last executing test programs: 2.47565665s ago: executing program 2 (id=1328): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000005f2e"], &(0x7f0000000b80)=""/4090, 0x5e, 0xffa, 0x1}, 0x20) r0 = perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x0, 0x3560, 0x0, 0x0, 0x0, 0xb9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000002) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x10284, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x6b, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x549e4282525b6d9b) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000014006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1f00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e635"], 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90324fc60100c034002a10100feff000037153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0xa888, 0x31}, 0x80, &(0x7f0000001000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66", 0xe}], 0x1}, 0x0) 2.176534925s ago: executing program 2 (id=1330): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_clone(0x90000, &(0x7f0000000640)="2ea9a05b29b7fe3a1a269a413bc2cd0e0c9d635e7cee3c2fa515f5708ccafb52adff557c9c2f835bb9bed07cf7c5a6d655b207171f0af5f195e588f273923dda39d0f3844da8701b02a067c5291d62193ab733547da4d139f5b7cb74777b48cfda017da105c3e6fecd7d8e7e9f", 0x6d, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)="615607ced3c80c18dce15eac0a6f266270dad4585c324df3d1874708042ffeff8d9d9f01e0507a2cda29f1dd8b04bab29834f534") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 2.175987795s ago: executing program 3 (id=1331): r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r0, &(0x7f0000003840)={&(0x7f00000000c0)=@in={0x2, 0x4e23, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x10, 0x1, 0x3}], 0x10}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x2263) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x14, 0x4, 0x4, 0x2}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x161f, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0xc8, 0x0, 0x6, 0xbe20}, 0x0, 0x1, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r4, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000000)={'c', ' *:* ', 'w\x00'}, 0x8) 2.071357733s ago: executing program 2 (id=1332): r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext={0x1, 0x5}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000740)=[0x0], 0x0, 0x40cf, 0x0, 0x0, 0x10, &(0x7f00000002c0), 0x0, 0x0, 0x3c, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r3 = getpid() r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000, 0xfffffffffffffffc}, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0xc, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xbd, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000060000850000007700000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r8, r7, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x8e, 0x7f, 0x3, 0x12, 0x0, 0x3, 0x10008, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x240, 0x8f2c, 0xf, 0x9, 0x401, 0x6000000, 0x8, 0x0, 0x8, 0x0, 0x6}, r8, 0x3, r0, 0x1) r9 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r9}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r6, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc, &(0x7f0000000340)=[0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbe, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000880), &(0x7f0000000480), 0x8, 0x44, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=r10, @ANYBLOB="04000000000000000000000000000000000000007be0f34d9f7d10ea398930", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="04000000000000000200"/28], 0x50) recvmsg$kcm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/249, 0xf9}], 0x1}, 0x40000140) 2.021132327s ago: executing program 3 (id=1333): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0x0}, 0x94) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e60, @multicast1}, 0x10, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @private=0xa010102}}}], 0x20}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a181003700000001010000000000000e00", 0x22}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x20}, 0x0, 0x0, 0xfffffffd, 0x5, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x12280, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x0, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9bd1a63619"], 0x0}, 0x90) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a0091000b00b80000fc005f02"], 0xfe33) recvmsg$unix(r1, &(0x7f00000005c0)={&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000640)=""/201, 0xc9}, {&(0x7f0000000740)=""/220, 0xdc}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f0000000840)=""/190, 0xbe}, {&(0x7f00000004c0)=""/85, 0x55}], 0x5, &(0x7f00000001c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x2020) setsockopt$sock_attach_bpf(r4, 0x0, 0x28, 0x0, 0x10) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x2) 1.959439562s ago: executing program 2 (id=1334): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40012020) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xa, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00000000140000", @ANYRES32, @ANYBLOB="0000ffffffff00"/20, @ANYRES32=0x0, @ANYRES32], 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r2, 0x0, 0x900}, 0x38) 1.711611332s ago: executing program 3 (id=1337): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x2e, &(0x7f0000000040), 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) socketpair(0x2, 0x5, 0x84, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x1f, &(0x7f0000000600)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x79}, @map_fd={0x18, 0x5}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x684}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, 0x0, 0x0, 0x5}, 0x94) r5 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r5, &(0x7f0000007940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="20000000000000008400000002000000940404"], 0x20}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r6, 0x8b05, &(0x7f0000000200)={'bond0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.372141159s ago: executing program 0 (id=1339): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000005f2e"], &(0x7f0000000b80)=""/4090, 0x5e, 0xffa, 0x1}, 0x20) r0 = perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x0, 0x3560, 0x0, 0x0, 0x0, 0xb9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000002) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x10284, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x6b, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x549e4282525b6d9b) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000014006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1f00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e635"], 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90324fc60100c034002a10100feff000037153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0xa888, 0x31}, 0x80, &(0x7f0000001000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66", 0xe}], 0x1}, 0x0) 1.159483406s ago: executing program 0 (id=1340): bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x61]}}, 0x0, 0x27}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) socket$kcm(0xa, 0x5, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={0x0, &(0x7f0000000600)=""/4, 0x0, 0x4, 0x1}, 0x28) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kfree\x00', r3}, 0x18) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831373f00000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) 1.080618462s ago: executing program 0 (id=1341): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_clone(0x90000, &(0x7f0000000640)="2ea9a05b29b7fe3a1a269a413bc2cd0e0c9d635e7cee3c2fa515f5708ccafb52adff557c9c2f835bb9bed07cf7c5a6d655b207171f0af5f195e588f273923dda39d0f3844da8701b02a067c5291d62193ab733547da4d139f5b7cb74777b48cfda017da105c3e6fecd7d8e7e9f", 0x6d, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)="615607ced3c80c18dce15eac0a6f266270dad4585c324df3d1874708042ffeff8d9d9f01e0507a2cda29f1dd8b04bab29834f534") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 985.68996ms ago: executing program 0 (id=1342): r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext={0x1, 0x5}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000740)=[0x0], 0x0, 0x40cf, 0x0, 0x0, 0x10, &(0x7f00000002c0), 0x0, 0x0, 0x3c, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r3 = getpid() r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000, 0xfffffffffffffffc}, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0xc, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xbd, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000060000850000007700000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r8, r7, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x8e, 0x7f, 0x3, 0x12, 0x0, 0x3, 0x10008, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x240, 0x8f2c, 0xf, 0x9, 0x401, 0x6000000, 0x8, 0x0, 0x8, 0x0, 0x6}, r8, 0x3, r0, 0x1) r9 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r9}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r6, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc, &(0x7f0000000340)=[0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbe, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000880), &(0x7f0000000480), 0x8, 0x44, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=r10, @ANYBLOB="04000000000000000000000000000000000000007be0f34d9f7d10ea398930", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="04000000000000000200"/28], 0x50) recvmsg$kcm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/249, 0xf9}], 0x1}, 0x40000140) 984.22623ms ago: executing program 2 (id=1343): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYRES64=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000008000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}, @typedef={0x4, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x4e, 0x0, 0x8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='afs_make_fs_call2\x00', r2, 0x0, 0x1}, 0x18) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) setsockopt$sock_attach_bpf(r3, 0x1, 0x14, &(0x7f0000000040)=r7, 0x3b) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0xe, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x4030582a, &(0x7f0000000040)) write$cgroup_subtree(r8, &(0x7f0000000280)=ANY=[@ANYRESHEX=r8], 0xfdef) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r11, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000340)="0683db4291743247", 0x8}, {&(0x7f0000000540)="3a7df4271d810bbfe75ff3c934b36ea9bbdaf502b38bd77110c02d4e8f49a80754d2fe7eb408faf818cf7118e019d680b341fe9e31783db61ad45b153e768f935fe50fc844af0b", 0x47}], 0x2}, 0x20004000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r8, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x40, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x4}, @alu={0x4, 0x0, 0xc, 0x3, 0xa, 0x0, 0x1}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @tail_call, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x2}, @exit, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4c95}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='syzkaller\x00', 0x4, 0x9d, &(0x7f0000000640)=""/157, 0x41000, 0x20, '\x00', r12, 0x25, r4, 0x8, &(0x7f0000000800)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0x1, 0xb6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000880)=[r8, r1], &(0x7f00000008c0)=[{0x0, 0x3, 0xe, 0xa}, {0x2, 0x5, 0xb, 0x3}], 0x10, 0x4}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r13, 0x3a, 0xcc0, 0xcc0, &(0x7f0000000200)="e460cdfbef2408322900119386dd6a00000000072feb311ccd3ec8a755c1e1380081ffad008036e8d5003aff010000001400000500242909880bd320d98a61a91121e9bf", 0x0, 0x401, 0x0, 0xa8, 0x0, &(0x7f00000011c0)="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", &(0x7f00000004c0)="b33620dad49cc786c86a5c5444e76c2a1ef9224fb91083d2ba4368e98a14467703e9ee585196fa95320bd53c6a76ad443b81dc833b22016aeaafb4597c06919ecf7e5ea4d0a8995feaaf9a9feb0c4b5277398049a2f5475f6ceb26bd128189f4b1b3c662d3d1630717791de0cdac3ce6e01c5719b670da5ded7dfa9dda53f04ad151cb952d708eaa69e983dcfab36b2dac3f3fe85e1d86b3d73d4879fb11cfac51f3cb669a50", 0x1, 0xfffffffd}, 0x22) 867.377179ms ago: executing program 0 (id=1344): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000005f2e"], &(0x7f0000000b80)=""/4090, 0x5e, 0xffa, 0x1}, 0x20) r0 = perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x0, 0x3560, 0x0, 0x0, 0x0, 0xb9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000002) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x10284, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x6b, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x549e4282525b6d9b) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000014006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1f00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e635"], 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90324fc60100c034002a10100feff000037153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0xa888, 0x31}, 0x80, &(0x7f0000001000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66", 0xe}], 0x1}, 0x0) 808.331604ms ago: executing program 1 (id=1345): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0x0}, 0x94) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e60, @multicast1}, 0x10, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @private=0xa010102}}}], 0x20}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a181003700000001010000000000000e00", 0x22}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x20}, 0x0, 0x0, 0xfffffffd, 0x5, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x12280, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x0, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9bd1a63619"], 0x0}, 0x90) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a0091000b00b80000fc005f02"], 0xfe33) recvmsg$unix(r1, &(0x7f00000005c0)={&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000640)=""/201, 0xc9}, {&(0x7f0000000740)=""/220, 0xdc}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f0000000840)=""/190, 0xbe}, {&(0x7f00000004c0)=""/85, 0x55}], 0x5, &(0x7f00000001c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x2020) setsockopt$sock_attach_bpf(r4, 0x0, 0x28, 0x0, 0x10) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x2) 711.781372ms ago: executing program 3 (id=1346): r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext={0x1, 0x5}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000740)=[0x0], 0x0, 0x40cf, 0x0, 0x0, 0x10, &(0x7f00000002c0), 0x0, 0x0, 0x3c, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r3 = getpid() r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000, 0xfffffffffffffffc}, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0xc, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xbd, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000060000850000007700000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r8, r7, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x8e, 0x7f, 0x3, 0x12, 0x0, 0x3, 0x10008, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x240, 0x8f2c, 0xf, 0x9, 0x401, 0x6000000, 0x8, 0x0, 0x8, 0x0, 0x6}, r8, 0x3, r0, 0x1) r9 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r9}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r6, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc, &(0x7f0000000340)=[0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbe, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000880), &(0x7f0000000480), 0x8, 0x44, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=r10, @ANYBLOB="04000000000000000000000000000000000000007be0f34d9f7d10ea398930", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="04000000000000000200"/28], 0x50) recvmsg$kcm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/249, 0xf9}], 0x1}, 0x40000140) 579.503813ms ago: executing program 1 (id=1347): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2a, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x4, 0x8}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00'}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="020000000400000008000000010000008000000010017feba514593a72bdbd28730d80", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x1}) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='ata_tf_load\x00', r1, 0x0, 0x100000000}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89fe, &(0x7f0000000080)) 560.259264ms ago: executing program 3 (id=1348): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0x0}, 0x94) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e60, @multicast1}, 0x10, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @private=0xa010102}}}], 0x20}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a181003700000001010000000000000e00", 0x22}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x20}, 0x0, 0x0, 0xfffffffd, 0x5, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000003c0)={0x4, 0x80, 0x5e, 0xff, 0x6, 0xa5, 0x0, 0x9, 0x1040, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2c, 0x4, @perf_config_ext={0x5, 0xfffffffffffffffd}, 0x1e611, 0x2, 0x101, 0x3, 0x4, 0x3, 0x9, 0x0, 0x5, 0x0, 0xb92}) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x12280, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x0, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9bd1a63619"], 0x0}, 0x90) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a0091000b00b80000fc005f02"], 0xfe33) recvmsg$unix(r1, &(0x7f00000005c0)={&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000640)=""/201, 0xc9}, {&(0x7f0000000740)=""/220, 0xdc}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f0000000840)=""/190, 0xbe}, {&(0x7f00000004c0)=""/85, 0x55}], 0x5, &(0x7f00000001c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x2020) setsockopt$sock_attach_bpf(r4, 0x0, 0x28, 0x0, 0x10) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x2) 556.847005ms ago: executing program 0 (id=1349): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x28, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r4}, 0x20) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000200)={r3}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f00000001c0), &(0x7f0000000280)=r5}, 0x20) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x2a, &(0x7f0000000100)=r10, 0x4) recvmsg(r8, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) r11 = gettid() sendmsg$unix(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000240)="a6bbe78ecaab", 0x6}], 0x1, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r11, 0xee00}}}], 0x20}, 0x400c1) 426.774945ms ago: executing program 1 (id=1350): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_clone(0x90000, &(0x7f0000000640)="2ea9a05b29b7fe3a1a269a413bc2cd0e0c9d635e7cee3c2fa515f5708ccafb52adff557c9c2f835bb9bed07cf7c5a6d655b207171f0af5f195e588f273923dda39d0f3844da8701b02a067c5291d62193ab733547da4d139f5b7cb74777b48cfda017da105c3e6fecd7d8e7e9f", 0x6d, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)="615607ced3c80c18dce15eac0a6f266270dad4585c324df3d1874708042ffeff8d9d9f01e0507a2cda29f1dd8b04bab29834f534f05b41d3") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 366.21914ms ago: executing program 3 (id=1351): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40012020) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xa, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00000000140000", @ANYRES32, @ANYBLOB="0000ffffffff00"/20, @ANYRES32=0x0, @ANYRES32], 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r2, 0x0, 0x900}, 0x38) 323.698563ms ago: executing program 1 (id=1352): r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext={0x1, 0x5}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000740)=[0x0], 0x0, 0x40cf, 0x0, 0x0, 0x10, &(0x7f00000002c0), 0x0, 0x0, 0x3c, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r3 = getpid() r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000, 0xfffffffffffffffc}, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0xc, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xbd, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000060000850000007700000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r8, r7, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x8e, 0x7f, 0x3, 0x12, 0x0, 0x3, 0x10008, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x240, 0x8f2c, 0xf, 0x9, 0x401, 0x6000000, 0x8, 0x0, 0x8, 0x0, 0x6}, r8, 0x3, r0, 0x1) r9 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r9}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r6, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc, &(0x7f0000000340)=[0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbe, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000880), &(0x7f0000000480), 0x8, 0x44, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=r10, @ANYBLOB="04000000000000000000000000000000000000007be0f34d9f7d10ea398930", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="04000000000000000200"/28], 0x50) recvmsg$kcm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/249, 0xf9}], 0x1}, 0x40000140) 176.086445ms ago: executing program 1 (id=1353): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40012020) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xa, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x4, r1}, 0x38) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r3, 0x0, 0x900}, 0x38) 1.843329ms ago: executing program 1 (id=1354): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000005f2e"], &(0x7f0000000b80)=""/4090, 0x5e, 0xffa, 0x1}, 0x20) r0 = perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x0, 0x3560, 0x0, 0x0, 0x0, 0xb9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000002) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x10284, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x6b, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x549e4282525b6d9b) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000014006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1f00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e635"], 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90324fc60100c034002a10100feff000037153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0xa888, 0x31}, 0x80, &(0x7f0000001000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66", 0xe}], 0x1}, 0x0) 0s ago: executing program 2 (id=1355): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0x0}, 0x94) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e60, @multicast1}, 0x10, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @private=0xa010102}}}], 0x20}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a181003700000001010000000000000e00", 0x22}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x20}, 0x0, 0x0, 0xfffffffd, 0x5, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x12280, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x0, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9bd1a63619"], 0x0}, 0x90) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a0091000b00b80000fc005f02"], 0xfe33) recvmsg$unix(r1, &(0x7f00000005c0)={&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000640)=""/201, 0xc9}, {&(0x7f0000000740)=""/220, 0xdc}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f0000000840)=""/190, 0xbe}, {&(0x7f00000004c0)=""/85, 0x55}], 0x5, &(0x7f00000001c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x2020) setsockopt$sock_attach_bpf(r4, 0x0, 0x28, 0x0, 0x10) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x2) kernel console output (not intermixed with test programs): 68/0xd2 [ 137.287781][ T7063] RIP: 0033:0x7f186418ebe9 [ 137.292189][ T7063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.312060][ T7063] RSP: 002b:00007f1865070038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.320489][ T7063] RAX: ffffffffffffffda RBX: 00007f18643b5fa0 RCX: 00007f186418ebe9 [ 137.329511][ T7063] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 137.337577][ T7063] RBP: 00007f1865070090 R08: 0000000000000000 R09: 0000000000000000 [ 137.345731][ T7063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.353783][ T7063] R13: 00007f18643b6038 R14: 00007f18643b5fa0 R15: 00007fff4d5463b8 [ 137.361771][ T7063] [ 137.647576][ T7074] syzkaller0: entered promiscuous mode [ 137.653136][ T7074] syzkaller0: entered allmulticast mode [ 137.665931][ T7078] netlink: 'syz.2.457': attribute type 39 has an invalid length. [ 137.974845][ T7092] netlink: 60 bytes leftover after parsing attributes in process `syz.2.462'. [ 140.255117][ T7092] netlink: 60 bytes leftover after parsing attributes in process `syz.2.462'. [ 140.275108][ T7115] netlink: 'syz.0.469': attribute type 39 has an invalid length. [ 140.490260][ T7120] wg2: left promiscuous mode [ 140.494955][ T7120] wg2: left allmulticast mode [ 140.529125][ T7125] wg2: entered promiscuous mode [ 140.534502][ T7125] wg2: entered allmulticast mode [ 140.551844][ T7123] netlink: 'syz.3.473': attribute type 10 has an invalid length. [ 140.607421][ T7123] netlink: 'syz.3.473': attribute type 25 has an invalid length. [ 140.615229][ T7123] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.473'. [ 140.804556][ T7128] FAULT_INJECTION: forcing a failure. [ 140.804556][ T7128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.822569][ T7128] CPU: 0 PID: 7128 Comm: syz.0.475 Not tainted 6.6.102-syzkaller #0 [ 140.830633][ T7128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 140.840734][ T7128] Call Trace: [ 140.844048][ T7128] [ 140.847026][ T7128] dump_stack_lvl+0x16c/0x230 [ 140.851767][ T7128] ? show_regs_print_info+0x20/0x20 [ 140.857102][ T7128] ? load_image+0x3b0/0x3b0 [ 140.861675][ T7128] ? __lock_acquire+0x7c80/0x7c80 [ 140.866752][ T7128] ? snprintf+0xdb/0x120 [ 140.871061][ T7128] should_fail_ex+0x39d/0x4d0 [ 140.875805][ T7128] _copy_to_user+0x2f/0xa0 [ 140.880277][ T7128] simple_read_from_buffer+0xe7/0x150 [ 140.885810][ T7128] proc_fail_nth_read+0x1e3/0x250 [ 140.890901][ T7128] ? proc_fault_inject_write+0x340/0x340 [ 140.896603][ T7128] ? fsnotify_perm+0x271/0x5e0 [ 140.901471][ T7128] ? proc_fault_inject_write+0x340/0x340 [ 140.907332][ T7128] vfs_read+0x27e/0x920 [ 140.911643][ T7128] ? kernel_read+0x1e0/0x1e0 [ 140.916281][ T7128] ? __fget_files+0x28/0x4d0 [ 140.920910][ T7128] ? __fget_files+0x44a/0x4d0 [ 140.925667][ T7128] ? __fdget_pos+0x2a3/0x330 [ 140.930306][ T7128] ? ksys_read+0x75/0x250 [ 140.934700][ T7128] ksys_read+0x147/0x250 [ 140.939008][ T7128] ? vfs_write+0x940/0x940 [ 140.943595][ T7128] ? lockdep_hardirqs_on+0x98/0x150 [ 140.948878][ T7128] do_syscall_64+0x55/0xb0 [ 140.953359][ T7128] ? clear_bhb_loop+0x40/0x90 [ 140.958127][ T7128] ? clear_bhb_loop+0x40/0x90 [ 140.964355][ T7128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 140.970422][ T7128] RIP: 0033:0x7f39fa98d5fc [ 140.974935][ T7128] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 140.994597][ T7128] RSP: 002b:00007f39fb82c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.003333][ T7128] RAX: ffffffffffffffda RBX: 00007f39fabb5fa0 RCX: 00007f39fa98d5fc [ 141.011357][ T7128] RDX: 000000000000000f RSI: 00007f39fb82c0a0 RDI: 0000000000000006 [ 141.019386][ T7128] RBP: 00007f39fb82c090 R08: 0000000000000000 R09: 0000000000000000 [ 141.027406][ T7128] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 141.035858][ T7128] R13: 00007f39fabb6038 R14: 00007f39fabb5fa0 R15: 00007fffa6ef8fc8 [ 141.043924][ T7128] [ 141.338768][ T7135] netlink: 'syz.3.477': attribute type 10 has an invalid length. [ 141.395362][ T7135] team0: Port device netdevsim0 added [ 141.537094][ T7140] netlink: 'syz.2.479': attribute type 21 has an invalid length. [ 141.552509][ T7140] netlink: 132 bytes leftover after parsing attributes in process `syz.2.479'. [ 141.573065][ T7138] netlink: 'syz.0.478': attribute type 39 has an invalid length. [ 141.603021][ T7140] FAULT_INJECTION: forcing a failure. [ 141.603021][ T7140] name failslab, interval 1, probability 0, space 0, times 0 [ 141.607574][ T7146] netlink: 'syz.3.480': attribute type 21 has an invalid length. [ 141.632183][ T7140] CPU: 1 PID: 7140 Comm: syz.2.479 Not tainted 6.6.102-syzkaller #0 [ 141.640231][ T7140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 141.640304][ T7146] netlink: 'syz.3.480': attribute type 1 has an invalid length. [ 141.650307][ T7140] Call Trace: [ 141.650325][ T7140] [ 141.650335][ T7140] dump_stack_lvl+0x16c/0x230 [ 141.650362][ T7140] ? show_regs_print_info+0x20/0x20 [ 141.650380][ T7140] ? load_image+0x3b0/0x3b0 [ 141.650403][ T7140] ? perf_trace_lock_acquire+0xfb/0x3e0 [ 141.650425][ T7140] ? verify_lock_unused+0x140/0x140 [ 141.650445][ T7140] ? perf_trace_lock_acquire+0xfb/0x3e0 [ 141.650472][ T7140] should_fail_ex+0x39d/0x4d0 [ 141.650500][ T7140] should_failslab+0x9/0x20 [ 141.650521][ T7140] slab_pre_alloc_hook+0x59/0x310 [ 141.650550][ T7140] kmem_cache_alloc+0x5a/0x2e0 [ 141.650570][ T7140] ? skb_clone+0x1eb/0x370 [ 141.650599][ T7140] skb_clone+0x1eb/0x370 [ 141.650625][ T7140] __netlink_deliver_tap+0x41c/0x830 [ 141.650661][ T7140] ? netlink_deliver_tap+0x2e/0x1b0 [ 141.650683][ T7140] netlink_deliver_tap+0x19c/0x1b0 [ 141.650705][ T7140] netlink_unicast+0x72c/0x8d0 [ 141.650739][ T7140] netlink_sendmsg+0x8c1/0xbe0 [ 141.650776][ T7140] ? netlink_getsockopt+0x580/0x580 [ 141.650800][ T7140] ? aa_sock_msg_perm+0x94/0x150 [ 141.650824][ T7140] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 141.658924][ T7146] FAULT_INJECTION: forcing a failure. [ 141.658924][ T7146] name failslab, interval 1, probability 0, space 0, times 0 [ 141.661855][ T7140] ? security_socket_sendmsg+0x80/0xa0 [ 141.661882][ T7140] ? netlink_getsockopt+0x580/0x580 [ 141.661903][ T7140] ____sys_sendmsg+0x5bf/0x950 [ 141.661935][ T7140] ? __asan_memset+0x22/0x40 [ 141.661956][ T7140] ? __sys_sendmsg_sock+0x30/0x30 [ 141.661975][ T7140] ? __import_iovec+0x5f2/0x860 [ 141.662008][ T7140] ? import_iovec+0x73/0xa0 [ 141.814085][ T7140] ___sys_sendmsg+0x220/0x290 [ 141.818797][ T7140] ? __sys_sendmsg+0x270/0x270 [ 141.823629][ T7140] ? __lock_acquire+0x7c80/0x7c80 [ 141.828729][ T7140] __se_sys_sendmsg+0x1a5/0x270 [ 141.833707][ T7140] ? __x64_sys_sendmsg+0x80/0x80 [ 141.838695][ T7140] ? lockdep_hardirqs_on+0x98/0x150 [ 141.843950][ T7140] do_syscall_64+0x55/0xb0 [ 141.848395][ T7140] ? clear_bhb_loop+0x40/0x90 [ 141.853093][ T7140] ? clear_bhb_loop+0x40/0x90 [ 141.857806][ T7140] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 141.863827][ T7140] RIP: 0033:0x7f182a78ebe9 [ 141.868272][ T7140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.887997][ T7140] RSP: 002b:00007f182b620038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.896440][ T7140] RAX: ffffffffffffffda RBX: 00007f182a9b5fa0 RCX: 00007f182a78ebe9 [ 141.904438][ T7140] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 141.912433][ T7140] RBP: 00007f182b620090 R08: 0000000000000000 R09: 0000000000000000 [ 141.920430][ T7140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.928425][ T7140] R13: 00007f182a9b6038 R14: 00007f182a9b5fa0 R15: 00007ffc510eead8 [ 141.936449][ T7140] [ 141.939501][ T7146] CPU: 0 PID: 7146 Comm: syz.3.480 Not tainted 6.6.102-syzkaller #0 [ 141.947598][ T7146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 141.957670][ T7146] Call Trace: [ 141.961032][ T7146] [ 141.963963][ T7146] dump_stack_lvl+0x16c/0x230 [ 141.968732][ T7146] ? show_regs_print_info+0x20/0x20 [ 141.973948][ T7146] ? load_image+0x3b0/0x3b0 [ 141.978455][ T7146] ? ip_tun_parse_opts+0xebe/0xf50 [ 141.983606][ T7146] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 141.989587][ T7146] should_fail_ex+0x39d/0x4d0 [ 141.994364][ T7146] should_failslab+0x9/0x20 [ 141.998881][ T7146] slab_pre_alloc_hook+0x59/0x310 [ 142.003911][ T7146] ? lockdep_hardirqs_on+0x98/0x150 [ 142.009128][ T7146] ? ip6_tun_build_state+0x138/0x650 [ 142.014415][ T7146] ? ip6_tun_build_state+0x138/0x650 [ 142.019881][ T7146] __kmem_cache_alloc_node+0x53/0x260 [ 142.025292][ T7146] ? ip6_tun_build_state+0x138/0x650 [ 142.030597][ T7146] __kmalloc+0xa4/0x240 [ 142.034794][ T7146] ip6_tun_build_state+0x138/0x650 [ 142.039940][ T7146] ? ip_tun_fill_encap_opts+0xe20/0xe20 [ 142.045614][ T7146] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 142.051839][ T7146] lwtunnel_build_state+0x37e/0x4b0 [ 142.057075][ T7146] ? lwtunnel_build_state+0xe2/0x4b0 [ 142.062405][ T7146] fib_nh_common_init+0x14a/0x430 [ 142.067505][ T7146] ? ip_fib_metrics_init+0x405/0x6f0 [ 142.072808][ T7146] ? fib_dump_info+0x1060/0x1060 [ 142.077759][ T7146] ? skb_gro_incr_csum_unnecessary+0x300/0x300 [ 142.084018][ T7146] fib_nh_init+0x9e/0x410 [ 142.088366][ T7146] fib_create_info+0xf05/0x2460 [ 142.093324][ T7146] fib_table_insert+0xc7/0x1b50 [ 142.098221][ T7146] ? fib_trie_table+0x138/0x1c0 [ 142.103092][ T7146] inet_rtm_newroute+0x127/0x200 [ 142.108044][ T7146] ? rcu_read_unlock+0xa0/0xa0 [ 142.112923][ T7146] ? rcu_read_unlock+0xa0/0xa0 [ 142.117868][ T7146] rtnetlink_rcv_msg+0x7c7/0xf10 [ 142.122815][ T7146] ? __dev_queue_xmit+0x245/0x35a0 [ 142.127935][ T7146] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 142.133060][ T7146] ? rtnetlink_bind+0x80/0x80 [ 142.137756][ T7146] ? perf_trace_preemptirq_template+0xa4/0x340 [ 142.143917][ T7146] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 142.150016][ T7146] ? lock_chain_count+0x20/0x20 [ 142.154893][ T7146] ? __local_bh_enable_ip+0x12e/0x1c0 [ 142.160269][ T7146] ? lockdep_hardirqs_on+0x98/0x150 [ 142.165484][ T7146] ? __local_bh_enable_ip+0x12e/0x1c0 [ 142.171206][ T7146] ? _local_bh_enable+0xa0/0xa0 [ 142.176064][ T7146] ? __dev_queue_xmit+0x245/0x35a0 [ 142.181292][ T7146] ? __dev_queue_xmit+0x1449/0x35a0 [ 142.186701][ T7146] ? __dev_queue_xmit+0x245/0x35a0 [ 142.191846][ T7146] ? netlink_deliver_tap+0x2e/0x1b0 [ 142.197063][ T7146] ? perf_trace_lock+0xf7/0x380 [ 142.201925][ T7146] ? __copy_skb_header+0xa7/0x550 [ 142.206984][ T7146] netlink_rcv_skb+0x216/0x480 [ 142.211787][ T7146] ? rtnetlink_bind+0x80/0x80 [ 142.216496][ T7146] ? netlink_ack+0x1110/0x1110 [ 142.221383][ T7146] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 142.227712][ T7146] ? rtnetlink_rcv+0xd/0x20 [ 142.232239][ T7146] ? rtnetlink_bind+0x80/0x80 [ 142.237043][ T7146] netlink_unicast+0x751/0x8d0 [ 142.241899][ T7146] netlink_sendmsg+0x8c1/0xbe0 [ 142.246774][ T7146] ? netlink_getsockopt+0x580/0x580 [ 142.251978][ T7146] ? aa_sock_msg_perm+0x94/0x150 [ 142.256949][ T7146] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 142.262323][ T7146] ? security_socket_sendmsg+0x80/0xa0 [ 142.267788][ T7146] ? netlink_getsockopt+0x580/0x580 [ 142.272997][ T7146] ____sys_sendmsg+0x5bf/0x950 [ 142.277785][ T7146] ? __asan_memset+0x22/0x40 [ 142.282471][ T7146] ? __sys_sendmsg_sock+0x30/0x30 [ 142.287512][ T7146] ? __import_iovec+0x5f2/0x860 [ 142.292386][ T7146] ? import_iovec+0x73/0xa0 [ 142.296915][ T7146] ___sys_sendmsg+0x220/0x290 [ 142.301608][ T7146] ? __sys_sendmsg+0x270/0x270 [ 142.306428][ T7146] ? __lock_acquire+0x7c80/0x7c80 [ 142.311534][ T7146] __se_sys_sendmsg+0x1a5/0x270 [ 142.316402][ T7146] ? __x64_sys_sendmsg+0x80/0x80 [ 142.321399][ T7146] ? syscall_enter_from_user_mode+0x2e/0x80 [ 142.327402][ T7146] do_syscall_64+0x55/0xb0 [ 142.331821][ T7146] ? clear_bhb_loop+0x40/0x90 [ 142.336499][ T7146] ? clear_bhb_loop+0x40/0x90 [ 142.341232][ T7146] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.347144][ T7146] RIP: 0033:0x7f186418ebe9 [ 142.351755][ T7146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.371460][ T7146] RSP: 002b:00007f1865070038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.380061][ T7146] RAX: ffffffffffffffda RBX: 00007f18643b5fa0 RCX: 00007f186418ebe9 [ 142.388052][ T7146] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 142.396134][ T7146] RBP: 00007f1865070090 R08: 0000000000000000 R09: 0000000000000000 [ 142.404243][ T7146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.412833][ T7146] R13: 00007f18643b6038 R14: 00007f18643b5fa0 R15: 00007fff4d5463b8 [ 142.420832][ T7146] [ 142.753215][ T7159] netlink: 'syz.1.484': attribute type 10 has an invalid length. [ 142.813071][ T7159] netlink: 'syz.1.484': attribute type 25 has an invalid length. [ 142.828398][ T7161] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.485'. [ 142.844844][ T7159] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.484'. [ 143.602864][ T7180] netlink: 'syz.1.491': attribute type 39 has an invalid length. [ 143.801940][ T7185] netlink: 'syz.2.494': attribute type 10 has an invalid length. [ 143.911613][ T7188] netlink: 'syz.1.495': attribute type 3 has an invalid length. [ 143.968565][ T7192] netlink: 'syz.2.494': attribute type 25 has an invalid length. [ 143.972123][ T7188] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.495'. [ 144.006554][ T7192] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.494'. [ 145.116672][ T7226] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 145.158545][ T7231] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.507'. [ 145.294217][ T7236] delete_channel: no stack [ 145.310705][ T7236] delete_channel: no stack [ 146.014040][ T7251] netlink: 60 bytes leftover after parsing attributes in process `syz.2.514'. [ 146.036473][ T7251] netlink: 60 bytes leftover after parsing attributes in process `syz.2.514'. [ 146.076484][ T7249] netlink: 60 bytes leftover after parsing attributes in process `syz.2.514'. [ 146.564257][ T7265] validate_nla: 5 callbacks suppressed [ 146.564277][ T7265] netlink: 'syz.1.520': attribute type 25 has an invalid length. [ 146.612882][ T7265] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.520'. [ 146.875093][ T7264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.906795][ T7264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.938700][ T7264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.952165][ T7264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.027950][ T7288] FAULT_INJECTION: forcing a failure. [ 148.027950][ T7288] name failslab, interval 1, probability 0, space 0, times 0 [ 148.072644][ T7288] CPU: 0 PID: 7288 Comm: syz.2.525 Not tainted 6.6.102-syzkaller #0 [ 148.080712][ T7288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 148.090814][ T7288] Call Trace: [ 148.094125][ T7288] [ 148.097093][ T7288] dump_stack_lvl+0x16c/0x230 [ 148.101835][ T7288] ? show_regs_print_info+0x20/0x20 [ 148.107092][ T7288] ? load_image+0x3b0/0x3b0 [ 148.111661][ T7288] ? __might_sleep+0xe0/0xe0 [ 148.116298][ T7288] ? __lock_acquire+0x7c80/0x7c80 [ 148.121385][ T7288] should_fail_ex+0x39d/0x4d0 [ 148.126142][ T7288] should_failslab+0x9/0x20 [ 148.130691][ T7288] slab_pre_alloc_hook+0x59/0x310 [ 148.135782][ T7288] ? __lock_acquire+0x7c80/0x7c80 [ 148.140876][ T7288] kmem_cache_alloc_node+0x60/0x330 [ 148.146125][ T7288] ? __alloc_skb+0x108/0x2c0 [ 148.150784][ T7288] __alloc_skb+0x108/0x2c0 [ 148.155272][ T7288] netlink_sendmsg+0x65b/0xbe0 [ 148.160210][ T7288] ? netlink_getsockopt+0x580/0x580 [ 148.165512][ T7288] ? aa_sock_msg_perm+0x94/0x150 [ 148.170509][ T7288] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 148.175843][ T7288] ? security_socket_sendmsg+0x80/0xa0 [ 148.181355][ T7288] ? netlink_getsockopt+0x580/0x580 [ 148.186613][ T7288] ____sys_sendmsg+0x5bf/0x950 [ 148.191453][ T7288] ? __asan_memset+0x22/0x40 [ 148.196096][ T7288] ? __sys_sendmsg_sock+0x30/0x30 [ 148.201168][ T7288] ? __import_iovec+0x5f2/0x860 [ 148.206104][ T7288] ? import_iovec+0x73/0xa0 [ 148.207226][ T7290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.210678][ T7288] ___sys_sendmsg+0x220/0x290 [ 148.222809][ T7288] ? __sys_sendmsg+0x270/0x270 [ 148.227720][ T7288] ? __lock_acquire+0x7c80/0x7c80 [ 148.232887][ T7288] __se_sys_sendmsg+0x1a5/0x270 [ 148.237804][ T7288] ? __x64_sys_sendmsg+0x80/0x80 [ 148.242858][ T7288] ? lockdep_hardirqs_on+0x98/0x150 [ 148.248120][ T7288] do_syscall_64+0x55/0xb0 [ 148.252585][ T7288] ? clear_bhb_loop+0x40/0x90 [ 148.257318][ T7288] ? clear_bhb_loop+0x40/0x90 [ 148.262046][ T7288] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.268075][ T7288] RIP: 0033:0x7f182a78ebe9 [ 148.272532][ T7288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.292194][ T7288] RSP: 002b:00007f182b620038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.295205][ T7290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.300642][ T7288] RAX: ffffffffffffffda RBX: 00007f182a9b5fa0 RCX: 00007f182a78ebe9 [ 148.300664][ T7288] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000a [ 148.300678][ T7288] RBP: 00007f182b620090 R08: 0000000000000000 R09: 0000000000000000 [ 148.300690][ T7288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.300702][ T7288] R13: 00007f182a9b6038 R14: 00007f182a9b5fa0 R15: 00007ffc510eead8 [ 148.300765][ T7288] [ 148.597708][ T7290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.627338][ T7290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.851435][ T7295] netlink: 'syz.1.529': attribute type 39 has an invalid length. [ 149.227829][ T7300] netlink: 'syz.2.530': attribute type 10 has an invalid length. [ 149.279312][ T7300] netlink: 'syz.2.530': attribute type 25 has an invalid length. [ 149.296440][ T7300] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.530'. [ 149.979210][ T7323] bridge0: port 3(hsr_slave_1) entered blocking state [ 150.023172][ T7323] bridge0: port 3(hsr_slave_1) entered disabled state [ 150.039528][ T7323] hsr_slave_1: entered allmulticast mode [ 150.071300][ T7323] hsr_slave_1: left allmulticast mode [ 150.092836][ T7325] wg2: left promiscuous mode [ 150.108079][ T7325] wg2: left allmulticast mode [ 150.163223][ T7329] wg2: entered promiscuous mode [ 150.183542][ T7329] wg2: entered allmulticast mode [ 150.239903][ T7332] netlink: 'syz.1.542': attribute type 10 has an invalid length. [ 150.308273][ T7332] netlink: 'syz.1.542': attribute type 25 has an invalid length. [ 150.316076][ T7332] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.542'. [ 150.901976][ T7348] wg2: left promiscuous mode [ 150.928398][ T7350] FAULT_INJECTION: forcing a failure. [ 150.928398][ T7350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.942560][ T7348] wg2: left allmulticast mode [ 150.977793][ T7350] CPU: 0 PID: 7350 Comm: syz.2.548 Not tainted 6.6.102-syzkaller #0 [ 150.985839][ T7350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 150.996004][ T7350] Call Trace: [ 150.999303][ T7350] [ 151.002256][ T7350] dump_stack_lvl+0x16c/0x230 [ 151.006969][ T7350] ? show_regs_print_info+0x20/0x20 [ 151.012201][ T7350] ? load_image+0x3b0/0x3b0 [ 151.016749][ T7350] ? __might_fault+0xaa/0x120 [ 151.021496][ T7350] ? __lock_acquire+0x7c80/0x7c80 [ 151.026583][ T7350] should_fail_ex+0x39d/0x4d0 [ 151.031429][ T7350] _copy_to_user+0x2f/0xa0 [ 151.035934][ T7350] bpf_test_finish+0x4d8/0x620 [ 151.040703][ T7350] ? convert___skb_to_skb+0x590/0x590 [ 151.046076][ T7350] ? convert_skb_to___skb+0x420/0x420 [ 151.051447][ T7350] ? rcuref_put_slowpath+0x141/0x150 [ 151.056745][ T7350] ? rep_movs_alternative+0x4a/0x90 [ 151.061948][ T7350] bpf_prog_test_run_xdp+0x7fa/0xfa0 [ 151.067277][ T7350] ? dev_put+0x80/0x80 [ 151.071361][ T7350] ? dev_put+0x80/0x80 [ 151.075443][ T7350] bpf_prog_test_run+0x321/0x390 [ 151.080386][ T7350] __sys_bpf+0x440/0x800 [ 151.084633][ T7350] ? bpf_link_show_fdinfo+0x350/0x350 [ 151.090017][ T7350] ? lock_chain_count+0x20/0x20 [ 151.094884][ T7350] __x64_sys_bpf+0x7c/0x90 [ 151.099578][ T7350] do_syscall_64+0x55/0xb0 [ 151.103998][ T7350] ? clear_bhb_loop+0x40/0x90 [ 151.108675][ T7350] ? clear_bhb_loop+0x40/0x90 [ 151.113354][ T7350] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 151.119400][ T7350] RIP: 0033:0x7f182a78ebe9 [ 151.123819][ T7350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.143460][ T7350] RSP: 002b:00007f182b620038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 151.151975][ T7350] RAX: ffffffffffffffda RBX: 00007f182a9b5fa0 RCX: 00007f182a78ebe9 [ 151.160294][ T7350] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 151.168262][ T7350] RBP: 00007f182b620090 R08: 0000000000000000 R09: 0000000000000000 [ 151.176238][ T7350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 151.184215][ T7350] R13: 00007f182a9b6038 R14: 00007f182a9b5fa0 R15: 00007ffc510eead8 [ 151.192202][ T7350] [ 151.389663][ T7353] wg2: entered promiscuous mode [ 151.399090][ T7353] wg2: entered allmulticast mode [ 151.769291][ T7367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.974422][ T7377] netlink: 'syz.3.554': attribute type 10 has an invalid length. [ 152.083253][ T7377] netlink: 'syz.3.554': attribute type 25 has an invalid length. [ 152.101892][ T7377] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.554'. [ 153.737768][ T7474] netlink: 'syz.3.565': attribute type 25 has an invalid length. [ 153.745836][ T7474] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.565'. [ 153.808484][ T7465] wg2: left promiscuous mode [ 153.813155][ T7465] wg2: left allmulticast mode [ 153.827737][ T7466] wg2: entered promiscuous mode [ 153.832666][ T7466] wg2: entered allmulticast mode [ 153.844042][ T7471] netlink: 'syz.3.565': attribute type 10 has an invalid length. [ 153.974805][ T7480] FAULT_INJECTION: forcing a failure. [ 153.974805][ T7480] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 153.992525][ T7480] CPU: 1 PID: 7480 Comm: syz.3.568 Not tainted 6.6.102-syzkaller #0 [ 154.000547][ T7480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.010615][ T7480] Call Trace: [ 154.013886][ T7480] [ 154.016808][ T7480] dump_stack_lvl+0x16c/0x230 [ 154.021480][ T7480] ? show_regs_print_info+0x20/0x20 [ 154.026668][ T7480] ? load_image+0x3b0/0x3b0 [ 154.031170][ T7480] ? __lock_acquire+0x7c80/0x7c80 [ 154.036217][ T7480] should_fail_ex+0x39d/0x4d0 [ 154.040911][ T7480] prepare_alloc_pages+0x1e2/0x5f0 [ 154.046024][ T7480] __alloc_pages+0x127/0x460 [ 154.050609][ T7480] ? zone_statistics+0x170/0x170 [ 154.055548][ T7480] ? xdp_convert_md_to_buff+0x5b/0x330 [ 154.061003][ T7480] bpf_prog_test_run_xdp+0xb64/0xfa0 [ 154.066290][ T7480] ? dev_put+0x80/0x80 [ 154.070361][ T7480] ? dev_put+0x80/0x80 [ 154.074421][ T7480] bpf_prog_test_run+0x321/0x390 [ 154.079352][ T7480] __sys_bpf+0x440/0x800 [ 154.083593][ T7480] ? bpf_link_show_fdinfo+0x350/0x350 [ 154.088974][ T7480] ? lock_chain_count+0x20/0x20 [ 154.093824][ T7480] __x64_sys_bpf+0x7c/0x90 [ 154.098234][ T7480] do_syscall_64+0x55/0xb0 [ 154.102642][ T7480] ? clear_bhb_loop+0x40/0x90 [ 154.107329][ T7480] ? clear_bhb_loop+0x40/0x90 [ 154.111993][ T7480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.117967][ T7480] RIP: 0033:0x7f186418ebe9 [ 154.122375][ T7480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.142062][ T7480] RSP: 002b:00007f1865070038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 154.150464][ T7480] RAX: ffffffffffffffda RBX: 00007f18643b5fa0 RCX: 00007f186418ebe9 [ 154.158435][ T7480] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 154.166394][ T7480] RBP: 00007f1865070090 R08: 0000000000000000 R09: 0000000000000000 [ 154.174353][ T7480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.182331][ T7480] R13: 00007f18643b6038 R14: 00007f18643b5fa0 R15: 00007fff4d5463b8 [ 154.190325][ T7480] [ 154.300051][ T7483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.587232][ T7501] netlink: 'syz.1.576': attribute type 10 has an invalid length. [ 154.635179][ T7501] netlink: 'syz.1.576': attribute type 25 has an invalid length. [ 154.646327][ T7501] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.576'. [ 154.668146][ T7503] wg2: left promiscuous mode [ 154.672947][ T7503] wg2: left allmulticast mode [ 154.709716][ T7503] wg2: entered promiscuous mode [ 154.715058][ T7503] wg2: entered allmulticast mode [ 154.741453][ T7505] netlink: 'syz.1.578': attribute type 29 has an invalid length. [ 154.749849][ T7505] netlink: 'syz.1.578': attribute type 29 has an invalid length. [ 154.761747][ T7505] netlink: 'syz.1.578': attribute type 29 has an invalid length. [ 154.926563][ T7509] pimreg: tun_chr_ioctl cmd 1074025677 [ 154.932335][ T7509] pimreg: linktype set to 780 [ 154.939890][ T7509] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 154.947600][ T7509] IPv6: NLM_F_CREATE should be set when creating new route [ 154.954847][ T7509] IPv6: NLM_F_CREATE should be set when creating new route [ 155.124682][ T7517] FAULT_INJECTION: forcing a failure. [ 155.124682][ T7517] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 155.153315][ T7517] CPU: 1 PID: 7517 Comm: syz.2.583 Not tainted 6.6.102-syzkaller #0 [ 155.161354][ T7517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 155.171421][ T7517] Call Trace: [ 155.174710][ T7517] [ 155.177645][ T7517] dump_stack_lvl+0x16c/0x230 [ 155.182345][ T7517] ? show_regs_print_info+0x20/0x20 [ 155.187558][ T7517] ? load_image+0x3b0/0x3b0 [ 155.192096][ T7517] ? __lock_acquire+0x7c80/0x7c80 [ 155.197148][ T7517] should_fail_ex+0x39d/0x4d0 [ 155.201855][ T7517] prepare_alloc_pages+0x1e2/0x5f0 [ 155.207010][ T7517] __alloc_pages+0x127/0x460 [ 155.211625][ T7517] ? zone_statistics+0x170/0x170 [ 155.216589][ T7517] ? alloc_pages+0x4dc/0x740 [ 155.221215][ T7517] ? do_raw_spin_unlock+0x121/0x230 [ 155.226449][ T7517] __get_free_pages+0xc/0x30 [ 155.231059][ T7517] kasan_populate_vmalloc_pte+0x35/0x100 [ 155.236729][ T7517] __apply_to_page_range+0x84c/0xd50 [ 155.242044][ T7517] ? kasan_populate_vmalloc+0x70/0x70 [ 155.247435][ T7517] ? apply_to_page_range+0x50/0x50 [ 155.252566][ T7517] ? do_raw_spin_unlock+0x121/0x230 [ 155.257787][ T7517] alloc_vmap_area+0x1b4a/0x1c70 [ 155.262763][ T7517] ? vm_map_ram+0xcb0/0xcb0 [ 155.267299][ T7517] ? rcu_is_watching+0x15/0xb0 [ 155.272105][ T7517] __get_vm_area_node+0x162/0x370 [ 155.277179][ T7517] __vmalloc_node_range+0x36e/0x1320 [ 155.282490][ T7517] ? reuseport_array_alloc+0x98/0x120 [ 155.287953][ T7517] ? aa_get_newest_label+0xf8/0x5c0 [ 155.293181][ T7517] ? end_current_label_crit_section+0x170/0x170 [ 155.299453][ T7517] ? free_vm_area+0x50/0x50 [ 155.303992][ T7517] ? apparmor_capable+0x137/0x1a0 [ 155.309042][ T7517] bpf_map_area_alloc+0xf1/0x110 [ 155.314016][ T7517] ? reuseport_array_alloc+0x98/0x120 [ 155.319413][ T7517] reuseport_array_alloc+0x98/0x120 [ 155.324642][ T7517] map_create+0x877/0x1110 [ 155.329083][ T7517] ? security_bpf+0x7e/0xa0 [ 155.333615][ T7517] __sys_bpf+0x5f0/0x800 [ 155.337883][ T7517] ? bpf_link_show_fdinfo+0x350/0x350 [ 155.343290][ T7517] ? lock_chain_count+0x20/0x20 [ 155.348183][ T7517] __x64_sys_bpf+0x7c/0x90 [ 155.352623][ T7517] do_syscall_64+0x55/0xb0 [ 155.357058][ T7517] ? clear_bhb_loop+0x40/0x90 [ 155.361785][ T7517] ? clear_bhb_loop+0x40/0x90 [ 155.366480][ T7517] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.372391][ T7517] RIP: 0033:0x7f182a78ebe9 [ 155.376820][ T7517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.396451][ T7517] RSP: 002b:00007f182b620038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 155.404891][ T7517] RAX: ffffffffffffffda RBX: 00007f182a9b5fa0 RCX: 00007f182a78ebe9 [ 155.412881][ T7517] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 0000000000000000 [ 155.420878][ T7517] RBP: 00007f182b620090 R08: 0000000000000000 R09: 0000000000000000 [ 155.428864][ T7517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 155.436965][ T7517] R13: 00007f182a9b6038 R14: 00007f182a9b5fa0 R15: 00007ffc510eead8 [ 155.444962][ T7517] [ 155.624435][ T7528] netlink: 'syz.0.586': attribute type 10 has an invalid length. [ 155.692321][ T7533] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.586'. [ 155.711787][ T7532] wg2: left promiscuous mode [ 155.716767][ T7532] wg2: left allmulticast mode [ 155.777272][ T7532] wg2: entered promiscuous mode [ 155.782882][ T7532] wg2: entered allmulticast mode [ 155.792192][ T7536] pimreg: tun_chr_ioctl cmd 1074025677 [ 155.808430][ T7536] pimreg: linktype set to 780 [ 155.822766][ T7536] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 155.830146][ T7536] IPv6: NLM_F_CREATE should be set when creating new route [ 155.837445][ T7536] IPv6: NLM_F_CREATE should be set when creating new route [ 156.017468][ T7547] pimreg: tun_chr_ioctl cmd 1074025677 [ 156.023091][ T7547] pimreg: linktype set to 780 [ 156.033038][ T7547] FAULT_INJECTION: forcing a failure. [ 156.033038][ T7547] name failslab, interval 1, probability 0, space 0, times 0 [ 156.049899][ T7547] CPU: 1 PID: 7547 Comm: syz.1.594 Not tainted 6.6.102-syzkaller #0 [ 156.057924][ T7547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 156.068003][ T7547] Call Trace: [ 156.071296][ T7547] [ 156.074240][ T7547] dump_stack_lvl+0x16c/0x230 [ 156.078956][ T7547] ? show_regs_print_info+0x20/0x20 [ 156.084173][ T7547] ? load_image+0x3b0/0x3b0 [ 156.088706][ T7547] ? __might_sleep+0xe0/0xe0 [ 156.093314][ T7547] ? __lock_acquire+0x7c80/0x7c80 [ 156.098374][ T7547] should_fail_ex+0x39d/0x4d0 [ 156.103173][ T7547] should_failslab+0x9/0x20 [ 156.107713][ T7547] slab_pre_alloc_hook+0x59/0x310 [ 156.112763][ T7547] ? fib6_get_table+0x39/0x260 [ 156.117546][ T7547] ? fib6_info_alloc+0x32/0xe0 [ 156.122326][ T7547] ? fib6_info_alloc+0x32/0xe0 [ 156.127200][ T7547] __kmem_cache_alloc_node+0x53/0x260 [ 156.132604][ T7547] ? fib6_info_alloc+0x32/0xe0 [ 156.137478][ T7547] __kmalloc+0xa4/0x240 [ 156.141663][ T7547] fib6_info_alloc+0x32/0xe0 [ 156.146275][ T7547] ip6_route_info_create+0x44f/0x1200 [ 156.151676][ T7547] ? nla_memcpy+0x59/0xb0 [ 156.156036][ T7547] ? nla_find+0x138/0x150 [ 156.160401][ T7547] inet6_rtm_newroute+0x4e6/0x1b40 [ 156.165645][ T7547] ? ipv6_route_sysctl_table_size+0x50/0x50 [ 156.171829][ T7547] ? rcu_is_watching+0x15/0xb0 [ 156.176802][ T7547] ? trace_contention_end+0x39/0xe0 [ 156.182057][ T7547] ? ipv6_route_sysctl_table_size+0x50/0x50 [ 156.187980][ T7547] rtnetlink_rcv_msg+0x7c7/0xf10 [ 156.192947][ T7547] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 156.198096][ T7547] ? lockdep_hardirqs_on+0x98/0x150 [ 156.203335][ T7547] ? rtnetlink_bind+0x80/0x80 [ 156.208405][ T7547] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 156.214412][ T7547] ? __dev_queue_xmit+0x245/0x35a0 [ 156.219550][ T7547] ? lock_chain_count+0x20/0x20 [ 156.224432][ T7547] ? __local_bh_enable_ip+0x12e/0x1c0 [ 156.229838][ T7547] ? lockdep_hardirqs_on+0x98/0x150 [ 156.235065][ T7547] ? __local_bh_enable_ip+0x12e/0x1c0 [ 156.240464][ T7547] ? _local_bh_enable+0xa0/0xa0 [ 156.245347][ T7547] ? __dev_queue_xmit+0x245/0x35a0 [ 156.250579][ T7547] ? __dev_queue_xmit+0x1449/0x35a0 [ 156.255803][ T7547] ? __dev_queue_xmit+0x245/0x35a0 [ 156.260935][ T7547] ? ref_tracker_free+0x634/0x7d0 [ 156.265970][ T7547] ? __copy_skb_header+0xa7/0x550 [ 156.271003][ T7547] netlink_rcv_skb+0x216/0x480 [ 156.276139][ T7547] ? rtnetlink_bind+0x80/0x80 [ 156.280897][ T7547] ? netlink_ack+0x1110/0x1110 [ 156.285747][ T7547] ? __lock_acquire+0x7c80/0x7c80 [ 156.290779][ T7547] ? netlink_deliver_tap+0x2e/0x1b0 [ 156.295973][ T7547] netlink_unicast+0x751/0x8d0 [ 156.300758][ T7547] netlink_sendmsg+0x8c1/0xbe0 [ 156.305523][ T7547] ? netlink_getsockopt+0x580/0x580 [ 156.310714][ T7547] ? aa_sock_msg_perm+0x94/0x150 [ 156.315645][ T7547] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 156.320924][ T7547] ? security_socket_sendmsg+0x80/0xa0 [ 156.326375][ T7547] ? netlink_getsockopt+0x580/0x580 [ 156.331569][ T7547] ____sys_sendmsg+0x5bf/0x950 [ 156.336336][ T7547] ? __asan_memset+0x22/0x40 [ 156.340948][ T7547] ? __sys_sendmsg_sock+0x30/0x30 [ 156.345985][ T7547] ? __import_iovec+0x5f2/0x860 [ 156.350843][ T7547] ? import_iovec+0x73/0xa0 [ 156.355348][ T7547] ___sys_sendmsg+0x220/0x290 [ 156.360106][ T7547] ? __sys_sendmsg+0x270/0x270 [ 156.364971][ T7547] ? __lock_acquire+0x7c80/0x7c80 [ 156.370005][ T7547] __se_sys_sendmsg+0x1a5/0x270 [ 156.374851][ T7547] ? __x64_sys_sendmsg+0x80/0x80 [ 156.379799][ T7547] ? lockdep_hardirqs_on+0x98/0x150 [ 156.384992][ T7547] do_syscall_64+0x55/0xb0 [ 156.389400][ T7547] ? clear_bhb_loop+0x40/0x90 [ 156.394070][ T7547] ? clear_bhb_loop+0x40/0x90 [ 156.398735][ T7547] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.404624][ T7547] RIP: 0033:0x7fea16f8ebe9 [ 156.409142][ T7547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.428759][ T7547] RSP: 002b:00007fea17de6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.437171][ T7547] RAX: ffffffffffffffda RBX: 00007fea171b5fa0 RCX: 00007fea16f8ebe9 [ 156.445139][ T7547] RDX: 00000000040400c0 RSI: 0000200000001600 RDI: 0000000000000003 [ 156.453123][ T7547] RBP: 00007fea17de6090 R08: 0000000000000000 R09: 0000000000000000 [ 156.461106][ T7547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.469075][ T7547] R13: 00007fea171b6038 R14: 00007fea171b5fa0 R15: 00007ffeed0fbc28 [ 156.477055][ T7547] [ 156.653873][ T7545] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.690473][ T7545] syz.3.593 (7545) used greatest stack depth: 19304 bytes left [ 156.855631][ T7561] wg2: left promiscuous mode [ 156.861953][ T7561] wg2: left allmulticast mode [ 156.951962][ T7559] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.599'. [ 157.339601][ T7579] validate_nla: 3 callbacks suppressed [ 157.339638][ T7579] netlink: 'syz.1.606': attribute type 10 has an invalid length. [ 157.432310][ T7579] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 157.663588][ T7596] netlink: 'syz.3.612': attribute type 10 has an invalid length. [ 157.683981][ T7594] wg2: left promiscuous mode [ 157.684001][ T7596] netlink: 'syz.3.612': attribute type 25 has an invalid length. [ 157.688707][ T7594] wg2: left allmulticast mode [ 157.697036][ T7596] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.612'. [ 158.160258][ T7619] netlink: 'syz.3.623': attribute type 10 has an invalid length. [ 158.206831][ T7619] netlink: 'syz.3.623': attribute type 25 has an invalid length. [ 158.223922][ T7619] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.623'. [ 158.289321][ T7625] wg2: left promiscuous mode [ 158.293977][ T7625] wg2: left allmulticast mode [ 158.480792][ T5799] Bluetooth: hci1: Malformed Event: 0x13 [ 158.750381][ T7641] netlink: 'syz.1.631': attribute type 3 has an invalid length. [ 158.763606][ T7641] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.631'. [ 158.774205][ T7639] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.632'. [ 158.807837][ T7639] netlink: 'syz.0.632': attribute type 10 has an invalid length. [ 158.842632][ T7639] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 159.016814][ T7650] netlink: 'syz.1.635': attribute type 10 has an invalid length. [ 159.078735][ T7650] netlink: 'syz.1.635': attribute type 25 has an invalid length. [ 159.096242][ T7650] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.635'. [ 159.131079][ T7654] wg2: entered promiscuous mode [ 159.139236][ T7654] wg2: entered allmulticast mode [ 159.643678][ T7669] FAULT_INJECTION: forcing a failure. [ 159.643678][ T7669] name failslab, interval 1, probability 0, space 0, times 0 [ 159.720171][ T7669] CPU: 1 PID: 7669 Comm: syz.1.642 Not tainted 6.6.102-syzkaller #0 [ 159.728206][ T7669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 159.738360][ T7669] Call Trace: [ 159.741650][ T7669] [ 159.744610][ T7669] dump_stack_lvl+0x16c/0x230 [ 159.749400][ T7669] ? show_regs_print_info+0x20/0x20 [ 159.754613][ T7669] ? load_image+0x3b0/0x3b0 [ 159.759228][ T7669] ? verify_lock_unused+0x140/0x140 [ 159.764436][ T7669] ? perf_trace_lock+0xf7/0x380 [ 159.769306][ T7669] should_fail_ex+0x39d/0x4d0 [ 159.774001][ T7669] should_failslab+0x9/0x20 [ 159.778530][ T7669] slab_pre_alloc_hook+0x59/0x310 [ 159.783589][ T7669] kmem_cache_alloc+0x5a/0x2e0 [ 159.788362][ T7669] ? skb_clone+0x1eb/0x370 [ 159.792800][ T7669] skb_clone+0x1eb/0x370 [ 159.797063][ T7669] __netlink_deliver_tap+0x41c/0x830 [ 159.802379][ T7669] ? netlink_deliver_tap+0x2e/0x1b0 [ 159.807585][ T7669] netlink_deliver_tap+0x19c/0x1b0 [ 159.812715][ T7669] __netlink_sendskb+0x4b/0x90 [ 159.817501][ T7669] netlink_dump+0x9fb/0xde0 [ 159.822031][ T7669] ? netlink_lookup+0x200/0x200 [ 159.826903][ T7669] ? netlink_autobind+0x300/0x300 [ 159.832200][ T7669] ? netlink_lookup+0x30/0x200 [ 159.836975][ T7669] ? netlink_lookup+0x30/0x200 [ 159.841756][ T7669] __netlink_dump_start+0x5f1/0x810 [ 159.847061][ T7669] rtnetlink_rcv_msg+0xba1/0xf10 [ 159.852019][ T7669] ? __dev_queue_xmit+0x245/0x35a0 [ 159.857139][ T7669] ? neigh_get+0xcf0/0xcf0 [ 159.861565][ T7669] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 159.866701][ T7669] ? rtnetlink_bind+0x80/0x80 [ 159.871510][ T7669] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 159.877501][ T7669] ? __dev_queue_xmit+0x245/0x35a0 [ 159.882639][ T7669] ? lock_chain_count+0x20/0x20 [ 159.887508][ T7669] ? __local_bh_enable_ip+0x12e/0x1c0 [ 159.892919][ T7669] ? lockdep_hardirqs_on+0x98/0x150 [ 159.898135][ T7669] ? __local_bh_enable_ip+0x12e/0x1c0 [ 159.903514][ T7669] ? _local_bh_enable+0xa0/0xa0 [ 159.908385][ T7669] ? __dev_queue_xmit+0x245/0x35a0 [ 159.913505][ T7669] ? __dev_queue_xmit+0x1449/0x35a0 [ 159.918729][ T7669] ? __dev_queue_xmit+0x245/0x35a0 [ 159.923853][ T7669] ? neigh_get+0xcf0/0xcf0 [ 159.928629][ T7669] ? perf_trace_lock+0xf7/0x380 [ 159.933489][ T7669] ? __copy_skb_header+0xa7/0x550 [ 159.938541][ T7669] netlink_rcv_skb+0x216/0x480 [ 159.943404][ T7669] ? rtnetlink_bind+0x80/0x80 [ 159.948098][ T7669] ? netlink_ack+0x1110/0x1110 [ 159.953070][ T7669] ? __lock_acquire+0x7c80/0x7c80 [ 159.958119][ T7669] ? netlink_deliver_tap+0x2e/0x1b0 [ 159.963594][ T7669] netlink_unicast+0x751/0x8d0 [ 159.968378][ T7669] netlink_sendmsg+0x8c1/0xbe0 [ 159.973165][ T7669] ? netlink_getsockopt+0x580/0x580 [ 159.978378][ T7669] ? aa_sock_msg_perm+0x94/0x150 [ 159.983329][ T7669] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 159.988622][ T7669] ? security_socket_sendmsg+0x80/0xa0 [ 159.994090][ T7669] ? netlink_getsockopt+0x580/0x580 [ 159.999301][ T7669] ____sys_sendmsg+0x5bf/0x950 [ 160.004093][ T7669] ? __asan_memset+0x22/0x40 [ 160.008705][ T7669] ? __sys_sendmsg_sock+0x30/0x30 [ 160.013738][ T7669] ? __import_iovec+0x5f2/0x860 [ 160.018611][ T7669] ? import_iovec+0x73/0xa0 [ 160.023131][ T7669] ___sys_sendmsg+0x220/0x290 [ 160.027824][ T7669] ? __sys_sendmsg+0x270/0x270 [ 160.032634][ T7669] ? __lock_acquire+0x7c80/0x7c80 [ 160.037800][ T7669] __se_sys_sendmsg+0x1a5/0x270 [ 160.042667][ T7669] ? __x64_sys_sendmsg+0x80/0x80 [ 160.047641][ T7669] ? lockdep_hardirqs_on+0x98/0x150 [ 160.052859][ T7669] do_syscall_64+0x55/0xb0 [ 160.057282][ T7669] ? clear_bhb_loop+0x40/0x90 [ 160.061963][ T7669] ? clear_bhb_loop+0x40/0x90 [ 160.066647][ T7669] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.072556][ T7669] RIP: 0033:0x7fea16f8ebe9 [ 160.076980][ T7669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.097053][ T7669] RSP: 002b:00007fea17de6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.105569][ T7669] RAX: ffffffffffffffda RBX: 00007fea171b5fa0 RCX: 00007fea16f8ebe9 [ 160.113580][ T7669] RDX: 0000000000000804 RSI: 0000200000000040 RDI: 0000000000000003 [ 160.121563][ T7669] RBP: 00007fea17de6090 R08: 0000000000000000 R09: 0000000000000000 [ 160.129622][ T7669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.137588][ T7669] R13: 00007fea171b6038 R14: 00007fea171b5fa0 R15: 00007ffeed0fbc28 [ 160.145564][ T7669] [ 160.208391][ T7671] netlink: 22 bytes leftover after parsing attributes in process `syz.3.641'. [ 160.355211][ T7675] netlink: 'syz.1.644': attribute type 39 has an invalid length. [ 160.629093][ T7686] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.646'. [ 160.923915][ T7698] FAULT_INJECTION: forcing a failure. [ 160.923915][ T7698] name failslab, interval 1, probability 0, space 0, times 0 [ 160.962344][ T7698] CPU: 0 PID: 7698 Comm: syz.3.652 Not tainted 6.6.102-syzkaller #0 [ 160.970390][ T7698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 160.980475][ T7698] Call Trace: [ 160.983771][ T7698] [ 160.986727][ T7698] dump_stack_lvl+0x16c/0x230 [ 160.991434][ T7698] ? show_regs_print_info+0x20/0x20 [ 160.996661][ T7698] ? load_image+0x3b0/0x3b0 [ 161.001198][ T7698] ? __might_sleep+0xe0/0xe0 [ 161.005819][ T7698] ? __lock_acquire+0x7c80/0x7c80 [ 161.010870][ T7698] ? sctp_outq_tail+0x604/0x8b0 [ 161.015755][ T7698] should_fail_ex+0x39d/0x4d0 [ 161.020563][ T7698] should_failslab+0x9/0x20 [ 161.025103][ T7698] slab_pre_alloc_hook+0x59/0x310 [ 161.030164][ T7698] kmem_cache_alloc_node+0x60/0x330 [ 161.035485][ T7698] ? __alloc_skb+0x108/0x2c0 [ 161.040119][ T7698] __alloc_skb+0x108/0x2c0 [ 161.044588][ T7698] _sctp_make_chunk+0x5e/0x430 [ 161.049477][ T7698] sctp_make_datafrag_empty+0x123/0x230 [ 161.055054][ T7698] ? sctp_make_ecne+0x330/0x330 [ 161.059948][ T7698] ? sctp_auth_send_cid+0x69/0x250 [ 161.065097][ T7698] sctp_datamsg_from_user+0x722/0xee0 [ 161.070526][ T7698] sctp_sendmsg_to_asoc+0xff2/0x17f0 [ 161.075841][ T7698] ? __asan_memcpy+0x40/0x70 [ 161.080483][ T7698] ? sctp_assoc_add_peer+0xcf3/0x13a0 [ 161.085932][ T7698] ? sctp_sendmsg_check_sflags+0x2e0/0x2e0 [ 161.091768][ T7698] ? __sctp_connect+0xd20/0xd20 [ 161.096643][ T7698] ? __local_bh_enable_ip+0x12e/0x1c0 [ 161.102041][ T7698] ? _local_bh_enable+0xa0/0xa0 [ 161.106913][ T7698] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 161.112755][ T7698] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 161.118605][ T7698] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 161.124181][ T7698] ? security_sctp_bind_connect+0x89/0xb0 [ 161.129938][ T7698] sctp_sendmsg+0x1941/0x27e0 [ 161.134660][ T7698] ? sctp_getsockopt+0xb60/0xb60 [ 161.139630][ T7698] ? perf_trace_lock+0xf7/0x380 [ 161.144518][ T7698] ? aa_sk_perm+0x7fc/0x930 [ 161.149062][ T7698] ? aa_af_perm+0x2b0/0x2b0 [ 161.153664][ T7698] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 161.160108][ T7698] ? sock_rps_record_flow+0x19/0x400 [ 161.165439][ T7698] ? inet_send_prepare+0x260/0x260 [ 161.170581][ T7698] ? inet_sendmsg+0x7c/0x2f0 [ 161.175196][ T7698] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 161.180865][ T7698] ? security_socket_sendmsg+0x80/0xa0 [ 161.186361][ T7698] ? inet_send_prepare+0x260/0x260 [ 161.191501][ T7698] ____sys_sendmsg+0x5bf/0x950 [ 161.196308][ T7698] ? __asan_memset+0x22/0x40 [ 161.200924][ T7698] ? __sys_sendmsg_sock+0x30/0x30 [ 161.206066][ T7698] ? __import_iovec+0x5f2/0x860 [ 161.210967][ T7698] ? import_iovec+0x73/0xa0 [ 161.215506][ T7698] ___sys_sendmsg+0x220/0x290 [ 161.220230][ T7698] ? __sys_sendmsg+0x270/0x270 [ 161.225068][ T7698] ? __lock_acquire+0x7c80/0x7c80 [ 161.230151][ T7698] __se_sys_sendmsg+0x1a5/0x270 [ 161.235026][ T7698] ? perf_trace_preemptirq_template+0x281/0x340 [ 161.241338][ T7698] ? __x64_sys_sendmsg+0x80/0x80 [ 161.246334][ T7698] ? lockdep_hardirqs_on+0x98/0x150 [ 161.251573][ T7698] do_syscall_64+0x55/0xb0 [ 161.256043][ T7698] ? clear_bhb_loop+0x40/0x90 [ 161.260842][ T7698] ? clear_bhb_loop+0x40/0x90 [ 161.265546][ T7698] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.271477][ T7698] RIP: 0033:0x7f186418ebe9 [ 161.275916][ T7698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.295550][ T7698] RSP: 002b:00007f1865070038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.303997][ T7698] RAX: ffffffffffffffda RBX: 00007f18643b5fa0 RCX: 00007f186418ebe9 [ 161.311996][ T7698] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000004 [ 161.319996][ T7698] RBP: 00007f1865070090 R08: 0000000000000000 R09: 0000000000000000 [ 161.327984][ T7698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 161.335968][ T7698] R13: 00007f18643b6038 R14: 00007f18643b5fa0 R15: 00007fff4d5463b8 [ 161.343981][ T7698] [ 161.531146][ T7703] netlink: 44 bytes leftover after parsing attributes in process `syz.3.653'. [ 161.725858][ T7702] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 161.747829][ T7703] netlink: 44 bytes leftover after parsing attributes in process `syz.3.653'. [ 161.787050][ T7700] netlink: 44 bytes leftover after parsing attributes in process `syz.3.653'. [ 162.052763][ T7715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.503343][ T7726] syzkaller0: entered promiscuous mode [ 162.539753][ T7726] syzkaller0: entered allmulticast mode [ 163.263590][ T7739] FAULT_INJECTION: forcing a failure. [ 163.263590][ T7739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.289952][ T7739] CPU: 0 PID: 7739 Comm: syz.1.666 Not tainted 6.6.102-syzkaller #0 [ 163.297987][ T7739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 163.308066][ T7739] Call Trace: [ 163.311361][ T7739] [ 163.314305][ T7739] dump_stack_lvl+0x16c/0x230 [ 163.319004][ T7739] ? show_regs_print_info+0x20/0x20 [ 163.324271][ T7739] ? load_image+0x3b0/0x3b0 [ 163.328807][ T7739] ? __might_fault+0xaa/0x120 [ 163.333515][ T7739] ? __lock_acquire+0x7c80/0x7c80 [ 163.338580][ T7739] should_fail_ex+0x39d/0x4d0 [ 163.343288][ T7739] _copy_from_user+0x2f/0xe0 [ 163.347896][ T7739] do_vfs_ioctl+0x7b5/0x1bb0 [ 163.352496][ T7739] ? __ia32_compat_sys_ioctl+0x7f0/0x7f0 [ 163.358134][ T7739] ? tomoyo_path_number_perm+0x1ba/0x590 [ 163.363769][ T7739] ? __lock_acquire+0x7c80/0x7c80 [ 163.368783][ T7739] ? slab_free_freelist_hook+0x130/0x1b0 [ 163.374411][ T7739] ? tomoyo_path_number_perm+0x477/0x590 [ 163.380035][ T7739] ? __kmem_cache_free+0xba/0x1f0 [ 163.385223][ T7739] ? __fget_files+0x28/0x4d0 [ 163.389817][ T7739] ? bpf_lsm_file_ioctl+0x9/0x10 [ 163.394744][ T7739] ? security_file_ioctl+0x80/0xa0 [ 163.399864][ T7739] __se_sys_ioctl+0x83/0x170 [ 163.404467][ T7739] do_syscall_64+0x55/0xb0 [ 163.408883][ T7739] ? clear_bhb_loop+0x40/0x90 [ 163.413554][ T7739] ? clear_bhb_loop+0x40/0x90 [ 163.418226][ T7739] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.424119][ T7739] RIP: 0033:0x7fea16f8ebe9 [ 163.428629][ T7739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.448243][ T7739] RSP: 002b:00007fea17de6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.456658][ T7739] RAX: ffffffffffffffda RBX: 00007fea171b5fa0 RCX: 00007fea16f8ebe9 [ 163.464633][ T7739] RDX: 0000200000000040 RSI: 00000000401c5820 RDI: 0000000000000004 [ 163.472599][ T7739] RBP: 00007fea17de6090 R08: 0000000000000000 R09: 0000000000000000 [ 163.480573][ T7739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.488545][ T7739] R13: 00007fea171b6038 R14: 00007fea171b5fa0 R15: 00007ffeed0fbc28 [ 163.496618][ T7739] [ 164.784304][ T7745] validate_nla: 8 callbacks suppressed [ 164.784343][ T7745] netlink: 'syz.0.667': attribute type 10 has an invalid length. [ 164.908257][ T7748] netlink: 'syz.3.670': attribute type 10 has an invalid length. [ 164.953057][ T7748] netlink: 'syz.3.670': attribute type 25 has an invalid length. [ 164.966788][ T7748] __nla_validate_parse: 2 callbacks suppressed [ 164.966803][ T7748] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.670'. [ 165.394454][ T7757] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 166.250846][ T7775] veth0_vlan: entered allmulticast mode [ 166.420864][ T7776] veth0_vlan: left promiscuous mode [ 166.525071][ T7776] veth0_vlan: entered promiscuous mode [ 166.652886][ T7781] netlink: 'syz.1.681': attribute type 10 has an invalid length. [ 166.669200][ T7780] netlink: 'syz.3.680': attribute type 10 has an invalid length. [ 166.684169][ T7781] netlink: 'syz.1.681': attribute type 25 has an invalid length. [ 166.702092][ T7781] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.681'. [ 166.862055][ T7780] team0: Port device netdevsim0 removed [ 166.905261][ T7780] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 167.240482][ T7799] FAULT_INJECTION: forcing a failure. [ 167.240482][ T7799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.266792][ T7799] CPU: 0 PID: 7799 Comm: syz.2.686 Not tainted 6.6.102-syzkaller #0 [ 167.274819][ T7799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 167.284893][ T7799] Call Trace: [ 167.288193][ T7799] [ 167.291141][ T7799] dump_stack_lvl+0x16c/0x230 [ 167.295841][ T7799] ? show_regs_print_info+0x20/0x20 [ 167.301062][ T7799] ? load_image+0x3b0/0x3b0 [ 167.305593][ T7799] ? __might_fault+0xaa/0x120 [ 167.310289][ T7799] ? __lock_acquire+0x7c80/0x7c80 [ 167.315343][ T7799] should_fail_ex+0x39d/0x4d0 [ 167.316505][ T7801] netlink: 'syz.3.687': attribute type 21 has an invalid length. [ 167.320033][ T7799] _copy_from_user+0x2f/0xe0 [ 167.320060][ T7799] generic_map_update_batch+0x53f/0x810 [ 167.320095][ T7799] ? rcu_read_unlock+0xa0/0xa0 [ 167.342683][ T7799] ? __fdget+0x180/0x210 [ 167.343039][ T7801] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.687'. [ 167.346982][ T7799] ? rcu_read_unlock+0xa0/0xa0 [ 167.347010][ T7799] bpf_map_do_batch+0x3d7/0x610 [ 167.347034][ T7799] __sys_bpf+0x31b/0x800 [ 167.347053][ T7799] ? bpf_link_show_fdinfo+0x350/0x350 [ 167.347084][ T7799] ? lock_chain_count+0x20/0x20 [ 167.357114][ T7801] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 167.361040][ T7799] __x64_sys_bpf+0x7c/0x90 [ 167.365899][ T7801] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 167.370111][ T7799] do_syscall_64+0x55/0xb0 [ 167.370137][ T7799] ? clear_bhb_loop+0x40/0x90 [ 167.370151][ T7799] ? clear_bhb_loop+0x40/0x90 [ 167.370166][ T7799] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.370188][ T7799] RIP: 0033:0x7f182a78ebe9 [ 167.370203][ T7799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.370216][ T7799] RSP: 002b:00007f182b620038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 167.370235][ T7799] RAX: ffffffffffffffda RBX: 00007f182a9b5fa0 RCX: 00007f182a78ebe9 [ 167.370247][ T7799] RDX: 0000000000000038 RSI: 0000200000000380 RDI: 000000000000001a [ 167.469746][ T7799] RBP: 00007f182b620090 R08: 0000000000000000 R09: 0000000000000000 [ 167.477744][ T7799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 167.485743][ T7799] R13: 00007f182a9b6038 R14: 00007f182a9b5fa0 R15: 00007ffc510eead8 [ 167.493759][ T7799] [ 168.498944][ T7816] netlink: 'syz.0.693': attribute type 10 has an invalid length. [ 168.604218][ T7816] netlink: 'syz.0.693': attribute type 25 has an invalid length. [ 168.639096][ T7816] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.693'. [ 168.984510][ T7823] netlink: 'syz.0.695': attribute type 39 has an invalid length. [ 169.347515][ T7832] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 169.354829][ T7832] IPv6: NLM_F_CREATE should be set when creating new route [ 169.362209][ T7832] IPv6: NLM_F_CREATE should be set when creating new route [ 169.369509][ T7832] IPv6: NLM_F_CREATE should be set when creating new route [ 169.973090][ T7843] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.703'. [ 170.104789][ T7848] netlink: 'syz.0.704': attribute type 10 has an invalid length. [ 170.139324][ T7848] netlink: 'syz.0.704': attribute type 25 has an invalid length. [ 170.149291][ T7848] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.704'. [ 173.291183][ T7872] netlink: 'syz.1.708': attribute type 39 has an invalid length. [ 174.254962][ T7894] netlink: 'syz.0.719': attribute type 4 has an invalid length. [ 174.267425][ T7894] netlink: 116 bytes leftover after parsing attributes in process `syz.0.719'. [ 175.057558][ T7905] netlink: 'syz.2.721': attribute type 39 has an invalid length. [ 176.038673][ T7931] veth0_vlan: entered allmulticast mode [ 176.249086][ T7935] veth0_vlan: left promiscuous mode [ 176.371560][ T7935] veth0_vlan: entered promiscuous mode [ 176.482065][ T7940] netlink: 'syz.2.733': attribute type 39 has an invalid length. [ 176.491690][ T7944] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 176.512566][ T7944] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 176.671837][ T7943] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 177.231926][ T7970] FAULT_INJECTION: forcing a failure. [ 177.231926][ T7970] name failslab, interval 1, probability 0, space 0, times 0 [ 177.292114][ T7970] CPU: 0 PID: 7970 Comm: syz.2.744 Not tainted 6.6.102-syzkaller #0 [ 177.300154][ T7970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 177.310226][ T7970] Call Trace: [ 177.313520][ T7970] [ 177.316459][ T7970] dump_stack_lvl+0x16c/0x230 [ 177.321164][ T7970] ? show_regs_print_info+0x20/0x20 [ 177.326374][ T7970] ? load_image+0x3b0/0x3b0 [ 177.330902][ T7970] ? __might_sleep+0xe0/0xe0 [ 177.335503][ T7970] ? __lock_acquire+0x7c80/0x7c80 [ 177.340551][ T7970] should_fail_ex+0x39d/0x4d0 [ 177.345250][ T7970] should_failslab+0x9/0x20 [ 177.349773][ T7970] slab_pre_alloc_hook+0x59/0x310 [ 177.354809][ T7970] ? lockdep_hardirqs_on+0x98/0x150 [ 177.360036][ T7970] ? nf_nat_masq_schedule+0x23a/0x550 [ 177.365438][ T7970] __kmem_cache_alloc_node+0x53/0x260 [ 177.370870][ T7970] ? nf_nat_masq_schedule+0x23a/0x550 [ 177.376266][ T7970] kmalloc_trace+0x2a/0xe0 [ 177.380730][ T7970] nf_nat_masq_schedule+0x23a/0x550 [ 177.385953][ T7970] ? masq_inet_event+0x230/0x230 [ 177.390938][ T7970] ? masq_device_event+0xd0/0xd0 [ 177.395912][ T7970] ? timer_delete_sync+0x20/0x20 [ 177.400908][ T7970] masq_inet_event+0x194/0x230 [ 177.405829][ T7970] ? iterate_cleanup_work+0x1f0/0x1f0 [ 177.411245][ T7970] ? neigh_ifdown+0x1f/0x30 [ 177.415762][ T7970] ? ieee80211_ifa_changed+0xcf/0x5e0 [ 177.421158][ T7970] notifier_call_chain+0x197/0x390 [ 177.426304][ T7970] blocking_notifier_call_chain+0x6a/0x90 [ 177.432055][ T7970] __inet_del_ifa+0x876/0x1020 [ 177.436872][ T7970] devinet_ioctl+0xb63/0x1c60 [ 177.441596][ T7970] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 177.446732][ T7970] ? _copy_from_user+0xa5/0xe0 [ 177.451521][ T7970] ? get_user_ifreq+0x12b/0x180 [ 177.456400][ T7970] inet_ioctl+0x3c1/0x4c0 [ 177.460747][ T7970] ? tomoyo_path_number_perm+0x1ba/0x590 [ 177.466406][ T7970] ? inet_shutdown+0x370/0x370 [ 177.471226][ T7970] ? slab_free_freelist_hook+0x130/0x1b0 [ 177.476899][ T7970] ? tomoyo_path_number_perm+0x477/0x590 [ 177.482566][ T7970] ? __kmem_cache_free+0xba/0x1f0 [ 177.487628][ T7970] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 177.493122][ T7970] sock_do_ioctl+0xd7/0x2f0 [ 177.497657][ T7970] ? sock_show_fdinfo+0xb0/0xb0 [ 177.502558][ T7970] sock_ioctl+0x623/0x7a0 [ 177.506914][ T7970] ? sock_poll+0x3d0/0x3d0 [ 177.511369][ T7970] ? bpf_lsm_file_ioctl+0x9/0x10 [ 177.516322][ T7970] ? security_file_ioctl+0x80/0xa0 [ 177.521456][ T7970] ? sock_poll+0x3d0/0x3d0 [ 177.525919][ T7970] __se_sys_ioctl+0xfd/0x170 [ 177.530552][ T7970] do_syscall_64+0x55/0xb0 [ 177.535003][ T7970] ? clear_bhb_loop+0x40/0x90 [ 177.539713][ T7970] ? clear_bhb_loop+0x40/0x90 [ 177.544421][ T7970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.550356][ T7970] RIP: 0033:0x7f182a78ebe9 [ 177.554805][ T7970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.574433][ T7970] RSP: 002b:00007f182b620038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 177.582844][ T7970] RAX: ffffffffffffffda RBX: 00007f182a9b5fa0 RCX: 00007f182a78ebe9 [ 177.590807][ T7970] RDX: 0000200000000040 RSI: 0000000000008916 RDI: 0000000000000003 [ 177.598769][ T7970] RBP: 00007f182b620090 R08: 0000000000000000 R09: 0000000000000000 [ 177.606903][ T7970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 177.614860][ T7970] R13: 00007f182a9b6038 R14: 00007f182a9b5fa0 R15: 00007ffc510eead8 [ 177.622834][ T7970] [ 178.149587][ T7991] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.751'. [ 178.534394][ T8005] veth0_vlan: entered allmulticast mode [ 178.785689][ T8010] netlink: 'syz.0.760': attribute type 27 has an invalid length. [ 178.809145][ T8010] netlink: 152 bytes leftover after parsing attributes in process `syz.0.760'. [ 178.818447][ T8010] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 178.841844][ T8010] FAULT_INJECTION: forcing a failure. [ 178.841844][ T8010] name failslab, interval 1, probability 0, space 0, times 0 [ 178.860852][ T8010] CPU: 1 PID: 8010 Comm: syz.0.760 Not tainted 6.6.102-syzkaller #0 [ 178.868345][ T8008] netlink: 'syz.2.758': attribute type 2 has an invalid length. [ 178.868873][ T8010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 178.886643][ T8010] Call Trace: [ 178.889958][ T8010] [ 178.892922][ T8010] dump_stack_lvl+0x16c/0x230 [ 178.897647][ T8010] ? show_regs_print_info+0x20/0x20 [ 178.898803][ T8008] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.758'. [ 178.902859][ T8010] ? load_image+0x3b0/0x3b0 [ 178.902900][ T8010] ? __might_sleep+0xe0/0xe0 [ 178.902927][ T8010] ? __lock_acquire+0x7c80/0x7c80 [ 178.926238][ T8010] should_fail_ex+0x39d/0x4d0 [ 178.930958][ T8010] should_failslab+0x9/0x20 [ 178.935466][ T8010] slab_pre_alloc_hook+0x59/0x310 [ 178.940499][ T8010] ? __lock_acquire+0x7c80/0x7c80 [ 178.945533][ T8010] kmem_cache_alloc_node+0x60/0x330 [ 178.950745][ T8010] ? __alloc_skb+0x108/0x2c0 [ 178.955353][ T8010] __alloc_skb+0x108/0x2c0 [ 178.959785][ T8010] netlink_sendmsg+0x65b/0xbe0 [ 178.964582][ T8010] ? netlink_getsockopt+0x580/0x580 [ 178.969797][ T8010] ? aa_sock_msg_perm+0x94/0x150 [ 178.974748][ T8010] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 178.980045][ T8010] ? security_socket_sendmsg+0x80/0xa0 [ 178.985568][ T8010] ? netlink_getsockopt+0x580/0x580 [ 178.990777][ T8010] ____sys_sendmsg+0x5bf/0x950 [ 178.995578][ T8010] ? __asan_memset+0x22/0x40 [ 179.000177][ T8010] ? __sys_sendmsg_sock+0x30/0x30 [ 179.005206][ T8010] ? __import_iovec+0x3fa/0x860 [ 179.010085][ T8010] ? import_iovec+0x73/0xa0 [ 179.014613][ T8010] ___sys_sendmsg+0x220/0x290 [ 179.019308][ T8010] ? __sys_sendmsg+0x270/0x270 [ 179.024125][ T8010] ? __lock_acquire+0x7c80/0x7c80 [ 179.029206][ T8010] __se_sys_sendmsg+0x1a5/0x270 [ 179.034166][ T8010] ? __x64_sys_sendmsg+0x80/0x80 [ 179.039147][ T8010] ? lockdep_hardirqs_on+0x98/0x150 [ 179.044362][ T8010] do_syscall_64+0x55/0xb0 [ 179.048786][ T8010] ? clear_bhb_loop+0x40/0x90 [ 179.053477][ T8010] ? clear_bhb_loop+0x40/0x90 [ 179.058161][ T8010] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.064061][ T8010] RIP: 0033:0x7f39fa98ebe9 [ 179.068498][ T8010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.088116][ T8010] RSP: 002b:00007f39fb82c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.096578][ T8010] RAX: ffffffffffffffda RBX: 00007f39fabb5fa0 RCX: 00007f39fa98ebe9 [ 179.104558][ T8010] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000009 [ 179.112617][ T8010] RBP: 00007f39fb82c090 R08: 0000000000000000 R09: 0000000000000000 [ 179.120614][ T8010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.128608][ T8010] R13: 00007f39fabb6038 R14: 00007f39fabb5fa0 R15: 00007fffa6ef8fc8 [ 179.136624][ T8010] [ 179.186490][ T8013] netlink: 'syz.3.761': attribute type 27 has an invalid length. [ 179.207648][ T8013] netlink: 152 bytes leftover after parsing attributes in process `syz.3.761'. [ 179.227121][ T8013] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 179.319062][ T8015] netlink: 'syz.0.762': attribute type 21 has an invalid length. [ 179.334673][ T8015] netlink: 'syz.0.762': attribute type 4 has an invalid length. [ 179.342726][ T8015] netlink: 140 bytes leftover after parsing attributes in process `syz.0.762'. [ 179.705347][ T8024] netlink: 'syz.3.766': attribute type 27 has an invalid length. [ 179.729773][ T8024] netlink: 152 bytes leftover after parsing attributes in process `syz.3.766'. [ 179.751914][ T8024] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 179.930714][ T8030] wg2: entered promiscuous mode [ 179.939527][ T8030] wg2: entered allmulticast mode [ 180.370102][ T8049] FAULT_INJECTION: forcing a failure. [ 180.370102][ T8049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.385788][ T8049] CPU: 0 PID: 8049 Comm: syz.3.776 Not tainted 6.6.102-syzkaller #0 [ 180.393812][ T8049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 180.403881][ T8049] Call Trace: [ 180.407171][ T8049] [ 180.410102][ T8049] dump_stack_lvl+0x16c/0x230 [ 180.414788][ T8049] ? show_regs_print_info+0x20/0x20 [ 180.419996][ T8049] ? load_image+0x3b0/0x3b0 [ 180.424502][ T8049] ? __might_fault+0xaa/0x120 [ 180.429169][ T8049] ? __lock_acquire+0x7c80/0x7c80 [ 180.434195][ T8049] should_fail_ex+0x39d/0x4d0 [ 180.438955][ T8049] _copy_from_iter+0x1d3/0x1290 [ 180.443797][ T8049] ? __might_fault+0xaa/0x120 [ 180.448466][ T8049] ? _copy_from_iter+0x248/0x1290 [ 180.453666][ T8049] ? __virt_addr_valid+0x18c/0x540 [ 180.458769][ T8049] ? __lock_acquire+0x7c80/0x7c80 [ 180.463780][ T8049] ? copyout_mc+0x70/0x70 [ 180.468105][ T8049] ? copyout_mc+0x70/0x70 [ 180.472434][ T8049] ? __virt_addr_valid+0x18c/0x540 [ 180.477541][ T8049] ? page_copy_sane+0x16a/0x270 [ 180.482386][ T8049] copy_page_from_iter+0x7b/0x100 [ 180.487407][ T8049] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 180.493266][ T8049] tun_get_user+0x1583/0x3bf0 [ 180.497958][ T8049] ? aa_file_perm+0x120/0xec0 [ 180.502707][ T8049] ? aa_file_perm+0x3e8/0xec0 [ 180.507426][ T8049] ? rcu_read_unlock+0xa0/0xa0 [ 180.512190][ T8049] ? tun_get+0x1c/0x2e0 [ 180.516346][ T8049] ? __lock_acquire+0x7c80/0x7c80 [ 180.521411][ T8049] ? tun_get+0x1c/0x2e0 [ 180.525560][ T8049] tun_chr_write_iter+0x119/0x200 [ 180.530591][ T8049] vfs_write+0x43b/0x940 [ 180.534837][ T8049] ? file_end_write+0x250/0x250 [ 180.539681][ T8049] ? __fget_files+0x44a/0x4d0 [ 180.544356][ T8049] ? __fdget_pos+0x1d8/0x330 [ 180.548936][ T8049] ? ksys_write+0x75/0x250 [ 180.553347][ T8049] ksys_write+0x147/0x250 [ 180.557770][ T8049] ? __ia32_sys_read+0x90/0x90 [ 180.562525][ T8049] ? lockdep_hardirqs_on+0x98/0x150 [ 180.567731][ T8049] do_syscall_64+0x55/0xb0 [ 180.572133][ T8049] ? clear_bhb_loop+0x40/0x90 [ 180.576792][ T8049] ? clear_bhb_loop+0x40/0x90 [ 180.581463][ T8049] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 180.587359][ T8049] RIP: 0033:0x7f186418ebe9 [ 180.591762][ T8049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.611378][ T8049] RSP: 002b:00007f1865070038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 180.619787][ T8049] RAX: ffffffffffffffda RBX: 00007f18643b5fa0 RCX: 00007f186418ebe9 [ 180.627747][ T8049] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 180.635709][ T8049] RBP: 00007f1865070090 R08: 0000000000000000 R09: 0000000000000000 [ 180.643668][ T8049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.651630][ T8049] R13: 00007f18643b6038 R14: 00007f18643b5fa0 R15: 00007fff4d5463b8 [ 180.659600][ T8049] [ 180.705626][ T8051] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.777'. [ 180.773726][ T8056] netlink: 'syz.3.779': attribute type 39 has an invalid length. [ 180.883573][ T8058] syzkaller0: entered promiscuous mode [ 180.890213][ T8058] syzkaller0: entered allmulticast mode [ 181.531691][ T8077] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 181.631308][ T8080] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 188.123989][ T8093] netlink: 'syz.1.791': attribute type 39 has an invalid length. [ 188.810953][ T8108] netlink: 'syz.0.799': attribute type 7 has an invalid length. [ 189.122266][ T8126] netlink: 'syz.1.804': attribute type 29 has an invalid length. [ 189.150764][ T8126] netlink: 'syz.1.804': attribute type 29 has an invalid length. [ 189.173920][ T8126] netlink: 'syz.1.804': attribute type 29 has an invalid length. [ 189.191245][ T8126] netlink: 'syz.1.804': attribute type 29 has an invalid length. [ 189.208856][ T8126] netlink: 'syz.1.804': attribute type 29 has an invalid length. [ 189.387719][ T8134] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 189.410879][ T8138] FAULT_INJECTION: forcing a failure. [ 189.410879][ T8138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.424728][ T8138] CPU: 1 PID: 8138 Comm: syz.0.813 Not tainted 6.6.102-syzkaller #0 [ 189.432732][ T8138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 189.442797][ T8138] Call Trace: [ 189.446078][ T8138] [ 189.449002][ T8138] dump_stack_lvl+0x16c/0x230 [ 189.453685][ T8138] ? show_regs_print_info+0x20/0x20 [ 189.458880][ T8138] ? load_image+0x3b0/0x3b0 [ 189.463384][ T8138] ? __might_fault+0xaa/0x120 [ 189.468059][ T8138] ? __lock_acquire+0x7c80/0x7c80 [ 189.473078][ T8138] should_fail_ex+0x39d/0x4d0 [ 189.477756][ T8138] _copy_from_iter+0x1d3/0x1290 [ 189.482601][ T8138] ? slab_post_alloc_hook+0x8a/0x4d0 [ 189.487897][ T8138] ? __virt_addr_valid+0x18c/0x540 [ 189.493000][ T8138] ? __lock_acquire+0x7c80/0x7c80 [ 189.498017][ T8138] ? rcu_is_watching+0x15/0xb0 [ 189.502779][ T8138] ? copyout_mc+0x70/0x70 [ 189.507100][ T8138] ? __virt_addr_valid+0x18c/0x540 [ 189.512205][ T8138] ? __virt_addr_valid+0x18c/0x540 [ 189.517339][ T8138] ? __virt_addr_valid+0x469/0x540 [ 189.522448][ T8138] ? __check_object_size+0x506/0xa30 [ 189.527738][ T8138] netlink_sendmsg+0x75c/0xbe0 [ 189.532504][ T8138] ? netlink_getsockopt+0x580/0x580 [ 189.537698][ T8138] ? aa_sock_msg_perm+0x94/0x150 [ 189.542629][ T8138] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 189.547909][ T8138] ? security_socket_sendmsg+0x80/0xa0 [ 189.553358][ T8138] ? netlink_getsockopt+0x580/0x580 [ 189.558548][ T8138] ____sys_sendmsg+0x5bf/0x950 [ 189.563312][ T8138] ? __asan_memset+0x22/0x40 [ 189.567894][ T8138] ? __sys_sendmsg_sock+0x30/0x30 [ 189.572918][ T8138] ? __import_iovec+0x5f2/0x860 [ 189.577769][ T8138] ? import_iovec+0x73/0xa0 [ 189.582267][ T8138] ___sys_sendmsg+0x220/0x290 [ 189.586940][ T8138] ? __sys_sendmsg+0x270/0x270 [ 189.591712][ T8138] ? __lock_acquire+0x7c80/0x7c80 [ 189.596744][ T8138] __se_sys_sendmsg+0x1a5/0x270 [ 189.601592][ T8138] ? __x64_sys_sendmsg+0x80/0x80 [ 189.606538][ T8138] ? lockdep_hardirqs_on+0x98/0x150 [ 189.611733][ T8138] do_syscall_64+0x55/0xb0 [ 189.616139][ T8138] ? clear_bhb_loop+0x40/0x90 [ 189.620828][ T8138] ? clear_bhb_loop+0x40/0x90 [ 189.625496][ T8138] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.631384][ T8138] RIP: 0033:0x7f39fa98ebe9 [ 189.635792][ T8138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.655575][ T8138] RSP: 002b:00007f39fb82c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.663985][ T8138] RAX: ffffffffffffffda RBX: 00007f39fabb5fa0 RCX: 00007f39fa98ebe9 [ 189.672206][ T8138] RDX: 000000000000c004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 189.680608][ T8138] RBP: 00007f39fb82c090 R08: 0000000000000000 R09: 0000000000000000 [ 189.688582][ T8138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.696542][ T8138] R13: 00007f39fabb6038 R14: 00007f39fabb5fa0 R15: 00007fffa6ef8fc8 [ 189.704540][ T8138] [ 189.720629][ T8139] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 190.064683][ T8149] netlink: 'syz.3.812': attribute type 10 has an invalid length. [ 190.089020][ T8149] netlink: 'syz.3.812': attribute type 25 has an invalid length. [ 190.096925][ T8149] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.812'. [ 190.332222][ T8156] netlink: 132 bytes leftover after parsing attributes in process `syz.1.815'. [ 190.692058][ T8165] netlink: 'syz.1.820': attribute type 39 has an invalid length. [ 190.935235][ T8174] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.824'. [ 190.957668][ T8169] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.824'. [ 191.115471][ T8178] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.142438][ T8178] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.200191][ T8178] bridge0: entered allmulticast mode [ 191.286921][ T8187] netlink: 156 bytes leftover after parsing attributes in process `syz.3.829'. [ 191.306521][ T8187] FAULT_INJECTION: forcing a failure. [ 191.306521][ T8187] name failslab, interval 1, probability 0, space 0, times 0 [ 191.324706][ T8187] CPU: 0 PID: 8187 Comm: syz.3.829 Not tainted 6.6.102-syzkaller #0 [ 191.332746][ T8187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 191.342818][ T8187] Call Trace: [ 191.346108][ T8187] [ 191.349045][ T8187] dump_stack_lvl+0x16c/0x230 [ 191.353742][ T8187] ? show_regs_print_info+0x20/0x20 [ 191.358970][ T8187] ? load_image+0x3b0/0x3b0 [ 191.363506][ T8187] ? __might_sleep+0xe0/0xe0 [ 191.368122][ T8187] ? __lock_acquire+0x7c80/0x7c80 [ 191.373171][ T8187] should_fail_ex+0x39d/0x4d0 [ 191.377876][ T8187] should_failslab+0x9/0x20 [ 191.382401][ T8187] slab_pre_alloc_hook+0x59/0x310 [ 191.387453][ T8187] kmem_cache_alloc+0x5a/0x2e0 [ 191.392246][ T8187] ? fib_trie_unmerge+0x26c/0xcd0 [ 191.397300][ T8187] fib_trie_unmerge+0x26c/0xcd0 [ 191.402190][ T8187] fib_unmerge+0xc0/0x350 [ 191.406549][ T8187] fib4_rule_configure+0x118/0xb00 [ 191.411686][ T8187] ? __nla_parse+0x40/0x50 [ 191.416131][ T8187] fib_nl_newrule+0x11e6/0x1d40 [ 191.421033][ T8187] ? __mutex_lock+0x953/0xcc0 [ 191.425735][ T8187] ? __lock_acquire+0x7c80/0x7c80 [ 191.430779][ T8187] ? do_raw_spin_lock+0x121/0x2c0 [ 191.435831][ T8187] ? fib_rules_seq_read+0xf0/0xf0 [ 191.440967][ T8187] ? do_raw_spin_unlock+0x121/0x230 [ 191.446224][ T8187] ? fib_rules_seq_read+0xf0/0xf0 [ 191.451275][ T8187] rtnetlink_rcv_msg+0x7c7/0xf10 [ 191.456240][ T8187] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 191.461372][ T8187] ? lockdep_hardirqs_on+0x98/0x150 [ 191.466596][ T8187] ? rtnetlink_bind+0x80/0x80 [ 191.471290][ T8187] ? perf_trace_preemptirq_template+0xa4/0x340 [ 191.477474][ T8187] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 191.483492][ T8187] ? lock_chain_count+0x20/0x20 [ 191.488370][ T8187] ? __local_bh_enable_ip+0x12e/0x1c0 [ 191.493766][ T8187] ? lockdep_hardirqs_on+0x98/0x150 [ 191.498997][ T8187] ? __local_bh_enable_ip+0x12e/0x1c0 [ 191.504388][ T8187] ? _local_bh_enable+0xa0/0xa0 [ 191.509268][ T8187] ? __dev_queue_xmit+0x245/0x35a0 [ 191.514493][ T8187] ? __dev_queue_xmit+0x1449/0x35a0 [ 191.519730][ T8187] ? __dev_queue_xmit+0x245/0x35a0 [ 191.524860][ T8187] ? ref_tracker_free+0x634/0x7d0 [ 191.529897][ T8187] ? __copy_skb_header+0xa7/0x550 [ 191.534955][ T8187] netlink_rcv_skb+0x216/0x480 [ 191.539738][ T8187] ? rtnetlink_bind+0x80/0x80 [ 191.544447][ T8187] ? netlink_ack+0x1110/0x1110 [ 191.549342][ T8187] ? __lock_acquire+0x7c80/0x7c80 [ 191.554375][ T8187] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.559581][ T8187] netlink_unicast+0x751/0x8d0 [ 191.564358][ T8187] netlink_sendmsg+0x8c1/0xbe0 [ 191.569121][ T8187] ? netlink_getsockopt+0x580/0x580 [ 191.574315][ T8187] ? aa_sock_msg_perm+0x94/0x150 [ 191.579248][ T8187] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 191.584558][ T8187] ? security_socket_sendmsg+0x80/0xa0 [ 191.590016][ T8187] ? netlink_getsockopt+0x580/0x580 [ 191.595271][ T8187] ____sys_sendmsg+0x5bf/0x950 [ 191.600077][ T8187] ? __asan_memset+0x22/0x40 [ 191.604681][ T8187] ? __sys_sendmsg_sock+0x30/0x30 [ 191.609705][ T8187] ? __import_iovec+0x5f2/0x860 [ 191.614555][ T8187] ? import_iovec+0x73/0xa0 [ 191.619070][ T8187] ___sys_sendmsg+0x220/0x290 [ 191.623764][ T8187] ? __sys_sendmsg+0x270/0x270 [ 191.628552][ T8187] ? __lock_acquire+0x7c80/0x7c80 [ 191.633580][ T8187] __se_sys_sendmsg+0x1a5/0x270 [ 191.638426][ T8187] ? __x64_sys_sendmsg+0x80/0x80 [ 191.643377][ T8187] ? lockdep_hardirqs_on+0x98/0x150 [ 191.648720][ T8187] do_syscall_64+0x55/0xb0 [ 191.653152][ T8187] ? clear_bhb_loop+0x40/0x90 [ 191.657827][ T8187] ? clear_bhb_loop+0x40/0x90 [ 191.662507][ T8187] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.668405][ T8187] RIP: 0033:0x7f186418ebe9 [ 191.672811][ T8187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.692431][ T8187] RSP: 002b:00007f1865070038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.700861][ T8187] RAX: ffffffffffffffda RBX: 00007f18643b5fa0 RCX: 00007f186418ebe9 [ 191.708850][ T8187] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 191.716825][ T8187] RBP: 00007f1865070090 R08: 0000000000000000 R09: 0000000000000000 [ 191.724788][ T8187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.732757][ T8187] R13: 00007f18643b6038 R14: 00007f18643b5fa0 R15: 00007fff4d5463b8 [ 191.740733][ T8187] [ 192.144833][ T8213] FAULT_INJECTION: forcing a failure. [ 192.144833][ T8213] name failslab, interval 1, probability 0, space 0, times 0 [ 192.160751][ T8213] CPU: 0 PID: 8213 Comm: syz.3.839 Not tainted 6.6.102-syzkaller #0 [ 192.168748][ T8213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 192.178809][ T8213] Call Trace: [ 192.182094][ T8213] [ 192.185039][ T8213] dump_stack_lvl+0x16c/0x230 [ 192.189731][ T8213] ? show_regs_print_info+0x20/0x20 [ 192.194930][ T8213] ? load_image+0x3b0/0x3b0 [ 192.199432][ T8213] ? __might_sleep+0xe0/0xe0 [ 192.204015][ T8213] ? __lock_acquire+0x7c80/0x7c80 [ 192.209032][ T8213] should_fail_ex+0x39d/0x4d0 [ 192.213709][ T8213] should_failslab+0x9/0x20 [ 192.218210][ T8213] slab_pre_alloc_hook+0x59/0x310 [ 192.223258][ T8213] ? genl_start+0x1c9/0x6b0 [ 192.227776][ T8213] __kmem_cache_alloc_node+0x53/0x260 [ 192.233173][ T8213] ? genl_start+0x1c9/0x6b0 [ 192.237690][ T8213] kmalloc_trace+0x2a/0xe0 [ 192.242112][ T8213] genl_start+0x1c9/0x6b0 [ 192.246445][ T8213] ? netlink_lookup+0x30/0x200 [ 192.251203][ T8213] __netlink_dump_start+0x4a9/0x810 [ 192.256428][ T8213] genl_family_rcv_msg_dumpit+0x1e8/0x2c0 [ 192.262159][ T8213] ? genl_rcv_msg+0x790/0x790 [ 192.266835][ T8213] ? genl_get_cmd+0x680/0x910 [ 192.271522][ T8213] ? genl_family_rcv_msg_doit+0x2f0/0x2f0 [ 192.277263][ T8213] ? genl_start+0x6b0/0x6b0 [ 192.281788][ T8213] ? genl_dumpit+0x1a0/0x1a0 [ 192.286390][ T8213] genl_rcv_msg+0x5d7/0x790 [ 192.290903][ T8213] ? genl_bind+0x360/0x360 [ 192.295310][ T8213] ? nla_put_string+0x30/0x30 [ 192.299986][ T8213] ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0 [ 192.306574][ T8213] ? ref_tracker_free+0x634/0x7d0 [ 192.311596][ T8213] netlink_rcv_skb+0x216/0x480 [ 192.316370][ T8213] ? genl_bind+0x360/0x360 [ 192.320876][ T8213] ? netlink_ack+0x1110/0x1110 [ 192.325645][ T8213] ? __lock_acquire+0x7c80/0x7c80 [ 192.330665][ T8213] ? down_read+0x1ac/0x2e0 [ 192.335076][ T8213] genl_rcv+0x28/0x40 [ 192.339050][ T8213] netlink_unicast+0x751/0x8d0 [ 192.343813][ T8213] netlink_sendmsg+0x8c1/0xbe0 [ 192.348574][ T8213] ? netlink_getsockopt+0x580/0x580 [ 192.353767][ T8213] ? aa_sock_msg_perm+0x94/0x150 [ 192.358696][ T8213] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 192.363975][ T8213] ? security_socket_sendmsg+0x80/0xa0 [ 192.369428][ T8213] ? netlink_getsockopt+0x580/0x580 [ 192.374630][ T8213] ____sys_sendmsg+0x5bf/0x950 [ 192.379393][ T8213] ? __asan_memset+0x22/0x40 [ 192.384012][ T8213] ? __sys_sendmsg_sock+0x30/0x30 [ 192.389043][ T8213] ? __import_iovec+0x5f2/0x860 [ 192.393911][ T8213] ? import_iovec+0x73/0xa0 [ 192.398415][ T8213] ___sys_sendmsg+0x220/0x290 [ 192.403107][ T8213] ? __sys_sendmsg+0x270/0x270 [ 192.407879][ T8213] ? __lock_acquire+0x7c80/0x7c80 [ 192.413001][ T8213] __se_sys_sendmsg+0x1a5/0x270 [ 192.417851][ T8213] ? __x64_sys_sendmsg+0x80/0x80 [ 192.422790][ T8213] ? lockdep_hardirqs_on+0x98/0x150 [ 192.427984][ T8213] do_syscall_64+0x55/0xb0 [ 192.432391][ T8213] ? clear_bhb_loop+0x40/0x90 [ 192.437060][ T8213] ? clear_bhb_loop+0x40/0x90 [ 192.441726][ T8213] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.447614][ T8213] RIP: 0033:0x7f186418ebe9 [ 192.452111][ T8213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.471724][ T8213] RSP: 002b:00007f1865070038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.480221][ T8213] RAX: ffffffffffffffda RBX: 00007f18643b5fa0 RCX: 00007f186418ebe9 [ 192.488286][ T8213] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000003 [ 192.496249][ T8213] RBP: 00007f1865070090 R08: 0000000000000000 R09: 0000000000000000 [ 192.504211][ T8213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.512206][ T8213] R13: 00007f18643b6038 R14: 00007f18643b5fa0 R15: 00007fff4d5463b8 [ 192.520209][ T8213] [ 192.661171][ T8215] netlink: 144 bytes leftover after parsing attributes in process `syz.3.841'. [ 192.989537][ T8230] FAULT_INJECTION: forcing a failure. [ 192.989537][ T8230] name failslab, interval 1, probability 0, space 0, times 0 [ 193.026534][ T8230] CPU: 1 PID: 8230 Comm: syz.2.848 Not tainted 6.6.102-syzkaller #0 [ 193.034571][ T8230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 193.044642][ T8230] Call Trace: [ 193.047935][ T8230] [ 193.050885][ T8230] dump_stack_lvl+0x16c/0x230 [ 193.051544][ T8236] netlink: 156 bytes leftover after parsing attributes in process `syz.3.850'. [ 193.055571][ T8230] ? show_regs_print_info+0x20/0x20 [ 193.055598][ T8230] ? load_image+0x3b0/0x3b0 [ 193.055623][ T8230] ? __lock_acquire+0x7c80/0x7c80 [ 193.055648][ T8230] should_fail_ex+0x39d/0x4d0 [ 193.055674][ T8230] should_failslab+0x9/0x20 [ 193.055704][ T8230] slab_pre_alloc_hook+0x59/0x310 [ 193.055724][ T8230] ? __lock_acquire+0x7c80/0x7c80 [ 193.055745][ T8230] kmem_cache_alloc+0x5a/0x2e0 [ 193.055765][ T8230] ? security_file_alloc+0x34/0x120 [ 193.055791][ T8230] security_file_alloc+0x34/0x120 [ 193.055814][ T8230] init_file+0x94/0x1f0 [ 193.055837][ T8230] alloc_empty_file+0xb7/0x1d0 [ 193.055860][ T8230] alloc_file+0x5c/0x600 [ 193.055886][ T8230] alloc_file_pseudo+0x17e/0x200 [ 193.055910][ T8230] ? alloc_empty_backing_file+0xe0/0xe0 [ 193.055932][ T8230] ? _raw_spin_unlock+0x28/0x40 [ 193.055962][ T8230] anon_inode_getfd+0xca/0x1c0 [ 193.055988][ T8230] bpf_map_get_fd_by_id+0x275/0x310 [ 193.056009][ T8230] __sys_bpf+0x5b8/0x800 [ 193.056029][ T8230] ? bpf_link_show_fdinfo+0x350/0x350 [ 193.056058][ T8230] ? lock_chain_count+0x20/0x20 [ 193.056090][ T8230] __x64_sys_bpf+0x7c/0x90 [ 193.056108][ T8230] do_syscall_64+0x55/0xb0 [ 193.056125][ T8230] ? clear_bhb_loop+0x40/0x90 [ 193.056140][ T8230] ? clear_bhb_loop+0x40/0x90 [ 193.056155][ T8230] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.056176][ T8230] RIP: 0033:0x7f182a78ebe9 [ 193.056193][ T8230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.056207][ T8230] RSP: 002b:00007f182b620038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 193.056226][ T8230] RAX: ffffffffffffffda RBX: 00007f182a9b5fa0 RCX: 00007f182a78ebe9 [ 193.056239][ T8230] RDX: 000000000000000c RSI: 0000200000000380 RDI: 000000000000000e [ 193.056250][ T8230] RBP: 00007f182b620090 R08: 0000000000000000 R09: 0000000000000000 [ 193.056260][ T8230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.056270][ T8230] R13: 00007f182a9b6038 R14: 00007f182a9b5fa0 R15: 00007ffc510eead8 [ 193.056296][ T8230] [ 193.560788][ T8255] netlink: 48 bytes leftover after parsing attributes in process `syz.2.856'. [ 193.876966][ T8268] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.862'. [ 194.183944][ T8280] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.865'. [ 194.411238][ T8293] FAULT_INJECTION: forcing a failure. [ 194.411238][ T8293] name failslab, interval 1, probability 0, space 0, times 0 [ 194.445955][ T8293] CPU: 0 PID: 8293 Comm: syz.0.872 Not tainted 6.6.102-syzkaller #0 [ 194.454543][ T8293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 194.464642][ T8293] Call Trace: [ 194.467965][ T8293] [ 194.470941][ T8293] dump_stack_lvl+0x16c/0x230 [ 194.475661][ T8293] ? sctp_sendmsg+0x155c/0x27e0 [ 194.480574][ T8293] ? ___sys_sendmsg+0x220/0x290 [ 194.485482][ T8293] ? show_regs_print_info+0x20/0x20 [ 194.490737][ T8293] ? load_image+0x3b0/0x3b0 [ 194.495317][ T8293] should_fail_ex+0x39d/0x4d0 [ 194.500067][ T8293] should_failslab+0x9/0x20 [ 194.504620][ T8293] slab_pre_alloc_hook+0x59/0x310 [ 194.509703][ T8293] ? sctp_add_bind_addr+0x8c/0x360 [ 194.514870][ T8293] __kmem_cache_alloc_node+0x53/0x260 [ 194.520309][ T8293] ? sctp_add_bind_addr+0x8c/0x360 [ 194.525475][ T8293] kmalloc_trace+0x2a/0xe0 [ 194.529950][ T8293] sctp_add_bind_addr+0x8c/0x360 [ 194.534955][ T8293] sctp_copy_local_addr_list+0x30c/0x4e0 [ 194.540647][ T8293] ? sctp_copy_local_addr_list+0x9c/0x4e0 [ 194.546417][ T8293] ? sctp_do_8_2_transport_strike+0x8b0/0x8b0 [ 194.552510][ T8293] ? sctp_v6_is_any+0x64/0x70 [ 194.557206][ T8293] ? sctp_copy_one_addr+0x8c/0x350 [ 194.562339][ T8293] sctp_bind_addr_copy+0xb3/0x3c0 [ 194.567380][ T8293] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 194.573728][ T8293] sctp_connect_new_asoc+0x2da/0x690 [ 194.579031][ T8293] ? __sctp_connect+0xd20/0xd20 [ 194.583891][ T8293] ? __local_bh_enable_ip+0x12e/0x1c0 [ 194.589295][ T8293] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 194.594849][ T8293] ? security_sctp_bind_connect+0x89/0xb0 [ 194.600594][ T8293] sctp_sendmsg+0x155c/0x27e0 [ 194.605312][ T8293] ? sctp_getsockopt+0xb60/0xb60 [ 194.610261][ T8293] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 194.616084][ T8293] ? aa_sk_perm+0x7fc/0x930 [ 194.620698][ T8293] ? aa_af_perm+0x2b0/0x2b0 [ 194.625207][ T8293] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 194.631640][ T8293] ? sock_rps_record_flow+0x19/0x400 [ 194.636938][ T8293] ? inet_send_prepare+0x260/0x260 [ 194.642068][ T8293] ? inet_sendmsg+0xe9/0x2f0 [ 194.646669][ T8293] ? inet_send_prepare+0x260/0x260 [ 194.651785][ T8293] ____sys_sendmsg+0x5bf/0x950 [ 194.656589][ T8293] ? __asan_memset+0x22/0x40 [ 194.661197][ T8293] ? __sys_sendmsg_sock+0x30/0x30 [ 194.666251][ T8293] ? __import_iovec+0x5f2/0x860 [ 194.671156][ T8293] ? import_iovec+0x73/0xa0 [ 194.675749][ T8293] ___sys_sendmsg+0x220/0x290 [ 194.680455][ T8293] ? __sys_sendmsg+0x270/0x270 [ 194.685275][ T8293] ? __lock_acquire+0x7c80/0x7c80 [ 194.690361][ T8293] __se_sys_sendmsg+0x1a5/0x270 [ 194.695229][ T8293] ? __x64_sys_sendmsg+0x80/0x80 [ 194.700215][ T8293] ? lockdep_hardirqs_on+0x98/0x150 [ 194.705436][ T8293] do_syscall_64+0x55/0xb0 [ 194.709864][ T8293] ? clear_bhb_loop+0x40/0x90 [ 194.714547][ T8293] ? clear_bhb_loop+0x40/0x90 [ 194.719238][ T8293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.725146][ T8293] RIP: 0033:0x7f39fa98ebe9 [ 194.729573][ T8293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.749197][ T8293] RSP: 002b:00007f39fb82c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.757719][ T8293] RAX: ffffffffffffffda RBX: 00007f39fabb5fa0 RCX: 00007f39fa98ebe9 [ 194.765699][ T8293] RDX: 0000000004000810 RSI: 0000200000000640 RDI: 0000000000000003 [ 194.773681][ T8293] RBP: 00007f39fb82c090 R08: 0000000000000000 R09: 0000000000000000 [ 194.781660][ T8293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 194.789636][ T8293] R13: 00007f39fabb6038 R14: 00007f39fabb5fa0 R15: 00007fffa6ef8fc8 [ 194.797683][ T8293] [ 194.841239][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.847913][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.842918][ T8344] FAULT_INJECTION: forcing a failure. [ 195.842918][ T8344] name failslab, interval 1, probability 0, space 0, times 0 [ 195.886102][ T8344] CPU: 0 PID: 8344 Comm: syz.1.879 Not tainted 6.6.102-syzkaller #0 [ 195.894150][ T8344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 195.904226][ T8344] Call Trace: [ 195.907525][ T8344] [ 195.910475][ T8344] dump_stack_lvl+0x16c/0x230 [ 195.915176][ T8344] ? sctp_sendmsg+0x155c/0x27e0 [ 195.920060][ T8344] ? ___sys_sendmsg+0x220/0x290 [ 195.924942][ T8344] ? show_regs_print_info+0x20/0x20 [ 195.930175][ T8344] ? load_image+0x3b0/0x3b0 [ 195.934721][ T8344] should_fail_ex+0x39d/0x4d0 [ 195.939431][ T8344] should_failslab+0x9/0x20 [ 195.943962][ T8344] slab_pre_alloc_hook+0x59/0x310 [ 195.949017][ T8344] ? sctp_add_bind_addr+0x8c/0x360 [ 195.955793][ T8344] __kmem_cache_alloc_node+0x53/0x260 [ 195.961242][ T8344] ? sctp_add_bind_addr+0x8c/0x360 [ 195.966404][ T8344] kmalloc_trace+0x2a/0xe0 [ 195.970856][ T8344] sctp_add_bind_addr+0x8c/0x360 [ 195.975829][ T8344] sctp_copy_local_addr_list+0x30c/0x4e0 [ 195.981497][ T8344] ? sctp_copy_local_addr_list+0x9c/0x4e0 [ 195.987249][ T8344] ? sctp_do_8_2_transport_strike+0x8b0/0x8b0 [ 195.993386][ T8344] ? sctp_v6_is_any+0x64/0x70 [ 195.998091][ T8344] ? sctp_copy_one_addr+0x8c/0x350 [ 196.003250][ T8344] sctp_bind_addr_copy+0xb3/0x3c0 [ 196.008305][ T8344] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 196.014661][ T8344] sctp_connect_new_asoc+0x2da/0x690 [ 196.019963][ T8344] ? __sctp_connect+0xd20/0xd20 [ 196.024824][ T8344] ? __local_bh_enable_ip+0x12e/0x1c0 [ 196.030198][ T8344] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 196.035738][ T8344] ? security_sctp_bind_connect+0x89/0xb0 [ 196.041449][ T8344] sctp_sendmsg+0x155c/0x27e0 [ 196.046135][ T8344] ? sctp_getsockopt+0xb60/0xb60 [ 196.051075][ T8344] ? aa_sk_perm+0x7fc/0x930 [ 196.055579][ T8344] ? aa_af_perm+0x2b0/0x2b0 [ 196.060077][ T8344] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 196.066496][ T8344] ? sock_rps_record_flow+0x19/0x400 [ 196.071774][ T8344] ? inet_send_prepare+0x260/0x260 [ 196.076962][ T8344] ? inet_sendmsg+0xe9/0x2f0 [ 196.081540][ T8344] ? inet_send_prepare+0x260/0x260 [ 196.086637][ T8344] ____sys_sendmsg+0x5bf/0x950 [ 196.091397][ T8344] ? __asan_memset+0x22/0x40 [ 196.095999][ T8344] ? __sys_sendmsg_sock+0x30/0x30 [ 196.101034][ T8344] ? __import_iovec+0x5f2/0x860 [ 196.105918][ T8344] ? import_iovec+0x73/0xa0 [ 196.110536][ T8344] ___sys_sendmsg+0x220/0x290 [ 196.115223][ T8344] ? __sys_sendmsg+0x270/0x270 [ 196.120002][ T8344] ? __lock_acquire+0x7c80/0x7c80 [ 196.125046][ T8344] __se_sys_sendmsg+0x1a5/0x270 [ 196.129895][ T8344] ? __x64_sys_sendmsg+0x80/0x80 [ 196.134917][ T8344] ? lockdep_hardirqs_on+0x98/0x150 [ 196.140147][ T8344] do_syscall_64+0x55/0xb0 [ 196.144558][ T8344] ? clear_bhb_loop+0x40/0x90 [ 196.149223][ T8344] ? clear_bhb_loop+0x40/0x90 [ 196.153912][ T8344] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.159823][ T8344] RIP: 0033:0x7fea16f8ebe9 [ 196.164228][ T8344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.184067][ T8344] RSP: 002b:00007fea17de6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.192479][ T8344] RAX: ffffffffffffffda RBX: 00007fea171b5fa0 RCX: 00007fea16f8ebe9 [ 196.200443][ T8344] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 196.208408][ T8344] RBP: 00007fea17de6090 R08: 0000000000000000 R09: 0000000000000000 [ 196.216382][ T8344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 196.224358][ T8344] R13: 00007fea171b6038 R14: 00007fea171b5fa0 R15: 00007ffeed0fbc28 [ 196.232436][ T8344] [ 196.474434][ T8358] validate_nla: 5 callbacks suppressed [ 196.474450][ T8358] netlink: 'syz.3.883': attribute type 10 has an invalid length. [ 196.510487][ T8358] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.533847][ T8358] bond0: (slave team0): Enslaving as an active interface with an up link [ 196.687567][ T8362] __nla_validate_parse: 1 callbacks suppressed [ 196.687585][ T8362] netlink: 132 bytes leftover after parsing attributes in process `syz.0.882'. [ 196.884579][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 196.884600][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 196.890924][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 196.890959][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 199.243230][ T8451] netlink: 'syz.1.907': attribute type 39 has an invalid length. [ 199.451701][ T8453] netlink: 'syz.3.908': attribute type 29 has an invalid length. [ 199.460109][ T8453] netlink: 'syz.3.908': attribute type 29 has an invalid length. [ 199.471049][ T8453] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.908'. [ 201.276354][ T8501] netlink: 60 bytes leftover after parsing attributes in process `syz.0.924'. [ 201.535138][ T8508] netlink: 'syz.0.927': attribute type 25 has an invalid length. [ 201.559638][ T8508] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.927'. [ 202.283697][ T8523] syzkaller0: entered promiscuous mode [ 202.290305][ T8523] syzkaller0: entered allmulticast mode [ 202.308808][ T8531] netlink: 'syz.1.936': attribute type 29 has an invalid length. [ 202.321981][ T8531] netlink: 'syz.1.936': attribute type 29 has an invalid length. [ 202.443684][ T8534] netlink: 'syz.3.937': attribute type 25 has an invalid length. [ 202.467060][ T8534] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.937'. [ 202.481336][ T8532] syzkaller0: entered promiscuous mode [ 202.488791][ T8532] syzkaller0: entered allmulticast mode [ 202.575243][ T8539] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.939'. [ 202.592108][ T8539] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 202.602878][ T8539] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 203.467662][ T8559] netlink: 'syz.2.947': attribute type 25 has an invalid length. [ 203.479800][ T8559] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.947'. [ 203.738578][ T8568] netlink: 'syz.2.951': attribute type 1 has an invalid length. [ 203.746932][ T8568] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.951'. [ 203.816248][ T8568] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 203.823694][ T8568] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 204.104687][ T8583] netlink: 'syz.1.957': attribute type 1 has an invalid length. [ 204.113008][ T8583] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.957'. [ 204.172461][ T8587] netlink: 'syz.0.959': attribute type 25 has an invalid length. [ 204.182019][ T8587] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.959'. [ 204.757661][ T8608] netlink: 'syz.2.965': attribute type 21 has an invalid length. [ 205.021714][ T8621] netlink: 'syz.0.970': attribute type 25 has an invalid length. [ 205.029679][ T8621] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.970'. [ 205.746638][ T8637] netlink: 2 bytes leftover after parsing attributes in process `syz.3.977'. [ 205.755730][ T8637] bond0: entered promiscuous mode [ 205.763678][ T8637] bond_slave_0: entered promiscuous mode [ 205.769833][ T8637] bond_slave_1: entered promiscuous mode [ 205.776008][ T8637] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 205.788607][ T8637] team0: entered promiscuous mode [ 205.793670][ T8637] team_slave_0: entered promiscuous mode [ 205.802691][ T8637] team_slave_1: entered promiscuous mode [ 205.812876][ T8637] bridge0: port 3(bond0) entered blocking state [ 205.820937][ T8637] bridge0: port 3(bond0) entered disabled state [ 205.829448][ T8637] bond0: entered allmulticast mode [ 205.834675][ T8637] bond_slave_0: entered allmulticast mode [ 205.843902][ T8637] bond_slave_1: entered allmulticast mode [ 205.851520][ T8637] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 205.860760][ T8637] team0: entered allmulticast mode [ 205.866057][ T8637] team_slave_0: entered allmulticast mode [ 205.873873][ T8637] team_slave_1: entered allmulticast mode [ 205.888855][ T8637] bridge0: port 3(bond0) entered blocking state [ 205.895382][ T8637] bridge0: port 3(bond0) entered forwarding state [ 206.056870][ T8648] veth0_vlan: entered allmulticast mode [ 206.157097][ T8648] veth0_vlan: left promiscuous mode [ 206.187889][ T8648] veth0_vlan: entered promiscuous mode [ 206.203346][ T8648] team0: Device veth0_vlan failed to register rx_handler [ 206.725056][ T8670] validate_nla: 2 callbacks suppressed [ 206.725074][ T8670] netlink: 'syz.1.989': attribute type 29 has an invalid length. [ 206.750462][ T8670] netlink: 'syz.1.989': attribute type 29 has an invalid length. [ 206.873826][ T8670] netlink: 'syz.1.989': attribute type 29 has an invalid length. [ 206.885734][ T8675] netlink: 'syz.1.989': attribute type 29 has an invalid length. [ 206.898546][ T8670] netlink: 'syz.1.989': attribute type 29 has an invalid length. [ 207.410084][ T8685] netlink: 'syz.3.994': attribute type 5 has an invalid length. [ 207.418768][ T8685] netlink: 176 bytes leftover after parsing attributes in process `syz.3.994'. [ 207.518728][ T5102] Bluetooth: hci1: unexpected event 0x12 length: 151 > 8 [ 207.612370][ T8699] netlink: 'syz.3.1000': attribute type 1 has an invalid length. [ 207.633217][ T8699] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.1000'. [ 207.672535][ T8699] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 207.680082][ T8699] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 207.821541][ T8705] netlink: 'syz.3.1003': attribute type 25 has an invalid length. [ 207.829573][ T8705] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.1003'. [ 207.992051][ T8711] netlink: 'syz.1.1006': attribute type 10 has an invalid length. [ 208.000283][ T8711] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1006'. [ 208.009466][ T8711] bond0: entered promiscuous mode [ 208.014697][ T8711] bond_slave_0: entered promiscuous mode [ 208.020745][ T8711] bond_slave_1: entered promiscuous mode [ 208.030096][ T8711] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 208.320789][ T8722] C: renamed from team_slave_0 [ 208.329064][ T8722] netlink: 'syz.0.1011': attribute type 3 has an invalid length. [ 208.337083][ T8722] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1011'. [ 208.354423][ T8722] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 208.383074][ T8724] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.1012'. [ 208.386468][ T8722] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1011'. [ 209.029721][ T8749] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.1021'. [ 209.239290][ T8755] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.1024'. [ 209.387177][ T8761] FAULT_INJECTION: forcing a failure. [ 209.387177][ T8761] name failslab, interval 1, probability 0, space 0, times 0 [ 209.402696][ T8761] CPU: 1 PID: 8761 Comm: syz.3.1026 Not tainted 6.6.102-syzkaller #0 [ 209.410809][ T8761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 209.420909][ T8761] Call Trace: [ 209.424200][ T8761] [ 209.427136][ T8761] dump_stack_lvl+0x16c/0x230 [ 209.431832][ T8761] ? show_regs_print_info+0x20/0x20 [ 209.437066][ T8761] ? load_image+0x3b0/0x3b0 [ 209.441613][ T8761] ? __might_sleep+0xe0/0xe0 [ 209.446257][ T8761] ? __lock_acquire+0x7c80/0x7c80 [ 209.451327][ T8761] should_fail_ex+0x39d/0x4d0 [ 209.456042][ T8761] should_failslab+0x9/0x20 [ 209.460572][ T8761] slab_pre_alloc_hook+0x59/0x310 [ 209.465630][ T8761] ? kvmalloc_node+0x70/0x180 [ 209.470343][ T8761] ? kvmalloc_node+0x70/0x180 [ 209.475058][ T8761] __kmem_cache_alloc_node+0x53/0x260 [ 209.480479][ T8761] ? kvmalloc_node+0x70/0x180 [ 209.485187][ T8761] __kmalloc_node+0xa4/0x230 [ 209.489815][ T8761] kvmalloc_node+0x70/0x180 [ 209.494355][ T8761] __veth_napi_enable_range+0x292/0x6e0 [ 209.499943][ T8761] ? __skb_frag_ref+0x1c0/0x1c0 [ 209.504840][ T8761] veth_enable_xdp+0x301/0x4c0 [ 209.509647][ T8761] veth_xdp+0x4ab/0x730 [ 209.513898][ T8761] bond_xdp+0x3fe/0x850 [ 209.518096][ T8761] ? bond_fix_features+0x1d0/0x1d0 [ 209.523243][ T8761] ? alloc_file+0x88/0x600 [ 209.527714][ T8761] dev_xdp_install+0xf4/0x230 [ 209.532475][ T8761] ? bond_fix_features+0x1d0/0x1d0 [ 209.537648][ T8761] ? bpf_xdp_link_fill_link_info+0xc0/0xc0 [ 209.543504][ T8761] ? bond_fix_features+0x1d0/0x1d0 [ 209.548654][ T8761] dev_xdp_attach+0xbc7/0x1030 [ 209.553480][ T8761] bpf_xdp_link_attach+0x366/0x6d0 [ 209.558635][ T8761] ? dev_xdp_prog+0x100/0x100 [ 209.563352][ T8761] ? __lock_acquire+0x7c80/0x7c80 [ 209.568516][ T8761] ? __fget_files+0x44a/0x4d0 [ 209.573231][ T8761] ? attach_type_to_prog_type+0x330/0x3a0 [ 209.578975][ T8761] ? bpf_prog_attach_check_attach_type+0x2d8/0x440 [ 209.585602][ T8761] link_create+0x3ff/0x720 [ 209.590089][ T8761] __sys_bpf+0x479/0x800 [ 209.594356][ T8761] ? bpf_link_show_fdinfo+0x350/0x350 [ 209.599797][ T8761] ? lock_chain_count+0x20/0x20 [ 209.604678][ T8761] __x64_sys_bpf+0x7c/0x90 [ 209.609121][ T8761] do_syscall_64+0x55/0xb0 [ 209.613558][ T8761] ? clear_bhb_loop+0x40/0x90 [ 209.618258][ T8761] ? clear_bhb_loop+0x40/0x90 [ 209.622970][ T8761] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 209.628896][ T8761] RIP: 0033:0x7f186418ebe9 [ 209.633330][ T8761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.652958][ T8761] RSP: 002b:00007f1865070038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 209.661413][ T8761] RAX: ffffffffffffffda RBX: 00007f18643b5fa0 RCX: 00007f186418ebe9 [ 209.669422][ T8761] RDX: 0000000000000027 RSI: 0000200000001d40 RDI: 000000000000001c [ 209.677435][ T8761] RBP: 00007f1865070090 R08: 0000000000000000 R09: 0000000000000000 [ 209.685441][ T8761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 209.693439][ T8761] R13: 00007f18643b6038 R14: 00007f18643b5fa0 R15: 00007fff4d5463b8 [ 209.701458][ T8761] [ 209.723909][ T8761] bond0: (slave bond_slave_0): Error -12 calling ndo_bpf [ 209.911591][ T8775] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.1033'. [ 209.929107][ T8773] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1031'. [ 210.120742][ T8773] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 210.128086][ T8773] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 211.939515][ T8837] C: renamed from team_slave_0 (while UP) [ 211.953385][ T8837] validate_nla: 17 callbacks suppressed [ 211.953400][ T8837] netlink: 'syz.3.1057': attribute type 3 has an invalid length. [ 211.969321][ T8837] netlink: 'syz.3.1057': attribute type 1 has an invalid length. [ 211.977366][ T8837] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 212.029922][ T8837] netlink: 'syz.3.1057': attribute type 2 has an invalid length. [ 212.471294][ T8847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.667868][ T8855] netlink: 'syz.2.1064': attribute type 25 has an invalid length. [ 212.676060][ T8855] __nla_validate_parse: 8 callbacks suppressed [ 212.676073][ T8855] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.1064'. [ 212.882854][ T8862] netlink: 'syz.2.1065': attribute type 3 has an invalid length. [ 212.895331][ T8862] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.1065'. [ 213.945659][ T8877] netlink: 'syz.2.1074': attribute type 25 has an invalid length. [ 213.967001][ T8877] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.1074'. [ 214.191757][ T8884] C: renamed from team_slave_0 (while UP) [ 214.204437][ T8884] netlink: 'syz.2.1077': attribute type 3 has an invalid length. [ 214.215023][ T8884] netlink: 'syz.2.1077': attribute type 1 has an invalid length. [ 214.227319][ T8887] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 214.229656][ T8884] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1077'. [ 214.233776][ T8887] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 214.260840][ T8884] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 214.363120][ T8884] netlink: 'syz.2.1077': attribute type 2 has an invalid length. [ 214.381196][ T8884] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1077'. [ 214.469760][ T8891] netlink: 'syz.0.1080': attribute type 1 has an invalid length. [ 214.481094][ T8891] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1080'. [ 214.586632][ T8891] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 214.595256][ T8891] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 214.955702][ T8903] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.1085'. [ 215.979045][ T8924] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.1094'. [ 216.210464][ T8932] pim6reg: tun_chr_ioctl cmd 1074812118 [ 216.218931][ T8932] pim6reg: tun_chr_ioctl cmd 35636 [ 216.228871][ T8932] pim6reg: tun_chr_ioctl cmd 35588 [ 216.248216][ T8933] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1096'. [ 216.747774][ T8947] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.1104'. [ 216.958049][ T8954] validate_nla: 9 callbacks suppressed [ 216.958067][ T8954] netlink: 'syz.1.1107': attribute type 39 has an invalid length. [ 216.979117][ T8956] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 216.985788][ T8956] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 217.525386][ T8974] netlink: 'syz.2.1116': attribute type 29 has an invalid length. [ 217.544741][ T8974] netlink: 'syz.2.1116': attribute type 29 has an invalid length. [ 217.567495][ T8978] wg2: entered promiscuous mode [ 217.572618][ T8978] wg2: entered allmulticast mode [ 217.577286][ T8976] netlink: 'syz.3.1118': attribute type 1 has an invalid length. [ 218.637463][ T9008] netlink: 'syz.0.1131': attribute type 1 has an invalid length. [ 218.645660][ T9008] __nla_validate_parse: 1 callbacks suppressed [ 218.645698][ T9008] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1131'. [ 219.113853][ T9021] syzkaller0: entered promiscuous mode [ 219.123624][ T9021] syzkaller0: entered allmulticast mode [ 219.233005][ T9017] netlink: 'syz.0.1133': attribute type 29 has an invalid length. [ 219.274746][ T9017] netlink: 'syz.0.1133': attribute type 29 has an invalid length. [ 219.864226][ T9034] netlink: 'syz.0.1141': attribute type 1 has an invalid length. [ 219.900739][ T9034] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1141'. [ 221.222886][ T9054] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 221.230303][ T9054] IPv6: NLM_F_CREATE should be set when creating new route [ 221.237703][ T9054] IPv6: NLM_F_CREATE should be set when creating new route [ 221.244958][ T9054] IPv6: NLM_F_CREATE should be set when creating new route [ 221.326502][ T9058] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1151'. [ 222.046035][ T9066] netlink: 'syz.0.1155': attribute type 1 has an invalid length. [ 222.058835][ T9066] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1155'. [ 222.089434][ T9068] netlink: 'syz.2.1156': attribute type 1 has an invalid length. [ 222.106071][ T9066] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 222.113232][ T9066] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 222.116337][ T9068] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.1156'. [ 222.402960][ T9078] netlink: 'syz.3.1166': attribute type 29 has an invalid length. [ 222.451037][ T9078] netlink: 'syz.3.1166': attribute type 29 has an invalid length. [ 223.409798][ T9089] netlink: 'syz.0.1163': attribute type 10 has an invalid length. [ 223.422389][ T9089] bond0: (slave netdevsim0): Releasing backup interface [ 223.748362][ T9093] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 223.962982][ T9097] netlink: 'syz.1.1168': attribute type 1 has an invalid length. [ 223.986929][ T9097] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.1168'. [ 224.008290][ T9100] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 224.014838][ T9100] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 224.100647][ T9102] FAULT_INJECTION: forcing a failure. [ 224.100647][ T9102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.125345][ T9102] CPU: 0 PID: 9102 Comm: syz.2.1170 Not tainted 6.6.102-syzkaller #0 [ 224.133475][ T9102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 224.143554][ T9102] Call Trace: [ 224.146834][ T9102] [ 224.149762][ T9102] dump_stack_lvl+0x16c/0x230 [ 224.154445][ T9102] ? show_regs_print_info+0x20/0x20 [ 224.159648][ T9102] ? load_image+0x3b0/0x3b0 [ 224.164158][ T9102] ? __might_fault+0xaa/0x120 [ 224.168863][ T9102] ? __lock_acquire+0x7c80/0x7c80 [ 224.173890][ T9102] should_fail_ex+0x39d/0x4d0 [ 224.178579][ T9102] _copy_from_user+0x2f/0xe0 [ 224.183167][ T9102] generic_map_update_batch+0x53f/0x810 [ 224.188748][ T9102] ? rcu_read_unlock+0xa0/0xa0 [ 224.193545][ T9102] ? __fdget+0x180/0x210 [ 224.197804][ T9102] ? rcu_read_unlock+0xa0/0xa0 [ 224.202577][ T9102] bpf_map_do_batch+0x3d7/0x610 [ 224.207447][ T9102] __sys_bpf+0x31b/0x800 [ 224.211688][ T9102] ? bpf_link_show_fdinfo+0x350/0x350 [ 224.217090][ T9102] ? lock_chain_count+0x20/0x20 [ 224.222037][ T9102] __x64_sys_bpf+0x7c/0x90 [ 224.226451][ T9102] do_syscall_64+0x55/0xb0 [ 224.230873][ T9102] ? clear_bhb_loop+0x40/0x90 [ 224.235551][ T9102] ? clear_bhb_loop+0x40/0x90 [ 224.240229][ T9102] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.246124][ T9102] RIP: 0033:0x7f182a78ebe9 [ 224.250573][ T9102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.270370][ T9102] RSP: 002b:00007f182b620038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 224.278787][ T9102] RAX: ffffffffffffffda RBX: 00007f182a9b5fa0 RCX: 00007f182a78ebe9 [ 224.286758][ T9102] RDX: 0000000000000038 RSI: 0000200000000c00 RDI: 000000000000001a [ 224.294723][ T9102] RBP: 00007f182b620090 R08: 0000000000000000 R09: 0000000000000000 [ 224.302705][ T9102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 224.310672][ T9102] R13: 00007f182a9b6038 R14: 00007f182a9b5fa0 R15: 00007ffc510eead8 [ 224.318666][ T9102] [ 224.361420][ T9099] syzkaller0: entered promiscuous mode [ 224.386240][ T9099] syzkaller0: entered allmulticast mode [ 224.485637][ T9105] netlink: 'syz.1.1171': attribute type 39 has an invalid length. [ 225.018201][ T9122] netlink: 'syz.1.1179': attribute type 25 has an invalid length. [ 225.026813][ T9122] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.1179'. [ 225.072134][ T9125] netlink: 'syz.0.1180': attribute type 1 has an invalid length. [ 225.097398][ T9125] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1180'. [ 225.158065][ T9127] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 225.164543][ T9127] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 225.200429][ T9129] netlink: 'syz.2.1189': attribute type 25 has an invalid length. [ 225.215246][ T9129] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.1189'. [ 225.963759][ T9143] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.1185'. [ 226.023489][ T9143] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 226.031572][ T9143] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 226.121372][ T9146] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1186'. [ 226.130702][ T9146] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1186'. [ 226.141146][ T9145] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1186'. [ 226.359554][ T9154] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.1191'. [ 227.005238][ T9170] bond0: (slave netdevsim0): Releasing backup interface [ 227.024196][ T9170] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 227.028455][ T9168] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1204'. [ 227.037106][ T9170] batman_adv: batadv0: Adding interface: netdevsim0 [ 227.055947][ T9170] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.067609][ T9168] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 227.099515][ T9170] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 227.995007][ T9173] validate_nla: 7 callbacks suppressed [ 227.995040][ T9173] netlink: 'syz.3.1197': attribute type 1 has an invalid length. [ 228.032309][ T9175] net_ratelimit: 1 callbacks suppressed [ 228.032341][ T9175] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 228.044574][ T9175] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 228.200494][ T9183] netlink: 'syz.2.1201': attribute type 1 has an invalid length. [ 228.258100][ T9183] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 228.266738][ T9183] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 228.337733][ T9186] netlink: 'syz.0.1202': attribute type 25 has an invalid length. [ 228.717462][ T9196] openvswitch: netlink: Duplicate key (type 0). [ 228.738951][ T9195] veth1_macvtap: left promiscuous mode [ 228.754042][ T9195] macsec0: entered promiscuous mode [ 229.029016][ T9205] netlink: 'syz.2.1210': attribute type 10 has an invalid length. [ 229.047326][ T9203] netlink: 'syz.0.1209': attribute type 1 has an invalid length. [ 229.055291][ T9203] __nla_validate_parse: 4 callbacks suppressed [ 229.055316][ T9203] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1209'. [ 229.087253][ T9205] bond0: (slave netdevsim0): Releasing backup interface [ 229.091142][ T9203] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 229.107413][ T9203] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 229.138492][ T9205] batman_adv: batadv0: Adding interface: netdevsim0 [ 229.147645][ T9205] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.178706][ T9205] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 229.331477][ T9211] netlink: 'syz.1.1211': attribute type 29 has an invalid length. [ 229.333868][ T9213] netlink: 'syz.0.1212': attribute type 25 has an invalid length. [ 229.351395][ T9211] netlink: 'syz.1.1211': attribute type 29 has an invalid length. [ 229.361957][ T9213] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.1212'. [ 229.404822][ T9215] netlink: 'syz.2.1213': attribute type 39 has an invalid length. [ 229.552055][ T9222] FAULT_INJECTION: forcing a failure. [ 229.552055][ T9222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.569136][ T9222] CPU: 1 PID: 9222 Comm: syz.1.1215 Not tainted 6.6.102-syzkaller #0 [ 229.577250][ T9222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 229.583232][ T9218] netlink: 'syz.0.1214': attribute type 1 has an invalid length. [ 229.587299][ T9222] Call Trace: [ 229.587310][ T9222] [ 229.587318][ T9222] dump_stack_lvl+0x16c/0x230 [ 229.587344][ T9222] ? show_regs_print_info+0x20/0x20 [ 229.587362][ T9222] ? load_image+0x3b0/0x3b0 [ 229.587384][ T9222] ? __might_fault+0xaa/0x120 [ 229.587401][ T9222] ? __lock_acquire+0x7c80/0x7c80 [ 229.587424][ T9222] should_fail_ex+0x39d/0x4d0 [ 229.587460][ T9222] _copy_from_user+0x2f/0xe0 [ 229.587480][ T9222] sk_setsockopt+0x242/0x29d0 [ 229.587503][ T9222] ? sockopt_capable+0x60/0x60 [ 229.587530][ T9222] ? __might_sleep+0xe0/0xe0 [ 229.587567][ T9222] udp_lib_setsockopt+0xed/0x890 [ 229.587589][ T9222] ? udp_destroy_sock+0x2c0/0x2c0 [ 229.587609][ T9222] ? __fget_files+0x28/0x4d0 [ 229.587633][ T9222] udp_setsockopt+0x77/0xb0 [ 229.587649][ T9222] ? udp_set_csum+0x6f0/0x6f0 [ 229.587664][ T9222] ? sock_common_recvmsg+0x1b0/0x1b0 [ 229.587685][ T9222] do_sock_setsockopt+0x175/0x1a0 [ 229.587709][ T9222] __x64_sys_setsockopt+0x184/0x200 [ 229.587734][ T9222] do_syscall_64+0x55/0xb0 [ 229.587751][ T9222] ? clear_bhb_loop+0x40/0x90 [ 229.587767][ T9222] ? clear_bhb_loop+0x40/0x90 [ 229.587784][ T9222] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.587806][ T9222] RIP: 0033:0x7fea16f8ebe9 [ 229.587823][ T9222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.595870][ T9218] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1214'. [ 229.598803][ T9222] RSP: 002b:00007fea17de6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 229.598825][ T9222] RAX: ffffffffffffffda RBX: 00007fea171b5fa0 RCX: 00007fea16f8ebe9 [ 229.598835][ T9222] RDX: 0000000000000019 RSI: 0000000000000001 RDI: 0000000000000005 [ 229.598845][ T9222] RBP: 00007fea17de6090 R08: 0000000000000004 R09: 0000000000000000 [ 229.598854][ T9222] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.598865][ T9222] R13: 00007fea171b6038 R14: 00007fea171b5fa0 R15: 00007ffeed0fbc28 [ 229.598891][ T9222] [ 229.699914][ T9223] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 229.700005][ T9223] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 229.721136][ T9225] pim6reg: tun_chr_ioctl cmd 1074812118 [ 229.837885][ T9226] veth0_vlan: left allmulticast mode [ 229.844132][ T9226] veth0_vlan: left promiscuous mode [ 229.850605][ T9226] veth0_vlan: entered promiscuous mode [ 229.859512][ T9226] team0: Device veth0_vlan failed to register rx_handler [ 230.007860][ T9232] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.1221'. [ 230.018212][ T9232] openvswitch: netlink: Duplicate key (type 0). [ 230.078915][ T9235] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1222'. [ 230.268338][ T9242] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.1224'. [ 230.331279][ T5102] Bluetooth: hci3: unexpected event 0x05 length: 151 > 4 [ 231.038750][ T9260] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.1230'. [ 231.214542][ T9265] veth1_macvtap: left promiscuous mode [ 231.221411][ T9265] macsec0: entered promiscuous mode [ 231.567462][ T9275] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.1233'. [ 231.644016][ T9277] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.1235'. [ 231.969447][ T9284] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1241'. [ 232.642916][ T9312] FAULT_INJECTION: forcing a failure. [ 232.642916][ T9312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.660314][ T9312] CPU: 1 PID: 9312 Comm: syz.2.1251 Not tainted 6.6.102-syzkaller #0 [ 232.668491][ T9312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 232.678617][ T9312] Call Trace: [ 232.681973][ T9312] [ 232.684971][ T9312] dump_stack_lvl+0x16c/0x230 [ 232.689722][ T9312] ? show_regs_print_info+0x20/0x20 [ 232.694975][ T9312] ? load_image+0x3b0/0x3b0 [ 232.699574][ T9312] ? __might_fault+0xaa/0x120 [ 232.704307][ T9312] ? __lock_acquire+0x7c80/0x7c80 [ 232.709388][ T9312] should_fail_ex+0x39d/0x4d0 [ 232.714118][ T9312] _copy_from_user+0x2f/0xe0 [ 232.718754][ T9312] ___sys_sendmsg+0x159/0x290 [ 232.723471][ T9312] ? __sys_sendmsg+0x270/0x270 [ 232.728345][ T9312] ? __lock_acquire+0x7c80/0x7c80 [ 232.733493][ T9312] __se_sys_sendmsg+0x1a5/0x270 [ 232.738454][ T9312] ? __x64_sys_sendmsg+0x80/0x80 [ 232.743478][ T9312] ? lockdep_hardirqs_on+0x98/0x150 [ 232.748720][ T9312] do_syscall_64+0x55/0xb0 [ 232.753170][ T9312] ? clear_bhb_loop+0x40/0x90 [ 232.757864][ T9312] ? clear_bhb_loop+0x40/0x90 [ 232.762571][ T9312] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.768498][ T9312] RIP: 0033:0x7f182a78ebe9 [ 232.772951][ T9312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.792585][ T9312] RSP: 002b:00007f182b620038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.801031][ T9312] RAX: ffffffffffffffda RBX: 00007f182a9b5fa0 RCX: 00007f182a78ebe9 [ 232.809023][ T9312] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 232.817013][ T9312] RBP: 00007f182b620090 R08: 0000000000000000 R09: 0000000000000000 [ 232.825003][ T9312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.833002][ T9312] R13: 00007f182a9b6038 R14: 00007f182a9b5fa0 R15: 00007ffc510eead8 [ 232.841055][ T9312] [ 233.019239][ T9317] validate_nla: 14 callbacks suppressed [ 233.019275][ T9317] netlink: 'syz.0.1253': attribute type 1 has an invalid length. [ 233.099368][ T9317] net_ratelimit: 12 callbacks suppressed [ 233.099410][ T9317] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 233.113777][ T9317] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 233.333306][ T9329] netlink: 'syz.1.1258': attribute type 39 has an invalid length. [ 233.640943][ T9337] netlink: 'syz.2.1259': attribute type 1 has an invalid length. [ 233.680005][ T9337] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 233.686658][ T9337] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 233.688518][ T9342] netlink: 'syz.3.1263': attribute type 1 has an invalid length. [ 233.743986][ T9347] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 233.750502][ T9347] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 233.934563][ T9355] openvswitch: netlink: Duplicate key (type 0). [ 234.046340][ T9362] netlink: 'syz.2.1270': attribute type 1 has an invalid length. [ 234.069040][ T9362] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 234.075731][ T9362] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 234.274136][ T9369] __nla_validate_parse: 12 callbacks suppressed [ 234.274151][ T9369] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.1273'. [ 234.298193][ T9371] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.1273'. [ 234.442868][ T9373] netlink: 'syz.2.1275': attribute type 29 has an invalid length. [ 234.461664][ T9373] netlink: 'syz.2.1275': attribute type 29 has an invalid length. [ 234.566129][ T9377] netlink: 'syz.1.1276': attribute type 1 has an invalid length. [ 234.580672][ T9377] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.1276'. [ 234.624194][ T9377] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 234.726873][ T9379] netlink: 'syz.2.1277': attribute type 1 has an invalid length. [ 234.737844][ T9379] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.1277'. [ 234.875010][ T9384] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.1280'. [ 235.088133][ T9382] netlink: 'syz.1.1278': attribute type 29 has an invalid length. [ 235.248508][ T9388] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.1281'. [ 235.500769][ T9401] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1286'. [ 236.306308][ T9428] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.1295'. [ 237.094236][ T9445] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1305'. [ 237.752409][ T9463] syzkaller0: entered promiscuous mode [ 237.767276][ T9463] syzkaller0: entered allmulticast mode [ 237.909345][ T9469] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.1323'. [ 238.100866][ T9475] validate_nla: 10 callbacks suppressed [ 238.100907][ T9475] netlink: 'syz.3.1317': attribute type 1 has an invalid length. [ 238.859628][ T9490] netlink: 'syz.3.1324': attribute type 29 has an invalid length. [ 238.908923][ T9490] netlink: 'syz.3.1324': attribute type 29 has an invalid length. [ 239.098445][ T9498] net_ratelimit: 17 callbacks suppressed [ 239.098464][ T9498] openvswitch: netlink: Message has 20476 unknown bytes. [ 239.189685][ T9500] netlink: 'syz.2.1328': attribute type 1 has an invalid length. [ 239.570177][ T9506] netlink: 'syz.1.1329': attribute type 1 has an invalid length. [ 239.591269][ T9506] __nla_validate_parse: 5 callbacks suppressed [ 239.591303][ T9506] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.1329'. [ 239.629039][ T9507] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 239.635594][ T9507] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 239.666500][ T9511] netlink: 'syz.3.1333': attribute type 25 has an invalid length. [ 239.686117][ T9511] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.1333'. [ 239.938483][ T9517] netlink: 'syz.0.1336': attribute type 29 has an invalid length. [ 239.975607][ T9517] netlink: 'syz.0.1336': attribute type 29 has an invalid length. [ 240.142380][ T9526] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.1338'. [ 240.152895][ T9526] openvswitch: netlink: Message has 20476 unknown bytes. [ 240.293248][ T9528] netlink: 'syz.0.1339': attribute type 1 has an invalid length. [ 240.302017][ T9528] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1339'. [ 240.425967][ T9530] netlink: 'syz.0.1340': attribute type 39 has an invalid length. [ 240.812432][ T9539] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1344'. [ 240.870259][ T9542] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.1345'. [ 240.870279][ T9539] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 240.886716][ T9539] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 241.131769][ T9551] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.1348'. [ 241.669223][ T9563] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.1354'. [ 241.692315][ T9564] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.1355'. [ 241.696260][ T9563] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 241.712007][ T9563] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 346.726188][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 346.733375][ C0] rcu: 1-...!: (1 GPs behind) idle=e70c/1/0x4000000000000000 softirq=27097/27098 fqs=31 [ 346.744255][ C0] rcu: (detected by 0, t=10504 jiffies, g=33089, q=175 ncpus=2) [ 346.752085][ C0] Sending NMI from CPU 0 to CPUs 1: [ 346.757317][ C1] NMI backtrace for cpu 1 [ 346.757332][ C1] CPU: 1 PID: 9563 Comm: syz.1.1354 Not tainted 6.6.102-syzkaller #0 [ 346.757348][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 346.757357][ C1] RIP: 0010:tracing_gen_ctx_irq_test+0x97/0x140 [ 346.757392][ C1] Code: 00 00 44 89 e6 81 e6 00 fe 00 00 44 0f 44 f0 31 ff e8 4d 82 fc ff 65 48 8b 1d 75 ad 7a 7e 48 89 d8 48 c1 e8 03 42 80 3c 38 00 <74> 08 48 89 df e8 af c5 53 00 48 8b 03 d1 e8 83 e0 04 41 09 c6 65 [ 346.757405][ C1] RSP: 0018:ffffc90005666bd0 EFLAGS: 00000046 [ 346.757418][ C1] RAX: 1ffff1100fda1000 RBX: ffff88807ed08000 RCX: 0000000000000002 [ 346.757429][ C1] RDX: ffff88807ed08000 RSI: 0000000000000400 RDI: 0000000000000000 [ 346.757439][ C1] RBP: 0000000000000001 R08: ffffc90005666e8f R09: 0000000000000000 [ 346.757449][ C1] R10: ffffc90005666e80 R11: fffff52000accdd2 R12: 0000000000000402 [ 346.757459][ C1] R13: 1ffff92000accd84 R14: 0000000000000081 R15: dffffc0000000000 [ 346.757470][ C1] FS: 00007fea17de66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 346.757484][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 346.757494][ C1] CR2: 0000200000001340 CR3: 000000007795c000 CR4: 00000000003506e0 [ 346.757508][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 346.757516][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 346.757526][ C1] Call Trace: [ 346.757532][ C1] [ 346.757543][ C1] perf_trace_buf_update+0xa0/0x220 [ 346.757586][ C1] ? perf_trace_buf_alloc+0x290/0x290 [ 346.757640][ C1] perf_tp_event+0xf9/0x13a0 [ 346.757670][ C1] ? perf_tp_event+0x13a0/0x13a0 [ 346.757686][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 346.757701][ C1] ? perf_swevent_event+0x2f5/0x5c0 [ 346.757756][ C1] perf_trace_run_bpf_submit+0xf4/0x1c0 [ 346.757777][ C1] perf_trace_preemptirq_template+0x281/0x340 [ 346.757798][ C1] ? asm_sysvec_irq_work+0x1a/0x20 [ 346.757814][ C1] ? trace_event_raw_event_preemptirq_template+0x1e0/0x1e0 [ 346.757835][ C1] ? lock_chain_count+0x20/0x20 [ 346.757853][ C1] ? rcu_is_watching+0x15/0xb0 [ 346.757870][ C1] ? asm_sysvec_irq_work+0x1a/0x20 [ 346.757885][ C1] trace_irq_enable+0xbf/0xe0 [ 346.757904][ C1] trace_hardirqs_on+0x18/0x40 [ 346.757918][ C1] asm_sysvec_irq_work+0x1a/0x20 [ 346.757932][ C1] RIP: 0010:rcu_read_unlock_special+0x88/0x4c0 [ 346.757953][ C1] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 39 58 93 7e 41 f7 c6 00 00 f0 00 74 45 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b [ 346.757966][ C1] RSP: 0018:ffffc90005667160 EFLAGS: 00000206 [ 346.757978][ C1] RAX: a909b389dccd7300 RBX: 1ffff92000acce34 RCX: a909b389dccd7300 [ 346.757988][ C1] RDX: dffffc0000000000 RSI: ffffffff8aaab9c0 RDI: ffffffff8afc66c0 [ 346.757999][ C1] RBP: ffffc90005667260 R08: ffffffff90da35ef R09: 1ffffffff21b46bd [ 346.758010][ C1] R10: dffffc0000000000 R11: fffffbfff21b46be R12: ffffffff8cd35400 [ 346.758021][ C1] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000002 [ 346.758050][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 346.758069][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 346.758089][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 346.758118][ C1] __rcu_read_unlock+0x7c/0xd0 [ 346.758136][ C1] ? hsr_forward_skb+0x90/0x2120 [ 346.758151][ C1] hsr_forward_skb+0x1803/0x2120 [ 346.758169][ C1] ? hsr_forward_skb+0x90/0x2120 [ 346.758185][ C1] ? prp_fill_frame_info+0x6f0/0x6f0 [ 346.758198][ C1] ? do_raw_spin_lock+0x121/0x2c0 [ 346.758218][ C1] ? __rwlock_init+0x150/0x150 [ 346.758235][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 346.758260][ C1] ? hsr_dev_xmit+0x132/0x200 [ 346.758281][ C1] hsr_dev_xmit+0x13d/0x200 [ 346.758304][ C1] dev_hard_start_xmit+0x246/0x740 [ 346.758333][ C1] __dev_queue_xmit+0x1a64/0x35a0 [ 346.758352][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 346.758376][ C1] ? __dev_queue_xmit+0x245/0x35a0 [ 346.758391][ C1] ? skb_copy_bits+0x89/0x7b0 [ 346.758409][ C1] ? packet_parse_headers+0x342/0xad0 [ 346.758431][ C1] ? netdev_core_pick_tx+0x340/0x340 [ 346.758446][ C1] ? packet_parse_headers+0x7c8/0xad0 [ 346.758463][ C1] ? packet_parse_headers+0x868/0xad0 [ 346.758479][ C1] ? __virt_addr_valid+0x18c/0x540 [ 346.758502][ C1] ? skb_setup_tx_timestamp+0x1e0/0x1e0 [ 346.758521][ C1] ? skb_copy_datagram_from_iter+0x5f6/0x6e0 [ 346.758541][ C1] ? packet_xmit+0x66/0x330 [ 346.758556][ C1] ? packet_sendmsg+0x3a04/0x4d30 [ 346.758574][ C1] packet_sendmsg+0x3b47/0x4d30 [ 346.758609][ C1] ? __might_sleep+0xe0/0xe0 [ 346.758625][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 346.758643][ C1] ? lock_chain_count+0x20/0x20 [ 346.758673][ C1] ? aa_sk_perm+0x7fc/0x930 [ 346.758694][ C1] ? packet_getsockopt+0xa20/0xa20 [ 346.758716][ C1] ? kasan_check_range+0x89/0x290 [ 346.758731][ C1] ? aa_sock_msg_perm+0x94/0x150 [ 346.758748][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 346.758765][ C1] ? security_socket_sendmsg+0x80/0xa0 [ 346.758780][ C1] ? packet_getsockopt+0xa20/0xa20 [ 346.758795][ C1] ____sys_sendmsg+0x5bf/0x950 [ 346.758820][ C1] ? __asan_memset+0x22/0x40 [ 346.758837][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 346.758854][ C1] ? __import_iovec+0x5f2/0x860 [ 346.758881][ C1] ? import_iovec+0x73/0xa0 [ 346.758903][ C1] ___sys_sendmsg+0x220/0x290 [ 346.758924][ C1] ? __sys_sendmsg+0x270/0x270 [ 346.758980][ C1] __se_sys_sendmsg+0x1a5/0x270 [ 346.759002][ C1] ? __x64_sys_sendmsg+0x80/0x80 [ 346.759033][ C1] ? syscall_enter_from_user_mode+0x2e/0x80 [ 346.759056][ C1] do_syscall_64+0x55/0xb0 [ 346.759071][ C1] ? clear_bhb_loop+0x40/0x90 [ 346.759083][ C1] ? clear_bhb_loop+0x40/0x90 [ 346.759098][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 346.759118][ C1] RIP: 0033:0x7fea16f8ebe9 [ 346.759138][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.759150][ C1] RSP: 002b:00007fea17de6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.759164][ C1] RAX: ffffffffffffffda RBX: 00007fea171b5fa0 RCX: 00007fea16f8ebe9 [ 346.759175][ C1] RDX: 0000000000000000 RSI: 0000200000000fc0 RDI: 000000000000000b [ 346.759184][ C1] RBP: 00007fea17011e19 R08: 0000000000000000 R09: 0000000000000000 [ 346.759193][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.759202][ C1] R13: 00007fea171b6038 R14: 00007fea171b5fa0 R15: 00007ffeed0fbc28 [ 346.759225][ C1] [ 346.759312][ C0] rcu: rcu_preempt kthread starved for 10350 jiffies! g33089 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 347.404218][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 347.414198][ C0] rcu: RCU grace-period kthread stack dump: [ 347.420106][ C0] task:rcu_preempt state:R running task stack:26568 pid:17 ppid:2 flags:0x00004000 [ 347.431009][ C0] Call Trace: [ 347.434301][ C0] [ 347.437267][ C0] __schedule+0x14d2/0x44d0 [ 347.441811][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 347.447727][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 347.452943][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 347.458857][ C0] ? asan.module_dtor+0x20/0x20 [ 347.463726][ C0] ? enqueue_timer+0x225/0x530 [ 347.468512][ C0] ? __mod_timer+0x984/0xdb0 [ 347.473132][ C0] schedule+0xbd/0x170 [ 347.477231][ C0] schedule_timeout+0x160/0x280 [ 347.482101][ C0] ? console_conditional_schedule+0x40/0x40 [ 347.488012][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 347.493940][ C0] ? update_process_times+0x1b0/0x1b0 [ 347.499335][ C0] ? prepare_to_swait_event+0x339/0x360 [ 347.504901][ C0] rcu_gp_fqs_loop+0x302/0x1560 [ 347.509792][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 347.516064][ C0] ? rcu_gp_init+0x1510/0x1510 [ 347.520848][ C0] ? rcu_gp_cleanup+0xb4c/0xca0 [ 347.525816][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 347.531039][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 347.536255][ C0] rcu_gp_kthread+0x99/0x380 [ 347.540868][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 347.546006][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 347.551051][ C0] ? __kthread_parkme+0x162/0x1c0 [ 347.556189][ C0] kthread+0x2fa/0x390 [ 347.560270][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 347.565491][ C0] ? kthread_blkcg+0xd0/0xd0 [ 347.570174][ C0] ret_from_fork+0x48/0x80 [ 347.574606][ C0] ? kthread_blkcg+0xd0/0xd0 [ 347.579221][ C0] ret_from_fork_asm+0x11/0x20 [ 347.584020][ C0] [ 347.587049][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 347.593376][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.6.102-syzkaller #0 [ 347.601100][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 347.611175][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 347.616916][ C0] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d e3 e6 3a 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 347.636589][ C0] RSP: 0018:ffffc900000077f8 EFLAGS: 00000246 [ 347.642703][ C0] RAX: ffffffff813a13aa RBX: 0000000000000003 RCX: ffffffff8ca93380 [ 347.650702][ C0] RDX: 0000000000000100 RSI: ffffffff8aaab9c0 RDI: ffffffff8afc66c0 [ 347.658695][ C0] RBP: ffffc900000078d0 R08: ffffffff90da35ef R09: 1ffffffff21b46bd [ 347.666675][ C0] R10: dffffc0000000000 R11: fffffbfff21b46be R12: dffffc0000000000 [ 347.674720][ C0] R13: 0000000000000200 R14: 0000000000000003 R15: 1ffff92000000f04 [ 347.682702][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 347.691641][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 347.698240][ C0] CR2: 0000001b2e822ff8 CR3: 0000000064139000 CR4: 00000000003506f0 [ 347.706228][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 347.714210][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 347.722191][ C0] Call Trace: [ 347.725479][ C0] [ 347.728329][ C0] kvm_wait+0x22f/0x290 [ 347.732505][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 347.737725][ C0] ? kvm_arch_para_hints+0x50/0x50 [ 347.742868][ C0] __pv_queued_spin_lock_slowpath+0x61a/0x9d0 [ 347.748963][ C0] ? __pv_queued_spin_unlock_slowpath+0x2a0/0x2a0 [ 347.755404][ C0] do_raw_spin_lock+0x24e/0x2c0 [ 347.760274][ C0] ? __rwlock_init+0x150/0x150 [ 347.765052][ C0] ? hsr_init_skb+0x325/0x580 [ 347.769751][ C0] ? send_hsr_supervision_frame+0x210/0xa60 [ 347.775665][ C0] send_hsr_supervision_frame+0x210/0xa60 [ 347.781425][ C0] hsr_announce+0x192/0x340 [ 347.785950][ C0] ? read_lock_is_recursive+0x20/0x20 [ 347.791340][ C0] ? hsr_announce+0x7e/0x340 [ 347.795951][ C0] ? hsr_dev_finalize+0x730/0x730 [ 347.801004][ C0] call_timer_fn+0x16e/0x530 [ 347.805647][ C0] ? hsr_dev_finalize+0x730/0x730 [ 347.810689][ C0] ? call_timer_fn+0xbf/0x530 [ 347.815377][ C0] ? __run_timers+0x7d0/0x7d0 [ 347.820078][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 347.825295][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 347.830511][ C0] ? hsr_dev_finalize+0x730/0x730 [ 347.835558][ C0] __run_timers+0x52d/0x7d0 [ 347.840091][ C0] ? detach_timer+0x2b0/0x2b0 [ 347.844786][ C0] ? lock_chain_count+0x20/0x20 [ 347.849677][ C0] run_timer_softirq+0x67/0xf0 [ 347.854465][ C0] handle_softirqs+0x280/0x820 [ 347.859243][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 347.864027][ C0] ? do_softirq+0x180/0x180 [ 347.868576][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 347.873787][ C0] __irq_exit_rcu+0xc7/0x190 [ 347.878399][ C0] ? irq_exit_rcu+0x20/0x20 [ 347.882926][ C0] irq_exit_rcu+0x9/0x20 [ 347.887175][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 347.892828][ C0] [ 347.895764][ C0] [ 347.898799][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 347.904802][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 347.910540][ C0] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d e3 e6 3a 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 347.930168][ C0] RSP: 0018:ffffffff8ca07d80 EFLAGS: 000002c6 [ 347.936252][ C0] RAX: f1f8fcb3deb80e00 RBX: ffffffff8161914b RCX: f1f8fcb3deb80e00 [ 347.944236][ C0] RDX: 0000000000000001 RSI: ffffffff8aaab9c0 RDI: ffffffff8afc66c0 [ 347.952226][ C0] RBP: ffffffff8ca07eb8 R08: ffff8880b8e36d4b R09: 1ffff110171c6da9 [ 347.960210][ C0] R10: dffffc0000000000 R11: ffffed10171c6daa R12: ffffffff8e4a8828 [ 347.968193][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1952670 [ 347.976187][ C0] ? do_idle+0x1eb/0x510 [ 347.980462][ C0] default_idle+0x13/0x20 [ 347.984817][ C0] default_idle_call+0x6c/0xa0 [ 347.989699][ C0] do_idle+0x1eb/0x510 [ 347.993796][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 347.999016][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 348.005209][ C0] cpu_startup_entry+0x43/0x60 [ 348.009993][ C0] rest_init+0x2e2/0x300 [ 348.014247][ C0] ? time_init+0x40/0x40 [ 348.018513][ C0] arch_call_rest_init+0xe/0x10 [ 348.023394][ C0] start_kernel+0x459/0x4e0 [ 348.027922][ C0] x86_64_start_reservations+0x2a/0x30 [ 348.033405][ C0] x86_64_start_kernel+0x60/0x60 [ 348.038363][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 348.044468][ C0]