last executing test programs: 3.656982723s ago: executing program 1 (id=1782): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.581823913s ago: executing program 1 (id=1783): r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4e93, 0x18445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xc0000000000000, 0xfffe}, 0x8080, 0xa9, 0x80000000, 0x5, 0x400000a5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000640)={&(0x7f0000000540)=""/207, 0xcf, 0x0, &(0x7f0000000380)=""/151, 0x97}}, 0x10) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0x0, 0xf, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0x11, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0xf, 0x0, 0x0, 0x40f00, 0x24, '\x00', r4, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xc, 0x3, 0xfae}, 0x10, r5, r1, 0x7, &(0x7f00000007c0)=[0x1, r6, 0xffffffffffffffff, r7], &(0x7f0000000800)=[{0x0, 0x3, 0x9, 0x8}, {0x2, 0x2, 0x2, 0xa}, {0x3, 0x2, 0x1, 0x7}, {0x5, 0x4, 0xb, 0x7}, {0x3, 0x1, 0x3, 0x2}, {0x3, 0x3, 0x10, 0x7}, {0x4, 0x5, 0x10}], 0x10, 0x9}, 0x94) getpid() 3.355379543s ago: executing program 2 (id=1788): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="e0274239ed0d85df977499070800", 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x3, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x4, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x830d}, 0x0, 0xd9, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.52115688s ago: executing program 1 (id=1793): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xfb, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x200, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x10, 0x6, 0x0, 0x1, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$kcm(0x18, 0x0, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) socket$kcm(0x28, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30044889) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x52, 0x1, 0x7, 0x0, 0x0, 0x7fef, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc01, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/216, 0xd8}, {&(0x7f0000000f40)=""/185, 0xb9}, {&(0x7f0000000e40)=""/217, 0xd9}, {&(0x7f0000000b00)=""/213, 0xd5}, {&(0x7f0000000a00)=""/202, 0xca}, {&(0x7f00000006c0)=""/203, 0xcb}, {&(0x7f0000001100)=""/4077, 0xfed}, {&(0x7f0000000480)=""/102, 0x66}], 0x8}, 0x40012000) recvmsg$kcm(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x5, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, @fallback=0x18, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x45, 0xff, 0x0, 0x80, 0x0, 0xee6, 0x14a0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b7b, 0x2, @perf_config_ext={0x7fff, 0xaec}, 0x110104, 0x32, 0x0, 0x3, 0x2, 0x3, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="82ef9ddbc0c260389f9aea6b679e93b1ad87424d576e1e110dc547ce3c3e979832320311d3ed6adce53715f0662ac1407f88eb81bc6103594762a2b1a8aff74701b5052dad68ffa3f9451a9e31da6bee7826b6ece5e7d28eee1be9c4d7c0486477b7b642b56d29bfd8343e678b96f4ed24f7d282e9f0b87b9f18e43117e822f08bea96227c44455f9d4bfb1624c007511aa7df1359a1c141034b6e478d7f44b444df328a7d640682932f79199efa4d1855c897f7ada9879c5fe76cff8ca1d4697a", @ANYRES32, @ANYRESHEX=0x0, @ANYRES16, @ANYRESHEX, @ANYBLOB="000000000000000000000000000000000000000000000000000000009a37e1b56ab3df231c17d10b5565acfe4b1dc67a45cb02b75c78f8a26bccd61962de53f543a5aee1488cb3e3e58836226cdc5a1bb969be9e8cb0de98efbd49571d2d26d3cb83eac7462eb41be8a437ed1ac933d68e7ffb1154582e7cd0f6f832418d43d6613a8da883655b4f430989e6ba5db702dfbc8878170a95d4e125f63357e6133c85e0b96ce769219624928a44108fb41ac92e98ad70a3a4aaeff9ae5a0a21a299a1347f82486cc6b1679c58124758ee1f5085a2abea35b69e"], 0x50) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1400000016000bdc8c00000000", 0xd}, {&(0x7f0000000180)="1954d21b1992c4", 0x7}], 0x2}, 0x0) 2.182660745s ago: executing program 2 (id=1798): syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_freezer_state(r0, 0x0, 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f00000000c0)='THAWED\x00', 0x7) 1.837184277s ago: executing program 2 (id=1800): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=""/42, 0x2a}, 0x18000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002680)={&(0x7f0000000080)=ANY=[], 0x0, 0x56}, 0x28) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12", 0x56}], 0x2}, 0x4000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x7, 0x4, 0x0, 0x3be3d60c}, {0x28}, {0xb1, 0x0, 0x0, 0x9fb4}, {0x6, 0xb, 0xca}]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x19, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008004000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd056fea56a888e", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r7 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r7, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)}, 0x20008010) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000005c0)={&(0x7f0000000980)="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", &(0x7f0000000580)=""/9, &(0x7f0000000640)="062e787dcd7a335e8d5e96b03297149db5f52a3af2c0b8234650e3fbdacc49739e258a7923147f9d4c9827fabf4e92b150bb7c5367ed104c71cceabe2173e4171277a4fcd87dd0679d5986571499580e1463b96a3136b1149dcb572f116a74f0ba26eac2339a5d186f36bc5b797adf240abe1b667393fa7e367934df39c01b2b7583ca1c79a340f7b3716c4a61c5fe3bdb779e7d5907a67152a87f72d35a48f29dcefa4815f79e1e973321f8df409815b01251ab9fea4a9f1114ded6930d8486ae168cf6be2d311519cf1d6376e2150e8bdf61f2aa4c9ad1607cca71bfb3", &(0x7f0000001980), 0xfffffff7, r6, 0x4}, 0x38) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000040)={r1}, 0x8) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r9, 0x6, 0x3, &(0x7f00000000c0)=r8, 0x4) 1.7845569s ago: executing program 4 (id=1801): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.657276157s ago: executing program 1 (id=1803): r0 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001540)={0x1, 0x58, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000001440)=[{&(0x7f0000000040)="4a88174586c0ede0b9da60cc3ffba61a3d20a18b33ecbc87ae471e789a8fc056f5bc26af13f1465a664c33c2f72756179fde32fea41481b0d1b0120e81a89eef64c087f6d7942717016aedef6c1158a7dd04051f99470547b6a98fc04f32735274ff7b7380362cca6834b67037013d21730402b937d3e67ea50b02d9d42c9a3dae902a6d3632db640d6abc19ec25e88740ffc233aaa3053872c8d400f433038f1ba6e279b45cc1ec40", 0xa9}, {&(0x7f0000000100)="579bb4ad5c7c9ea8deefde4925743e18b4951843eb8afa558819bb48274d090585cb4157db70946bca9122b138c85db2f1e832744e9dcca430d40e891765aee9d6bf839a4fca66d3f430420a11b358530aedec75665530391a3adb144c9083c622c61c", 0x63}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="0710949fc32c192c1470ed7b845242dedf5ff312943957286f51899950309edb6bbb6fae407c51aad13e6535ee086bee1a140a93f93ca22bffbd33b93d8e31a9304dd2246f84c19e0e39ed86866edd1433ae1d2995d7ca9acd0f3207f229e4c69d940ab28646d0892f4b550e251b11af9e4ea748ce3c433a303b5dfcc08704fbc557ce0c816b034578ebd2ed94911b7bcae64dc5375af6fea4445257d93b790359ff8ca2c36b07891dc550f46f0133c3e5bdc3dbcbdb3ac039e8b5ab", 0xbc}, {&(0x7f0000001240)="86bfc1e779d6a8f97f9d8a65a5292780d45985e6f3a2b23e8e1cfadbaeb24d013f134000cc9f8164ff9e3b743d3e16c9232aba6acabcc387d5c79fcff373cadda4ecc9242aeb948193359ad00e0f4661c01ac98eeccfd2e9e94521dac1f3653f6d72861d128ec1ef46acaa0b203d8913ace4b96206a346f90b05d8b394dc180de5d762d7085140903e4dc759f62be0b14c0c6c918618cf4763cb7a2e714b4d082f2237520f0dcad7cd02f3cfb1ae69688e0e6af5bfaca82df58a0ce013e984f35c402581fd93676faf771b8e544840dfc3eacb4a5769026a9443", 0xda}, {&(0x7f0000001340)="5948134be7870419f5d466d50052ce8b0deb1a93ce778b4db2d1f6", 0x1b}, {&(0x7f0000001380)="436f23a08f284cb2aad261692df45878c21607ca32c449860fac306e46de847eb0b9ca107d7d33c9e31b4e77cc22fabc252195c795cb335fda58932285fee51ef52b6432d3021579b79f70ce9323ad36b1f0570cb867046d215f057696581b624d32755785327efeab02c44f1b0029003add017d773890ca462456a5849afdb73d8eb1bd5b3240180cdf26768767b78058beaf45cf79652c65", 0x99}], 0x7, &(0x7f0000001580)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7ff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @private=0xa010102, @rand_addr=0x64010101}}}], 0x38}, 0x4040000) sendmsg$kcm(r0, &(0x7f0000001800)={&(0x7f0000001600)=@nfc={0x27, 0x0, 0x1, 0x6}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001680)="30024f89375d46fa04b199f0bf6f34e5335ac0b4f1b1b828d8291294825a25da41a7698b344f2d77f3fb790fa4a35d30b674829d0cc6f81b1892901834b3beca566c454ae58c4864818e1b76447571674c13ff5c0fcbeecbbf019ec39aaca3c33512642c98f6b9c0d855827bab8ecc0c62e152d131937828ebe6f708fef634e280087759f52bdeb765f14db502dd38fb05afed2a02bc8b789096e5a5baa422d672f57ba57ae185edabe3c8a3ad4c4f068674cb888de9bb42895751a476433a47c3ffe978461db882ea8cdc279c", 0xcd}], 0x1, &(0x7f00000017c0)=[{0x10, 0xff}], 0x10}, 0x4) recvmsg(r0, &(0x7f0000001c00)={&(0x7f0000001840)=@isdn, 0x80, &(0x7f0000001ac0)=[{&(0x7f00000018c0)=""/216, 0xd8}, {&(0x7f00000019c0)=""/31, 0x1f}, {&(0x7f0000001a00)=""/58, 0x3a}, {&(0x7f0000001a40)=""/73, 0x49}], 0x4, &(0x7f0000001b00)=""/202, 0xca}, 0x100) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001c40)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001cc0), &(0x7f0000001d00)}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001e80)='cpuset.effective_mems\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001f40)={0x1, 0x0}, 0x8) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001fc0)=@o_path={&(0x7f0000001f80)='./file0\x00', 0x0, 0x0, r0}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0x1d, 0x15, &(0x7f0000001d80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001e40)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, @fallback=0x33, r4, 0x8, &(0x7f0000001ec0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001f00)={0x4, 0xf, 0x40, 0x6}, 0x10, r5, r6, 0x9, 0x0, &(0x7f0000002000)=[{0x5, 0x2}, {0x1, 0x5, 0x9, 0x2}, {0x1, 0x4, 0x5, 0x12}, {0x3, 0x2, 0xc, 0xc}, {0x4, 0x5, 0x5, 0x5}, {0x0, 0x2, 0xb}, {0x0, 0x2, 0xb, 0xa}, {0x4, 0x5, 0x3, 0xc}, {0x2, 0x5, 0x3, 0xc}], 0x10, 0x9}, 0x94) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003340)={r7, 0x0, 0xa0, 0x1000, &(0x7f00000021c0)="d2c669d568e7a4bda0dc95d1f602d6aa7e7ebc4e987d77c3f7cf09dd669a935a956f9b20adfc4b2f162ff63a53248767503681fda30984afbca86eb5a1ef92ca8c818d636b23788d406653d0d137b48d261fa9935c51e80b662562afaf13c02f755faefbe53c3127f6c539aea97e8da8751593c594c078658c5c331411493b43e467e3e989ef3f7abba7d49dafb6c1fb290bf9f61915f2bc9f6067ee4c0b8463", &(0x7f0000002280)=""/4096, 0x1, 0x0, 0x12, 0x45, &(0x7f0000003280)="6d9f0c46acd550274df448b8567227c23f38", &(0x7f00000032c0)="17789526dccc84cc82e83f2479e06fb8703758744c1305080428a2a3f1ab8f74b9a759d8556189b82f7bf8662a79d85bbe19d56fb73d9a49122bef388f5c985622463a6e47", 0x4}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000033c0)=r5, 0x4) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003400)=r5, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000034c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000003440), &(0x7f0000003480)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003500)={r10}, 0x4) r11 = gettid() perf_event_open(&(0x7f0000003540)={0x3, 0x80, 0x4, 0x10, 0xf5, 0x80, 0x0, 0x9, 0x90, 0x9, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x10000, 0x1}, 0x588, 0x7, 0x10, 0x8, 0x6, 0x10001, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffa}, r11, 0xe, r4, 0x9) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000035c0)={r10, 0xffffffffffffffff}, 0x4) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000038c0)={0x6, 0x12, &(0x7f0000003600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}]}, &(0x7f00000036c0)='syzkaller\x00', 0x800, 0xbe, &(0x7f0000003700)=""/190, 0x41100, 0x10, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000037c0)={0x5, 0xa, 0x4b8, 0x7}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000003800)=[r10], &(0x7f0000003840)=[{0x3, 0x3, 0x3, 0x3}, {0x2, 0x1, 0x7}, {0x3, 0x5, 0xe, 0x1}, {0x2, 0x2, 0x5, 0x8}, {0x2, 0x4, 0xe, 0xa}], 0x10, 0x1ff}, 0x94) sendmsg$inet(r8, &(0x7f0000003a80)={&(0x7f0000003980)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000003a40)=[{&(0x7f00000039c0)="909ef10aa4eee6a3df41208bc816b930da487ec35747be89e7cb31685c31e52f02d456c92ad4dc36d2c903769091f98f02f9fa3c0babbdddfee09edb15ffa497830964c1eb", 0x45}], 0x1}, 0x850) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003d40)=@bpf_ext={0x1c, 0x11, &(0x7f0000003ac0)=@raw=[@alu={0x4, 0x0, 0x9, 0x0, 0x7, 0xffffffffffffffe0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @jmp={0x5, 0x0, 0x0, 0x9, 0x1, 0xfffffffffffffff0, 0xfffffffffffffffc}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @map_val={0x18, 0x2, 0x2, 0x0, r3}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x1}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], &(0x7f0000003b80)='GPL\x00', 0x5, 0xa5, &(0x7f0000003bc0)=""/165, 0x41100, 0x40, '\x00', r1, 0x0, r9, 0x8, &(0x7f0000003c80)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000003cc0)={0x1, 0x5, 0x7fffffff, 0x9}, 0x10, 0x1fe03, r13, 0x4, 0x0, &(0x7f0000003d00)=[{0x3, 0x3, 0x0, 0xc}, {0x1, 0x4, 0x5, 0x8}, {0x3, 0x5, 0xd}, {0x1, 0x5, 0x7, 0xc}]}, 0x94) r14 = socket$kcm(0x29, 0x2, 0x0) r15 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r14, 0x89e1, &(0x7f0000003e00)={r15}) recvmsg$kcm(r15, &(0x7f0000004080)={&(0x7f0000003e40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003ec0)=""/147, 0x93}], 0x1, &(0x7f0000003fc0)=""/188, 0xbc}, 0x40000000) write$cgroup_subtree(r4, &(0x7f00000040c0), 0x0) perf_event_open$cgroup(&(0x7f0000004100)={0x3, 0x80, 0x10, 0x48, 0xf, 0x24, 0x0, 0x1d, 0x280, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8000, 0x4, @perf_config_ext={0x2, 0xfff}, 0x802, 0x8000, 0xb7, 0xe, 0x6, 0x80000000, 0x6, 0x0, 0x3, 0x0, 0x9}, r4, 0xf, 0xffffffffffffffff, 0x8) 1.595876892s ago: executing program 4 (id=1806): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.473247036s ago: executing program 4 (id=1807): r0 = socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000a80)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14545, 0x2e, 0x5, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001000000800000009e699333dc4f39112ef8028391eef14baeffc4070b6f586dbc8783", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(r4, &(0x7f0000000500)='ns/uts\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000000000000850000"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x104, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="b4000000000000000f100000004f09abc0120000a5278e17345e395e3196bd1a4c99a9adc1eac3553be5defb531db550c1d9bb710663b3dabe32f7b361ebe079c55a3d137d652ff105230d358705de", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000950005000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f0000000040)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x83, &(0x7f0000000000)=r9, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x52}, 0x28) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002500)={&(0x7f0000000000)=@generic={0xa, "89ccd083e102efdc507261caa4389d8101fc3690a86c49c810221a09d1dc6259e4c7f375b3ae905c714d90d3cb47469313ff14bd2cb8f42b336ca3e70b837b5a25eec11b23c617ad83440d8c9daa12e5165266b1acdb7211b570fdb54e504d61b1840825c5acebe355c7e7bd2a6963a7557dc212dceecfcfc709595b9a21"}, 0x80, 0x0}, 0xe07e872420dfefca) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r10) socket$kcm(0x23, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000540)) ioctl$SIOCSIFHWADDR(r10, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 1.472877722s ago: executing program 0 (id=1808): r0 = socket$kcm(0x10, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r0], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r2, &(0x7f0000000240), 0x0}, 0x20) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async, rerun: 64) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async, rerun: 32) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (rerun: 32) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x11f2, 0x4}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000080)={'vxcan1\x00', @remote}) (async, rerun: 32) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r7}, 0x0, &(0x7f0000000280)=r3}, 0x20) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=ANY=[@ANYBLOB="850004000000000007000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, r8, 0x14, &(0x7f00000000c0)={0x0, 0x11}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c00800094004", 0x39}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) (async) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x200, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x4}, 0x8080, 0x2, 0x0, 0x1, 0x7fffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (rerun: 64) close(r9) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 1.436975141s ago: executing program 3 (id=1809): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="e0274239ed0d85df977499070800", 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x3, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x4, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x830d}, 0x0, 0xd9, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.154922977s ago: executing program 0 (id=1810): syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_freezer_state(r0, 0x0, 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f00000000c0)='THAWED\x00', 0x7) 1.021178505s ago: executing program 3 (id=1811): socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x10000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x100002, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x82, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000017008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) 984.567826ms ago: executing program 4 (id=1812): syz_open_procfs$namespace(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='i2c_read\x00', r1, 0x0, 0x3ec9}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000500), &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc6, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000600), &(0x7f0000000680), 0x8, 0xa5, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$kcm(0x23, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89ed, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8008, 0x830d}, 0x500, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) sendmsg$inet(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000180)="ba", 0x1}], 0x1}, 0x80) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="06000000200000000200000007000000484446d1", @ANYRES32=r0, @ANYBLOB="02000000000000000000000000000000000000008de60b38829ceb1c6c0e8bfde0ebeaa3f87e6ccd2a442c38e2889e76ba8f3ce5b630cd107c198d42154cbe814a3fc0fd4c6660f5bdf6ee148d6ac12402f05a2d72e1da960596d7807942504fe719003e5164d56458bea5917ab68beca06fe5fbbf03efe0bb49a2ba136e71a7ce3915b5c328d27066dbea01b7531d0087bad03ea1bcff3a37c4e62f34d2b8c7fe9d80a9dc537d15114f419477b58a9453b11eb78935558b9c4e37", @ANYRES32=r2, @ANYRES32=r7, @ANYBLOB="010000000400"/28], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e80)=@bpf_lsm={0x1d, 0x10, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0x10, 0x4, 0x0, 0xfffffffffffffff8}, @jmp={0x5, 0x0, 0x1, 0xb, 0x0, 0x6, 0xfffffffffffffff0}, @exit, @ldst={0x6, 0x1, 0x3, 0x1, 0x1, 0x2, 0x8}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @ldst={0x2, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000a00)='GPL\x00', 0x7e99, 0xc2, &(0x7f0000000b80)=""/194, 0x41000, 0x11, '\x00', 0x0, 0x1b, r7, 0x8, &(0x7f0000000c80)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000cc0)={0x3, 0xa, 0x9, 0x1}, 0x10, r3, 0x0, 0x5, &(0x7f0000000d80)=[r7, r7, r0, r7, r0, r7, r8, r0], &(0x7f0000000dc0)=[{0x5, 0x1, 0x7, 0x8}, {0x3, 0x2, 0x1, 0x1}, {0x5, 0x3, 0x2, 0x1}, {0x2, 0x5, 0x0, 0x4}, {0x5, 0x1, 0x10, 0xf}], 0x10, 0x5}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xa, 0x4, 0x4, 0xd, 0x0, 0x1}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=r8, @ANYRES16=r2], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000180)=""/147, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 931.661705ms ago: executing program 2 (id=1813): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r4 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r3, @ANYBLOB="a2e493f0ace39b54b8a463573e", @ANYRES16=r4, @ANYRES16=r1, @ANYRESOCT=r0, @ANYRESDEC=r5, @ANYBLOB="39b7562cfe06ef4f"], 0x48) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$TUNSETIFF(r6, 0xb701, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8442a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000042e000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r9, r10, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9}, &(0x7f0000000300), &(0x7f0000000700)=r8}, 0x20) (async) sendmsg$inet(r7, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 829.239891ms ago: executing program 0 (id=1814): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000002e5f"], 0x0, 0x5e, 0x0, 0x1, 0x21000000}, 0x28) 773.058068ms ago: executing program 0 (id=1815): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r1, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 748.938496ms ago: executing program 3 (id=1816): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0xa, &(0x7f00000000c0)=@raw=[@generic={0x5e, 0x6, 0x4, 0x9ea, 0x10000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6fdf}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0xa, &(0x7f00000000c0)=@raw=[@generic={0x5e, 0x6, 0x4, 0x9ea, 0x10000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6fdf}, 0x94) 621.239737ms ago: executing program 1 (id=1817): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x25, 0x0, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x84082, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (fail_nth: 1) 620.773909ms ago: executing program 3 (id=1818): perf_event_open(&(0x7f0000000040)={0x5, 0x45, 0x2, 0x4, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x4, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2002, 0x0, @perf_bp={0x0, 0x4}, 0xa100, 0xc8, 0x3, 0x9, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01"], 0x0, 0x37}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x8, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x4, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x800, 0x2, &(0x7f0000000200)) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000c0000000200000005"], 0x0, 0x26, 0x0, 0x1}, 0x28) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a1, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200182f00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa35f088be"], 0xfdef) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffca}, 0x164) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) 598.244957ms ago: executing program 4 (id=1819): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x25, 0x0, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x84082, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 591.269944ms ago: executing program 2 (id=1820): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x40004}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x200065, 0x0, 0x0, 0x0, 0x9}, @generic={0x66, 0x0, 0x0, 0x0, 0xf1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x600, 0x1001}, @exit, @alu={0x6, 0x0, 0x7, 0xa, 0x0, 0x0, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0xa}, 0x94) 296.810633ms ago: executing program 0 (id=1821): mkdir(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r0, 0x0, 0x2, 0x0) r1 = openat$cgroup(r0, 0x0, 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x7, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='br_fdb_external_learn_add\x00', r2}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xbf, &(0x7f0000000340)=[{}, {}], 0x10, 0x10, &(0x7f0000000380), &(0x7f0000000480), 0x8, 0xb0, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000084000000000100000100000000", @ANYRES32, @ANYRESHEX=0x0], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00 \x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x2, 0xfffffffd, 0x1, 0x1040, r0, 0x9ee, '\x00', r3, r6, 0x0, 0x0, 0x3, 0xc}, 0x50) r7 = socket$kcm(0x10, 0x2, 0x0) close(r7) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 181.078196ms ago: executing program 2 (id=1822): r0 = socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000a80)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14545, 0x2e, 0x5, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001000000800000009e699333dc4f39112ef8028391eef14baeffc4070b6f586dbc8783", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(r4, &(0x7f0000000500)='ns/uts\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000000000000850000"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x104, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="b4000000000000000f100000004f09abc0120000a5278e17345e395e3196bd1a4c99a9adc1eac3553be5defb531db550c1d9bb710663b3dabe32f7b361ebe079c55a3d137d652ff105230d358705de", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000950005000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f0000000040)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x83, &(0x7f0000000000)=r9, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x52}, 0x28) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002500)={&(0x7f0000000000)=@generic={0xa, "89ccd083e102efdc507261caa4389d8101fc3690a86c49c810221a09d1dc6259e4c7f375b3ae905c714d90d3cb47469313ff14bd2cb8f42b336ca3e70b837b5a25eec11b23c617ad83440d8c9daa12e5165266b1acdb7211b570fdb54e504d61b1840825c5acebe355c7e7bd2a6963a7557dc212dceecfcfc709595b9a21"}, 0x80, 0x0}, 0xe07e872420dfefca) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r10) socket$kcm(0x23, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000540)) ioctl$SIOCSIFHWADDR(r10, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 179.294021ms ago: executing program 3 (id=1823): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001280)=ANY=[@ANYBLOB="6b0000000000000001000000020000000000000000000200000000007f000001080000000700000000000034366567f221978756640000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="000000007f00000100010000"], 0x6b}, 0xfc00) 157.74288ms ago: executing program 1 (id=1824): syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_freezer_state(r0, 0x0, 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f00000000c0)='THAWED\x00', 0x7) 85.051703ms ago: executing program 0 (id=1825): perf_event_open(&(0x7f0000002800)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x984}, 0x11411d, 0x32, 0xfffffbfd, 0x3, 0x8000, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100810, 0x0, 0x100, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1c, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x25}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x0, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085006000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}]}, 0x40002123) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) 45.402508ms ago: executing program 3 (id=1826): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r1}, 0x18) (async, rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0x35, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) (rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x0}}, 0x10) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) (async, rerun: 32) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNGETVNETLE(r5, 0x4008744b, &(0x7f0000000180)) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r7}, 0x94) sendmsg$inet(r3, &(0x7f0000000440)={&(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000940), 0x0, &(0x7f00000003c0)}, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x1b, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x1}, @alu={0x7, 0x1, 0x9, 0x2, 0x7, 0xffffffffffffffef, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='syzkaller\x00', 0x1, 0xe1, &(0x7f00000004c0)=""/225, 0x40f00, 0x10, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x1, 0x5, 0x1}, 0x10, 0x2ea30, r1, 0x1, &(0x7f0000000640)=[r0, r0, r0], &(0x7f0000000680)=[{0x2, 0x4, 0x9, 0x7}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@ifindex=r7, r1, 0x9, 0x10, 0x0, @void, @value=r8, @void, @void, r2}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=1827): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r0, &(0x7f00000038c0)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x10003) perf_event_open(&(0x7f0000000040)={0x4, 0xfd59, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100904, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000005c0)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r3, 0x0, 0xffffffbb, 0x0, &(0x7f0000000440)="f6f4e9a100000000002a8ba478bbb7dbfc007024", 0x0, 0xb, 0x0, 0x31, 0x0, &(0x7f00000001c0)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) r7 = socket$kcm(0x18, 0x0, 0x0) recvmsg$kcm(r7, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x4) close(r5) r8 = socket$kcm(0x2d, 0x2, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) r12 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000340)={r8}) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="d8001c00180081064e81f7050044fd56170d12a0b9b54570", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000040)={r13}) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e3, &(0x7f0000000180)={r8, r14}) socket$kcm(0x10, 0x0, 0x0) kernel console output (not intermixed with test programs): tadv0: Interface activated: batadv_slave_0 [ 96.868360][ T196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.920083][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.949288][ T5853] veth0_macvtap: entered promiscuous mode [ 96.989409][ T5853] veth1_macvtap: entered promiscuous mode [ 97.007753][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.023292][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.034810][ T5850] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.046741][ T5850] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.057742][ T5850] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.067251][ T5850] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.122734][ T978] cfg80211: failed to load regulatory.db [ 97.185679][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.229959][ T5854] veth0_vlan: entered promiscuous mode [ 97.230270][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.243652][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.275482][ T5168] Bluetooth: hci0: command tx timeout [ 97.315647][ T5853] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.332055][ T5853] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.341428][ T5853] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.350725][ T5853] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.402118][ T5854] veth1_vlan: entered promiscuous mode [ 97.433548][ T5168] Bluetooth: hci1: command tx timeout [ 97.470229][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.487599][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.519091][ T5860] veth0_vlan: entered promiscuous mode [ 97.568883][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.578668][ T5966] netlink: 'syz.0.1': attribute type 21 has an invalid length. [ 97.580122][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.617752][ T5860] veth1_vlan: entered promiscuous mode [ 97.672745][ T5168] Bluetooth: hci3: command tx timeout [ 97.734349][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.754158][ T5168] Bluetooth: hci4: command tx timeout [ 97.754169][ T5848] Bluetooth: hci2: command tx timeout [ 97.770236][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.876729][ T5854] veth0_macvtap: entered promiscuous mode [ 97.922614][ T5860] veth0_macvtap: entered promiscuous mode [ 97.974894][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.980524][ T5860] veth1_macvtap: entered promiscuous mode [ 98.001488][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.040848][ C0] hrtimer: interrupt took 75647 ns [ 98.068790][ T5854] veth1_macvtap: entered promiscuous mode [ 98.157874][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.194404][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.451152][ T5969] wg2: entered promiscuous mode [ 98.456594][ T5969] wg2: entered allmulticast mode [ 98.486892][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.516441][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.557745][ T5854] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.587379][ T5854] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.602211][ T5854] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.615765][ T5854] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.648493][ T5860] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.662401][ T5860] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.676239][ T5860] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.704168][ T5860] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.163583][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.181009][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.412934][ T5984] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.443780][ T2998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.551454][ T2998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.877279][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.900617][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.060641][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.105344][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.264387][ T6003] netlink: 160 bytes leftover after parsing attributes in process `syz.3.13'. [ 101.466191][ T6011] netlink: 'syz.4.5': attribute type 3 has an invalid length. [ 101.631126][ T6011] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 101.639568][ T6011] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.5'. [ 101.754260][ T6017] netlink: 184 bytes leftover after parsing attributes in process `syz.0.14'. [ 101.851032][ T6017] team_slave_0: entered allmulticast mode [ 102.220159][ T6022] warning: `syz.3.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.466614][ T6022] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 102.663244][ T6030] C: renamed from team_slave_0 (while UP) [ 102.897701][ T6030] netlink: 160 bytes leftover after parsing attributes in process `syz.4.19'. [ 102.973752][ T6030] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 103.053629][ T6037] C: renamed from team_slave_0 (while UP) [ 103.112230][ T6030] syz.4.19 (6030) used greatest stack depth: 20152 bytes left [ 103.317895][ T6037] netlink: 160 bytes leftover after parsing attributes in process `syz.2.20'. [ 103.372328][ T6037] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 103.716188][ T6037] syz.2.20 (6037) used greatest stack depth: 19896 bytes left [ 104.874918][ T6054] netlink: 160 bytes leftover after parsing attributes in process `syz.0.26'. [ 105.283115][ T6061] netlink: 'syz.4.29': attribute type 10 has an invalid length. [ 105.341055][ T6061] netlink: 40 bytes leftover after parsing attributes in process `syz.4.29'. [ 105.422035][ T6061] dummy0: entered promiscuous mode [ 106.762425][ T6059] netlink: 'syz.2.28': attribute type 1 has an invalid length. [ 106.895756][ T6059] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.28'. [ 108.951985][ T2998] wlan1: Trigger new scan to find an IBSS to join [ 109.099062][ T6085] Zero length message leads to an empty skb [ 109.696444][ T6112] netlink: 'syz.4.42': attribute type 3 has an invalid length. [ 109.756650][ T6112] netlink: 'syz.4.42': attribute type 1 has an invalid length. [ 109.791097][ T6112] netlink: 116 bytes leftover after parsing attributes in process `syz.4.42'. [ 110.475202][ T6128] netlink: 'syz.3.49': attribute type 3 has an invalid length. [ 110.516792][ T6128] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.49'. [ 112.297243][ T6177] FAULT_INJECTION: forcing a failure. [ 112.297243][ T6177] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 112.339875][ T6177] CPU: 0 UID: 0 PID: 6177 Comm: syz.2.65 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 112.339910][ T6177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 112.339935][ T6177] Call Trace: [ 112.339945][ T6177] [ 112.339956][ T6177] dump_stack_lvl+0x189/0x250 [ 112.340015][ T6177] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.340049][ T6177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.340101][ T6177] should_fail_ex+0x414/0x560 [ 112.340142][ T6177] _copy_to_user+0x31/0xb0 [ 112.340172][ T6177] simple_read_from_buffer+0xe1/0x170 [ 112.340213][ T6177] proc_fail_nth_read+0x1df/0x250 [ 112.340299][ T6177] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 112.340347][ T6177] ? rw_verify_area+0x258/0x650 [ 112.340370][ T6177] ? irqentry_exit+0x74/0x90 [ 112.340401][ T6177] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 112.340435][ T6177] vfs_read+0x1fd/0x980 [ 112.340460][ T6177] ? __fget_files+0x2a/0x420 [ 112.340496][ T6177] ? __pfx___mutex_lock+0x10/0x10 [ 112.340531][ T6177] ? __pfx_vfs_read+0x10/0x10 [ 112.340558][ T6177] ? __fget_files+0x2a/0x420 [ 112.340593][ T6177] ? __fget_files+0x3a0/0x420 [ 112.340621][ T6177] ? __fget_files+0x2a/0x420 [ 112.340661][ T6177] ksys_read+0x145/0x250 [ 112.340690][ T6177] ? __pfx_ksys_read+0x10/0x10 [ 112.340723][ T6177] ? do_syscall_64+0xbe/0x3b0 [ 112.340764][ T6177] do_syscall_64+0xfa/0x3b0 [ 112.340797][ T6177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.340819][ T6177] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 112.340842][ T6177] ? clear_bhb_loop+0x60/0xb0 [ 112.340872][ T6177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.340895][ T6177] RIP: 0033:0x7ff32bd8d3bc [ 112.340927][ T6177] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 112.340947][ T6177] RSP: 002b:00007ff32cb81030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 112.340973][ T6177] RAX: ffffffffffffffda RBX: 00007ff32bfb5fa0 RCX: 00007ff32bd8d3bc [ 112.340991][ T6177] RDX: 000000000000000f RSI: 00007ff32cb810a0 RDI: 0000000000000011 [ 112.341006][ T6177] RBP: 00007ff32cb81090 R08: 0000000000000000 R09: 0000000000000000 [ 112.341020][ T6177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.341050][ T6177] R13: 0000000000000000 R14: 00007ff32bfb5fa0 R15: 00007fff6f6bd8a8 [ 112.341088][ T6177] [ 113.016405][ T6192] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 113.502230][ T6203] netlink: 'syz.3.73': attribute type 10 has an invalid length. [ 114.286849][ T6203] team0: Port device wlan1 added [ 114.293549][ T6203] syz.3.73 (6203) used greatest stack depth: 19864 bytes left [ 114.550467][ T6217] netlink: 'syz.4.78': attribute type 27 has an invalid length. [ 114.589891][ T6217] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.78'. [ 115.658920][ T6246] netlink: 184 bytes leftover after parsing attributes in process `syz.2.87'. [ 115.670374][ T6246] C: entered allmulticast mode [ 115.992784][ T196] wlan1: Trigger new scan to find an IBSS to join [ 116.100126][ T6254] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.89'. [ 116.188347][ T6256] syz.4.90 (6256) used greatest stack depth: 17936 bytes left [ 116.226098][ T6254] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 116.257372][ T6254] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 116.943409][ T6279] netlink: 'syz.4.97': attribute type 2 has an invalid length. [ 118.483192][ T6296] €Â: renamed from hsr0 (while UP) [ 119.033591][ T2998] wlan1: Trigger new scan to find an IBSS to join [ 121.339469][ T6366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.358650][ T6366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.425795][ T6366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.494607][ T6366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.004115][ T12] wlan1: Trigger new scan to find an IBSS to join [ 123.186086][ T2998] wlan1: Creating new IBSS network, BSSID 00:00:00:00:a8:6c [ 123.337556][ T6395] netlink: 'syz.2.136': attribute type 3 has an invalid length. [ 123.346017][ T6395] netlink: 'syz.2.136': attribute type 1 has an invalid length. [ 123.368910][ T6395] netlink: 116 bytes leftover after parsing attributes in process `syz.2.136'. [ 123.652449][ T6399] netlink: 168 bytes leftover after parsing attributes in process `syz.3.137'. [ 123.719315][ T6404] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.138'. [ 123.743816][ T6404] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 123.843161][ T6404] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 124.098531][ T6407] syzkaller0: entered promiscuous mode [ 124.131626][ T6407] syzkaller0: entered allmulticast mode [ 124.659507][ T6419] netlink: 26 bytes leftover after parsing attributes in process `syz.1.145'. [ 128.550875][ T6431] C: renamed from team_slave_0 [ 128.575782][ T6431] netlink: 'syz.0.151': attribute type 3 has an invalid length. [ 128.601289][ T6431] netlink: 'syz.0.151': attribute type 1 has an invalid length. [ 128.609023][ T6431] netlink: 116 bytes leftover after parsing attributes in process `syz.0.151'. [ 128.917309][ T6452] syzkaller0: create flow: hash 4149915664 index 1 [ 129.894077][ T6446] syzkaller0: delete flow: hash 4149915664 index 1 [ 130.127567][ T6471] FAULT_INJECTION: forcing a failure. [ 130.127567][ T6471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.212846][ T6471] CPU: 0 UID: 0 PID: 6471 Comm: syz.4.157 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 130.212880][ T6471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.212899][ T6471] Call Trace: [ 130.212911][ T6471] [ 130.212925][ T6471] dump_stack_lvl+0x189/0x250 [ 130.212978][ T6471] ? __pfx____ratelimit+0x10/0x10 [ 130.213017][ T6471] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.213055][ T6471] ? __pfx__printk+0x10/0x10 [ 130.213100][ T6471] ? __might_fault+0xb0/0x130 [ 130.213195][ T6471] should_fail_ex+0x414/0x560 [ 130.213263][ T6471] _copy_from_user+0x2d/0xb0 [ 130.213300][ T6471] ___sys_sendmsg+0x158/0x2a0 [ 130.213353][ T6471] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.213586][ T6471] ? __fget_files+0x2a/0x420 [ 130.213615][ T6471] ? __fget_files+0x3a0/0x420 [ 130.213708][ T6471] __x64_sys_sendmsg+0x19b/0x260 [ 130.213734][ T6471] ? clockevents_program_event+0x24d/0x360 [ 130.213794][ T6471] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 130.213930][ T6471] ? do_syscall_64+0xbe/0x3b0 [ 130.213989][ T6471] do_syscall_64+0xfa/0x3b0 [ 130.214032][ T6471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.214053][ T6471] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 130.214075][ T6471] ? clear_bhb_loop+0x60/0xb0 [ 130.214124][ T6471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.214147][ T6471] RIP: 0033:0x7f87bf98e9a9 [ 130.214180][ T6471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.214198][ T6471] RSP: 002b:00007f87c08c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.214225][ T6471] RAX: ffffffffffffffda RBX: 00007f87bfbb6080 RCX: 00007f87bf98e9a9 [ 130.214241][ T6471] RDX: 0000000000008804 RSI: 0000200000000380 RDI: 0000000000000005 [ 130.214255][ T6471] RBP: 00007f87c08c3090 R08: 0000000000000000 R09: 0000000000000000 [ 130.214269][ T6471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.214281][ T6471] R13: 0000000000000000 R14: 00007f87bfbb6080 R15: 00007ffcad2ebc38 [ 130.214386][ T6471] [ 133.307635][ T6485] C: renamed from team_slave_0 (while UP) [ 133.316365][ T6485] netlink: 'syz.3.166': attribute type 3 has an invalid length. [ 133.324430][ T6485] netlink: 'syz.3.166': attribute type 1 has an invalid length. [ 133.334410][ T6485] netlink: 116 bytes leftover after parsing attributes in process `syz.3.166'. [ 133.733815][ T6505] netlink: 'syz.1.172': attribute type 10 has an invalid length. [ 134.054499][ T6505] veth1_macvtap: left promiscuous mode [ 134.364999][ T6510] FAULT_INJECTION: forcing a failure. [ 134.364999][ T6510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.436243][ T6510] CPU: 1 UID: 0 PID: 6510 Comm: syz.2.174 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 134.436281][ T6510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 134.436297][ T6510] Call Trace: [ 134.436306][ T6510] [ 134.436316][ T6510] dump_stack_lvl+0x189/0x250 [ 134.436352][ T6510] ? __pfx____ratelimit+0x10/0x10 [ 134.436385][ T6510] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.436414][ T6510] ? __pfx__printk+0x10/0x10 [ 134.436465][ T6510] should_fail_ex+0x414/0x560 [ 134.436505][ T6510] _copy_from_user+0x2d/0xb0 [ 134.436533][ T6510] __copy_msghdr+0x3c5/0x5b0 [ 134.436568][ T6510] ___sys_sendmsg+0x1a5/0x2a0 [ 134.436600][ T6510] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.436675][ T6510] ? __fget_files+0x2a/0x420 [ 134.436706][ T6510] ? __fget_files+0x3a0/0x420 [ 134.436748][ T6510] __x64_sys_sendmsg+0x19b/0x260 [ 134.436782][ T6510] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 134.436832][ T6510] ? do_syscall_64+0xbe/0x3b0 [ 134.436878][ T6510] do_syscall_64+0xfa/0x3b0 [ 134.436913][ T6510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.436937][ T6510] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 134.436961][ T6510] ? clear_bhb_loop+0x60/0xb0 [ 134.436992][ T6510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.437015][ T6510] RIP: 0033:0x7ff32bd8e9a9 [ 134.437047][ T6510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.437068][ T6510] RSP: 002b:00007ff32cb81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.437093][ T6510] RAX: ffffffffffffffda RBX: 00007ff32bfb5fa0 RCX: 00007ff32bd8e9a9 [ 134.437111][ T6510] RDX: 0000000000008804 RSI: 0000200000000380 RDI: 0000000000000005 [ 134.437127][ T6510] RBP: 00007ff32cb81090 R08: 0000000000000000 R09: 0000000000000000 [ 134.437141][ T6510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.437155][ T6510] R13: 0000000000000000 R14: 00007ff32bfb5fa0 R15: 00007fff6f6bd8a8 [ 134.437193][ T6510] [ 135.662250][ T6529] netlink: 'syz.4.180': attribute type 10 has an invalid length. [ 135.701404][ T6529] netlink: 55 bytes leftover after parsing attributes in process `syz.4.180'. [ 135.765854][ T6532] netlink: 'syz.1.179': attribute type 10 has an invalid length. [ 136.946422][ T6555] netlink: 'syz.0.186': attribute type 10 has an invalid length. [ 136.964376][ T6555] netlink: 40 bytes leftover after parsing attributes in process `syz.0.186'. [ 138.098836][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.107461][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.127790][ T6555] dummy0: entered promiscuous mode [ 139.428960][ T6586] netlink: 184 bytes leftover after parsing attributes in process `syz.3.194'. [ 139.452214][ T6586] C: entered allmulticast mode [ 141.134648][ T6618] FAULT_INJECTION: forcing a failure. [ 141.134648][ T6618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.240936][ T6618] CPU: 0 UID: 0 PID: 6618 Comm: syz.1.204 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 141.240967][ T6618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 141.240979][ T6618] Call Trace: [ 141.240987][ T6618] [ 141.240997][ T6618] dump_stack_lvl+0x189/0x250 [ 141.241029][ T6618] ? __pfx____ratelimit+0x10/0x10 [ 141.241060][ T6618] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.241087][ T6618] ? __pfx__printk+0x10/0x10 [ 141.241118][ T6618] ? __might_fault+0xb0/0x130 [ 141.241150][ T6618] ? __might_fault+0xb0/0x130 [ 141.241181][ T6618] should_fail_ex+0x414/0x560 [ 141.241218][ T6618] _copy_from_user+0x2d/0xb0 [ 141.241244][ T6618] ___sys_sendmsg+0x158/0x2a0 [ 141.241284][ T6618] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.241339][ T6618] ? __fget_files+0x2a/0x420 [ 141.241385][ T6618] ? __fget_files+0x2a/0x420 [ 141.241411][ T6618] ? __fget_files+0x3a0/0x420 [ 141.241453][ T6618] __x64_sys_sendmsg+0x19b/0x260 [ 141.241484][ T6618] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 141.241524][ T6618] ? __pfx_ksys_write+0x10/0x10 [ 141.241545][ T6618] ? rcu_is_watching+0x15/0xb0 [ 141.241579][ T6618] ? do_syscall_64+0xbe/0x3b0 [ 141.241616][ T6618] do_syscall_64+0xfa/0x3b0 [ 141.241645][ T6618] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.241674][ T6618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.241696][ T6618] ? clear_bhb_loop+0x60/0xb0 [ 141.241724][ T6618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.241746][ T6618] RIP: 0033:0x7f40a938e9a9 [ 141.241765][ T6618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.241783][ T6618] RSP: 002b:00007f40aa25d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.241807][ T6618] RAX: ffffffffffffffda RBX: 00007f40a95b5fa0 RCX: 00007f40a938e9a9 [ 141.241823][ T6618] RDX: 000000000000fc00 RSI: 0000200000001180 RDI: 0000000000000003 [ 141.241837][ T6618] RBP: 00007f40aa25d090 R08: 0000000000000000 R09: 0000000000000000 [ 141.241851][ T6618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.241864][ T6618] R13: 0000000000000000 R14: 00007f40a95b5fa0 R15: 00007ffd2764eac8 [ 141.241902][ T6618] [ 141.818739][ T6625] netlink: 184 bytes leftover after parsing attributes in process `syz.2.207'. [ 144.007937][ T6665] netlink: 'syz.4.221': attribute type 3 has an invalid length. [ 144.053406][ T6665] netlink: 'syz.4.221': attribute type 1 has an invalid length. [ 144.095690][ T6665] netlink: 116 bytes leftover after parsing attributes in process `syz.4.221'. [ 145.357533][ T6691] net veth1_virt_wifi ÿÿÿÿÿÿaaaaaaaaa: renamed from virt_wifi0 [ 145.614148][ T6699] netlink: 'syz.0.233': attribute type 21 has an invalid length. [ 146.729971][ T6715] syzkaller0: entered promiscuous mode [ 146.739309][ T6715] syzkaller0: entered allmulticast mode [ 146.839743][ T6721] FAULT_INJECTION: forcing a failure. [ 146.839743][ T6721] name failslab, interval 1, probability 0, space 0, times 1 [ 146.985068][ T6721] CPU: 0 UID: 0 PID: 6721 Comm: syz.1.236 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 146.985106][ T6721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 146.985122][ T6721] Call Trace: [ 146.985131][ T6721] [ 146.985142][ T6721] dump_stack_lvl+0x189/0x250 [ 146.985178][ T6721] ? __pfx____ratelimit+0x10/0x10 [ 146.985213][ T6721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.985244][ T6721] ? __pfx__printk+0x10/0x10 [ 146.985286][ T6721] ? __pfx___might_resched+0x10/0x10 [ 146.985314][ T6721] ? fs_reclaim_acquire+0x7d/0x100 [ 146.985366][ T6721] should_fail_ex+0x414/0x560 [ 146.985408][ T6721] should_failslab+0xa8/0x100 [ 146.985441][ T6721] __kmalloc_noprof+0xcb/0x4f0 [ 146.985467][ T6721] ? bpf_test_init+0xc2/0x170 [ 146.985498][ T6721] bpf_test_init+0xc2/0x170 [ 146.985528][ T6721] bpf_prog_test_run_skb+0x1e9/0x1560 [ 146.985553][ T6721] ? __fget_files+0x2a/0x420 [ 146.985588][ T6721] ? __fget_files+0x2a/0x420 [ 146.985629][ T6721] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 146.985656][ T6721] bpf_prog_test_run+0x2c4/0x340 [ 146.985690][ T6721] __sys_bpf+0x581/0x870 [ 146.985717][ T6721] ? __pfx___sys_bpf+0x10/0x10 [ 146.985762][ T6721] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 146.985805][ T6721] ? __pfx_ksys_write+0x10/0x10 [ 146.985828][ T6721] ? rcu_is_watching+0x15/0xb0 [ 146.985868][ T6721] __x64_sys_bpf+0x7c/0x90 [ 146.985907][ T6721] do_syscall_64+0xfa/0x3b0 [ 146.985945][ T6721] ? lockdep_hardirqs_on+0x9c/0x150 [ 146.985988][ T6721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.986013][ T6721] ? clear_bhb_loop+0x60/0xb0 [ 146.986044][ T6721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.986068][ T6721] RIP: 0033:0x7f40a938e9a9 [ 146.986091][ T6721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.986111][ T6721] RSP: 002b:00007f40aa25d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 146.986138][ T6721] RAX: ffffffffffffffda RBX: 00007f40a95b5fa0 RCX: 00007f40a938e9a9 [ 146.986156][ T6721] RDX: 0000000000000048 RSI: 0000200000000780 RDI: 000000000000000a [ 146.986172][ T6721] RBP: 00007f40aa25d090 R08: 0000000000000000 R09: 0000000000000000 [ 146.986187][ T6721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.986201][ T6721] R13: 0000000000000000 R14: 00007f40a95b5fa0 R15: 00007ffd2764eac8 [ 146.986241][ T6721] [ 148.394468][ T6725] netlink: 'syz.0.240': attribute type 10 has an invalid length. [ 148.403208][ T6725] netlink: 40 bytes leftover after parsing attributes in process `syz.0.240'. [ 148.696902][ T6736] FAULT_INJECTION: forcing a failure. [ 148.696902][ T6736] name failslab, interval 1, probability 0, space 0, times 0 [ 148.831143][ T6736] CPU: 1 UID: 0 PID: 6736 Comm: syz.0.244 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 148.831178][ T6736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 148.831190][ T6736] Call Trace: [ 148.831198][ T6736] [ 148.831207][ T6736] dump_stack_lvl+0x189/0x250 [ 148.831239][ T6736] ? __pfx____ratelimit+0x10/0x10 [ 148.831269][ T6736] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.831295][ T6736] ? __pfx__printk+0x10/0x10 [ 148.831327][ T6736] ? __pfx___might_resched+0x10/0x10 [ 148.831354][ T6736] ? fs_reclaim_acquire+0x7d/0x100 [ 148.831388][ T6736] should_fail_ex+0x414/0x560 [ 148.831422][ T6736] should_failslab+0xa8/0x100 [ 148.831457][ T6736] __kmalloc_noprof+0xcb/0x4f0 [ 148.831479][ T6736] ? sock_kmalloc+0xd6/0x160 [ 148.831511][ T6736] sock_kmalloc+0xd6/0x160 [ 148.831554][ T6736] ____sys_sendmsg+0x1b5/0x830 [ 148.831589][ T6736] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.831625][ T6736] ? import_iovec+0x74/0xa0 [ 148.831653][ T6736] ___sys_sendmsg+0x21f/0x2a0 [ 148.831691][ T6736] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.831763][ T6736] ? __fget_files+0x2a/0x420 [ 148.831789][ T6736] ? __fget_files+0x3a0/0x420 [ 148.831828][ T6736] __x64_sys_sendmsg+0x19b/0x260 [ 148.831858][ T6736] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 148.831895][ T6736] ? __pfx_ksys_write+0x10/0x10 [ 148.831924][ T6736] ? do_syscall_64+0xbe/0x3b0 [ 148.831959][ T6736] do_syscall_64+0xfa/0x3b0 [ 148.831988][ T6736] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.832017][ T6736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.832039][ T6736] ? clear_bhb_loop+0x60/0xb0 [ 148.832065][ T6736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.832087][ T6736] RIP: 0033:0x7f7bb578e9a9 [ 148.832107][ T6736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.832125][ T6736] RSP: 002b:00007f7bb65a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.832148][ T6736] RAX: ffffffffffffffda RBX: 00007f7bb59b5fa0 RCX: 00007f7bb578e9a9 [ 148.832164][ T6736] RDX: 000000000000fc00 RSI: 0000200000001180 RDI: 0000000000000003 [ 148.832177][ T6736] RBP: 00007f7bb65a0090 R08: 0000000000000000 R09: 0000000000000000 [ 148.832191][ T6736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.832203][ T6736] R13: 0000000000000000 R14: 00007f7bb59b5fa0 R15: 00007ffc329c6b28 [ 148.832237][ T6736] [ 149.807509][ T6742] netlink: 'syz.3.246': attribute type 3 has an invalid length. [ 149.822792][ T6742] netlink: 'syz.3.246': attribute type 1 has an invalid length. [ 149.832603][ T6742] netlink: 116 bytes leftover after parsing attributes in process `syz.3.246'. [ 151.579735][ T6781] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.259'. [ 152.435633][ T6791] netlink: 'syz.2.261': attribute type 3 has an invalid length. [ 152.604594][ T6791] netlink: 'syz.2.261': attribute type 1 has an invalid length. [ 152.613900][ T6791] netlink: 116 bytes leftover after parsing attributes in process `syz.2.261'. [ 153.222359][ T6799] netlink: 168 bytes leftover after parsing attributes in process `syz.1.265'. [ 153.264463][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 153.278985][ T6801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.330973][ T6801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.340620][ T6805] netlink: 'syz.3.269': attribute type 2 has an invalid length. [ 153.377538][ T6805] netlink: 126524 bytes leftover after parsing attributes in process `syz.3.269'. [ 153.390205][ T6801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.438198][ T6801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.105045][ T6832] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.275'. [ 155.235400][ T6832] netlink: zone id is out of range [ 155.247196][ T6832] netlink: get zone limit has 8 unknown bytes [ 155.255453][ T6838] FAULT_INJECTION: forcing a failure. [ 155.255453][ T6838] name failslab, interval 1, probability 0, space 0, times 0 [ 155.292133][ T6838] CPU: 0 UID: 0 PID: 6838 Comm: syz.1.277 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 155.292165][ T6838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 155.292178][ T6838] Call Trace: [ 155.292186][ T6838] [ 155.292195][ T6838] dump_stack_lvl+0x189/0x250 [ 155.292226][ T6838] ? __pfx____ratelimit+0x10/0x10 [ 155.292271][ T6838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.292297][ T6838] ? __pfx__printk+0x10/0x10 [ 155.292331][ T6838] ? __pfx___might_resched+0x10/0x10 [ 155.292357][ T6838] ? fs_reclaim_acquire+0x7d/0x100 [ 155.292392][ T6838] should_fail_ex+0x414/0x560 [ 155.292429][ T6838] should_failslab+0xa8/0x100 [ 155.292458][ T6838] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 155.292483][ T6838] ? __alloc_skb+0x112/0x2d0 [ 155.292511][ T6838] __alloc_skb+0x112/0x2d0 [ 155.292540][ T6838] alloc_skb_with_frags+0xca/0x890 [ 155.292564][ T6838] ? __local_bh_enable_ip+0x12d/0x1c0 [ 155.292590][ T6838] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.292632][ T6838] sock_alloc_send_pskb+0x857/0x990 [ 155.292684][ T6838] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 155.292712][ T6838] ? ipv6_get_saddr_eval+0xb99/0xee0 [ 155.292764][ T6838] ? ipv6_dev_get_saddr+0x143/0xb70 [ 155.292798][ T6838] __ip6_append_data+0x2ab5/0x3de0 [ 155.292845][ T6838] ? __lock_acquire+0xab9/0xd20 [ 155.292872][ T6838] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 155.292919][ T6838] ? ip6_mtu+0x7d/0x3f0 [ 155.292946][ T6838] ? __pfx___ip6_append_data+0x10/0x10 [ 155.292968][ T6838] ? __pfx_ip6_mtu+0x10/0x10 [ 155.293000][ T6838] ip6_append_data+0x1c4/0x380 [ 155.293025][ T6838] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 155.293056][ T6838] l2tp_ip6_sendmsg+0x1282/0x17c0 [ 155.293110][ T6838] ? __pfx_l2tp_ip6_sendmsg+0x10/0x10 [ 155.293175][ T6838] ? __pfx_aa_sk_perm+0x10/0x10 [ 155.293212][ T6838] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 155.293259][ T6838] ? inet_sendmsg+0x2f4/0x370 [ 155.293290][ T6838] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 155.293325][ T6838] __sock_sendmsg+0x19c/0x270 [ 155.293362][ T6838] ____sys_sendmsg+0x505/0x830 [ 155.293396][ T6838] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.293433][ T6838] ? import_iovec+0x74/0xa0 [ 155.293462][ T6838] ___sys_sendmsg+0x21f/0x2a0 [ 155.293491][ T6838] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.293560][ T6838] ? __fget_files+0x2a/0x420 [ 155.293586][ T6838] ? __fget_files+0x3a0/0x420 [ 155.293625][ T6838] __x64_sys_sendmsg+0x19b/0x260 [ 155.293655][ T6838] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 155.293693][ T6838] ? __pfx_ksys_write+0x10/0x10 [ 155.293714][ T6838] ? rcu_is_watching+0x15/0xb0 [ 155.293754][ T6838] ? do_syscall_64+0xbe/0x3b0 [ 155.293789][ T6838] do_syscall_64+0xfa/0x3b0 [ 155.293817][ T6838] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.293845][ T6838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.293867][ T6838] ? clear_bhb_loop+0x60/0xb0 [ 155.293893][ T6838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.293915][ T6838] RIP: 0033:0x7f40a938e9a9 [ 155.293935][ T6838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.293952][ T6838] RSP: 002b:00007f40aa25d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.293975][ T6838] RAX: ffffffffffffffda RBX: 00007f40a95b5fa0 RCX: 00007f40a938e9a9 [ 155.293990][ T6838] RDX: 000000000000fc00 RSI: 0000200000001180 RDI: 0000000000000003 [ 155.294003][ T6838] RBP: 00007f40aa25d090 R08: 0000000000000000 R09: 0000000000000000 [ 155.294016][ T6838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.294028][ T6838] R13: 0000000000000000 R14: 00007f40a95b5fa0 R15: 00007ffd2764eac8 [ 155.294059][ T6838] [ 158.008778][ T6878] tap0: tun_chr_ioctl cmd 1074025675 [ 158.021027][ T6878] tap0: persist enabled [ 159.781846][ T6934] netlink: 'syz.2.321': attribute type 10 has an invalid length. [ 159.901081][ T6934] netlink: 40 bytes leftover after parsing attributes in process `syz.2.321'. [ 159.910688][ T6934] dummy0: entered promiscuous mode [ 161.422835][ T6975] netlink: 'syz.1.334': attribute type 19 has an invalid length. [ 161.482341][ T6975] netlink: 40 bytes leftover after parsing attributes in process `syz.1.334'. [ 161.592438][ T6980] netlink: 60 bytes leftover after parsing attributes in process `syz.1.334'. [ 161.902459][ T6978] netlink: 60 bytes leftover after parsing attributes in process `syz.1.334'. [ 161.963241][ T6981] netlink: 60 bytes leftover after parsing attributes in process `syz.1.334'. [ 163.209007][ T7021] FAULT_INJECTION: forcing a failure. [ 163.209007][ T7021] name failslab, interval 1, probability 0, space 0, times 0 [ 163.276658][ T7021] CPU: 0 UID: 0 PID: 7021 Comm: syz.1.351 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 163.276693][ T7021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 163.276707][ T7021] Call Trace: [ 163.276716][ T7021] [ 163.276726][ T7021] dump_stack_lvl+0x189/0x250 [ 163.276759][ T7021] ? irqentry_exit+0x74/0x90 [ 163.276791][ T7021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.276828][ T7021] ? dump_stack+0x9/0x20 [ 163.276861][ T7021] should_fail_ex+0x414/0x560 [ 163.276904][ T7021] should_failslab+0xa8/0x100 [ 163.276933][ T7021] __kmalloc_cache_noprof+0x70/0x3d0 [ 163.276960][ T7021] ? rtnl_newlink+0xed/0x1c70 [ 163.276988][ T7021] rtnl_newlink+0xed/0x1c70 [ 163.277023][ T7021] ? __pfx_rtnl_newlink+0x10/0x10 [ 163.277059][ T7021] ? perf_tp_event+0x664/0x1380 [ 163.277096][ T7021] ? __pfx_perf_tp_event+0x10/0x10 [ 163.277125][ T7021] ? __pfx_perf_swevent_event+0x10/0x10 [ 163.277151][ T7021] ? preempt_schedule_common+0x83/0xd0 [ 163.277197][ T7021] ? perf_trace_run_bpf_submit+0xee/0x170 [ 163.277234][ T7021] ? perf_trace_preemptirq_template+0x280/0x340 [ 163.277272][ T7021] ? irqentry_enter+0x3d/0x60 [ 163.277303][ T7021] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 163.277354][ T7021] ? irqentry_exit+0x74/0x90 [ 163.277382][ T7021] ? lockdep_hardirqs_on+0x9c/0x150 [ 163.277416][ T7021] ? rcu_read_unlock+0x87/0xa0 [ 163.277447][ T7021] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 163.277472][ T7021] ? rcu_is_watching+0x35/0xb0 [ 163.277514][ T7021] ? __pfx_rtnl_newlink+0x10/0x10 [ 163.277535][ T7021] rtnetlink_rcv_msg+0x7cc/0xb70 [ 163.277561][ T7021] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 163.277581][ T7021] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 163.277620][ T7021] netlink_rcv_skb+0x208/0x470 [ 163.277642][ T7021] ? rcu_is_watching+0x15/0xb0 [ 163.277669][ T7021] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 163.277693][ T7021] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 163.277731][ T7021] ? netlink_deliver_tap+0x2e/0x1b0 [ 163.277763][ T7021] netlink_unicast+0x75b/0x8d0 [ 163.277811][ T7021] netlink_sendmsg+0x805/0xb30 [ 163.277845][ T7021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.277873][ T7021] ? perf_trace_preemptirq_template+0x280/0x340 [ 163.277916][ T7021] ? aa_sock_msg_perm+0x94/0x160 [ 163.277953][ T7021] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 163.277982][ T7021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.278007][ T7021] __sock_sendmsg+0x219/0x270 [ 163.278044][ T7021] sock_write_iter+0x258/0x330 [ 163.278078][ T7021] ? __pfx_sock_write_iter+0x10/0x10 [ 163.278105][ T7021] ? irqentry_exit+0x74/0x90 [ 163.278145][ T7021] ? __pfx_sock_write_iter+0x10/0x10 [ 163.278186][ T7021] vfs_write+0x54b/0xa90 [ 163.278214][ T7021] ? __pfx_sock_write_iter+0x10/0x10 [ 163.278244][ T7021] ? __pfx_vfs_write+0x10/0x10 [ 163.278279][ T7021] ? __fget_files+0x2a/0x420 [ 163.278317][ T7021] ksys_write+0x145/0x250 [ 163.278344][ T7021] ? __pfx_ksys_write+0x10/0x10 [ 163.278381][ T7021] do_syscall_64+0xfa/0x3b0 [ 163.278414][ T7021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.278435][ T7021] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 163.278457][ T7021] ? clear_bhb_loop+0x60/0xb0 [ 163.278485][ T7021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.278506][ T7021] RIP: 0033:0x7f40a938e9a9 [ 163.278527][ T7021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.278545][ T7021] RSP: 002b:00007f40aa25d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 163.278569][ T7021] RAX: ffffffffffffffda RBX: 00007f40a95b5fa0 RCX: 00007f40a938e9a9 [ 163.278586][ T7021] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000007 [ 163.278601][ T7021] RBP: 00007f40aa25d090 R08: 0000000000000000 R09: 0000000000000000 [ 163.278615][ T7021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.278627][ T7021] R13: 0000000000000000 R14: 00007f40a95b5fa0 R15: 00007ffd2764eac8 [ 163.278661][ T7021] [ 163.988105][ T7034] FAULT_INJECTION: forcing a failure. [ 163.988105][ T7034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.106309][ T7034] CPU: 1 UID: 0 PID: 7034 Comm: syz.2.356 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 164.106341][ T7034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 164.106354][ T7034] Call Trace: [ 164.106363][ T7034] [ 164.106373][ T7034] dump_stack_lvl+0x189/0x250 [ 164.106405][ T7034] ? __pfx____ratelimit+0x10/0x10 [ 164.106435][ T7034] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.106461][ T7034] ? __pfx__printk+0x10/0x10 [ 164.106492][ T7034] ? __might_fault+0xb0/0x130 [ 164.106530][ T7034] should_fail_ex+0x414/0x560 [ 164.106567][ T7034] _copy_from_user+0x2d/0xb0 [ 164.106593][ T7034] csum_and_copy_from_iter_full+0x694/0x1eb0 [ 164.106623][ T7034] ? alloc_skb_with_frags+0x7df/0x890 [ 164.106666][ T7034] ? sock_alloc_send_pskb+0x875/0x990 [ 164.106695][ T7034] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 164.106745][ T7034] ip_generic_getfrag+0x12f/0x2b0 [ 164.106774][ T7034] ? ipv6_get_saddr_eval+0xb99/0xee0 [ 164.106872][ T7034] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 164.106906][ T7034] ? skb_put+0x11b/0x210 [ 164.106935][ T7034] __ip6_append_data+0x3027/0x3de0 [ 164.106979][ T7034] ? __lock_acquire+0xab9/0xd20 [ 164.107006][ T7034] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 164.107053][ T7034] ? ip6_mtu+0x7d/0x3f0 [ 164.107075][ T7034] ? __pfx___ip6_append_data+0x10/0x10 [ 164.107098][ T7034] ? __pfx_ip6_mtu+0x10/0x10 [ 164.107133][ T7034] ip6_append_data+0x1c4/0x380 [ 164.107165][ T7034] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 164.107199][ T7034] l2tp_ip6_sendmsg+0x1282/0x17c0 [ 164.107253][ T7034] ? __pfx_l2tp_ip6_sendmsg+0x10/0x10 [ 164.107315][ T7034] ? __pfx_aa_sk_perm+0x10/0x10 [ 164.107341][ T7034] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 164.107388][ T7034] ? inet_sendmsg+0x2f4/0x370 [ 164.107418][ T7034] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 164.107453][ T7034] __sock_sendmsg+0x19c/0x270 [ 164.107490][ T7034] ____sys_sendmsg+0x505/0x830 [ 164.107524][ T7034] ? __pfx_____sys_sendmsg+0x10/0x10 [ 164.107562][ T7034] ? import_iovec+0x74/0xa0 [ 164.107591][ T7034] ___sys_sendmsg+0x21f/0x2a0 [ 164.107620][ T7034] ? __pfx____sys_sendmsg+0x10/0x10 [ 164.107689][ T7034] ? __fget_files+0x2a/0x420 [ 164.107716][ T7034] ? __fget_files+0x3a0/0x420 [ 164.107755][ T7034] __x64_sys_sendmsg+0x19b/0x260 [ 164.107785][ T7034] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 164.107841][ T7034] ? __pfx_ksys_write+0x10/0x10 [ 164.107861][ T7034] ? rcu_is_watching+0x15/0xb0 [ 164.107893][ T7034] ? do_syscall_64+0xbe/0x3b0 [ 164.107929][ T7034] do_syscall_64+0xfa/0x3b0 [ 164.107960][ T7034] ? lockdep_hardirqs_on+0x9c/0x150 [ 164.107989][ T7034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.108011][ T7034] ? clear_bhb_loop+0x60/0xb0 [ 164.108038][ T7034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.108060][ T7034] RIP: 0033:0x7ff32bd8e9a9 [ 164.108079][ T7034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.108097][ T7034] RSP: 002b:00007ff32cb81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.108121][ T7034] RAX: ffffffffffffffda RBX: 00007ff32bfb5fa0 RCX: 00007ff32bd8e9a9 [ 164.108137][ T7034] RDX: 000000000000fc00 RSI: 0000200000001180 RDI: 0000000000000003 [ 164.108151][ T7034] RBP: 00007ff32cb81090 R08: 0000000000000000 R09: 0000000000000000 [ 164.108165][ T7034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.108177][ T7034] R13: 0000000000000000 R14: 00007ff32bfb5fa0 R15: 00007fff6f6bd8a8 [ 164.108212][ T7034] [ 165.091769][ T7058] netlink: 'syz.3.362': attribute type 21 has an invalid length. [ 165.471638][ T7078] netlink: 'syz.0.368': attribute type 3 has an invalid length. [ 165.490303][ T7078] netlink: 'syz.0.368': attribute type 1 has an invalid length. [ 165.507833][ T7078] netlink: 116 bytes leftover after parsing attributes in process `syz.0.368'. [ 165.609264][ T7085] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.371'. [ 165.613850][ T7089] FAULT_INJECTION: forcing a failure. [ 165.613850][ T7089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.643062][ T7089] CPU: 1 UID: 0 PID: 7089 Comm: syz.3.372 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 165.643095][ T7089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 165.643108][ T7089] Call Trace: [ 165.643117][ T7089] [ 165.643126][ T7089] dump_stack_lvl+0x189/0x250 [ 165.643160][ T7089] ? __pfx____ratelimit+0x10/0x10 [ 165.643190][ T7089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.643217][ T7089] ? __pfx__printk+0x10/0x10 [ 165.643260][ T7089] should_fail_ex+0x414/0x560 [ 165.643296][ T7089] _copy_to_user+0x31/0xb0 [ 165.643322][ T7089] simple_read_from_buffer+0xe1/0x170 [ 165.643353][ T7089] proc_fail_nth_read+0x1df/0x250 [ 165.643387][ T7089] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 165.643419][ T7089] ? rw_verify_area+0x258/0x650 [ 165.643442][ T7089] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 165.643472][ T7089] vfs_read+0x1fd/0x980 [ 165.643501][ T7089] ? __pfx___mutex_lock+0x10/0x10 [ 165.643532][ T7089] ? __pfx_vfs_read+0x10/0x10 [ 165.643557][ T7089] ? __fget_files+0x2a/0x420 [ 165.643589][ T7089] ? __fget_files+0x3a0/0x420 [ 165.643613][ T7089] ? __fget_files+0x2a/0x420 [ 165.643668][ T7089] ksys_read+0x145/0x250 [ 165.643694][ T7089] ? __pfx_ksys_read+0x10/0x10 [ 165.643713][ T7089] ? rcu_is_watching+0x15/0xb0 [ 165.643763][ T7089] ? do_syscall_64+0xbe/0x3b0 [ 165.643799][ T7089] do_syscall_64+0xfa/0x3b0 [ 165.643828][ T7089] ? lockdep_hardirqs_on+0x9c/0x150 [ 165.643856][ T7089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.643878][ T7089] ? clear_bhb_loop+0x60/0xb0 [ 165.643905][ T7089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.643926][ T7089] RIP: 0033:0x7fdad1d8d3bc [ 165.643946][ T7089] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 165.643964][ T7089] RSP: 002b:00007fdacfbf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 165.643991][ T7089] RAX: ffffffffffffffda RBX: 00007fdad1fb5fa0 RCX: 00007fdad1d8d3bc [ 165.644007][ T7089] RDX: 000000000000000f RSI: 00007fdacfbf60a0 RDI: 0000000000000004 [ 165.644021][ T7089] RBP: 00007fdacfbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 165.644034][ T7089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.644047][ T7089] R13: 0000000000000000 R14: 00007fdad1fb5fa0 R15: 00007fffd1624548 [ 165.644080][ T7089] [ 166.341533][ T7095] FAULT_INJECTION: forcing a failure. [ 166.341533][ T7095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.358608][ T7095] CPU: 0 UID: 0 PID: 7095 Comm: syz.3.374 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 166.358640][ T7095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 166.358654][ T7095] Call Trace: [ 166.358663][ T7095] [ 166.358673][ T7095] dump_stack_lvl+0x189/0x250 [ 166.358707][ T7095] ? __pfx____ratelimit+0x10/0x10 [ 166.358737][ T7095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.358764][ T7095] ? __pfx__printk+0x10/0x10 [ 166.358810][ T7095] should_fail_ex+0x414/0x560 [ 166.358846][ T7095] _copy_to_user+0x31/0xb0 [ 166.358873][ T7095] bpf_test_finish+0x24e/0x700 [ 166.358915][ T7095] ? __pfx_bpf_test_finish+0x10/0x10 [ 166.358952][ T7095] bpf_prog_test_run_skb+0xed5/0x1560 [ 166.358994][ T7095] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 166.359018][ T7095] bpf_prog_test_run+0x2c4/0x340 [ 166.359047][ T7095] __sys_bpf+0x581/0x870 [ 166.359072][ T7095] ? __pfx___sys_bpf+0x10/0x10 [ 166.359112][ T7095] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 166.359150][ T7095] ? __pfx_ksys_write+0x10/0x10 [ 166.359179][ T7095] ? rcu_is_watching+0x15/0xb0 [ 166.359214][ T7095] __x64_sys_bpf+0x7c/0x90 [ 166.359249][ T7095] do_syscall_64+0xfa/0x3b0 [ 166.359279][ T7095] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.359309][ T7095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.359330][ T7095] ? clear_bhb_loop+0x60/0xb0 [ 166.359358][ T7095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.359379][ T7095] RIP: 0033:0x7fdad1d8e9a9 [ 166.359399][ T7095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.359417][ T7095] RSP: 002b:00007fdacfbd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 166.359440][ T7095] RAX: ffffffffffffffda RBX: 00007fdad1fb6080 RCX: 00007fdad1d8e9a9 [ 166.359456][ T7095] RDX: 0000000000000048 RSI: 0000200000000780 RDI: 000000000000000a [ 166.359470][ T7095] RBP: 00007fdacfbd5090 R08: 0000000000000000 R09: 0000000000000000 [ 166.359484][ T7095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.359496][ T7095] R13: 0000000000000001 R14: 00007fdad1fb6080 R15: 00007fffd1624548 [ 166.359531][ T7095] [ 167.629706][ T7122] netlink: 'syz.3.383': attribute type 39 has an invalid length. [ 168.298622][ T7138] netlink: 'syz.4.388': attribute type 29 has an invalid length. [ 168.312168][ T7140] netlink: 'syz.4.388': attribute type 29 has an invalid length. [ 168.389707][ T7140] netlink: 'syz.4.388': attribute type 21 has an invalid length. [ 168.401124][ T7140] netlink: 128 bytes leftover after parsing attributes in process `syz.4.388'. [ 168.412865][ T7140] netlink: 3 bytes leftover after parsing attributes in process `syz.4.388'. [ 168.583430][ T7146] FAULT_INJECTION: forcing a failure. [ 168.583430][ T7146] name failslab, interval 1, probability 0, space 0, times 0 [ 168.597603][ T7146] CPU: 1 UID: 0 PID: 7146 Comm: syz.3.390 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 168.597632][ T7146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 168.597645][ T7146] Call Trace: [ 168.597654][ T7146] [ 168.597663][ T7146] dump_stack_lvl+0x189/0x250 [ 168.597695][ T7146] ? __pfx____ratelimit+0x10/0x10 [ 168.597726][ T7146] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.597753][ T7146] ? __pfx__printk+0x10/0x10 [ 168.597786][ T7146] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 168.597833][ T7146] should_fail_ex+0x414/0x560 [ 168.597869][ T7146] should_failslab+0xa8/0x100 [ 168.597895][ T7146] __kmalloc_cache_noprof+0x70/0x3d0 [ 168.597913][ T7146] ? sctp_add_bind_addr+0x8c/0x370 [ 168.597940][ T7146] sctp_add_bind_addr+0x8c/0x370 [ 168.597967][ T7146] sctp_copy_local_addr_list+0x30b/0x4e0 [ 168.597993][ T7146] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 168.598017][ T7146] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 168.598044][ T7146] ? sctp_v4_is_any+0x35/0x60 [ 168.598058][ T7146] ? sctp_copy_one_addr+0x93/0x360 [ 168.598086][ T7146] sctp_bind_addr_copy+0xb3/0x3c0 [ 168.598111][ T7146] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 168.598135][ T7146] sctp_connect_new_asoc+0x2e0/0x690 [ 168.598155][ T7146] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 168.598172][ T7146] ? __local_bh_enable_ip+0x12d/0x1c0 [ 168.598198][ T7146] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 168.598222][ T7146] ? security_sctp_bind_connect+0x7e/0x2e0 [ 168.598247][ T7146] sctp_sendmsg+0x155c/0x2810 [ 168.598276][ T7146] ? __pfx_sctp_sendmsg+0x10/0x10 [ 168.598295][ T7146] ? aa_sk_perm+0x81e/0x950 [ 168.598332][ T7146] ? __pfx_aa_sk_perm+0x10/0x10 [ 168.598355][ T7146] ? sock_rps_record_flow+0x19/0x410 [ 168.598387][ T7146] ? inet_sendmsg+0x2f4/0x370 [ 168.598422][ T7146] __sock_sendmsg+0x19c/0x270 [ 168.598459][ T7146] ____sys_sendmsg+0x505/0x830 [ 168.598493][ T7146] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.598523][ T7146] ? import_iovec+0x74/0xa0 [ 168.598553][ T7146] ___sys_sendmsg+0x21f/0x2a0 [ 168.598583][ T7146] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.598652][ T7146] ? __fget_files+0x2a/0x420 [ 168.598679][ T7146] ? __fget_files+0x3a0/0x420 [ 168.598718][ T7146] __x64_sys_sendmsg+0x19b/0x260 [ 168.598747][ T7146] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 168.598784][ T7146] ? do_syscall_64+0xbe/0x3b0 [ 168.598809][ T7146] do_syscall_64+0xfa/0x3b0 [ 168.598832][ T7146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.598847][ T7146] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 168.598863][ T7146] ? clear_bhb_loop+0x60/0xb0 [ 168.598882][ T7146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.598897][ T7146] RIP: 0033:0x7fdad1d8e9a9 [ 168.598912][ T7146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.598926][ T7146] RSP: 002b:00007fdacfbf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.598942][ T7146] RAX: ffffffffffffffda RBX: 00007fdad1fb5fa0 RCX: 00007fdad1d8e9a9 [ 168.598954][ T7146] RDX: 0000000000008804 RSI: 0000200000000380 RDI: 0000000000000005 [ 168.598964][ T7146] RBP: 00007fdacfbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 168.598973][ T7146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 168.598982][ T7146] R13: 0000000000000000 R14: 00007fdad1fb5fa0 R15: 00007fffd1624548 [ 168.599006][ T7146] [ 169.058865][ T7147] netlink: 60 bytes leftover after parsing attributes in process `syz.2.391'. [ 169.170662][ T7155] netlink: 'syz.0.394': attribute type 10 has an invalid length. [ 169.224164][ T7155] netlink: 40 bytes leftover after parsing attributes in process `syz.0.394'. [ 169.445751][ T7162] netlink: 'syz.4.395': attribute type 10 has an invalid length. [ 169.454549][ T7162] netlink: 40 bytes leftover after parsing attributes in process `syz.4.395'. [ 169.829804][ T7173] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.399'. [ 169.947073][ T7173] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 169.976699][ T7177] netlink: 'syz.0.400': attribute type 10 has an invalid length. [ 169.994443][ T7173] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 170.242173][ T7183] netlink: 6783 bytes leftover after parsing attributes in process `syz.4.402'. [ 170.533472][ T7191] FAULT_INJECTION: forcing a failure. [ 170.533472][ T7191] name failslab, interval 1, probability 0, space 0, times 0 [ 170.578480][ T7191] CPU: 0 UID: 0 PID: 7191 Comm: syz.2.404 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 170.578512][ T7191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 170.578525][ T7191] Call Trace: [ 170.578533][ T7191] [ 170.578542][ T7191] dump_stack_lvl+0x189/0x250 [ 170.578574][ T7191] ? __pfx____ratelimit+0x10/0x10 [ 170.578604][ T7191] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.578629][ T7191] ? __pfx__printk+0x10/0x10 [ 170.578719][ T7191] should_fail_ex+0x414/0x560 [ 170.578756][ T7191] should_failslab+0xa8/0x100 [ 170.578784][ T7191] __kmalloc_cache_noprof+0x70/0x3d0 [ 170.578808][ T7191] ? sctp_add_bind_addr+0x8c/0x370 [ 170.578844][ T7191] sctp_add_bind_addr+0x8c/0x370 [ 170.578881][ T7191] sctp_copy_local_addr_list+0x30b/0x4e0 [ 170.578917][ T7191] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 170.578947][ T7191] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 170.578976][ T7191] ? irqentry_exit+0x74/0x90 [ 170.579007][ T7191] ? sctp_v4_is_any+0x35/0x60 [ 170.579024][ T7191] ? sctp_copy_one_addr+0x93/0x360 [ 170.579056][ T7191] sctp_bind_addr_copy+0xb3/0x3c0 [ 170.579087][ T7191] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 170.579129][ T7191] sctp_connect_new_asoc+0x2e0/0x690 [ 170.579157][ T7191] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 170.579185][ T7191] ? security_sctp_bind_connect+0x285/0x2e0 [ 170.579213][ T7191] ? security_sctp_bind_connect+0x7e/0x2e0 [ 170.579242][ T7191] sctp_sendmsg+0x155c/0x2810 [ 170.579263][ T7191] ? irqentry_enter+0x3d/0x60 [ 170.579303][ T7191] ? __pfx_sctp_sendmsg+0x10/0x10 [ 170.579329][ T7191] ? irqentry_exit+0x74/0x90 [ 170.579373][ T7191] ? sock_rps_record_flow+0x19/0x410 [ 170.579407][ T7191] ? inet_sendmsg+0x2f4/0x370 [ 170.579440][ T7191] __sock_sendmsg+0x19c/0x270 [ 170.579474][ T7191] ____sys_sendmsg+0x505/0x830 [ 170.579505][ T7191] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.579542][ T7191] ? import_iovec+0x74/0xa0 [ 170.579570][ T7191] ___sys_sendmsg+0x21f/0x2a0 [ 170.579598][ T7191] ? __pfx____sys_sendmsg+0x10/0x10 [ 170.579620][ T7191] ? irqentry_exit+0x74/0x90 [ 170.579691][ T7191] ? __fget_files+0x2a/0x420 [ 170.579716][ T7191] ? __fget_files+0x3a0/0x420 [ 170.579755][ T7191] __x64_sys_sendmsg+0x19b/0x260 [ 170.579785][ T7191] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 170.579834][ T7191] ? do_syscall_64+0xbe/0x3b0 [ 170.579870][ T7191] do_syscall_64+0xfa/0x3b0 [ 170.579902][ T7191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.579923][ T7191] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 170.579946][ T7191] ? clear_bhb_loop+0x60/0xb0 [ 170.579974][ T7191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.579994][ T7191] RIP: 0033:0x7ff32bd8e9a9 [ 170.580014][ T7191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.580032][ T7191] RSP: 002b:00007ff32cb81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.580054][ T7191] RAX: ffffffffffffffda RBX: 00007ff32bfb5fa0 RCX: 00007ff32bd8e9a9 [ 170.580091][ T7191] RDX: 0000000000008804 RSI: 0000200000000380 RDI: 0000000000000005 [ 170.580116][ T7191] RBP: 00007ff32cb81090 R08: 0000000000000000 R09: 0000000000000000 [ 170.580128][ T7191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 170.580140][ T7191] R13: 0000000000000000 R14: 00007ff32bfb5fa0 R15: 00007fff6f6bd8a8 [ 170.580172][ T7191] [ 171.132900][ T7205] netlink: 'syz.4.410': attribute type 10 has an invalid length. [ 171.146835][ T7205] netlink: 40 bytes leftover after parsing attributes in process `syz.4.410'. [ 171.945663][ T7228] netlink: 'syz.2.417': attribute type 3 has an invalid length. [ 171.974202][ T7228] netlink: 'syz.2.417': attribute type 1 has an invalid length. [ 172.009237][ T7228] netlink: 116 bytes leftover after parsing attributes in process `syz.2.417'. [ 172.298191][ T7235] netlink: 14 bytes leftover after parsing attributes in process `syz.0.419'. [ 172.431414][ T7235] hsr_slave_0: left promiscuous mode [ 172.575756][ T7235] hsr_slave_1: left promiscuous mode [ 172.879327][ T7247] netlink: 'syz.2.423': attribute type 2 has an invalid length. [ 173.373044][ T7258] netlink: 'syz.1.426': attribute type 10 has an invalid length. [ 173.400214][ T7258] dummy0: entered promiscuous mode [ 177.516806][ T7312] netlink: 'syz.1.443': attribute type 10 has an invalid length. [ 177.537704][ T7312] __nla_validate_parse: 2 callbacks suppressed [ 177.537725][ T7312] netlink: 40 bytes leftover after parsing attributes in process `syz.1.443'. [ 178.749146][ T7355] netlink: 'syz.4.458': attribute type 10 has an invalid length. [ 178.757479][ T7355] netlink: 40 bytes leftover after parsing attributes in process `syz.4.458'. [ 179.875586][ T7379] netlink: 'syz.0.460': attribute type 10 has an invalid length. [ 179.956832][ T7381] blkio.reset_stats is deprecated [ 182.435600][ T7379] team0: Port device wlan1 added [ 182.458995][ T7398] netlink: 68 bytes leftover after parsing attributes in process `syz.3.472'. [ 184.235088][ T5168] Bluetooth: hci3: ISO packet for unknown connection handle 32 [ 184.411439][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 184.708402][ T7484] netlink: 'syz.3.497': attribute type 29 has an invalid length. [ 184.771838][ T7484] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 184.785143][ T7484] syzkaller1: linktype set to 780 [ 184.811957][ T7484] netlink: 'syz.3.497': attribute type 29 has an invalid length. [ 185.357982][ T7497] netlink: 'syz.1.501': attribute type 39 has an invalid length. [ 185.447400][ T7501] netlink: 'syz.3.503': attribute type 1 has an invalid length. [ 185.454983][ T7497] C: renamed from team_slave_0 (while UP) [ 185.500124][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.503'. [ 185.669718][ T7497] netlink: 'syz.1.501': attribute type 3 has an invalid length. [ 185.680167][ T7497] netlink: 'syz.1.501': attribute type 1 has an invalid length. [ 185.733953][ T7497] netlink: 116 bytes leftover after parsing attributes in process `syz.1.501'. [ 188.572699][ T7573] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.520'. [ 188.760638][ T7567] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.518'. [ 188.857505][ T7571] netlink: 'syz.2.518': attribute type 2 has an invalid length. [ 188.866430][ T7571] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.518'. [ 193.372681][ T7650] netlink: 703 bytes leftover after parsing attributes in process `syz.0.544'. [ 193.567706][ T7658] pim6reg: tun_chr_ioctl cmd 1074812117 [ 193.582059][ T7658] netlink: 'syz.1.546': attribute type 3 has an invalid length. [ 193.590358][ T7658] netlink: 'syz.1.546': attribute type 2 has an invalid length. [ 193.599173][ T7658] netlink: 116 bytes leftover after parsing attributes in process `syz.1.546'. [ 193.615237][ T7658] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 194.101913][ T7668] Illegal XDP return value 4292579328 on prog (id 434) dev N/A, expect packet loss! [ 194.448939][ T7674] netlink: 'syz.2.552': attribute type 10 has an invalid length. [ 194.467528][ T7674] netlink: 40 bytes leftover after parsing attributes in process `syz.2.552'. [ 194.487334][ T7674] team0: entered promiscuous mode [ 194.492623][ T7674] C: entered promiscuous mode [ 194.497685][ T7674] team_slave_1: entered promiscuous mode [ 194.504753][ T7674] team0: entered allmulticast mode [ 194.509947][ T7674] team_slave_1: entered allmulticast mode [ 194.516838][ T7674] bridge0: port 3(team0) entered blocking state [ 194.524379][ T7674] bridge0: port 3(team0) entered disabled state [ 194.536621][ T7674] bridge0: port 3(team0) entered blocking state [ 194.543334][ T7674] bridge0: port 3(team0) entered forwarding state [ 194.829455][ T7682] netlink: 'syz.4.553': attribute type 2 has an invalid length. [ 194.879088][ T7682] netlink: 132 bytes leftover after parsing attributes in process `syz.4.553'. [ 194.980646][ T7685] netlink: 'syz.4.553': attribute type 2 has an invalid length. [ 195.013210][ T7685] netlink: 132 bytes leftover after parsing attributes in process `syz.4.553'. [ 195.376978][ T7690] netlink: 'syz.4.557': attribute type 3 has an invalid length. [ 195.401218][ T7690] netlink: 'syz.4.557': attribute type 1 has an invalid length. [ 195.409913][ T7690] netlink: 116 bytes leftover after parsing attributes in process `syz.4.557'. [ 196.954475][ T7728] netlink: 'syz.3.567': attribute type 21 has an invalid length. [ 197.134365][ T7733] netlink: 'syz.0.570': attribute type 13 has an invalid length. [ 197.164391][ T7733] netlink: 14581 bytes leftover after parsing attributes in process `syz.0.570'. [ 198.328999][ T7752] netlink: 'syz.2.576': attribute type 4 has an invalid length. [ 198.354069][ T7752] netlink: 152 bytes leftover after parsing attributes in process `syz.2.576'. [ 198.402332][ T7752] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 198.852078][ T7765] netlink: 'syz.1.581': attribute type 11 has an invalid length. [ 199.860271][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.869141][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.997138][ T7801] netlink: 'syz.0.590': attribute type 21 has an invalid length. [ 205.192766][ T7853] syz.2.604 uses obsolete (PF_INET,SOCK_PACKET) [ 211.850964][ T7952] Bluetooth: hci3: command 0x0406 tx timeout [ 211.858566][ T7952] Bluetooth: hci0: command 0x0406 tx timeout [ 211.865206][ T7952] Bluetooth: hci1: command 0x0406 tx timeout [ 211.874315][ T7952] Bluetooth: hci4: command 0x0406 tx timeout [ 211.884201][ T7952] Bluetooth: hci2: command 0x0406 tx timeout [ 212.116269][ T7989] sock: sock_timestamping_bind_phc: sock not bind to device [ 212.538560][ T7998] netlink: 'syz.4.648': attribute type 4 has an invalid length. [ 212.549303][ T7998] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.648'. [ 212.821847][ T8010] netlink: 'syz.3.652': attribute type 39 has an invalid length. [ 212.930554][ T8010] veth0_macvtap: left promiscuous mode [ 213.244184][ T8022] netlink: 'syz.0.653': attribute type 10 has an invalid length. [ 213.304635][ T8022] netlink: 55 bytes leftover after parsing attributes in process `syz.0.653'. [ 215.178135][ T8055] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.664'. [ 215.423666][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 215.882021][ T8062] netlink: 'syz.0.668': attribute type 10 has an invalid length. [ 215.927287][ T8062] netlink: 40 bytes leftover after parsing attributes in process `syz.0.668'. [ 215.956014][ T8063] netlink: 'syz.2.666': attribute type 29 has an invalid length. [ 215.965250][ T8062] bridge0: port 3(dummy0) entered blocking state [ 216.011421][ T8062] bridge0: port 3(dummy0) entered disabled state [ 216.018278][ T8062] dummy0: entered allmulticast mode [ 216.221594][ T8062] bridge0: port 3(dummy0) entered blocking state [ 216.228463][ T8062] bridge0: port 3(dummy0) entered forwarding state [ 216.318661][ T8069] netlink: 'syz.2.666': attribute type 29 has an invalid length. [ 218.457201][ T8125] syzkaller0: entered promiscuous mode [ 218.543760][ T8125] syzkaller0: entered allmulticast mode [ 219.466562][ T8155] netlink: 132 bytes leftover after parsing attributes in process `syz.3.700'. [ 220.913904][ T8192] netlink: 'syz.3.712': attribute type 3 has an invalid length. [ 220.941147][ T8192] netlink: 'syz.3.712': attribute type 1 has an invalid length. [ 221.012006][ T8193] netlink: 'syz.4.713': attribute type 21 has an invalid length. [ 221.045091][ T8192] netlink: 116 bytes leftover after parsing attributes in process `syz.3.712'. [ 221.553408][ T8207] netlink: 'syz.4.716': attribute type 2 has an invalid length. [ 221.589193][ T8207] netlink: 132 bytes leftover after parsing attributes in process `syz.4.716'. [ 221.675375][ T8207] netlink: 'syz.4.716': attribute type 2 has an invalid length. [ 221.700841][ T8207] netlink: 132 bytes leftover after parsing attributes in process `syz.4.716'. [ 221.878387][ T8214] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.719'. [ 222.398208][ T8232] netlink: 'syz.4.725': attribute type 1 has an invalid length. [ 222.407051][ T8232] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.725'. [ 222.667041][ T8239] netlink: 'syz.3.728': attribute type 3 has an invalid length. [ 222.680091][ T8239] netlink: 120 bytes leftover after parsing attributes in process `syz.3.728'. [ 222.692629][ T8237] IPv6: Can't replace route, no match found [ 224.004786][ T8287] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.738'. [ 224.774524][ T8300] netlink: 156 bytes leftover after parsing attributes in process `syz.0.744'. [ 224.839249][ T8301] netlink: 'syz.0.744': attribute type 3 has an invalid length. [ 224.924591][ T8301] netlink: 'syz.0.744': attribute type 1 has an invalid length. [ 225.008908][ T8301] netlink: 116 bytes leftover after parsing attributes in process `syz.0.744'. [ 226.722925][ T8348] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.760'. [ 227.033900][ T8354] netlink: 'syz.3.760': attribute type 2 has an invalid length. [ 227.052897][ T8354] netlink: 'syz.3.760': attribute type 4 has an invalid length. [ 227.070587][ T8354] netlink: 'syz.3.760': attribute type 8 has an invalid length. [ 227.090998][ T8348] wg2: entered promiscuous mode [ 227.103176][ T8348] wg2: entered allmulticast mode [ 227.142808][ T8354] netlink: 44 bytes leftover after parsing attributes in process `syz.3.760'. [ 228.219849][ T8393] netlink: 160 bytes leftover after parsing attributes in process `syz.1.775'. [ 228.395606][ T8397] netlink: 17 bytes leftover after parsing attributes in process `syz.1.776'. [ 228.407648][ T8397] netlink: zone id is out of range [ 228.413363][ T8397] netlink: zone id is out of range [ 228.418902][ T8397] netlink: zone id is out of range [ 228.427357][ T8397] netlink: zone id is out of range [ 228.433343][ T8397] netlink: zone id is out of range [ 228.438641][ T8397] netlink: zone id is out of range [ 228.447158][ T8397] netlink: zone id is out of range [ 228.452747][ T8397] netlink: zone id is out of range [ 228.461185][ T8397] netlink: zone id is out of range [ 228.466540][ T8397] netlink: zone id is out of range [ 229.385451][ T8424] netlink: 'syz.3.785': attribute type 1 has an invalid length. [ 229.396151][ T8424] netlink: 'syz.3.785': attribute type 4 has an invalid length. [ 229.409841][ T8424] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.785'. [ 233.051207][ T8525] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.820'. [ 234.483365][ T8563] netlink: 160 bytes leftover after parsing attributes in process `syz.0.832'. [ 234.734808][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.833'. [ 236.058172][ T8598] bridge_slave_1: left allmulticast mode [ 236.067287][ T8597] netlink: 'syz.2.845': attribute type 10 has an invalid length. [ 236.069832][ T8598] bridge_slave_1: left promiscuous mode [ 236.084974][ T8598] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.113417][ T8598] bridge_slave_0: left allmulticast mode [ 236.119523][ T8598] bridge_slave_0: left promiscuous mode [ 236.129490][ T8598] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.257249][ T8609] FAULT_INJECTION: forcing a failure. [ 236.257249][ T8609] name failslab, interval 1, probability 0, space 0, times 0 [ 236.270293][ T8609] CPU: 1 UID: 0 PID: 8609 Comm: syz.4.848 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 236.270323][ T8609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 236.270336][ T8609] Call Trace: [ 236.270345][ T8609] [ 236.270354][ T8609] dump_stack_lvl+0x189/0x250 [ 236.270387][ T8609] ? __pfx____ratelimit+0x10/0x10 [ 236.270417][ T8609] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.270444][ T8609] ? __pfx__printk+0x10/0x10 [ 236.270482][ T8609] ? __pfx___might_resched+0x10/0x10 [ 236.270507][ T8609] ? fs_reclaim_acquire+0x7d/0x100 [ 236.270541][ T8609] should_fail_ex+0x414/0x560 [ 236.270576][ T8609] should_failslab+0xa8/0x100 [ 236.270604][ T8609] __kmalloc_cache_noprof+0x70/0x3d0 [ 236.270629][ T8609] ? __xdp_reg_mem_model+0x1d8/0x5a0 [ 236.270661][ T8609] __xdp_reg_mem_model+0x1d8/0x5a0 [ 236.270694][ T8609] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 236.270727][ T8609] ? page_pool_create_percpu+0x800/0xbe0 [ 236.270761][ T8609] xdp_reg_mem_model+0x22/0x40 [ 236.270785][ T8609] bpf_test_run_xdp_live+0x215/0x1b10 [ 236.270809][ T8609] ? __pfx_css_rstat_updated+0x10/0x10 [ 236.270862][ T8609] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 236.270887][ T8609] ? __up_read+0x280/0x680 [ 236.270948][ T8609] ? irqentry_exit+0x74/0x90 [ 236.270977][ T8609] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.271007][ T8609] ? irqentry_exit+0x74/0x90 [ 236.271033][ T8609] ? exc_page_fault+0x9f/0xf0 [ 236.271073][ T8609] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 236.271102][ T8609] ? rep_movs_alternative+0x4a/0x90 [ 236.271136][ T8609] ? _copy_from_user+0x94/0xb0 [ 236.271160][ T8609] ? bpf_test_init+0x133/0x170 [ 236.271179][ T8609] ? xdp_convert_md_to_buff+0x5b/0x330 [ 236.271206][ T8609] bpf_prog_test_run_xdp+0x713/0x1000 [ 236.271248][ T8609] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 236.271278][ T8609] ? __fget_files+0x2a/0x420 [ 236.271312][ T8609] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 236.271336][ T8609] bpf_prog_test_run+0x2c4/0x340 [ 236.271365][ T8609] __sys_bpf+0x581/0x870 [ 236.271390][ T8609] ? __pfx___sys_bpf+0x10/0x10 [ 236.271428][ T8609] ? ksys_write+0x22a/0x250 [ 236.271454][ T8609] ? __pfx_ksys_write+0x10/0x10 [ 236.271474][ T8609] ? rcu_is_watching+0x15/0xb0 [ 236.271509][ T8609] __x64_sys_bpf+0x7c/0x90 [ 236.271544][ T8609] do_syscall_64+0xfa/0x3b0 [ 236.271573][ T8609] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.271601][ T8609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.271622][ T8609] ? clear_bhb_loop+0x60/0xb0 [ 236.271650][ T8609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.271671][ T8609] RIP: 0033:0x7f87bf98e9a9 [ 236.271691][ T8609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.271709][ T8609] RSP: 002b:00007f87c08e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 236.271732][ T8609] RAX: ffffffffffffffda RBX: 00007f87bfbb5fa0 RCX: 00007f87bf98e9a9 [ 236.271748][ T8609] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 236.271761][ T8609] RBP: 00007f87c08e4090 R08: 0000000000000000 R09: 0000000000000000 [ 236.271775][ T8609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.271787][ T8609] R13: 0000000000000000 R14: 00007f87bfbb5fa0 R15: 00007ffcad2ebc38 [ 236.271822][ T8609] [ 236.752136][ T8597] veth0_vlan: left promiscuous mode [ 236.762064][ T8597] veth0_vlan: entered promiscuous mode [ 236.774006][ T8597] team0: Device veth0_vlan failed to register rx_handler [ 237.083898][ T8630] @ÿ: renamed from bond_slave_0 (while UP) [ 237.367053][ T8639] netlink: 'syz.0.858': attribute type 6 has an invalid length. [ 237.411663][ T8639] netlink: 164 bytes leftover after parsing attributes in process `syz.0.858'. [ 237.794529][ T8656] netlink: 'syz.4.864': attribute type 10 has an invalid length. [ 237.806223][ T8656] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.864'. [ 240.529386][ T8744] netlink: 'syz.0.894': attribute type 9 has an invalid length. [ 240.550038][ T8744] netlink: 40451 bytes leftover after parsing attributes in process `syz.0.894'. [ 240.604992][ T8742] netlink: 'syz.3.893': attribute type 12 has an invalid length. [ 240.640909][ T8742] netlink: 120 bytes leftover after parsing attributes in process `syz.3.893'. [ 241.028059][ T8763] FAULT_INJECTION: forcing a failure. [ 241.028059][ T8763] name failslab, interval 1, probability 0, space 0, times 0 [ 241.060919][ T8763] CPU: 0 UID: 0 PID: 8763 Comm: syz.3.902 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 241.060951][ T8763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 241.060974][ T8763] Call Trace: [ 241.060983][ T8763] [ 241.060992][ T8763] dump_stack_lvl+0x189/0x250 [ 241.061024][ T8763] ? __pfx____ratelimit+0x10/0x10 [ 241.061053][ T8763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.061079][ T8763] ? __pfx__printk+0x10/0x10 [ 241.061118][ T8763] ? __pfx___might_resched+0x10/0x10 [ 241.061153][ T8763] should_fail_ex+0x414/0x560 [ 241.061190][ T8763] should_failslab+0xa8/0x100 [ 241.061220][ T8763] __kmalloc_cache_noprof+0x70/0x3d0 [ 241.061245][ T8763] ? rtnl_newlink+0xed/0x1c70 [ 241.061264][ T8763] ? kasan_save_free_info+0x46/0x50 [ 241.061300][ T8763] rtnl_newlink+0xed/0x1c70 [ 241.061319][ T8763] ? netlink_sendmsg+0x805/0xb30 [ 241.061341][ T8763] ? __sock_sendmsg+0x219/0x270 [ 241.061369][ T8763] ? sock_write_iter+0x258/0x330 [ 241.061396][ T8763] ? vfs_write+0x54b/0xa90 [ 241.061415][ T8763] ? ksys_write+0x145/0x250 [ 241.061434][ T8763] ? do_syscall_64+0xfa/0x3b0 [ 241.061462][ T8763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.061495][ T8763] ? __pfx_rtnl_newlink+0x10/0x10 [ 241.061522][ T8763] ? perf_trace_preemptirq_template+0xa3/0x340 [ 241.061565][ T8763] ? kasan_quarantine_put+0x3d/0x220 [ 241.061588][ T8763] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 241.061642][ T8763] ? perf_trace_preemptirq_template+0xa3/0x340 [ 241.061676][ T8763] ? __local_bh_enable_ip+0xce/0x1c0 [ 241.061704][ T8763] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 241.061737][ T8763] ? perf_trace_lock+0xec/0x3b0 [ 241.061761][ T8763] ? nlmon_xmit+0xb0/0x100 [ 241.061794][ T8763] ? __local_bh_enable_ip+0x12d/0x1c0 [ 241.061819][ T8763] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.061850][ T8763] ? __local_bh_enable_ip+0x12d/0x1c0 [ 241.061875][ T8763] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 241.061905][ T8763] ? __dev_queue_xmit+0x27e/0x3a70 [ 241.061941][ T8763] ? perf_trace_lock+0xec/0x3b0 [ 241.061974][ T8763] ? __pfx_perf_trace_lock+0x10/0x10 [ 241.062011][ T8763] ? rcu_read_unlock+0x87/0xa0 [ 241.062060][ T8763] ? __pfx_rtnl_newlink+0x10/0x10 [ 241.062081][ T8763] rtnetlink_rcv_msg+0x7cc/0xb70 [ 241.062108][ T8763] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 241.062128][ T8763] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 241.062147][ T8763] ? ref_tracker_free+0x63a/0x7d0 [ 241.062176][ T8763] ? __copy_skb_header+0xa7/0x550 [ 241.062205][ T8763] ? __pfx_ref_tracker_free+0x10/0x10 [ 241.062236][ T8763] ? __skb_clone+0x63/0x7a0 [ 241.062274][ T8763] netlink_rcv_skb+0x208/0x470 [ 241.062298][ T8763] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 241.062330][ T8763] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 241.062371][ T8763] ? netlink_deliver_tap+0x2e/0x1b0 [ 241.062393][ T8763] ? netlink_deliver_tap+0x2e/0x1b0 [ 241.062424][ T8763] netlink_unicast+0x75b/0x8d0 [ 241.062473][ T8763] netlink_sendmsg+0x805/0xb30 [ 241.062510][ T8763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.062538][ T8763] ? aa_sock_msg_perm+0x94/0x160 [ 241.062579][ T8763] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 241.062610][ T8763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.062635][ T8763] __sock_sendmsg+0x219/0x270 [ 241.062672][ T8763] sock_write_iter+0x258/0x330 [ 241.062706][ T8763] ? __pfx_sock_write_iter+0x10/0x10 [ 241.062733][ T8763] ? perf_trace_lock+0xec/0x3b0 [ 241.062773][ T8763] ? bpf_lsm_file_permission+0x9/0x20 [ 241.062791][ T8763] ? security_file_permission+0x75/0x290 [ 241.062829][ T8763] vfs_write+0x54b/0xa90 [ 241.062858][ T8763] ? __pfx_sock_write_iter+0x10/0x10 [ 241.062895][ T8763] ? __pfx_vfs_write+0x10/0x10 [ 241.062932][ T8763] ? __fget_files+0x2a/0x420 [ 241.062971][ T8763] ksys_write+0x145/0x250 [ 241.062998][ T8763] ? __pfx_ksys_write+0x10/0x10 [ 241.063017][ T8763] ? rcu_is_watching+0x15/0xb0 [ 241.063057][ T8763] ? do_syscall_64+0xbe/0x3b0 [ 241.063092][ T8763] do_syscall_64+0xfa/0x3b0 [ 241.063120][ T8763] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.063148][ T8763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.063169][ T8763] ? clear_bhb_loop+0x60/0xb0 [ 241.063197][ T8763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.063218][ T8763] RIP: 0033:0x7fdad1d8e9a9 [ 241.063238][ T8763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.063256][ T8763] RSP: 002b:00007fdacfbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 241.063279][ T8763] RAX: ffffffffffffffda RBX: 00007fdad1fb5fa0 RCX: 00007fdad1d8e9a9 [ 241.063295][ T8763] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 241.063309][ T8763] RBP: 00007fdacfbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 241.063322][ T8763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.063334][ T8763] R13: 0000000000000000 R14: 00007fdad1fb5fa0 R15: 00007fffd1624548 [ 241.063371][ T8763] [ 241.793719][ T8772] netlink: 152 bytes leftover after parsing attributes in process `syz.2.904'. [ 241.964593][ T8768] netlink: 'syz.2.904': attribute type 39 has an invalid length. [ 241.989538][ T8768] veth0_macvtap: left promiscuous mode [ 242.673296][ T8787] netlink: 160 bytes leftover after parsing attributes in process `syz.4.910'. [ 244.210930][ T8843] lo: entered promiscuous mode [ 245.328468][ T8872] netlink: 'syz.2.943': attribute type 29 has an invalid length. [ 245.382644][ T8877] FAULT_INJECTION: forcing a failure. [ 245.382644][ T8877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.412328][ T8877] CPU: 0 UID: 0 PID: 8877 Comm: syz.1.945 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 245.412387][ T8877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 245.412402][ T8877] Call Trace: [ 245.412411][ T8877] [ 245.412420][ T8877] dump_stack_lvl+0x189/0x250 [ 245.412453][ T8877] ? __pfx____ratelimit+0x10/0x10 [ 245.412484][ T8877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.412510][ T8877] ? __pfx__printk+0x10/0x10 [ 245.412555][ T8877] should_fail_ex+0x414/0x560 [ 245.412592][ T8877] _copy_to_user+0x31/0xb0 [ 245.412620][ T8877] bpf_test_finish+0x1ab/0x700 [ 245.412650][ T8877] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 245.412676][ T8877] ? __pfx_bpf_test_finish+0x10/0x10 [ 245.412697][ T8877] ? rep_movs_alternative+0x4a/0x90 [ 245.412727][ T8877] ? bpf_test_init+0x133/0x170 [ 245.412752][ T8877] bpf_prog_test_run_xdp+0x79a/0x1000 [ 245.412794][ T8877] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 245.412824][ T8877] ? __fget_files+0x2a/0x420 [ 245.412858][ T8877] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 245.412884][ T8877] bpf_prog_test_run+0x2c4/0x340 [ 245.412913][ T8877] __sys_bpf+0x581/0x870 [ 245.412938][ T8877] ? __pfx___sys_bpf+0x10/0x10 [ 245.412976][ T8877] ? ksys_write+0x22a/0x250 [ 245.413002][ T8877] ? __pfx_ksys_write+0x10/0x10 [ 245.413023][ T8877] ? rcu_is_watching+0x15/0xb0 [ 245.413058][ T8877] __x64_sys_bpf+0x7c/0x90 [ 245.413093][ T8877] do_syscall_64+0xfa/0x3b0 [ 245.413122][ T8877] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.413151][ T8877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.413173][ T8877] ? clear_bhb_loop+0x60/0xb0 [ 245.413201][ T8877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.413222][ T8877] RIP: 0033:0x7f40a938e9a9 [ 245.413242][ T8877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.413261][ T8877] RSP: 002b:00007f40aa25d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 245.413284][ T8877] RAX: ffffffffffffffda RBX: 00007f40a95b5fa0 RCX: 00007f40a938e9a9 [ 245.413300][ T8877] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 245.413314][ T8877] RBP: 00007f40aa25d090 R08: 0000000000000000 R09: 0000000000000000 [ 245.413328][ T8877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 245.413340][ T8877] R13: 0000000000000000 R14: 00007f40a95b5fa0 R15: 00007ffd2764eac8 [ 245.413380][ T8877] [ 246.045006][ T8890] netlink: 'syz.0.949': attribute type 15 has an invalid length. [ 246.109772][ T8890] netlink: 'syz.0.949': attribute type 7 has an invalid length. [ 247.118305][ T8919] netlink: 149044 bytes leftover after parsing attributes in process `syz.3.958'. [ 247.137713][ T8921] FAULT_INJECTION: forcing a failure. [ 247.137713][ T8921] name failslab, interval 1, probability 0, space 0, times 0 [ 247.150660][ T8921] CPU: 1 UID: 0 PID: 8921 Comm: syz.1.960 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 247.150688][ T8921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 247.150702][ T8921] Call Trace: [ 247.150714][ T8921] [ 247.150723][ T8921] dump_stack_lvl+0x189/0x250 [ 247.150756][ T8921] ? __pfx____ratelimit+0x10/0x10 [ 247.150786][ T8921] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.150811][ T8921] ? __pfx__printk+0x10/0x10 [ 247.150847][ T8921] ? __lock_acquire+0xab9/0xd20 [ 247.150879][ T8921] should_fail_ex+0x414/0x560 [ 247.150925][ T8921] should_failslab+0xa8/0x100 [ 247.150954][ T8921] kmem_cache_alloc_noprof+0x73/0x3c0 [ 247.150978][ T8921] ? skb_clone+0x212/0x3a0 [ 247.151004][ T8921] ? run_filter+0x23/0x270 [ 247.151035][ T8921] skb_clone+0x212/0x3a0 [ 247.151061][ T8921] ? packet_rcv+0x567/0x1590 [ 247.151088][ T8921] packet_rcv+0x6d6/0x1590 [ 247.151119][ T8921] ? __pfx_packet_rcv+0x10/0x10 [ 247.151145][ T8921] __netif_receive_skb_core+0x3882/0x4180 [ 247.151195][ T8921] ? __kernel_text_address+0xd/0x40 [ 247.151217][ T8921] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 247.151248][ T8921] ? arch_stack_walk+0xfc/0x150 [ 247.151283][ T8921] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 247.151322][ T8921] ? stack_trace_save+0x9c/0xe0 [ 247.151355][ T8921] ? stack_depot_save_flags+0x40/0x900 [ 247.151398][ T8921] ? kasan_save_track+0x4f/0x80 [ 247.151417][ T8921] ? kasan_save_track+0x3e/0x80 [ 247.151436][ T8921] ? __kasan_slab_alloc+0x6c/0x80 [ 247.151458][ T8921] ? bpf_test_run_xdp_live+0x15f1/0x1b10 [ 247.151490][ T8921] __netif_receive_skb_list_core+0x23f/0x800 [ 247.151541][ T8921] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 247.151587][ T8921] ? netif_receive_skb_list_internal+0x4fd/0xcc0 [ 247.151620][ T8921] netif_receive_skb_list_internal+0x975/0xcc0 [ 247.151657][ T8921] ? netif_receive_skb_list_internal+0x4fd/0xcc0 [ 247.151694][ T8921] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 247.151729][ T8921] ? __phys_addr+0xd3/0x180 [ 247.151758][ T8921] ? build_skb_around+0x133/0x280 [ 247.151785][ T8921] ? __xdp_build_skb_from_frame+0x34b/0x740 [ 247.151821][ T8921] netif_receive_skb_list+0x54/0x450 [ 247.151857][ T8921] bpf_test_run_xdp_live+0x1786/0x1b10 [ 247.151921][ T8921] ? bpf_test_run_xdp_live+0x38e/0x1b10 [ 247.151959][ T8921] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 247.151985][ T8921] ? __up_read+0x280/0x680 [ 247.152071][ T8921] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 247.152101][ T8921] ? rep_movs_alternative+0x4a/0x90 [ 247.152127][ T8921] ? _copy_from_user+0x94/0xb0 [ 247.152151][ T8921] ? bpf_test_init+0x133/0x170 [ 247.152170][ T8921] ? xdp_convert_md_to_buff+0x5b/0x330 [ 247.152197][ T8921] bpf_prog_test_run_xdp+0x713/0x1000 [ 247.152240][ T8921] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 247.152271][ T8921] ? __fget_files+0x2a/0x420 [ 247.152304][ T8921] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 247.152329][ T8921] bpf_prog_test_run+0x2c4/0x340 [ 247.152359][ T8921] __sys_bpf+0x581/0x870 [ 247.152385][ T8921] ? __pfx___sys_bpf+0x10/0x10 [ 247.152427][ T8921] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 247.152465][ T8921] ? __pfx_ksys_write+0x10/0x10 [ 247.152485][ T8921] ? rcu_is_watching+0x15/0xb0 [ 247.152521][ T8921] __x64_sys_bpf+0x7c/0x90 [ 247.152556][ T8921] do_syscall_64+0xfa/0x3b0 [ 247.152585][ T8921] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.152614][ T8921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.152635][ T8921] ? clear_bhb_loop+0x60/0xb0 [ 247.152663][ T8921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.152684][ T8921] RIP: 0033:0x7f40a938e9a9 [ 247.152705][ T8921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.152723][ T8921] RSP: 002b:00007f40aa25d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 247.152746][ T8921] RAX: ffffffffffffffda RBX: 00007f40a95b5fa0 RCX: 00007f40a938e9a9 [ 247.152762][ T8921] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 247.152775][ T8921] RBP: 00007f40aa25d090 R08: 0000000000000000 R09: 0000000000000000 [ 247.152788][ T8921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 247.152801][ T8921] R13: 0000000000000000 R14: 00007f40a95b5fa0 R15: 00007ffd2764eac8 [ 247.152836][ T8921] [ 247.879341][ T8935] FAULT_INJECTION: forcing a failure. [ 247.879341][ T8935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.981096][ T8935] CPU: 0 UID: 0 PID: 8935 Comm: syz.1.963 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 247.981130][ T8935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 247.981144][ T8935] Call Trace: [ 247.981158][ T8935] [ 247.981173][ T8935] dump_stack_lvl+0x189/0x250 [ 247.981218][ T8935] ? __pfx____ratelimit+0x10/0x10 [ 247.981262][ T8935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.981302][ T8935] ? __pfx__printk+0x10/0x10 [ 247.981351][ T8935] ? __might_fault+0xb0/0x130 [ 247.981463][ T8935] should_fail_ex+0x414/0x560 [ 247.981542][ T8935] _copy_from_user+0x2d/0xb0 [ 247.981584][ T8935] ___sys_sendmsg+0x158/0x2a0 [ 247.981644][ T8935] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.981924][ T8935] ? __fget_files+0x2a/0x420 [ 247.981956][ T8935] ? __fget_files+0x3a0/0x420 [ 247.982076][ T8935] __x64_sys_sendmsg+0x19b/0x260 [ 247.982137][ T8935] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 247.982241][ T8935] ? __pfx_ksys_write+0x10/0x10 [ 247.982263][ T8935] ? rcu_is_watching+0x15/0xb0 [ 247.982335][ T8935] ? do_syscall_64+0xbe/0x3b0 [ 247.982402][ T8935] do_syscall_64+0xfa/0x3b0 [ 247.982434][ T8935] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.982479][ T8935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.982506][ T8935] ? clear_bhb_loop+0x60/0xb0 [ 247.982560][ T8935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.982585][ T8935] RIP: 0033:0x7f40a938e9a9 [ 247.982614][ T8935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.982632][ T8935] RSP: 002b:00007f40aa25d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.982655][ T8935] RAX: ffffffffffffffda RBX: 00007f40a95b5fa0 RCX: 00007f40a938e9a9 [ 247.982672][ T8935] RDX: 000000002000c814 RSI: 00002000000002c0 RDI: 0000000000000006 [ 247.982686][ T8935] RBP: 00007f40aa25d090 R08: 0000000000000000 R09: 0000000000000000 [ 247.982699][ T8935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.982712][ T8935] R13: 0000000000000000 R14: 00007f40a95b5fa0 R15: 00007ffd2764eac8 [ 247.982829][ T8935] [ 249.044926][ T8961] netlink: 830 bytes leftover after parsing attributes in process `syz.2.969'. [ 249.289222][ T8966] FAULT_INJECTION: forcing a failure. [ 249.289222][ T8966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.344129][ T8966] CPU: 1 UID: 0 PID: 8966 Comm: syz.0.973 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 249.344163][ T8966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 249.344178][ T8966] Call Trace: [ 249.344187][ T8966] [ 249.344196][ T8966] dump_stack_lvl+0x189/0x250 [ 249.344230][ T8966] ? __pfx____ratelimit+0x10/0x10 [ 249.344261][ T8966] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.344293][ T8966] ? __pfx__printk+0x10/0x10 [ 249.344338][ T8966] should_fail_ex+0x414/0x560 [ 249.344375][ T8966] _copy_to_user+0x31/0xb0 [ 249.344402][ T8966] bpf_test_finish+0x1ab/0x700 [ 249.344433][ T8966] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 249.344459][ T8966] ? __pfx_bpf_test_finish+0x10/0x10 [ 249.344481][ T8966] ? rep_movs_alternative+0x4a/0x90 [ 249.344511][ T8966] ? bpf_test_init+0x133/0x170 [ 249.344536][ T8966] bpf_prog_test_run_xdp+0x79a/0x1000 [ 249.344579][ T8966] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 249.344609][ T8966] ? __fget_files+0x2a/0x420 [ 249.344643][ T8966] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 249.344668][ T8966] bpf_prog_test_run+0x2c4/0x340 [ 249.344699][ T8966] __sys_bpf+0x581/0x870 [ 249.344731][ T8966] ? __pfx___sys_bpf+0x10/0x10 [ 249.344772][ T8966] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 249.344810][ T8966] ? __pfx_ksys_write+0x10/0x10 [ 249.344831][ T8966] ? rcu_is_watching+0x15/0xb0 [ 249.344866][ T8966] __x64_sys_bpf+0x7c/0x90 [ 249.344902][ T8966] do_syscall_64+0xfa/0x3b0 [ 249.344932][ T8966] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.344961][ T8966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.344983][ T8966] ? clear_bhb_loop+0x60/0xb0 [ 249.345011][ T8966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.345033][ T8966] RIP: 0033:0x7f7bb578e9a9 [ 249.345052][ T8966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.345071][ T8966] RSP: 002b:00007f7bb65a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 249.345094][ T8966] RAX: ffffffffffffffda RBX: 00007f7bb59b5fa0 RCX: 00007f7bb578e9a9 [ 249.345110][ T8966] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 249.345124][ T8966] RBP: 00007f7bb65a0090 R08: 0000000000000000 R09: 0000000000000000 [ 249.345137][ T8966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 249.345150][ T8966] R13: 0000000000000000 R14: 00007f7bb59b5fa0 R15: 00007ffc329c6b28 [ 249.345185][ T8966] [ 250.237919][ T8986] netlink: 'syz.4.981': attribute type 10 has an invalid length. [ 250.419679][ T8995] FAULT_INJECTION: forcing a failure. [ 250.419679][ T8995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.434179][ T8995] CPU: 0 UID: 0 PID: 8995 Comm: syz.3.984 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 250.434209][ T8995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 250.434223][ T8995] Call Trace: [ 250.434232][ T8995] [ 250.434241][ T8995] dump_stack_lvl+0x189/0x250 [ 250.434272][ T8995] ? __pfx____ratelimit+0x10/0x10 [ 250.434302][ T8995] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.434328][ T8995] ? __pfx__printk+0x10/0x10 [ 250.434373][ T8995] should_fail_ex+0x414/0x560 [ 250.434410][ T8995] _copy_to_user+0x31/0xb0 [ 250.434437][ T8995] bpf_test_finish+0x24e/0x700 [ 250.434467][ T8995] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 250.434493][ T8995] ? __pfx_bpf_test_finish+0x10/0x10 [ 250.434515][ T8995] ? rep_movs_alternative+0x4a/0x90 [ 250.434543][ T8995] ? bpf_test_init+0x133/0x170 [ 250.434568][ T8995] bpf_prog_test_run_xdp+0x79a/0x1000 [ 250.434610][ T8995] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 250.434640][ T8995] ? __fget_files+0x2a/0x420 [ 250.434674][ T8995] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 250.434698][ T8995] bpf_prog_test_run+0x2c4/0x340 [ 250.434727][ T8995] __sys_bpf+0x581/0x870 [ 250.434750][ T8995] ? __pfx___sys_bpf+0x10/0x10 [ 250.434788][ T8995] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 250.434838][ T8995] ? __pfx_ksys_write+0x10/0x10 [ 250.434858][ T8995] ? rcu_is_watching+0x15/0xb0 [ 250.434893][ T8995] __x64_sys_bpf+0x7c/0x90 [ 250.434927][ T8995] do_syscall_64+0xfa/0x3b0 [ 250.434956][ T8995] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.434984][ T8995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.435006][ T8995] ? clear_bhb_loop+0x60/0xb0 [ 250.435033][ T8995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.435055][ T8995] RIP: 0033:0x7fdad1d8e9a9 [ 250.435075][ T8995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.435093][ T8995] RSP: 002b:00007fdacfbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 250.435116][ T8995] RAX: ffffffffffffffda RBX: 00007fdad1fb5fa0 RCX: 00007fdad1d8e9a9 [ 250.435132][ T8995] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 250.435146][ T8995] RBP: 00007fdacfbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 250.435159][ T8995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 250.435171][ T8995] R13: 0000000000000000 R14: 00007fdad1fb5fa0 R15: 00007fffd1624548 [ 250.435205][ T8995] [ 250.807040][ T9007] netlink: 'syz.2.988': attribute type 39 has an invalid length. [ 251.105737][ T9019] ÿÿÿÿÿÿ: renamed from veth1_to_batadv (while UP) [ 252.092990][ T9024] netlink: 'syz.4.992': attribute type 21 has an invalid length. [ 252.100983][ T9024] netlink: 14317 bytes leftover after parsing attributes in process `syz.4.992'. [ 252.127601][ T9024] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.992'. [ 252.137733][ T9024] net_ratelimit: 76 callbacks suppressed [ 252.137753][ T9024] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 252.351429][ T9031] netlink: 60 bytes leftover after parsing attributes in process `syz.4.996'. [ 252.393816][ T9034] netlink: 60 bytes leftover after parsing attributes in process `syz.4.996'. [ 252.640438][ T9047] FAULT_INJECTION: forcing a failure. [ 252.640438][ T9047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.659493][ T9047] CPU: 1 UID: 0 PID: 9047 Comm: syz.1.999 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 252.659526][ T9047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 252.659539][ T9047] Call Trace: [ 252.659548][ T9047] [ 252.659558][ T9047] dump_stack_lvl+0x189/0x250 [ 252.659591][ T9047] ? __pfx____ratelimit+0x10/0x10 [ 252.659621][ T9047] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.659648][ T9047] ? __pfx__printk+0x10/0x10 [ 252.659697][ T9047] should_fail_ex+0x414/0x560 [ 252.659735][ T9047] _copy_to_user+0x31/0xb0 [ 252.659762][ T9047] bpf_test_finish+0x56f/0x700 [ 252.659794][ T9047] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 252.659821][ T9047] ? __pfx_bpf_test_finish+0x10/0x10 [ 252.659842][ T9047] ? rep_movs_alternative+0x4a/0x90 [ 252.659872][ T9047] ? bpf_test_init+0x133/0x170 [ 252.659898][ T9047] bpf_prog_test_run_xdp+0x79a/0x1000 [ 252.659945][ T9047] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 252.659976][ T9047] ? __fget_files+0x2a/0x420 [ 252.660011][ T9047] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 252.660036][ T9047] bpf_prog_test_run+0x2c4/0x340 [ 252.660067][ T9047] __sys_bpf+0x581/0x870 [ 252.660093][ T9047] ? __pfx___sys_bpf+0x10/0x10 [ 252.660134][ T9047] ? ksys_write+0x22a/0x250 [ 252.660161][ T9047] ? __pfx_ksys_write+0x10/0x10 [ 252.660181][ T9047] ? rcu_is_watching+0x15/0xb0 [ 252.660218][ T9047] __x64_sys_bpf+0x7c/0x90 [ 252.660253][ T9047] do_syscall_64+0xfa/0x3b0 [ 252.660282][ T9047] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.660318][ T9047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.660340][ T9047] ? clear_bhb_loop+0x60/0xb0 [ 252.660368][ T9047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.660390][ T9047] RIP: 0033:0x7f40a938e9a9 [ 252.660410][ T9047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.660427][ T9047] RSP: 002b:00007f40aa25d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 252.660451][ T9047] RAX: ffffffffffffffda RBX: 00007f40a95b5fa0 RCX: 00007f40a938e9a9 [ 252.660467][ T9047] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 252.660481][ T9047] RBP: 00007f40aa25d090 R08: 0000000000000000 R09: 0000000000000000 [ 252.660494][ T9047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 252.660507][ T9047] R13: 0000000000000000 R14: 00007f40a95b5fa0 R15: 00007ffd2764eac8 [ 252.660545][ T9047] [ 253.683341][ T9076] netlink: 'syz.3.1008': attribute type 10 has an invalid length. [ 253.818793][ T9076] batman_adv: batadv0: Adding interface: team0 [ 253.955674][ T9076] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.077483][ T9076] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 254.121109][ T9080] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1008'. [ 254.281939][ T9080] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 254.877851][ T9099] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1015'. [ 254.981991][ T9104] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1014'. [ 257.208208][ T9146] À: port 1(vlan0) entered blocking state [ 257.235900][ T9146] À: port 1(vlan0) entered disabled state [ 257.269861][ T9146] vlan0: entered allmulticast mode [ 257.290922][ T9146] veth0_vlan: entered allmulticast mode [ 257.326678][ T9146] vlan0: entered promiscuous mode [ 257.470846][ T9149] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1033'. [ 260.989517][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.008305][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.663905][ T9193] netlink: 'syz.1.1047': attribute type 10 has an invalid length. [ 261.688291][ T9193] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1047'. [ 263.893673][ T9217] netlink: 'syz.2.1054': attribute type 13 has an invalid length. [ 263.905809][ T9217] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1054'. [ 265.668628][ T9217] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 267.732722][ T9253] netlink: 'syz.0.1068': attribute type 10 has an invalid length. [ 267.740642][ T9253] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1068'. [ 267.817987][ T9258] netlink: 'syz.2.1069': attribute type 6 has an invalid length. [ 267.826612][ T9258] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1069'. [ 267.928095][ T9256] netlink: 1053 bytes leftover after parsing attributes in process `syz.3.1066'. [ 269.534976][ T9301] netlink: 'syz.2.1086': attribute type 16 has an invalid length. [ 269.555403][ T9301] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1086'. [ 269.685080][ T9308] netlink: 'syz.4.1088': attribute type 2 has an invalid length. [ 269.753132][ T9308] netlink: 126524 bytes leftover after parsing attributes in process `syz.4.1088'. [ 272.013247][ T9366] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.1107'. [ 275.021403][ T9443] netlink: 'syz.1.1141': attribute type 17 has an invalid length. [ 275.370331][ T9462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1148'. [ 276.411743][ T9518] netlink: 'syz.0.1169': attribute type 10 has an invalid length. [ 278.109201][ T9580] IPv6: NLM_F_CREATE should be specified when creating new route [ 280.638454][ T9591] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.848062][ T9618] netlink: 'syz.0.1198': attribute type 29 has an invalid length. [ 280.900842][ T9616] netlink: 'syz.0.1198': attribute type 29 has an invalid length. [ 282.258744][ T9655] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.1213'. [ 282.837622][ T9664] netlink: 'syz.3.1217': attribute type 3 has an invalid length. [ 282.853236][ T9664] netlink: 'syz.3.1217': attribute type 1 has an invalid length. [ 282.867471][ T9664] netlink: 191152 bytes leftover after parsing attributes in process `syz.3.1217'. [ 283.356929][ T9692] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1225'. [ 283.748287][ T51] Bluetooth: hci3: Malformed Event: 0x13 [ 284.408267][ T9723] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 284.439326][ T9723] netlink: 'syz.4.1238': attribute type 10 has an invalid length. [ 284.487730][ T9723] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 285.282216][ T9763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1251'. [ 285.872642][ T9781] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1256'. [ 285.901067][ T9781] openvswitch: netlink: Message has 4 unknown bytes. [ 285.949296][ T9781] netlink: 'syz.3.1256': attribute type 21 has an invalid length. [ 286.514202][ T9806] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1266'. [ 287.617695][ T9836] netlink: 'syz.0.1277': attribute type 10 has an invalid length. [ 288.224148][ T9836] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 288.763868][ T9869] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1289'. [ 289.664906][ T9879] netlink: 'syz.1.1293': attribute type 29 has an invalid length. [ 289.711689][ T9879] netlink: 'syz.1.1293': attribute type 3 has an invalid length. [ 289.719541][ T9879] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1293'. [ 290.591507][ T9912] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1304'. [ 290.644219][ T9909] netlink: 'syz.4.1300': attribute type 10 has an invalid length. [ 290.670194][ T9909] bond0: (slave bond_slave_0): Releasing backup interface [ 293.081257][ T9970] FAULT_INJECTION: forcing a failure. [ 293.081257][ T9970] name failslab, interval 1, probability 0, space 0, times 0 [ 293.094350][ T9970] CPU: 1 UID: 0 PID: 9970 Comm: syz.2.1324 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 293.094378][ T9970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 293.094391][ T9970] Call Trace: [ 293.094400][ T9970] [ 293.094410][ T9970] dump_stack_lvl+0x189/0x250 [ 293.094443][ T9970] ? __pfx____ratelimit+0x10/0x10 [ 293.094475][ T9970] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.094503][ T9970] ? __pfx__printk+0x10/0x10 [ 293.094539][ T9970] ? __pfx___might_resched+0x10/0x10 [ 293.094566][ T9970] ? fs_reclaim_acquire+0x7d/0x100 [ 293.094604][ T9970] should_fail_ex+0x414/0x560 [ 293.094644][ T9970] should_failslab+0xa8/0x100 [ 293.094674][ T9970] __kmalloc_noprof+0xcb/0x4f0 [ 293.094698][ T9970] ? tomoyo_encode+0x28b/0x550 [ 293.094740][ T9970] tomoyo_encode+0x28b/0x550 [ 293.094783][ T9970] tomoyo_realpath_from_path+0x58d/0x5d0 [ 293.094836][ T9970] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 293.094866][ T9970] tomoyo_path_number_perm+0x1e8/0x5a0 [ 293.094901][ T9970] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 293.094938][ T9970] ? perf_trace_lock_acquire+0xf5/0x410 [ 293.095030][ T9970] ? __fget_files+0x2a/0x420 [ 293.095064][ T9970] ? __fget_files+0x2a/0x420 [ 293.095089][ T9970] ? __fget_files+0x3a0/0x420 [ 293.095115][ T9970] ? __fget_files+0x2a/0x420 [ 293.095150][ T9970] security_file_ioctl+0xcb/0x2d0 [ 293.095182][ T9970] __se_sys_ioctl+0x47/0x170 [ 293.095212][ T9970] do_syscall_64+0xfa/0x3b0 [ 293.095243][ T9970] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.095272][ T9970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.095294][ T9970] ? clear_bhb_loop+0x60/0xb0 [ 293.095325][ T9970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.095346][ T9970] RIP: 0033:0x7ff32bd8e9a9 [ 293.095367][ T9970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.095387][ T9970] RSP: 002b:00007ff32cb81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 293.095412][ T9970] RAX: ffffffffffffffda RBX: 00007ff32bfb5fa0 RCX: 00007ff32bd8e9a9 [ 293.095429][ T9970] RDX: 0000000000000000 RSI: 0000000080044943 RDI: 0000000000000004 [ 293.095443][ T9970] RBP: 00007ff32cb81090 R08: 0000000000000000 R09: 0000000000000000 [ 293.095456][ T9970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.095470][ T9970] R13: 0000000000000000 R14: 00007ff32bfb5fa0 R15: 00007fff6f6bd8a8 [ 293.095512][ T9970] [ 293.095638][ T9970] ERROR: Out of memory at tomoyo_realpath_from_path. [ 293.304483][ T9974] nbd: must specify at least one socket [ 293.549731][ T9982] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1327'. [ 293.577090][ T9982] netlink: zone id is out of range [ 293.601354][ T9982] netlink: zone id is out of range [ 293.607247][ T9982] netlink: zone id is out of range [ 293.648228][ T9982] netlink: get zone limit has 8 unknown bytes [ 293.881897][ T9991] syzkaller0: entered promiscuous mode [ 293.893269][ T9991] syzkaller0: entered allmulticast mode [ 294.934394][T10021] FAULT_INJECTION: forcing a failure. [ 294.934394][T10021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.018661][T10021] CPU: 0 UID: 0 PID: 10021 Comm: syz.3.1340 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 295.018696][T10021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 295.018710][T10021] Call Trace: [ 295.018721][T10021] [ 295.018732][T10021] dump_stack_lvl+0x189/0x250 [ 295.018770][T10021] ? __pfx____ratelimit+0x10/0x10 [ 295.018806][T10021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.018839][T10021] ? __pfx__printk+0x10/0x10 [ 295.018887][T10021] ? __might_fault+0xb0/0x130 [ 295.018935][T10021] should_fail_ex+0x414/0x560 [ 295.018988][T10021] _copy_to_user+0x31/0xb0 [ 295.019031][T10021] simple_read_from_buffer+0xe1/0x170 [ 295.019078][T10021] proc_fail_nth_read+0x1df/0x250 [ 295.019123][T10021] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 295.019169][T10021] ? rw_verify_area+0x258/0x650 [ 295.019194][T10021] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 295.019235][T10021] vfs_read+0x1fd/0x980 [ 295.019282][T10021] ? __pfx___mutex_lock+0x10/0x10 [ 295.019320][T10021] ? __pfx_vfs_read+0x10/0x10 [ 295.019355][T10021] ? __fget_files+0x2a/0x420 [ 295.019401][T10021] ? __fget_files+0x3a0/0x420 [ 295.019429][T10021] ? __fget_files+0x2a/0x420 [ 295.019490][T10021] ksys_read+0x145/0x250 [ 295.019528][T10021] ? __pfx_ksys_read+0x10/0x10 [ 295.019575][T10021] ? do_syscall_64+0xbe/0x3b0 [ 295.019626][T10021] do_syscall_64+0xfa/0x3b0 [ 295.019657][T10021] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.019684][T10021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.019705][T10021] ? clear_bhb_loop+0x60/0xb0 [ 295.019743][T10021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.019766][T10021] RIP: 0033:0x7fdad1d8d3bc [ 295.019789][T10021] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 295.019809][T10021] RSP: 002b:00007fdacfbf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 295.019833][T10021] RAX: ffffffffffffffda RBX: 00007fdad1fb5fa0 RCX: 00007fdad1d8d3bc [ 295.019849][T10021] RDX: 000000000000000f RSI: 00007fdacfbf60a0 RDI: 0000000000000005 [ 295.019863][T10021] RBP: 00007fdacfbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 295.019877][T10021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.019891][T10021] R13: 0000000000000000 R14: 00007fdad1fb5fa0 R15: 00007fffd1624548 [ 295.019960][T10021] [ 295.453029][T10024] netlink: 'syz.3.1341': attribute type 10 has an invalid length. [ 299.407961][T10024] veth0_vlan: left promiscuous mode [ 299.419118][T10024] veth0_vlan: entered promiscuous mode [ 299.443328][T10024] team0: Device veth0_vlan failed to register rx_handler [ 300.109054][T10076] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1356'. [ 300.243151][T10081] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1357'. [ 301.058357][T10090] netlink: 'syz.1.1362': attribute type 13 has an invalid length. [ 301.109394][T10090] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1362'. [ 302.468093][T10090] net veth1_virt_wifi ÿÿÿÿÿÿaaaaaaaaa: refused to change device tx_queue_len [ 302.636763][T10107] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1366'. [ 303.036406][T10129] netlink: 'syz.3.1376': attribute type 10 has an invalid length. [ 303.048528][T10129] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1376'. [ 303.058252][T10129] dummy0: entered promiscuous mode [ 304.810087][T10187] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1393'. [ 305.101492][T10187] netlink: 'syz.2.1393': attribute type 10 has an invalid length. [ 305.165942][T10187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.187340][T10187] batadv0: entered promiscuous mode [ 305.195039][T10187] batadv0: entered allmulticast mode [ 305.222532][T10187] team0: Port device batadv0 added [ 305.335781][ T1319] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 305.345376][ T1319] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 305.428310][T10202] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1397'. [ 305.875858][T10212] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1398'. [ 305.932387][T10208] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1398'. [ 306.450609][T10226] netlink: 16054 bytes leftover after parsing attributes in process `syz.3.1403'. [ 308.785867][T10267] netlink: 'syz.2.1416': attribute type 10 has an invalid length. [ 311.043777][T10338] mac80211_hwsim hwsim3 .3ãc¤±: renamed from wlan1 (while UP) [ 311.076043][ T51] Bluetooth: hci2: ISO packet for unknown connection handle 1279 [ 311.087500][ T51] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 311.326518][T10349] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1441'. [ 311.734039][T10364] netlink: 'syz.3.1446': attribute type 10 has an invalid length. [ 311.809570][T10364] team0: Device ipvlan1 failed to register rx_handler [ 312.126497][T10371] netlink: 'syz.0.1450': attribute type 10 has an invalid length. [ 312.150615][T10371] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1450'. [ 312.168363][T10371] dummy0: left allmulticast mode [ 312.174424][T10371] bridge0: port 3(dummy0) entered disabled state [ 313.435536][T10427] netlink: 'syz.2.1472': attribute type 10 has an invalid length. [ 313.536814][T10427] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 313.548313][T10427] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 313.597124][T10427] team0: Port device wlan1 added [ 314.186435][T10462] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1481'. [ 314.226849][T10457] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1481'. [ 314.256194][T10462] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1481'. [ 316.145569][T10539] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1514'. [ 316.830524][T10549] bridge0: port 3(team0) entered disabled state [ 316.838980][T10549] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.849575][T10549] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.897329][T10549] bridge0: port 3(team0) entered disabled state [ 317.202997][T10549] bridge_slave_1: left allmulticast mode [ 317.208888][T10549] bridge_slave_1: left promiscuous mode [ 317.226128][T10549] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.358929][T10549] bridge_slave_0: left allmulticast mode [ 317.380328][T10549] bridge_slave_0: left promiscuous mode [ 317.394571][T10549] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.162791][T10573] FAULT_INJECTION: forcing a failure. [ 318.162791][T10573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.176043][T10573] CPU: 0 UID: 0 PID: 10573 Comm: syz.1.1523 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 318.176073][T10573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 318.176086][T10573] Call Trace: [ 318.176099][T10573] [ 318.176112][T10573] dump_stack_lvl+0x189/0x250 [ 318.176154][T10573] ? __pfx____ratelimit+0x10/0x10 [ 318.176195][T10573] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.176232][T10573] ? __pfx__printk+0x10/0x10 [ 318.176291][T10573] ? trace_call_bpf+0x5ba/0x850 [ 318.176363][T10573] should_fail_ex+0x414/0x560 [ 318.176432][T10573] strncpy_from_user+0x36/0x290 [ 318.176495][T10573] strncpy_from_user_nofault+0x72/0x150 [ 318.176554][T10573] bpf_probe_read_user_str+0x2a/0x70 [ 318.176612][T10573] bpf_prog_6ac03d064e4fcc51+0x40/0x6c [ 318.176653][T10573] __bpf_prog_test_run_raw_tp+0x1f7/0x430 [ 318.176695][T10573] ? __bpf_prog_test_run_raw_tp+0xcb/0x430 [ 318.176737][T10573] ? __pfx___bpf_prog_test_run_raw_tp+0x10/0x10 [ 318.176827][T10573] bpf_prog_test_run_raw_tp+0x3e3/0x6a0 [ 318.176892][T10573] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 318.176932][T10573] ? __fget_files+0x2a/0x420 [ 318.176996][T10573] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 318.177033][T10573] bpf_prog_test_run+0x2c4/0x340 [ 318.177093][T10573] __sys_bpf+0x581/0x870 [ 318.177139][T10573] ? __pfx___sys_bpf+0x10/0x10 [ 318.177258][T10573] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 318.177306][T10573] ? __pfx_ksys_write+0x10/0x10 [ 318.177326][T10573] ? rcu_is_watching+0x15/0xb0 [ 318.177403][T10573] __x64_sys_bpf+0x7c/0x90 [ 318.177452][T10573] do_syscall_64+0xfa/0x3b0 [ 318.177482][T10573] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.177517][T10573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.177543][T10573] ? clear_bhb_loop+0x60/0xb0 [ 318.177598][T10573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.177621][T10573] RIP: 0033:0x7f40a938e9a9 [ 318.177647][T10573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.177666][T10573] RSP: 002b:00007f40aa25d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 318.177689][T10573] RAX: ffffffffffffffda RBX: 00007f40a95b5fa0 RCX: 00007f40a938e9a9 [ 318.177705][T10573] RDX: 000000000000000c RSI: 0000200000000380 RDI: 000000000000000a [ 318.177719][T10573] RBP: 00007f40aa25d090 R08: 0000000000000000 R09: 0000000000000000 [ 318.177733][T10573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.177746][T10573] R13: 0000000000000000 R14: 00007f40a95b5fa0 R15: 00007ffd2764eac8 [ 318.177853][T10573] [ 319.577660][T10598] FAULT_INJECTION: forcing a failure. [ 319.577660][T10598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.599848][T10598] CPU: 1 UID: 0 PID: 10598 Comm: syz.3.1534 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 319.599882][T10598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 319.599896][T10598] Call Trace: [ 319.599905][T10598] [ 319.599915][T10598] dump_stack_lvl+0x189/0x250 [ 319.599947][T10598] ? __pfx____ratelimit+0x10/0x10 [ 319.599977][T10598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.600004][T10598] ? __pfx__printk+0x10/0x10 [ 319.600050][T10598] should_fail_ex+0x414/0x560 [ 319.600086][T10598] _copy_to_user+0x31/0xb0 [ 319.600114][T10598] bpf_prog_test_run_raw_tp+0x503/0x6a0 [ 319.600146][T10598] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 319.600172][T10598] ? __fget_files+0x2a/0x420 [ 319.600205][T10598] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 319.600229][T10598] bpf_prog_test_run+0x2c4/0x340 [ 319.600259][T10598] __sys_bpf+0x581/0x870 [ 319.600284][T10598] ? __pfx___sys_bpf+0x10/0x10 [ 319.600322][T10598] ? ksys_write+0x22a/0x250 [ 319.600348][T10598] ? __pfx_ksys_write+0x10/0x10 [ 319.600367][T10598] ? rcu_is_watching+0x15/0xb0 [ 319.600409][T10598] __x64_sys_bpf+0x7c/0x90 [ 319.600444][T10598] do_syscall_64+0xfa/0x3b0 [ 319.600474][T10598] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.600503][T10598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.600525][T10598] ? clear_bhb_loop+0x60/0xb0 [ 319.600553][T10598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.600575][T10598] RIP: 0033:0x7fdad1d8e9a9 [ 319.600594][T10598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.600614][T10598] RSP: 002b:00007fdacfbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 319.600637][T10598] RAX: ffffffffffffffda RBX: 00007fdad1fb5fa0 RCX: 00007fdad1d8e9a9 [ 319.600654][T10598] RDX: 000000000000000c RSI: 0000200000000380 RDI: 000000000000000a [ 319.600669][T10598] RBP: 00007fdacfbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 319.600687][T10598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.600699][T10598] R13: 0000000000000000 R14: 00007fdad1fb5fa0 R15: 00007fffd1624548 [ 319.600731][T10598] [ 320.845414][T10638] FAULT_INJECTION: forcing a failure. [ 320.845414][T10638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.860564][T10638] CPU: 1 UID: 0 PID: 10638 Comm: syz.1.1546 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 320.860595][T10638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 320.860609][T10638] Call Trace: [ 320.860618][T10638] [ 320.860628][T10638] dump_stack_lvl+0x189/0x250 [ 320.860662][T10638] ? __pfx____ratelimit+0x10/0x10 [ 320.860695][T10638] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.860722][T10638] ? __pfx__printk+0x10/0x10 [ 320.860758][T10638] ? __might_fault+0xb0/0x130 [ 320.860790][T10638] should_fail_ex+0x414/0x560 [ 320.860824][T10638] _copy_to_user+0x31/0xb0 [ 320.860852][T10638] simple_read_from_buffer+0xe1/0x170 [ 320.860884][T10638] proc_fail_nth_read+0x1df/0x250 [ 320.860919][T10638] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 320.860954][T10638] ? rw_verify_area+0x258/0x650 [ 320.860975][T10638] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 320.861007][T10638] vfs_read+0x1fd/0x980 [ 320.861038][T10638] ? __pfx___mutex_lock+0x10/0x10 [ 320.861071][T10638] ? __pfx_vfs_read+0x10/0x10 [ 320.861105][T10638] ? __fget_files+0x2a/0x420 [ 320.861138][T10638] ? __fget_files+0x3a0/0x420 [ 320.861165][T10638] ? __fget_files+0x2a/0x420 [ 320.861203][T10638] ksys_read+0x145/0x250 [ 320.861229][T10638] ? __pfx_ksys_read+0x10/0x10 [ 320.861248][T10638] ? rcu_is_watching+0x15/0xb0 [ 320.861280][T10638] ? do_syscall_64+0xbe/0x3b0 [ 320.861317][T10638] do_syscall_64+0xfa/0x3b0 [ 320.861346][T10638] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.861374][T10638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.861397][T10638] ? clear_bhb_loop+0x60/0xb0 [ 320.861425][T10638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.861447][T10638] RIP: 0033:0x7f40a938d3bc [ 320.861467][T10638] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 320.861486][T10638] RSP: 002b:00007f40aa25d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 320.861510][T10638] RAX: ffffffffffffffda RBX: 00007f40a95b5fa0 RCX: 00007f40a938d3bc [ 320.861527][T10638] RDX: 000000000000000f RSI: 00007f40aa25d0a0 RDI: 0000000000000005 [ 320.861541][T10638] RBP: 00007f40aa25d090 R08: 0000000000000000 R09: 0000000000000000 [ 320.861554][T10638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.861567][T10638] R13: 0000000000000000 R14: 00007f40a95b5fa0 R15: 00007ffd2764eac8 [ 320.861606][T10638] [ 321.539095][T10658] netlink: 'syz.1.1554': attribute type 6 has an invalid length. [ 322.007342][T10669] netlink: 56847 bytes leftover after parsing attributes in process `syz.3.1558'. [ 322.405378][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.413407][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.563428][T10692] netlink: 'syz.2.1567': attribute type 16 has an invalid length. [ 322.571941][T10695] netlink: 'syz.2.1567': attribute type 16 has an invalid length. [ 322.579808][T10695] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1567'. [ 322.589698][T10692] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1567'. [ 323.227632][T10706] netlink: 'syz.2.1574': attribute type 39 has an invalid length. [ 323.787873][T10711] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1572'. [ 323.925182][T10711] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 324.778901][T10756] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 325.385044][T10750] netlink: 'syz.3.1585': attribute type 29 has an invalid length. [ 326.061269][T10782] netlink: 'syz.2.1596': attribute type 3 has an invalid length. [ 326.069472][T10782] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.1596'. [ 326.227161][T10789] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1596'. [ 326.259160][T10789] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 329.038858][T10752] netlink: 'syz.3.1585': attribute type 29 has an invalid length. [ 329.463422][T10837] pim6reg1: entered promiscuous mode [ 329.469012][T10837] pim6reg1: entered allmulticast mode [ 330.039248][T10852] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.1619'. [ 331.854658][T10926] netlink: 208344 bytes leftover after parsing attributes in process `syz.1.1642'. [ 332.041201][T10922] delete_channel: no stack [ 334.121459][T10989] netlink: 67 bytes leftover after parsing attributes in process `syz.4.1662'. [ 334.598281][T11001] netlink: 'syz.0.1668': attribute type 29 has an invalid length. [ 334.655456][T11001] netlink: 'syz.0.1668': attribute type 29 has an invalid length. [ 335.169333][T11024] netlink: 'syz.3.1676': attribute type 13 has an invalid length. [ 336.788197][T11089] netlink: 'syz.3.1700': attribute type 1 has an invalid length. [ 336.842211][T11089] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1700'. [ 338.888127][ T5168] Bluetooth: hci3: unexpected subevent 0x12 length: 14 > 5 [ 341.681058][T11209] netlink: 'syz.3.1746': attribute type 10 has an invalid length. [ 341.855528][T11209] hsr_slave_0 (unregistering): left promiscuous mode [ 341.989229][ T5168] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 342.648217][ T5168] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 342.910838][T11264] netlink: 'syz.2.1768': attribute type 10 has an invalid length. [ 343.036574][T11264] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1768'. [ 343.050473][T11264] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 343.105573][T11267] netlink: 'syz.1.1767': attribute type 27 has an invalid length. [ 343.190754][T11267] netlink: 'syz.1.1767': attribute type 3 has an invalid length. [ 343.259972][T11267] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1767'. [ 346.081984][T11346] netlink: 'syz.1.1793': attribute type 29 has an invalid length. [ 346.097397][T11346] netlink: 'syz.1.1793': attribute type 29 has an invalid length. [ 346.152200][T11347] netlink: 'syz.1.1793': attribute type 29 has an invalid length. [ 347.877603][T11418] FAULT_INJECTION: forcing a failure. [ 347.877603][T11418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.915054][T11418] CPU: 0 UID: 0 PID: 11418 Comm: syz.1.1817 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 347.915093][T11418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 347.915107][T11418] Call Trace: [ 347.915115][T11418] [ 347.915125][T11418] dump_stack_lvl+0x189/0x250 [ 347.915161][T11418] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.915189][T11418] ? __pfx__printk+0x10/0x10 [ 347.915226][T11418] ? __might_fault+0xb0/0x130 [ 347.915259][T11418] should_fail_ex+0x414/0x560 [ 347.915295][T11418] _copy_from_user+0x2d/0xb0 [ 347.915320][T11418] __sys_bpf+0x1ed/0x870 [ 347.915346][T11418] ? __pfx___sys_bpf+0x10/0x10 [ 347.915413][T11418] __x64_sys_bpf+0x7c/0x90 [ 347.915447][T11418] do_syscall_64+0xfa/0x3b0 [ 347.915481][T11418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.915502][T11418] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 347.915525][T11418] ? clear_bhb_loop+0x60/0xb0 [ 347.915553][T11418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.915574][T11418] RIP: 0033:0x7f40a938e9a9 [ 347.915595][T11418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.915614][T11418] RSP: 002b:00007f40aa25d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 347.915639][T11418] RAX: ffffffffffffffda RBX: 00007f40a95b5fa0 RCX: 00007f40a938e9a9 [ 347.915655][T11418] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 347.915669][T11418] RBP: 00007f40aa25d090 R08: 0000000000000000 R09: 0000000000000000 [ 347.915683][T11418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.915696][T11418] R13: 0000000000000000 R14: 00007f40a95b5fa0 R15: 00007ffd2764eac8 [ 347.915731][T11418] [ 348.517678][T11439] ------------[ cut here ]------------ [ 348.523312][T11439] WARNING: CPU: 0 PID: 11439 at kernel/events/core.c:7211 perf_pending_task+0x319/0x400 [ 348.533302][T11439] Modules linked in: [ 348.537277][T11439] CPU: 0 UID: 0 PID: 11439 Comm: syz.3.1826 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 348.548996][T11439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 348.559355][T11439] RIP: 0010:perf_pending_task+0x319/0x400 [ 348.565295][T11439] Code: 85 8f 00 00 00 41 fe 4d 00 eb 05 e8 91 ab cd ff 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 78 ab cd ff 90 <0f> 0b 90 41 80 3c 1c 00 0f 85 02 ff ff ff e9 05 ff ff ff 44 89 e1 [ 348.585215][T11439] RSP: 0018:ffffc900034979d0 EFLAGS: 00010293 [ 348.591404][T11439] RAX: ffffffff81f2a8c8 RBX: dffffc0000000000 RCX: ffff88802a7abc00 [ 348.599429][T11439] RDX: 0000000000000000 RSI: 000000007491e328 RDI: 0000000000000000 [ 348.607504][T11439] RBP: 000000007491e328 R08: ffffffff8fa1d2f7 R09: 1ffffffff1f43a5e [ 348.615671][T11439] R10: dffffc0000000000 R11: ffffffff81f2a5b0 R12: 1ffff1100ae42cc7 [ 348.623810][T11439] R13: ffff88802a7abc00 R14: ffff888057216898 R15: ffff888057216638 [ 348.632198][T11439] FS: 0000000000000000(0000) GS:ffff888125c22000(0000) knlGS:0000000000000000 [ 348.641755][T11439] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 348.648406][T11439] CR2: 00007f7bb59a2d38 CR3: 000000000df38000 CR4: 00000000003526f0 [ 348.656499][T11439] DR0: 0000000000000000 DR1: 0000000000000082 DR2: 0000000000000000 [ 348.664568][T11439] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 348.672661][T11439] Call Trace: [ 348.675990][T11439] [ 348.678973][T11439] ? lockdep_hardirqs_on+0x9c/0x150 [ 348.684289][T11439] task_work_run+0x1d1/0x260 [ 348.688955][T11439] ? __pfx_task_work_run+0x10/0x10 [ 348.694226][T11439] do_exit+0x6b5/0x22e0 [ 348.698547][T11439] ? cgroup_freezing+0x20/0x360 [ 348.703503][T11439] ? __pfx_do_exit+0x10/0x10 [ 348.708164][T11439] ? cgroup_freezing+0x20/0x360 [ 348.713191][T11439] ? cgroup_freezing+0x20/0x360 [ 348.718131][T11439] do_group_exit+0x21c/0x2d0 [ 348.722937][T11439] ? lockdep_hardirqs_on+0x9c/0x150 [ 348.728213][T11439] get_signal+0x1286/0x1340 [ 348.732851][T11439] arch_do_signal_or_restart+0x9a/0x750 [ 348.738478][T11439] ? blkcg_maybe_throttle_current+0x1ab/0xb40 [ 348.744665][T11439] ? perf_pending_task+0x2da/0x400 [ 348.749862][T11439] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 348.756150][T11439] ? perf_trace_preemptirq_template+0xa3/0x340 [ 348.762445][T11439] ? exit_to_user_mode_loop+0x40/0x110 [ 348.767997][T11439] exit_to_user_mode_loop+0x75/0x110 [ 348.773424][T11439] do_syscall_64+0x2bd/0x3b0 [ 348.778096][T11439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.784363][T11439] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 348.790959][T11439] ? clear_bhb_loop+0x60/0xb0 [ 348.791025][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 348.795698][T11439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.795727][T11439] RIP: 0033:0x7fdad1d8e9a9 [ 348.812185][T11439] Code: Unable to access opcode bytes at 0x7fdad1d8e97f. [ 348.819315][T11439] RSP: 002b:00007fdacfbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 348.827951][T11439] RAX: 000000000000001d RBX: 00007fdad1fb5fa0 RCX: 00007fdad1d8e9a9 [ 348.836251][T11439] RDX: 0000000000000018 RSI: 0000200000000bc0 RDI: 0000000000000011 [ 348.844341][T11439] RBP: 00007fdad1e10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 348.852416][T11439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.860443][T11439] R13: 0000000000000000 R14: 00007fdad1fb5fa0 R15: 00007fffd1624548 [ 348.868593][T11439] [ 348.871722][T11439] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 348.879064][T11439] CPU: 0 UID: 0 PID: 11439 Comm: syz.3.1826 Not tainted 6.16.0-rc3-syzkaller-g0ee30d937c14 #0 PREEMPT(full) [ 348.890638][T11439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 348.900723][T11439] Call Trace: [ 348.904030][T11439] [ 348.906982][T11439] dump_stack_lvl+0x99/0x250 [ 348.911619][T11439] ? __asan_memcpy+0x40/0x70 [ 348.916245][T11439] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.921469][T11439] ? __pfx__printk+0x10/0x10 [ 348.926095][T11439] panic+0x2db/0x790 [ 348.930024][T11439] ? __pfx_panic+0x10/0x10 [ 348.934481][T11439] __warn+0x31b/0x4b0 [ 348.938513][T11439] ? perf_pending_task+0x319/0x400 [ 348.943661][T11439] ? perf_pending_task+0x319/0x400 [ 348.948802][T11439] report_bug+0x2be/0x4f0 [ 348.953166][T11439] ? perf_pending_task+0x319/0x400 [ 348.958309][T11439] ? perf_pending_task+0x319/0x400 [ 348.963449][T11439] ? perf_pending_task+0x31b/0x400 [ 348.968588][T11439] handle_bug+0x84/0x160 [ 348.972864][T11439] exc_invalid_op+0x1a/0x50 [ 348.977401][T11439] asm_exc_invalid_op+0x1a/0x20 [ 348.982270][T11439] RIP: 0010:perf_pending_task+0x319/0x400 [ 348.988021][T11439] Code: 85 8f 00 00 00 41 fe 4d 00 eb 05 e8 91 ab cd ff 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 78 ab cd ff 90 <0f> 0b 90 41 80 3c 1c 00 0f 85 02 ff ff ff e9 05 ff ff ff 44 89 e1 [ 349.007669][T11439] RSP: 0018:ffffc900034979d0 EFLAGS: 00010293 [ 349.013796][T11439] RAX: ffffffff81f2a8c8 RBX: dffffc0000000000 RCX: ffff88802a7abc00 [ 349.021787][T11439] RDX: 0000000000000000 RSI: 000000007491e328 RDI: 0000000000000000 [ 349.029778][T11439] RBP: 000000007491e328 R08: ffffffff8fa1d2f7 R09: 1ffffffff1f43a5e [ 349.037768][T11439] R10: dffffc0000000000 R11: ffffffff81f2a5b0 R12: 1ffff1100ae42cc7 [ 349.045766][T11439] R13: ffff88802a7abc00 R14: ffff888057216898 R15: ffff888057216638 [ 349.053763][T11439] ? __pfx_perf_pending_task+0x10/0x10 [ 349.059342][T11439] ? perf_pending_task+0x318/0x400 [ 349.064489][T11439] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.069714][T11439] task_work_run+0x1d1/0x260 [ 349.074346][T11439] ? __pfx_task_work_run+0x10/0x10 [ 349.079495][T11439] do_exit+0x6b5/0x22e0 [ 349.083775][T11439] ? cgroup_freezing+0x20/0x360 [ 349.088664][T11439] ? __pfx_do_exit+0x10/0x10 [ 349.093289][T11439] ? cgroup_freezing+0x20/0x360 [ 349.098166][T11439] ? cgroup_freezing+0x20/0x360 [ 349.103057][T11439] do_group_exit+0x21c/0x2d0 [ 349.107672][T11439] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.112897][T11439] get_signal+0x1286/0x1340 [ 349.117443][T11439] arch_do_signal_or_restart+0x9a/0x750 [ 349.123023][T11439] ? blkcg_maybe_throttle_current+0x1ab/0xb40 [ 349.129128][T11439] ? perf_pending_task+0x2da/0x400 [ 349.134267][T11439] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 349.140462][T11439] ? perf_trace_preemptirq_template+0xa3/0x340 [ 349.146660][T11439] ? exit_to_user_mode_loop+0x40/0x110 [ 349.152145][T11439] exit_to_user_mode_loop+0x75/0x110 [ 349.157457][T11439] do_syscall_64+0x2bd/0x3b0 [ 349.162092][T11439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.168187][T11439] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 349.174448][T11439] ? clear_bhb_loop+0x60/0xb0 [ 349.179151][T11439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.185088][T11439] RIP: 0033:0x7fdad1d8e9a9 [ 349.189541][T11439] Code: Unable to access opcode bytes at 0x7fdad1d8e97f. [ 349.196583][T11439] RSP: 002b:00007fdacfbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 349.205021][T11439] RAX: 000000000000001d RBX: 00007fdad1fb5fa0 RCX: 00007fdad1d8e9a9 [ 349.213010][T11439] RDX: 0000000000000018 RSI: 0000200000000bc0 RDI: 0000000000000011 [ 349.221003][T11439] RBP: 00007fdad1e10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 349.228998][T11439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.236987][T11439] R13: 0000000000000000 R14: 00007fdad1fb5fa0 R15: 00007fffd1624548 [ 349.244996][T11439] [ 349.248387][T11439] Kernel Offset: disabled [ 349.252733][T11439] Rebooting in 86400 seconds..