779.122374][T14264] ? xsk_setsockopt+0x4de/0x710 [ 779.122406][T14264] ? do_sock_setsockopt+0x257/0x3e0 [ 779.122430][T14264] ? __x64_sys_setsockopt+0x18b/0x220 [ 779.122453][T14264] ? do_syscall_64+0xfa/0x3b0 [ 779.122471][T14264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.122533][T14264] __vmalloc_node_range_noprof+0x125/0x12f0 [ 779.122697][T14264] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 779.122757][T14264] ? __kasan_kmalloc+0x93/0xb0 [ 779.122800][T14264] vmalloc_user_noprof+0xad/0xf0 [ 779.122830][T14264] ? xskq_create+0xbf/0x170 [ 779.122871][T14264] xskq_create+0xbf/0x170 [ 779.122923][T14264] xsk_init_queue+0xb0/0x110 [ 779.122974][T14264] xsk_setsockopt+0x4de/0x710 [ 779.123023][T14264] ? __pfx_xsk_setsockopt+0x10/0x10 [ 779.123060][T14264] ? __pfx_perf_trace_lock+0x10/0x10 [ 779.123115][T14264] ? aa_sock_opt_perm+0x74/0x110 [ 779.123165][T14264] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 779.123194][T14264] ? __pfx_xsk_setsockopt+0x10/0x10 [ 779.123239][T14264] do_sock_setsockopt+0x257/0x3e0 [ 779.123286][T14264] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 779.123342][T14264] ? __fget_files+0x2a/0x420 [ 779.123416][T14264] __x64_sys_setsockopt+0x18b/0x220 [ 779.123479][T14264] do_syscall_64+0xfa/0x3b0 [ 779.123498][T14264] ? lockdep_hardirqs_on+0x9c/0x150 [ 779.123534][T14264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.123557][T14264] ? clear_bhb_loop+0x60/0xb0 [ 779.123600][T14264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.123621][T14264] RIP: 0033:0x7f4d6338e929 [ 779.123645][T14264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.123663][T14264] RSP: 002b:00007f4d6410f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 779.123683][T14264] RAX: ffffffffffffffda RBX: 00007f4d635b5fa0 RCX: 00007f4d6338e929 [ 779.123698][T14264] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 779.123710][T14264] RBP: 00007f4d63410b39 R08: 0000000000000004 R09: 0000000000000000 [ 779.123723][T14264] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 779.123735][T14264] R13: 0000000000000000 R14: 00007f4d635b5fa0 R15: 00007ffebf27ac88 [ 779.123831][T14264] [ 779.123839][T14264] Mem-Info: [ 779.474649][T14264] active_anon:4508 inactive_anon:0 isolated_anon:0 [ 779.474649][T14264] active_file:21705 inactive_file:40103 isolated_file:0 [ 779.474649][T14264] unevictable:768 dirty:211 writeback:0 [ 779.474649][T14264] slab_reclaimable:10511 slab_unreclaimable:97125 [ 779.474649][T14264] mapped:29661 shmem:1369 pagetables:1039 [ 779.474649][T14264] sec_pagetables:0 bounce:0 [ 779.474649][T14264] kernel_misc_reclaimable:0 [ 779.474649][T14264] free:1316472 free_pcp:14013 free_cma:0 [ 779.540832][T14264] Node 0 active_anon:18032kB inactive_anon:0kB active_file:86820kB inactive_file:160208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118644kB dirty:844kB writeback:0kB shmem:3940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11576kB pagetables:4016kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 779.603445][T14264] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 779.696028][T14264] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 779.761547][T14264] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 779.767441][T14264] Node 0 DMA32 free:1352100kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17588kB inactive_anon:0kB active_file:86820kB inactive_file:158364kB unevictable:1536kB writepending:844kB present:3129332kB managed:2561024kB mlocked:0kB bounce:0kB free_pcp:34456kB local_pcp:13348kB free_cma:0kB [ 779.773110][T14276] netlink: 'syz.1.2976': attribute type 29 has an invalid length. [ 779.818292][T14264] lowmem_reserve[]: 0 0 1 1 1 [ 779.824102][T14264] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1844kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 779.881030][T14264] lowmem_reserve[]: 0 0 0 0 0 [ 779.907326][T14264] Node 1 Normal free:3900648kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20588kB local_pcp:9352kB free_cma:0kB [ 779.964106][T14264] lowmem_reserve[]: 0 0 0 0 0 [ 779.968887][T14264] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 779.985375][T14264] Node 0 DMA32: 1958*4kB (UME) 1712*8kB (UME) 932*16kB (UM) 877*32kB (UM) 853*64kB (UME) 455*128kB (UM) 272*256kB (UM) 198*512kB (UME) 96*1024kB (UME) 38*2048kB (UME) 202*4096kB (M) = 1351864kB [ 780.009589][T14264] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 780.030698][T14264] Node 1 Normal: 222*4kB (UE) 58*8kB (UME) 42*16kB (UME) 66*32kB (UME) 23*64kB (UME) 10*128kB (UME) 2*256kB (M) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 949*4096kB (ME) = 3900648kB [ 780.049463][T14264] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 780.061797][T14281] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2974'. [ 780.108556][T14264] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 780.120681][T14264] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 780.185805][T14264] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 780.276103][T14264] 63174 total pagecache pages [ 780.283886][T14264] 0 pages in swap cache [ 780.288075][T14264] Free swap = 124996kB [ 780.294708][T14264] Total swap = 124996kB [ 780.298982][T14264] 2097051 pages RAM [ 780.306471][T14264] 0 pages HighMem/MovableOnly [ 780.330749][T14264] 424689 pages reserved [ 780.334953][T14264] 0 pages cma reserved [ 780.611767][T14306] netlink: 830 bytes leftover after parsing attributes in process `syz.6.2987'. [ 780.638103][T14309] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2985'. [ 780.689306][T14303] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2985'. [ 780.723528][T14310] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2985'. [ 782.035773][T14343] netlink: 'syz.4.3000': attribute type 29 has an invalid length. [ 782.117450][T14348] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3002'. [ 782.134040][T14345] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3002'. [ 782.146497][T14348] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3002'. [ 782.903826][T14368] FAULT_INJECTION: forcing a failure. [ 782.903826][T14368] name failslab, interval 1, probability 0, space 0, times 0 [ 782.944272][T14368] CPU: 0 UID: 0 PID: 14368 Comm: syz.5.3011 Not tainted 6.16.0-rc2-syzkaller-g190113989ae0 #0 PREEMPT(full) [ 782.944299][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 782.944311][T14368] Call Trace: [ 782.944322][T14368] [ 782.944334][T14368] dump_stack_lvl+0x189/0x250 [ 782.944377][T14368] ? __pfx____ratelimit+0x10/0x10 [ 782.944416][T14368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 782.944455][T14368] ? __pfx__printk+0x10/0x10 [ 782.944518][T14368] ? __pfx___might_resched+0x10/0x10 [ 782.944578][T14368] should_fail_ex+0x414/0x560 [ 782.944638][T14368] should_failslab+0xa8/0x100 [ 782.944675][T14368] kmem_cache_alloc_noprof+0x73/0x3c0 [ 782.944711][T14368] ? security_inode_alloc+0x39/0x330 [ 782.944769][T14368] security_inode_alloc+0x39/0x330 [ 782.944816][T14368] inode_init_always_gfp+0x9ed/0xdc0 [ 782.944878][T14368] ? __pfx_sock_alloc_inode+0x10/0x10 [ 782.944911][T14368] alloc_inode+0x82/0x1b0 [ 782.944950][T14368] __sock_create+0x12d/0x9f0 [ 782.945028][T14368] __sys_socketpair+0x23a/0x560 [ 782.945109][T14368] __x64_sys_socketpair+0x9b/0xb0 [ 782.945150][T14368] do_syscall_64+0xfa/0x3b0 [ 782.945169][T14368] ? lockdep_hardirqs_on+0x9c/0x150 [ 782.945203][T14368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.945225][T14368] ? clear_bhb_loop+0x60/0xb0 [ 782.945267][T14368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.945288][T14368] RIP: 0033:0x7ffb6238e929 [ 782.945314][T14368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 782.945332][T14368] RSP: 002b:00007ffb632ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 782.945352][T14368] RAX: ffffffffffffffda RBX: 00007ffb625b5fa0 RCX: 00007ffb6238e929 [ 782.945367][T14368] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000002c [ 782.945379][T14368] RBP: 00007ffb632ba090 R08: 0000000000000000 R09: 0000000000000000 [ 782.945392][T14368] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001 [ 782.945405][T14368] R13: 0000000000000000 R14: 00007ffb625b5fa0 R15: 00007ffeaa1dac68 [ 782.945500][T14368] [ 782.945563][T14368] socket: no more sockets [ 783.666883][T14392] __nla_validate_parse: 1 callbacks suppressed [ 783.666902][T14392] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3018'. [ 783.740762][T14386] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3018'. [ 783.750103][T14396] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3018'. [ 784.173714][T14403] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3024'. [ 784.358245][T14411] netlink: 'syz.1.3028': attribute type 10 has an invalid length. [ 784.440891][T14411] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 784.525261][T14411] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 784.538452][T14411] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 784.774601][T14435] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3034'. [ 784.790151][T14429] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3034'. [ 784.814837][T14434] netlink: 'syz.1.3037': attribute type 29 has an invalid length. [ 784.826811][T14435] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3034'. [ 785.052536][T14437] netlink: 'syz.4.3038': attribute type 10 has an invalid length. [ 785.074233][T14437] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3038'. [ 785.087448][T14437] ipvlan1: entered promiscuous mode [ 785.093092][T14437] ipvlan1: entered allmulticast mode [ 785.105530][T14437] bridge0: port 4(ipvlan1) entered blocking state [ 785.113232][T14437] bridge0: port 4(ipvlan1) entered disabled state [ 785.126214][T14437] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 785.146148][T14451] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3042'. [ 785.387292][T14450] netlink: 160 bytes leftover after parsing attributes in process `syz.6.3043'. [ 786.091255][ T5154] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 787.128164][T14520] lo: entered allmulticast mode [ 787.193304][T14520] lo: entered promiscuous mode [ 787.198125][T14520] lo: left allmulticast mode [ 787.542072][T14543] bond_slave_1: entered promiscuous mode [ 787.547944][T14543] bond_slave_1: entered allmulticast mode [ 787.882169][T14552] netlink: 'syz.1.3083': attribute type 2 has an invalid length. [ 788.478438][T14578] netlink: 'syz.4.3093': attribute type 4 has an invalid length. [ 788.495536][T14578] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 788.615250][T14582] netlink: 'syz.2.3094': attribute type 2 has an invalid length. [ 788.683044][T14584] netlink: 'syz.2.3095': attribute type 29 has an invalid length. [ 789.027942][T14595] __nla_validate_parse: 20 callbacks suppressed [ 789.027961][T14595] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3099'. [ 789.209648][T14598] netlink: 160 bytes leftover after parsing attributes in process `syz.6.3098'. [ 789.556263][T14611] netlink: 10 bytes leftover after parsing attributes in process `syz.5.3103'. [ 790.069188][T14623] netlink: 'syz.2.3107': attribute type 29 has an invalid length. [ 790.288375][T14632] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3110'. [ 790.419401][T14634] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3111'. [ 791.279378][T14654] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3116'. [ 791.312639][T14648] netlink: 'syz.5.3115': attribute type 10 has an invalid length. [ 791.320760][T14650] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3116'. [ 791.363680][T14648] team0: Port device geneve1 added [ 791.383233][T14650] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3116'. [ 791.451254][T14659] FAULT_INJECTION: forcing a failure. [ 791.451254][T14659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 791.478001][T14659] CPU: 0 UID: 0 PID: 14659 Comm: syz.1.3119 Not tainted 6.16.0-rc2-syzkaller-g190113989ae0 #0 PREEMPT(full) [ 791.478028][T14659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 791.478041][T14659] Call Trace: [ 791.478049][T14659] [ 791.478058][T14659] dump_stack_lvl+0x189/0x250 [ 791.478092][T14659] ? __pfx____ratelimit+0x10/0x10 [ 791.478121][T14659] ? __pfx_dump_stack_lvl+0x10/0x10 [ 791.478151][T14659] ? __pfx__printk+0x10/0x10 [ 791.478176][T14659] ? __might_fault+0xb0/0x130 [ 791.478202][T14659] should_fail_ex+0x414/0x560 [ 791.478232][T14659] _copy_to_user+0x31/0xb0 [ 791.478254][T14659] simple_read_from_buffer+0xe1/0x170 [ 791.478290][T14659] proc_fail_nth_read+0x1df/0x250 [ 791.478318][T14659] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 791.478345][T14659] ? rw_verify_area+0x258/0x650 [ 791.478373][T14659] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 791.478399][T14659] vfs_read+0x200/0x980 [ 791.478435][T14659] ? __pfx___mutex_lock+0x10/0x10 [ 791.478455][T14659] ? __pfx_vfs_read+0x10/0x10 [ 791.478487][T14659] ? __fget_files+0x2a/0x420 [ 791.478514][T14659] ? __fget_files+0x3a0/0x420 [ 791.478533][T14659] ? __fget_files+0x2a/0x420 [ 791.478565][T14659] ksys_read+0x145/0x250 [ 791.478586][T14659] ? __pfx_ksys_read+0x10/0x10 [ 791.478613][T14659] ? rcu_is_watching+0x15/0xb0 [ 791.478649][T14659] ? do_syscall_64+0xbe/0x3b0 [ 791.478671][T14659] do_syscall_64+0xfa/0x3b0 [ 791.478688][T14659] ? lockdep_hardirqs_on+0x9c/0x150 [ 791.478716][T14659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.478735][T14659] ? clear_bhb_loop+0x60/0xb0 [ 791.478759][T14659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.478778][T14659] RIP: 0033:0x7f2fcf18d33c [ 791.478795][T14659] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 791.478813][T14659] RSP: 002b:00007f2fcfffe030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 791.478833][T14659] RAX: ffffffffffffffda RBX: 00007f2fcf3b5fa0 RCX: 00007f2fcf18d33c [ 791.478847][T14659] RDX: 000000000000000f RSI: 00007f2fcfffe0a0 RDI: 0000000000000004 [ 791.478860][T14659] RBP: 00007f2fcfffe090 R08: 0000000000000000 R09: 0000000000000000 [ 791.478872][T14659] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 791.478883][T14659] R13: 0000000000000000 R14: 00007f2fcf3b5fa0 R15: 00007ffc9c071f68 [ 791.478916][T14659] [ 791.797087][T14661] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3120'. [ 791.822963][T14665] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3121'. [ 792.743996][T14701] netlink: 'syz.4.3136': attribute type 29 has an invalid length. [ 793.887492][T14731] lo: entered allmulticast mode [ 793.915494][T14731] lo: entered promiscuous mode [ 793.923122][T14731] lo: left allmulticast mode [ 794.274585][T14749] __nla_validate_parse: 15 callbacks suppressed [ 794.274605][T14749] netlink: 160 bytes leftover after parsing attributes in process `syz.5.3150'. [ 794.745995][T14761] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3155'. [ 794.764447][T14760] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3155'. [ 794.805195][T14761] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3155'. [ 794.875168][T14768] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3157'. [ 794.916953][T14763] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3156'. [ 794.930935][T14768] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3157'. [ 794.990158][T14772] wg0: entered promiscuous mode [ 795.008739][T14772] wg0: entered allmulticast mode [ 795.087351][T14777] lo: left promiscuous mode [ 795.101849][T14777] lo: entered allmulticast mode [ 795.127765][T14777] lo: entered promiscuous mode [ 795.140799][T14777] lo: left allmulticast mode [ 795.323387][T14787] netlink: 'syz.5.3166': attribute type 29 has an invalid length. [ 795.491637][T14794] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3169'. [ 795.549972][T14797] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3171'. [ 795.655738][T14802] netlink: 160 bytes leftover after parsing attributes in process `syz.6.3170'. [ 796.260935][T14823] lo: left promiscuous mode [ 796.296641][T14823] lo: entered allmulticast mode [ 796.346336][T14823] lo: entered promiscuous mode [ 796.355438][T14823] lo: left allmulticast mode [ 796.423868][T14829] netlink: 'syz.4.3182': attribute type 29 has an invalid length. [ 797.498708][T14864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 797.819621][T14871] netlink: 'syz.4.3197': attribute type 29 has an invalid length. [ 797.967092][T14876] netlink: 'syz.6.3198': attribute type 29 has an invalid length. [ 798.642970][T14889] netlink: 'syz.2.3204': attribute type 29 has an invalid length. [ 799.369010][T14908] __nla_validate_parse: 5 callbacks suppressed [ 799.369030][T14908] netlink: 830 bytes leftover after parsing attributes in process `syz.6.3210'. [ 799.539814][T14909] bond_slave_1: entered promiscuous mode [ 799.594744][T14909] bond_slave_1: entered allmulticast mode [ 800.128558][T14916] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3212'. [ 800.251494][T14919] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3214'. [ 800.300073][T14919] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3214'. [ 800.896425][T14930] netlink: 'syz.1.3218': attribute type 11 has an invalid length. [ 800.930811][T14930] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.3218'. [ 800.973639][T14929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 801.008572][T14936] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3219'. [ 801.038181][T14933] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3219'. [ 801.142254][T14938] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3221'. [ 801.566075][T14954] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3227'. [ 801.595950][T14954] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3227'. [ 803.013463][T14989] netlink: 'syz.6.3236': attribute type 29 has an invalid length. [ 803.025020][T14989] netlink: 'syz.6.3236': attribute type 29 has an invalid length. [ 803.686629][T15012] lo: left promiscuous mode [ 803.699728][T15012] lo: entered allmulticast mode [ 803.730095][T15012] lo: entered promiscuous mode [ 803.747559][T15012] lo: left allmulticast mode [ 804.691941][T15036] __nla_validate_parse: 6 callbacks suppressed [ 804.691964][T15036] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3254'. [ 804.780983][T15031] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3254'. [ 804.800909][T15037] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3254'. [ 804.822080][T15035] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3255'. [ 805.505786][T15058] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3263'. [ 805.542566][T15058] netlink: 125488 bytes leftover after parsing attributes in process `syz.5.3263'. [ 805.555086][T15058] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3263'. [ 805.627559][T15066] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3265'. [ 806.154174][T15076] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3269'. [ 806.239763][T15080] bond_slave_1: entered promiscuous mode [ 806.278458][T15080] bond_slave_1: entered allmulticast mode [ 806.329985][T15081] netlink: 'syz.2.3271': attribute type 10 has an invalid length. [ 806.846304][T15098] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3279'. [ 807.627887][T15123] bond_slave_1: entered promiscuous mode [ 807.647167][T15123] bond_slave_1: entered allmulticast mode [ 809.914455][T15176] FAULT_INJECTION: forcing a failure. [ 809.914455][T15176] name failslab, interval 1, probability 0, space 0, times 0 [ 809.983750][T15176] CPU: 1 UID: 0 PID: 15176 Comm: syz.2.3305 Not tainted 6.16.0-rc2-syzkaller-g190113989ae0 #0 PREEMPT(full) [ 809.983796][T15176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 809.983809][T15176] Call Trace: [ 809.983817][T15176] [ 809.983827][T15176] dump_stack_lvl+0x189/0x250 [ 809.983864][T15176] ? __pfx____ratelimit+0x10/0x10 [ 809.983909][T15176] ? __pfx_dump_stack_lvl+0x10/0x10 [ 809.983939][T15176] ? __pfx__printk+0x10/0x10 [ 809.983968][T15176] ? __pfx___might_resched+0x10/0x10 [ 809.984003][T15176] should_fail_ex+0x414/0x560 [ 809.984035][T15176] should_failslab+0xa8/0x100 [ 809.984058][T15176] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 809.984079][T15176] ? __alloc_skb+0x112/0x2d0 [ 809.984099][T15176] ? __pfx___mutex_trylock_common+0x10/0x10 [ 809.984125][T15176] __alloc_skb+0x112/0x2d0 [ 809.984152][T15176] netlink_dump+0x22b/0xe20 [ 809.984186][T15176] ? __pfx_perf_trace_lock+0x10/0x10 [ 809.984217][T15176] ? __pfx_netlink_dump+0x10/0x10 [ 809.984254][T15176] ? netlink_lookup+0x30/0x200 [ 809.984275][T15176] ? netlink_lookup+0x30/0x200 [ 809.984293][T15176] ? netlink_lookup+0x30/0x200 [ 809.984322][T15176] __netlink_dump_start+0x5cb/0x7e0 [ 809.984355][T15176] rtnetlink_rcv_msg+0x9eb/0xb70 [ 809.984379][T15176] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 809.984406][T15176] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 809.984426][T15176] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 809.984445][T15176] ? ref_tracker_free+0x63a/0x7d0 [ 809.984470][T15176] ? __pfx_rtnl_dumpit+0x10/0x10 [ 809.984490][T15176] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 809.984518][T15176] ? __skb_clone+0x63/0x7a0 [ 809.984553][T15176] netlink_rcv_skb+0x205/0x470 [ 809.984578][T15176] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 809.984601][T15176] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 809.984645][T15176] ? netlink_deliver_tap+0x2e/0x1b0 [ 809.984668][T15176] ? netlink_deliver_tap+0x2e/0x1b0 [ 809.984698][T15176] netlink_unicast+0x758/0x8d0 [ 809.984733][T15176] netlink_sendmsg+0x805/0xb30 [ 809.984768][T15176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 809.984801][T15176] ? aa_sock_msg_perm+0x94/0x160 [ 809.984829][T15176] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 809.984855][T15176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 809.984880][T15176] __sock_sendmsg+0x21c/0x270 [ 809.984915][T15176] ____sys_sendmsg+0x505/0x830 [ 809.984947][T15176] ? __pfx_____sys_sendmsg+0x10/0x10 [ 809.984983][T15176] ? import_iovec+0x74/0xa0 [ 809.985008][T15176] ___sys_sendmsg+0x21f/0x2a0 [ 809.985035][T15176] ? __pfx____sys_sendmsg+0x10/0x10 [ 809.985087][T15176] ? __fget_files+0x2a/0x420 [ 809.985124][T15176] ? __fget_files+0x2a/0x420 [ 809.985144][T15176] ? __fget_files+0x3a0/0x420 [ 809.985178][T15176] __x64_sys_sendmsg+0x19b/0x260 [ 809.985206][T15176] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 809.985243][T15176] ? __pfx_ksys_write+0x10/0x10 [ 809.985260][T15176] ? rcu_is_watching+0x15/0xb0 [ 809.985296][T15176] ? do_syscall_64+0xbe/0x3b0 [ 809.985319][T15176] do_syscall_64+0xfa/0x3b0 [ 809.985335][T15176] ? lockdep_hardirqs_on+0x9c/0x150 [ 809.985364][T15176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.985384][T15176] ? clear_bhb_loop+0x60/0xb0 [ 809.985408][T15176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.985427][T15176] RIP: 0033:0x7f4d6338e929 [ 809.985444][T15176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 809.985462][T15176] RSP: 002b:00007f4d6410f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 809.985482][T15176] RAX: ffffffffffffffda RBX: 00007f4d635b5fa0 RCX: 00007f4d6338e929 [ 809.985496][T15176] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 809.985508][T15176] RBP: 00007f4d6410f090 R08: 0000000000000000 R09: 0000000000000000 [ 809.985520][T15176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.985531][T15176] R13: 0000000000000000 R14: 00007f4d635b5fa0 R15: 00007ffebf27ac88 [ 809.985564][T15176] [ 810.012533][T15167] netlink: 'syz.6.3302': attribute type 21 has an invalid length. [ 810.391662][T15167] __nla_validate_parse: 4 callbacks suppressed [ 810.391681][T15167] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3302'. [ 811.991865][T15221] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3321'. [ 812.002382][T15216] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3321'. [ 812.826346][T15234] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3327'. [ 813.069001][T15239] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3329'. [ 813.256473][T15247] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3331'. [ 813.312760][T15246] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3331'. [ 813.513367][T15252] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3333'. [ 813.642107][T15256] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3335'. [ 813.938477][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.945758][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.130229][T15269] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3341'. [ 815.480787][T15298] __nla_validate_parse: 3 callbacks suppressed [ 815.481015][T15298] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3353'. [ 815.760247][T15313] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3357'. [ 816.035958][T15317] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3358'. [ 816.345819][T15323] netlink: 'syz.1.3360': attribute type 29 has an invalid length. [ 816.507027][T15326] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3362'. [ 816.554527][T15329] lo: entered allmulticast mode [ 817.056480][T15329] lo: entered promiscuous mode [ 817.068495][T15329] lo: left allmulticast mode [ 817.200412][T15344] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3369'. [ 817.308182][T15348] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3370'. [ 817.356222][T15352] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3371'. [ 817.369335][T15350] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3371'. [ 817.388209][T15352] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3371'. [ 817.493039][T15355] netlink: 160 bytes leftover after parsing attributes in process `syz.6.3368'. [ 818.367815][T15367] warn_alloc: 2 callbacks suppressed [ 818.367839][T15367] syz.6.3376: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 818.475274][T15367] CPU: 1 UID: 0 PID: 15367 Comm: syz.6.3376 Not tainted 6.16.0-rc2-syzkaller-g190113989ae0 #0 PREEMPT(full) [ 818.475304][T15367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 818.475318][T15367] Call Trace: [ 818.475334][T15367] [ 818.475352][T15367] dump_stack_lvl+0x189/0x250 [ 818.475440][T15367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 818.475495][T15367] ? __pfx__printk+0x10/0x10 [ 818.475540][T15367] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 818.475569][T15367] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 818.475631][T15367] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 818.475696][T15367] warn_alloc+0x214/0x310 [ 818.475729][T15367] ? stack_depot_save_flags+0x40/0x900 [ 818.475790][T15367] ? __pfx_warn_alloc+0x10/0x10 [ 818.475842][T15367] ? kasan_save_track+0x4f/0x80 [ 818.475883][T15367] ? xskq_create+0x56/0x170 [ 818.475905][T15367] ? xsk_init_queue+0xb0/0x110 [ 818.475925][T15367] ? xsk_setsockopt+0x4de/0x710 [ 818.475945][T15367] ? do_sock_setsockopt+0x257/0x3e0 [ 818.475963][T15367] ? __x64_sys_setsockopt+0x18b/0x220 [ 818.475980][T15367] ? do_syscall_64+0xfa/0x3b0 [ 818.475994][T15367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.476074][T15367] __vmalloc_node_range_noprof+0x125/0x12f0 [ 818.476330][T15367] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 818.476372][T15367] ? xskq_create+0x56/0x170 [ 818.476424][T15367] ? __kasan_kmalloc+0x93/0xb0 [ 818.476480][T15367] vmalloc_user_noprof+0xad/0xf0 [ 818.476511][T15367] ? xskq_create+0xbf/0x170 [ 818.476556][T15367] xskq_create+0xbf/0x170 [ 818.476616][T15367] xsk_init_queue+0xb0/0x110 [ 818.476675][T15367] xsk_setsockopt+0x4de/0x710 [ 818.476733][T15367] ? __pfx_xsk_setsockopt+0x10/0x10 [ 818.476770][T15367] ? __pfx_perf_trace_lock+0x10/0x10 [ 818.476835][T15367] ? aa_sock_opt_perm+0x74/0x110 [ 818.476884][T15367] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 818.476905][T15367] ? __pfx_xsk_setsockopt+0x10/0x10 [ 818.476953][T15367] do_sock_setsockopt+0x257/0x3e0 [ 818.477009][T15367] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 818.477084][T15367] ? __fget_files+0x2a/0x420 [ 818.477185][T15367] __x64_sys_setsockopt+0x18b/0x220 [ 818.477266][T15367] do_syscall_64+0xfa/0x3b0 [ 818.477283][T15367] ? lockdep_hardirqs_on+0x9c/0x150 [ 818.477318][T15367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.477338][T15367] ? clear_bhb_loop+0x60/0xb0 [ 818.477389][T15367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.477408][T15367] RIP: 0033:0x7fe0a3b8e929 [ 818.477435][T15367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 818.477449][T15367] RSP: 002b:00007fe0a4a66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 818.477466][T15367] RAX: ffffffffffffffda RBX: 00007fe0a3db5fa0 RCX: 00007fe0a3b8e929 [ 818.477477][T15367] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 818.477487][T15367] RBP: 00007fe0a3c10b39 R08: 0000000000000004 R09: 0000000000000000 [ 818.477497][T15367] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 818.477507][T15367] R13: 0000000000000000 R14: 00007fe0a3db5fa0 R15: 00007ffed1e22ef8 [ 818.477646][T15367] [ 818.477657][T15367] Mem-Info: [ 818.806894][T15367] active_anon:4441 inactive_anon:0 isolated_anon:0 [ 818.806894][T15367] active_file:21705 inactive_file:40117 isolated_file:0 [ 818.806894][T15367] unevictable:768 dirty:216 writeback:0 [ 818.806894][T15367] slab_reclaimable:10578 slab_unreclaimable:97427 [ 818.806894][T15367] mapped:29650 shmem:1369 pagetables:1061 [ 818.806894][T15367] sec_pagetables:0 bounce:0 [ 818.806894][T15367] kernel_misc_reclaimable:0 [ 818.806894][T15367] free:1314572 free_pcp:15264 free_cma:0 [ 818.929179][T15367] Node 0 active_anon:17864kB inactive_anon:0kB active_file:86820kB inactive_file:160264kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118600kB dirty:864kB writeback:0kB shmem:3940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11500kB pagetables:3904kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 818.966660][T15367] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 819.055231][T15367] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 819.121014][T15367] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 819.148224][T15367] Node 0 DMA32 free:1343088kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17640kB inactive_anon:0kB active_file:86820kB inactive_file:158420kB unevictable:1536kB writepending:916kB present:3129332kB managed:2561024kB mlocked:0kB bounce:0kB free_pcp:40344kB local_pcp:21024kB free_cma:0kB [ 819.187056][T15389] lo: left promiscuous mode [ 819.193027][T15389] lo: entered allmulticast mode [ 819.206910][T15389] lo: entered promiscuous mode [ 819.238324][T15367] lowmem_reserve[]: 0 0 1 1 1 [ 819.243842][T15389] lo: left allmulticast mode [ 819.249614][T15367] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1844kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 819.328976][T15367] lowmem_reserve[]: 0 0 0 0 0 [ 819.334417][T15367] Node 1 Normal free:3900648kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20588kB local_pcp:9352kB free_cma:0kB [ 819.368452][T15367] lowmem_reserve[]: 0 0 0 0 0 [ 819.374134][T15367] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 819.388452][T15367] Node 0 DMA32: 2496*4kB (UME) 1596*8kB (UME) 744*16kB (UM) 778*32kB (UME) 818*64kB (UM) 407*128kB (UM) 240*256kB (UM) 187*512kB (UME) 94*1024kB (UME) 44*2048kB (UME) 204*4096kB (M) = 1343136kB [ 819.409024][T15367] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 819.423849][T15367] Node 1 Normal: 222*4kB (UE) 58*8kB (UME) 42*16kB (UME) 66*32kB (UME) 23*64kB (UME) 10*128kB (UME) 2*256kB (M) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 949*4096kB (ME) = 3900648kB [ 819.443062][T15367] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 819.452990][T15367] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 819.462520][T15367] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 819.472358][T15367] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 819.482110][T15367] 63188 total pagecache pages [ 819.486935][T15367] 0 pages in swap cache [ 819.491227][T15367] Free swap = 124996kB [ 819.495621][T15367] Total swap = 124996kB [ 819.552986][T15367] 2097051 pages RAM [ 819.557264][T15367] 0 pages HighMem/MovableOnly [ 819.562381][T15367] 424689 pages reserved [ 819.566641][T15367] 0 pages cma reserved [ 820.573826][T15428] __nla_validate_parse: 18 callbacks suppressed [ 820.573857][T15428] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3398'. [ 820.875801][T15444] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3405'. [ 821.732814][T15459] FAULT_INJECTION: forcing a failure. [ 821.732814][T15459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 821.812767][T15459] CPU: 1 UID: 0 PID: 15459 Comm: syz.6.3409 Not tainted 6.16.0-rc2-syzkaller-g190113989ae0 #0 PREEMPT(full) [ 821.812795][T15459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 821.812807][T15459] Call Trace: [ 821.812815][T15459] [ 821.812824][T15459] dump_stack_lvl+0x189/0x250 [ 821.812861][T15459] ? __pfx____ratelimit+0x10/0x10 [ 821.812893][T15459] ? __pfx_dump_stack_lvl+0x10/0x10 [ 821.812925][T15459] ? __pfx__printk+0x10/0x10 [ 821.812946][T15459] ? __might_fault+0xb0/0x130 [ 821.812968][T15459] ? __might_fault+0xb0/0x130 [ 821.812993][T15459] should_fail_ex+0x414/0x560 [ 821.813025][T15459] _copy_from_user+0x2d/0xb0 [ 821.813046][T15459] __sys_bpf+0x1ed/0x860 [ 821.813077][T15459] ? __pfx___sys_bpf+0x10/0x10 [ 821.813120][T15459] ? ksys_write+0x22a/0x250 [ 821.813153][T15459] ? __pfx_ksys_write+0x10/0x10 [ 821.813168][T15459] ? rcu_is_watching+0x15/0xb0 [ 821.813207][T15459] __x64_sys_bpf+0x7c/0x90 [ 821.813231][T15459] do_syscall_64+0xfa/0x3b0 [ 821.813249][T15459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.813267][T15459] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 821.813286][T15459] ? clear_bhb_loop+0x60/0xb0 [ 821.813309][T15459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.813327][T15459] RIP: 0033:0x7fe0a3b8e929 [ 821.813361][T15459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 821.813378][T15459] RSP: 002b:00007fe0a4a66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 821.813400][T15459] RAX: ffffffffffffffda RBX: 00007fe0a3db5fa0 RCX: 00007fe0a3b8e929 [ 821.813415][T15459] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 821.813428][T15459] RBP: 00007fe0a4a66090 R08: 0000000000000000 R09: 0000000000000000 [ 821.813441][T15459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.813453][T15459] R13: 0000000000000000 R14: 00007fe0a3db5fa0 R15: 00007ffed1e22ef8 [ 821.813488][T15459] [ 822.142488][T15468] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3413'. [ 822.221086][T15462] lo: left promiscuous mode [ 822.225682][T15462] lo: entered allmulticast mode [ 822.323759][T15462] lo: entered promiscuous mode [ 822.338929][T15462] lo: left allmulticast mode [ 823.570935][T15496] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3425'. [ 823.755968][T15502] lo: left promiscuous mode [ 823.760703][T15502] lo: entered allmulticast mode [ 823.769885][T15502] lo: entered promiscuous mode [ 823.774796][T15502] lo: left allmulticast mode [ 823.885984][T15501] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3426'. [ 824.040331][T15512] netlink: 830 bytes leftover after parsing attributes in process `syz.6.3430'. [ 824.948063][T15527] netlink: 'syz.2.3439': attribute type 21 has an invalid length. [ 824.959790][T15530] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3438'. [ 825.205282][T15539] netlink: 'syz.5.3442': attribute type 21 has an invalid length. [ 825.298602][T15539] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3442'. [ 826.069502][T15560] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3448'. [ 826.113058][T15557] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3448'. [ 826.131820][T15557] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3448'. [ 826.461999][T15566] netlink: 830 bytes leftover after parsing attributes in process `syz.5.3451'. [ 827.293651][T15576] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3453'. [ 827.335832][T15580] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3455'. [ 828.242279][T15593] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3457'. [ 828.865852][T15619] lo: left promiscuous mode [ 828.888196][T15619] lo: entered allmulticast mode [ 829.015180][T15614] netlink: 160 bytes leftover after parsing attributes in process `syz.4.3464'. [ 829.040253][T15619] lo: entered promiscuous mode [ 829.059288][T15619] lo: left allmulticast mode [ 829.584368][T15635] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3471'. [ 829.649356][T15633] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3470'. [ 830.669542][T15660] netlink: 'syz.5.3477': attribute type 29 has an invalid length. [ 831.357662][T15678] __nla_validate_parse: 4 callbacks suppressed [ 831.357685][T15678] netlink: 160 bytes leftover after parsing attributes in process `syz.5.3486'. [ 831.380885][T15630] Bluetooth: hci0: command 0x0406 tx timeout [ 831.389279][T15630] Bluetooth: hci1: command 0x0406 tx timeout [ 831.586482][T15691] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3488'. [ 832.027846][T15708] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3494'. [ 832.073722][T15707] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3496'. [ 832.328697][T15714] lo: left promiscuous mode [ 832.333479][T15714] lo: entered allmulticast mode [ 832.343401][T15714] lo: entered promiscuous mode [ 832.348225][T15714] lo: left allmulticast mode [ 832.582324][T15721] netlink: 160 bytes leftover after parsing attributes in process `syz.4.3499'. [ 832.863561][T15727] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3502'. [ 832.971303][T15738] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3506'. [ 833.002644][T15735] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3506'. [ 833.105287][T15741] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3506'. [ 833.718572][T15752] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3510'. [ 835.617177][T15805] lo: left promiscuous mode [ 835.656836][T15805] lo: entered allmulticast mode [ 835.681630][T15794] lo: entered promiscuous mode [ 835.686587][T15794] lo: left allmulticast mode [ 835.845145][T15812] netlink: 'syz.4.3535': attribute type 2 has an invalid length. [ 836.134052][T15814] netlink: 'syz.5.3534': attribute type 21 has an invalid length. [ 836.246827][T15814] IPv6: NLM_F_CREATE should be specified when creating new route [ 836.271432][T15828] netlink: 'syz.5.3534': attribute type 21 has an invalid length. [ 836.280104][T15828] netlink: 'syz.5.3534': attribute type 10 has an invalid length. [ 836.483491][T15831] lo: left promiscuous mode [ 836.492158][T15831] lo: entered allmulticast mode [ 836.513996][T15833] __nla_validate_parse: 11 callbacks suppressed [ 836.514016][T15833] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3541'. [ 836.567635][T15831] lo: entered promiscuous mode [ 836.582692][T15831] lo: left allmulticast mode [ 836.586814][T15835] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3542'. [ 837.126223][T15850] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3547'. [ 837.246605][T15863] netlink: 'syz.4.3552': attribute type 29 has an invalid length. [ 837.603971][T15875] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3555'. [ 837.732411][T15876] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3557'. [ 838.421134][T15895] netlink: 'syz.4.3563': attribute type 10 has an invalid length. [ 838.433717][T15893] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3562'. [ 838.476074][T15900] netlink: 'syz.1.3565': attribute type 29 has an invalid length. [ 838.494596][T15895] lo: left promiscuous mode [ 838.644415][T15904] netlink: 'syz.5.3568': attribute type 21 has an invalid length. [ 838.670179][T15904] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3568'. [ 838.747923][T15910] netlink: 830 bytes leftover after parsing attributes in process `syz.6.3570'. [ 840.669711][T15938] netlink: 'syz.1.3577': attribute type 29 has an invalid length. [ 840.888240][T15943] netlink: 'syz.4.3579': attribute type 2 has an invalid length. [ 840.906783][T15943] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3579'. [ 841.081183][T15946] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3580'. [ 841.574693][T15968] __nla_validate_parse: 1 callbacks suppressed [ 841.574717][T15968] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3587'. [ 841.594868][T15967] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3587'. [ 841.618952][T15967] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3587'. [ 841.798851][T15972] netlink: 830 bytes leftover after parsing attributes in process `syz.6.3588'. [ 842.261213][T15986] netlink: 'syz.4.3592': attribute type 29 has an invalid length. [ 842.435635][T15993] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3594'. [ 842.463533][T15990] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3594'. [ 842.608219][T15999] lo: entered allmulticast mode [ 842.696192][T15999] lo: entered promiscuous mode [ 842.723395][T15999] lo: left allmulticast mode [ 842.739707][T16001] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3599'. [ 842.954851][T16013] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3601'. [ 842.964144][T16010] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3602'. [ 842.973719][T16010] bond_slave_0: entered promiscuous mode [ 843.159675][T16018] netlink: 'syz.2.3605': attribute type 29 has an invalid length. [ 843.248724][T16026] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3607'. [ 844.624595][T16063] FAULT_INJECTION: forcing a failure. [ 844.624595][T16063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 844.640755][T16063] CPU: 1 UID: 0 PID: 16063 Comm: syz.2.3620 Not tainted 6.16.0-rc2-syzkaller-g190113989ae0 #0 PREEMPT(full) [ 844.640785][T16063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 844.640800][T16063] Call Trace: [ 844.640817][T16063] [ 844.640827][T16063] dump_stack_lvl+0x189/0x250 [ 844.640868][T16063] ? __pfx____ratelimit+0x10/0x10 [ 844.640902][T16063] ? __pfx_dump_stack_lvl+0x10/0x10 [ 844.640937][T16063] ? __pfx__printk+0x10/0x10 [ 844.640974][T16063] should_fail_ex+0x414/0x560 [ 844.641009][T16063] _copy_to_user+0x31/0xb0 [ 844.641035][T16063] simple_read_from_buffer+0xe1/0x170 [ 844.641065][T16063] proc_fail_nth_read+0x1df/0x250 [ 844.641096][T16063] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 844.641128][T16063] ? rw_verify_area+0x258/0x650 [ 844.641161][T16063] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 844.641190][T16063] vfs_read+0x200/0x980 [ 844.641231][T16063] ? __pfx___mutex_lock+0x10/0x10 [ 844.641254][T16063] ? __pfx_vfs_read+0x10/0x10 [ 844.641290][T16063] ? __fget_files+0x2a/0x420 [ 844.641320][T16063] ? __fget_files+0x3a0/0x420 [ 844.641344][T16063] ? __fget_files+0x2a/0x420 [ 844.641379][T16063] ksys_read+0x145/0x250 [ 844.641402][T16063] ? __pfx_ksys_read+0x10/0x10 [ 844.641434][T16063] ? rcu_is_watching+0x15/0xb0 [ 844.641476][T16063] ? do_syscall_64+0xbe/0x3b0 [ 844.641502][T16063] do_syscall_64+0xfa/0x3b0 [ 844.641520][T16063] ? lockdep_hardirqs_on+0x9c/0x150 [ 844.641553][T16063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.641577][T16063] ? clear_bhb_loop+0x60/0xb0 [ 844.641617][T16063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.641637][T16063] RIP: 0033:0x7f4d6338d33c [ 844.641655][T16063] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 844.641674][T16063] RSP: 002b:00007f4d6410f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 844.641696][T16063] RAX: ffffffffffffffda RBX: 00007f4d635b5fa0 RCX: 00007f4d6338d33c [ 844.641711][T16063] RDX: 000000000000000f RSI: 00007f4d6410f0a0 RDI: 0000000000000003 [ 844.641724][T16063] RBP: 00007f4d6410f090 R08: 0000000000000000 R09: 0000000000000000 [ 844.641736][T16063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 844.641748][T16063] R13: 0000000000000001 R14: 00007f4d635b5fa0 R15: 00007ffebf27ac88 [ 844.641780][T16063] [ 845.216818][T16079] netlink: 'syz.4.3627': attribute type 21 has an invalid length. [ 846.134220][T16112] netlink: 'syz.4.3639': attribute type 21 has an invalid length. [ 846.237612][T16115] FAULT_INJECTION: forcing a failure. [ 846.237612][T16115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 846.259571][T16115] CPU: 0 UID: 0 PID: 16115 Comm: syz.2.3641 Not tainted 6.16.0-rc2-syzkaller-g190113989ae0 #0 PREEMPT(full) [ 846.259598][T16115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 846.259610][T16115] Call Trace: [ 846.259618][T16115] [ 846.259626][T16115] dump_stack_lvl+0x189/0x250 [ 846.259660][T16115] ? __pfx____ratelimit+0x10/0x10 [ 846.259690][T16115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 846.259719][T16115] ? __pfx__printk+0x10/0x10 [ 846.259740][T16115] ? __might_fault+0xb0/0x130 [ 846.259769][T16115] should_fail_ex+0x414/0x560 [ 846.259799][T16115] _copy_from_user+0x2d/0xb0 [ 846.259818][T16115] generic_map_update_batch+0x572/0x7f0 [ 846.259852][T16115] ? __pfx_generic_map_update_batch+0x10/0x10 [ 846.259873][T16115] ? __fget_files+0x2a/0x420 [ 846.259902][T16115] ? __pfx_generic_map_update_batch+0x10/0x10 [ 846.259921][T16115] bpf_map_do_batch+0x369/0x5f0 [ 846.259953][T16115] __sys_bpf+0x384/0x860 [ 846.259979][T16115] ? __pfx___sys_bpf+0x10/0x10 [ 846.260014][T16115] ? ksys_write+0x22a/0x250 [ 846.260033][T16115] ? __pfx_ksys_write+0x10/0x10 [ 846.260047][T16115] ? rcu_is_watching+0x15/0xb0 [ 846.260082][T16115] __x64_sys_bpf+0x7c/0x90 [ 846.260103][T16115] do_syscall_64+0xfa/0x3b0 [ 846.260120][T16115] ? lockdep_hardirqs_on+0x9c/0x150 [ 846.260146][T16115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.260164][T16115] ? clear_bhb_loop+0x60/0xb0 [ 846.260187][T16115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.260205][T16115] RIP: 0033:0x7f4d6338e929 [ 846.260222][T16115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 846.260238][T16115] RSP: 002b:00007f4d6410f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 846.260258][T16115] RAX: ffffffffffffffda RBX: 00007f4d635b5fa0 RCX: 00007f4d6338e929 [ 846.260271][T16115] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 846.260283][T16115] RBP: 00007f4d6410f090 R08: 0000000000000000 R09: 0000000000000000 [ 846.260294][T16115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.260306][T16115] R13: 0000000000000000 R14: 00007f4d635b5fa0 R15: 00007ffebf27ac88 [ 846.260334][T16115] [ 846.573058][T16119] warn_alloc: 3 callbacks suppressed [ 846.573081][T16119] syz.4.3643: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 846.640791][T16119] CPU: 0 UID: 0 PID: 16119 Comm: syz.4.3643 Not tainted 6.16.0-rc2-syzkaller-g190113989ae0 #0 PREEMPT(full) [ 846.640822][T16119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 846.640838][T16119] Call Trace: [ 846.640857][T16119] [ 846.640875][T16119] dump_stack_lvl+0x189/0x250 [ 846.640968][T16119] ? __pfx_dump_stack_lvl+0x10/0x10 [ 846.641030][T16119] ? __pfx__printk+0x10/0x10 [ 846.641087][T16119] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 846.641130][T16119] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 846.641198][T16119] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 846.641274][T16119] warn_alloc+0x214/0x310 [ 846.641324][T16119] ? stack_depot_save_flags+0x40/0x900 [ 846.641364][T16119] ? lock_release+0x361/0x3e0 [ 846.641452][T16119] ? __pfx_warn_alloc+0x10/0x10 [ 846.641531][T16119] ? kasan_save_track+0x4f/0x80 [ 846.641606][T16119] ? xskq_create+0x56/0x170 [ 846.641637][T16119] ? xsk_init_queue+0xb0/0x110 [ 846.641675][T16119] ? xsk_setsockopt+0x4de/0x710 [ 846.641700][T16119] ? do_sock_setsockopt+0x257/0x3e0 [ 846.641722][T16119] ? __x64_sys_setsockopt+0x18b/0x220 [ 846.641744][T16119] ? do_syscall_64+0xfa/0x3b0 [ 846.641760][T16119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.641864][T16119] __vmalloc_node_range_noprof+0x125/0x12f0 [ 846.642175][T16119] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 846.642273][T16119] ? __kasan_kmalloc+0x93/0xb0 [ 846.642343][T16119] vmalloc_user_noprof+0xad/0xf0 [ 846.642393][T16119] ? xskq_create+0xbf/0x170 [ 846.642452][T16119] xskq_create+0xbf/0x170 [ 846.642529][T16119] xsk_init_queue+0xb0/0x110 [ 846.642605][T16119] xsk_setsockopt+0x4de/0x710 [ 846.642680][T16119] ? __pfx_xsk_setsockopt+0x10/0x10 [ 846.642729][T16119] ? __pfx_perf_trace_lock+0x10/0x10 [ 846.642813][T16119] ? aa_sock_opt_perm+0x74/0x110 [ 846.642876][T16119] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 846.642904][T16119] ? __pfx_xsk_setsockopt+0x10/0x10 [ 846.642967][T16119] do_sock_setsockopt+0x257/0x3e0 [ 846.643040][T16119] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 846.643129][T16119] ? __fget_files+0x2a/0x420 [ 846.643239][T16119] __x64_sys_setsockopt+0x18b/0x220 [ 846.643342][T16119] do_syscall_64+0xfa/0x3b0 [ 846.643365][T16119] ? lockdep_hardirqs_on+0x9c/0x150 [ 846.643421][T16119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.643449][T16119] ? clear_bhb_loop+0x60/0xb0 [ 846.643513][T16119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.643536][T16119] RIP: 0033:0x7f53a918e929 [ 846.643568][T16119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 846.643586][T16119] RSP: 002b:00007f53a9f9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 846.643607][T16119] RAX: ffffffffffffffda RBX: 00007f53a93b5fa0 RCX: 00007f53a918e929 [ 846.643622][T16119] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 846.643634][T16119] RBP: 00007f53a9210b39 R08: 0000000000000004 R09: 0000000000000000 [ 846.643648][T16119] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 846.643661][T16119] R13: 0000000000000000 R14: 00007f53a93b5fa0 R15: 00007ffcb440a108 [ 846.643877][T16119] [ 846.648359][T16119] Mem-Info: [ 846.882072][T16130] __nla_validate_parse: 16 callbacks suppressed [ 846.882138][T16130] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3647'. [ 846.990645][T16119] active_anon:4449 inactive_anon:0 isolated_anon:0 [ 846.990645][T16119] active_file:21705 inactive_file:40129 isolated_file:0 [ 846.990645][T16119] unevictable:768 dirty:92 writeback:0 [ 846.990645][T16119] slab_reclaimable:10539 slab_unreclaimable:97700 [ 846.990645][T16119] mapped:29626 shmem:1369 pagetables:1026 [ 846.990645][T16119] sec_pagetables:0 bounce:0 [ 846.990645][T16119] kernel_misc_reclaimable:0 [ 846.990645][T16119] free:1314414 free_pcp:15063 free_cma:0 [ 846.990725][T16119] Node 0 active_anon:17796kB inactive_anon:0kB active_file:86820kB inactive_file:160312kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118504kB dirty:368kB writeback:0kB shmem:3940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11552kB pagetables:3964kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 846.990803][T16119] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 846.990875][T16119] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 846.990966][T16119] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 846.991089][T16119] Node 0 DMA32 free:1341644kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17752kB inactive_anon:0kB active_file:86820kB inactive_file:158468kB unevictable:1536kB writepending:368kB present:3129332kB managed:2561024kB mlocked:0kB bounce:0kB free_pcp:39656kB local_pcp:21084kB free_cma:0kB [ 846.991181][T16119] lowmem_reserve[]: 0 0 1 1 1 [ 846.991301][T16119] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1844kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 846.991397][T16119] lowmem_reserve[]: 0 0 0 0 0 [ 846.991519][T16119] Node 1 Normal free:3900648kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20588kB local_pcp:9352kB free_cma:0kB [ 846.991632][T16119] lowmem_reserve[]: 0 0 0 0 0 [ 847.499047][T16119] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 847.547004][T16119] Node 0 DMA32: 2429*4kB (UME) 1463*8kB (UME) 718*16kB (M) 727*32kB (UME) 824*64kB (UM) 409*128kB (UM) 236*256kB (UM) 183*512kB (UME) 94*1024kB (UME) 44*2048kB (UME) 205*4096kB (M) = 1341420kB [ 847.567083][T16119] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 847.580167][T16119] Node 1 Normal: 222*4kB (UE) 58*8kB (UME) 42*16kB (UME) 66*32kB (UME) 23*64kB (UME) 10*128kB (UME) 2*256kB (M) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 949*4096kB (ME) = 3900648kB [ 847.612899][T16119] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 847.643084][T16119] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 847.669210][T16119] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 847.697022][T16119] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 847.706644][T16144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3650'. [ 847.831651][T16119] 63200 total pagecache pages [ 847.840285][T16119] 0 pages in swap cache [ 847.844650][T16119] Free swap = 124996kB [ 847.849053][T16119] Total swap = 124996kB [ 847.857388][T16119] 2097051 pages RAM [ 847.861691][T16119] 0 pages HighMem/MovableOnly [ 847.866556][T16119] 424689 pages reserved [ 847.874752][T16119] 0 pages cma reserved [ 848.300690][T16162] FAULT_INJECTION: forcing a failure. [ 848.300690][T16162] name failslab, interval 1, probability 0, space 0, times 0 [ 848.318861][T16162] CPU: 0 UID: 0 PID: 16162 Comm: syz.2.3656 Not tainted 6.16.0-rc2-syzkaller-g190113989ae0 #0 PREEMPT(full) [ 848.318890][T16162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 848.318903][T16162] Call Trace: [ 848.318911][T16162] [ 848.318919][T16162] dump_stack_lvl+0x189/0x250 [ 848.318956][T16162] ? __pfx____ratelimit+0x10/0x10 [ 848.318987][T16162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 848.319019][T16162] ? __pfx__printk+0x10/0x10 [ 848.319044][T16162] ? __pfx___might_resched+0x10/0x10 [ 848.319076][T16162] ? fs_reclaim_acquire+0x7d/0x100 [ 848.319106][T16162] should_fail_ex+0x414/0x560 [ 848.319137][T16162] should_failslab+0xa8/0x100 [ 848.319161][T16162] __kmalloc_noprof+0xcb/0x4f0 [ 848.319180][T16162] ? tomoyo_encode+0x28b/0x550 [ 848.319215][T16162] tomoyo_encode+0x28b/0x550 [ 848.319258][T16162] tomoyo_realpath_from_path+0x58d/0x5d0 [ 848.319299][T16162] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 848.319324][T16162] tomoyo_path_number_perm+0x1e8/0x5a0 [ 848.319357][T16162] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 848.319399][T16162] ? __lock_acquire+0xab9/0xd20 [ 848.319461][T16162] ? __fget_files+0x2a/0x420 [ 848.319485][T16162] ? __fget_files+0x2a/0x420 [ 848.319522][T16162] ? __fget_files+0x3a0/0x420 [ 848.319544][T16162] ? __fget_files+0x2a/0x420 [ 848.319571][T16162] security_file_ioctl+0xcb/0x2d0 [ 848.319598][T16162] __se_sys_ioctl+0x47/0x170 [ 848.319629][T16162] do_syscall_64+0xfa/0x3b0 [ 848.319648][T16162] ? lockdep_hardirqs_on+0x9c/0x150 [ 848.319678][T16162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.319699][T16162] ? clear_bhb_loop+0x60/0xb0 [ 848.319725][T16162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.319745][T16162] RIP: 0033:0x7f4d6338e929 [ 848.319770][T16162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 848.319800][T16162] RSP: 002b:00007f4d611f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 848.319820][T16162] RAX: ffffffffffffffda RBX: 00007f4d635b6080 RCX: 00007f4d6338e929 [ 848.319835][T16162] RDX: 0000200000000100 RSI: 00000000400454d9 RDI: 0000000000000006 [ 848.319847][T16162] RBP: 00007f4d611f6090 R08: 0000000000000000 R09: 0000000000000000 [ 848.319877][T16162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 848.319890][T16162] R13: 0000000000000000 R14: 00007f4d635b6080 R15: 00007ffebf27ac88 [ 848.319923][T16162] [ 848.325127][T16162] ERROR: Out of memory at tomoyo_realpath_from_path. [ 848.910978][T16177] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3661'. [ 849.176354][T16179] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3663'. [ 849.402204][T16186] netlink: 'syz.6.3665': attribute type 10 has an invalid length. [ 849.584819][T16191] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3667'. [ 850.164630][T16198] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3670'. [ 850.476177][T16214] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3674'. [ 850.743535][T16216] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3677'. [ 851.047185][T16230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3682'. [ 851.416853][T16238] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3685'. [ 852.197766][T13147] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.301488][T16258] __nla_validate_parse: 1 callbacks suppressed [ 852.301511][T16258] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3692'. [ 852.515887][T12356] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 852.516651][T13147] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.549914][T12356] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 852.558598][T12356] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 852.573473][T12356] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 852.601869][T12356] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 852.726980][T16256] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3692'. [ 852.979385][T13147] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.192662][T13147] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.281263][T16276] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3695'. [ 853.353058][T16277] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3698'. [ 853.693324][T13147] dummy0: left allmulticast mode [ 853.838203][T13147] bridge0: port 3(dummy0) entered disabled state [ 853.907277][T13147] bridge_slave_1: left allmulticast mode [ 853.915980][T13147] bridge_slave_1: left promiscuous mode [ 853.927402][T13147] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.958132][T13147] bridge_slave_0: left allmulticast mode [ 853.971966][T13147] bridge_slave_0: left promiscuous mode [ 853.977909][T13147] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.391803][T16311] netlink: 'syz.1.3709': attribute type 10 has an invalid length. [ 854.730944][ T5154] Bluetooth: hci4: command tx timeout [ 854.868846][T16317] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3711'. [ 854.954332][T13147] team0: Port device geneve1 removed [ 855.189150][T13147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 855.208484][T13147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 855.231327][T13147] bond0 (unregistering): Released all slaves [ 855.434230][T16311] team0: Port device geneve1 added [ 855.650363][T16320] netlink: 'syz.5.3712': attribute type 21 has an invalid length. [ 855.747399][T16324] netlink: 203516 bytes leftover after parsing attributes in process `syz.5.3712'. [ 855.773073][T16260] chnl_net:caif_netlink_parms(): no params data found [ 855.800392][T16324] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 855.835723][T16320] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3712'. [ 855.865460][T16324] openvswitch: netlink: Duplicate key (type 0). [ 856.107976][T16332] lo: left promiscuous mode [ 856.112773][T16332] lo: entered allmulticast mode [ 856.119920][T16335] lo: entered promiscuous mode [ 856.130469][T16335] lo: left allmulticast mode [ 856.267967][T13147] hsr_slave_0: left promiscuous mode [ 856.281689][T13147] hsr_slave_1: left promiscuous mode [ 856.287798][T13147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 856.305502][T13147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 856.317629][T13147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 856.325971][T13147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 856.348567][T13147] veth1_vlan: left promiscuous mode [ 856.542285][T16357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3724'. [ 856.811372][ T5154] Bluetooth: hci4: command tx timeout [ 857.402004][T13147] team0 (unregistering): Port device team_slave_1 removed [ 857.436113][T13147] team0 (unregistering): Port device team_slave_0 removed [ 857.796764][T16260] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.804091][T16260] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.820837][T16260] bridge_slave_0: entered allmulticast mode [ 857.829154][T16260] bridge_slave_0: entered promiscuous mode [ 857.854298][T16260] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.871663][T16260] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.878832][T16260] bridge_slave_1: entered allmulticast mode [ 857.899496][T16260] bridge_slave_1: entered promiscuous mode [ 858.053257][T16260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 858.084026][T16369] netlink: 'syz.2.3730': attribute type 2 has an invalid length. [ 858.119245][T16260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.131070][T16369] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3730'. [ 858.284211][T16260] team0: Port device team_slave_0 added [ 858.302433][T16260] team0: Port device team_slave_1 added [ 858.384162][T16378] netlink: 'syz.5.3734': attribute type 29 has an invalid length. [ 858.464123][T16260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 858.492956][T16260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 858.568886][T16260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 858.609351][T16260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 858.675703][T16260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 858.749718][T16260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 858.891643][ T5154] Bluetooth: hci4: command tx timeout [ 859.507673][T16260] hsr_slave_0: entered promiscuous mode [ 859.520105][T16260] hsr_slave_1: entered promiscuous mode [ 859.528379][T16260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 859.537486][T16260] Cannot create hsr debugfs directory [ 859.587588][T16405] netlink: 'syz.2.3742': attribute type 29 has an invalid length. [ 859.727868][T16412] netlink: 'syz.6.3744': attribute type 2 has an invalid length. [ 859.773550][T16412] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3744'. [ 859.896627][T16418] netlink: 'syz.5.3747': attribute type 29 has an invalid length. [ 859.956226][T16420] lo: left promiscuous mode [ 859.979758][T16420] lo: entered allmulticast mode [ 860.040469][T16420] lo: entered promiscuous mode [ 860.045611][T16420] lo: left allmulticast mode [ 860.456587][T16260] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 860.495469][T16260] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 860.528719][T16260] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 860.565266][T16260] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 860.583629][T16434] netlink: 'syz.5.3754': attribute type 10 has an invalid length. [ 860.849588][T16260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 860.971414][ T5154] Bluetooth: hci4: command tx timeout [ 860.978302][T16260] 8021q: adding VLAN 0 to HW filter on device team0 [ 861.068495][T13158] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.075735][T13158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 861.149610][T13161] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.156852][T13161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 861.236863][T16456] netlink: 'syz.6.3759': attribute type 29 has an invalid length. [ 861.358738][T16454] lo: entered allmulticast mode [ 861.398365][T16454] lo: entered promiscuous mode [ 861.418669][T16454] lo: left allmulticast mode [ 862.454185][T16260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 862.611669][T16489] pim6reg1: entered promiscuous mode [ 862.624480][T16489] pim6reg1: entered allmulticast mode [ 863.192487][T16260] veth0_vlan: entered promiscuous mode [ 863.223431][T16260] veth1_vlan: entered promiscuous mode [ 863.404682][T16260] veth0_macvtap: entered promiscuous mode [ 863.443203][T16260] veth1_macvtap: entered promiscuous mode [ 863.508098][T16260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 863.573341][T16260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 863.597377][T16260] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.613639][T16260] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.622943][T16260] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.636611][T16260] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.828770][T16535] lo: left promiscuous mode [ 863.835279][T16535] lo: entered allmulticast mode [ 863.893038][T13147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.906082][T13147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.924434][T16535] bridge_slave_0: entered promiscuous mode [ 864.075503][T13158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.095635][T13158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.749694][T16568] netlink: 'syz.6.3804': attribute type 21 has an invalid length. [ 864.808473][T16568] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3804'. [ 864.971582][T16570] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3805'. [ 865.271448][T12356] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 865.279917][T12356] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 865.288936][T12356] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 865.297157][T12356] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 865.305885][T12356] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 865.907897][T13147] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.404558][T13147] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.747498][T13147] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.906171][T13147] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.960316][T16582] chnl_net:caif_netlink_parms(): no params data found [ 867.193648][T16582] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.221122][T16582] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.232860][T16582] bridge_slave_0: entered allmulticast mode [ 867.247513][T16582] bridge_slave_0: entered promiscuous mode [ 867.296248][T16582] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.303786][T16582] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.318671][T16582] bridge_slave_1: entered allmulticast mode [ 867.326264][T16582] bridge_slave_1: entered promiscuous mode [ 867.348064][T16631] lo: left promiscuous mode [ 867.352704][T16631] lo: entered allmulticast mode [ 867.360149][T13147] batadv_slave_1: left allmulticast mode [ 867.366110][T13147] bridge0: port 3(batadv_slave_1) entered disabled state [ 867.374036][ T5154] Bluetooth: hci5: command tx timeout [ 867.383758][T13147] bridge_slave_1: left allmulticast mode [ 867.389407][T13147] bridge_slave_1: left promiscuous mode [ 867.396394][T13147] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.407798][T13147] bridge_slave_0: left allmulticast mode [ 867.413541][T13147] bridge_slave_0: left promiscuous mode [ 867.419269][T13147] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.442506][T13147] bond_slave_0: left promiscuous mode [ 867.635868][T13147] team0: Port device geneve1 removed [ 867.780201][T13147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 867.791473][T13147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 867.801848][T13147] bond0 (unregistering): Released all slaves [ 867.834730][T16582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 867.846411][T16633] bridge_slave_0: entered promiscuous mode [ 867.864317][T16582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 869.041578][T16582] team0: Port device team_slave_0 added [ 869.106681][T16582] team0: Port device team_slave_1 added [ 869.298404][T16582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 869.309878][T16582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 869.344945][T16582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 869.373797][T13147] hsr_slave_0: left promiscuous mode [ 869.379766][T13147] hsr_slave_1: left promiscuous mode [ 869.386469][T13147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 869.404515][T13147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.442109][T13147] veth1_vlan: left promiscuous mode [ 869.452364][ T5154] Bluetooth: hci5: command tx timeout [ 869.471918][T13147] veth0_vlan: left promiscuous mode [ 869.623555][T16662] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.3837'. [ 870.228575][T13147] team0 (unregistering): Port device team_slave_1 removed [ 870.274039][T13147] team0 (unregistering): Port device team_slave_0 removed [ 870.686263][T16582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 870.694449][T16582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 870.721313][T16582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 870.740949][T16674] mac80211_hwsim hwsim18 wlan1: entered promiscuous mode [ 870.754087][T16674] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 870.947303][T16582] hsr_slave_0: entered promiscuous mode [ 870.962534][T16582] hsr_slave_1: entered promiscuous mode [ 870.975717][T16582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 870.990657][T16582] Cannot create hsr debugfs directory [ 871.048955][T16681] mac80211_hwsim hwsim18 wlan1: left promiscuous mode [ 871.448694][T16692] pim6reg1: entered promiscuous mode [ 871.468159][T16692] pim6reg1: entered allmulticast mode [ 871.533031][ T5154] Bluetooth: hci5: command tx timeout [ 873.386358][T16720] syzkaller0: entered promiscuous mode [ 873.615863][ T5154] Bluetooth: hci5: command tx timeout [ 875.345116][T16582] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 875.375524][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.382180][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.394299][T16582] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 875.442485][T16582] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 875.455596][T16785] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3886'. [ 875.474318][T16582] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 875.489874][T16785] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3886'. [ 875.537727][T16785] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3886'. [ 875.736117][T16797] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3889'. [ 875.787204][T16803] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3889'. [ 875.815591][T16801] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3890'. [ 875.831108][T16807] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3890'. [ 875.860392][T16797] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3889'. [ 875.880260][T16801] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3890'. [ 876.020042][T16582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 876.138219][T16582] 8021q: adding VLAN 0 to HW filter on device team0 [ 876.355283][T13158] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.362535][T13158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 876.492667][T13158] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.499883][T13158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 876.664894][T16816] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3896'. [ 876.700570][T16823] C: renamed from team_slave_0 (while UP) [ 876.743096][T16823] netlink: 'syz.6.3898': attribute type 1 has an invalid length. [ 877.238927][T16839] sit0: entered allmulticast mode [ 877.367692][T16582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 877.431578][T16847] netlink: 'syz.5.3908': attribute type 29 has an invalid length. [ 877.472435][T16847] netlink: 'syz.5.3908': attribute type 29 has an invalid length. [ 877.492973][T16847] netlink: 'syz.5.3908': attribute type 29 has an invalid length. [ 877.527810][T16847] netlink: 'syz.5.3908': attribute type 29 has an invalid length. [ 877.598023][T16582] veth0_vlan: entered promiscuous mode [ 877.631722][T16582] veth1_vlan: entered promiscuous mode [ 877.720278][T16582] veth0_macvtap: entered promiscuous mode [ 877.774283][T16582] veth1_macvtap: entered promiscuous mode [ 877.853156][T16859] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 877.880068][T16859] syzkaller0: entered promiscuous mode [ 877.889570][T16859] syzkaller0: entered allmulticast mode [ 877.909676][T16582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 878.093753][T16582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 878.109161][T16582] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.128182][T16582] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.151006][T16582] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.180399][T16582] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.529388][T13150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.566116][T13150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.688854][T13150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.763152][T13150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.952471][T16888] ------------[ cut here ]------------ [ 878.958243][T16888] Please remove unsupported % in format string [ 878.971223][T16888] WARNING: CPU: 1 PID: 16888 at lib/vsprintf.c:2724 format_decode+0x965/0xe30 [ 878.980447][T16888] Modules linked in: [ 878.984943][T16888] CPU: 1 UID: 0 PID: 16888 Comm: syz.4.3922 Not tainted 6.16.0-rc2-syzkaller-g190113989ae0 #0 PREEMPT(full) [ 878.997148][T16888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 879.007525][T16888] RIP: 0010:format_decode+0x965/0xe30 [ 879.013046][T16888] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 0f 85 b4 04 00 00 41 0f b6 34 24 48 c7 c7 c0 16 b9 8c e8 cc 87 21 f6 90 <0f> 0b 90 90 e9 6b fc ff ff e8 fd dc 5d f6 48 89 dd e9 55 fa ff ff [ 879.032857][T16888] RSP: 0018:ffffc90004d477b0 EFLAGS: 00010246 [ 879.039326][T16888] RAX: 909f3beb2352ab00 RBX: 0000000000000000 RCX: 0000000000080000 [ 879.047790][T16888] RDX: ffffc900178e0000 RSI: 00000000000033ac RDI: 00000000000033ad [ 879.056655][T16888] RBP: ffffc90004d479ac R08: 0000000000000003 R09: 0000000000000004 [ 879.065188][T16888] R10: dffffc0000000000 R11: fffffbfff1bfa9ec R12: ffffc90004d479ac [ 879.073451][T16888] R13: ffffffff8cb911c0 R14: 0000000000000406 R15: 0000000000000400 [ 879.081954][T16888] FS: 00007fc47ede76c0(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 879.091723][T16888] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 879.098645][T16888] CR2: 000000110c30493d CR3: 00000000241f6000 CR4: 00000000003526f0 [ 879.106924][T16888] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 879.115361][T16888] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 879.123515][T16888] Call Trace: [ 879.127307][T16888] [ 879.130509][T16888] bstr_printf+0xd0/0xb70 [ 879.135007][T16888] bpf_trace_printk+0x10e/0x190 [ 879.140133][T16888] ? ktime_get+0x3e/0x1f0 [ 879.145039][T16888] ? __pfx_bpf_trace_printk+0x10/0x10 [ 879.150598][T16888] ? __local_bh_disable_ip+0xf1/0x190 [ 879.156364][T16888] ? __kasan_slab_alloc+0x6c/0x80 [ 879.161729][T16888] ? read_tsc+0x9/0x20 [ 879.166628][T16888] ? ktime_get+0x1cb/0x1f0 [ 879.171432][T16888] bpf_prog_12183cdb1cd51dab+0x37/0x3f [ 879.177198][T16888] bpf_test_run+0x614/0x830 [ 879.182092][T16888] ? bpf_test_run+0x205/0x830 [ 879.187140][T16888] ? __pfx_bpf_test_run+0x10/0x10 [ 879.192565][T16888] ? slab_build_skb+0x273/0x3e0 [ 879.197784][T16888] ? convert___skb_to_skb+0x3d/0x590 [ 879.203796][T16888] bpf_prog_test_run_skb+0xb30/0x1560 [ 879.209618][T16888] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 879.215754][T16888] bpf_prog_test_run+0x2c4/0x340 [ 879.221112][T16888] __sys_bpf+0x4a4/0x860 [ 879.225577][T16888] ? __pfx___sys_bpf+0x10/0x10 [ 879.230534][T16888] ? sched_clock_cpu+0x74/0x430 [ 879.235999][T16888] ? rcu_is_watching+0x15/0xb0 [ 879.241154][T16888] __x64_sys_bpf+0x7c/0x90 [ 879.245898][T16888] do_syscall_64+0xfa/0x3b0 [ 879.250627][T16888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.256867][T16888] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 879.263419][T16888] ? clear_bhb_loop+0x60/0xb0 [ 879.268880][T16888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.274947][T16888] RIP: 0033:0x7fc47df8e929 [ 879.279465][T16888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 879.299235][T16888] RSP: 002b:00007fc47ede7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 879.307882][T16888] RAX: ffffffffffffffda RBX: 00007fc47e1b5fa0 RCX: 00007fc47df8e929 [ 879.316324][T16888] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 879.324538][T16888] RBP: 00007fc47e010b39 R08: 0000000000000000 R09: 0000000000000000 [ 879.332805][T16888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 879.341042][T16888] R13: 0000000000000000 R14: 00007fc47e1b5fa0 R15: 00007ffe5b8bcf08 [ 879.349623][T16888] [ 879.352884][T16888] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 879.360195][T16888] CPU: 1 UID: 0 PID: 16888 Comm: syz.4.3922 Not tainted 6.16.0-rc2-syzkaller-g190113989ae0 #0 PREEMPT(full) [ 879.371767][T16888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 879.381849][T16888] Call Trace: [ 879.385159][T16888] [ 879.388120][T16888] dump_stack_lvl+0x99/0x250 [ 879.392768][T16888] ? __asan_memcpy+0x40/0x70 [ 879.397401][T16888] ? __pfx_dump_stack_lvl+0x10/0x10 [ 879.402654][T16888] ? __pfx__printk+0x10/0x10 [ 879.407317][T16888] panic+0x2db/0x790 [ 879.411269][T16888] ? __pfx_panic+0x10/0x10 [ 879.415784][T16888] __warn+0x31b/0x4b0 [ 879.419817][T16888] ? format_decode+0x965/0xe30 [ 879.424617][T16888] ? format_decode+0x965/0xe30 [ 879.429393][T16888] report_bug+0x2be/0x4f0 [ 879.433743][T16888] ? format_decode+0x965/0xe30 [ 879.438522][T16888] ? format_decode+0x965/0xe30 [ 879.443297][T16888] ? format_decode+0x967/0xe30 [ 879.448084][T16888] handle_bug+0x84/0x160 [ 879.452345][T16888] exc_invalid_op+0x1a/0x50 [ 879.456856][T16888] asm_exc_invalid_op+0x1a/0x20 [ 879.461713][T16888] RIP: 0010:format_decode+0x965/0xe30 [ 879.467101][T16888] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 0f 85 b4 04 00 00 41 0f b6 34 24 48 c7 c7 c0 16 b9 8c e8 cc 87 21 f6 90 <0f> 0b 90 90 e9 6b fc ff ff e8 fd dc 5d f6 48 89 dd e9 55 fa ff ff [ 879.486719][T16888] RSP: 0018:ffffc90004d477b0 EFLAGS: 00010246 [ 879.492798][T16888] RAX: 909f3beb2352ab00 RBX: 0000000000000000 RCX: 0000000000080000 [ 879.500780][T16888] RDX: ffffc900178e0000 RSI: 00000000000033ac RDI: 00000000000033ad [ 879.508762][T16888] RBP: ffffc90004d479ac R08: 0000000000000003 R09: 0000000000000004 [ 879.516743][T16888] R10: dffffc0000000000 R11: fffffbfff1bfa9ec R12: ffffc90004d479ac [ 879.524736][T16888] R13: ffffffff8cb911c0 R14: 0000000000000406 R15: 0000000000000400 [ 879.532743][T16888] bstr_printf+0xd0/0xb70 [ 879.537096][T16888] bpf_trace_printk+0x10e/0x190 [ 879.541986][T16888] ? ktime_get+0x3e/0x1f0 [ 879.546332][T16888] ? __pfx_bpf_trace_printk+0x10/0x10 [ 879.551743][T16888] ? __local_bh_disable_ip+0xf1/0x190 [ 879.557140][T16888] ? __kasan_slab_alloc+0x6c/0x80 [ 879.562187][T16888] ? read_tsc+0x9/0x20 [ 879.566268][T16888] ? ktime_get+0x1cb/0x1f0 [ 879.570709][T16888] bpf_prog_12183cdb1cd51dab+0x37/0x3f [ 879.576180][T16888] bpf_test_run+0x614/0x830 [ 879.580706][T16888] ? bpf_test_run+0x205/0x830 [ 879.585407][T16888] ? __pfx_bpf_test_run+0x10/0x10 [ 879.590487][T16888] ? slab_build_skb+0x273/0x3e0 [ 879.595357][T16888] ? convert___skb_to_skb+0x3d/0x590 [ 879.600658][T16888] bpf_prog_test_run_skb+0xb30/0x1560 [ 879.606064][T16888] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 879.611886][T16888] bpf_prog_test_run+0x2c4/0x340 [ 879.616841][T16888] __sys_bpf+0x4a4/0x860 [ 879.621098][T16888] ? __pfx___sys_bpf+0x10/0x10 [ 879.625876][T16888] ? sched_clock_cpu+0x74/0x430 [ 879.630774][T16888] ? rcu_is_watching+0x15/0xb0 [ 879.635582][T16888] __x64_sys_bpf+0x7c/0x90 [ 879.640035][T16888] do_syscall_64+0xfa/0x3b0 [ 879.644558][T16888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.650632][T16888] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 879.656800][T16888] ? clear_bhb_loop+0x60/0xb0 [ 879.661493][T16888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.667397][T16888] RIP: 0033:0x7fc47df8e929 [ 879.671823][T16888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 879.691446][T16888] RSP: 002b:00007fc47ede7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 879.699877][T16888] RAX: ffffffffffffffda RBX: 00007fc47e1b5fa0 RCX: 00007fc47df8e929 [ 879.707854][T16888] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 879.715830][T16888] RBP: 00007fc47e010b39 R08: 0000000000000000 R09: 0000000000000000 [ 879.723806][T16888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 879.731784][T16888] R13: 0000000000000000 R14: 00007fc47e1b5fa0 R15: 00007ffe5b8bcf08 [ 879.739778][T16888] [ 879.743138][T16888] Kernel Offset: disabled [ 879.747474][T16888] Rebooting in 86400 seconds..