last executing test programs: 4.451762721s ago: executing program 4 (id=2196): socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000020000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='percpu_free_percpu\x00', r1}, 0x18) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) r4 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x1ff) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) socket$kcm(0x23, 0x5, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r6}, 0x8) socket$kcm(0x23, 0x2, 0x0) r7 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r7, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c0000000000000000", @ANYRES64=r7], 0x48}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d80000003200b904021d080005000400e8fe55a1180015000600142603600e120900210000090401a80016000a00014006000000036010faa000cf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbac3c7f4b497148599f9ce8017cbec4c2ee5a7cef4090000001fb791643a95e4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93450000000000000000", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.403489855s ago: executing program 0 (id=2201): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x90}, @printk={@lld}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b0300000000006c1d0010047e0c8131a6080c000af32c6e020075f800250002000f00e5aa000017d34460bc24eab556a705251e6182949a36c2d13b48dfffa600000000ecb8f6ec63c9f4d4938037e786a6d1bdd700", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback, 0x15, 0x0, 0x2, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x18, 0x9, 0x10, 0x2, 0x20000, 0xffffffffffffffff, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@map=r3, r0, 0x1d, 0x202c, 0x0, @void, @void, @value, @void, r2}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_lsm={0x1d, 0x16, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200}, [@ldst={0x1, 0x0, 0x3, 0x6, 0x4, 0x30, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x94}, @call={0x85, 0x0, 0x0, 0x11}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa96e}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x5}, @jmp={0x5, 0x1, 0xc, 0x3, 0x0, 0xfffffffffffffff4, 0x8}]}, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000dc0), 0x0, 0x10, 0x7}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xf, 0x3, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x1, 0x0, 0x2, 0x3}, 0x10}, 0x94) r6 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_clone(0x40180200, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x9, 0x3, 0x6, 0xdb, 0x0, 0x1, 0x4000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x2}, 0x0, 0x3, 0x3, 0x5, 0x80, 0x4, 0x3, 0x0, 0x1, 0x0, 0x9}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000800)={0x5, 0x0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x16, 0x711e, 0x2, 0x6, 0x20408, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000200)='syzkaller\x00', 0x9, 0xe2, &(0x7f0000000380)=""/226, 0x40f00, 0x15, '\x00', 0x0, @fallback=0x28, r5, 0x8, &(0x7f0000000500)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x3, 0x10001, 0x4}, 0x10, r7, 0xffffffffffffffff, 0x6, 0x0, &(0x7f00000009c0)=[{0x0, 0x1, 0xa, 0x9}, {0x5, 0x3, 0xa, 0x9}, {0x3, 0x2, 0x9, 0xa}, {0x4, 0x3, 0x10, 0xa}, {0x2, 0x3}, {0x3, 0x2, 0x0, 0x5}], 0x10, 0x8}, 0x94) sendmsg$sock(r6, &(0x7f00000005c0)={&(0x7f0000000300)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x80, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x600) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) 3.381192457s ago: executing program 4 (id=2202): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x44628, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x9d5}, 0x0, 0x0, 0xffffffffffffffff, 0x8) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000010000000020000000000000000000000a9f7de0000002001000000f0ea1ee5b76b6d7b9bd4db1f14f710c2a1fc3bfd9e265806ae22431ec7a0552e8f09cf36dffade272e5066640796e8fef07d3b46be7264a7bdd65860bcb4e97e4c8555262dd3fa16d38f4a52d07c0811885233401aadc961c2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32=r0, @ANYBLOB="0100"/20, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="0100000004000000030000000002000000006627616b0000000000cb9adffd43f9f7aeff764376b183129236f31ccabf63417643f9c870d3b231fb7c120427196b19b58ceea03d70969f26f9123286378a6f3dad6ae5364f89021db56d6a555714795888e55d243e921842ed68800a32046fdff1fcb9709e0d34a614779649414b1a8a6452cc890f5182d7bb4d6a0aec92975783b9a9529a3d7885438f7e24a42f3224bdff1e5e87d560907df85e1451dd96d8f5ea0ff5e57a1929a8d75309603ae98175818bfe27cd06f2415866db3a9c37421280c66d06609bb25fb7e1c3a2b4c4ab2192"], 0xfffffffffffffe13) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) (async) socket$kcm(0x2, 0x200000000000003, 0x106) (async) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r4 = socket$kcm(0x29, 0x2, 0x0) (async) r5 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000000c0), 0x2, 0x0) close(r5) (async) close(r4) r6 = socket$kcm(0x2b, 0x1, 0x0) close(r6) (async) r7 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r7, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="2400000000000000840000000700000044140823e000000200000002e00000010000100000000000dc00000000000000000000000700000094040000863900000001000cb2ffb69602013567ffcb060f19367d2b99bdc0f59e428bc33a050a3660f2bb77c7045b050a31efe0215e235d56060495ae0144243471ac14142700000006ac1414bb00000001ac1414bb0000ffff0a01010200000009009404010000866000000000000c253d78b48f9458beb62d0102000d3bf9f2dbdddfea00b260f00503db010436b20603c70109e35e3ab5244a640709675e60e1799f870512e123b12c8654130f6a1f80f526064d12061127d9c9821b1bfe4b42fcb33e2e2d2594040000000000001400000000000000000000000200000022a20000000000001400000000000000000000000200000005000000000000001c"], 0x158}, 0x40) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r6) (async) close(r0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000001240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, r3, 0x0) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x21, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) 3.360954539s ago: executing program 3 (id=2203): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_lsm={0x1d, 0x16, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200}, [@ldst={0x1, 0x0, 0x3, 0x6, 0x4, 0x30, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x94}, @call={0x85, 0x0, 0x0, 0x11}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa96e}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x5}, @jmp={0x5, 0x1, 0xc, 0x3, 0x0, 0xfffffffffffffff4, 0x8}]}, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000dc0), 0x0, 0x10, 0x7}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x1, 0x0, 0x2, 0x3}, 0x10}, 0x94) r2 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000800)={0x5, 0x0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x16, 0x711e, 0x2, 0x6, 0x20408, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000200)='syzkaller\x00', 0x9, 0xe2, &(0x7f0000000380)=""/226, 0x40f00, 0x15, '\x00', 0x0, @fallback=0x28, r1, 0x8, &(0x7f0000000500)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x3, 0x10001, 0x4}, 0x10, r3, 0xffffffffffffffff, 0x6, 0x0, &(0x7f00000009c0)=[{0x2, 0x1, 0xa, 0x9}, {0x5, 0x3, 0xa, 0x9}, {0x3, 0x2, 0x9, 0xa}, {0x4, 0x3, 0x10, 0xa}, {0x2, 0x3}, {0x3, 0x2, 0x0, 0x5}], 0x10, 0x8}, 0x94) sendmsg$sock(r2, &(0x7f00000005c0)={&(0x7f0000000300)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x80, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x600) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) 3.241433419s ago: executing program 4 (id=2204): socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000020000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='percpu_free_percpu\x00', r1, 0x0, 0x3}, 0x18) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) r5 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0xfe, 0x0, 0x3, 0x228a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffd}, 0x320, 0x0, 0x3, 0x6, 0x20000, 0x0, 0x400}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000017b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x740a4417, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7000000}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x1ff) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r9 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x10010, 0x2e, 0xfffffbff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) socket$kcm(0x23, 0x5, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r9}, 0x8) socket$kcm(0x23, 0x2, 0x0) r10 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r10, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c0000000000000000", @ANYRES64=r10], 0x48}, 0x0) 3.177490474s ago: executing program 3 (id=2206): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1400000021000b12d25a805bb98222f90424", 0x12}], 0x1}, 0x0) 3.015420767s ago: executing program 3 (id=2208): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_lsm={0x1d, 0x16, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200}, [@ldst={0x1, 0x0, 0x3, 0x6, 0x4, 0x30, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x94}, @call={0x85, 0x0, 0x0, 0x11}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa96e}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x5}, @jmp={0x5, 0x1, 0xc, 0x3, 0x0, 0xfffffffffffffff4, 0x8}]}, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000dc0), 0x0, 0x10, 0x7}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x1, 0x0, 0x2, 0x3}, 0x10}, 0x94) r2 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000800)={0x5, 0x0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x16, 0x711e, 0x2, 0x6, 0x20408, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000200)='syzkaller\x00', 0x9, 0xe2, &(0x7f0000000380)=""/226, 0x40f00, 0x15, '\x00', 0x0, @fallback=0x28, r1, 0x8, &(0x7f0000000500)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x3, 0x10001, 0x4}, 0x10, r3, 0xffffffffffffffff, 0x6, 0x0, &(0x7f00000009c0)=[{0x2, 0x1, 0xa, 0x9}, {0x5, 0x3, 0xa, 0x9}, {0x3, 0x2, 0x9, 0xa}, {0x4, 0x3, 0x10, 0xa}, {0x2, 0x3}, {0x3, 0x2, 0x0, 0x5}], 0x10, 0x8}, 0x94) sendmsg$sock(r2, &(0x7f00000005c0)={&(0x7f0000000300)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x80, 0x0}, 0x0) (fail_nth: 2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x600) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) 2.440423853s ago: executing program 3 (id=2211): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x6, 0x0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x5460, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f00800", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x30) 2.391161857s ago: executing program 1 (id=2212): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a867e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c27578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$unix(r0, 0x0, 0x20000) 2.150798056s ago: executing program 0 (id=2215): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x12, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x12, 0x7, 0x5, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x2, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x2a}, @dev={0xac, 0x14, 0x14, 0x15}}}}], 0x20}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="fbffffff000000000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="01000000050000000200000000000000000000000000000000000000b95ef2842a13d1aeb0d9a8ca46c732a221c056e8b5c27d4a597456c75881c5cd7612fdc67694bbdae15ab8c879022d914024a3145ae88ef78d12d5f2585ca953fd4c11d13f0bf480d09f6b78a32c90419d491abd8249130e363e300000010000000000de90064c092225d26f763bbe232e6ed83997c6e02ca3d7049487787c6cb7012405be0c03e2a4d6078abece3cc6447703cfc829814f53fdd89f8ee641ebda10ad4096"], 0x50) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) close(r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r5, r7, 0x4, r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x2, 0x9, 0xcd2e701d, 0x4c008, 0x1, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x3, 0x3, 0x0, @value=r5}, 0x50) close(0xffffffffffffffff) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a00000004000000e27f000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r9, &(0x7f0000000a40), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000f40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad1f50ad32d3fd25dfd73a015e0ca6a0f68a7d007f15451dfb265a0e3ccae669e173a64bc1cfd5587d452d6087cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661ca3dbe74bd09de8793dbcceef76b2e5feecf9c66c54c3b3ffe1b4ce25d7c983c044c06cd0a48dfe3e26e7a23129d6606fd28a69989d552af6d9a9df2c3af36e0360050011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a13ed38ae82f87925bfacba83109753f541cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b70a7000000e7ffffff00000000d7900aa6e47a350ab40c6d7b98ef7042ad2a92895614cd50cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6674c06054002a38e1e389f640a0b8b0000000000a835ad0f61ba73c31b05c00fba8a4aee676d7c45bb29671a68ee2e60da7b01a2e5785a238afa4aba70c07fcd95bf8b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf334178b04963d67dd5a5707e618a1ef9057fec00f9e930219fa8d30e716de8cde9c60f0000000c3b64d10f0939b42b788daa7075fa542242b00f6bf9b64ad460e386b6f388351fbdacb3ad074574ee9d450f9dcfaef1be95ff3c449e6482e4403174618c20e887d6f320616d31d78a0e5421d5742cc52509fd90cf2df6d1404f6b8f810d7b94d421971b77a3270153a0d57cccfe27872f3e8e44480f93c33421986a7737842627301fb2fee8cabab074adaa2024ff57e609ba2f4d83b3bbf52309484532416f48f43b31395c6f45fee8f1682a4e8d5e3b9ae634ed24fb0e8b5fadaf5cb7eea62b7bb4264e72950c9dc791d771acc24c08cdb6ef24c813d082a86d9b879bdf5aefdfd905a2bd4ea36b0b54915a68fe149db154a8340017e1855511e9c0fe62d0cf558669839e4158cb36d29e2451840b7ddeceaf897b15896d096335e33e0b83523187ffd5e1b46ae9600b7ca04b14c914c9f12247f529e47d4f3c0a75ef4aaa2d8b75440f5812cf73c95e519a973523207c8c9d26aebcae1ca90000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) unlink(&(0x7f0000000000)='./file0\x00') perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2.137179347s ago: executing program 4 (id=2216): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r1, 0x400454cd, 0x336) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000300)={'geneve0\x00', 0x600}) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x160, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0xc001, 0x0, 0x8, 0x0, 0xfffffffffffffffc, 0x8}, 0x0, 0xf, 0xffffffffffffffff, 0x2) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="618054cf78e1800a3340fccdd63be2897773b059bcd5aea43457270303592253e08061e0674d74bb6ff3058d213d54d2fc177bad4f5d4d96e175be99e5de96e7474f8daae46a1cc45472c57feb63f606bc89a6f40bf2318fd3f847d90a1f1ad057c71a4621e3a9ed4632b1bdc77cac333f94af12b02c8765045c", 0x7a}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x100000000002, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="043900"], 0x33fe0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) write$cgroup_pid(r5, &(0x7f00000005c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x14, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xa6b2}, 0x9000, 0x0, 0x2, 0x4, 0x1000000, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r1) 2.128643088s ago: executing program 1 (id=2217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r1, 0x400454cd, 0x336) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000300)={'geneve0\x00', 0x600}) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x80000000, &(0x7f0000000980)="c4e5a959fe892be778e4af5d641be3d2c217a751a7f55d31c31dddcf9b7f70eb80c06554cbe3194c0284bf69f1516ec1d056c6254c10994ff161ed23d4dfcd6e8c9fb4d092efbda14f059df7a373cfa02baa73ba47263c5c5482049bd7e32bb33d06c74a49a2ac982ff14bdc8a49908fead69581fa139f27e04307ff071d25377297cf9d46ef8bdc9b0fa70a2ad01f1ec4616775ab2582ecf60210b350601514905a7149f6c9b02d2515c986a6ed647ff0c1c6a0376c33c2b25f4e271c2556c8fd388b273f674dd0c3fda7b117d0132242387c3c0cbc65248ce7876bb78d8f45b036df485dbf2e526938259850459c04b65e99246ca2afecc5b0c70dfe77a1975fdb9db2f705d96b5e849f4ec9f2b3606c6f469eccd825df541a0c3dd85d1cd7f0f275d679e1960e74fcf16d3b85ab60bfb950027cb7bfe475e4a2c742ac9527d262b88a24042336b60e5abf1d47cdee67a331c0e2c3f262a652249f6b4d669585ca72e8b83db9a982d047eaed73ef694c170439bcfb8ce44041b3be8202d453feb1bbb9abf439a74d6a99318dd4b1395f6427e050e94d76e9dc310d24ed31985841a9edcc043ca59f78e2f4deec3464294dbda1b64e46485b69afafe1aa50ff7c1fdd820e3258289cfde05c0ecb8d6fb3898afd91a2b9062a048e296072583d049ad375323ec48512516d4f5ce90d83b536cc603e9934f64e9d8500b96ee50f7e45f70812c15218521404ec25761375edff191472705d5f5e4477ebe7cdf21d6dbb6fa452dba637022982372bc2a6ff54def8f489b26de9ed3559ce91708c71e52236ba90c190c6d2991ba27afabf849fd7b5b1f6b8c3a839d56db8d6191f91d411fd2f4a0eab6a4656af88ba4e1f28ac2c1b19de156e7dc65fa0e3695e5e702ab26ccf1cd6478f68ffaba510f0c4a5aac4d607c944432a093b8d6d105a433dd91435b9cf0e8a9c7c86d3d481f38d5d42cbfbf11409609127a313bad709a0716bf098064363e7763aa74639f971393bd511a0d896ad5a386ba3fde8793403ff078227d1ec1c7f5516d20eb8f97f901d9f6c107f9ab42abb872304bdaf72fe9ede2780c22aefc7590b17232bed1eedd5d145e62f7545830477a03c21127c3e10ae7827597cbf41215d05f68ebbfaef3456eaf77b60b800321e89953ac4bb075736332655b4b705d72112ceaa132e7443cf7f47a25c3fae567799a619191b911f5f3d8aacb6d024212cd82337aa8a7a8b011aafc9086fee0085539488e5d725101b220395fb7523e379b8cddb6914bf1d297bb5e987dcbabd730bc6ed51a5179607624ffa0ced7bfa3963fbabb4de49aae10ad4177dc17031eea1263f21e7881327b5b4b32ecdb3e2626f8d012dc773ed896f295501d04827b7ed65c93ccdc437ec90cb4cccd054a7a205d58abd2b6e62642e6378ba3993683147df33a52b17e95e4959dc83d759c9336a17e3aae3d727eb9bc83611713722c3bbc704d63e1d69f4aec8f461cd6e200258fc4aeca0ecf19a3975b9fb36c66b25eb2f56011438f4cf2a5f29ba253e12838bd9f124d23ebd8e039364efe8ad5474a7128718f83df388c7875964ae57006a7c86cc8f2d917f1f7951fc1d14308266a4c30a049da8e84670bf02a5aea7f02a088abf4a8cd77aee13178c48685e1018d3865f4cf686a440603545aa17a38c568fad41e8112ab76ebc1446b3cf95b4cfa71bd2c4d3701ebbde3a1e26292cb6879e29e18d4110354043cf93c99d4a79420352f75f8b389e9ff53f462b495fb026639276ba01736ffcc398959110fb5de33072e5e50068477699e8328645d610ef051b602632895ab45a3a6ee6e468816d4724efed4a55421883a20b99f8e771ca0af4c1750f79f37b95875ea2bb06dac4ff41767fef9ff374c10a62d67a8bdc3d33a329d69231d861e0a9fadde4e0c5358848886423701ce40ec5be53b642b96c98d300a605ce0e396ef6fc9fe8b2cfa0a69d9848ce3d3ff747d2cebc5e358e885c327f05f4d2ffd23dec1fbaa5e1c57abf424f7a51e30ead1569cb434e408023e67d998dc139562387039284596d1b25fda9c65c793189f4f869ca17d7f1c28df2dec65c3f5e71396ba8428e1429b1091b270fb8b3522b5743d8ca08ed80c4320fdfbc0c1ea9621954dfc623e506d3bbed50e41bd1987ad14cbea4820c0a34c1dedb27c42fab4a514bb166f4f676c5b116443d48af46b00f690e693b99c6caf0fb4852b66137deb142d9a4dbe11f9e5e30d3318e3a47668347e1542ef762a9df998afea1ed520422d73ac49c69e3bd241d664855ee7b8f21babd2dd137ae142f4c6bf36b3b4a5cb8ac44d62f8bd90574339ca93ec36fc2bd016357ca0e09b5289cf1893935c0d7786d01cd0482ca5a79b7b334933ee9a2293266a645f8b7645053b16621b90f7111417959b3f1a2b427356e9592cbb5c21dabe16740dc59d897acc938f3eef8500346f587de475a576650fde3630527a5e1f86d4df0350454ba94db719c902e403f6fcf213366fd9898b86e2bb292c3eac24f9a8adec7725c63692e38f546890637e593717418c0d9dbdcb0a0fb344d66288b69d78f20adfe64daf7d27e58e586f3defcd706861308cd42f3a8deefffd7d4f08804ed3b924602f1a68d3202a944291cdc72642a5545d9527f6ffe0a35c99d0b0ac00a7379d3c2407e8d7bde4930ea5b29a3113ab81c5b543c583dc17d63e05ab8dece16fca31069f412b9b8b6eb5745600512d1e8cdb469137079d929359983d0d7488f5f088e1de089c6c4164a82d22c448a25beedec99db158992d5f37fd7ffcd10f5aa0f4cfb35149b60daee3013a88050f3acf97f34451207312df098d514b1e514d5e2b499d003d83504f9e2ce1827f2d1fa7f13fce355c37f9fdb55a83a126f73e7207f1551fcedece8e771c5e11ee34be298590c308bb226cf7effa1b0aa4965da4eccbaa20cdf5aa587d1d0cef7ecb9d2b7198be9b086d0843dc9cca805c4864b4518acfeffc78751192bb3b7ace9f40f4e3352d5c25fcb7d7b91e7c15f7e6f5e1623b57a439fa95487144e71feb781382be9077dc63dc18e5899f8c4643cd705a918a4a7f2b9759f2fa5b9fe94c0eeb55bd3e39b834d011f3a3339998ffc757ac8673f67b45eccdd4b0dd4486d402b4c8325f5663578415437053f00fe7c3939ee3a588c4750d4ee8da0c4ae2e59e9fb1f43e9a474d80b2297f0946b738e59a8d49670be7e47c809a65d99a31833af6e4f9967cd6341c1d72e2c49745d20aa364bd2c463050ed2f1b01dcf02ed0412280e56eeabe3c7a2ae0593522d22fb3c24794423452479ab77d2c5f4288ff1a3bd419ec99e051206ff877f3f1dbf2df10d8c4bf4fc8540b411c3ac99eddb6cc21fe3fd87d8b1928b721468c53d95735c5072b7628bcb08e9d2b461245935773f493af2d4557578ec107d137e26011f657f9c05e0dafc1e2248813796cfcaeb4fe0d2eb0b4d85e2b94c741f2ebdecd05334b74d7971ce86f74548570fabfdb951bb531ae7af66be93967b56189552e0bafe0fc3a382e214c1713e932ee211383555954376b1ca08ce38cee859a37d45568d0b8937fb5e2d8ef77add50997d4477275d3da9e1385771fda32a2e70eba893b7fc6c7af19328580c5900598eff83de9723e4aed9ed97e4c671881d9d12e3af21740a8b024744a291df193bd37e15a736a3ae89354c55a79b0fa8d9a60da3c78572da6fcc763b1700e15598661091277020882f4ac005e090676ce6ac5c4f53e39ef94f83c69d7b72e3d94ae420e155f4aa7ee8ee3ef1d867d15612cea29b528d15f495e034d01d73e24ee17612bbf11c9827ef9060cda360114de09c94513694f97fea0b150d33d27828d7daa7e0dfa1680a233bd1990373d630186e2a6d1767df08942b4e0f131aabc9c8164dd318e5e716406ac0a3a2190b3658931fe93ede6d3aea696b3fa8fddd88e7ed636bfab161ef24bb495f4cc82ab376df96f3be3f8f9ca55d400434bc0a77729bb116f416ddf1d3b069d57c90129900570a39bdcdd27c71f52ac186726736364cf6fbdecf645eae00da52663a827384ae61d7be7bcc146c077d145f4ef9a94bf2dabd12161fdaa8d20e3813452c2bcaf587bac77242e5ec355993f790ad366ed4b06f7762398ca4334b694b810635076ce05d05cf39cec30c68e969aa2cc67ea2c04658942cdf939bf33bcfa5f3216ca0a304c87d688d2475d115de660cab3bbc0856701a9280589c9da07f473b3e656c4e03315159cb96ee44ba6bb8d4fa894ee66ab6525ab35e0aa33a20902e29f0ca36b252b4ebc8f13d89e2eb2451a206237f6ec910ca7988704b248b1c1d0c45d3beb6a0b2ffdb60f24240a494203a5f7499e8af125a764b0b1cd49baf13220cc47b6c1504da8174b5c42b47bb23407c1290408e5210492d3bfef8fa555ac0d9b3914c89ea589c5a0d2d694ae117d20d02f3d8ff1cb976f5a45eee110278271a369b6d750f839acb3cfa66456d4686b9ca796652eb57f0bed9cc3d5a6918cbd380b75f90ec6cc58feb77edfa2a9a410885828793a87dc2030f6210857953066c8c4687cbcb6f9bac0ad60a3bb1fb8b887c32cb74e90698d7e47bb1a645d2f357980b5c3a0e13e2041e39181362218522864da4f8dccf42bad4e01c223d0ee7c92ce939f7cc47ef9492dac1ae03de0fa0038527cfebdcdb59520a2c43fd72313e9b74b503c390b5849d7d7ff70345f4e7ecb49d5808bd2217328c45b37bc538a98ae1b14f8e1beea1991b2fef4679dc3959989351fd1a1beb3459674552f27cd49bfbce1efc8dfbb2987ba7f5d7dd41ae3c1f8cfeead97d58a36c793275948db2a3f6b1188eb85ed436a993ab1c7aebc2cb4d8f835301574b351277f6570647dec40336332567c8e6e99b53b0c19f4f17c97c962ef44a1bc6693ede277d9e1ff06a5d400360bce9ca8124c15f7f229ef9464a589eeba5176ebb42ea4f68dcc5811037fa3eb7cff2cd31787342537c41c7070782be749bb8154f878599199829f202e3537331aa934e22be49c74f038d898a7242cd24abda8b87cea966a2244ab043074ea5387901512b67e8924fa8aded46f2e4d09543e851223dfdc73241aa6035f0e5eeb2d453105becf7fd88764f8790f49803aa4279f845d43cbf1d706aa6700ceb483dc50b587417458b96f4f99f5309c4dfe875156bfebd06c412e322156cf3bf3efdc63a709ae4110e52aff4014b8ba5c37204046af00a4442bf3f87b03e3762935dd4750c0f6059321a9782596f049289446e9504e5e195a80a827803a81605808790a428f3d389bf3e4fab21e3435c5cbcd6b28e297036c4d7a63cd494b3c067228570546821875795ef9690fa7689e595a88ecb9a6ed2dc5b1f50c17f66976e2b3a2aa48d3c82b0345ba1af748a77fbf0f4aea2b03343c21a557019cf123e0d3cc058e46192095b612eadc7e20f7c37abd051e6cddc0d2e65420045f9a22cf3e47747078b3b5160e9b86431aed9e8c1bef48e27f1770e340c6f407b71c9eb644a9ad60cd306833f9e2c106d2c98dbd725191e5e62a05a42fdc7329414090d88709ef9b3e87eb40a0906cb0fc90a4cc7fb20dd6cfcdf988cd48a597ee3fcdb34df61a69e8620f98bbc9c79e148d2895fae78c0aa6577a5ac24976b1d543e228e163f202d7f8cd76d854c31b5223514f05a04e947956d05fe54cc024f18955cea151babe838bc1c533ec36908222437136979d1a666df18de5ddccd5a9431aaae4d5d8e7767ed1f947baa361a3d16958cb8470094e26b64ff4e53", 0x1000, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000240)="0cb58dd7b8dabe2fc77292c2") perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x160, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0xc001, 0x0, 0x8, 0x0, 0xfffffffffffffffc, 0x1000008}, r5, 0xf, 0xffffffffffffffff, 0x2) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="618054cf78e1800a3340fccdd63be2897773b059bcd5aea43457270303592253e08061e0674d74bb6ff3058d213d54d2fc177bad4f5d4d96e175be99e5de96e7474f8daae46a1cc45472c57feb63f606bc89a6f40bf2318fd3f847d90a1f1ad057c71a4621e3a9ed4632b1bdc77cac333f94af12b02c8765045c", 0x7a}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x100000000002, 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="043900"], 0x33fe0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) write$cgroup_pid(r4, &(0x7f00000005c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x14, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xa}, 0x9000, 0x0, 0x2, 0x4, 0x1000000, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r1) 1.991951899s ago: executing program 2 (id=2218): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1400000021000b12d25a805bb98222f90424", 0x12}], 0x1}, 0x0) 1.853382101s ago: executing program 2 (id=2219): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121700005f3ecf6e1a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180600000000000000000000000000149500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80040001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r2, 0x4) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=r3], 0x50) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5281}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x6, 0xd, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0xd3, 0x6, 0x9, 0x0, 0x0, 0x18000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x8}, 0x440, 0xc8, 0x3, 0x5, 0x0, 0x0, 0xfffb, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00'}, 0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02083300db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) 1.711724322s ago: executing program 0 (id=2220): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x29, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@fallback=r4, 0x1e, 0x0, 0x1, &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0]}, 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040015000400000001df000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) close(r0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x10006}]}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x38, 0xd2, &(0x7f00000001c0)="b300bd4fd26349949cca55ef244901505cbc35c84b48dbe7f25ea2a2e333e4e1bcc82b6da3bdc20812e96dbab189c019ef57b38842425434", &(0x7f00000002c0)=""/210, 0x2, 0x0, 0x8b, 0x59, &(0x7f0000000500)="cb5bf5248262a48a60834d6151f3405c8708084f389aded34d8ebea2f4cc49aa6fd4b9cee06155cdb4240341a0dc575ce14b2752ae5dcab653a83fb661a9578a505e0297f3b38da25821b139818e5b5562c6907c459f51a72120a40623f99ade536f5514d93a21cef0997c83e6523d7cf489884199298b7e64ff39ec6171b50495248a86cb47e0ef28c783", &(0x7f00000005c0)="449cc2f66bbe4b34d8cd6af030ec88e3b2f97d1ab30e435a64c84702c289d5e507665b49b60d2e2f2e7a3aad79ed4823ecdec9bf65021f94e15aa7c8af17561e70cc5f13ad3e626a0da82584bde5fd3be999b12c08b1a0ccff", 0x0, 0x0, 0x6}, 0x50) r7 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000200)=r1, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90224fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0xc0189436, &(0x7f0000000000)={'wlan1\x00', @link_local}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000000c0)=r8, 0x4) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r9) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110c23003f) write$cgroup_devices(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="80"], 0xa) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.36232186s ago: executing program 2 (id=2221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r1, 0x400454cd, 0x336) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000300)={'geneve0\x00', 0x600}) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x160, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0xc001, 0x0, 0x8, 0x0, 0xfffffffffffffffc, 0x8}, 0x0, 0xf, 0xffffffffffffffff, 0x2) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="618054cf78e1800a3340fccdd63be2897773b059bcd5aea43457270303592253e08061e0674d74bb6ff3058d213d54d2fc177bad4f5d4d96e175be99e5de96e7474f8daae46a1cc45472c57feb63f606bc89a6f40bf2318fd3f847d90a1f1ad057c71a4621e3a9ed4632b1bdc77cac333f94af12b02c8765045c", 0x7a}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x100000000002, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="043900"], 0x33fe0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (fail_nth: 2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) write$cgroup_pid(r5, &(0x7f00000005c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x14, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xa6b2}, 0x9000, 0x0, 0x2, 0x4, 0x1000000, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r1) 1.060272044s ago: executing program 3 (id=2222): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000800000000000003000000850000002c00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x300, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) perf_event_open(&(0x7f0000001dc0)={0x5, 0x80, 0x8, 0x0, 0x6, 0xc0, 0x0, 0x1000005, 0x80260, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf6f, 0x2}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffffffffeffff, r1, 0x2) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x10000, 0x1, 0x0, 0x0, 0x0, 0x405}, 0x0, 0x1, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0500000003f01f00680000007f00000001000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES8=r2, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x7, r7}, 0x38) r8 = openat$cgroup_subtree(r6, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000001d80)=0x4) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x89e0, &(0x7f0000000100)={r11, r11}) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x0, 0x81, 0x0, 0x20, 0x0, 0x202, 0x22400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x1, 0x0, 0xffffffff, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(r10, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="2d70696473206aa4"], 0x6) 1.014768808s ago: executing program 1 (id=2223): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00"/12], 0x48) socket$kcm(0xa, 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0), 0x8) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffd46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000008c50000000f00000085000000ad00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 1.010239749s ago: executing program 4 (id=2224): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x5}, 0x80, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="010000004000000006000000"], 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x88, 0x0, 0x0) 902.693227ms ago: executing program 0 (id=2225): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) socket$kcm(0x2, 0x1, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0xc0fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xfffffffd, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) 804.935665ms ago: executing program 3 (id=2226): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3231}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92344f242b416ae9eeefc0e9c60ebab1b4ddffffff7f82dc2b938189a7ca02f732e4c2eab72bf40c0682fd0a0c4ac106b29e220dc28d0072599456d4c4e6f3fe684ab8373bb4df9d72876ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb39df9858037458a4ca037604007600b6be484e4c9517af216bd8ed42f7dd5adb8e49f4a94608c9a20819e02fc22e6be45574d4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9dfc1adafd1e5a3e7f2e898961cb43e438c4e41ae43ea118e14ffffffffe4b8a80366ce5401ec61921a1b529cc8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa228504e4afd8c1cc3eb215ba22f43115f4d39dc7beedb130d9f2be90133a4500000058b8c9370634060105baa664953514605fba3973aa021945b985a8a66e0200000057033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bc0400001000000000ff8d01006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11edb6b3cc425fe203d2f2655a76865c2c34e2470fcfb1248c0add5431a7fbcb0ef4f66a09af93a09fab1daae4b518d7a5d95a017864010067d6bab101446ebfe3fdeed7ee7bb0749cacf56cf27409c60fca2e0004000000000000a9cb6f4a78444986f9b1ab61f9dab53038010000004abbfc59d6d1b18fe380df4bf024f120bd755d82033f2fb7d8fc9e0de834f7646c8dd27da1297d0c77b294e097e293db7f002c0024ab2fb4d32972cba6f49051cec1ff6f16231bbb90a2d201a500000000000000007700b06fa191ebd3a0c2ef0058ffebd7cc4cf80f74a7cdac01d998c24f34a5ba9a4a2039d0416e3f8107671141ffffffe0c7d8e94a27a06a4e3d9acee835fd0571e5bbb3e6d2b5eba505000000968983811f832dc5390f83e817c64ac4f1f0d0504255c22ee8674053d0e160e5255366139bbe5863e23c3dd42d21f542816edf56a93d0a7e6f08f9ffffff64875fea6ff57ba6ae25c5e8ca4f78d5a01308243b08f1caa46be5244d64f8e875857f083144c642f71cdc8e5634c1360c056430fe77ee7ed7ac1f9743786b2fb8e0fcfcc3d36c93230b7b059bc295aa0e38ff07edc3492b96e73d2060acfd8145e4a5851bc4d6fdc5ad939de5bfce461b42acd7da8842572825d1587795f3879baa88bd194d48e50c84892c97c800d156b059a718f6b10274b077a710f27ab8ee953de70ea860b74a0f3c3dc11177b11cc2e62a95f1ecf607a8dc38e525f415a1bd46b38845ebca04061bacbf627f7975fe599678fee48f83b5989543729e3600000000bc86cd51704f309130f534741377ea7b7bea3c46c0c4c4b7c27c5d057d95ac85a41cdcee8e6fa31f7d2137ed1fb4b21c13b9a2c5e3f7c9ef9e45a35adbf0b9312be929863f000000000000004a82bc080de1f87808d0711dd76f2977ca7f2684bfa5c14a0cd6f1f561e34e4e8e51e81d4a355a7d00d917c16a2bb0cfb284fcfde9015769b9ee2c8ff10e934847604d930f62924d0562ce17f6dadf5053ed8f33092a41bb46e10000000000000008c6d1f62da58c0002ea00000000009aa38a05e70591d5cdab1c488ef3c1984c7c0a566cfc2a080000009ec206a54fb49056a555414178ef00d8b8f3c59f010a5e83415994efcc6ec4b3c275cd6b1b5ff82ef7d7abb1d218e7a1d0afa285706841aac9ccc89df41c39dd58dd70569dde45f8adeaad7d3328fbb6e279f745d2872f0208635e465ca443a6a64c7803760880af23fb3f430a5d11fffc96dd13b951642f1433f65b4e170a62a5f7b7d0f9d5cef0d172a9c43d4aee0001f7a343899434594cc23e1c864164e130754b337e560f285dc670a31241bf657babf0615b85dc200a10294b7d5885b43ac62fc7f97a85586168483427072a535f2c7481ec261c00f725de74e48d9a86f7d4a5d28da3f099ca3e6472b9d7c86d961f525f799b4517141f018af0673b8296f867eca1ec07be11bc497a6f7d2b752bcf77c2908b64630ed5a0c2261bc2d5de6ee174534b8dfc0432ab6bbcf296d36807544aa7c3d3301fe227b713a371414c98695e559f9cbf6b046184064a5f24a4cc6f41f21fc24a3ad7d20a89e00a9dc99a40f890869d35fba3ce6f297661d3f8ba21c65badf55d1859581f9e7ef3e2693b46a8fc85be061ce79aa2832c04dc04de8b6536123b24be2ef80eb06b2db900fb30596c1574bda31f81d61ccfd58080d2330b9c7b87b5d17d48c32daffead3414b91603e250eeedc7d601000000037426f643797be3e93da96b5643d3feed0b7c885d06006b830d7cbf3152f27522f5142dcc84a9e48a07518f0142167abf5d6685d09945cbc778bcc3e7dcfaee5d9c1689a3bafc0d3b51b5a3bfd6007954c36d532960964183842601e5364ecb6ad9168040388c7640bfa2f88643de7eebf4da8d1c3e76daace5217761d933d06bbe9609fcf5971aa1e77c3123910e63daaadd8878ad468eabaf78a96012a4ada1a9cd217fb2a0da2d521454ea9e8fcd3b5badfd6f00003a73345b841d04a02bf441955b932c59608a555bc44873272812e0fb874618a0b56b4cf44990f60000000000000000000000b20000da0ca67905e877893646d185a75582f866785af6b0149e336c31fb177e3e85f4c60cbbde4ce6ea73a95f434328620fa493937386ad2e2a0d60eb815aa05c33e02c32276dab36d14c63af66a31409ab2a403ec387a4e07bd745efa2835a8c932f22aa6da40af9bcdf808b916bc8deb37d5b8c422b65c42d17e61751c561ce775a31b52703d398552694cfbb7d2b3791b030093b321d9f16b2f06676cf94d75cbba6491ae0b5a16ce92320321314d8d2e88d1cd7e7b1216bdaecba309a38e107103e649d46958cc6ba2d660dd41b78d832beb7206ae01508377273ea96e40760410aeed1866971e04f578e9d856d01000000045aea928f5f669be0636dc3f34f90c34531735f271527412d1ae755a9243da523d713071f9370b509a34eeb46415b2f0d271a7072cbd17e293f20132e6c15756e92776c6a0d7c3a9f512ce17edf3f1ea190853bbf93e220a6ce968b79d504c057000e7d8f8249a8158e68a90bbea8bfab2bd3045b9c790984c6fb65fd7887bd8bfcbe663df6b7770000f58fbad41e6eee5c9595950c4172b9c925403b2f99bbf3cb1981bb0d14bded8eae35e08278020a1ec7f508628056fd3d408a02a1cf8594bcbb21a88f477673442804f714212dedd245b9f563b5352fe460a30489b1b6a6d37daead86151492f7fd4b5c64007b68a1b04027eac124478a2ef7f59fe472795785de83578cb96334e0f7c1370dc397d3aa42d937b5718b7610cdcdfe104db7801ec74980b8b111a2748321f81512e4204eb2b024b9fc9e0f257f8c6037b93b2caa236d4354b32434d5a6b01e000000000000000000000087b97a200609c77e0000000000000000d3a54ccd6e13a966801e9341260d6cbce5fe03999214462cbaa297448677ab659102d0f430fbeae119a7ef2e962d2829d4dd2201c4b30d491269594c88252fbd09aced90609851bd9e5c307e7e0d39e73579c1f3563eff1a6237d3699f61acdc8e36010d76093ddd227df1c4181b0a0c4543b4249e9ff2f5e8b5e0ba2048d542de40f643fda4036124b8feb2dd45d0fa52300518c8052cc09ad73f89734fce82cc627356aa2c651ed2644f34cfb832e8b29cf29e895e43b473ddb9a43421b4b25f8bbce8e2d7cb8547d156d5972021ae4c9e30f85413276ddebde55999d2ec3c524632b74d703147ba09e0dcb26c4b89636d28428b67e955f53bfd0c9eebf33a260a9b26477267"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000b80)}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000000b0000000100000000020000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r3], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x8, 0x0, r3, 0x1, '\x00', r5, r3, 0x5, 0x4, 0x3}, 0xfffffffffffffe13) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f0000000340)=r8, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@generic={&(0x7f00000007c0)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)='%pB \x00'}, 0x20) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0xffffffffffffffff, 0x8}, 0xc) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001700)=@o_path={&(0x7f0000000940)='./file0\x00', 0x0, 0x18, r1}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000017c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001740), &(0x7f0000001780)='%-5lx \x00'}, 0x20) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xe, 0x4, 0x8, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="eaffffff03000000430000000a004f0000000000", @ANYRES32=r0, @ANYBLOB="f3ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000020000000400"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x1c, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xff}, {}, {}, [@map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0xb}, @ringbuf_query, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='syzkaller\x00', 0xc04b, 0x7b, &(0x7f00000006c0)=""/123, 0x40f00, 0x11, '\x00', r5, 0x0, r8, 0x8, &(0x7f0000000740)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x2, 0x4, 0x1, 0x200040}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001880)=[0xffffffffffffffff, r9, r10, r11, r12, r13, 0xffffffffffffffff, r14, 0x1, r15], &(0x7f00000018c0)=[{0x3, 0x3, 0x0, 0xb}, {0x4, 0x4, 0x8, 0x2}, {0x1, 0x2, 0x3, 0x7}], 0x10, 0x4}, 0x94) 804.634005ms ago: executing program 2 (id=2227): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$unix(r0, 0x0, 0x20000) 702.181013ms ago: executing program 4 (id=2228): r0 = socket$kcm(0x23, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000080000000000000000000000850000002a000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x609, 0xe, 0x0, &(0x7f0000000140)="dd8000ff600000005d8ec6f10000", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1f) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000640)) (fail_nth: 2) r2 = socket$kcm(0x2, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001700)={&(0x7f0000001300)=@nl=@unspec, 0x80, 0x0}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x71, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) close(0x3) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x541b, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b400000000000000791197000000000062000000000000009500000000000000c52c5bdc82df1c5776e846c6ef785ec24c54f042c122a4410ef01f6cd8c6cd4ba0ea244cae16ff5c5a6b98eb625c65d1a931d3349d3e82a30bbe903ecf949c023cd72e1e3cc029fe850cdae4abde39078b6445a562b1938a23fca4450ecbdcefbe4fda74d18aa5caa4e75ce59b33d0b72cbff0c313"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x4e, 0x0, 0xffffffffffffffff, 0x3000000}, 0x48) recvmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@ethernet={0x0, @random}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/3, 0x3}, {&(0x7f0000000240)=""/34, 0x22}, {&(0x7f0000000280)=""/68, 0x44}, {&(0x7f0000000300)=""/141, 0x8d}], 0x4, &(0x7f0000000440)=""/203, 0xcb}, 0x1) 620.43348ms ago: executing program 0 (id=2229): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1400000021000b12d25a805bb98222f90424fc", 0x13}], 0x1}, 0x0) 598.306392ms ago: executing program 1 (id=2230): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = getpid() r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000016000000b40000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x61, 0x0, 0x0, 0x64}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x5}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x61, 0x0, 0x0, 0x64}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x5}, 0x80) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x7ffffc, 0x0, 0x0, 0x0, 0x40}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x2, 0x0, r5, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x2, 0x0, r5, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r5, 0x58, &(0x7f0000000600)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r5, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001700), 0x4) (async) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001700), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=@base={0x17, 0xb67, 0x0, 0x6, 0x4, r5, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=@base={0x17, 0xb67, 0x0, 0x6, 0x4, r5, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@bloom_filter={0x1e, 0x5, 0x721, 0x8, 0x22012, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xb}, 0x50) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@bloom_filter={0x1e, 0x5, 0x721, 0x8, 0x22012, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xb}, 0x50) r12 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x89e2, &(0x7f0000000140)) ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x89e2, &(0x7f0000000b80)) ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x89e2, &(0x7f0000000080)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a04, 0x2, @perf_bp={0x0}, 0x1a08, 0x100000000000002, 0x0, 0x0, 0x0, 0xa, 0x0, 0xfe, 0x6, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x19, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9227}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x1000, &(0x7f0000000700)=""/4096, 0x41100, 0x2, '\x00', r8, 0x25, r9, 0x8, &(0x7f0000001740)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000001780)={0x0, 0x2, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r5, r10, r11, r5], 0x0, 0x10, 0x8000}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000200)=0x7fff) 585.051603ms ago: executing program 2 (id=2231): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121700005f3ecf6e1a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180600000000000000000000000000149500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80040001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r2, 0x4) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=r3], 0x50) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5281}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x6, 0xd, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0xd3, 0x6, 0x9, 0x0, 0x0, 0x18000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x8}, 0x440, 0xc8, 0x3, 0x5, 0x0, 0x0, 0xfffb, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00'}, 0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02083300db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) 339.757532ms ago: executing program 0 (id=2232): r0 = socket$kcm(0x23, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000080000000000000000000000850000002a000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0xffffff28}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89fb, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x609, 0xe, 0x0, &(0x7f0000000140)="dd8000ff600000005d8ec6f10000", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1f) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000640)) r3 = socket$kcm(0x2, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000001700)={&(0x7f0000001300)=@nl=@unspec, 0x80, 0x0}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r4, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) r6 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x71, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) close(0x3) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x541b, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b400000000000000791197000000000062000000000000009500000000000000c52c5bdc82df1c5776e846c6ef785ec24c54f042c122a4410ef01f6cd8c6cd4ba0ea244cae16ff5c5a6b98eb625c65d1a931d3349d3e82a30bbe903ecf949c023cd72e1e3cc029fe850cdae4abde39078b6445a562b1938a23fca4450ecbdcefbe4fda74d18aa5caa4e75ce59b33d0b72cbff0c313"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) recvmsg$kcm(r3, &(0x7f0000000600)={&(0x7f0000000100)=@ethernet={0x0, @random}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/3, 0x3}, {&(0x7f0000000240)=""/34, 0x22}, {&(0x7f0000000280)=""/68, 0x44}, {&(0x7f0000000300)=""/141, 0x8d}], 0x4, &(0x7f0000000440)=""/203, 0xcb}, 0x1) 141.759368ms ago: executing program 1 (id=2233): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 141.067468ms ago: executing program 2 (id=2234): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="140000004f007f049e", 0x9}, {&(0x7f00000001c0)="78cafc0a7d0a08b40178f8", 0xb}], 0x2}, 0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x6, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r3 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x88541, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4408, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11300, 0xf251, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8940, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00"/13], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x15, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000095000000000000f4ff00000088d1d8d18db2fc0600f366a5d37c3c6e7b9476d0b719e8e53e0b3bbb41ec46b01a408119eaa10f57a0c60d62e1f05488c79b0af7a9a82d02cce520012db6463a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0), 0x10}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r9}, 0x10) ioctl$TUNATTACHFILTER(r4, 0x401054d5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)=@hci={0x1f, 0x4}, 0x80, &(0x7f0000000280)}, 0x20048000) close(r10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 0s ago: executing program 1 (id=2235): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (fail_nth: 1) kernel console output (not intermixed with test programs): x230 [ 148.744947][ T6880] ? show_regs_print_info+0x20/0x20 [ 148.750191][ T6880] ? load_image+0x3b0/0x3b0 [ 148.754785][ T6880] ? __lock_acquire+0x7c60/0x7c60 [ 148.759933][ T6880] ? trace_call_bpf+0x509/0x5a0 [ 148.764862][ T6880] should_fail+0x38c/0x4c0 [ 148.769333][ T6880] _copy_from_user+0x2e/0x170 [ 148.774046][ T6880] iovec_from_user+0x142/0x370 [ 148.778943][ T6880] __import_iovec+0x70/0x490 [ 148.783680][ T6880] import_iovec+0x6f/0xa0 [ 148.788044][ T6880] ___sys_sendmsg+0x1b9/0x260 [ 148.792775][ T6880] ? __sys_sendmsg+0x250/0x250 [ 148.797635][ T6880] ? trace_event_raw_event_lock+0x250/0x250 [ 148.803547][ T6880] ? vfs_write+0x84d/0xd00 [ 148.808052][ T6880] ? __fdget+0x18b/0x210 [ 148.812325][ T6880] __se_sys_sendmsg+0x190/0x250 [ 148.817384][ T6880] ? __x64_sys_sendmsg+0x80/0x80 [ 148.822336][ T6880] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 148.828385][ T6880] ? lockdep_hardirqs_on+0x94/0x140 [ 148.833629][ T6880] do_syscall_64+0x4c/0xa0 [ 148.838084][ T6880] ? clear_bhb_loop+0x30/0x80 [ 148.842774][ T6880] ? clear_bhb_loop+0x30/0x80 [ 148.847473][ T6880] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.853382][ T6880] RIP: 0033:0x7febfc9c6be9 [ 148.857820][ T6880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.877438][ T6880] RSP: 002b:00007febfac2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.885880][ T6880] RAX: ffffffffffffffda RBX: 00007febfcbedfa0 RCX: 00007febfc9c6be9 [ 148.893930][ T6880] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 148.901912][ T6880] RBP: 00007febfac2e090 R08: 0000000000000000 R09: 0000000000000000 [ 148.909988][ T6880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.917989][ T6880] R13: 00007febfcbee038 R14: 00007febfcbedfa0 R15: 00007ffe77be27a8 [ 148.926054][ T6880] [ 149.702976][ T6906] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.943'. [ 149.788010][ T6902] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.943'. [ 150.034840][ T6917] net_ratelimit: 174 callbacks suppressed [ 150.034858][ T6917] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 150.568694][ T6934] netlink: 6650 bytes leftover after parsing attributes in process `syz.1.955'. [ 150.911358][ T6955] FAULT_INJECTION: forcing a failure. [ 150.911358][ T6955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.964636][ T6955] CPU: 1 PID: 6955 Comm: syz.3.967 Not tainted 5.15.189-syzkaller #0 [ 150.972778][ T6955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 150.982962][ T6955] Call Trace: [ 150.986277][ T6955] [ 150.989237][ T6955] dump_stack_lvl+0x168/0x230 [ 150.993956][ T6955] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 151.000149][ T6955] ? show_regs_print_info+0x20/0x20 [ 151.005458][ T6955] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 151.011727][ T6955] ? dump_stack+0x5/0x20 [ 151.016004][ T6955] should_fail+0x38c/0x4c0 [ 151.020463][ T6955] _copy_to_user+0x2e/0x130 [ 151.025206][ T6955] simple_read_from_buffer+0xe3/0x150 [ 151.030699][ T6955] proc_fail_nth_read+0x19a/0x210 [ 151.035763][ T6955] ? proc_fault_inject_write+0x2f0/0x2f0 [ 151.041420][ T6955] ? fsnotify_perm+0x254/0x560 [ 151.046174][ T6955] ? proc_fault_inject_write+0x2f0/0x2f0 [ 151.051821][ T6955] vfs_read+0x2f6/0xcf0 [ 151.055968][ T6955] ? kernel_read+0x1e0/0x1e0 [ 151.060543][ T6955] ? __fget_files+0x40f/0x480 [ 151.065230][ T6955] ? mutex_lock_nested+0x17/0x20 [ 151.070164][ T6955] ? __fdget_pos+0x2bf/0x370 [ 151.074890][ T6955] ? ksys_read+0x71/0x250 [ 151.079260][ T6955] ksys_read+0x14d/0x250 [ 151.083520][ T6955] ? vfs_write+0xd00/0xd00 [ 151.087919][ T6955] ? lockdep_hardirqs_on+0x94/0x140 [ 151.093128][ T6955] do_syscall_64+0x4c/0xa0 [ 151.097550][ T6955] ? clear_bhb_loop+0x30/0x80 [ 151.102211][ T6955] ? clear_bhb_loop+0x30/0x80 [ 151.106935][ T6955] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.112845][ T6955] RIP: 0033:0x7f39ba7d45fc [ 151.117254][ T6955] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 151.136860][ T6955] RSP: 002b:00007f39b8a3d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 151.145314][ T6955] RAX: ffffffffffffffda RBX: 00007f39ba9fcfa0 RCX: 00007f39ba7d45fc [ 151.153337][ T6955] RDX: 000000000000000f RSI: 00007f39b8a3d0a0 RDI: 0000000000000006 [ 151.161317][ T6955] RBP: 00007f39b8a3d090 R08: 0000000000000000 R09: 0000000000000000 [ 151.169275][ T6955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.177250][ T6955] R13: 00007f39ba9fd038 R14: 00007f39ba9fcfa0 R15: 00007ffdd51213b8 [ 151.185236][ T6955] [ 151.280130][ T6959] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 151.287037][ T6959] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 151.679346][ T6975] tc_dump_action: action bad kind [ 151.796955][ T6970] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 151.809793][ T6970] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 151.963688][ T6974] __nla_validate_parse: 6 callbacks suppressed [ 151.963750][ T6974] netlink: 6650 bytes leftover after parsing attributes in process `syz.4.972'. [ 152.015424][ T6980] netlink: 'syz.3.974': attribute type 28 has an invalid length. [ 152.090746][ T6980] netlink: 'syz.3.974': attribute type 29 has an invalid length. [ 152.125417][ T6980] netlink: 132 bytes leftover after parsing attributes in process `syz.3.974'. [ 152.247108][ T6987] netlink: 'syz.4.977': attribute type 10 has an invalid length. [ 152.282581][ T6987] netlink: 40 bytes leftover after parsing attributes in process `syz.4.977'. [ 152.319319][ T6987] device ipvlan1 entered promiscuous mode [ 152.351835][ T6992] Dead loop on virtual device ip6_vti0, fix it urgently! [ 152.354920][ T6991] netlink: 'syz.2.992': attribute type 28 has an invalid length. [ 152.533094][ T6987] bridge0: port 3(ipvlan1) entered blocking state [ 152.546971][ T6991] netlink: 'syz.2.992': attribute type 29 has an invalid length. [ 152.646887][ T6991] netlink: 132 bytes leftover after parsing attributes in process `syz.2.992'. [ 152.745139][ T6987] bridge0: port 3(ipvlan1) entered disabled state [ 152.872420][ T6987] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 153.102714][ T7006] FAULT_INJECTION: forcing a failure. [ 153.102714][ T7006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.147319][ T7007] netlink: 'syz.4.995': attribute type 28 has an invalid length. [ 153.224573][ T7007] netlink: 'syz.4.995': attribute type 29 has an invalid length. [ 153.232897][ T7006] CPU: 0 PID: 7006 Comm: syz.3.984 Not tainted 5.15.189-syzkaller #0 [ 153.241042][ T7006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 153.247413][ T7007] netlink: 132 bytes leftover after parsing attributes in process `syz.4.995'. [ 153.251216][ T7006] Call Trace: [ 153.251258][ T7006] [ 153.251274][ T7006] dump_stack_lvl+0x168/0x230 [ 153.271385][ T7006] ? show_regs_print_info+0x20/0x20 [ 153.276718][ T7006] ? load_image+0x3b0/0x3b0 [ 153.281287][ T7006] ? __lock_acquire+0x7c60/0x7c60 [ 153.286379][ T7006] should_fail+0x38c/0x4c0 [ 153.290864][ T7006] _copy_to_user+0x2e/0x130 [ 153.295521][ T7006] simple_read_from_buffer+0xe3/0x150 [ 153.301039][ T7006] proc_fail_nth_read+0x19a/0x210 [ 153.306245][ T7006] ? proc_fault_inject_write+0x2f0/0x2f0 [ 153.311961][ T7006] ? fsnotify_perm+0x254/0x560 [ 153.316781][ T7006] ? proc_fault_inject_write+0x2f0/0x2f0 [ 153.322467][ T7006] vfs_read+0x2f6/0xcf0 [ 153.326713][ T7006] ? kernel_read+0x1e0/0x1e0 [ 153.331367][ T7006] ? __fget_files+0x40f/0x480 [ 153.336107][ T7006] ? mutex_lock_nested+0x17/0x20 [ 153.341092][ T7006] ? __fdget_pos+0x2bf/0x370 [ 153.345762][ T7006] ? ksys_read+0x71/0x250 [ 153.350149][ T7006] ksys_read+0x14d/0x250 [ 153.354444][ T7006] ? vfs_write+0xd00/0xd00 [ 153.358931][ T7006] ? lockdep_hardirqs_on+0x94/0x140 [ 153.364180][ T7006] do_syscall_64+0x4c/0xa0 [ 153.368810][ T7006] ? clear_bhb_loop+0x30/0x80 [ 153.373563][ T7006] ? clear_bhb_loop+0x30/0x80 [ 153.378305][ T7006] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.384242][ T7006] RIP: 0033:0x7f39ba7d45fc [ 153.388706][ T7006] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 153.408355][ T7006] RSP: 002b:00007f39b8a3d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 153.416826][ T7006] RAX: ffffffffffffffda RBX: 00007f39ba9fcfa0 RCX: 00007f39ba7d45fc [ 153.424849][ T7006] RDX: 000000000000000f RSI: 00007f39b8a3d0a0 RDI: 0000000000000007 [ 153.432958][ T7006] RBP: 00007f39b8a3d090 R08: 0000000000000000 R09: 0000000000000000 [ 153.441138][ T7006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.449147][ T7006] R13: 00007f39ba9fd038 R14: 00007f39ba9fcfa0 R15: 00007ffdd51213b8 [ 153.457232][ T7006] [ 153.709694][ T7022] netlink: 6650 bytes leftover after parsing attributes in process `syz.3.989'. [ 153.780999][ T7030] FAULT_INJECTION: forcing a failure. [ 153.780999][ T7030] name failslab, interval 1, probability 0, space 0, times 0 [ 153.795738][ T7030] CPU: 1 PID: 7030 Comm: syz.4.993 Not tainted 5.15.189-syzkaller #0 [ 153.803839][ T7030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 153.814126][ T7030] Call Trace: [ 153.817433][ T7030] [ 153.820398][ T7030] dump_stack_lvl+0x168/0x230 [ 153.825105][ T7030] ? show_regs_print_info+0x20/0x20 [ 153.830324][ T7030] ? load_image+0x3b0/0x3b0 [ 153.834884][ T7030] ? __might_sleep+0xf0/0xf0 [ 153.839483][ T7030] ? __lock_acquire+0x7c60/0x7c60 [ 153.844518][ T7030] should_fail+0x38c/0x4c0 [ 153.848951][ T7030] should_failslab+0x5/0x20 [ 153.853462][ T7030] slab_pre_alloc_hook+0x51/0xc0 [ 153.858412][ T7030] __kmalloc_node_track_caller+0x68/0x3a0 [ 153.864137][ T7030] ? netlink_sendmsg+0x645/0xbc0 [ 153.869080][ T7030] ? kmem_cache_alloc_node+0x162/0x2d0 [ 153.874547][ T7030] ? __alloc_skb+0xf4/0x750 [ 153.879062][ T7030] ? netlink_sendmsg+0x645/0xbc0 [ 153.884004][ T7030] __alloc_skb+0x22c/0x750 [ 153.888436][ T7030] netlink_sendmsg+0x645/0xbc0 [ 153.893214][ T7030] ? netlink_getsockopt+0x560/0x560 [ 153.898422][ T7030] ? aa_sock_msg_perm+0x94/0x150 [ 153.903372][ T7030] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 153.908699][ T7030] ? security_socket_sendmsg+0x7c/0xa0 [ 153.914171][ T7030] ? netlink_getsockopt+0x560/0x560 [ 153.919380][ T7030] ____sys_sendmsg+0x5a2/0x8c0 [ 153.924159][ T7030] ? memset+0x1e/0x40 [ 153.928146][ T7030] ? __sys_sendmsg_sock+0x30/0x30 [ 153.933188][ T7030] ? import_iovec+0x6f/0xa0 [ 153.937708][ T7030] ___sys_sendmsg+0x1f0/0x260 [ 153.942398][ T7030] ? __sys_sendmsg+0x250/0x250 [ 153.947178][ T7030] ? ktime_get_real_ts64+0x420/0x420 [ 153.952490][ T7030] ? __fdget+0x18b/0x210 [ 153.956740][ T7030] __se_sys_sendmsg+0x190/0x250 [ 153.961684][ T7030] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 153.967934][ T7030] ? __x64_sys_sendmsg+0x80/0x80 [ 153.972979][ T7030] ? syscall_enter_from_user_mode+0x2a/0x70 [ 153.978979][ T7030] do_syscall_64+0x4c/0xa0 [ 153.983506][ T7030] ? clear_bhb_loop+0x30/0x80 [ 153.988190][ T7030] ? clear_bhb_loop+0x30/0x80 [ 153.992881][ T7030] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.998783][ T7030] RIP: 0033:0x7f83fd827be9 [ 154.003206][ T7030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.022879][ T7030] RSP: 002b:00007f83fba8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.031305][ T7030] RAX: ffffffffffffffda RBX: 00007f83fda4efa0 RCX: 00007f83fd827be9 [ 154.039290][ T7030] RDX: 0000000020004800 RSI: 0000200000000080 RDI: 000000000000000b [ 154.047376][ T7030] RBP: 00007f83fba8f090 R08: 0000000000000000 R09: 0000000000000000 [ 154.055354][ T7030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.063327][ T7030] R13: 00007f83fda4f038 R14: 00007f83fda4efa0 R15: 00007ffc74066168 [ 154.071320][ T7030] [ 154.501965][ T7050] FAULT_INJECTION: forcing a failure. [ 154.501965][ T7050] name failslab, interval 1, probability 0, space 0, times 0 [ 154.584336][ T7050] CPU: 0 PID: 7050 Comm: syz.0.1001 Not tainted 5.15.189-syzkaller #0 [ 154.592555][ T7050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.602640][ T7050] Call Trace: [ 154.605940][ T7050] [ 154.608908][ T7050] dump_stack_lvl+0x168/0x230 [ 154.613604][ T7050] ? show_regs_print_info+0x20/0x20 [ 154.618823][ T7050] ? load_image+0x3b0/0x3b0 [ 154.623357][ T7050] ? __might_sleep+0xf0/0xf0 [ 154.627967][ T7050] ? __lock_acquire+0x7c60/0x7c60 [ 154.633026][ T7050] should_fail+0x38c/0x4c0 [ 154.637468][ T7050] should_failslab+0x5/0x20 [ 154.641989][ T7050] slab_pre_alloc_hook+0x51/0xc0 [ 154.646943][ T7050] __kmalloc_node_track_caller+0x68/0x3a0 [ 154.652675][ T7050] ? netlink_sendmsg+0x645/0xbc0 [ 154.657662][ T7050] ? kmem_cache_alloc_node+0x162/0x2d0 [ 154.663151][ T7050] ? __alloc_skb+0xf4/0x750 [ 154.667682][ T7050] ? netlink_sendmsg+0x645/0xbc0 [ 154.672668][ T7050] __alloc_skb+0x22c/0x750 [ 154.677205][ T7050] netlink_sendmsg+0x645/0xbc0 [ 154.682002][ T7050] ? netlink_getsockopt+0x560/0x560 [ 154.687222][ T7050] ? aa_sock_msg_perm+0x94/0x150 [ 154.692181][ T7050] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 154.697581][ T7050] ? security_socket_sendmsg+0x7c/0xa0 [ 154.703069][ T7050] ? netlink_getsockopt+0x560/0x560 [ 154.708455][ T7050] ____sys_sendmsg+0x5a2/0x8c0 [ 154.713253][ T7050] ? memset+0x1e/0x40 [ 154.717259][ T7050] ? __sys_sendmsg_sock+0x30/0x30 [ 154.722310][ T7050] ? import_iovec+0x6f/0xa0 [ 154.726835][ T7050] ___sys_sendmsg+0x1f0/0x260 [ 154.731544][ T7050] ? __sys_sendmsg+0x250/0x250 [ 154.736350][ T7050] ? vfs_write+0x84d/0xd00 [ 154.740804][ T7050] ? __fdget+0x18b/0x210 [ 154.745070][ T7050] __se_sys_sendmsg+0x190/0x250 [ 154.749948][ T7050] ? __x64_sys_sendmsg+0x80/0x80 [ 154.754906][ T7050] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 154.760929][ T7050] ? lockdep_hardirqs_on+0x94/0x140 [ 154.766166][ T7050] do_syscall_64+0x4c/0xa0 [ 154.770598][ T7050] ? clear_bhb_loop+0x30/0x80 [ 154.775291][ T7050] ? clear_bhb_loop+0x30/0x80 [ 154.779983][ T7050] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.786106][ T7050] RIP: 0033:0x7faa66c57be9 [ 154.790538][ T7050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.810171][ T7050] RSP: 002b:00007faa64ebf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.818622][ T7050] RAX: ffffffffffffffda RBX: 00007faa66e7efa0 RCX: 00007faa66c57be9 [ 154.826617][ T7050] RDX: 0000000020000080 RSI: 0000200000000080 RDI: 0000000000000003 [ 154.834627][ T7050] RBP: 00007faa64ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 154.842702][ T7050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.850698][ T7050] R13: 00007faa66e7f038 R14: 00007faa66e7efa0 R15: 00007ffdb01d2db8 [ 154.858784][ T7050] [ 155.287354][ T7060] netlink: 'syz.1.1003': attribute type 28 has an invalid length. [ 155.324559][ T7060] netlink: 'syz.1.1003': attribute type 29 has an invalid length. [ 155.332444][ T7060] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1003'. [ 155.635204][ T7065] netlink: 'syz.0.1005': attribute type 3 has an invalid length. [ 155.643796][ T7065] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1005'. [ 157.439030][ T7072] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1008'. [ 157.585874][ T7084] Dead loop on virtual device ip6_vti0, fix it urgently! [ 157.961333][ T7103] FAULT_INJECTION: forcing a failure. [ 157.961333][ T7103] name failslab, interval 1, probability 0, space 0, times 0 [ 157.974360][ T7103] CPU: 1 PID: 7103 Comm: syz.1.1019 Not tainted 5.15.189-syzkaller #0 [ 157.982531][ T7103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.992674][ T7103] Call Trace: [ 157.995949][ T7103] [ 157.998865][ T7103] dump_stack_lvl+0x168/0x230 [ 158.003656][ T7103] ? show_regs_print_info+0x20/0x20 [ 158.008950][ T7103] ? load_image+0x3b0/0x3b0 [ 158.013431][ T7103] ? __might_sleep+0xf0/0xf0 [ 158.018000][ T7103] ? __lock_acquire+0x7c60/0x7c60 [ 158.023029][ T7103] should_fail+0x38c/0x4c0 [ 158.027530][ T7103] should_failslab+0x5/0x20 [ 158.032016][ T7103] slab_pre_alloc_hook+0x51/0xc0 [ 158.036943][ T7103] __kmalloc+0x6b/0x330 [ 158.041126][ T7103] ? sock_kmalloc+0x92/0xf0 [ 158.045668][ T7103] sock_kmalloc+0x92/0xf0 [ 158.050240][ T7103] ____sys_sendmsg+0x1ac/0x8c0 [ 158.054998][ T7103] ? memset+0x1e/0x40 [ 158.058964][ T7103] ? __sys_sendmsg_sock+0x30/0x30 [ 158.064135][ T7103] ? import_iovec+0x6f/0xa0 [ 158.068642][ T7103] ___sys_sendmsg+0x1f0/0x260 [ 158.073427][ T7103] ? __sys_sendmsg+0x250/0x250 [ 158.078191][ T7103] ? vfs_write+0x84d/0xd00 [ 158.082594][ T7103] ? __fdget+0x18b/0x210 [ 158.086845][ T7103] __se_sys_sendmsg+0x190/0x250 [ 158.091714][ T7103] ? __x64_sys_sendmsg+0x80/0x80 [ 158.096641][ T7103] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 158.102636][ T7103] ? lockdep_hardirqs_on+0x94/0x140 [ 158.107852][ T7103] do_syscall_64+0x4c/0xa0 [ 158.112338][ T7103] ? clear_bhb_loop+0x30/0x80 [ 158.117121][ T7103] ? clear_bhb_loop+0x30/0x80 [ 158.121915][ T7103] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.127814][ T7103] RIP: 0033:0x7fbafa720be9 [ 158.132228][ T7103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.151816][ T7103] RSP: 002b:00007fbaf8988038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.160215][ T7103] RAX: ffffffffffffffda RBX: 00007fbafa947fa0 RCX: 00007fbafa720be9 [ 158.168164][ T7103] RDX: 00000000000480c4 RSI: 00002000000017c0 RDI: 0000000000000003 [ 158.176116][ T7103] RBP: 00007fbaf8988090 R08: 0000000000000000 R09: 0000000000000000 [ 158.184225][ T7103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.192319][ T7103] R13: 00007fbafa948038 R14: 00007fbafa947fa0 R15: 00007ffc684c02c8 [ 158.200463][ T7103] [ 158.332352][ T7108] netlink: 'syz.2.1022': attribute type 1 has an invalid length. [ 158.344762][ T7108] netlink: 'syz.2.1022': attribute type 2 has an invalid length. [ 158.352622][ T7108] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1022'. [ 158.356362][ T7110] netlink: 'syz.0.1021': attribute type 28 has an invalid length. [ 158.484998][ T7110] netlink: 'syz.0.1021': attribute type 29 has an invalid length. [ 158.489594][ T7108] netlink: 'syz.2.1022': attribute type 2 has an invalid length. [ 158.508321][ T7108] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1022'. [ 158.546128][ T7110] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1021'. [ 159.069731][ T7131] netlink: 'syz.1.1039': attribute type 4 has an invalid length. [ 159.104665][ T7131] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1039'. [ 159.117682][ T7136] netlink: 'syz.0.1031': attribute type 1 has an invalid length. [ 159.155397][ T7136] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1031'. [ 159.183640][ T7136] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1031'. [ 159.229144][ T7136] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1031'. [ 159.360198][ T7147] FAULT_INJECTION: forcing a failure. [ 159.360198][ T7147] name failslab, interval 1, probability 0, space 0, times 0 [ 159.404341][ T7147] CPU: 0 PID: 7147 Comm: syz.2.1034 Not tainted 5.15.189-syzkaller #0 [ 159.412664][ T7147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 159.422752][ T7147] Call Trace: [ 159.426055][ T7147] [ 159.429006][ T7147] dump_stack_lvl+0x168/0x230 [ 159.433722][ T7147] ? show_regs_print_info+0x20/0x20 [ 159.439053][ T7147] ? load_image+0x3b0/0x3b0 [ 159.443619][ T7147] ? __might_sleep+0xf0/0xf0 [ 159.448242][ T7147] ? __lock_acquire+0x7c60/0x7c60 [ 159.453315][ T7147] should_fail+0x38c/0x4c0 [ 159.457864][ T7147] should_failslab+0x5/0x20 [ 159.462391][ T7147] slab_pre_alloc_hook+0x51/0xc0 [ 159.467356][ T7147] kmem_cache_alloc_node+0x47/0x2d0 [ 159.472570][ T7147] ? __alloc_skb+0xf4/0x750 [ 159.477111][ T7147] __alloc_skb+0xf4/0x750 [ 159.481479][ T7147] alloc_skb_with_frags+0xa7/0x730 [ 159.486678][ T7147] sock_alloc_send_pskb+0x853/0x980 [ 159.491967][ T7147] ? sock_kzfree_s+0x50/0x50 [ 159.496588][ T7147] ? perf_trace_lock+0x2ec/0x370 [ 159.501599][ T7147] __ip6_append_data+0x257b/0x3810 [ 159.506852][ T7147] ? ip6_setup_cork+0x11e0/0x11e0 [ 159.511926][ T7147] ? ip6_setup_cork+0xc63/0x11e0 [ 159.516938][ T7147] ip6_make_skb+0x3af/0x4c0 [ 159.521464][ T7147] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 159.526366][ T7147] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 159.531256][ T7147] ? __ip6_flush_pending_frames+0x3a0/0x3a0 [ 159.537236][ T7147] udpv6_sendmsg+0x1b67/0x2320 [ 159.542152][ T7147] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 159.547123][ T7147] ? udp_v6_early_demux+0xe90/0xe90 [ 159.552419][ T7147] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 159.558525][ T7147] ? __local_bh_enable_ip+0x12a/0x1b0 [ 159.564019][ T7147] ? lockdep_hardirqs_on+0x94/0x140 [ 159.569557][ T7147] ? inet_send_prepare+0x1af/0x260 [ 159.574694][ T7147] ? inet6_compat_ioctl+0x380/0x380 [ 159.579932][ T7147] ? inet6_sendmsg+0x5b/0xd0 [ 159.584630][ T7147] ? inet6_compat_ioctl+0x380/0x380 [ 159.589862][ T7147] ____sys_sendmsg+0x5a2/0x8c0 [ 159.594675][ T7147] ? memset+0x1e/0x40 [ 159.598694][ T7147] ? __sys_sendmsg_sock+0x30/0x30 [ 159.603771][ T7147] ? import_iovec+0x6f/0xa0 [ 159.608315][ T7147] ___sys_sendmsg+0x1f0/0x260 [ 159.613049][ T7147] ? __sys_sendmsg+0x250/0x250 [ 159.617880][ T7147] ? trace_event_raw_event_lock+0x250/0x250 [ 159.623802][ T7147] ? vfs_write+0x84d/0xd00 [ 159.628302][ T7147] ? __fdget+0x18b/0x210 [ 159.632667][ T7147] __se_sys_sendmsg+0x190/0x250 [ 159.637560][ T7147] ? __x64_sys_sendmsg+0x80/0x80 [ 159.642534][ T7147] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 159.648604][ T7147] ? lockdep_hardirqs_on+0x94/0x140 [ 159.653847][ T7147] do_syscall_64+0x4c/0xa0 [ 159.658288][ T7147] ? clear_bhb_loop+0x30/0x80 [ 159.662983][ T7147] ? clear_bhb_loop+0x30/0x80 [ 159.667693][ T7147] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.673699][ T7147] RIP: 0033:0x7febfc9c6be9 [ 159.678150][ T7147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.697777][ T7147] RSP: 002b:00007febfac2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.706221][ T7147] RAX: ffffffffffffffda RBX: 00007febfcbedfa0 RCX: 00007febfc9c6be9 [ 159.714214][ T7147] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 159.722212][ T7147] RBP: 00007febfac2e090 R08: 0000000000000000 R09: 0000000000000000 [ 159.730377][ T7147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.738390][ T7147] R13: 00007febfcbee038 R14: 00007febfcbedfa0 R15: 00007ffe77be27a8 [ 159.746442][ T7147] [ 160.553474][ T7171] validate_nla: 3 callbacks suppressed [ 160.553512][ T7171] netlink: 'syz.0.1046': attribute type 4 has an invalid length. [ 160.570510][ T7171] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1046'. [ 160.653168][ T7177] netlink: 'syz.3.1047': attribute type 1 has an invalid length. [ 160.696713][ T7177] netlink: 'syz.3.1047': attribute type 2 has an invalid length. [ 160.729889][ T7177] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1047'. [ 160.940078][ T7186] FAULT_INJECTION: forcing a failure. [ 160.940078][ T7186] name failslab, interval 1, probability 0, space 0, times 0 [ 160.982503][ T7177] netlink: 'syz.3.1047': attribute type 2 has an invalid length. [ 160.996786][ T7186] CPU: 0 PID: 7186 Comm: syz.4.1048 Not tainted 5.15.189-syzkaller #0 [ 160.996816][ T7186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 160.996827][ T7186] Call Trace: [ 160.996835][ T7186] [ 160.996843][ T7186] dump_stack_lvl+0x168/0x230 [ 160.996874][ T7186] ? show_regs_print_info+0x20/0x20 [ 160.996895][ T7186] ? load_image+0x3b0/0x3b0 [ 160.996919][ T7186] ? __lock_acquire+0x7c60/0x7c60 [ 160.996948][ T7186] should_fail+0x38c/0x4c0 [ 160.996976][ T7186] should_failslab+0x5/0x20 [ 160.996993][ T7186] slab_pre_alloc_hook+0x51/0xc0 [ 160.997013][ T7186] __kmalloc_node+0x6e/0x3b0 [ 160.997031][ T7186] ? kvmalloc_node+0x84/0x130 [ 160.997058][ T7186] kvmalloc_node+0x84/0x130 [ 160.997082][ T7186] btf_new_fd+0x1e2/0x910 [ 160.997108][ T7186] __sys_bpf+0x51c/0x670 [ 160.997132][ T7186] ? bpf_link_show_fdinfo+0x340/0x340 [ 160.997164][ T7186] ? vtime_user_exit+0x2dc/0x400 [ 160.997193][ T7186] __x64_sys_bpf+0x78/0x90 [ 160.997214][ T7186] do_syscall_64+0x4c/0xa0 [ 160.997234][ T7186] ? clear_bhb_loop+0x30/0x80 [ 160.997251][ T7186] ? clear_bhb_loop+0x30/0x80 [ 160.997270][ T7186] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.997291][ T7186] RIP: 0033:0x7f83fd827be9 [ 160.997309][ T7186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.997325][ T7186] RSP: 002b:00007f83fba6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 160.997348][ T7186] RAX: ffffffffffffffda RBX: 00007f83fda4f090 RCX: 00007f83fd827be9 [ 160.997363][ T7186] RDX: 0000000000000028 RSI: 0000200000000040 RDI: 0000000000000012 [ 160.997376][ T7186] RBP: 00007f83fba6e090 R08: 0000000000000000 R09: 0000000000000000 [ 160.997389][ T7186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.997400][ T7186] R13: 00007f83fda4f128 R14: 00007f83fda4f090 R15: 00007ffc74066168 [ 160.997431][ T7186] [ 161.907804][ T7210] netlink: 'syz.4.1059': attribute type 4 has an invalid length. [ 162.050901][ T7219] Dead loop on virtual device ip6_vti0, fix it urgently! [ 162.061434][ T7220] FAULT_INJECTION: forcing a failure. [ 162.061434][ T7220] name failslab, interval 1, probability 0, space 0, times 0 [ 162.142982][ T7220] CPU: 1 PID: 7220 Comm: syz.3.1063 Not tainted 5.15.189-syzkaller #0 [ 162.151205][ T7220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 162.161277][ T7220] Call Trace: [ 162.164567][ T7220] [ 162.167505][ T7220] dump_stack_lvl+0x168/0x230 [ 162.172197][ T7220] ? show_regs_print_info+0x20/0x20 [ 162.177406][ T7220] ? load_image+0x3b0/0x3b0 [ 162.181923][ T7220] ? __lock_acquire+0x7c60/0x7c60 [ 162.187061][ T7220] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 162.193227][ T7220] should_fail+0x38c/0x4c0 [ 162.197678][ T7220] should_failslab+0x5/0x20 [ 162.202188][ T7220] slab_pre_alloc_hook+0x51/0xc0 [ 162.207146][ T7220] __kmalloc_node+0x6e/0x3b0 [ 162.211763][ T7220] ? kvmalloc_node+0x84/0x130 [ 162.216548][ T7220] kvmalloc_node+0x84/0x130 [ 162.221104][ T7220] btf_new_fd+0x1e2/0x910 [ 162.225453][ T7220] __sys_bpf+0x51c/0x670 [ 162.229786][ T7220] ? bpf_link_show_fdinfo+0x340/0x340 [ 162.235367][ T7220] __x64_sys_bpf+0x78/0x90 [ 162.239802][ T7220] do_syscall_64+0x4c/0xa0 [ 162.244237][ T7220] ? clear_bhb_loop+0x30/0x80 [ 162.248956][ T7220] ? clear_bhb_loop+0x30/0x80 [ 162.253645][ T7220] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 162.259541][ T7220] RIP: 0033:0x7f39ba7d5be9 [ 162.263975][ T7220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.283590][ T7220] RSP: 002b:00007f39b8a3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 162.292028][ T7220] RAX: ffffffffffffffda RBX: 00007f39ba9fcfa0 RCX: 00007f39ba7d5be9 [ 162.300023][ T7220] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000012 [ 162.308000][ T7220] RBP: 00007f39b8a3d090 R08: 0000000000000000 R09: 0000000000000000 [ 162.315980][ T7220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.323963][ T7220] R13: 00007f39ba9fd038 R14: 00007f39ba9fcfa0 R15: 00007ffdd51213b8 [ 162.332060][ T7220] [ 162.573038][ T7239] netlink: 'syz.4.1069': attribute type 1 has an invalid length. [ 162.636939][ T7239] netlink: 'syz.4.1069': attribute type 2 has an invalid length. [ 162.682730][ T7239] __nla_validate_parse: 2 callbacks suppressed [ 162.682751][ T7239] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1069'. [ 162.726815][ T7243] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1071'. [ 162.768164][ T7244] FAULT_INJECTION: forcing a failure. [ 162.768164][ T7244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.864376][ T7244] CPU: 1 PID: 7244 Comm: syz.2.1070 Not tainted 5.15.189-syzkaller #0 [ 162.872598][ T7244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 162.882680][ T7244] Call Trace: [ 162.885991][ T7244] [ 162.888944][ T7244] dump_stack_lvl+0x168/0x230 [ 162.893655][ T7244] ? show_regs_print_info+0x20/0x20 [ 162.898881][ T7244] ? load_image+0x3b0/0x3b0 [ 162.903491][ T7244] ? __lock_acquire+0x7c60/0x7c60 [ 162.908616][ T7244] should_fail+0x38c/0x4c0 [ 162.913047][ T7244] _copy_to_user+0x2e/0x130 [ 162.917559][ T7244] simple_read_from_buffer+0xe3/0x150 [ 162.922939][ T7244] proc_fail_nth_read+0x19a/0x210 [ 162.927994][ T7244] ? proc_fault_inject_write+0x2f0/0x2f0 [ 162.933638][ T7244] ? fsnotify_perm+0x254/0x560 [ 162.938402][ T7244] ? proc_fault_inject_write+0x2f0/0x2f0 [ 162.944037][ T7244] vfs_read+0x2f6/0xcf0 [ 162.948197][ T7244] ? kernel_read+0x1e0/0x1e0 [ 162.952796][ T7244] ? __fget_files+0x40f/0x480 [ 162.957480][ T7244] ? mutex_lock_nested+0x17/0x20 [ 162.962426][ T7244] ? __fdget_pos+0x2bf/0x370 [ 162.967023][ T7244] ? ksys_read+0x71/0x250 [ 162.971364][ T7244] ksys_read+0x14d/0x250 [ 162.975639][ T7244] ? vfs_write+0xd00/0xd00 [ 162.980068][ T7244] ? lockdep_hardirqs_on+0x94/0x140 [ 162.985286][ T7244] do_syscall_64+0x4c/0xa0 [ 162.989701][ T7244] ? clear_bhb_loop+0x30/0x80 [ 162.994393][ T7244] ? clear_bhb_loop+0x30/0x80 [ 162.999073][ T7244] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 163.004965][ T7244] RIP: 0033:0x7febfc9c55fc [ 163.009467][ T7244] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 163.029071][ T7244] RSP: 002b:00007febfac0d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 163.037482][ T7244] RAX: ffffffffffffffda RBX: 00007febfcbee090 RCX: 00007febfc9c55fc [ 163.045461][ T7244] RDX: 000000000000000f RSI: 00007febfac0d0a0 RDI: 000000000000000a [ 163.053430][ T7244] RBP: 00007febfac0d090 R08: 0000000000000000 R09: 0000000000000000 [ 163.061399][ T7244] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 163.069455][ T7244] R13: 00007febfcbee128 R14: 00007febfcbee090 R15: 00007ffe77be27a8 [ 163.077441][ T7244] [ 163.097326][ T7239] netlink: 'syz.4.1069': attribute type 2 has an invalid length. [ 163.118014][ T7252] FAULT_INJECTION: forcing a failure. [ 163.118014][ T7252] name failslab, interval 1, probability 0, space 0, times 0 [ 163.122629][ T7239] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1069'. [ 163.165728][ T7252] CPU: 0 PID: 7252 Comm: syz.3.1073 Not tainted 5.15.189-syzkaller #0 [ 163.174125][ T7252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 163.184210][ T7252] Call Trace: [ 163.187603][ T7252] [ 163.190555][ T7252] dump_stack_lvl+0x168/0x230 [ 163.195268][ T7252] ? show_regs_print_info+0x20/0x20 [ 163.200495][ T7252] ? load_image+0x3b0/0x3b0 [ 163.205023][ T7252] ? __might_sleep+0xf0/0xf0 [ 163.209634][ T7252] ? __lock_acquire+0x7c60/0x7c60 [ 163.214681][ T7252] should_fail+0x38c/0x4c0 [ 163.219118][ T7252] should_failslab+0x5/0x20 [ 163.223653][ T7252] slab_pre_alloc_hook+0x51/0xc0 [ 163.228601][ T7252] kmem_cache_alloc_node_trace+0x4a/0x300 [ 163.234500][ T7252] ? __get_vm_area_node+0x119/0x2d0 [ 163.239716][ T7252] __get_vm_area_node+0x119/0x2d0 [ 163.244753][ T7252] ? lock_chain_count+0x20/0x20 [ 163.249620][ T7252] __vmalloc_node_range+0xef/0x8b0 [ 163.254733][ T7252] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 163.260296][ T7252] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 163.266451][ T7252] ? lockdep_hardirqs_on+0x94/0x140 [ 163.271654][ T7252] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 163.277804][ T7252] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 163.283349][ T7252] __vmalloc+0x76/0x80 [ 163.287679][ T7252] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 163.293332][ T7252] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 163.298725][ T7252] bpf_prog_alloc+0x1a/0x1e0 [ 163.303418][ T7252] bpf_prog_load+0x7b3/0x1550 [ 163.308112][ T7252] ? map_freeze+0x350/0x350 [ 163.312634][ T7252] ? bpf_lsm_bpf+0x5/0x10 [ 163.316962][ T7252] ? security_bpf+0x7a/0xa0 [ 163.321465][ T7252] __sys_bpf+0x4c2/0x670 [ 163.325708][ T7252] ? bpf_link_show_fdinfo+0x340/0x340 [ 163.331085][ T7252] ? vtime_user_exit+0x2dc/0x400 [ 163.336024][ T7252] __x64_sys_bpf+0x78/0x90 [ 163.340441][ T7252] do_syscall_64+0x4c/0xa0 [ 163.344861][ T7252] ? clear_bhb_loop+0x30/0x80 [ 163.349537][ T7252] ? clear_bhb_loop+0x30/0x80 [ 163.354227][ T7252] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 163.360158][ T7252] RIP: 0033:0x7f39ba7d5be9 [ 163.364588][ T7252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.384202][ T7252] RSP: 002b:00007f39b8a3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 163.392630][ T7252] RAX: ffffffffffffffda RBX: 00007f39ba9fcfa0 RCX: 00007f39ba7d5be9 [ 163.401124][ T7252] RDX: 0000000000000021 RSI: 0000200000000440 RDI: 0000000000000005 [ 163.409095][ T7252] RBP: 00007f39b8a3d090 R08: 0000000000000000 R09: 0000000000000000 [ 163.417064][ T7252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.425033][ T7252] R13: 00007f39ba9fd038 R14: 00007f39ba9fcfa0 R15: 00007ffdd51213b8 [ 163.433020][ T7252] [ 163.505828][ T7252] syz.3.1073: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 163.525943][ T7252] CPU: 0 PID: 7252 Comm: syz.3.1073 Not tainted 5.15.189-syzkaller #0 [ 163.534137][ T7252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 163.544341][ T7252] Call Trace: [ 163.547651][ T7252] [ 163.550610][ T7252] dump_stack_lvl+0x168/0x230 [ 163.555503][ T7252] ? rcu_lock_release+0x5/0x20 [ 163.560299][ T7252] ? show_regs_print_info+0x20/0x20 [ 163.565671][ T7252] ? load_image+0x3b0/0x3b0 [ 163.570251][ T7252] ? cpuset_print_current_mems_allowed+0x24a/0x320 [ 163.576790][ T7252] warn_alloc+0x20e/0x2f0 [ 163.581140][ T7252] ? zone_watermark_ok_safe+0x240/0x240 [ 163.586695][ T7252] ? __get_vm_area_node+0x2b5/0x2d0 [ 163.591895][ T7252] ? lock_chain_count+0x20/0x20 [ 163.596771][ T7252] __vmalloc_node_range+0x2b1/0x8b0 [ 163.602056][ T7252] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 163.608207][ T7252] ? lockdep_hardirqs_on+0x94/0x140 [ 163.613490][ T7252] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 163.619641][ T7252] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 163.625195][ T7252] __vmalloc+0x76/0x80 [ 163.629259][ T7252] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 163.634802][ T7252] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 163.640199][ T7252] bpf_prog_alloc+0x1a/0x1e0 [ 163.644789][ T7252] bpf_prog_load+0x7b3/0x1550 [ 163.649475][ T7252] ? map_freeze+0x350/0x350 [ 163.653990][ T7252] ? bpf_lsm_bpf+0x5/0x10 [ 163.658318][ T7252] ? security_bpf+0x7a/0xa0 [ 163.662824][ T7252] __sys_bpf+0x4c2/0x670 [ 163.667080][ T7252] ? bpf_link_show_fdinfo+0x340/0x340 [ 163.672457][ T7252] ? vtime_user_exit+0x2dc/0x400 [ 163.677406][ T7252] __x64_sys_bpf+0x78/0x90 [ 163.681918][ T7252] do_syscall_64+0x4c/0xa0 [ 163.686332][ T7252] ? clear_bhb_loop+0x30/0x80 [ 163.691003][ T7252] ? clear_bhb_loop+0x30/0x80 [ 163.695679][ T7252] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 163.701659][ T7252] RIP: 0033:0x7f39ba7d5be9 [ 163.706084][ T7252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.725806][ T7252] RSP: 002b:00007f39b8a3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 163.734241][ T7252] RAX: ffffffffffffffda RBX: 00007f39ba9fcfa0 RCX: 00007f39ba7d5be9 [ 163.742216][ T7252] RDX: 0000000000000021 RSI: 0000200000000440 RDI: 0000000000000005 [ 163.750185][ T7252] RBP: 00007f39b8a3d090 R08: 0000000000000000 R09: 0000000000000000 [ 163.758154][ T7252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.766409][ T7252] R13: 00007f39ba9fd038 R14: 00007f39ba9fcfa0 R15: 00007ffdd51213b8 [ 163.774398][ T7252] [ 163.832952][ T7252] Mem-Info: [ 163.841556][ T7252] active_anon:268 inactive_anon:5336 isolated_anon:0 [ 163.841556][ T7252] active_file:5029 inactive_file:46974 isolated_file:0 [ 163.841556][ T7252] unevictable:768 dirty:315 writeback:0 [ 163.841556][ T7252] slab_reclaimable:20126 slab_unreclaimable:96724 [ 163.841556][ T7252] mapped:30077 shmem:1629 pagetables:618 bounce:0 [ 163.841556][ T7252] kernel_misc_reclaimable:0 [ 163.841556][ T7252] free:1337927 free_pcp:10629 free_cma:0 [ 163.896263][ T7252] Node 0 active_anon:1040kB inactive_anon:20836kB active_file:19908kB inactive_file:187896kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120308kB dirty:1260kB writeback:0kB shmem:4440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12560kB pagetables:2472kB all_unreclaimable? no [ 163.959376][ T7265] netlink: 'syz.0.1077': attribute type 28 has an invalid length. [ 163.982911][ T7265] netlink: 'syz.0.1077': attribute type 29 has an invalid length. [ 164.012301][ T7265] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1077'. [ 164.015723][ T7252] Node 1 active_anon:32kB inactive_anon:508kB active_file:208kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 164.062087][ T7267] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1078'. [ 164.092127][ T7252] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 164.165387][ T7270] FAULT_INJECTION: forcing a failure. [ 164.165387][ T7270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.219125][ T7252] lowmem_reserve[]: 0 2541 2542 2542 2542 [ 164.228236][ T7252] Node 0 DMA32 free:1426036kB min:34800kB low:43500kB high:52200kB reserved_highatomic:0KB active_anon:1040kB inactive_anon:20736kB active_file:19908kB inactive_file:187896kB unevictable:1536kB writepending:1260kB present:3129332kB managed:2609004kB mlocked:0kB bounce:0kB free_pcp:39244kB local_pcp:20640kB free_cma:0kB [ 164.229661][ T7270] CPU: 0 PID: 7270 Comm: syz.2.1079 Not tainted 5.15.189-syzkaller #0 [ 164.266506][ T7270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 164.276582][ T7270] Call Trace: [ 164.279881][ T7270] [ 164.282821][ T7270] dump_stack_lvl+0x168/0x230 [ 164.287514][ T7270] ? show_regs_print_info+0x20/0x20 [ 164.292717][ T7270] ? load_image+0x3b0/0x3b0 [ 164.297233][ T7270] ? __lock_acquire+0x7c60/0x7c60 [ 164.302269][ T7270] should_fail+0x38c/0x4c0 [ 164.306699][ T7270] _copy_from_user+0x2e/0x170 [ 164.311403][ T7270] __copy_msghdr_from_user+0xaf/0x5e0 [ 164.316820][ T7270] ? verify_lock_unused+0x140/0x140 [ 164.322326][ T7270] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 164.327642][ T7270] ___sys_sendmsg+0x156/0x260 [ 164.332344][ T7270] ? __sys_sendmsg+0x250/0x250 [ 164.337128][ T7270] ? vfs_write+0x84d/0xd00 [ 164.341572][ T7270] ? __fdget+0x18b/0x210 [ 164.345821][ T7270] __se_sys_sendmsg+0x190/0x250 [ 164.350691][ T7270] ? __x64_sys_sendmsg+0x80/0x80 [ 164.355635][ T7270] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 164.361648][ T7270] ? lockdep_hardirqs_on+0x94/0x140 [ 164.366861][ T7270] do_syscall_64+0x4c/0xa0 [ 164.371287][ T7270] ? clear_bhb_loop+0x30/0x80 [ 164.375975][ T7270] ? clear_bhb_loop+0x30/0x80 [ 164.380692][ T7270] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.386612][ T7270] RIP: 0033:0x7febfc9c6be9 [ 164.391567][ T7270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.411187][ T7270] RSP: 002b:00007febfac2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.419610][ T7270] RAX: ffffffffffffffda RBX: 00007febfcbedfa0 RCX: 00007febfc9c6be9 [ 164.427592][ T7270] RDX: 0000000000004000 RSI: 0000200000000080 RDI: 0000000000000003 [ 164.435568][ T7270] RBP: 00007febfac2e090 R08: 0000000000000000 R09: 0000000000000000 [ 164.443547][ T7270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.451521][ T7270] R13: 00007febfcbee038 R14: 00007febfcbedfa0 R15: 00007ffe77be27a8 [ 164.459512][ T7270] [ 164.463415][ T7252] lowmem_reserve[]: 0 0 0 0 0 [ 164.472641][ T7252] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 164.513419][ T7252] lowmem_reserve[]: 0 0 0 0 0 [ 164.523203][ T7252] Node 1 Normal free:3910000kB min:55088kB low:68860kB high:82632kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:208kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:5124kB local_pcp:3588kB free_cma:0kB [ 164.639491][ T7277] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.1082'. [ 164.671215][ T7252] lowmem_reserve[]: 0 0 0 0 0 [ 164.693512][ T7252] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 164.781157][ T7252] Node 0 DMA32: 602*4kB (UME) 386*8kB (UME) 314*16kB (ME) 739*32kB (UME) 266*64kB (UME) 15*128kB (UME) 3*256kB (UM) 3*512kB (ME) 2*1024kB (UM) 2*2048kB (ME) 333*4096kB (UM) = 1425528kB [ 164.858933][ T7252] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 164.901254][ T7252] Node 1 Normal: 136*4kB (UME) 34*8kB (UME) 32*16kB (UME) 150*32kB (UME) 64*64kB (UME) 23*128kB (UE) 10*256kB (UME) 6*512kB (UE) 0*1024kB 2*2048kB (UM) 949*4096kB (M) = 3910000kB [ 164.985474][ T7252] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 165.018654][ T7252] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 165.056493][ T7277] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1082'. [ 165.074681][ T7252] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 165.085320][ T7277] tc_dump_action: action bad kind [ 165.118411][ T7252] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 165.175156][ T7252] 53632 total pagecache pages [ 165.200552][ T7252] 0 pages in swap cache [ 165.220942][ T7252] Swap cache stats: add 0, delete 0, find 0/0 [ 165.281361][ T7252] Free swap = 124996kB [ 165.301611][ T7252] Total swap = 124996kB [ 165.305660][ T7286] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1086'. [ 165.306065][ T7252] 2097051 pages RAM [ 165.343708][ T7252] 0 pages HighMem/MovableOnly [ 165.348943][ T7252] 410813 pages reserved [ 165.353118][ T7252] 0 pages cma reserved [ 165.377539][ T7286] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1086'. [ 165.575251][ T7299] validate_nla: 5 callbacks suppressed [ 165.575269][ T7299] netlink: 'syz.1.1091': attribute type 28 has an invalid length. [ 165.611108][ T7299] netlink: 'syz.1.1091': attribute type 29 has an invalid length. [ 165.620877][ T7299] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1091'. [ 165.673450][ T7298] netlink: 'syz.3.1090': attribute type 2 has an invalid length. [ 165.708391][ T7298] netlink: 'syz.3.1090': attribute type 8 has an invalid length. [ 166.272395][ T7323] tc_dump_action: action bad kind [ 166.404398][ T7319] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 166.418530][ T7319] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 166.917788][ T7351] FAULT_INJECTION: forcing a failure. [ 166.917788][ T7351] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 167.016955][ T7351] CPU: 0 PID: 7351 Comm: syz.0.1108 Not tainted 5.15.189-syzkaller #0 [ 167.025177][ T7351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 167.035255][ T7351] Call Trace: [ 167.038548][ T7351] [ 167.041506][ T7351] dump_stack_lvl+0x168/0x230 [ 167.046237][ T7351] ? show_regs_print_info+0x20/0x20 [ 167.051452][ T7351] ? load_image+0x3b0/0x3b0 [ 167.055993][ T7351] ? __lock_acquire+0x7c60/0x7c60 [ 167.061137][ T7351] should_fail+0x38c/0x4c0 [ 167.065599][ T7351] prepare_alloc_pages+0x1e4/0x5f0 [ 167.070789][ T7351] __alloc_pages+0x10e/0x470 [ 167.075402][ T7351] ? zone_statistics+0x170/0x170 [ 167.080472][ T7351] kmalloc_large_node+0x7d/0x190 [ 167.085436][ T7351] __kmalloc_node_track_caller+0x22e/0x3a0 [ 167.091258][ T7351] ? pfkey_sendmsg+0x186/0xff0 [ 167.096040][ T7351] ? kmem_cache_alloc_node+0x162/0x2d0 [ 167.101508][ T7351] ? __alloc_skb+0xf4/0x750 [ 167.106034][ T7351] ? pfkey_sendmsg+0x186/0xff0 [ 167.110815][ T7351] __alloc_skb+0x22c/0x750 [ 167.115255][ T7351] pfkey_sendmsg+0x186/0xff0 [ 167.119876][ T7351] ? __might_sleep+0xf0/0xf0 [ 167.124489][ T7351] ? pfkey_release+0x310/0x310 [ 167.129441][ T7351] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 167.135471][ T7351] ? aa_sk_perm+0x7b4/0x8f0 [ 167.140007][ T7351] ? aa_af_perm+0x2b0/0x2b0 [ 167.144530][ T7351] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 167.150974][ T7351] ? aa_sock_msg_perm+0x94/0x150 [ 167.156025][ T7351] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 167.161323][ T7351] ? security_socket_sendmsg+0x7c/0xa0 [ 167.166807][ T7351] ? pfkey_release+0x310/0x310 [ 167.171598][ T7351] ____sys_sendmsg+0x5a2/0x8c0 [ 167.176398][ T7351] ? memset+0x1e/0x40 [ 167.180407][ T7351] ? __sys_sendmsg_sock+0x30/0x30 [ 167.185463][ T7351] ? import_iovec+0x6f/0xa0 [ 167.190091][ T7351] ___sys_sendmsg+0x1f0/0x260 [ 167.194813][ T7351] ? __sys_sendmsg+0x250/0x250 [ 167.199620][ T7351] ? ktime_get_real_ts64+0x420/0x420 [ 167.204957][ T7351] ? __fdget+0x18b/0x210 [ 167.209226][ T7351] __se_sys_sendmsg+0x190/0x250 [ 167.214099][ T7351] ? __x64_sys_sendmsg+0x80/0x80 [ 167.219047][ T7351] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 167.225092][ T7351] ? lockdep_hardirqs_on+0x94/0x140 [ 167.230341][ T7351] do_syscall_64+0x4c/0xa0 [ 167.234775][ T7351] ? clear_bhb_loop+0x30/0x80 [ 167.239474][ T7351] ? clear_bhb_loop+0x30/0x80 [ 167.244165][ T7351] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 167.250209][ T7351] RIP: 0033:0x7faa66c57be9 [ 167.254646][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.274270][ T7351] RSP: 002b:00007faa64ebf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.283221][ T7351] RAX: ffffffffffffffda RBX: 00007faa66e7efa0 RCX: 00007faa66c57be9 [ 167.291207][ T7351] RDX: 0000000000000600 RSI: 0000200000003780 RDI: 0000000000000004 [ 167.299191][ T7351] RBP: 00007faa64ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 167.307174][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.315243][ T7351] R13: 00007faa66e7f038 R14: 00007faa66e7efa0 R15: 00007ffdb01d2db8 [ 167.323394][ T7351] [ 167.789405][ T7372] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 167.796075][ T7372] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 168.518953][ T7395] netlink: 'syz.4.1123': attribute type 2 has an invalid length. [ 168.546529][ T7395] netlink: 'syz.4.1123': attribute type 8 has an invalid length. [ 168.554490][ T7395] __nla_validate_parse: 4 callbacks suppressed [ 168.554507][ T7395] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1123'. [ 168.862657][ T7404] FAULT_INJECTION: forcing a failure. [ 168.862657][ T7404] name failslab, interval 1, probability 0, space 0, times 0 [ 168.909978][ T7404] CPU: 1 PID: 7404 Comm: syz.1.1127 Not tainted 5.15.189-syzkaller #0 [ 168.918201][ T7404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 168.928287][ T7404] Call Trace: [ 168.931603][ T7404] [ 168.934556][ T7404] dump_stack_lvl+0x168/0x230 [ 168.939259][ T7404] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 168.945441][ T7404] ? show_regs_print_info+0x20/0x20 [ 168.950668][ T7404] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 168.956864][ T7404] should_fail+0x38c/0x4c0 [ 168.961325][ T7404] should_failslab+0x5/0x20 [ 168.965848][ T7404] slab_pre_alloc_hook+0x51/0xc0 [ 168.970798][ T7404] __kmalloc+0x6b/0x330 [ 168.974967][ T7404] ? tomoyo_realpath_from_path+0x118/0x610 [ 168.980789][ T7404] tomoyo_realpath_from_path+0x118/0x610 [ 168.986547][ T7404] tomoyo_path_number_perm+0x1d5/0x5d0 [ 168.992034][ T7404] ? verify_lock_unused+0x140/0x140 [ 168.997262][ T7404] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 169.002719][ T7404] ? hrtimer_interrupt+0x4d4/0x8d0 [ 169.007834][ T7404] ? ktime_get+0x7b/0x270 [ 169.012196][ T7404] security_file_ioctl+0x6c/0xa0 [ 169.017135][ T7404] __se_sys_ioctl+0x48/0x170 [ 169.021732][ T7404] do_syscall_64+0x4c/0xa0 [ 169.026151][ T7404] ? clear_bhb_loop+0x30/0x80 [ 169.030835][ T7404] ? clear_bhb_loop+0x30/0x80 [ 169.035593][ T7404] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 169.041487][ T7404] RIP: 0033:0x7fbafa720be9 [ 169.045991][ T7404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.066026][ T7404] RSP: 002b:00007fbaf8988038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.074524][ T7404] RAX: ffffffffffffffda RBX: 00007fbafa947fa0 RCX: 00007fbafa720be9 [ 169.082494][ T7404] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000034 [ 169.090548][ T7404] RBP: 00007fbaf8988090 R08: 0000000000000000 R09: 0000000000000000 [ 169.098520][ T7404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.106485][ T7404] R13: 00007fbafa948038 R14: 00007fbafa947fa0 R15: 00007ffc684c02c8 [ 169.114473][ T7404] [ 169.147481][ T7404] ERROR: Out of memory at tomoyo_realpath_from_path. [ 169.233267][ T7422] netlink: 'syz.2.1134': attribute type 2 has an invalid length. [ 169.366879][ T7422] netlink: 'syz.2.1134': attribute type 8 has an invalid length. [ 169.402673][ T7422] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1134'. [ 170.276349][ T7450] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1144'. [ 170.398726][ T7450] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 170.405885][ T7450] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 170.455168][ T4313] Bluetooth: hci3: command 0x0406 tx timeout [ 170.461336][ T4313] Bluetooth: hci0: command 0x0406 tx timeout [ 170.467604][ T6139] Bluetooth: hci4: command 0x0406 tx timeout [ 170.475311][ T6139] Bluetooth: hci1: command 0x0406 tx timeout [ 170.508865][ T6139] Bluetooth: hci2: command 0x0406 tx timeout [ 171.246525][ T7473] netlink: set zone limit has 8 unknown bytes [ 172.166343][ T7498] FAULT_INJECTION: forcing a failure. [ 172.166343][ T7498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.209477][ T7498] CPU: 1 PID: 7498 Comm: syz.4.1162 Not tainted 5.15.189-syzkaller #0 [ 172.217953][ T7498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 172.228027][ T7498] Call Trace: [ 172.231322][ T7498] [ 172.234354][ T7498] dump_stack_lvl+0x168/0x230 [ 172.239061][ T7498] ? show_regs_print_info+0x20/0x20 [ 172.244279][ T7498] ? load_image+0x3b0/0x3b0 [ 172.248814][ T7498] ? __lock_acquire+0x7c60/0x7c60 [ 172.253949][ T7498] should_fail+0x38c/0x4c0 [ 172.258395][ T7498] _copy_to_user+0x2e/0x130 [ 172.262920][ T7498] simple_read_from_buffer+0xe3/0x150 [ 172.268322][ T7498] proc_fail_nth_read+0x19a/0x210 [ 172.273371][ T7498] ? proc_fault_inject_write+0x2f0/0x2f0 [ 172.279036][ T7498] ? fsnotify_perm+0x254/0x560 [ 172.283828][ T7498] ? proc_fault_inject_write+0x2f0/0x2f0 [ 172.289497][ T7498] vfs_read+0x2f6/0xcf0 [ 172.293660][ T7498] ? kernel_read+0x1e0/0x1e0 [ 172.298254][ T7498] ? __fget_files+0x40f/0x480 [ 172.302934][ T7498] ? mutex_lock_nested+0x17/0x20 [ 172.307854][ T7498] ? __fdget_pos+0x2bf/0x370 [ 172.312424][ T7498] ? ksys_read+0x71/0x250 [ 172.316756][ T7498] ksys_read+0x14d/0x250 [ 172.321031][ T7498] ? vfs_write+0xd00/0xd00 [ 172.325472][ T7498] ? lockdep_hardirqs_on+0x94/0x140 [ 172.330654][ T7498] do_syscall_64+0x4c/0xa0 [ 172.335053][ T7498] ? clear_bhb_loop+0x30/0x80 [ 172.339712][ T7498] ? clear_bhb_loop+0x30/0x80 [ 172.344376][ T7498] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.350262][ T7498] RIP: 0033:0x7f83fd8265fc [ 172.354672][ T7498] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 172.374268][ T7498] RSP: 002b:00007f83fba8f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 172.382719][ T7498] RAX: ffffffffffffffda RBX: 00007f83fda4efa0 RCX: 00007f83fd8265fc [ 172.390765][ T7498] RDX: 000000000000000f RSI: 00007f83fba8f0a0 RDI: 0000000000000005 [ 172.398729][ T7498] RBP: 00007f83fba8f090 R08: 0000000000000000 R09: 0000000000000000 [ 172.406682][ T7498] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.414825][ T7498] R13: 00007f83fda4f038 R14: 00007f83fda4efa0 R15: 00007ffc74066168 [ 172.422821][ T7498] [ 173.049898][ T7519] netlink: 'syz.3.1168': attribute type 4 has an invalid length. [ 173.167816][ T7519] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1168'. [ 173.830841][ T7532] netlink: set zone limit has 8 unknown bytes [ 175.505055][ T7572] netlink: 'syz.2.1187': attribute type 4 has an invalid length. [ 175.672279][ T7572] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1187'. [ 176.216660][ T7589] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.1194'. [ 177.149949][ T7607] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1200'. [ 177.199976][ T7607] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 177.208583][ T7607] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 177.553978][ T7622] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1206'. [ 177.701131][ T7622] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 177.707830][ T7622] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 177.859859][ T7623] netlink: set zone limit has 8 unknown bytes [ 178.502872][ T7654] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1216'. [ 178.588483][ T7655] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 178.595145][ T7655] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 178.754411][ T7659] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1217'. [ 179.015735][ T7664] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1220'. [ 179.138750][ T7664] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 179.145417][ T7664] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 179.509778][ T7689] netlink: 'syz.1.1229': attribute type 10 has an invalid length. [ 179.537734][ T7689] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1229'. [ 179.574686][ T7689] device batadv0 entered promiscuous mode [ 179.581071][ T7689] bridge0: port 4(batadv0) entered blocking state [ 179.595981][ T7689] bridge0: port 4(batadv0) entered disabled state [ 179.610215][ T7689] bridge0: port 4(batadv0) entered blocking state [ 179.616820][ T7689] bridge0: port 4(batadv0) entered forwarding state [ 179.663431][ T7695] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.1230'. [ 179.818471][ T7691] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 179.827898][ T7691] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 180.006473][ T4269] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 180.016117][ T4269] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 180.208075][ T7716] netlink: 'syz.3.1241': attribute type 10 has an invalid length. [ 180.228762][ T7716] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1241'. [ 180.239825][ T7716] device batadv0 entered promiscuous mode [ 180.251852][ T7716] bridge0: port 4(batadv0) entered blocking state [ 180.312451][ T7716] bridge0: port 4(batadv0) entered disabled state [ 180.338477][ T7716] bridge0: port 4(batadv0) entered blocking state [ 180.345097][ T7716] bridge0: port 4(batadv0) entered forwarding state [ 180.574230][ T7729] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 180.582117][ T7729] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 180.653771][ T1219] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 180.663264][ T1219] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 181.385384][ T7759] __nla_validate_parse: 1 callbacks suppressed [ 181.385414][ T7759] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.1260'. [ 181.508474][ T7766] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 181.518236][ T7766] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 182.022149][ T7781] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1266'. [ 182.154421][ T7781] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 182.164425][ T7781] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 182.837973][ T7801] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1274'. [ 183.097510][ T7805] netlink: 'syz.1.1276': attribute type 4 has an invalid length. [ 183.130345][ T7805] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1276'. [ 184.648995][ T7847] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.1289'. [ 184.739866][ T7845] netlink: 'syz.2.1290': attribute type 4 has an invalid length. [ 184.758943][ T7845] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1290'. [ 184.780941][ T7847] net_ratelimit: 2 callbacks suppressed [ 184.780959][ T7847] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 184.793160][ T7847] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 186.653767][ T7890] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1306'. [ 186.780316][ T7890] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 186.786914][ T7890] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 187.063635][ T7897] FAULT_INJECTION: forcing a failure. [ 187.063635][ T7897] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 187.135911][ T7897] CPU: 0 PID: 7897 Comm: syz.4.1309 Not tainted 5.15.189-syzkaller #0 [ 187.144122][ T7897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 187.154201][ T7897] Call Trace: [ 187.157500][ T7897] [ 187.160461][ T7897] dump_stack_lvl+0x168/0x230 [ 187.165176][ T7897] ? show_regs_print_info+0x20/0x20 [ 187.170398][ T7897] ? load_image+0x3b0/0x3b0 [ 187.174922][ T7897] ? __lock_acquire+0x7c60/0x7c60 [ 187.179958][ T7897] ? __vmalloc_node_range+0x2dd/0x8b0 [ 187.185340][ T7897] ? copy_process+0x5b3/0x3e00 [ 187.190107][ T7897] ? kernel_clone+0x219/0x930 [ 187.194793][ T7897] should_fail+0x38c/0x4c0 [ 187.199228][ T7897] prepare_alloc_pages+0x1e4/0x5f0 [ 187.204363][ T7897] __alloc_pages+0x10e/0x470 [ 187.209100][ T7897] ? zone_statistics+0x170/0x170 [ 187.214064][ T7897] ? alloc_pages+0x438/0x550 [ 187.218664][ T7897] __vmalloc_node_range+0x4b2/0x8b0 [ 187.223883][ T7897] dup_task_struct+0x3f5/0xb30 [ 187.228657][ T7897] ? copy_process+0x5b3/0x3e00 [ 187.233616][ T7897] copy_process+0x5b3/0x3e00 [ 187.238304][ T7897] ? __lock_acquire+0x13ad/0x7c60 [ 187.243355][ T7897] ? __pidfd_prepare+0x140/0x140 [ 187.248301][ T7897] ? perf_trace_lock_acquire+0x329/0x3c0 [ 187.253965][ T7897] kernel_clone+0x219/0x930 [ 187.258477][ T7897] ? __lock_acquire+0x7c60/0x7c60 [ 187.263520][ T7897] ? create_io_thread+0x130/0x130 [ 187.268558][ T7897] ? __context_tracking_exit+0x4c/0x80 [ 187.274034][ T7897] __x64_sys_clone+0x170/0x1c0 [ 187.278810][ T7897] ? __ia32_sys_vfork+0xf0/0xf0 [ 187.283677][ T7897] ? lockdep_hardirqs_on+0x94/0x140 [ 187.288882][ T7897] do_syscall_64+0x4c/0xa0 [ 187.293305][ T7897] ? clear_bhb_loop+0x30/0x80 [ 187.297988][ T7897] ? clear_bhb_loop+0x30/0x80 [ 187.302681][ T7897] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 187.308583][ T7897] RIP: 0033:0x7f83fd827be9 [ 187.313011][ T7897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.332630][ T7897] RSP: 002b:00007f83fba8efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 187.341055][ T7897] RAX: ffffffffffffffda RBX: 00007f83fda4efa0 RCX: 00007f83fd827be9 [ 187.349032][ T7897] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040800000 [ 187.357136][ T7897] RBP: 00007f83fba8f090 R08: 0000000000000000 R09: 0000000000000000 [ 187.365130][ T7897] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 187.373140][ T7897] R13: 00007f83fda4f038 R14: 00007f83fda4efa0 R15: 00007ffc74066168 [ 187.381141][ T7897] [ 190.348452][ T7986] netlink: 'syz.1.1340': attribute type 10 has an invalid length. [ 191.152398][ T8004] IPv6: Can't replace route, no match found [ 194.008404][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.014977][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.343755][ T8119] netlink: 'syz.2.1387': attribute type 21 has an invalid length. [ 195.386095][ T8119] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.1387'. [ 195.440171][ T8121] Dead loop on virtual device ip6_vti0, fix it urgently! [ 196.487378][ T8143] FAULT_INJECTION: forcing a failure. [ 196.487378][ T8143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.576447][ T8146] netlink: 'syz.3.1397': attribute type 40 has an invalid length. [ 196.615731][ T8143] CPU: 1 PID: 8143 Comm: syz.2.1398 Not tainted 5.15.189-syzkaller #0 [ 196.623960][ T8143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 196.634058][ T8143] Call Trace: [ 196.637376][ T8143] [ 196.640338][ T8143] dump_stack_lvl+0x168/0x230 [ 196.645077][ T8143] ? show_regs_print_info+0x20/0x20 [ 196.650409][ T8143] ? load_image+0x3b0/0x3b0 [ 196.654987][ T8143] ? __lock_acquire+0x7c60/0x7c60 [ 196.660069][ T8143] should_fail+0x38c/0x4c0 [ 196.664539][ T8143] _copy_from_user+0x2e/0x170 [ 196.669262][ T8143] __copy_msghdr_from_user+0xaf/0x5e0 [ 196.674676][ T8143] ? verify_lock_unused+0x140/0x140 [ 196.679927][ T8143] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 196.685294][ T8143] ? trace_event_raw_event_lock+0x250/0x250 [ 196.691384][ T8143] ___sys_sendmsg+0x156/0x260 [ 196.696148][ T8143] ? __sys_sendmsg+0x250/0x250 [ 196.701172][ T8143] ? __fdget+0x18b/0x210 [ 196.705492][ T8143] __se_sys_sendmsg+0x190/0x250 [ 196.710418][ T8143] ? __x64_sys_sendmsg+0x80/0x80 [ 196.715402][ T8143] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 196.721479][ T8143] ? lockdep_hardirqs_on+0x94/0x140 [ 196.726741][ T8143] do_syscall_64+0x4c/0xa0 [ 196.731198][ T8143] ? clear_bhb_loop+0x30/0x80 [ 196.735917][ T8143] ? clear_bhb_loop+0x30/0x80 [ 196.740642][ T8143] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 196.746579][ T8143] RIP: 0033:0x7febfc9c6be9 [ 196.751031][ T8143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.770670][ T8143] RSP: 002b:00007febfac2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.779134][ T8143] RAX: ffffffffffffffda RBX: 00007febfcbedfa0 RCX: 00007febfc9c6be9 [ 196.787138][ T8143] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000008 [ 196.795147][ T8143] RBP: 00007febfac2e090 R08: 0000000000000000 R09: 0000000000000000 [ 196.803161][ T8143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.811173][ T8143] R13: 00007febfcbee038 R14: 00007febfcbedfa0 R15: 00007ffe77be27a8 [ 196.819250][ T8143] [ 197.042321][ T8146] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.278152][ T8157] netlink: 'syz.0.1402': attribute type 21 has an invalid length. [ 197.344652][ T8157] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1402'. [ 197.425204][ T8169] FAULT_INJECTION: forcing a failure. [ 197.425204][ T8169] name failslab, interval 1, probability 0, space 0, times 0 [ 197.448926][ T8169] CPU: 0 PID: 8169 Comm: syz.4.1406 Not tainted 5.15.189-syzkaller #0 [ 197.457142][ T8169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 197.467314][ T8169] Call Trace: [ 197.470622][ T8169] [ 197.473579][ T8169] dump_stack_lvl+0x168/0x230 [ 197.478296][ T8169] ? show_regs_print_info+0x20/0x20 [ 197.483523][ T8169] ? load_image+0x3b0/0x3b0 [ 197.488059][ T8169] should_fail+0x38c/0x4c0 [ 197.492500][ T8169] should_failslab+0x5/0x20 [ 197.497020][ T8169] slab_pre_alloc_hook+0x51/0xc0 [ 197.501979][ T8169] ? skb_clone+0x1bd/0x350 [ 197.506416][ T8169] kmem_cache_alloc+0x3d/0x290 [ 197.511215][ T8169] skb_clone+0x1bd/0x350 [ 197.515478][ T8169] __netlink_deliver_tap+0x3cd/0x7c0 [ 197.520798][ T8169] netlink_deliver_tap+0x16c/0x180 [ 197.526198][ T8169] netlink_unicast+0x74f/0x920 [ 197.531001][ T8169] netlink_sendmsg+0x8ab/0xbc0 [ 197.535802][ T8169] ? netlink_getsockopt+0x560/0x560 [ 197.541028][ T8169] ? aa_sock_msg_perm+0x94/0x150 [ 197.545991][ T8169] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 197.551304][ T8169] ? security_socket_sendmsg+0x7c/0xa0 [ 197.556788][ T8169] ? netlink_getsockopt+0x560/0x560 [ 197.562017][ T8169] ____sys_sendmsg+0x5a2/0x8c0 [ 197.566807][ T8169] ? memset+0x1e/0x40 [ 197.570818][ T8169] ? __sys_sendmsg_sock+0x30/0x30 [ 197.575878][ T8169] ? import_iovec+0x6f/0xa0 [ 197.580412][ T8169] ___sys_sendmsg+0x1f0/0x260 [ 197.585127][ T8169] ? __sys_sendmsg+0x250/0x250 [ 197.589933][ T8169] ? vfs_write+0x84d/0xd00 [ 197.594460][ T8169] ? __fdget+0x18b/0x210 [ 197.598802][ T8169] __se_sys_sendmsg+0x190/0x250 [ 197.603670][ T8169] ? __x64_sys_sendmsg+0x80/0x80 [ 197.608611][ T8169] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 197.614613][ T8169] ? lockdep_hardirqs_on+0x94/0x140 [ 197.619815][ T8169] do_syscall_64+0x4c/0xa0 [ 197.624234][ T8169] ? clear_bhb_loop+0x30/0x80 [ 197.628916][ T8169] ? clear_bhb_loop+0x30/0x80 [ 197.633588][ T8169] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 197.639484][ T8169] RIP: 0033:0x7f83fd827be9 [ 197.643903][ T8169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.663515][ T8169] RSP: 002b:00007f83fba8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.671934][ T8169] RAX: ffffffffffffffda RBX: 00007f83fda4efa0 RCX: 00007f83fd827be9 [ 197.680003][ T8169] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 197.687971][ T8169] RBP: 00007f83fba8f090 R08: 0000000000000000 R09: 0000000000000000 [ 197.695945][ T8169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.704005][ T8169] R13: 00007f83fda4f038 R14: 00007f83fda4efa0 R15: 00007ffc74066168 [ 197.711985][ T8169] [ 197.717936][ T8169] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1406'. [ 198.870708][ T8190] device syzkaller0 entered promiscuous mode [ 199.434761][ T8202] netlink: 'syz.2.1418': attribute type 21 has an invalid length. [ 199.455873][ T8202] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.1418'. [ 200.672376][ T8235] netlink: 'syz.3.1430': attribute type 16 has an invalid length. [ 200.703039][ T8235] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1430'. [ 200.811885][ T8244] FAULT_INJECTION: forcing a failure. [ 200.811885][ T8244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.911869][ T8244] CPU: 0 PID: 8244 Comm: syz.0.1434 Not tainted 5.15.189-syzkaller #0 [ 200.920081][ T8244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 200.930162][ T8244] Call Trace: [ 200.933459][ T8244] [ 200.936398][ T8244] dump_stack_lvl+0x168/0x230 [ 200.941613][ T8244] ? show_regs_print_info+0x20/0x20 [ 200.946816][ T8244] ? load_image+0x3b0/0x3b0 [ 200.951332][ T8244] ? __lock_acquire+0x7c60/0x7c60 [ 200.956360][ T8244] should_fail+0x38c/0x4c0 [ 200.960780][ T8244] _copy_from_user+0x2e/0x170 [ 200.965467][ T8244] bpf_test_init+0x136/0x1b0 [ 200.970058][ T8244] bpf_prog_test_run_skb+0x181/0x1180 [ 200.975432][ T8244] ? __fget_files+0x40f/0x480 [ 200.980119][ T8244] ? cpu_online+0x60/0x60 [ 200.984531][ T8244] bpf_prog_test_run+0x31e/0x390 [ 200.989475][ T8244] __sys_bpf+0x535/0x670 [ 200.993810][ T8244] ? bpf_link_show_fdinfo+0x340/0x340 [ 200.999182][ T8244] ? rcu_nmi_exit+0x6f/0xf0 [ 201.003694][ T8244] ? vtime_user_exit+0x2dc/0x400 [ 201.008638][ T8244] __x64_sys_bpf+0x78/0x90 [ 201.013055][ T8244] do_syscall_64+0x4c/0xa0 [ 201.017468][ T8244] ? clear_bhb_loop+0x30/0x80 [ 201.022314][ T8244] ? clear_bhb_loop+0x30/0x80 [ 201.026990][ T8244] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 201.032888][ T8244] RIP: 0033:0x7faa66c57be9 [ 201.037393][ T8244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.057012][ T8244] RSP: 002b:00007faa64ebf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 201.065471][ T8244] RAX: ffffffffffffffda RBX: 00007faa66e7efa0 RCX: 00007faa66c57be9 [ 201.073444][ T8244] RDX: 0000000000000050 RSI: 0000200000000880 RDI: 000000000000000a [ 201.081418][ T8244] RBP: 00007faa64ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 201.089416][ T8244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.097386][ T8244] R13: 00007faa66e7f038 R14: 00007faa66e7efa0 R15: 00007ffdb01d2db8 [ 201.105372][ T8244] [ 201.925330][ T8271] Dead loop on virtual device ip6_vti0, fix it urgently! [ 202.506038][ T8280] FAULT_INJECTION: forcing a failure. [ 202.506038][ T8280] name failslab, interval 1, probability 0, space 0, times 0 [ 202.561255][ T8280] CPU: 1 PID: 8280 Comm: syz.4.1448 Not tainted 5.15.189-syzkaller #0 [ 202.569494][ T8280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 202.579607][ T8280] Call Trace: [ 202.583016][ T8280] [ 202.585992][ T8280] dump_stack_lvl+0x168/0x230 [ 202.590907][ T8280] ? show_regs_print_info+0x20/0x20 [ 202.596152][ T8280] ? load_image+0x3b0/0x3b0 [ 202.600750][ T8280] ? __lock_acquire+0x7c60/0x7c60 [ 202.605830][ T8280] should_fail+0x38c/0x4c0 [ 202.610297][ T8280] should_failslab+0x5/0x20 [ 202.614828][ T8280] slab_pre_alloc_hook+0x51/0xc0 [ 202.619806][ T8280] __kmalloc+0x6b/0x330 [ 202.623986][ T8280] ? sk_prot_alloc+0xe7/0x210 [ 202.628711][ T8280] sk_prot_alloc+0xe7/0x210 [ 202.633249][ T8280] ? sk_alloc+0x1d/0x310 [ 202.637550][ T8280] sk_alloc+0x2f/0x310 [ 202.637592][ T8280] bpf_prog_test_run_skb+0x240/0x1180 [ 202.637624][ T8280] ? __fget_files+0x40f/0x480 [ 202.637674][ T8280] ? cpu_online+0x60/0x60 [ 202.656262][ T8280] bpf_prog_test_run+0x31e/0x390 [ 202.661229][ T8280] __sys_bpf+0x535/0x670 [ 202.665504][ T8280] ? bpf_link_show_fdinfo+0x340/0x340 [ 202.670914][ T8280] ? vtime_user_exit+0x2dc/0x400 [ 202.675880][ T8280] __x64_sys_bpf+0x78/0x90 [ 202.680394][ T8280] do_syscall_64+0x4c/0xa0 [ 202.684819][ T8280] ? clear_bhb_loop+0x30/0x80 [ 202.689499][ T8280] ? clear_bhb_loop+0x30/0x80 [ 202.694186][ T8280] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 202.700096][ T8280] RIP: 0033:0x7f83fd827be9 [ 202.704523][ T8280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.724398][ T8280] RSP: 002b:00007f83fba8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 202.732834][ T8280] RAX: ffffffffffffffda RBX: 00007f83fda4efa0 RCX: 00007f83fd827be9 [ 202.740813][ T8280] RDX: 0000000000000050 RSI: 0000200000000680 RDI: 000000000000000a [ 202.748800][ T8280] RBP: 00007f83fba8f090 R08: 0000000000000000 R09: 0000000000000000 [ 202.756776][ T8280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.764837][ T8280] R13: 00007f83fda4f038 R14: 00007f83fda4efa0 R15: 00007ffc74066168 [ 202.772850][ T8280] [ 203.109993][ T8290] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1454'. [ 204.152257][ T8323] netlink: 16625 bytes leftover after parsing attributes in process `syz.2.1467'. [ 204.282944][ T8328] netlink: 'syz.2.1469': attribute type 3 has an invalid length. [ 204.304511][ T8328] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1469'. [ 205.502037][ T8368] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1485'. [ 206.627216][ T8399] netlink: 'syz.1.1495': attribute type 21 has an invalid length. [ 206.709254][ T8399] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1495'. [ 207.194696][ T8420] netlink: 'syz.3.1502': attribute type 1 has an invalid length. [ 207.202495][ T8420] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1502'. [ 208.393634][ T8448] FAULT_INJECTION: forcing a failure. [ 208.393634][ T8448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.523603][ T8448] CPU: 0 PID: 8448 Comm: syz.4.1514 Not tainted 5.15.189-syzkaller #0 [ 208.531816][ T8448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 208.541984][ T8448] Call Trace: [ 208.545291][ T8448] [ 208.548249][ T8448] dump_stack_lvl+0x168/0x230 [ 208.552959][ T8448] ? show_regs_print_info+0x20/0x20 [ 208.558190][ T8448] ? dump_stack+0x5/0x20 [ 208.562463][ T8448] ? dump_stack_lvl+0xa/0x230 [ 208.567169][ T8448] should_fail+0x38c/0x4c0 [ 208.571603][ T8448] _copy_from_user+0x2e/0x170 [ 208.576294][ T8448] __copy_msghdr_from_user+0xaf/0x5e0 [ 208.581680][ T8448] ? lockdep_hardirqs_on+0x94/0x140 [ 208.586895][ T8448] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 208.592193][ T8448] ? kasan_check_range+0x81/0x290 [ 208.597232][ T8448] ___sys_sendmsg+0x156/0x260 [ 208.601924][ T8448] ? __sys_sendmsg+0x250/0x250 [ 208.606787][ T8448] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 208.612520][ T8448] ? __fdget+0x18b/0x210 [ 208.616766][ T8448] __se_sys_sendmsg+0x190/0x250 [ 208.621617][ T8448] ? __x64_sys_sendmsg+0x80/0x80 [ 208.626654][ T8448] do_syscall_64+0x4c/0xa0 [ 208.631166][ T8448] ? clear_bhb_loop+0x30/0x80 [ 208.635837][ T8448] ? clear_bhb_loop+0x30/0x80 [ 208.640530][ T8448] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 208.646428][ T8448] RIP: 0033:0x7f83fd827be9 [ 208.650843][ T8448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.670460][ T8448] RSP: 002b:00007f83fba8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.678874][ T8448] RAX: ffffffffffffffda RBX: 00007f83fda4efa0 RCX: 00007f83fd827be9 [ 208.686843][ T8448] RDX: 00000000200048cc RSI: 0000200000000240 RDI: 0000000000000009 [ 208.694899][ T8448] RBP: 00007f83fba8f090 R08: 0000000000000000 R09: 0000000000000000 [ 208.702868][ T8448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.711025][ T8448] R13: 00007f83fda4f038 R14: 00007f83fda4efa0 R15: 00007ffc74066168 [ 208.719096][ T8448] [ 208.782560][ T8457] netlink: 'syz.4.1514': attribute type 1 has an invalid length. [ 208.833523][ T8457] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1514'. [ 208.890855][ T8453] netlink: 38583 bytes leftover after parsing attributes in process `syz.1.1516'. [ 209.098923][ T8455] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 209.277688][ T8475] netlink: 'syz.1.1522': attribute type 1 has an invalid length. [ 209.324375][ T8475] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1522'. [ 209.596400][ T8482] netlink: 'syz.3.1525': attribute type 21 has an invalid length. [ 209.701399][ T8482] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1525'. [ 212.078108][ T8533] netlink: 'syz.0.1546': attribute type 10 has an invalid length. [ 212.132837][ T8533] device wlan1 entered promiscuous mode [ 212.188567][ T8533] team0: Port device wlan1 added [ 212.194106][ T8536] netlink: 'syz.0.1546': attribute type 21 has an invalid length. [ 212.466678][ T8551] netlink: 'syz.2.1549': attribute type 1 has an invalid length. [ 212.580198][ T8551] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1549'. [ 212.974544][ T8561] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1554'. [ 214.061178][ T8582] FAULT_INJECTION: forcing a failure. [ 214.061178][ T8582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.174403][ T8582] CPU: 0 PID: 8582 Comm: syz.1.1562 Not tainted 5.15.189-syzkaller #0 [ 214.182616][ T8582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 214.192702][ T8582] Call Trace: [ 214.196013][ T8582] [ 214.198965][ T8582] dump_stack_lvl+0x168/0x230 [ 214.203681][ T8582] ? show_regs_print_info+0x20/0x20 [ 214.208911][ T8582] ? load_image+0x3b0/0x3b0 [ 214.213450][ T8582] ? __lock_acquire+0x7c60/0x7c60 [ 214.218500][ T8582] should_fail+0x38c/0x4c0 [ 214.223057][ T8582] _copy_from_user+0x2e/0x170 [ 214.227747][ T8582] __sys_bpf+0x21b/0x670 [ 214.232007][ T8582] ? bpf_link_show_fdinfo+0x340/0x340 [ 214.237477][ T8582] ? rcu_nmi_exit+0x6f/0xf0 [ 214.241995][ T8582] ? vtime_user_exit+0x2dc/0x400 [ 214.246937][ T8582] __x64_sys_bpf+0x78/0x90 [ 214.251351][ T8582] do_syscall_64+0x4c/0xa0 [ 214.255772][ T8582] ? clear_bhb_loop+0x30/0x80 [ 214.260446][ T8582] ? clear_bhb_loop+0x30/0x80 [ 214.265121][ T8582] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 214.271018][ T8582] RIP: 0033:0x7fbafa720be9 [ 214.275434][ T8582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.295037][ T8582] RSP: 002b:00007fbaf8988038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 214.303453][ T8582] RAX: ffffffffffffffda RBX: 00007fbafa947fa0 RCX: 00007fbafa720be9 [ 214.311433][ T8582] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 214.319400][ T8582] RBP: 00007fbaf8988090 R08: 0000000000000000 R09: 0000000000000000 [ 214.327385][ T8582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.335358][ T8582] R13: 00007fbafa948038 R14: 00007fbafa947fa0 R15: 00007ffc684c02c8 [ 214.343433][ T8582] [ 214.848847][ T8606] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1573'. [ 214.938249][ T8606] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1573'. [ 214.983495][ T8603] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1573'. [ 215.068269][ T8604] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1572'. [ 218.754504][ T8644] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1588'. [ 220.075952][ T8677] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1598'. [ 220.902969][ T8699] Dead loop on virtual device ip6_vti0, fix it urgently! [ 221.142449][ T8709] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1610'. [ 222.129557][ T8725] netlink: 'syz.3.1615': attribute type 21 has an invalid length. [ 222.152049][ T8725] netlink: 'syz.3.1615': attribute type 1 has an invalid length. [ 222.175015][ T8726] netlink: 'syz.0.1616': attribute type 21 has an invalid length. [ 222.183063][ T8726] netlink: 'syz.0.1616': attribute type 1 has an invalid length. [ 222.663170][ T8745] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1624'. [ 222.697965][ T8749] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1625'. [ 222.836003][ T8749] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 222.842521][ T8749] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 223.757952][ T8764] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1631'. [ 224.065689][ T8778] Dead loop on virtual device ip6_vti0, fix it urgently! [ 224.206607][ T8775] netlink: 'syz.0.1632': attribute type 21 has an invalid length. [ 224.274921][ T8775] netlink: 'syz.0.1632': attribute type 1 has an invalid length. [ 224.562387][ T8791] FAULT_INJECTION: forcing a failure. [ 224.562387][ T8791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.618629][ T8791] CPU: 0 PID: 8791 Comm: syz.4.1650 Not tainted 5.15.189-syzkaller #0 [ 224.626847][ T8791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 224.636933][ T8791] Call Trace: [ 224.640259][ T8791] [ 224.643251][ T8791] dump_stack_lvl+0x168/0x230 [ 224.648063][ T8791] ? show_regs_print_info+0x20/0x20 [ 224.653296][ T8791] ? load_image+0x3b0/0x3b0 [ 224.657946][ T8791] ? __lock_acquire+0x7c60/0x7c60 [ 224.662996][ T8791] ? lockdep_hardirqs_on+0x94/0x140 [ 224.668246][ T8791] should_fail+0x38c/0x4c0 [ 224.672693][ T8791] _copy_to_user+0x2e/0x130 [ 224.677251][ T8791] simple_read_from_buffer+0xe3/0x150 [ 224.682656][ T8791] proc_fail_nth_read+0x19a/0x210 [ 224.687706][ T8791] ? proc_fault_inject_write+0x2f0/0x2f0 [ 224.693373][ T8791] ? fsnotify_perm+0x254/0x560 [ 224.698164][ T8791] ? proc_fault_inject_write+0x2f0/0x2f0 [ 224.703824][ T8791] vfs_read+0x2f6/0xcf0 [ 224.708039][ T8791] ? kernel_read+0x1e0/0x1e0 [ 224.712661][ T8791] ? __fget_files+0x40f/0x480 [ 224.717384][ T8791] ? mutex_lock_nested+0x17/0x20 [ 224.722348][ T8791] ? __fdget_pos+0x2bf/0x370 [ 224.726969][ T8791] ? ksys_read+0x71/0x250 [ 224.731315][ T8791] ksys_read+0x14d/0x250 [ 224.735573][ T8791] ? vfs_write+0xd00/0xd00 [ 224.740001][ T8791] ? syscall_enter_from_user_mode+0x2a/0x70 [ 224.745929][ T8791] do_syscall_64+0x4c/0xa0 [ 224.750372][ T8791] ? clear_bhb_loop+0x30/0x80 [ 224.755056][ T8791] ? clear_bhb_loop+0x30/0x80 [ 224.759734][ T8791] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 224.765632][ T8791] RIP: 0033:0x7f83fd8265fc [ 224.770044][ T8791] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 224.789647][ T8791] RSP: 002b:00007f83fba8f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 224.798060][ T8791] RAX: ffffffffffffffda RBX: 00007f83fda4efa0 RCX: 00007f83fd8265fc [ 224.806033][ T8791] RDX: 000000000000000f RSI: 00007f83fba8f0a0 RDI: 0000000000000008 [ 224.813998][ T8791] RBP: 00007f83fba8f090 R08: 0000000000000000 R09: 0000000000000000 [ 224.821964][ T8791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.829927][ T8791] R13: 00007f83fda4f038 R14: 00007f83fda4efa0 R15: 00007ffc74066168 [ 224.837904][ T8791] [ 224.907220][ T8801] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1644'. [ 225.035192][ T8801] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 225.041776][ T8801] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 226.222397][ T8827] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1653'. [ 226.308894][ T8836] Dead loop on virtual device ip6_vti0, fix it urgently! [ 226.346924][ T8839] FAULT_INJECTION: forcing a failure. [ 226.346924][ T8839] name failslab, interval 1, probability 0, space 0, times 0 [ 226.366059][ T8839] CPU: 1 PID: 8839 Comm: syz.2.1657 Not tainted 5.15.189-syzkaller #0 [ 226.374278][ T8839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 226.384363][ T8839] Call Trace: [ 226.387669][ T8839] [ 226.390624][ T8839] dump_stack_lvl+0x168/0x230 [ 226.395348][ T8839] ? show_regs_print_info+0x20/0x20 [ 226.400584][ T8839] ? load_image+0x3b0/0x3b0 [ 226.405230][ T8839] ? __might_sleep+0xf0/0xf0 [ 226.409847][ T8839] ? __lock_acquire+0x7c60/0x7c60 [ 226.414905][ T8839] should_fail+0x38c/0x4c0 [ 226.419357][ T8839] should_failslab+0x5/0x20 [ 226.423930][ T8839] slab_pre_alloc_hook+0x51/0xc0 [ 226.428888][ T8839] __kmalloc_node_track_caller+0x68/0x3a0 [ 226.434622][ T8839] ? alloc_skb_with_frags+0xa7/0x730 [ 226.439922][ T8839] ? kmem_cache_alloc_node+0x162/0x2d0 [ 226.445397][ T8839] ? __alloc_skb+0xf4/0x750 [ 226.449925][ T8839] ? alloc_skb_with_frags+0xa7/0x730 [ 226.455237][ T8839] __alloc_skb+0x22c/0x750 [ 226.459684][ T8839] alloc_skb_with_frags+0xa7/0x730 [ 226.464824][ T8839] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 226.471776][ T8839] sock_alloc_send_pskb+0x853/0x980 [ 226.477013][ T8839] ? sock_kzfree_s+0x50/0x50 [ 226.481623][ T8839] ? do_raw_spin_lock+0x11d/0x280 [ 226.486666][ T8839] ? __rwlock_init+0x140/0x140 [ 226.491549][ T8839] ? do_raw_spin_unlock+0x11d/0x230 [ 226.496759][ T8839] unix_dgram_sendmsg+0x5ef/0x1890 [ 226.501900][ T8839] ? aa_sk_perm+0x7b4/0x8f0 [ 226.506444][ T8839] ? unix_dgram_poll+0x660/0x660 [ 226.511389][ T8839] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 226.517825][ T8839] ? aa_sock_msg_perm+0x94/0x150 [ 226.522805][ T8839] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 226.528104][ T8839] ? security_socket_sendmsg+0x7c/0xa0 [ 226.533572][ T8839] ? unix_dgram_poll+0x660/0x660 [ 226.538696][ T8839] ____sys_sendmsg+0x5a2/0x8c0 [ 226.543480][ T8839] ? memset+0x1e/0x40 [ 226.547470][ T8839] ? __sys_sendmsg_sock+0x30/0x30 [ 226.552516][ T8839] ? import_iovec+0x6f/0xa0 [ 226.557039][ T8839] ___sys_sendmsg+0x1f0/0x260 [ 226.561741][ T8839] ? __sys_sendmsg+0x250/0x250 [ 226.566529][ T8839] ? vfs_write+0x84d/0xd00 [ 226.570978][ T8839] ? __fdget+0x18b/0x210 [ 226.575235][ T8839] __se_sys_sendmsg+0x190/0x250 [ 226.580100][ T8839] ? __x64_sys_sendmsg+0x80/0x80 [ 226.585051][ T8839] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 226.591062][ T8839] ? lockdep_hardirqs_on+0x94/0x140 [ 226.596276][ T8839] do_syscall_64+0x4c/0xa0 [ 226.600701][ T8839] ? clear_bhb_loop+0x30/0x80 [ 226.605388][ T8839] ? clear_bhb_loop+0x30/0x80 [ 226.610094][ T8839] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 226.616012][ T8839] RIP: 0033:0x7febfc9c6be9 [ 226.620446][ T8839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.640074][ T8839] RSP: 002b:00007febfac2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.648608][ T8839] RAX: ffffffffffffffda RBX: 00007febfcbedfa0 RCX: 00007febfc9c6be9 [ 226.656586][ T8839] RDX: 0000000000000000 RSI: 0000200000000b40 RDI: 0000000000000004 [ 226.664572][ T8839] RBP: 00007febfac2e090 R08: 0000000000000000 R09: 0000000000000000 [ 226.672662][ T8839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.680639][ T8839] R13: 00007febfcbee038 R14: 00007febfcbedfa0 R15: 00007ffe77be27a8 [ 226.688638][ T8839] [ 227.193466][ T8854] netlink: 'syz.1.1662': attribute type 6 has an invalid length. [ 228.155000][ T8866] netlink: 'syz.4.1666': attribute type 21 has an invalid length. [ 228.237004][ T8866] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.1666'. [ 228.341811][ T8866] netlink: 'syz.4.1666': attribute type 1 has an invalid length. [ 228.359919][ T8874] netlink: 'syz.2.1679': attribute type 6 has an invalid length. [ 229.853944][ T8905] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1683'. [ 230.091221][ T8913] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 230.097720][ T8913] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 230.350955][ T8926] netlink: 'syz.0.1688': attribute type 21 has an invalid length. [ 230.433410][ T8926] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1688'. [ 230.555366][ T8926] netlink: 'syz.0.1688': attribute type 1 has an invalid length. [ 230.747031][ T8933] netlink: 'syz.2.1691': attribute type 4 has an invalid length. [ 230.780913][ T8933] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1691'. [ 231.095091][ T8952] Dead loop on virtual device ip6_vti0, fix it urgently! [ 232.120288][ T8964] netlink: 'syz.1.1702': attribute type 10 has an invalid length. [ 232.161162][ T8964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.245151][ T8964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.452391][ T8964] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 232.504396][ T8973] netlink: 'syz.1.1702': attribute type 10 has an invalid length. [ 232.655844][ T8972] netlink: 'syz.3.1706': attribute type 4 has an invalid length. [ 232.718041][ T8972] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1706'. [ 232.914413][ T8991] netlink: 'syz.4.1709': attribute type 21 has an invalid length. [ 233.035955][ T8991] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.1709'. [ 233.089127][ T8991] netlink: 'syz.4.1709': attribute type 1 has an invalid length. [ 233.244873][ T9001] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1714'. [ 234.232335][ T9027] netlink: 'syz.2.1725': attribute type 10 has an invalid length. [ 234.310192][ T9027] bridge0: port 3(team0) entered disabled state [ 234.411558][ T9027] bridge0: port 3(team0) entered disabled state [ 234.483236][ T9027] device team_slave_0 left promiscuous mode [ 234.606445][ T9027] team0 (unregistering): Port device team_slave_0 removed [ 234.642195][ T9027] device team_slave_1 left promiscuous mode [ 234.683000][ T9027] team0 (unregistering): Port device team_slave_1 removed [ 235.202641][ T9046] netlink: 'syz.3.1730': attribute type 21 has an invalid length. [ 235.235245][ T9046] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1730'. [ 235.251711][ T9046] netlink: 'syz.3.1730': attribute type 1 has an invalid length. [ 235.375978][ T9054] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1734'. [ 235.469799][ T9054] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 235.477072][ T9054] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 235.780369][ T9066] netlink: 'syz.0.1739': attribute type 10 has an invalid length. [ 235.923138][ T9072] FAULT_INJECTION: forcing a failure. [ 235.923138][ T9072] name failslab, interval 1, probability 0, space 0, times 0 [ 235.948564][ T9072] CPU: 1 PID: 9072 Comm: syz.1.1743 Not tainted 5.15.189-syzkaller #0 [ 235.957097][ T9072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 235.967280][ T9072] Call Trace: [ 235.970586][ T9072] [ 235.973545][ T9072] dump_stack_lvl+0x168/0x230 [ 235.978261][ T9072] ? show_regs_print_info+0x20/0x20 [ 235.983491][ T9072] ? load_image+0x3b0/0x3b0 [ 235.988133][ T9072] ? __might_sleep+0xf0/0xf0 [ 235.992825][ T9072] ? __lock_acquire+0x7c60/0x7c60 [ 235.997877][ T9072] should_fail+0x38c/0x4c0 [ 236.002323][ T9072] should_failslab+0x5/0x20 [ 236.006845][ T9072] slab_pre_alloc_hook+0x51/0xc0 [ 236.011815][ T9072] kmem_cache_alloc_trace+0x47/0x2a0 [ 236.017134][ T9072] ? tcp_sendmsg_fastopen+0x1d5/0x600 [ 236.022713][ T9072] tcp_sendmsg_fastopen+0x1d5/0x600 [ 236.027977][ T9072] tcp_sendmsg_locked+0x3097/0x3590 [ 236.033301][ T9072] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 236.039477][ T9072] ? lockdep_hardirqs_on+0x94/0x140 [ 236.044690][ T9072] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 236.050859][ T9072] ? mark_lock+0x94/0x320 [ 236.055222][ T9072] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 236.061326][ T9072] ? lock_chain_count+0x20/0x20 [ 236.066298][ T9072] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 236.072301][ T9072] ? tcp_free_fastopen_req+0x70/0x70 [ 236.077610][ T9072] ? lock_sock_nested+0x68/0x100 [ 236.082570][ T9072] ? inet_send_prepare+0x260/0x260 [ 236.087694][ T9072] ? inet_send_prepare+0x260/0x260 [ 236.092817][ T9072] tcp_sendmsg+0x2b/0x40 [ 236.097081][ T9072] ____sys_sendmsg+0x5a2/0x8c0 [ 236.101973][ T9072] ? memset+0x1e/0x40 [ 236.105978][ T9072] ? __sys_sendmsg_sock+0x30/0x30 [ 236.111173][ T9072] ? import_iovec+0x6f/0xa0 [ 236.115695][ T9072] ___sys_sendmsg+0x1f0/0x260 [ 236.120500][ T9072] ? __sys_sendmsg+0x250/0x250 [ 236.125396][ T9072] ? ktime_get_real_ts64+0x420/0x420 [ 236.130732][ T9072] ? __fdget+0x18b/0x210 [ 236.134998][ T9072] __se_sys_sendmsg+0x190/0x250 [ 236.139859][ T9072] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 236.146035][ T9072] ? __x64_sys_sendmsg+0x80/0x80 [ 236.151112][ T9072] ? syscall_enter_from_user_mode+0x2a/0x70 [ 236.157030][ T9072] do_syscall_64+0x4c/0xa0 [ 236.161574][ T9072] ? clear_bhb_loop+0x30/0x80 [ 236.166273][ T9072] ? clear_bhb_loop+0x30/0x80 [ 236.170967][ T9072] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 236.176872][ T9072] RIP: 0033:0x7fbafa720be9 [ 236.181562][ T9072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.201194][ T9072] RSP: 002b:00007fbaf8988038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.209662][ T9072] RAX: ffffffffffffffda RBX: 00007fbafa947fa0 RCX: 00007fbafa720be9 [ 236.217659][ T9072] RDX: 000000003000c0c5 RSI: 0000200000000000 RDI: 0000000000000005 [ 236.225651][ T9072] RBP: 00007fbaf8988090 R08: 0000000000000000 R09: 0000000000000000 [ 236.233628][ T9072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.241716][ T9072] R13: 00007fbafa948038 R14: 00007fbafa947fa0 R15: 00007ffc684c02c8 [ 236.249719][ T9072] [ 236.266973][ T9078] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.1744'. [ 236.394873][ T9079] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 236.401519][ T9079] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 236.819874][ T9099] FAULT_INJECTION: forcing a failure. [ 236.819874][ T9099] name failslab, interval 1, probability 0, space 0, times 0 [ 236.892088][ T9099] CPU: 0 PID: 9099 Comm: syz.3.1755 Not tainted 5.15.189-syzkaller #0 [ 236.900304][ T9099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 236.910390][ T9099] Call Trace: [ 236.913689][ T9099] [ 236.916639][ T9099] dump_stack_lvl+0x168/0x230 [ 236.921355][ T9099] ? show_regs_print_info+0x20/0x20 [ 236.926676][ T9099] ? load_image+0x3b0/0x3b0 [ 236.931203][ T9099] ? __lock_acquire+0x7c60/0x7c60 [ 236.936242][ T9099] ? rcu_lock_acquire+0x30/0x30 [ 236.941123][ T9099] should_fail+0x38c/0x4c0 [ 236.945573][ T9099] should_failslab+0x5/0x20 [ 236.950102][ T9099] slab_pre_alloc_hook+0x51/0xc0 [ 236.952597][ T9105] FAULT_INJECTION: forcing a failure. [ 236.952597][ T9105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.955165][ T9099] ? security_file_alloc+0x30/0x110 [ 236.955195][ T9099] kmem_cache_alloc+0x3d/0x290 [ 236.955217][ T9099] ? rcu_is_watching+0x11/0xa0 [ 236.955238][ T9099] security_file_alloc+0x30/0x110 [ 236.955257][ T9099] __alloc_file+0xc2/0x240 [ 236.992789][ T9099] alloc_empty_file+0x90/0x180 [ 236.997561][ T9099] path_openat+0xfc/0x2f30 [ 237.001998][ T9099] ? verify_lock_unused+0x140/0x140 [ 237.007216][ T9099] ? __kasan_slab_alloc+0xb3/0xd0 [ 237.012258][ T9099] ? __kasan_slab_alloc+0x9c/0xd0 [ 237.017329][ T9099] ? slab_post_alloc_hook+0x4c/0x380 [ 237.022627][ T9099] ? verify_lock_unused+0x140/0x140 [ 237.027953][ T9099] ? __x64_sys_openat+0x135/0x160 [ 237.033001][ T9099] ? do_syscall_64+0x4c/0xa0 [ 237.037698][ T9099] ? do_filp_open+0x3e0/0x3e0 [ 237.042401][ T9099] do_filp_open+0x1b3/0x3e0 [ 237.046921][ T9099] ? vfs_tmpfile+0x300/0x300 [ 237.051540][ T9099] ? _raw_spin_unlock+0x24/0x40 [ 237.056396][ T9099] ? alloc_fd+0x598/0x630 [ 237.060820][ T9099] do_sys_openat2+0x142/0x4a0 [ 237.065509][ T9099] ? do_sys_open+0xe0/0xe0 [ 237.069924][ T9099] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 237.075907][ T9099] ? lock_chain_count+0x20/0x20 [ 237.080911][ T9099] ? vtime_user_exit+0x2dc/0x400 [ 237.085888][ T9099] __x64_sys_openat+0x135/0x160 [ 237.090850][ T9099] do_syscall_64+0x4c/0xa0 [ 237.095278][ T9099] ? clear_bhb_loop+0x30/0x80 [ 237.099956][ T9099] ? clear_bhb_loop+0x30/0x80 [ 237.104634][ T9099] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 237.110715][ T9099] RIP: 0033:0x7f39ba7d4550 [ 237.115131][ T9099] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 237.134735][ T9099] RSP: 002b:00007f39b8a3cf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 237.143249][ T9099] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f39ba7d4550 [ 237.151334][ T9099] RDX: 0000000000000000 RSI: 00007f39b8a3cfa0 RDI: 00000000ffffff9c [ 237.159313][ T9099] RBP: 00007f39b8a3cfa0 R08: 0000000000000000 R09: 0000000000000000 [ 237.167290][ T9099] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 237.175262][ T9099] R13: 00007f39ba9fd038 R14: 00007f39ba9fcfa0 R15: 00007ffdd51213b8 [ 237.183251][ T9099] [ 237.200048][ T9105] CPU: 0 PID: 9105 Comm: syz.1.1757 Not tainted 5.15.189-syzkaller #0 [ 237.208353][ T9105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 237.218442][ T9105] Call Trace: [ 237.221743][ T9105] [ 237.224695][ T9105] dump_stack_lvl+0x168/0x230 [ 237.229408][ T9105] ? show_regs_print_info+0x20/0x20 [ 237.234635][ T9105] ? load_image+0x3b0/0x3b0 [ 237.239177][ T9105] ? __might_sleep+0xf0/0xf0 [ 237.243797][ T9105] ? __lock_acquire+0x7c60/0x7c60 [ 237.248855][ T9105] ? mark_lock+0x94/0x320 [ 237.253229][ T9105] should_fail+0x38c/0x4c0 [ 237.257684][ T9105] copy_page_from_iter+0x33c/0x760 [ 237.262830][ T9105] pipe_write+0x971/0x1a80 [ 237.267261][ T9105] ? pipe_write+0x1a1/0x1a80 [ 237.271858][ T9105] ? pipe_read+0x1210/0x1210 [ 237.276493][ T9105] ? end_current_label_crit_section+0x14b/0x170 [ 237.282735][ T9105] ? memset+0x1e/0x40 [ 237.286718][ T9105] ? iov_iter_init+0xb4/0x170 [ 237.291394][ T9105] vfs_write+0x712/0xd00 [ 237.295638][ T9105] ? file_end_write+0x250/0x250 [ 237.300489][ T9105] ? __fget_files+0x40f/0x480 [ 237.305198][ T9105] ? __fdget_pos+0x1e2/0x370 [ 237.309788][ T9105] ? ksys_write+0x71/0x250 [ 237.314202][ T9105] ksys_write+0x14d/0x250 [ 237.318537][ T9105] ? __ia32_sys_read+0x80/0x80 [ 237.323298][ T9105] ? lockdep_hardirqs_on+0x94/0x140 [ 237.328496][ T9105] do_syscall_64+0x4c/0xa0 [ 237.332918][ T9105] ? clear_bhb_loop+0x30/0x80 [ 237.337691][ T9105] ? clear_bhb_loop+0x30/0x80 [ 237.342395][ T9105] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 237.348305][ T9105] RIP: 0033:0x7fbafa720be9 [ 237.352728][ T9105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.372507][ T9105] RSP: 002b:00007fbaf8988038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 237.380928][ T9105] RAX: ffffffffffffffda RBX: 00007fbafa947fa0 RCX: 00007fbafa720be9 [ 237.388908][ T9105] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000000 [ 237.396880][ T9105] RBP: 00007fbaf8988090 R08: 0000000000000000 R09: 0000000000000000 [ 237.404860][ T9105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 237.412931][ T9105] R13: 00007fbafa948038 R14: 00007fbafa947fa0 R15: 00007ffc684c02c8 [ 237.420918][ T9105] [ 237.617003][ T9119] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1763'. [ 238.552928][ T9146] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1770'. [ 238.611399][ T9146] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1770'. [ 238.666936][ T9142] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1770'. [ 238.898894][ T9163] FAULT_INJECTION: forcing a failure. [ 238.898894][ T9163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.928030][ T9163] CPU: 1 PID: 9163 Comm: syz.4.1774 Not tainted 5.15.189-syzkaller #0 [ 238.936255][ T9163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 238.946334][ T9163] Call Trace: [ 238.949629][ T9163] [ 238.952560][ T9163] dump_stack_lvl+0x168/0x230 [ 238.957244][ T9163] ? show_regs_print_info+0x20/0x20 [ 238.962447][ T9163] ? load_image+0x3b0/0x3b0 [ 238.966954][ T9163] ? __lock_acquire+0x7c60/0x7c60 [ 238.971987][ T9163] should_fail+0x38c/0x4c0 [ 238.976413][ T9163] _copy_from_user+0x2e/0x170 [ 238.981095][ T9163] sctp_setsockopt+0x191/0xf80 [ 238.985859][ T9163] ? sock_common_recvmsg+0x1b0/0x1b0 [ 238.991179][ T9163] __sys_setsockopt+0x2bf/0x3d0 [ 238.996032][ T9163] __x64_sys_setsockopt+0xb1/0xc0 [ 239.001071][ T9163] do_syscall_64+0x4c/0xa0 [ 239.005575][ T9163] ? clear_bhb_loop+0x30/0x80 [ 239.010277][ T9163] ? clear_bhb_loop+0x30/0x80 [ 239.015230][ T9163] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 239.021126][ T9163] RIP: 0033:0x7f83fd827be9 [ 239.025564][ T9163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.045174][ T9163] RSP: 002b:00007f83fba6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 239.053591][ T9163] RAX: ffffffffffffffda RBX: 00007f83fda4f090 RCX: 00007f83fd827be9 [ 239.061559][ T9163] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 239.069702][ T9163] RBP: 00007f83fba6e090 R08: 0000000000000010 R09: 0000000000000000 [ 239.077791][ T9163] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.085759][ T9163] R13: 00007f83fda4f128 R14: 00007f83fda4f090 R15: 00007ffc74066168 [ 239.093748][ T9163] [ 239.110954][ T9165] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1780'. [ 239.111382][ T9159] netlink: 'syz.4.1774': attribute type 10 has an invalid length. [ 239.141291][ T9159] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1774'. [ 239.207237][ T9166] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 239.213562][ T9159] team0: Port device geneve0 added [ 239.213717][ T9166] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 239.231828][ T9168] netlink: 'syz.3.1781': attribute type 21 has an invalid length. [ 239.240350][ T9168] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1781'. [ 239.940382][ T9197] netlink: 'syz.3.1795': attribute type 21 has an invalid length. [ 239.991665][ T9197] netlink: 'syz.3.1795': attribute type 20 has an invalid length. [ 240.029444][ T9197] IPv6: NLM_F_CREATE should be specified when creating new route [ 240.039421][ T9202] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.1796'. [ 240.063944][ T9199] netlink: 'syz.0.1793': attribute type 11 has an invalid length. [ 240.082764][ T9199] netlink: 'syz.0.1793': attribute type 5 has an invalid length. [ 240.113578][ T9202] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 240.120111][ T9202] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 240.280405][ T9207] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.1798'. [ 241.796055][ T9237] netlink: 'syz.3.1808': attribute type 3 has an invalid length. [ 241.964675][ T9237] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1808'. [ 242.598511][ T9254] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1815'. [ 242.767580][ T9261] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 242.774100][ T9261] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 243.367544][ T9287] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1827'. [ 243.527561][ T9289] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1826'. [ 244.179633][ T9307] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.1834'. [ 244.273346][ T9307] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 244.279906][ T9307] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 245.921088][ T9353] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1850'. [ 246.339801][ T9362] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.1853'. [ 246.406961][ T9362] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 246.413458][ T9362] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 246.992222][ T9392] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1863'. [ 247.608448][ T9413] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1873'. [ 247.634301][ T9405] FAULT_INJECTION: forcing a failure. [ 247.634301][ T9405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.651248][ T9405] CPU: 1 PID: 9405 Comm: syz.1.1870 Not tainted 5.15.189-syzkaller #0 [ 247.659540][ T9405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 247.669721][ T9405] Call Trace: [ 247.673031][ T9405] [ 247.675996][ T9405] dump_stack_lvl+0x168/0x230 [ 247.680807][ T9405] ? show_regs_print_info+0x20/0x20 [ 247.686139][ T9405] ? load_image+0x3b0/0x3b0 [ 247.690681][ T9405] ? __lock_acquire+0x7c60/0x7c60 [ 247.695737][ T9405] should_fail+0x38c/0x4c0 [ 247.700169][ T9405] _copy_to_user+0x2e/0x130 [ 247.704676][ T9405] simple_read_from_buffer+0xe3/0x150 [ 247.710079][ T9405] proc_fail_nth_read+0x19a/0x210 [ 247.715118][ T9405] ? proc_fault_inject_write+0x2f0/0x2f0 [ 247.720761][ T9405] ? fsnotify_perm+0x254/0x560 [ 247.725535][ T9405] ? proc_fault_inject_write+0x2f0/0x2f0 [ 247.731170][ T9405] vfs_read+0x2f6/0xcf0 [ 247.735326][ T9405] ? lockdep_hardirqs_on+0x94/0x140 [ 247.740541][ T9405] ? kernel_read+0x1e0/0x1e0 [ 247.745262][ T9405] ? __fget_files+0x40f/0x480 [ 247.750034][ T9405] ? mutex_lock_nested+0x17/0x20 [ 247.754976][ T9405] ? __fdget_pos+0x2bf/0x370 [ 247.759562][ T9405] ? ksys_read+0x71/0x250 [ 247.763891][ T9405] ksys_read+0x14d/0x250 [ 247.768134][ T9405] ? vfs_write+0xd00/0xd00 [ 247.772644][ T9405] ? syscall_enter_from_user_mode+0x2a/0x70 [ 247.778543][ T9405] do_syscall_64+0x4c/0xa0 [ 247.782962][ T9405] ? clear_bhb_loop+0x30/0x80 [ 247.787640][ T9405] ? clear_bhb_loop+0x30/0x80 [ 247.792329][ T9405] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 247.798223][ T9405] RIP: 0033:0x7fbafa71f5fc [ 247.802643][ T9405] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 247.822280][ T9405] RSP: 002b:00007fbaf8988030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 247.830698][ T9405] RAX: ffffffffffffffda RBX: 00007fbafa947fa0 RCX: 00007fbafa71f5fc [ 247.838668][ T9405] RDX: 000000000000000f RSI: 00007fbaf89880a0 RDI: 0000000000000007 [ 247.846633][ T9405] RBP: 00007fbaf8988090 R08: 0000000000000000 R09: 0000000000000000 [ 247.854604][ T9405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.862572][ T9405] R13: 00007fbafa948038 R14: 00007fbafa947fa0 R15: 00007ffc684c02c8 [ 247.870561][ T9405] [ 247.958039][ T9413] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 247.964626][ T9413] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 253.224588][ T9492] FAULT_INJECTION: forcing a failure. [ 253.224588][ T9492] name failslab, interval 1, probability 0, space 0, times 0 [ 253.263974][ T9493] netlink: 'syz.4.1899': attribute type 21 has an invalid length. [ 253.284741][ T9492] CPU: 1 PID: 9492 Comm: syz.3.1898 Not tainted 5.15.189-syzkaller #0 [ 253.292955][ T9492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 253.303032][ T9492] Call Trace: [ 253.306325][ T9492] [ 253.309262][ T9492] dump_stack_lvl+0x168/0x230 [ 253.313958][ T9492] ? show_regs_print_info+0x20/0x20 [ 253.319169][ T9492] ? load_image+0x3b0/0x3b0 [ 253.323683][ T9492] ? __might_sleep+0xf0/0xf0 [ 253.328284][ T9492] ? __lock_acquire+0x7c60/0x7c60 [ 253.333319][ T9492] ? mark_lock+0x94/0x320 [ 253.337664][ T9492] should_fail+0x38c/0x4c0 [ 253.342094][ T9492] should_failslab+0x5/0x20 [ 253.346604][ T9492] slab_pre_alloc_hook+0x51/0xc0 [ 253.351560][ T9492] kmem_cache_alloc_node+0x47/0x2d0 [ 253.356767][ T9492] ? __alloc_skb+0xf4/0x750 [ 253.361286][ T9492] __alloc_skb+0xf4/0x750 [ 253.365623][ T9492] ? trace_event_raw_event_lock+0x250/0x250 [ 253.371533][ T9492] __ip_append_data+0x2050/0x3230 [ 253.376583][ T9492] ? trace_event_raw_event_lock+0x250/0x250 [ 253.382491][ T9492] ? raw_send_hdrinc+0x11e0/0x11e0 [ 253.387609][ T9492] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 253.393600][ T9492] ? lock_chain_count+0x20/0x20 [ 253.398469][ T9492] ? ip_setup_cork+0x890/0x890 [ 253.403372][ T9492] ? ip_setup_cork+0x496/0x890 [ 253.408175][ T9492] ip_append_data+0x132/0x1a0 [ 253.412870][ T9492] ? raw_send_hdrinc+0x11e0/0x11e0 [ 253.418078][ T9492] raw_sendmsg+0x131a/0x1890 [ 253.422692][ T9492] ? compat_raw_ioctl+0x60/0x60 [ 253.427647][ T9492] ? lockdep_hardirqs_on+0x94/0x140 [ 253.432871][ T9492] ? inet_sendmsg+0x5a/0x2f0 [ 253.437470][ T9492] ? inet_sendmsg+0x78/0x2f0 [ 253.442069][ T9492] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 253.447357][ T9492] ? security_socket_sendmsg+0x7c/0xa0 [ 253.452827][ T9492] ? inet_send_prepare+0x260/0x260 [ 253.457948][ T9492] ____sys_sendmsg+0x5a2/0x8c0 [ 253.462733][ T9492] ? __sys_sendmsg_sock+0x30/0x30 [ 253.467788][ T9492] ? import_iovec+0x6f/0xa0 [ 253.472299][ T9492] ___sys_sendmsg+0x1f0/0x260 [ 253.476993][ T9492] ? __sys_sendmsg+0x250/0x250 [ 253.481783][ T9492] ? vfs_write+0x84d/0xd00 [ 253.486231][ T9492] ? __fdget+0x18b/0x210 [ 253.490499][ T9492] __se_sys_sendmsg+0x190/0x250 [ 253.495370][ T9492] ? __x64_sys_sendmsg+0x80/0x80 [ 253.500317][ T9492] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 253.506316][ T9492] ? lockdep_hardirqs_on+0x94/0x140 [ 253.511522][ T9492] do_syscall_64+0x4c/0xa0 [ 253.515950][ T9492] ? clear_bhb_loop+0x30/0x80 [ 253.520631][ T9492] ? clear_bhb_loop+0x30/0x80 [ 253.525311][ T9492] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 253.531214][ T9492] RIP: 0033:0x7f39ba7d5be9 [ 253.535726][ T9492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.555337][ T9492] RSP: 002b:00007f39b8a3d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.563760][ T9492] RAX: ffffffffffffffda RBX: 00007f39ba9fcfa0 RCX: 00007f39ba7d5be9 [ 253.571824][ T9492] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 253.579798][ T9492] RBP: 00007f39b8a3d090 R08: 0000000000000000 R09: 0000000000000000 [ 253.587789][ T9492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.595764][ T9492] R13: 00007f39ba9fd038 R14: 00007f39ba9fcfa0 R15: 00007ffdd51213b8 [ 253.603757][ T9492] [ 253.656035][ T9493] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1899'. [ 253.703650][ T9493] netlink: 'syz.4.1899': attribute type 1 has an invalid length. [ 253.732319][ T9493] netlink: 61831 bytes leftover after parsing attributes in process `syz.4.1899'. [ 253.753486][ T9493] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1899'. [ 253.763290][ T9493] tc_dump_action: action bad kind [ 254.163220][ T9517] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.1909'. [ 254.321113][ T9517] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 254.328840][ T9517] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 255.419472][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.425982][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.579451][ T9553] netlink: 'syz.1.1922': attribute type 6 has an invalid length. [ 255.629474][ T9553] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1922'. [ 255.746991][ T9557] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1924'. [ 255.921452][ T9566] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1929'. [ 256.590420][ T9580] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 257.188554][ T9597] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1949'. [ 257.436971][ T9603] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 257.443495][ T9603] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 257.625457][ T9609] Dead loop on virtual device ip6_vti0, fix it urgently! [ 258.097926][ T9620] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1947'. [ 258.125259][ T9620] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1947'. [ 258.423275][ T9620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.548086][ T9620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.692835][ T9620] bond0 (unregistering): Released all slaves [ 258.901517][ T9632] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1948'. [ 258.986439][ T9643] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1952'. [ 259.081217][ T9640] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 259.087776][ T9640] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 259.174127][ T9648] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1956'. [ 259.298129][ T9648] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 259.304655][ T9648] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 259.762920][ T9667] Dead loop on virtual device ip6_vti0, fix it urgently! [ 260.741181][ T9690] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.1969'. [ 260.891323][ T9690] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 260.897849][ T9690] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 261.020689][ T9696] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1971'. [ 261.225864][ T9696] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 261.233149][ T9696] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 262.193985][ T9727] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1983'. [ 262.272999][ T9727] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 262.279524][ T9727] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 262.588774][ T9741] FAULT_INJECTION: forcing a failure. [ 262.588774][ T9741] name failslab, interval 1, probability 0, space 0, times 0 [ 262.634807][ T9741] CPU: 1 PID: 9741 Comm: syz.4.1988 Not tainted 5.15.189-syzkaller #0 [ 262.643007][ T9741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 262.653090][ T9741] Call Trace: [ 262.656394][ T9741] [ 262.659340][ T9741] dump_stack_lvl+0x168/0x230 [ 262.664051][ T9741] ? show_regs_print_info+0x20/0x20 [ 262.669285][ T9741] ? load_image+0x3b0/0x3b0 [ 262.673812][ T9741] ? __might_sleep+0xf0/0xf0 [ 262.678420][ T9741] ? __lock_acquire+0x7c60/0x7c60 [ 262.683544][ T9741] should_fail+0x38c/0x4c0 [ 262.687978][ T9741] should_failslab+0x5/0x20 [ 262.692488][ T9741] slab_pre_alloc_hook+0x51/0xc0 [ 262.697430][ T9741] __kmalloc_node_track_caller+0x68/0x3a0 [ 262.703144][ T9741] ? alloc_skb_with_frags+0xa7/0x730 [ 262.708430][ T9741] ? kmem_cache_alloc_node+0x162/0x2d0 [ 262.713882][ T9741] ? __alloc_skb+0xf4/0x750 [ 262.718381][ T9741] ? alloc_skb_with_frags+0xa7/0x730 [ 262.723668][ T9741] __alloc_skb+0x22c/0x750 [ 262.728088][ T9741] alloc_skb_with_frags+0xa7/0x730 [ 262.733218][ T9741] sock_alloc_send_pskb+0x853/0x980 [ 262.738422][ T9741] ? sock_kzfree_s+0x50/0x50 [ 262.743020][ T9741] packet_sendmsg+0x3407/0x5110 [ 262.747873][ T9741] ? aa_sk_perm+0x8f0/0x8f0 [ 262.752382][ T9741] ? __lock_acquire+0x12d9/0x7c60 [ 262.757403][ T9741] ? verify_lock_unused+0x140/0x140 [ 262.762599][ T9741] ? __might_sleep+0xf0/0xf0 [ 262.767193][ T9741] ? aa_sk_perm+0x7b4/0x8f0 [ 262.771695][ T9741] ? packet_getsockopt+0x950/0x950 [ 262.776809][ T9741] ? aa_sock_msg_perm+0x94/0x150 [ 262.781745][ T9741] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 262.787028][ T9741] ? security_socket_sendmsg+0x7c/0xa0 [ 262.792498][ T9741] ? packet_getsockopt+0x950/0x950 [ 262.797635][ T9741] ____sys_sendmsg+0x5a2/0x8c0 [ 262.802418][ T9741] ? memset+0x1e/0x40 [ 262.806401][ T9741] ? __sys_sendmsg_sock+0x30/0x30 [ 262.811430][ T9741] ? import_iovec+0x6f/0xa0 [ 262.815934][ T9741] ___sys_sendmsg+0x1f0/0x260 [ 262.820624][ T9741] ? __sys_sendmsg+0x250/0x250 [ 262.825393][ T9741] ? vfs_write+0x84d/0xd00 [ 262.829820][ T9741] ? __fdget+0x18b/0x210 [ 262.834063][ T9741] __se_sys_sendmsg+0x190/0x250 [ 262.838915][ T9741] ? __x64_sys_sendmsg+0x80/0x80 [ 262.843853][ T9741] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 262.849853][ T9741] ? lockdep_hardirqs_on+0x94/0x140 [ 262.855066][ T9741] do_syscall_64+0x4c/0xa0 [ 262.859481][ T9741] ? clear_bhb_loop+0x30/0x80 [ 262.864167][ T9741] ? clear_bhb_loop+0x30/0x80 [ 262.868846][ T9741] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 262.874742][ T9741] RIP: 0033:0x7f83fd827be9 [ 262.879164][ T9741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.898771][ T9741] RSP: 002b:00007f83fba8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.907187][ T9741] RAX: ffffffffffffffda RBX: 00007f83fda4efa0 RCX: 00007f83fd827be9 [ 262.915153][ T9741] RDX: 00000000000480c0 RSI: 0000200000000200 RDI: 0000000000000004 [ 262.923216][ T9741] RBP: 00007f83fba8f090 R08: 0000000000000000 R09: 0000000000000000 [ 262.931199][ T9741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.939255][ T9741] R13: 00007f83fda4f038 R14: 00007f83fda4efa0 R15: 00007ffc74066168 [ 262.947325][ T9741] [ 263.206492][ T9748] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.1990'. [ 263.418047][ T9748] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 263.424604][ T9748] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 263.737928][ T9766] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1994'. [ 263.868565][ T9772] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 263.896225][ T9764] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1996'. [ 263.966786][ T9769] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1996'. [ 264.210043][ T9769] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.303156][ T9769] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.377861][ T9769] bond0 (unregistering): Released all slaves [ 264.441682][ T9789] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.2005'. [ 265.345218][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2013'. [ 265.388142][ T9818] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.2014'. [ 265.504157][ T9818] net_ratelimit: 3 callbacks suppressed [ 265.510019][ T9818] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 265.516713][ T9818] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 266.341460][ T9858] netlink: 'syz.4.2030': attribute type 1 has an invalid length. [ 266.383096][ T9858] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.2030'. [ 266.442972][ T9858] netlink: 'syz.4.2030': attribute type 1 has an invalid length. [ 266.838159][ T9870] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.2035'. [ 266.950741][ T9870] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 266.957343][ T9870] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 267.623836][ T9891] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2042'. [ 267.704786][ T9891] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2042'. [ 267.985563][ T9891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.011824][ T9904] FAULT_INJECTION: forcing a failure. [ 268.011824][ T9904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.104391][ T9904] CPU: 0 PID: 9904 Comm: syz.3.2046 Not tainted 5.15.189-syzkaller #0 [ 268.112621][ T9904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 268.122813][ T9904] Call Trace: [ 268.126129][ T9904] [ 268.129088][ T9904] dump_stack_lvl+0x168/0x230 [ 268.133819][ T9904] ? show_regs_print_info+0x20/0x20 [ 268.139049][ T9904] ? load_image+0x3b0/0x3b0 [ 268.143683][ T9904] ? __lock_acquire+0x7c60/0x7c60 [ 268.148755][ T9904] should_fail+0x38c/0x4c0 [ 268.153201][ T9904] _copy_to_user+0x2e/0x130 [ 268.157737][ T9904] simple_read_from_buffer+0xe3/0x150 [ 268.163141][ T9904] proc_fail_nth_read+0x19a/0x210 [ 268.168190][ T9904] ? proc_fault_inject_write+0x2f0/0x2f0 [ 268.173853][ T9904] ? fsnotify_perm+0x254/0x560 [ 268.178649][ T9904] ? proc_fault_inject_write+0x2f0/0x2f0 [ 268.184322][ T9904] vfs_read+0x2f6/0xcf0 [ 268.188522][ T9904] ? kernel_read+0x1e0/0x1e0 [ 268.193158][ T9904] ? __fget_files+0x40f/0x480 [ 268.197870][ T9904] ? mutex_lock_nested+0x17/0x20 [ 268.203267][ T9904] ? __fdget_pos+0x2bf/0x370 [ 268.207908][ T9904] ? ksys_read+0x71/0x250 [ 268.212276][ T9904] ksys_read+0x14d/0x250 [ 268.216550][ T9904] ? vfs_write+0xd00/0xd00 [ 268.220994][ T9904] ? lockdep_hardirqs_on+0x94/0x140 [ 268.226221][ T9904] do_syscall_64+0x4c/0xa0 [ 268.230659][ T9904] ? clear_bhb_loop+0x30/0x80 [ 268.235462][ T9904] ? clear_bhb_loop+0x30/0x80 [ 268.240156][ T9904] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 268.246068][ T9904] RIP: 0033:0x7f39ba7d45fc [ 268.250504][ T9904] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 268.270241][ T9904] RSP: 002b:00007f39b8a1c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 268.278770][ T9904] RAX: ffffffffffffffda RBX: 00007f39ba9fd090 RCX: 00007f39ba7d45fc [ 268.286755][ T9904] RDX: 000000000000000f RSI: 00007f39b8a1c0a0 RDI: 0000000000000007 [ 268.294737][ T9904] RBP: 00007f39b8a1c090 R08: 0000000000000000 R09: 0000000000000000 [ 268.302726][ T9904] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.310812][ T9904] R13: 00007f39ba9fd128 R14: 00007f39ba9fd090 R15: 00007ffdd51213b8 [ 268.318836][ T9904] [ 268.339425][ T9891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.403817][ T9891] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 268.440797][ T9891] bond0 (unregistering): Released all slaves [ 268.608699][ T9913] netlink: 'syz.1.2050': attribute type 21 has an invalid length. [ 268.804062][ T9920] device team_slave_0 left promiscuous mode [ 268.828631][ T9921] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.2053'. [ 268.915729][ T9920] team0: Port device team_slave_0 removed [ 268.946198][ T9920] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 269.030439][ T9921] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 269.037087][ T9921] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 269.538296][ T9936] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2057'. [ 270.432419][ T9956] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.2066'. [ 270.520765][ T9957] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 270.527432][ T9957] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 271.410645][ T9979] FAULT_INJECTION: forcing a failure. [ 271.410645][ T9979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.469267][ T9979] CPU: 1 PID: 9979 Comm: syz.0.2073 Not tainted 5.15.189-syzkaller #0 [ 271.477506][ T9979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 271.487894][ T9979] Call Trace: [ 271.491225][ T9979] [ 271.494188][ T9979] dump_stack_lvl+0x168/0x230 [ 271.498936][ T9979] ? show_regs_print_info+0x20/0x20 [ 271.504730][ T9979] ? load_image+0x3b0/0x3b0 [ 271.509581][ T9979] ? __lock_acquire+0x7c60/0x7c60 [ 271.514683][ T9979] should_fail+0x38c/0x4c0 [ 271.519161][ T9979] _copy_to_user+0x2e/0x130 [ 271.523710][ T9979] simple_read_from_buffer+0xe3/0x150 [ 271.529140][ T9979] proc_fail_nth_read+0x19a/0x210 [ 271.534217][ T9979] ? proc_fault_inject_write+0x2f0/0x2f0 [ 271.539913][ T9979] ? fsnotify_perm+0x254/0x560 [ 271.544754][ T9979] ? proc_fault_inject_write+0x2f0/0x2f0 [ 271.550453][ T9979] vfs_read+0x2f6/0xcf0 [ 271.554674][ T9979] ? kernel_read+0x1e0/0x1e0 [ 271.559334][ T9979] ? __fget_files+0x40f/0x480 [ 271.564244][ T9979] ? mutex_lock_nested+0x17/0x20 [ 271.569220][ T9979] ? __fdget_pos+0x2bf/0x370 [ 271.573857][ T9979] ? ksys_read+0x71/0x250 [ 271.578325][ T9979] ksys_read+0x14d/0x250 [ 271.582706][ T9979] ? vfs_write+0xd00/0xd00 [ 271.587174][ T9979] ? lockdep_hardirqs_on+0x94/0x140 [ 271.592427][ T9979] do_syscall_64+0x4c/0xa0 [ 271.596901][ T9979] ? clear_bhb_loop+0x30/0x80 [ 271.601722][ T9979] ? clear_bhb_loop+0x30/0x80 [ 271.606450][ T9979] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 271.612387][ T9979] RIP: 0033:0x7faa66c565fc [ 271.616863][ T9979] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 271.636505][ T9979] RSP: 002b:00007faa64ebf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 271.645034][ T9979] RAX: ffffffffffffffda RBX: 00007faa66e7efa0 RCX: 00007faa66c565fc [ 271.653018][ T9979] RDX: 000000000000000f RSI: 00007faa64ebf0a0 RDI: 0000000000000006 [ 271.661005][ T9979] RBP: 00007faa64ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 271.668987][ T9979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.676980][ T9979] R13: 00007faa66e7f038 R14: 00007faa66e7efa0 R15: 00007ffdb01d2db8 [ 271.685179][ T9979] [ 272.392796][ T9995] netlink: 'syz.1.2078': attribute type 1 has an invalid length. [ 272.409797][ T9995] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2078'. [ 272.615088][T10001] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.2080'. [ 272.678813][T10001] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 272.686188][T10001] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 272.820290][T10004] netlink: 'syz.3.2081': attribute type 13 has an invalid length. [ 272.866966][T10004] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2081'. [ 272.983519][T10004] erspan0: refused to change device tx_queue_len [ 273.001215][T10004] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 273.025790][T10009] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2082'. [ 273.361336][T10028] Dead loop on virtual device ip6_vti0, fix it urgently! [ 273.670449][T10039] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 273.740974][T10041] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.2095'. [ 273.900470][T10045] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 273.906988][T10045] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 274.129912][T10050] FAULT_INJECTION: forcing a failure. [ 274.129912][T10050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.169512][T10050] CPU: 1 PID: 10050 Comm: syz.3.2097 Not tainted 5.15.189-syzkaller #0 [ 274.177825][T10050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 274.188003][T10050] Call Trace: [ 274.191328][T10050] [ 274.194285][T10050] dump_stack_lvl+0x168/0x230 [ 274.199006][T10050] ? show_regs_print_info+0x20/0x20 [ 274.204236][T10050] ? load_image+0x3b0/0x3b0 [ 274.208780][T10050] ? __lock_acquire+0x7c60/0x7c60 [ 274.213841][T10050] ? bpf_test_run+0x778/0x7d0 [ 274.218646][T10050] should_fail+0x38c/0x4c0 [ 274.223105][T10050] _copy_to_user+0x2e/0x130 [ 274.227652][T10050] bpf_test_finish+0x1db/0x2d0 [ 274.232446][T10050] ? convert_skb_to___skb+0x360/0x360 [ 274.237852][T10050] ? _copy_from_user+0x111/0x170 [ 274.242832][T10050] ? bpf_test_init+0x171/0x1b0 [ 274.247656][T10050] ? xdp_convert_buff_to_md+0x154/0x1e0 [ 274.253236][T10050] bpf_prog_test_run_xdp+0x638/0x920 [ 274.258563][T10050] ? dev_put+0x70/0x70 [ 274.262674][T10050] ? dev_put+0x70/0x70 [ 274.266763][T10050] bpf_prog_test_run+0x31e/0x390 [ 274.271732][T10050] __sys_bpf+0x535/0x670 [ 274.276005][T10050] ? bpf_link_show_fdinfo+0x340/0x340 [ 274.281404][T10050] ? rcu_nmi_exit+0x6f/0xf0 [ 274.285952][T10050] ? vtime_user_exit+0x2dc/0x400 [ 274.290936][T10050] __x64_sys_bpf+0x78/0x90 [ 274.295397][T10050] do_syscall_64+0x4c/0xa0 [ 274.299847][T10050] ? clear_bhb_loop+0x30/0x80 [ 274.304561][T10050] ? clear_bhb_loop+0x30/0x80 [ 274.309263][T10050] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 274.315181][T10050] RIP: 0033:0x7f39ba7d5be9 [ 274.319614][T10050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.339461][T10050] RSP: 002b:00007f39b8a3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 274.347919][T10050] RAX: ffffffffffffffda RBX: 00007f39ba9fcfa0 RCX: 00007f39ba7d5be9 [ 274.355936][T10050] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 274.363957][T10050] RBP: 00007f39b8a3d090 R08: 0000000000000000 R09: 0000000000000000 [ 274.372135][T10050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.380140][T10050] R13: 00007f39ba9fd038 R14: 00007f39ba9fcfa0 R15: 00007ffdd51213b8 [ 274.388174][T10050] [ 275.223685][T10073] FAULT_INJECTION: forcing a failure. [ 275.223685][T10073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.270275][T10073] CPU: 0 PID: 10073 Comm: syz.0.2106 Not tainted 5.15.189-syzkaller #0 [ 275.278581][T10073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 275.288755][T10073] Call Trace: [ 275.292067][T10073] [ 275.295020][T10073] dump_stack_lvl+0x168/0x230 [ 275.299724][T10073] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 275.305906][T10073] ? show_regs_print_info+0x20/0x20 [ 275.311241][T10073] ? load_image+0x3b0/0x3b0 [ 275.315870][T10073] should_fail+0x38c/0x4c0 [ 275.320318][T10073] _copy_from_user+0x2e/0x170 [ 275.325018][T10073] __copy_msghdr_from_user+0xaf/0x5e0 [ 275.330411][T10073] ? verify_lock_unused+0x140/0x140 [ 275.335635][T10073] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 275.340973][T10073] ___sys_sendmsg+0x156/0x260 [ 275.345705][T10073] ? __sys_sendmsg+0x250/0x250 [ 275.350633][T10073] ? __fdget+0x18b/0x210 [ 275.354922][T10073] __se_sys_sendmsg+0x190/0x250 [ 275.359804][T10073] ? __x64_sys_sendmsg+0x80/0x80 [ 275.364765][T10073] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 275.370782][T10073] ? lockdep_hardirqs_on+0x94/0x140 [ 275.376004][T10073] do_syscall_64+0x4c/0xa0 [ 275.380446][T10073] ? clear_bhb_loop+0x30/0x80 [ 275.385142][T10073] ? clear_bhb_loop+0x30/0x80 [ 275.389852][T10073] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 275.395779][T10073] RIP: 0033:0x7faa66c57be9 [ 275.400219][T10073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.419947][T10073] RSP: 002b:00007faa64ebf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.428397][T10073] RAX: ffffffffffffffda RBX: 00007faa66e7efa0 RCX: 00007faa66c57be9 [ 275.436400][T10073] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 275.444402][T10073] RBP: 00007faa64ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 275.452399][T10073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.460387][T10073] R13: 00007faa66e7f038 R14: 00007faa66e7efa0 R15: 00007ffdb01d2db8 [ 275.468410][T10073] [ 275.767210][T10092] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.2113'. [ 275.897874][T10092] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 275.904368][T10092] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 276.106755][T10098] FAULT_INJECTION: forcing a failure. [ 276.106755][T10098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.144484][T10098] CPU: 0 PID: 10098 Comm: syz.4.2115 Not tainted 5.15.189-syzkaller #0 [ 276.152878][T10098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 276.163049][T10098] Call Trace: [ 276.166531][T10098] [ 276.169492][T10098] dump_stack_lvl+0x168/0x230 [ 276.174197][T10098] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 276.180385][T10098] ? show_regs_print_info+0x20/0x20 [ 276.185607][T10098] ? load_image+0x3b0/0x3b0 [ 276.190165][T10098] should_fail+0x38c/0x4c0 [ 276.194684][T10098] _copy_from_user+0x2e/0x170 [ 276.199394][T10098] __sys_bpf+0x21b/0x670 [ 276.203671][T10098] ? bpf_link_show_fdinfo+0x340/0x340 [ 276.209091][T10098] __x64_sys_bpf+0x78/0x90 [ 276.213538][T10098] do_syscall_64+0x4c/0xa0 [ 276.218146][T10098] ? clear_bhb_loop+0x30/0x80 [ 276.222916][T10098] ? clear_bhb_loop+0x30/0x80 [ 276.227616][T10098] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 276.233518][T10098] RIP: 0033:0x7f83fd827be9 [ 276.237942][T10098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.257553][T10098] RSP: 002b:00007f83fba8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 276.265988][T10098] RAX: ffffffffffffffda RBX: 00007f83fda4efa0 RCX: 00007f83fd827be9 [ 276.273968][T10098] RDX: 0000000000000023 RSI: 00002000002a0fb8 RDI: 0000000000000005 [ 276.281949][T10098] RBP: 00007f83fba8f090 R08: 0000000000000000 R09: 0000000000000000 [ 276.289927][T10098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.297917][T10098] R13: 00007f83fda4f038 R14: 00007f83fda4efa0 R15: 00007ffc74066168 [ 276.305922][T10098] [ 276.601773][T10107] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.2119'. [ 276.775497][T10107] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 276.781970][T10107] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 276.965471][T10118] FAULT_INJECTION: forcing a failure. [ 276.965471][T10118] name failslab, interval 1, probability 0, space 0, times 0 [ 277.181490][T10118] CPU: 1 PID: 10118 Comm: syz.4.2120 Not tainted 5.15.189-syzkaller #0 [ 277.189810][T10118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 277.199899][T10118] Call Trace: [ 277.203322][T10118] [ 277.206461][T10118] dump_stack_lvl+0x168/0x230 [ 277.211263][T10118] ? show_regs_print_info+0x20/0x20 [ 277.216694][T10118] ? load_image+0x3b0/0x3b0 [ 277.221249][T10118] ? __might_sleep+0xf0/0xf0 [ 277.225857][T10118] ? __lock_acquire+0x7c60/0x7c60 [ 277.230912][T10118] ? mark_lock+0x94/0x320 [ 277.235448][T10118] should_fail+0x38c/0x4c0 [ 277.240072][T10118] should_failslab+0x5/0x20 [ 277.244689][T10118] slab_pre_alloc_hook+0x51/0xc0 [ 277.249657][T10118] __kmalloc+0x6b/0x330 [ 277.253918][T10118] ? tomoyo_realpath_from_path+0x118/0x610 [ 277.259750][T10118] tomoyo_realpath_from_path+0x118/0x610 [ 277.265425][T10118] tomoyo_path_number_perm+0x1d5/0x5d0 [ 277.270931][T10118] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 277.276421][T10118] ? perf_trace_lock+0xdf/0x370 [ 277.281788][T10118] security_file_ioctl+0x6c/0xa0 [ 277.286876][T10118] __se_sys_ioctl+0x48/0x170 [ 277.291510][T10118] do_syscall_64+0x4c/0xa0 [ 277.295950][T10118] ? clear_bhb_loop+0x30/0x80 [ 277.300738][T10118] ? clear_bhb_loop+0x30/0x80 [ 277.305441][T10118] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 277.311367][T10118] RIP: 0033:0x7f83fd827be9 [ 277.315809][T10118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.335682][T10118] RSP: 002b:00007f83fba6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.344152][T10118] RAX: ffffffffffffffda RBX: 00007f83fda4f090 RCX: 00007f83fd827be9 [ 277.352151][T10118] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000033 [ 277.360146][T10118] RBP: 00007f83fba6e090 R08: 0000000000000000 R09: 0000000000000000 [ 277.368138][T10118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.376126][T10118] R13: 00007f83fda4f128 R14: 00007f83fda4f090 R15: 00007ffc74066168 [ 277.384130][T10118] [ 277.453213][T10129] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.2127'. [ 277.575572][ T1222] wlan1: Trigger new scan to find an IBSS to join [ 277.618145][T10129] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 277.624749][T10129] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 277.691462][T10118] ERROR: Out of memory at tomoyo_realpath_from_path. [ 278.068438][T10152] FAULT_INJECTION: forcing a failure. [ 278.068438][T10152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.150601][T10152] CPU: 0 PID: 10152 Comm: syz.2.2135 Not tainted 5.15.189-syzkaller #0 [ 278.158913][T10152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 278.169088][T10152] Call Trace: [ 278.172395][T10152] [ 278.175344][T10152] dump_stack_lvl+0x168/0x230 [ 278.180044][T10152] ? show_regs_print_info+0x20/0x20 [ 278.185381][T10152] ? load_image+0x3b0/0x3b0 [ 278.189928][T10152] ? __lock_acquire+0x7c60/0x7c60 [ 278.194990][T10152] should_fail+0x38c/0x4c0 [ 278.199442][T10152] _copy_to_user+0x2e/0x130 [ 278.203963][T10152] simple_read_from_buffer+0xe3/0x150 [ 278.209357][T10152] proc_fail_nth_read+0x19a/0x210 [ 278.214672][T10152] ? proc_fault_inject_write+0x2f0/0x2f0 [ 278.220325][T10152] ? fsnotify_perm+0x254/0x560 [ 278.225207][T10152] ? proc_fault_inject_write+0x2f0/0x2f0 [ 278.230859][T10152] vfs_read+0x2f6/0xcf0 [ 278.235127][T10152] ? kernel_read+0x1e0/0x1e0 [ 278.239736][T10152] ? __fget_files+0x40f/0x480 [ 278.244432][T10152] ? mutex_lock_nested+0x17/0x20 [ 278.249566][T10152] ? __fdget_pos+0x2bf/0x370 [ 278.254175][T10152] ? ksys_read+0x71/0x250 [ 278.258521][T10152] ksys_read+0x14d/0x250 [ 278.262879][T10152] ? vfs_write+0xd00/0xd00 [ 278.267309][T10152] ? lockdep_hardirqs_on+0x94/0x140 [ 278.272619][T10152] do_syscall_64+0x4c/0xa0 [ 278.277054][T10152] ? clear_bhb_loop+0x30/0x80 [ 278.281748][T10152] ? clear_bhb_loop+0x30/0x80 [ 278.286436][T10152] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 278.292342][T10152] RIP: 0033:0x7febfc9c55fc [ 278.296772][T10152] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 278.316480][T10152] RSP: 002b:00007febfac2e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 278.324925][T10152] RAX: ffffffffffffffda RBX: 00007febfcbedfa0 RCX: 00007febfc9c55fc [ 278.332929][T10152] RDX: 000000000000000f RSI: 00007febfac2e0a0 RDI: 0000000000000004 [ 278.340917][T10152] RBP: 00007febfac2e090 R08: 0000000000000000 R09: 0000000000000000 [ 278.348903][T10152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.357210][T10152] R13: 00007febfcbee038 R14: 00007febfcbedfa0 R15: 00007ffe77be27a8 [ 278.365318][T10152] [ 278.588044][T10158] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.2138'. [ 278.676160][T10158] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 278.682770][T10158] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 279.929294][T10198] netlink: 'syz.2.2152': attribute type 10 has an invalid length. [ 280.049525][T10198] device hsr_slave_0 left promiscuous mode [ 280.103058][T10198] device hsr_slave_1 left promiscuous mode [ 281.049817][T10232] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.2166'. [ 281.108908][T10232] netlink: zone id is out of range [ 281.184577][T10232] netlink: zone id is out of range [ 281.190126][T10232] netlink: zone id is out of range [ 281.263810][T10240] FAULT_INJECTION: forcing a failure. [ 281.263810][T10240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.316297][T10232] netlink: zone id is out of range [ 281.325339][T10240] CPU: 0 PID: 10240 Comm: syz.4.2168 Not tainted 5.15.189-syzkaller #0 [ 281.333636][T10240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 281.343712][T10240] Call Trace: [ 281.347112][T10240] [ 281.350057][T10240] dump_stack_lvl+0x168/0x230 [ 281.354767][T10240] ? show_regs_print_info+0x20/0x20 [ 281.359981][T10240] ? load_image+0x3b0/0x3b0 [ 281.364494][T10240] ? __lock_acquire+0x7c60/0x7c60 [ 281.369549][T10240] should_fail+0x38c/0x4c0 [ 281.374004][T10240] _copy_to_user+0x2e/0x130 [ 281.378606][T10240] simple_read_from_buffer+0xe3/0x150 [ 281.383993][T10240] proc_fail_nth_read+0x19a/0x210 [ 281.389027][T10240] ? proc_fault_inject_write+0x2f0/0x2f0 [ 281.394670][T10240] ? fsnotify_perm+0x254/0x560 [ 281.399443][T10240] ? proc_fault_inject_write+0x2f0/0x2f0 [ 281.405162][T10240] vfs_read+0x2f6/0xcf0 [ 281.409329][T10240] ? kernel_read+0x1e0/0x1e0 [ 281.413931][T10240] ? __fget_files+0x40f/0x480 [ 281.418622][T10240] ? mutex_lock_nested+0x17/0x20 [ 281.423565][T10240] ? __fdget_pos+0x2bf/0x370 [ 281.428239][T10240] ? ksys_read+0x71/0x250 [ 281.432569][T10240] ksys_read+0x14d/0x250 [ 281.436815][T10240] ? vfs_write+0xd00/0xd00 [ 281.441257][T10240] ? lockdep_hardirqs_on+0x94/0x140 [ 281.446531][T10240] do_syscall_64+0x4c/0xa0 [ 281.450949][T10240] ? clear_bhb_loop+0x30/0x80 [ 281.455709][T10240] ? clear_bhb_loop+0x30/0x80 [ 281.460408][T10240] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 281.466303][T10240] RIP: 0033:0x7f83fd8265fc [ 281.470735][T10240] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 281.491074][T10240] RSP: 002b:00007f83fba8f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 281.499508][T10240] RAX: ffffffffffffffda RBX: 00007f83fda4efa0 RCX: 00007f83fd8265fc [ 281.507484][T10240] RDX: 000000000000000f RSI: 00007f83fba8f0a0 RDI: 0000000000000006 [ 281.515455][T10240] RBP: 00007f83fba8f090 R08: 0000000000000000 R09: 0000000000000000 [ 281.523522][T10240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.531500][T10240] R13: 00007f83fda4f038 R14: 00007f83fda4efa0 R15: 00007ffc74066168 [ 281.539499][T10240] [ 281.584353][ T6606] wlan1: Trigger new scan to find an IBSS to join [ 281.591842][T10232] netlink: zone id is out of range [ 281.604617][T10232] netlink: zone id is out of range [ 281.614762][T10232] netlink: zone id is out of range [ 281.648805][T10232] netlink: zone id is out of range [ 281.665784][T10232] netlink: zone id is out of range [ 281.694125][T10232] netlink: zone id is out of range [ 282.564831][ T144] wlan1: Creating new IBSS network, BSSID 9a:61:bd:c0:eb:0c [ 282.585663][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 283.203679][T10312] FAULT_INJECTION: forcing a failure. [ 283.203679][T10312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.349086][T10312] CPU: 0 PID: 10312 Comm: syz.0.2193 Not tainted 5.15.189-syzkaller #0 [ 283.357408][T10312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 283.367616][T10312] Call Trace: [ 283.370937][T10312] [ 283.373952][T10312] dump_stack_lvl+0x168/0x230 [ 283.378681][T10312] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 283.384899][T10312] ? show_regs_print_info+0x20/0x20 [ 283.390149][T10312] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 283.396378][T10312] ? dump_stack+0x5/0x20 [ 283.400689][T10312] should_fail+0x38c/0x4c0 [ 283.405278][T10312] _copy_from_user+0x2e/0x170 [ 283.410001][T10312] __sys_bpf+0x21b/0x670 [ 283.414287][T10312] ? bpf_link_show_fdinfo+0x340/0x340 [ 283.419739][T10312] ? vtime_user_exit+0x2dc/0x400 [ 283.424741][T10312] __x64_sys_bpf+0x78/0x90 [ 283.429197][T10312] do_syscall_64+0x4c/0xa0 [ 283.433665][T10312] ? clear_bhb_loop+0x30/0x80 [ 283.438371][T10312] ? clear_bhb_loop+0x30/0x80 [ 283.443090][T10312] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 283.449026][T10312] RIP: 0033:0x7faa66c57be9 [ 283.453485][T10312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.473143][T10312] RSP: 002b:00007faa64ebf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 283.481612][T10312] RAX: ffffffffffffffda RBX: 00007faa66e7efa0 RCX: 00007faa66c57be9 [ 283.489630][T10312] RDX: 0000000000000024 RSI: 0000200000000200 RDI: 0000000000000005 [ 283.497651][T10312] RBP: 00007faa64ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 283.505657][T10312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.513660][T10312] R13: 00007faa66e7f038 R14: 00007faa66e7efa0 R15: 00007ffdb01d2db8 [ 283.521725][T10312] [ 283.530743][T10315] netlink: 'syz.1.2194': attribute type 4 has an invalid length. [ 283.554529][T10315] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2194'. [ 284.143507][T10329] FAULT_INJECTION: forcing a failure. [ 284.143507][T10329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.230985][T10329] CPU: 0 PID: 10329 Comm: syz.1.2199 Not tainted 5.15.189-syzkaller #0 [ 284.239300][T10329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 284.249389][T10329] Call Trace: [ 284.252695][T10329] [ 284.255658][T10329] dump_stack_lvl+0x168/0x230 [ 284.260371][T10329] ? show_regs_print_info+0x20/0x20 [ 284.265689][T10329] ? load_image+0x3b0/0x3b0 [ 284.270226][T10329] ? __lock_acquire+0x7c60/0x7c60 [ 284.275273][T10329] ? perf_trace_lock_acquire+0xe3/0x3c0 [ 284.280858][T10329] should_fail+0x38c/0x4c0 [ 284.285308][T10329] _copy_from_user+0x2e/0x170 [ 284.290024][T10329] __copy_msghdr_from_user+0x448/0x5e0 [ 284.295614][T10329] ? verify_lock_unused+0x140/0x140 [ 284.300931][T10329] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 284.306270][T10329] ___sys_sendmsg+0x156/0x260 [ 284.311181][T10329] ? __sys_sendmsg+0x250/0x250 [ 284.316007][T10329] ? vfs_write+0x84d/0xd00 [ 284.320484][T10329] ? __fdget+0x18b/0x210 [ 284.324850][T10329] __se_sys_sendmsg+0x190/0x250 [ 284.329734][T10329] ? __x64_sys_sendmsg+0x80/0x80 [ 284.334709][T10329] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 284.340743][T10329] ? lockdep_hardirqs_on+0x94/0x140 [ 284.345979][T10329] do_syscall_64+0x4c/0xa0 [ 284.350426][T10329] ? clear_bhb_loop+0x30/0x80 [ 284.355138][T10329] ? clear_bhb_loop+0x30/0x80 [ 284.359847][T10329] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 284.365780][T10329] RIP: 0033:0x7fbafa720be9 [ 284.370230][T10329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.389865][T10329] RSP: 002b:00007fbaf8988038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.398328][T10329] RAX: ffffffffffffffda RBX: 00007fbafa947fa0 RCX: 00007fbafa720be9 [ 284.406332][T10329] RDX: 0000000000000000 RSI: 0000200000001f80 RDI: 0000000000000005 [ 284.414342][T10329] RBP: 00007fbaf8988090 R08: 0000000000000000 R09: 0000000000000000 [ 284.422341][T10329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.430426][T10329] R13: 00007fbafa948038 R14: 00007fbafa947fa0 R15: 00007ffc684c02c8 [ 284.438454][T10329] [ 284.996836][T10357] FAULT_INJECTION: forcing a failure. [ 284.996836][T10357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.057669][T10357] CPU: 1 PID: 10357 Comm: syz.3.2208 Not tainted 5.15.189-syzkaller #0 [ 285.065963][T10357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 285.076134][T10357] Call Trace: [ 285.079521][T10357] [ 285.082472][T10357] dump_stack_lvl+0x168/0x230 [ 285.087177][T10357] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 285.093358][T10357] ? show_regs_print_info+0x20/0x20 [ 285.098695][T10357] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 285.104905][T10357] should_fail+0x38c/0x4c0 [ 285.109372][T10357] _copy_from_user+0x2e/0x170 [ 285.114069][T10357] __copy_msghdr_from_user+0x448/0x5e0 [ 285.119543][T10357] ? verify_lock_unused+0x140/0x140 [ 285.124772][T10357] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 285.130114][T10357] ___sys_sendmsg+0x156/0x260 [ 285.134839][T10357] ? __sys_sendmsg+0x250/0x250 [ 285.139643][T10357] ? ktime_get_real_ts64+0x420/0x420 [ 285.144969][T10357] ? __fdget+0x18b/0x210 [ 285.149228][T10357] __se_sys_sendmsg+0x190/0x250 [ 285.154095][T10357] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 285.160358][T10357] ? __x64_sys_sendmsg+0x80/0x80 [ 285.165332][T10357] ? syscall_enter_from_user_mode+0x2a/0x70 [ 285.171258][T10357] do_syscall_64+0x4c/0xa0 [ 285.175781][T10357] ? clear_bhb_loop+0x30/0x80 [ 285.180480][T10357] ? clear_bhb_loop+0x30/0x80 [ 285.185181][T10357] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 285.191190][T10357] RIP: 0033:0x7f39ba7d5be9 [ 285.195646][T10357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.215365][T10357] RSP: 002b:00007f39b8a3d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.223900][T10357] RAX: ffffffffffffffda RBX: 00007f39ba9fcfa0 RCX: 00007f39ba7d5be9 [ 285.231897][T10357] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000005 [ 285.239891][T10357] RBP: 00007f39b8a3d090 R08: 0000000000000000 R09: 0000000000000000 [ 285.248151][T10357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.256255][T10357] R13: 00007f39ba9fd038 R14: 00007f39ba9fcfa0 R15: 00007ffdd51213b8 [ 285.264281][T10357] [ 285.485664][T10367] netlink: 'syz.3.2211': attribute type 1 has an invalid length. [ 285.524355][T10367] netlink: 'syz.3.2211': attribute type 3 has an invalid length. [ 285.540329][T10367] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2211'. [ 286.113671][T10392] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.2220'. [ 286.547948][T10398] FAULT_INJECTION: forcing a failure. [ 286.547948][T10398] name failslab, interval 1, probability 0, space 0, times 0 [ 286.561269][T10398] CPU: 1 PID: 10398 Comm: syz.2.2221 Not tainted 5.15.189-syzkaller #0 [ 286.569537][T10398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 286.579872][T10398] Call Trace: [ 286.583163][T10398] [ 286.586104][T10398] dump_stack_lvl+0x168/0x230 [ 286.590797][T10398] ? show_regs_print_info+0x20/0x20 [ 286.596009][T10398] ? load_image+0x3b0/0x3b0 [ 286.600614][T10398] ? __might_sleep+0xf0/0xf0 [ 286.605228][T10398] ? __lock_acquire+0x7c60/0x7c60 [ 286.610378][T10398] should_fail+0x38c/0x4c0 [ 286.614837][T10398] should_failslab+0x5/0x20 [ 286.619350][T10398] slab_pre_alloc_hook+0x51/0xc0 [ 286.624306][T10398] __kmalloc+0x6b/0x330 [ 286.628467][T10398] ? tomoyo_encode+0x27e/0x540 [ 286.633245][T10398] tomoyo_encode+0x27e/0x540 [ 286.637852][T10398] tomoyo_realpath_from_path+0x5cd/0x610 [ 286.643510][T10398] tomoyo_path_number_perm+0x1d5/0x5d0 [ 286.649027][T10398] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 286.654489][T10398] ? check_preemption_disabled+0x42/0x110 [ 286.660369][T10398] security_file_ioctl+0x6c/0xa0 [ 286.665420][T10398] __se_sys_ioctl+0x48/0x170 [ 286.670036][T10398] do_syscall_64+0x4c/0xa0 [ 286.674485][T10398] ? clear_bhb_loop+0x30/0x80 [ 286.679364][T10398] ? clear_bhb_loop+0x30/0x80 [ 286.684133][T10398] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 286.690142][T10398] RIP: 0033:0x7febfc9c6be9 [ 286.694595][T10398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.714301][T10398] RSP: 002b:00007febfac2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.722733][T10398] RAX: ffffffffffffffda RBX: 00007febfcbedfa0 RCX: 00007febfc9c6be9 [ 286.730714][T10398] RDX: 0000200000000180 RSI: 0000000000008914 RDI: 0000000000000005 [ 286.738788][T10398] RBP: 00007febfac2e090 R08: 0000000000000000 R09: 0000000000000000 [ 286.746765][T10398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.754760][T10398] R13: 00007febfcbee038 R14: 00007febfcbedfa0 R15: 00007ffe77be27a8 [ 286.762770][T10398] [ 286.774490][T10398] ERROR: Out of memory at tomoyo_realpath_from_path. [ 287.208682][T10417] FAULT_INJECTION: forcing a failure. [ 287.208682][T10417] name failslab, interval 1, probability 0, space 0, times 0 [ 287.271741][T10417] CPU: 0 PID: 10417 Comm: syz.4.2228 Not tainted 5.15.189-syzkaller #0 [ 287.280132][T10417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 287.290214][T10417] Call Trace: [ 287.293514][T10417] [ 287.296455][T10417] dump_stack_lvl+0x168/0x230 [ 287.301181][T10417] ? show_regs_print_info+0x20/0x20 [ 287.306407][T10417] ? load_image+0x3b0/0x3b0 [ 287.310929][T10417] ? __might_sleep+0xf0/0xf0 [ 287.315701][T10417] ? __lock_acquire+0x7c60/0x7c60 [ 287.320830][T10417] should_fail+0x38c/0x4c0 [ 287.325267][T10417] should_failslab+0x5/0x20 [ 287.329851][T10417] slab_pre_alloc_hook+0x51/0xc0 [ 287.334804][T10417] __kmalloc+0x6b/0x330 [ 287.338972][T10417] ? tomoyo_encode+0x27e/0x540 [ 287.343928][T10417] tomoyo_encode+0x27e/0x540 [ 287.348535][T10417] tomoyo_realpath_from_path+0x5cd/0x610 [ 287.354294][T10417] tomoyo_path_number_perm+0x1d5/0x5d0 [ 287.359763][T10417] ? verify_lock_unused+0x140/0x140 [ 287.364979][T10417] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 287.370534][T10417] ? ksys_write+0x1c7/0x250 [ 287.375270][T10417] security_file_ioctl+0x6c/0xa0 [ 287.380227][T10417] __se_sys_ioctl+0x48/0x170 [ 287.385193][T10417] do_syscall_64+0x4c/0xa0 [ 287.389737][T10417] ? clear_bhb_loop+0x30/0x80 [ 287.394548][T10417] ? clear_bhb_loop+0x30/0x80 [ 287.399236][T10417] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 287.405328][T10417] RIP: 0033:0x7f83fd827be9 [ 287.410099][T10417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.429810][T10417] RSP: 002b:00007f83fba8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 287.438256][T10417] RAX: ffffffffffffffda RBX: 00007f83fda4efa0 RCX: 00007f83fd827be9 [ 287.446241][T10417] RDX: 0000200000000640 RSI: 000000000000541b RDI: 0000000000000003 [ 287.454307][T10417] RBP: 00007f83fba8f090 R08: 0000000000000000 R09: 0000000000000000 [ 287.462478][T10417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.470478][T10417] R13: 00007f83fda4f038 R14: 00007f83fda4efa0 R15: 00007ffc74066168 [ 287.478482][T10417] [ 287.495442][T10417] ERROR: Out of memory at tomoyo_realpath_from_path. [ 287.970324][T10437] FAULT_INJECTION: forcing a failure. [ 287.970324][T10437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.024779][T10437] CPU: 1 PID: 10437 Comm: syz.1.2235 Not tainted 5.15.189-syzkaller #0 [ 288.033101][T10437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 288.043194][T10437] Call Trace: [ 288.046499][T10437] [ 288.049453][T10437] dump_stack_lvl+0x168/0x230 [ 288.054179][T10437] ? show_regs_print_info+0x20/0x20 [ 288.059413][T10437] ? load_image+0x3b0/0x3b0 [ 288.064043][T10437] ? __lock_acquire+0x7c60/0x7c60 [ 288.069274][T10437] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 288.075211][T10437] should_fail+0x38c/0x4c0 [ 288.079673][T10437] _copy_from_user+0x2e/0x170 [ 288.084385][T10437] __sys_bpf+0x21b/0x670 [ 288.088686][T10437] ? bpf_link_show_fdinfo+0x340/0x340 [ 288.094105][T10437] ? rcu_nmi_exit+0x6f/0xf0 [ 288.098782][T10437] ? vtime_user_exit+0x2dc/0x400 [ 288.104195][T10437] __x64_sys_bpf+0x78/0x90 [ 288.108671][T10437] do_syscall_64+0x4c/0xa0 [ 288.113126][T10437] ? clear_bhb_loop+0x30/0x80 [ 288.117832][T10437] ? clear_bhb_loop+0x30/0x80 [ 288.122545][T10437] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 288.128465][T10437] RIP: 0033:0x7fbafa720be9 [ 288.132910][T10437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.152784][T10437] RSP: 002b:00007fbaf8988038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 288.161425][T10437] RAX: ffffffffffffffda RBX: 00007fbafa947fa0 RCX: 00007fbafa720be9 [ 288.169428][T10437] RDX: 0000000000000010 RSI: 0000200000000580 RDI: 000000000000000f [ 288.177432][T10437] RBP: 00007fbaf8988090 R08: 0000000000000000 R09: 0000000000000000 [ 288.185538][T10437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.193560][T10437] R13: 00007fbafa948038 R14: 00007fbafa947fa0 R15: 00007ffc684c02c8 [ 288.201630][T10437]