last executing test programs: 10.739217954s ago: executing program 1 (id=1864): r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000040)=@raw=[@snprintf], 0x0, 0xffff, 0x0, 0x0, 0xc9c4ed9d17207862, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040)) 10.45033995s ago: executing program 1 (id=1866): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) openat$cgroup_ro(r3, &(0x7f00000000c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f00000002c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x2}, 0x3000, 0x4, 0x0, 0x2, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ef", 0x1}], 0x1}, 0x48014) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r7}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f0000000340)=r3, 0x4) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r10, 0x0, 0x9}, 0x18) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0xb}, 0x14105, 0x2e, 0xfdfffbff, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xfffbffffffffffff, r3, 0x9) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4b}, 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8}, 0x0, 0x2, 0xffffeffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000140)="7c003307000000000008000081001a", 0x0, 0xffedfff0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.392325114s ago: executing program 3 (id=1867): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xf, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) socket$kcm(0x11, 0x2, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x18, &(0x7f0000000040), 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) socket$kcm(0x2a, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0500000006010000400000004000000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000002da93307ecb9ed80d783811573ae7ece764a52f3d59ecd915dfeeb17f8743053e34983400ddadeac76c62f99caf00baa4367f117138f50f9c43ca15f9b723d3314dbb5ff2d1b3c503f96cc66d7b8d31575dc58cabb69aed44014de5d3e21be996b7251cdd6b44e2d5503000000103cbffed31fd83f26df350f063bc8925f01dd87fb46ae667dc1f75f52ed54624934c87f850000e6ff90da78553b397aed2274f14eb7c2f74f8d18b7ce38e08ef8c58ffcb6a73604953a"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x2}, 0x104141, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000100000000000b899be211067e85621f10000000000000000ba078a1600b5fa31139912f9fa7f66f907f152cb3c21e20419907f2453422955ba8d4c3e0330dd96aa138db7139afa"], 0x0, 0x26}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe129, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) sendmsg(r4, &(0x7f0000003680)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) 7.334696433s ago: executing program 3 (id=1870): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x207fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0xb}, 0x14105, 0x7f, 0xfffffbff, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40000f100000000791028000000000069004200000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, &(0x7f00000002c0)}, 0x20) 7.113630968s ago: executing program 0 (id=1873): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)='{', 0x1}], 0x1}, 0x4041) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x44010) write$cgroup_subtree(r3, 0x0, 0xfe33) syz_clone(0x411, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x10000000}, 0x11) 7.020352071s ago: executing program 3 (id=1874): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) 6.22325543s ago: executing program 2 (id=1875): socket$kcm(0xa, 0x1, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}, 0x18) 6.205178395s ago: executing program 0 (id=1876): r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000040)=@raw=[@snprintf], 0x0, 0xffff, 0x0, 0x0, 0xc9c4ed9d17207862, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040)) 6.135361648s ago: executing program 2 (id=1877): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xf, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) socket$kcm(0x11, 0x2, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x18, &(0x7f0000000040), 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) socket$kcm(0x2a, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0500000006010000400000004000000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000002da93307ecb9ed80d783811573ae7ece764a52f3d59ecd915dfeeb17f8743053e34983400ddadeac76c62f99caf00baa4367f117138f50f9c43ca15f9b723d3314dbb5ff2d1b3c503f96cc66d7b8d31575dc58cabb69aed44014de5d3e21be996b7251cdd6b44e2d5503000000103cbffed31fd83f26df350f063bc8925f01dd87fb46ae667dc1f75f52ed54624934c87f850000e6ff90da78553b397aed2274f14eb7c2f74f8d18b7ce38e08ef8c58ffcb6a73604953a"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x2}, 0x104141, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000100000000000b899be211067e85621f10000000000000000ba078a1600b5fa31139912f9fa7f66f907f152cb3c21e20419907f2453422955ba8d4c3e0330dd96aa138db7139afa"], 0x0, 0x26}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe129, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) sendmsg(r4, &(0x7f0000003680)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) 5.887094081s ago: executing program 0 (id=1878): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000011c0)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000002c80)='ns/pid\x00') r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f0000000340), 0x4) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8}, 0x0, 0x2, 0xffffeffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r3, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) 5.639173524s ago: executing program 0 (id=1879): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x2, 0x80, 0xc2, 0xc}}) bpf$ITER_CREATE(0x21, &(0x7f0000001a40)={r1}, 0x8) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000280)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0x60}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6, 0x7f, 0x3b, 0xfc, 0x0, 0x8, 0x8000, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000001c0), 0x11}, 0x1420, 0x4, 0x2, 0x3, 0xd1, 0x3ff, 0x1, 0x0, 0x6, 0x0, 0xfff}, 0x0, 0xc, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000200)='}\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000003800000001000000040000e10100000000000011040000000000000000000000000200000000020000000000000802000000020000000000000e030000000000000000006100d44bcd59893800f9099ea8cf9c531d6dbb9bb86159e52b65944df11b92c9be0b17db5ce1efa8bd87e3c72870d43193"], 0x0, 0x54}, 0x20) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x31, &(0x7f0000000640), 0x4) setsockopt$sock_attach_bpf(r3, 0x6, 0x11, &(0x7f0000000240), 0x4) 5.590088725s ago: executing program 2 (id=1880): socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x6, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x10000, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={0x1, &(0x7f0000000440)="3a6107ce05dc35c982bb75d4635674d3ff033048eb0194337b1693f770806ca7f9a6831ea80c501011c0850332bfabfb1b26f27b5f26bd91da76523cd1088335efe5a6d426dc2d"}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x11, 0x4, 0x4, 0xffffffff}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r1, &(0x7f00000038c0)={&(0x7f00000007c0)=@abs, 0x6e, &(0x7f0000000d40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffea1}, {0x0}, {&(0x7f0000000b80)=""/188, 0xc3}], 0x9}, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0x6d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) syz_clone(0x1c48c9600, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000200000000f0000003d030100000000009500ffb1000000006926000000000000bf6700000000000036000b000fff52004507faff15300000d60600000ee60000bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a4c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed553b40e2b897e73752fc7d1e4b0f4c5967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b3"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="d50a000001000000631114000023deaf0d5527fe13d4f9219d398493d630000018000000000000cc19061297"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x2, 0x80, 0xc2, 0xc}}) bpf$ITER_CREATE(0x21, &(0x7f0000001a40)={r6}, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), 0x0, 0xfffffffb}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) 5.307164474s ago: executing program 3 (id=1881): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="aee1b65e3babc7ae5897", 0xa}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40003, 0x49238, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x23fd6b854b20bbab, 0x0, 0x4, 0x9, 0x0, 0x4, 0x4000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff800000003, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x11486, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_bp={0x0, 0x1}, 0x200418, 0x2e, 0xfffffbff, 0x4, 0x2, 0x7, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair(0x5, 0x3, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xc) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x485, 0x0, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1b23a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x84) close(r5) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$kcm(0x21, 0x2, 0xa) r9 = socket$kcm(0x2, 0x200000000000003, 0x106) setsockopt$sock_attach_bpf(r9, 0x0, 0x5, 0x0, 0x0) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x25, &(0x7f0000000000)=r10, 0x20000010) 5.225115499s ago: executing program 4 (id=1882): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xdc}, 0x219d80, 0xc8, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r2 = perf_event_open(0x0, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000000000000000000000000ea66dfd6000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000085000000050000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x1d1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) close(r5) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006b7d373be35c6e17aa31046b876c1d0000007ea60864160af36508001dc0c3000200340031009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f472736f67c5e73bb9e5c446fa30be62cbd4938037e786", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000300000000030000000200000000000000010000000000000105"], 0x0, 0x42}, 0x28) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000"], 0xfdef) 5.197030961s ago: executing program 1 (id=1883): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f0000000340)=r3, 0x4) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0xb}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4b}, 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8}, 0x0, 0x2, 0xffffeffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000140)="7c00330700000000000800dd86001a", 0x0, 0xffedfff0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.675054519s ago: executing program 0 (id=1884): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xa100, 0xc8, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x4d}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102032908000000000000000003000000ac14140a000000000000000000000000ac1414aa"], 0xfdef) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) socket$kcm(0x15, 0x5, 0x0) 1.976485051s ago: executing program 0 (id=1885): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x10, 0x400000002, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.953709497s ago: executing program 2 (id=1886): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)='{', 0x1}], 0x1}, 0x4041) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x44010) write$cgroup_subtree(r3, 0x0, 0xfe33) syz_clone(0x411, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x10000000}, 0x11) 1.941087858s ago: executing program 4 (id=1887): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getpid() recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007bf6e00212ba0d8105040a600000000f040b067c55a1bcfc09003e0006990600000015000500fe800000000000000300014002000c0901ac040098007f6f94007100a007a288747f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d345ef464095cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3099ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d7f452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x4000004) 1.877698908s ago: executing program 1 (id=1888): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xf, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) socket$kcm(0x11, 0x2, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x18, &(0x7f0000000040), 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) socket$kcm(0x2a, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0500000006010000400000004000000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000002da93307ecb9ed80d783811573ae7ece764a52f3d59ecd915dfeeb17f8743053e34983400ddadeac76c62f99caf00baa4367f117138f50f9c43ca15f9b723d3314dbb5ff2d1b3c503f96cc66d7b8d31575dc58cabb69aed44014de5d3e21be996b7251cdd6b44e2d5503000000103cbffed31fd83f26df350f063bc8925f01dd87fb46ae667dc1f75f52ed54624934c87f850000e6ff90da78553b397aed2274f14eb7c2f74f8d18b7ce38e08ef8c58ffcb6a73604953a"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x2}, 0x104141, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000100000000000b899be211067e85621f10000000000000000ba078a1600b5fa31139912f9fa7f66f907f152cb3c21e20419907f2453422955ba8d4c3e0330dd96aa138db7139afa"], 0x0, 0x26}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe129, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) sendmsg(r4, &(0x7f0000003680)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) 1.804567823s ago: executing program 3 (id=1889): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00'}, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x10001, 0x6}, 0x2009, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33) close(r1) socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x400300}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{}, &(0x7f0000000000), 0x0}, 0x20) r7 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x100002e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200"/32], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r9) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x4, 0x10000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="780a0000000000006111ac00000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000440)) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r10 = openat$tun(0xffffffffffffff9c, 0x0, 0x80900, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'wg1\x00', 0x20}) ioctl$TUNATTACHFILTER(r10, 0x401054d5, &(0x7f0000000bc0)={0x0, 0x0}) 1.672571147s ago: executing program 4 (id=1890): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="d800000019008111e0020f060d8107040a60200000000000e3ffffad2a000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f945f111b0529625d007100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a23b2a10000000014d6d930dfe1f9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbeefe518a10feb42e8ad401ca5f9ebc5de6ccd442e4f1119670b9626b4a505a89fbc3932fc8", 0xd8}], 0x1}, 0x0) 1.252399354s ago: executing program 1 (id=1891): r0 = socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', @random="02000400"}) 1.11433896s ago: executing program 4 (id=1892): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x5, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x21, 0x2, 0x2) r2 = socket$kcm(0xf, 0x1, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="0212000902000000e4a17c45c856", 0xe}, {&(0x7f00000001c0)="e491", 0x2}], 0x2}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x2}, 0x1010, 0x0, 0x0, 0x9, 0x1, 0x0, 0x8002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x1000000000000002, 0x0) getpid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ab, 0x1, @perf_config_ext={0x407fff, 0x100000aea}, 0x14105, 0x2e, 0xfffffbfd, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x41, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000035000b63717a3c4a01d8985b0808aa78", 0x14}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_open_procfs$namespace(0x0, 0x0) ioctl$TUNSETFILTEREBPF(r5, 0xb704, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 881.528231ms ago: executing program 2 (id=1893): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x404}, 0x0, 0x5, 0x100000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000040), &(0x7f0000000280)=""/201}, 0x20) (fail_nth: 5) 619.734595ms ago: executing program 4 (id=1894): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000940)="5c00000012006bab9a3fe3d86e17aa0a046b870af34f04001a001931a0e69ee517d2301f2febcf0eca707888d34460bc8c000000a705251e6182949a3651f60a84c9e4d4938037e70e4509c5bb00000000000000000000ee17459447", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/190, 0xbe}, {&(0x7f0000000fc0)=""/197, 0xc5}, {&(0x7f0000002e40)=""/4089, 0xff9}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f00000016c0)=""/214, 0xd6}, {&(0x7f0000000180)=""/226, 0xe2}, {&(0x7f0000000700)=""/185, 0xb9}, {&(0x7f0000003e40)=""/4087, 0xff7}, {&(0x7f0000000b80)=""/279, 0x117}, {&(0x7f00000002c0)=""/163, 0xa3}, {0x0}, {&(0x7f0000000600)=""/251, 0xfb}], 0xc}, 0x40000002) 299.206688ms ago: executing program 2 (id=1895): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xdc}, 0x219d80, 0xc8, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r2 = perf_event_open(0x0, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000000000000000000000000ea66dfd6000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000085000000050000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x1d1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) close(r5) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006b7d373be35c6e17aa31046b876c1d0000007ea60864160af36508001dc0c3000200340031009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f472736f67c5e73bb9e5c446fa30be62cbd4938037e786", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000300000000030000000200000000000000010000000000000105"], 0x0, 0x42}, 0x28) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000"], 0xfdef) 264.965926ms ago: executing program 1 (id=1896): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r0}, 0xc) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 127.856459ms ago: executing program 3 (id=1897): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x7, 0x6}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x25) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000cc0)='memory.stat\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, 0xd5, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000300), &(0x7f0000000440), 0x8, 0x3, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, 0x0, 0x3000c0c5) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000480)=ANY=[], 0x8) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) syz_clone(0xae003400, 0x0, 0xffffff39, 0xfffffffffffffffd, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r7) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x2, 0x4000004, 0x16}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080)) 0s ago: executing program 4 (id=1898): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x940, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x101d0}], 0x1}, 0x1f00) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) close(r1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020206b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000fcffff85000000060000001811", @ANYRES32, @ANYRES16, @ANYRESOCT=r3, @ANYRES8=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000140)={0xffffffffffffffff, r4}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000095000000000000004be98911ed523cf4451d51e400cbd30efbb0a73ceb2b050a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868162ff933958cb6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e281ef0b7a1a97b2c8c5617bff8c9441a45fd951df19a9c6e933500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000300), 0x4da) kernel console output (not intermixed with test programs): parameter schedstats=enable or kernel.sched_schedstats=1 [ 134.638280][ T6632] netlink: 'syz.4.210': attribute type 10 has an invalid length. [ 134.746904][ T6632] syz.4.210 (6632) used greatest stack depth: 18776 bytes left [ 135.089612][ T6648] netlink: 'syz.4.212': attribute type 21 has an invalid length. [ 135.407745][ T6652] netlink: 'syz.4.215': attribute type 21 has an invalid length. [ 136.408395][ T6668] netlink: 'syz.0.222': attribute type 10 has an invalid length. [ 136.533628][ T6675] netlink: 'syz.3.225': attribute type 7 has an invalid length. [ 137.055005][ T6694] FAULT_INJECTION: forcing a failure. [ 137.055005][ T6694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.120499][ T6694] CPU: 0 UID: 0 PID: 6694 Comm: syz.4.233 Not tainted 6.16.0-rc6-syzkaller-g5b4c54ac49af #0 PREEMPT(full) [ 137.120529][ T6694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 137.120542][ T6694] Call Trace: [ 137.120550][ T6694] [ 137.120559][ T6694] dump_stack_lvl+0x189/0x250 [ 137.120590][ T6694] ? __pfx____ratelimit+0x10/0x10 [ 137.120618][ T6694] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.120643][ T6694] ? __pfx__printk+0x10/0x10 [ 137.120672][ T6694] ? __might_fault+0xb0/0x130 [ 137.120705][ T6694] should_fail_ex+0x414/0x560 [ 137.120738][ T6694] _copy_from_iter+0x1db/0x16f0 [ 137.120772][ T6694] ? rep_movs_alternative+0x4a/0x90 [ 137.120802][ T6694] ? __pfx__copy_from_iter+0x10/0x10 [ 137.120829][ T6694] ? sock_alloc_send_pskb+0x875/0x990 [ 137.120863][ T6694] ? __pfx__copy_from_iter+0x10/0x10 [ 137.120897][ T6694] ? page_copy_sane+0x16a/0x280 [ 137.120930][ T6694] copy_page_from_iter+0xdd/0x170 [ 137.120966][ T6694] skb_copy_datagram_from_iter+0x306/0x720 [ 137.121007][ T6694] tun_get_user+0x15c3/0x3ce0 [ 137.121060][ T6694] ? aa_file_perm+0x11f/0xed0 [ 137.121090][ T6694] ? __pfx_tun_get_user+0x10/0x10 [ 137.121121][ T6694] ? aa_file_perm+0x11f/0xed0 [ 137.121149][ T6694] ? aa_file_perm+0x3e7/0xed0 [ 137.121191][ T6694] ? ref_tracker_alloc+0x318/0x460 [ 137.121217][ T6694] ? __lock_acquire+0xab9/0xd20 [ 137.121241][ T6694] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 137.121275][ T6694] ? tun_get+0x1c/0x2f0 [ 137.121313][ T6694] ? tun_get+0x1c/0x2f0 [ 137.121343][ T6694] ? tun_get+0x1c/0x2f0 [ 137.121384][ T6694] tun_chr_write_iter+0x113/0x200 [ 137.121419][ T6694] vfs_write+0x548/0xa90 [ 137.121445][ T6694] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 137.121477][ T6694] ? __pfx_vfs_write+0x10/0x10 [ 137.121508][ T6694] ? __fget_files+0x2a/0x420 [ 137.121550][ T6694] ksys_write+0x145/0x250 [ 137.121573][ T6694] ? __pfx_ksys_write+0x10/0x10 [ 137.121590][ T6694] ? rcu_is_watching+0x15/0xb0 [ 137.121620][ T6694] ? do_syscall_64+0xbe/0x3b0 [ 137.121653][ T6694] do_syscall_64+0xfa/0x3b0 [ 137.121680][ T6694] ? lockdep_hardirqs_on+0x9c/0x150 [ 137.121707][ T6694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.121728][ T6694] ? clear_bhb_loop+0x60/0xb0 [ 137.121754][ T6694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.121774][ T6694] RIP: 0033:0x7f703818e9a9 [ 137.121792][ T6694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.121809][ T6694] RSP: 002b:00007f7038f55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 137.121831][ T6694] RAX: ffffffffffffffda RBX: 00007f70383b5fa0 RCX: 00007f703818e9a9 [ 137.121846][ T6694] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 137.121859][ T6694] RBP: 00007f7038f55090 R08: 0000000000000000 R09: 0000000000000000 [ 137.121872][ T6694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 137.121884][ T6694] R13: 0000000000000000 R14: 00007f70383b5fa0 R15: 00007fffc7029a48 [ 137.121916][ T6694] [ 137.543121][ T6697] : renamed from hsr0 (while UP) [ 137.643373][ T6705] netlink: 'syz.4.239': attribute type 10 has an invalid length. [ 138.316268][ T6732] FAULT_INJECTION: forcing a failure. [ 138.316268][ T6732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.349066][ T6732] CPU: 0 UID: 0 PID: 6732 Comm: syz.3.249 Not tainted 6.16.0-rc6-syzkaller-g5b4c54ac49af #0 PREEMPT(full) [ 138.349096][ T6732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 138.349109][ T6732] Call Trace: [ 138.349117][ T6732] [ 138.349126][ T6732] dump_stack_lvl+0x189/0x250 [ 138.349157][ T6732] ? __pfx____ratelimit+0x10/0x10 [ 138.349187][ T6732] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.349213][ T6732] ? __pfx__printk+0x10/0x10 [ 138.349246][ T6732] ? __might_fault+0xb0/0x130 [ 138.349272][ T6732] should_fail_ex+0x414/0x560 [ 138.349305][ T6732] _copy_to_user+0x31/0xb0 [ 138.349329][ T6732] simple_read_from_buffer+0xe1/0x170 [ 138.349358][ T6732] proc_fail_nth_read+0x1df/0x250 [ 138.349389][ T6732] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.349421][ T6732] ? rw_verify_area+0x258/0x650 [ 138.349454][ T6732] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.349483][ T6732] vfs_read+0x1fd/0x980 [ 138.349523][ T6732] ? __pfx___mutex_lock+0x10/0x10 [ 138.349554][ T6732] ? __pfx_vfs_read+0x10/0x10 [ 138.349590][ T6732] ? __fget_files+0x2a/0x420 [ 138.349621][ T6732] ? __fget_files+0x3a0/0x420 [ 138.349644][ T6732] ? __fget_files+0x2a/0x420 [ 138.349679][ T6732] ksys_read+0x145/0x250 [ 138.349702][ T6732] ? __pfx_ksys_read+0x10/0x10 [ 138.349728][ T6732] ? do_syscall_64+0xbe/0x3b0 [ 138.349762][ T6732] do_syscall_64+0xfa/0x3b0 [ 138.349791][ T6732] ? lockdep_hardirqs_on+0x9c/0x150 [ 138.349818][ T6732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.349839][ T6732] ? clear_bhb_loop+0x60/0xb0 [ 138.349866][ T6732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.349887][ T6732] RIP: 0033:0x7f729318d3bc [ 138.349906][ T6732] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 138.349924][ T6732] RSP: 002b:00007f72940bf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 138.349947][ T6732] RAX: ffffffffffffffda RBX: 00007f72933b5fa0 RCX: 00007f729318d3bc [ 138.349963][ T6732] RDX: 000000000000000f RSI: 00007f72940bf0a0 RDI: 0000000000000006 [ 138.349976][ T6732] RBP: 00007f72940bf090 R08: 0000000000000000 R09: 0000000000000000 [ 138.350000][ T6732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.350013][ T6732] R13: 0000000000000000 R14: 00007f72933b5fa0 R15: 00007ffd45d0f828 [ 138.350047][ T6732] [ 138.624379][ T6737] netlink: 'syz.2.252': attribute type 10 has an invalid length. [ 138.685475][ T6737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.697583][ T6737] team0: Port device bond0 added [ 138.971784][ T6744] __nla_validate_parse: 1 callbacks suppressed [ 138.971804][ T6744] netlink: 152 bytes leftover after parsing attributes in process `syz.0.254'. [ 138.990746][ T6744] netlink: 6 bytes leftover after parsing attributes in process `syz.0.254'. [ 139.480584][ T6762] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.262'. [ 139.541089][ T6766] netlink: 'syz.3.264': attribute type 10 has an invalid length. [ 139.629802][ T6766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.707798][ T6766] team0: Port device bond0 added [ 140.853040][ T6808] netlink: 'syz.4.279': attribute type 10 has an invalid length. [ 141.919406][ T6838] netlink: 2 bytes leftover after parsing attributes in process `syz.1.290'. [ 141.940674][ T6838] batadv_slave_1: entered promiscuous mode [ 142.115675][ T6844] netlink: 'syz.0.292': attribute type 10 has an invalid length. [ 142.243029][ T6846] netlink: 'syz.3.293': attribute type 10 has an invalid length. [ 142.333974][ T6844] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 142.705391][ T6857] netlink: 148 bytes leftover after parsing attributes in process `syz.1.297'. [ 142.867971][ T6860] FAULT_INJECTION: forcing a failure. [ 142.867971][ T6860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.943899][ T6860] CPU: 0 UID: 0 PID: 6860 Comm: syz.4.298 Not tainted 6.16.0-rc6-syzkaller-g5b4c54ac49af #0 PREEMPT(full) [ 142.943929][ T6860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 142.943942][ T6860] Call Trace: [ 142.943950][ T6860] [ 142.943959][ T6860] dump_stack_lvl+0x189/0x250 [ 142.943990][ T6860] ? __pfx____ratelimit+0x10/0x10 [ 142.944032][ T6860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.944058][ T6860] ? __pfx__printk+0x10/0x10 [ 142.944104][ T6860] should_fail_ex+0x414/0x560 [ 142.944136][ T6860] _copy_to_user+0x31/0xb0 [ 142.944161][ T6860] simple_read_from_buffer+0xe1/0x170 [ 142.944190][ T6860] proc_fail_nth_read+0x1df/0x250 [ 142.944221][ T6860] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.944253][ T6860] ? rw_verify_area+0x258/0x650 [ 142.944285][ T6860] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.944314][ T6860] vfs_read+0x1fd/0x980 [ 142.944354][ T6860] ? __pfx___mutex_lock+0x10/0x10 [ 142.944386][ T6860] ? __pfx_vfs_read+0x10/0x10 [ 142.944422][ T6860] ? __fget_files+0x2a/0x420 [ 142.944452][ T6860] ? __fget_files+0x3a0/0x420 [ 142.944475][ T6860] ? __fget_files+0x2a/0x420 [ 142.944510][ T6860] ksys_read+0x145/0x250 [ 142.944533][ T6860] ? __pfx_ksys_read+0x10/0x10 [ 142.944550][ T6860] ? rcu_is_watching+0x15/0xb0 [ 142.944590][ T6860] ? do_syscall_64+0xbe/0x3b0 [ 142.944625][ T6860] do_syscall_64+0xfa/0x3b0 [ 142.944653][ T6860] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.944681][ T6860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.944703][ T6860] ? clear_bhb_loop+0x60/0xb0 [ 142.944730][ T6860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.944751][ T6860] RIP: 0033:0x7f703818d3bc [ 142.944770][ T6860] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 142.944788][ T6860] RSP: 002b:00007f7038f55030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 142.944811][ T6860] RAX: ffffffffffffffda RBX: 00007f70383b5fa0 RCX: 00007f703818d3bc [ 142.944827][ T6860] RDX: 000000000000000f RSI: 00007f7038f550a0 RDI: 0000000000000007 [ 142.944841][ T6860] RBP: 00007f7038f55090 R08: 0000000000000000 R09: 0000000000000000 [ 142.944854][ T6860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.944867][ T6860] R13: 0000000000000000 R14: 00007f70383b5fa0 R15: 00007fffc7029a48 [ 142.944901][ T6860] [ 143.234884][ T6868] netlink: 132 bytes leftover after parsing attributes in process `syz.1.302'. [ 144.352397][ T51] Bluetooth: hci3: unexpected event 0x17 length: 15 > 6 [ 144.633650][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 35 [ 144.845872][ T6917] netlink: 'syz.3.319': attribute type 10 has an invalid length. [ 144.877357][ T6918] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.320'. [ 144.886902][ T6918] tc_dump_action: action bad kind [ 145.816817][ T6949] netlink: 3 bytes leftover after parsing attributes in process `syz.4.332'. [ 145.862513][ T6950] netlink: 'syz.1.331': attribute type 10 has an invalid length. [ 145.939485][ T6950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.972040][ T6950] team0: Port device bond0 added [ 147.485210][ T6985] netlink: 'syz.1.344': attribute type 10 has an invalid length. [ 147.739018][ T6994] netlink: 188 bytes leftover after parsing attributes in process `syz.4.348'. [ 147.790074][ T6997] veth0_vlan: entered allmulticast mode [ 148.047322][ T7005] netlink: 'syz.0.351': attribute type 16 has an invalid length. [ 148.082396][ T7005] netlink: 'syz.0.351': attribute type 3 has an invalid length. [ 148.143752][ T7005] netlink: 132 bytes leftover after parsing attributes in process `syz.0.351'. [ 148.521434][ T7017] netlink: 60 bytes leftover after parsing attributes in process `syz.3.355'. [ 148.599783][ T7015] netlink: 60 bytes leftover after parsing attributes in process `syz.3.355'. [ 148.870182][ T7025] netlink: 'syz.3.360': attribute type 10 has an invalid length. [ 148.872011][ T7029] netlink: 'syz.2.358': attribute type 28 has an invalid length. [ 148.886069][ T7029] netlink: 'syz.2.358': attribute type 3 has an invalid length. [ 148.926995][ T7029] netlink: 132 bytes leftover after parsing attributes in process `syz.2.358'. [ 149.314598][ T7043] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.365'. [ 149.342334][ T7043] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.365'. [ 149.573890][ T7043] bridge_slave_1: left allmulticast mode [ 149.607052][ T7043] bridge_slave_1: left promiscuous mode [ 149.626003][ T7043] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.984407][ T7043] bridge_slave_0: left promiscuous mode [ 150.043525][ T7043] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.443190][ T7056] wg2: entered promiscuous mode [ 150.456805][ T7071] netlink: 26 bytes leftover after parsing attributes in process `syz.4.373'. [ 150.482644][ T7056] wg2: entered allmulticast mode [ 150.482678][ T7075] netlink: 'syz.3.374': attribute type 10 has an invalid length. [ 150.677261][ T7063] syzkaller0: entered promiscuous mode [ 150.704844][ T7063] syzkaller0: entered allmulticast mode [ 154.152131][ T7121] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 154.159339][ T7121] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 155.435178][ T7165] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.414'. [ 155.772086][ T7172] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.406'. [ 155.808796][ T7172] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.406'. [ 156.129966][ T7172] bridge_slave_1: left allmulticast mode [ 156.135958][ T7172] bridge_slave_1: left promiscuous mode [ 156.166711][ T7172] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.302426][ T7172] bridge_slave_0: left promiscuous mode [ 156.318796][ T7180] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 156.325790][ T7180] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 156.332226][ T7172] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.129054][ T7238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.429'. [ 158.151826][ T7241] netlink: 60 bytes leftover after parsing attributes in process `syz.4.428'. [ 158.161268][ T7240] netlink: 60 bytes leftover after parsing attributes in process `syz.4.428'. [ 158.172614][ T7241] netlink: 60 bytes leftover after parsing attributes in process `syz.4.428'. [ 158.696524][ T7244] syzkaller0: entered promiscuous mode [ 158.705182][ T7244] syzkaller0: entered allmulticast mode [ 158.764097][ T7249] netlink: 'syz.3.432': attribute type 1 has an invalid length. [ 158.779135][ T7249] netlink: 'syz.3.432': attribute type 2 has an invalid length. [ 158.801416][ T7249] netlink: 'syz.3.432': attribute type 7 has an invalid length. [ 158.847184][ T7249] netlink: 149 bytes leftover after parsing attributes in process `syz.3.432'. [ 158.884335][ T7249] netlink: 130160 bytes leftover after parsing attributes in process `syz.3.432'. [ 158.944534][ T7249] netlink: 'syz.3.432': attribute type 1 has an invalid length. [ 158.976786][ T7249] netlink: 'syz.3.432': attribute type 2 has an invalid length. [ 159.016705][ T7249] netlink: 'syz.3.432': attribute type 7 has an invalid length. [ 159.046340][ T7249] netlink: 149 bytes leftover after parsing attributes in process `syz.3.432'. [ 159.124503][ T7256] netlink: 'syz.4.435': attribute type 10 has an invalid length. [ 160.979693][ T7285] netlink: 'syz.2.443': attribute type 10 has an invalid length. [ 161.152655][ T7281] netlink: 'syz.4.444': attribute type 21 has an invalid length. [ 161.180843][ T7285] veth0_macvtap: left promiscuous mode [ 161.231197][ T7285] veth0_macvtap: entered promiscuous mode [ 161.287448][ T7285] team0: Device macvtap0 failed to register rx_handler [ 161.304870][ T7285] veth0_macvtap: left promiscuous mode [ 161.312837][ T7300] netlink: 'syz.1.449': attribute type 2 has an invalid length. [ 161.336888][ T7281] netlink: 164 bytes leftover after parsing attributes in process `syz.4.444'. [ 161.646584][ T7307] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.451'. [ 162.265470][ T7330] wg2: entered promiscuous mode [ 162.274448][ T7330] wg2: entered allmulticast mode [ 162.465510][ T7330] syzkaller0: entered promiscuous mode [ 162.529653][ T7330] syzkaller0: entered allmulticast mode [ 164.267286][ T7351] bridge_slave_1: left allmulticast mode [ 164.274801][ T7351] bridge_slave_1: left promiscuous mode [ 164.282614][ T7351] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.306191][ T7351] bridge_slave_0: left allmulticast mode [ 164.337493][ T7351] bridge_slave_0: left promiscuous mode [ 164.345053][ T7351] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.371907][ T7363] validate_nla: 3 callbacks suppressed [ 164.371939][ T7363] netlink: 'syz.1.475': attribute type 2 has an invalid length. [ 164.395514][ T7363] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.475'. [ 164.405614][ T7363] nbd: must specify at least one socket [ 165.067887][ T7381] netlink: 'syz.1.483': attribute type 46 has an invalid length. [ 165.153946][ T7381] netlink: 'syz.1.483': attribute type 21 has an invalid length. [ 165.155653][ T7385] netlink: 'syz.4.486': attribute type 10 has an invalid length. [ 168.084791][ T7421] FAULT_INJECTION: forcing a failure. [ 168.084791][ T7421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.100785][ T7421] CPU: 1 UID: 0 PID: 7421 Comm: syz.2.496 Not tainted 6.16.0-rc6-syzkaller-g5b4c54ac49af #0 PREEMPT(full) [ 168.100814][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 168.100827][ T7421] Call Trace: [ 168.100835][ T7421] [ 168.100844][ T7421] dump_stack_lvl+0x189/0x250 [ 168.100875][ T7421] ? __pfx____ratelimit+0x10/0x10 [ 168.100903][ T7421] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.100927][ T7421] ? __pfx__printk+0x10/0x10 [ 168.100952][ T7421] ? __might_fault+0xb0/0x130 [ 168.100982][ T7421] should_fail_ex+0x414/0x560 [ 168.101009][ T7421] _copy_from_iter+0x1db/0x16f0 [ 168.101037][ T7421] ? rep_movs_alternative+0x4a/0x90 [ 168.101061][ T7421] ? __pfx__copy_from_iter+0x10/0x10 [ 168.101084][ T7421] ? sock_alloc_send_pskb+0x875/0x990 [ 168.101112][ T7421] ? __pfx__copy_from_iter+0x10/0x10 [ 168.101140][ T7421] ? page_copy_sane+0x16a/0x280 [ 168.101167][ T7421] copy_page_from_iter+0xdd/0x170 [ 168.101198][ T7421] skb_copy_datagram_from_iter+0x306/0x720 [ 168.101232][ T7421] tun_get_user+0x15c3/0x3ce0 [ 168.101277][ T7421] ? aa_file_perm+0x11f/0xed0 [ 168.101302][ T7421] ? __pfx_tun_get_user+0x10/0x10 [ 168.101334][ T7421] ? aa_file_perm+0x11f/0xed0 [ 168.101357][ T7421] ? aa_file_perm+0x3e7/0xed0 [ 168.101393][ T7421] ? ref_tracker_alloc+0x318/0x460 [ 168.101414][ T7421] ? __lock_acquire+0xab9/0xd20 [ 168.101434][ T7421] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 168.101462][ T7421] ? tun_get+0x1c/0x2f0 [ 168.101493][ T7421] ? tun_get+0x1c/0x2f0 [ 168.101518][ T7421] ? tun_get+0x1c/0x2f0 [ 168.101550][ T7421] tun_chr_write_iter+0x113/0x200 [ 168.101580][ T7421] vfs_write+0x548/0xa90 [ 168.101601][ T7421] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 168.101628][ T7421] ? __pfx_vfs_write+0x10/0x10 [ 168.101654][ T7421] ? __fget_files+0x2a/0x420 [ 168.101683][ T7421] ksys_write+0x145/0x250 [ 168.101702][ T7421] ? __pfx_ksys_write+0x10/0x10 [ 168.101715][ T7421] ? rcu_is_watching+0x15/0xb0 [ 168.101740][ T7421] ? do_syscall_64+0xbe/0x3b0 [ 168.101768][ T7421] do_syscall_64+0xfa/0x3b0 [ 168.101789][ T7421] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.101811][ T7421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.101828][ T7421] ? clear_bhb_loop+0x60/0xb0 [ 168.101849][ T7421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.101865][ T7421] RIP: 0033:0x7fd27eb8e9a9 [ 168.101880][ T7421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.101894][ T7421] RSP: 002b:00007fd27f9f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 168.101912][ T7421] RAX: ffffffffffffffda RBX: 00007fd27edb5fa0 RCX: 00007fd27eb8e9a9 [ 168.101924][ T7421] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 168.101934][ T7421] RBP: 00007fd27f9f4090 R08: 0000000000000000 R09: 0000000000000000 [ 168.101944][ T7421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 168.101953][ T7421] R13: 0000000000000000 R14: 00007fd27edb5fa0 R15: 00007ffedbe980c8 [ 168.101981][ T7421] [ 168.654318][ T7430] netlink: 'syz.4.500': attribute type 10 has an invalid length. [ 168.866579][ T7437] FAULT_INJECTION: forcing a failure. [ 168.866579][ T7437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.932823][ T7437] CPU: 0 UID: 0 PID: 7437 Comm: syz.2.503 Not tainted 6.16.0-rc6-syzkaller-g5b4c54ac49af #0 PREEMPT(full) [ 168.932852][ T7437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 168.932864][ T7437] Call Trace: [ 168.932874][ T7437] [ 168.932885][ T7437] dump_stack_lvl+0x189/0x250 [ 168.932919][ T7437] ? __pfx____ratelimit+0x10/0x10 [ 168.932951][ T7437] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.932980][ T7437] ? __pfx__printk+0x10/0x10 [ 168.933015][ T7437] ? __might_fault+0xb0/0x130 [ 168.933047][ T7437] ? __might_fault+0xb0/0x130 [ 168.933088][ T7437] should_fail_ex+0x414/0x560 [ 168.933133][ T7437] _copy_from_user+0x2d/0xb0 [ 168.933161][ T7437] ___sys_sendmsg+0x158/0x2a0 [ 168.933197][ T7437] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.933300][ T7437] ? __fget_files+0x2a/0x420 [ 168.933366][ T7437] ? __fget_files+0x2a/0x420 [ 168.933390][ T7437] ? __fget_files+0x3a0/0x420 [ 168.933450][ T7437] __x64_sys_sendmsg+0x19b/0x260 [ 168.933487][ T7437] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 168.933544][ T7437] ? __pfx_ksys_write+0x10/0x10 [ 168.933561][ T7437] ? rcu_is_watching+0x15/0xb0 [ 168.933604][ T7437] ? do_syscall_64+0xbe/0x3b0 [ 168.933648][ T7437] do_syscall_64+0xfa/0x3b0 [ 168.933677][ T7437] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.933706][ T7437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.933729][ T7437] ? clear_bhb_loop+0x60/0xb0 [ 168.933765][ T7437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.933786][ T7437] RIP: 0033:0x7fd27eb8e9a9 [ 168.933808][ T7437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.933825][ T7437] RSP: 002b:00007fd27f9f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.933847][ T7437] RAX: ffffffffffffffda RBX: 00007fd27edb5fa0 RCX: 00007fd27eb8e9a9 [ 168.933863][ T7437] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000004 [ 168.933876][ T7437] RBP: 00007fd27f9f4090 R08: 0000000000000000 R09: 0000000000000000 [ 168.933888][ T7437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.933900][ T7437] R13: 0000000000000000 R14: 00007fd27edb5fa0 R15: 00007ffedbe980c8 [ 168.933964][ T7437] [ 169.486494][ T7456] netlink: 'syz.2.512': attribute type 10 has an invalid length. [ 169.584245][ T7456] team0: Device ipvlan1 failed to register rx_handler [ 169.823999][ T7465] netlink: 'syz.4.515': attribute type 10 has an invalid length. [ 170.852454][ T7486] netlink: 2 bytes leftover after parsing attributes in process `syz.4.523'. [ 170.863278][ T7486] batadv_slave_1: entered promiscuous mode [ 172.081151][ T7489] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.524'. [ 172.163706][ T7489] netlink: zone id is out of range [ 172.188387][ T7493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.227629][ T7489] netlink: zone id is out of range [ 172.257823][ T7493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.262357][ T7489] netlink: zone id is out of range [ 172.324254][ T7489] netlink: zone id is out of range [ 172.332592][ T7489] netlink: zone id is out of range [ 172.340531][ T7489] netlink: zone id is out of range [ 172.349514][ T7489] netlink: zone id is out of range [ 172.373757][ T7489] netlink: get zone limit has 8 unknown bytes [ 172.393353][ T7510] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.532'. [ 172.424186][ T7493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.450785][ T7510] netlink: 6332 bytes leftover after parsing attributes in process `syz.4.532'. [ 172.478628][ T7493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.495074][ T7513] netlink: 3 bytes leftover after parsing attributes in process `syz.1.533'. [ 172.540882][ T7515] IPv6: Can't replace route, no match found [ 172.612717][ T7510] bridge_slave_1: left allmulticast mode [ 172.630497][ T7510] bridge_slave_1: left promiscuous mode [ 172.637316][ T7510] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.912733][ T7520] netlink: 132 bytes leftover after parsing attributes in process `syz.3.536'. [ 173.417233][ T7510] bridge_slave_0: left allmulticast mode [ 173.528657][ T7510] bridge_slave_0: left promiscuous mode [ 173.546433][ T7510] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.564106][ T7561] netlink: 'syz.1.550': attribute type 29 has an invalid length. [ 174.602291][ T7561] netlink: 'syz.1.550': attribute type 29 has an invalid length. [ 174.647496][ T7561] netlink: 'syz.1.550': attribute type 29 has an invalid length. [ 174.901525][ T7569] netlink: 'syz.1.553': attribute type 9 has an invalid length. [ 174.981318][ T7569] netlink: 204732 bytes leftover after parsing attributes in process `syz.1.553'. [ 175.970614][ T7593] netlink: 'syz.1.561': attribute type 16 has an invalid length. [ 176.010021][ T7593] netlink: 'syz.1.561': attribute type 4 has an invalid length. [ 176.064575][ T7593] netlink: 132 bytes leftover after parsing attributes in process `syz.1.561'. [ 176.155839][ T7596] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.562'. [ 176.165898][ T7596] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.562'. [ 178.508704][ T7613] netlink: 14 bytes leftover after parsing attributes in process `syz.3.565'. [ 179.309890][ T7644] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.578'. [ 179.350441][ T7644] netlink: 6332 bytes leftover after parsing attributes in process `syz.4.578'. [ 180.070676][ T7668] netlink: 'syz.4.587': attribute type 10 has an invalid length. [ 180.685487][ T7693] FAULT_INJECTION: forcing a failure. [ 180.685487][ T7693] name failslab, interval 1, probability 0, space 0, times 0 [ 180.702307][ T7693] CPU: 0 UID: 0 PID: 7693 Comm: syz.4.597 Not tainted 6.16.0-rc6-syzkaller-g5b4c54ac49af #0 PREEMPT(full) [ 180.702329][ T7693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 180.702342][ T7693] Call Trace: [ 180.702351][ T7693] [ 180.702360][ T7693] dump_stack_lvl+0x189/0x250 [ 180.702391][ T7693] ? __pfx____ratelimit+0x10/0x10 [ 180.702420][ T7693] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.702445][ T7693] ? __pfx__printk+0x10/0x10 [ 180.702476][ T7693] should_fail_ex+0x414/0x560 [ 180.702500][ T7693] should_failslab+0xa8/0x100 [ 180.702518][ T7693] __kmalloc_cache_noprof+0x70/0x3d0 [ 180.702533][ T7693] ? sctp_add_bind_addr+0x8c/0x370 [ 180.702558][ T7693] sctp_add_bind_addr+0x8c/0x370 [ 180.702583][ T7693] sctp_copy_local_addr_list+0x30b/0x4e0 [ 180.702608][ T7693] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 180.702630][ T7693] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 180.702655][ T7693] ? sctp_v4_is_any+0x35/0x60 [ 180.702676][ T7693] ? sctp_copy_one_addr+0x93/0x360 [ 180.702700][ T7693] sctp_bind_addr_copy+0xb3/0x3c0 [ 180.702722][ T7693] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 180.702743][ T7693] sctp_connect_new_asoc+0x2e0/0x690 [ 180.702762][ T7693] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 180.702777][ T7693] ? __local_bh_enable_ip+0x12d/0x1c0 [ 180.702800][ T7693] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 180.702823][ T7693] ? security_sctp_bind_connect+0x7e/0x2e0 [ 180.702843][ T7693] sctp_sendmsg+0x155c/0x2810 [ 180.702867][ T7693] ? __pfx_sctp_sendmsg+0x10/0x10 [ 180.702885][ T7693] ? aa_sk_perm+0x81e/0x950 [ 180.702907][ T7693] ? __pfx_aa_sk_perm+0x10/0x10 [ 180.702927][ T7693] ? sock_rps_record_flow+0x19/0x410 [ 180.702950][ T7693] ? inet_sendmsg+0x2f4/0x370 [ 180.702973][ T7693] __sock_sendmsg+0x19c/0x270 [ 180.702998][ T7693] ____sys_sendmsg+0x505/0x830 [ 180.703019][ T7693] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.703044][ T7693] ? import_iovec+0x74/0xa0 [ 180.703061][ T7693] ___sys_sendmsg+0x21f/0x2a0 [ 180.703080][ T7693] ? __pfx____sys_sendmsg+0x10/0x10 [ 180.703125][ T7693] ? __fget_files+0x2a/0x420 [ 180.703141][ T7693] ? __fget_files+0x3a0/0x420 [ 180.703172][ T7693] __x64_sys_sendmsg+0x19b/0x260 [ 180.703191][ T7693] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 180.703216][ T7693] ? __pfx_ksys_write+0x10/0x10 [ 180.703234][ T7693] ? do_syscall_64+0xbe/0x3b0 [ 180.703257][ T7693] do_syscall_64+0xfa/0x3b0 [ 180.703276][ T7693] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.703295][ T7693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.703310][ T7693] ? clear_bhb_loop+0x60/0xb0 [ 180.703329][ T7693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.703343][ T7693] RIP: 0033:0x7f703818e9a9 [ 180.703357][ T7693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.703369][ T7693] RSP: 002b:00007f7038f34038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.703385][ T7693] RAX: ffffffffffffffda RBX: 00007f70383b6080 RCX: 00007f703818e9a9 [ 180.703396][ T7693] RDX: 0000000000008804 RSI: 0000200000000380 RDI: 0000000000000005 [ 180.703405][ T7693] RBP: 00007f7038f34090 R08: 0000000000000000 R09: 0000000000000000 [ 180.703416][ T7693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 180.703424][ T7693] R13: 0000000000000000 R14: 00007f70383b6080 R15: 00007fffc7029a48 [ 180.703449][ T7693] [ 180.719095][ T7691] netlink: 22 bytes leftover after parsing attributes in process `syz.2.595'. [ 181.501200][ T7718] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.606'. [ 181.531607][ T7721] netlink: 60 bytes leftover after parsing attributes in process `syz.4.607'. [ 181.538743][ T7718] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.606'. [ 181.558946][ T7722] netlink: 60 bytes leftover after parsing attributes in process `syz.4.607'. [ 181.683546][ T7720] netlink: 60 bytes leftover after parsing attributes in process `syz.4.607'. [ 181.923188][ T7733] netlink: 168 bytes leftover after parsing attributes in process `syz.1.610'. [ 181.976360][ T7734] netlink: 'syz.3.611': attribute type 10 has an invalid length. [ 182.046267][ T7734] team0: Device ipvlan1 failed to register rx_handler [ 183.085707][ T7760] netlink: 'syz.3.618': attribute type 11 has an invalid length. [ 183.096705][ T7760] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.618'. [ 183.132614][ T7763] netlink: 'syz.0.619': attribute type 21 has an invalid length. [ 184.743466][ T7776] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.624'. [ 184.754353][ T7776] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.624'. [ 185.046819][ T7744] netlink: 160 bytes leftover after parsing attributes in process `syz.4.612'. [ 185.271818][ T7784] netlink: 'syz.4.627': attribute type 10 has an invalid length. [ 185.284211][ T7785] netlink: 'syz.0.626': attribute type 21 has an invalid length. [ 185.858002][ T7801] netlink: 'syz.4.633': attribute type 10 has an invalid length. [ 186.661867][ T7821] netlink: 'syz.4.639': attribute type 10 has an invalid length. [ 186.711577][ T7825] netlink: 'syz.3.642': attribute type 21 has an invalid length. [ 186.889434][ T7834] __nla_validate_parse: 4 callbacks suppressed [ 186.889457][ T7834] netlink: 16170 bytes leftover after parsing attributes in process `syz.3.642'. [ 186.981375][ T7830] netlink: 'syz.3.642': attribute type 29 has an invalid length. [ 186.993127][ T7830] netlink: 'syz.3.642': attribute type 29 has an invalid length. [ 187.056037][ T7842] netlink: 'syz.0.646': attribute type 10 has an invalid length. [ 187.065229][ T7842] netlink: 156 bytes leftover after parsing attributes in process `syz.0.646'. [ 188.287940][ T7869] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.653'. [ 188.303990][ T7869] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 188.312766][ T7869] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 188.420528][ T7872] netlink: 'syz.2.655': attribute type 10 has an invalid length. [ 189.729614][ T7908] netlink: 'syz.4.669': attribute type 10 has an invalid length. [ 189.750464][ T7906] netlink: 132 bytes leftover after parsing attributes in process `syz.3.668'. [ 190.464585][ T7944] sit0: entered allmulticast mode [ 190.489149][ T7944] sit0: entered promiscuous mode [ 190.508036][ T7943] validate_nla: 1 callbacks suppressed [ 190.508068][ T7943] netlink: 'syz.2.683': attribute type 10 has an invalid length. [ 191.520417][ T7952] netlink: 'syz.0.686': attribute type 7 has an invalid length. [ 192.784308][ T7965] netlink: 'syz.1.689': attribute type 10 has an invalid length. [ 192.792349][ T7965] vlan0: entered allmulticast mode [ 193.464699][ T7981] netlink: 'syz.2.695': attribute type 1 has an invalid length. [ 193.555213][ T7985] delete_channel: no stack [ 193.803849][ T7987] netlink: 'syz.2.697': attribute type 10 has an invalid length. [ 193.945473][ T7993] FAULT_INJECTION: forcing a failure. [ 193.945473][ T7993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.974884][ T7993] CPU: 1 UID: 0 PID: 7993 Comm: syz.1.700 Not tainted 6.16.0-rc6-syzkaller-g5b4c54ac49af #0 PREEMPT(full) [ 193.974931][ T7993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 193.974949][ T7993] Call Trace: [ 193.974959][ T7993] [ 193.974969][ T7993] dump_stack_lvl+0x189/0x250 [ 193.975001][ T7993] ? irqentry_exit+0x74/0x90 [ 193.975032][ T7993] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.975068][ T7993] ? dump_stack+0x9/0x20 [ 193.975101][ T7993] should_fail_ex+0x414/0x560 [ 193.975134][ T7993] _copy_from_user+0x2d/0xb0 [ 193.975158][ T7993] __sys_bpf+0x1ed/0x870 [ 193.975181][ T7993] ? __pfx___sys_bpf+0x10/0x10 [ 193.975224][ T7993] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 193.975272][ T7993] __x64_sys_bpf+0x7c/0x90 [ 193.975304][ T7993] do_syscall_64+0xfa/0x3b0 [ 193.975335][ T7993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.975356][ T7993] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 193.975378][ T7993] ? clear_bhb_loop+0x60/0xb0 [ 193.975405][ T7993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.975438][ T7993] RIP: 0033:0x7f689218e9a9 [ 193.975457][ T7993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.975474][ T7993] RSP: 002b:00007f6893015038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 193.975496][ T7993] RAX: ffffffffffffffda RBX: 00007f68923b5fa0 RCX: 00007f689218e9a9 [ 193.975511][ T7993] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 193.975525][ T7993] RBP: 00007f6893015090 R08: 0000000000000000 R09: 0000000000000000 [ 193.975538][ T7993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.975550][ T7993] R13: 0000000000000000 R14: 00007f68923b5fa0 R15: 00007ffc6e6c80f8 [ 193.975582][ T7993] [ 194.334368][ T7996] syz.2.701 (7996) used greatest stack depth: 17960 bytes left [ 194.413761][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.421122][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.050608][ T8012] netlink: 'syz.1.707': attribute type 1 has an invalid length. [ 195.068817][ T8014] netlink: 'syz.1.707': attribute type 1 has an invalid length. [ 196.101202][ T8028] netlink: 'syz.1.711': attribute type 10 has an invalid length. [ 196.676326][ T8040] netlink: 'syz.3.713': attribute type 10 has an invalid length. [ 196.833464][ T8040] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 196.880272][ T8046] FAULT_INJECTION: forcing a failure. [ 196.880272][ T8046] name failslab, interval 1, probability 0, space 0, times 0 [ 196.898603][ T8046] CPU: 0 UID: 0 PID: 8046 Comm: syz.1.716 Not tainted 6.16.0-rc6-syzkaller-g5b4c54ac49af #0 PREEMPT(full) [ 196.898644][ T8046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 196.898657][ T8046] Call Trace: [ 196.898665][ T8046] [ 196.898675][ T8046] dump_stack_lvl+0x189/0x250 [ 196.898708][ T8046] ? __pfx____ratelimit+0x10/0x10 [ 196.898736][ T8046] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.898762][ T8046] ? __pfx__printk+0x10/0x10 [ 196.898802][ T8046] ? __pfx___might_resched+0x10/0x10 [ 196.898834][ T8046] should_fail_ex+0x414/0x560 [ 196.898870][ T8046] should_failslab+0xa8/0x100 [ 196.898897][ T8046] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 196.898920][ T8046] ? __alloc_skb+0x112/0x2d0 [ 196.898944][ T8046] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 196.898976][ T8046] __alloc_skb+0x112/0x2d0 [ 196.899004][ T8046] pfkey_sendmsg+0x1dd/0x1090 [ 196.899038][ T8046] ? perf_trace_lock+0xec/0x3b0 [ 196.899066][ T8046] ? __pfx___might_resched+0x10/0x10 [ 196.899101][ T8046] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 196.899144][ T8046] ? aa_sk_perm+0x81e/0x950 [ 196.899174][ T8046] ? perf_trace_lock_acquire+0xf5/0x410 [ 196.899199][ T8046] ? __pfx_aa_sk_perm+0x10/0x10 [ 196.899222][ T8046] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 196.899264][ T8046] ? aa_sock_msg_perm+0x94/0x160 [ 196.899295][ T8046] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 196.899322][ T8046] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 196.899355][ T8046] __sock_sendmsg+0x21c/0x270 [ 196.899392][ T8046] ____sys_sendmsg+0x505/0x830 [ 196.899426][ T8046] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.899466][ T8046] ? import_iovec+0x74/0xa0 [ 196.899494][ T8046] ___sys_sendmsg+0x21f/0x2a0 [ 196.899523][ T8046] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.899581][ T8046] ? __fget_files+0x2a/0x420 [ 196.899625][ T8046] ? __fget_files+0x2a/0x420 [ 196.899648][ T8046] ? __fget_files+0x3a0/0x420 [ 196.899690][ T8046] __x64_sys_sendmsg+0x19b/0x260 [ 196.899719][ T8046] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 196.899760][ T8046] ? __pfx_ksys_write+0x10/0x10 [ 196.899777][ T8046] ? rcu_is_watching+0x15/0xb0 [ 196.899810][ T8046] ? do_syscall_64+0xbe/0x3b0 [ 196.899845][ T8046] do_syscall_64+0xfa/0x3b0 [ 196.899873][ T8046] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.899900][ T8046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.899939][ T8046] ? clear_bhb_loop+0x60/0xb0 [ 196.899968][ T8046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.899988][ T8046] RIP: 0033:0x7f689218e9a9 [ 196.900008][ T8046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.900025][ T8046] RSP: 002b:00007f6892ff4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.900048][ T8046] RAX: ffffffffffffffda RBX: 00007f68923b6080 RCX: 00007f689218e9a9 [ 196.900063][ T8046] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000004 [ 196.900076][ T8046] RBP: 00007f6892ff4090 R08: 0000000000000000 R09: 0000000000000000 [ 196.900088][ T8046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.900100][ T8046] R13: 0000000000000000 R14: 00007f68923b6080 R15: 00007ffc6e6c80f8 [ 196.900140][ T8046] [ 197.950058][ T8074] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.724'. [ 198.080105][ T8087] netlink: 60 bytes leftover after parsing attributes in process `syz.3.724'. [ 198.127531][ T8074] netlink: 60 bytes leftover after parsing attributes in process `syz.3.724'. [ 198.150159][ T8087] netlink: 60 bytes leftover after parsing attributes in process `syz.3.724'. [ 200.193072][ T8142] netlink: 3 bytes leftover after parsing attributes in process `syz.2.739'. [ 200.272630][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.742'. [ 200.283212][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.742'. [ 200.316443][ T8145] netlink: 2 bytes leftover after parsing attributes in process `syz.3.742'. [ 200.385058][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.742'. [ 200.440903][ T8145] netlink: 2 bytes leftover after parsing attributes in process `syz.3.742'. [ 201.428705][ T8192] bridge_slave_0: entered allmulticast mode [ 203.206046][ T8244] __nla_validate_parse: 6 callbacks suppressed [ 203.206079][ T8244] netlink: 56 bytes leftover after parsing attributes in process `syz.3.773'. [ 205.327205][ T8251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'. [ 205.355283][ T8251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.777'. [ 205.365642][ T8251] netlink: 2 bytes leftover after parsing attributes in process `syz.3.777'. [ 205.422683][ T8251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.777'. [ 205.435350][ T8251] netlink: 2 bytes leftover after parsing attributes in process `syz.3.777'. [ 205.681109][ T8258] netlink: 'syz.0.778': attribute type 10 has an invalid length. [ 206.228153][ T8279] FAULT_INJECTION: forcing a failure. [ 206.228153][ T8279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.248183][ T8279] CPU: 1 UID: 0 PID: 8279 Comm: syz.3.786 Not tainted 6.16.0-rc6-syzkaller-g5b4c54ac49af #0 PREEMPT(full) [ 206.248213][ T8279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 206.248226][ T8279] Call Trace: [ 206.248234][ T8279] [ 206.248244][ T8279] dump_stack_lvl+0x189/0x250 [ 206.248274][ T8279] ? __pfx____ratelimit+0x10/0x10 [ 206.248302][ T8279] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.248327][ T8279] ? __pfx__printk+0x10/0x10 [ 206.248357][ T8279] ? __might_fault+0xb0/0x130 [ 206.248389][ T8279] should_fail_ex+0x414/0x560 [ 206.248422][ T8279] _copy_from_user+0x2d/0xb0 [ 206.248443][ T8279] __sys_bpf+0x1ed/0x870 [ 206.248464][ T8279] ? __pfx___sys_bpf+0x10/0x10 [ 206.248498][ T8279] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 206.248541][ T8279] __x64_sys_bpf+0x7c/0x90 [ 206.248570][ T8279] do_syscall_64+0xfa/0x3b0 [ 206.248600][ T8279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.248620][ T8279] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 206.248641][ T8279] ? clear_bhb_loop+0x60/0xb0 [ 206.248666][ T8279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.248686][ T8279] RIP: 0033:0x7f729318e9a9 [ 206.248704][ T8279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.248721][ T8279] RSP: 002b:00007f72940bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 206.248742][ T8279] RAX: ffffffffffffffda RBX: 00007f72933b5fa0 RCX: 00007f729318e9a9 [ 206.248757][ T8279] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 0000000000000012 [ 206.248770][ T8279] RBP: 00007f72940bf090 R08: 0000000000000000 R09: 0000000000000000 [ 206.248793][ T8279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.248804][ T8279] R13: 0000000000000000 R14: 00007f72933b5fa0 R15: 00007ffd45d0f828 [ 206.248834][ T8279] [ 207.281741][ T8308] netlink: 36 bytes leftover after parsing attributes in process `syz.3.795'. [ 207.652695][ T8315] FAULT_INJECTION: forcing a failure. [ 207.652695][ T8315] name failslab, interval 1, probability 0, space 0, times 0 [ 207.705907][ T8315] CPU: 1 UID: 0 PID: 8315 Comm: syz.1.798 Not tainted 6.16.0-rc6-syzkaller-g5b4c54ac49af #0 PREEMPT(full) [ 207.705945][ T8315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 207.705958][ T8315] Call Trace: [ 207.705967][ T8315] [ 207.705977][ T8315] dump_stack_lvl+0x189/0x250 [ 207.706009][ T8315] ? __pfx____ratelimit+0x10/0x10 [ 207.706039][ T8315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.706065][ T8315] ? __pfx__printk+0x10/0x10 [ 207.706103][ T8315] ? __pfx___might_resched+0x10/0x10 [ 207.706135][ T8315] should_fail_ex+0x414/0x560 [ 207.706170][ T8315] should_failslab+0xa8/0x100 [ 207.706198][ T8315] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 207.706225][ T8315] ? __alloc_skb+0x112/0x2d0 [ 207.706252][ T8315] __alloc_skb+0x112/0x2d0 [ 207.706279][ T8315] netlink_sendmsg+0x5c6/0xb30 [ 207.706314][ T8315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.706342][ T8315] ? aa_sock_msg_perm+0x94/0x160 [ 207.706373][ T8315] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 207.706399][ T8315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.706422][ T8315] __sock_sendmsg+0x21c/0x270 [ 207.706454][ T8315] ____sys_sendmsg+0x505/0x830 [ 207.706483][ T8315] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.706520][ T8315] ? import_iovec+0x74/0xa0 [ 207.706545][ T8315] ___sys_sendmsg+0x21f/0x2a0 [ 207.706573][ T8315] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.706625][ T8315] ? __fget_files+0x2a/0x420 [ 207.706666][ T8315] ? __fget_files+0x2a/0x420 [ 207.706689][ T8315] ? __fget_files+0x3a0/0x420 [ 207.706728][ T8315] __x64_sys_sendmsg+0x19b/0x260 [ 207.706757][ T8315] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 207.706793][ T8315] ? __pfx_ksys_write+0x10/0x10 [ 207.706821][ T8315] ? do_syscall_64+0xbe/0x3b0 [ 207.706855][ T8315] do_syscall_64+0xfa/0x3b0 [ 207.706883][ T8315] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.706910][ T8315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.706938][ T8315] ? clear_bhb_loop+0x60/0xb0 [ 207.706965][ T8315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.706985][ T8315] RIP: 0033:0x7f689218e9a9 [ 207.707004][ T8315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.707021][ T8315] RSP: 002b:00007f6893015038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.707044][ T8315] RAX: ffffffffffffffda RBX: 00007f68923b5fa0 RCX: 00007f689218e9a9 [ 207.707059][ T8315] RDX: 0000000000000014 RSI: 0000200000000000 RDI: 0000000000000005 [ 207.707072][ T8315] RBP: 00007f6893015090 R08: 0000000000000000 R09: 0000000000000000 [ 207.707085][ T8315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.707097][ T8315] R13: 0000000000000000 R14: 00007f68923b5fa0 R15: 00007ffc6e6c80f8 [ 207.707133][ T8315] [ 208.492122][ T8334] netlink: 146936 bytes leftover after parsing attributes in process `syz.3.805'. [ 208.529793][ T8336] netlink: 'syz.4.806': attribute type 3 has an invalid length. [ 208.611455][ T8336] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.806'. [ 208.639601][ T8334] openvswitch: netlink: Message has 6 unknown bytes. [ 209.497743][ T8360] netlink: 192 bytes leftover after parsing attributes in process `syz.3.814'. [ 209.922466][ T8372] netlink: 'syz.4.817': attribute type 29 has an invalid length. [ 209.964015][ T8372] netlink: 'syz.4.817': attribute type 29 has an invalid length. [ 210.039540][ T8375] netlink: 'syz.4.817': attribute type 29 has an invalid length. [ 210.194062][ T8376] netlink: 'syz.4.817': attribute type 29 has an invalid length. [ 210.596708][ T8383] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.820'. [ 210.623412][ T8383] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 210.659815][ T8383] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 210.722280][ T8385] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.193412][ T8389] FAULT_INJECTION: forcing a failure. [ 211.193412][ T8389] name failslab, interval 1, probability 0, space 0, times 0 [ 211.279449][ T8389] CPU: 0 UID: 0 PID: 8389 Comm: syz.3.823 Not tainted 6.16.0-rc6-syzkaller-g5b4c54ac49af #0 PREEMPT(full) [ 211.279482][ T8389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 211.279495][ T8389] Call Trace: [ 211.279504][ T8389] [ 211.279513][ T8389] dump_stack_lvl+0x189/0x250 [ 211.279545][ T8389] ? __pfx____ratelimit+0x10/0x10 [ 211.279575][ T8389] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.279603][ T8389] ? __pfx__printk+0x10/0x10 [ 211.279643][ T8389] ? __pfx___might_resched+0x10/0x10 [ 211.279667][ T8389] ? fs_reclaim_acquire+0x7d/0x100 [ 211.279701][ T8389] should_fail_ex+0x414/0x560 [ 211.279737][ T8389] should_failslab+0xa8/0x100 [ 211.279765][ T8389] __kmalloc_noprof+0xcb/0x4f0 [ 211.279786][ T8389] ? bpf_test_init+0xc2/0x170 [ 211.279828][ T8389] bpf_test_init+0xc2/0x170 [ 211.279869][ T8389] bpf_prog_test_run_xdp+0x37c/0x1000 [ 211.279915][ T8389] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 211.279946][ T8389] ? __fget_files+0x2a/0x420 [ 211.279980][ T8389] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 211.280004][ T8389] bpf_prog_test_run+0x2c7/0x340 [ 211.280032][ T8389] __sys_bpf+0x581/0x870 [ 211.280057][ T8389] ? __pfx___sys_bpf+0x10/0x10 [ 211.280109][ T8389] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 211.280145][ T8389] ? __pfx_ksys_write+0x10/0x10 [ 211.280178][ T8389] __x64_sys_bpf+0x7c/0x90 [ 211.280211][ T8389] do_syscall_64+0xfa/0x3b0 [ 211.280239][ T8389] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.280268][ T8389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.280290][ T8389] ? clear_bhb_loop+0x60/0xb0 [ 211.280318][ T8389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.280339][ T8389] RIP: 0033:0x7f729318e9a9 [ 211.280359][ T8389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.280383][ T8389] RSP: 002b:00007f72940bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 211.280407][ T8389] RAX: ffffffffffffffda RBX: 00007f72933b5fa0 RCX: 00007f729318e9a9 [ 211.280422][ T8389] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 211.280436][ T8389] RBP: 00007f72940bf090 R08: 0000000000000000 R09: 0000000000000000 [ 211.280449][ T8389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.280462][ T8389] R13: 0000000000000000 R14: 00007f72933b5fa0 R15: 00007ffd45d0f828 [ 211.280502][ T8389] [ 211.842099][ T8393] netlink: 'syz.0.825': attribute type 10 has an invalid length. [ 211.928689][ T5856] Bluetooth: hci3: command 0x0406 tx timeout [ 211.935728][ T5855] Bluetooth: hci0: command 0x0406 tx timeout [ 211.937385][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 211.941802][ T5855] Bluetooth: hci4: command 0x0406 tx timeout [ 211.941840][ T5855] Bluetooth: hci1: command 0x0406 tx timeout [ 211.961650][ T8397] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.826'. [ 212.024904][ T8397] netlink: 6332 bytes leftover after parsing attributes in process `syz.4.826'. [ 212.574871][ T8422] netlink: 60 bytes leftover after parsing attributes in process `syz.0.832'. [ 212.591997][ T8415] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.833'. [ 212.612114][ T8415] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.833'. [ 212.637479][ T8417] netlink: 60 bytes leftover after parsing attributes in process `syz.0.832'. [ 212.846471][ T8429] netlink: 'syz.3.837': attribute type 10 has an invalid length. [ 212.869669][ T8415] bridge_slave_1: left allmulticast mode [ 212.869764][ T8415] bridge_slave_1: left promiscuous mode [ 212.870850][ T8415] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.910404][ T8415] bridge_slave_0: left promiscuous mode [ 212.916612][ T8415] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.117708][ T8439] FAULT_INJECTION: forcing a failure. [ 213.117708][ T8439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.160197][ T8439] CPU: 0 UID: 0 PID: 8439 Comm: syz.2.841 Not tainted 6.16.0-rc6-syzkaller-g5b4c54ac49af #0 PREEMPT(full) [ 213.160230][ T8439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 213.160243][ T8439] Call Trace: [ 213.160252][ T8439] [ 213.160262][ T8439] dump_stack_lvl+0x189/0x250 [ 213.160294][ T8439] ? __pfx____ratelimit+0x10/0x10 [ 213.160324][ T8439] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.160352][ T8439] ? __pfx__printk+0x10/0x10 [ 213.160383][ T8439] ? __might_fault+0xb0/0x130 [ 213.160419][ T8439] should_fail_ex+0x414/0x560 [ 213.160457][ T8439] _copy_from_iter+0x1db/0x16f0 [ 213.160493][ T8439] ? rep_movs_alternative+0x4a/0x90 [ 213.160525][ T8439] ? __pfx__copy_from_iter+0x10/0x10 [ 213.160555][ T8439] ? sock_alloc_send_pskb+0x875/0x990 [ 213.160591][ T8439] ? __pfx__copy_from_iter+0x10/0x10 [ 213.160627][ T8439] ? page_copy_sane+0x16a/0x280 [ 213.160662][ T8439] copy_page_from_iter+0xdd/0x170 [ 213.160701][ T8439] skb_copy_datagram_from_iter+0x306/0x720 [ 213.160744][ T8439] tun_get_user+0x15c3/0x3ce0 [ 213.160801][ T8439] ? aa_file_perm+0x11f/0xed0 [ 213.160833][ T8439] ? __pfx_tun_get_user+0x10/0x10 [ 213.160878][ T8439] ? aa_file_perm+0x11f/0xed0 [ 213.160907][ T8439] ? aa_file_perm+0x3e7/0xed0 [ 213.160951][ T8439] ? ref_tracker_alloc+0x318/0x460 [ 213.160997][ T8439] ? __lock_acquire+0xab9/0xd20 [ 213.161021][ T8439] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 213.161058][ T8439] ? tun_get+0x1c/0x2f0 [ 213.161098][ T8439] ? tun_get+0x1c/0x2f0 [ 213.161130][ T8439] ? tun_get+0x1c/0x2f0 [ 213.161193][ T8439] tun_chr_write_iter+0x113/0x200 [ 213.161229][ T8439] vfs_write+0x548/0xa90 [ 213.161255][ T8439] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 213.161288][ T8439] ? __pfx_vfs_write+0x10/0x10 [ 213.161320][ T8439] ? __fget_files+0x2a/0x420 [ 213.161355][ T8439] ksys_write+0x145/0x250 [ 213.161378][ T8439] ? __pfx_ksys_write+0x10/0x10 [ 213.161395][ T8439] ? rcu_is_watching+0x15/0xb0 [ 213.161426][ T8439] ? do_syscall_64+0xbe/0x3b0 [ 213.161459][ T8439] do_syscall_64+0xfa/0x3b0 [ 213.161487][ T8439] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.161515][ T8439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.161536][ T8439] ? clear_bhb_loop+0x60/0xb0 [ 213.161562][ T8439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.161582][ T8439] RIP: 0033:0x7fd27eb8e9a9 [ 213.161601][ T8439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.161618][ T8439] RSP: 002b:00007fd27f9f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 213.161641][ T8439] RAX: ffffffffffffffda RBX: 00007fd27edb5fa0 RCX: 00007fd27eb8e9a9 [ 213.161656][ T8439] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 213.161670][ T8439] RBP: 00007fd27f9f4090 R08: 0000000000000000 R09: 0000000000000000 [ 213.161683][ T8439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 213.161695][ T8439] R13: 0000000000000000 R14: 00007fd27edb5fa0 R15: 00007ffedbe980c8 [ 213.161727][ T8439] [ 213.509935][ T8429] veth0_vlan: entered allmulticast mode [ 213.583770][ T8444] netlink: 'syz.2.843': attribute type 10 has an invalid length. [ 213.585311][ T8429] veth0_vlan: left promiscuous mode [ 213.600182][ T8429] veth0_vlan: entered promiscuous mode [ 213.612605][ T8429] team0: Device veth0_vlan failed to register rx_handler [ 214.290603][ T8462] netlink: 'syz.2.849': attribute type 17 has an invalid length. [ 214.330891][ T8462] netlink: 148 bytes leftover after parsing attributes in process `syz.2.849'. [ 214.779850][ T8482] netlink: 'syz.4.855': attribute type 10 has an invalid length. [ 215.011561][ T8491] netlink: 132 bytes leftover after parsing attributes in process `syz.2.859'. [ 215.597761][ T8499] netlink: 54775 bytes leftover after parsing attributes in process `syz.4.861'. [ 216.024113][ T51] Bluetooth: hci4: unexpected event 0x17 length: 15 > 6 [ 216.216109][ T8512] netlink: 'syz.3.866': attribute type 12 has an invalid length. [ 216.309953][ T8512] netlink: 132 bytes leftover after parsing attributes in process `syz.3.866'. [ 216.840120][ T8521] netlink: 'syz.1.870': attribute type 10 has an invalid length. [ 217.130013][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.871'. [ 217.149196][ T8527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.871'. [ 217.192381][ T8527] netlink: 2 bytes leftover after parsing attributes in process `syz.4.871'. [ 217.215489][ T8527] bridge_slave_0: entered allmulticast mode [ 217.320955][ T8527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.871'. [ 217.399241][ T8533] netlink: 'syz.1.874': attribute type 21 has an invalid length. [ 217.430067][ T8527] netlink: 2 bytes leftover after parsing attributes in process `syz.4.871'. [ 217.489412][ T8533] netlink: 'syz.1.874': attribute type 1 has an invalid length. [ 217.635775][ T8540] netlink: 3 bytes leftover after parsing attributes in process `syz.0.876'. [ 218.165880][ T8559] netlink: 'syz.4.884': attribute type 10 has an invalid length. [ 218.264562][ T8566] netlink: 'syz.3.883': attribute type 10 has an invalid length. [ 218.667853][ T8574] netlink: 'syz.1.887': attribute type 1 has an invalid length. [ 219.774228][ T8605] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 219.828611][ T8605] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 219.906825][ T8607] netlink: 'syz.1.898': attribute type 3 has an invalid length. [ 219.972429][ T8607] __nla_validate_parse: 6 callbacks suppressed [ 219.972453][ T8607] netlink: 132 bytes leftover after parsing attributes in process `syz.1.898'. [ 222.388042][ T8649] netlink: 'syz.1.914': attribute type 2 has an invalid length. [ 223.549998][ T8681] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.923'. [ 224.346097][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.925'. [ 225.702142][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.927'. [ 225.711902][ T8697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.927'. [ 225.744459][ T8697] netlink: 2 bytes leftover after parsing attributes in process `syz.3.927'. [ 225.787825][ T8697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.927'. [ 225.804213][ T8697] netlink: 2 bytes leftover after parsing attributes in process `syz.3.927'. [ 225.874625][ T8693] netlink: 60 bytes leftover after parsing attributes in process `syz.1.926'. [ 225.969483][ T8692] netlink: 60 bytes leftover after parsing attributes in process `syz.1.926'. [ 226.011304][ T8694] netlink: 60 bytes leftover after parsing attributes in process `syz.1.926'. [ 226.565241][ T8716] FAULT_INJECTION: forcing a failure. [ 226.565241][ T8716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.611874][ T8716] CPU: 1 UID: 0 PID: 8716 Comm: syz.3.934 Not tainted 6.16.0-rc6-syzkaller-g5b4c54ac49af #0 PREEMPT(full) [ 226.611906][ T8716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 226.611919][ T8716] Call Trace: [ 226.611927][ T8716] [ 226.611937][ T8716] dump_stack_lvl+0x189/0x250 [ 226.611971][ T8716] ? __pfx____ratelimit+0x10/0x10 [ 226.612011][ T8716] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.612035][ T8716] ? __pfx__printk+0x10/0x10 [ 226.612063][ T8716] ? __might_fault+0xb0/0x130 [ 226.612095][ T8716] should_fail_ex+0x414/0x560 [ 226.612143][ T8716] _copy_from_user+0x2d/0xb0 [ 226.612166][ T8716] __sys_bpf+0x1ed/0x870 [ 226.612197][ T8716] ? __pfx___sys_bpf+0x10/0x10 [ 226.612231][ T8716] ? ksys_write+0x22a/0x250 [ 226.612254][ T8716] ? __pfx_ksys_write+0x10/0x10 [ 226.612283][ T8716] __x64_sys_bpf+0x7c/0x90 [ 226.612315][ T8716] do_syscall_64+0xfa/0x3b0 [ 226.612343][ T8716] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.612370][ T8716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.612392][ T8716] ? clear_bhb_loop+0x60/0xb0 [ 226.612418][ T8716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.612438][ T8716] RIP: 0033:0x7f729318e9a9 [ 226.612459][ T8716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.612476][ T8716] RSP: 002b:00007f72940bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 226.612499][ T8716] RAX: ffffffffffffffda RBX: 00007f72933b5fa0 RCX: 00007f729318e9a9 [ 226.612514][ T8716] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012 [ 226.612528][ T8716] RBP: 00007f72940bf090 R08: 0000000000000000 R09: 0000000000000000 [ 226.612541][ T8716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.612553][ T8716] R13: 0000000000000001 R14: 00007f72933b5fa0 R15: 00007ffd45d0f828 [ 226.612592][ T8716] [ 226.908163][ T8724] ip6_tunnel: non-ECT from 0000:0000:0400:0000:0000:0000:ac14:140a with DS=0x31 [ 230.030618][ T8763] netlink: 'syz.4.946': attribute type 3 has an invalid length. [ 230.058557][ T8763] netlink: 132 bytes leftover after parsing attributes in process `syz.4.946'. [ 230.084104][ T8767] netlink: 'syz.3.947': attribute type 3 has an invalid length. [ 230.118674][ T8767] netlink: 132 bytes leftover after parsing attributes in process `syz.3.947'. [ 230.500157][ T8774] netlink: 'syz.0.949': attribute type 10 has an invalid length. [ 231.116880][ T8790] __nla_validate_parse: 1 callbacks suppressed [ 231.116919][ T8790] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.952'. [ 231.210587][ T8790] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.952'. [ 231.466142][ T8785] : renamed from bond_slave_0 (while UP) [ 231.601866][ T8785] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.948'. [ 232.095279][ T8809] netlink: 'syz.3.957': attribute type 13 has an invalid length. [ 232.146039][ T8809] netlink: 40 bytes leftover after parsing attributes in process `syz.3.957'. [ 232.189175][ T8809] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 232.642112][ T8821] netlink: 'syz.3.961': attribute type 10 has an invalid length. [ 232.939939][ T8821] team0: Port device geneve1 added [ 233.147528][ T8832] netlink: 'syz.0.975': attribute type 10 has an invalid length. [ 233.299587][ T8835] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.965'. [ 234.626972][ T8844] netlink: 'syz.2.968': attribute type 10 has an invalid length. [ 234.636867][ T8844] vlan0: entered allmulticast mode [ 234.642560][ T8844] veth0_vlan: entered allmulticast mode [ 234.659853][ T8844] team0: Port device vlan0 added [ 236.755271][ T8897] FAULT_INJECTION: forcing a failure. [ 236.755271][ T8897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.834157][ T8897] CPU: 1 UID: 0 PID: 8897 Comm: syz.4.986 Not tainted 6.16.0-rc6-syzkaller-g5b4c54ac49af #0 PREEMPT(full) [ 236.834190][ T8897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 236.834203][ T8897] Call Trace: [ 236.834212][ T8897] [ 236.834223][ T8897] dump_stack_lvl+0x189/0x250 [ 236.834256][ T8897] ? __pfx____ratelimit+0x10/0x10 [ 236.834287][ T8897] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.834314][ T8897] ? __pfx__printk+0x10/0x10 [ 236.834346][ T8897] ? __might_fault+0xb0/0x130 [ 236.834372][ T8897] ? __might_fault+0xb0/0x130 [ 236.834402][ T8897] should_fail_ex+0x414/0x560 [ 236.834438][ T8897] _copy_from_user+0x2d/0xb0 [ 236.834463][ T8897] __sys_bpf+0x1ed/0x870 [ 236.834488][ T8897] ? __pfx___sys_bpf+0x10/0x10 [ 236.834527][ T8897] ? ksys_write+0x22a/0x250 [ 236.834553][ T8897] ? __pfx_ksys_write+0x10/0x10 [ 236.834571][ T8897] ? rcu_is_watching+0x15/0xb0 [ 236.834608][ T8897] __x64_sys_bpf+0x7c/0x90 [ 236.834642][ T8897] do_syscall_64+0xfa/0x3b0 [ 236.834671][ T8897] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.834699][ T8897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.834721][ T8897] ? clear_bhb_loop+0x60/0xb0 [ 236.834750][ T8897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.834771][ T8897] RIP: 0033:0x7f703818e9a9 [ 236.834791][ T8897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.834809][ T8897] RSP: 002b:00007f7038f55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 236.834834][ T8897] RAX: ffffffffffffffda RBX: 00007f70383b5fa0 RCX: 00007f703818e9a9 [ 236.834850][ T8897] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 000000000000000f [ 236.834864][ T8897] RBP: 00007f7038f55090 R08: 0000000000000000 R09: 0000000000000000 [ 236.834877][ T8897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.834890][ T8897] R13: 0000000000000000 R14: 00007f70383b5fa0 R15: 00007fffc7029a48 [ 236.834928][ T8897] [ 241.721530][ T8952] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.1003'. [ 241.754335][ T8952] netlink: 6332 bytes leftover after parsing attributes in process `syz.4.1003'. [ 242.076931][ T8965] netlink: 'syz.1.1006': attribute type 12 has an invalid length. [ 242.119061][ T8965] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1006'. [ 242.318840][ T8969] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1007'. [ 242.788857][ T8984] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1013'. [ 242.798240][ T8982] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1013'. [ 242.825089][ T8984] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.1013'. [ 242.858647][ T8984] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.1013'. [ 242.878645][ T8985] netlink: 'syz.3.1011': attribute type 29 has an invalid length. [ 242.900765][ T8984] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.1013'. [ 242.924631][ T8982] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1013'. [ 243.013503][ T8985] netlink: 'syz.3.1011': attribute type 29 has an invalid length. [ 244.855498][ T9017] netlink: 'syz.0.1024': attribute type 3 has an invalid length. [ 245.545812][ T9054] netlink: 'syz.2.1033': attribute type 10 has an invalid length. [ 246.781586][ T9060] __nla_validate_parse: 4 callbacks suppressed [ 246.781610][ T9060] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.1036'. [ 246.802737][ T9060] netlink: 6332 bytes leftover after parsing attributes in process `syz.4.1036'. [ 248.431187][ T9054] team0: Port device geneve1 added [ 248.831128][ T9076] netlink: 'syz.3.1041': attribute type 3 has an invalid length. [ 248.840103][ T9073] netlink: 'syz.1.1040': attribute type 10 has an invalid length. [ 248.842555][ T9076] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1041'. [ 248.923026][ T9073] team0: Device ipvlan1 failed to register rx_handler [ 249.274822][ T9090] FAULT_INJECTION: forcing a failure. [ 249.274822][ T9090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.294105][ T9090] CPU: 0 UID: 0 PID: 9090 Comm: syz.3.1044 Not tainted 6.16.0-rc6-syzkaller-g5b4c54ac49af #0 PREEMPT(full) [ 249.294142][ T9090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 249.294155][ T9090] Call Trace: [ 249.294167][ T9090] [ 249.294198][ T9090] dump_stack_lvl+0x189/0x250 [ 249.294238][ T9090] ? __pfx____ratelimit+0x10/0x10 [ 249.294277][ T9090] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.294314][ T9090] ? __pfx__printk+0x10/0x10 [ 249.294358][ T9090] ? __might_fault+0xb0/0x130 [ 249.294403][ T9090] ? __might_fault+0xb0/0x130 [ 249.294463][ T9090] should_fail_ex+0x414/0x560 [ 249.294529][ T9090] _copy_from_iter+0x1db/0x16f0 [ 249.294595][ T9090] ? rcu_is_watching+0x15/0xb0 [ 249.294636][ T9090] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 249.294674][ T9090] ? __pfx__copy_from_iter+0x10/0x10 [ 249.294729][ T9090] ? __build_skb_around+0x257/0x3e0 [ 249.294779][ T9090] ? netlink_sendmsg+0x642/0xb30 [ 249.294800][ T9090] ? skb_put+0x11b/0x210 [ 249.294853][ T9090] netlink_sendmsg+0x6b2/0xb30 [ 249.294936][ T9090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.294986][ T9090] ? aa_sock_msg_perm+0x94/0x160 [ 249.295034][ T9090] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 249.295070][ T9090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.295108][ T9090] __sock_sendmsg+0x21c/0x270 [ 249.295173][ T9090] ____sys_sendmsg+0x505/0x830 [ 249.295240][ T9090] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.295326][ T9090] ? import_iovec+0x74/0xa0 [ 249.295379][ T9090] ___sys_sendmsg+0x21f/0x2a0 [ 249.295446][ T9090] ? __pfx____sys_sendmsg+0x10/0x10 [ 249.295590][ T9090] ? __fget_files+0x2a/0x420 [ 249.295684][ T9090] ? __fget_files+0x2a/0x420 [ 249.295710][ T9090] ? __fget_files+0x3a0/0x420 [ 249.295796][ T9090] __x64_sys_sendmsg+0x19b/0x260 [ 249.295845][ T9090] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 249.295928][ T9090] ? __pfx_ksys_write+0x10/0x10 [ 249.295945][ T9090] ? rcu_is_watching+0x15/0xb0 [ 249.296004][ T9090] ? do_syscall_64+0xbe/0x3b0 [ 249.296059][ T9090] do_syscall_64+0xfa/0x3b0 [ 249.296088][ T9090] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.296129][ T9090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.296154][ T9090] ? clear_bhb_loop+0x60/0xb0 [ 249.296199][ T9090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.296221][ T9090] RIP: 0033:0x7f729318e9a9 [ 249.296247][ T9090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.296264][ T9090] RSP: 002b:00007f72940bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.296288][ T9090] RAX: ffffffffffffffda RBX: 00007f72933b5fa0 RCX: 00007f729318e9a9 [ 249.296303][ T9090] RDX: 0000000000000014 RSI: 0000200000000000 RDI: 0000000000000005 [ 249.296316][ T9090] RBP: 00007f72940bf090 R08: 0000000000000000 R09: 0000000000000000 [ 249.296329][ T9090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.296341][ T9090] R13: 0000000000000000 R14: 00007f72933b5fa0 R15: 00007ffd45d0f828 [ 249.296461][ T9090] [ 250.303839][ T9101] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1048'. [ 250.327207][ T9101] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 250.356669][ T9101] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 251.128775][ T9124] netlink: 'syz.1.1055': attribute type 3 has an invalid length. [ 251.214828][ T9124] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1055'. [ 251.392122][ T9133] netlink: 'syz.4.1056': attribute type 6 has an invalid length. [ 251.408765][ T9133] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1056'. [ 251.807901][ T9147] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1059'. [ 251.931761][ T9143] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1059'. [ 252.051263][ T9147] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1059'. [ 252.876603][ T9169] netlink: 'syz.0.1065': attribute type 2 has an invalid length. [ 252.947484][ T9154] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1061'. [ 253.005487][ T9158] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1061'. [ 253.028851][ T9168] netlink: 'syz.1.1063': attribute type 29 has an invalid length. [ 253.046630][ T9172] netlink: 'syz.0.1065': attribute type 1 has an invalid length. [ 253.057787][ T9172] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1065'. [ 253.107039][ T9170] netlink: 'syz.1.1063': attribute type 29 has an invalid length. [ 253.141937][ T9171] netlink: 'syz.1.1063': attribute type 29 has an invalid length. [ 253.487928][ T9184] netlink: 'syz.4.1070': attribute type 10 has an invalid length. [ 253.634989][ T9186] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1071'. [ 253.661995][ T9186] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.1071'. [ 253.763582][ T9191] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1073'. [ 254.877452][ T9222] validate_nla: 2 callbacks suppressed [ 254.877483][ T9222] netlink: 'syz.1.1083': attribute type 10 has an invalid length. [ 255.185802][ T9227] netlink: 'syz.2.1085': attribute type 39 has an invalid length. [ 255.255161][ T9229] FAULT_INJECTION: forcing a failure. [ 255.255161][ T9229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.335612][ T9229] CPU: 0 UID: 0 PID: 9229 Comm: syz.1.1086 Not tainted 6.16.0-rc6-syzkaller-g5b4c54ac49af #0 PREEMPT(full) [ 255.335643][ T9229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 255.335656][ T9229] Call Trace: [ 255.335665][ T9229] [ 255.335674][ T9229] dump_stack_lvl+0x189/0x250 [ 255.335705][ T9229] ? __pfx____ratelimit+0x10/0x10 [ 255.335733][ T9229] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.335759][ T9229] ? __pfx__printk+0x10/0x10 [ 255.335788][ T9229] ? __might_fault+0xb0/0x130 [ 255.335821][ T9229] should_fail_ex+0x414/0x560 [ 255.335854][ T9229] _copy_from_user+0x2d/0xb0 [ 255.335877][ T9229] bpf_obj_get_info_by_fd+0xccb/0x2fa0 [ 255.335917][ T9229] ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10 [ 255.335950][ T9229] ? get_pid_task+0x20/0x1f0 [ 255.336003][ T9229] ? __lock_acquire+0xab9/0xd20 [ 255.336034][ T9229] ? __might_fault+0xb0/0x130 [ 255.336069][ T9229] ? bpf_lsm_bpf+0x9/0x20 [ 255.336085][ T9229] ? security_bpf+0x7e/0x300 [ 255.336111][ T9229] __sys_bpf+0x5d1/0x870 [ 255.336132][ T9229] ? __pfx___sys_bpf+0x10/0x10 [ 255.336165][ T9229] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 255.336197][ T9229] ? __pfx_ksys_write+0x10/0x10 [ 255.336214][ T9229] ? rcu_is_watching+0x15/0xb0 [ 255.336244][ T9229] __x64_sys_bpf+0x7c/0x90 [ 255.336273][ T9229] do_syscall_64+0xfa/0x3b0 [ 255.336299][ T9229] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.336323][ T9229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.336362][ T9229] ? clear_bhb_loop+0x60/0xb0 [ 255.336388][ T9229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.336408][ T9229] RIP: 0033:0x7f689218e9a9 [ 255.336427][ T9229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.336444][ T9229] RSP: 002b:00007f6893015038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 255.336467][ T9229] RAX: ffffffffffffffda RBX: 00007f68923b5fa0 RCX: 00007f689218e9a9 [ 255.336483][ T9229] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 000000000000000f [ 255.336496][ T9229] RBP: 00007f6893015090 R08: 0000000000000000 R09: 0000000000000000 [ 255.336509][ T9229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.336526][ T9229] R13: 0000000000000000 R14: 00007f68923b5fa0 R15: 00007ffc6e6c80f8 [ 255.336558][ T9229] [ 255.857346][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.865423][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.136987][ T9241] syzkaller0: entered promiscuous mode [ 256.143759][ T9241] syzkaller0: entered allmulticast mode [ 256.277293][ T51] Bluetooth: hci1: unexpected event 0x17 length: 15 > 6 [ 256.772739][ T9260] netlink: 'syz.1.1097': attribute type 11 has an invalid length. [ 257.298296][ T9266] FAULT_INJECTION: forcing a failure. [ 257.298296][ T9266] name failslab, interval 1, probability 0, space 0, times 0 [ 257.317414][ T9266] CPU: 0 UID: 0 PID: 9266 Comm: syz.1.1099 Not tainted 6.16.0-rc6-syzkaller-g5b4c54ac49af #0 PREEMPT(full) [ 257.317441][ T9266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 257.317454][ T9266] Call Trace: [ 257.317463][ T9266] [ 257.317490][ T9266] dump_stack_lvl+0x189/0x250 [ 257.317522][ T9266] ? __pfx____ratelimit+0x10/0x10 [ 257.317552][ T9266] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.317579][ T9266] ? __pfx__printk+0x10/0x10 [ 257.317624][ T9266] ? __pfx___might_resched+0x10/0x10 [ 257.317665][ T9266] should_fail_ex+0x414/0x560 [ 257.317716][ T9266] should_failslab+0xa8/0x100 [ 257.317748][ T9266] kmem_cache_alloc_noprof+0x73/0x3c0 [ 257.317770][ T9266] ? skb_clone+0x212/0x3a0 [ 257.317815][ T9266] skb_clone+0x212/0x3a0 [ 257.317860][ T9266] pfkey_sendmsg+0x44b/0x1090 [ 257.317949][ T9266] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 257.318061][ T9266] ? perf_trace_run_bpf_submit+0xee/0x170 [ 257.318096][ T9266] ? aa_sock_msg_perm+0x94/0x160 [ 257.318136][ T9266] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 257.318167][ T9266] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 257.318215][ T9266] __sock_sendmsg+0x21c/0x270 [ 257.318264][ T9266] ____sys_sendmsg+0x505/0x830 [ 257.318315][ T9266] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.318379][ T9266] ? import_iovec+0x74/0xa0 [ 257.318424][ T9266] ___sys_sendmsg+0x21f/0x2a0 [ 257.318463][ T9266] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.318567][ T9266] ? __fget_files+0x2a/0x420 [ 257.318638][ T9266] ? __fget_files+0x2a/0x420 [ 257.318664][ T9266] ? __fget_files+0x3a0/0x420 [ 257.318730][ T9266] __x64_sys_sendmsg+0x19b/0x260 [ 257.318771][ T9266] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 257.318836][ T9266] ? __pfx_ksys_write+0x10/0x10 [ 257.318854][ T9266] ? rcu_is_watching+0x15/0xb0 [ 257.318903][ T9266] ? do_syscall_64+0xbe/0x3b0 [ 257.318951][ T9266] do_syscall_64+0xfa/0x3b0 [ 257.318980][ T9266] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.319010][ T9266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.319035][ T9266] ? clear_bhb_loop+0x60/0xb0 [ 257.319069][ T9266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.319087][ T9266] RIP: 0033:0x7f689218e9a9 [ 257.319106][ T9266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.319121][ T9266] RSP: 002b:00007f6893015038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.319141][ T9266] RAX: ffffffffffffffda RBX: 00007f68923b5fa0 RCX: 00007f689218e9a9 [ 257.319169][ T9266] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000004 [ 257.319184][ T9266] RBP: 00007f6893015090 R08: 0000000000000000 R09: 0000000000000000 [ 257.319207][ T9266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.319225][ T9266] R13: 0000000000000000 R14: 00007f68923b5fa0 R15: 00007ffc6e6c80f8 [ 257.319290][ T9266] [ 258.096355][ T9284] netlink: 'syz.0.1104': attribute type 10 has an invalid length. [ 262.980869][ T9353] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1122'. [ 263.080093][ T9353] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1122'. [ 263.388908][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1126'. [ 263.471250][ T9358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1126'. [ 263.530706][ T9358] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1126'. [ 263.553020][ T9358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1126'. [ 263.568872][ T9358] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1126'. [ 264.534394][ T9379] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1132'. [ 265.451424][ T9390] netlink: 'syz.4.1134': attribute type 16 has an invalid length. [ 265.451620][ T9390] netlink: 'syz.4.1134': attribute type 3 has an invalid length. [ 265.451723][ T9390] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1134'. [ 268.177352][ T9406] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.1139'. [ 269.424573][ T9438] netlink: 'syz.0.1148': attribute type 10 has an invalid length. [ 270.334594][ T9464] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.1154'. [ 270.706829][ T9474] netlink: 'syz.0.1158': attribute type 10 has an invalid length. [ 271.206606][ T9486] netlink: 'syz.0.1161': attribute type 4 has an invalid length. [ 271.276584][ T9486] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.1161'. [ 271.498727][ T9500] netlink: 'syz.2.1162': attribute type 10 has an invalid length. [ 272.436338][ T9515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1167'. [ 272.547331][ T9520] netlink: 'syz.0.1169': attribute type 10 has an invalid length. [ 272.850113][ T9524] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1171'. [ 272.886277][ T9524] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.1171'. [ 274.151965][ T9560] netlink: 'syz.4.1182': attribute type 10 has an invalid length. [ 274.239566][ T9564] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1183'. [ 274.273785][ T9564] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 274.313274][ T9564] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 274.487787][ T9572] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1186'. [ 274.530398][ T9572] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.1186'. [ 274.708345][ T9571] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 274.715736][ T9571] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 275.592561][ T9607] netlink: 'syz.2.1195': attribute type 3 has an invalid length. [ 275.607264][ T9607] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1195'. [ 275.726251][ T9606] FAULT_INJECTION: forcing a failure. [ 275.726251][ T9606] name failslab, interval 1, probability 0, space 0, times 0 [ 275.739487][ T9606] CPU: 1 UID: 0 PID: 9606 Comm: syz.1.1196 Not tainted 6.16.0-rc6-syzkaller-g5b4c54ac49af #0 PREEMPT(full) [ 275.739517][ T9606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 275.739532][ T9606] Call Trace: [ 275.739541][ T9606] [ 275.739550][ T9606] dump_stack_lvl+0x189/0x250 [ 275.739582][ T9606] ? __pfx____ratelimit+0x10/0x10 [ 275.739611][ T9606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.739639][ T9606] ? __pfx__printk+0x10/0x10 [ 275.739677][ T9606] ? __pfx___might_resched+0x10/0x10 [ 275.739710][ T9606] should_fail_ex+0x414/0x560 [ 275.739750][ T9606] ? bpf_test_run_xdp_live+0x1b5/0x1b10 [ 275.739772][ T9606] should_failslab+0xa8/0x100 [ 275.739799][ T9606] __kvmalloc_node_noprof+0x161/0x5f0 [ 275.739825][ T9606] ? bpf_test_run_xdp_live+0x1b5/0x1b10 [ 275.739854][ T9606] bpf_test_run_xdp_live+0x1b5/0x1b10 [ 275.739881][ T9606] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 275.739920][ T9606] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 275.739964][ T9606] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 275.739990][ T9606] ? 0xffffffffa0205480 [ 275.740011][ T9606] ? 0xffffffffa0205480 [ 275.740082][ T9606] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 275.740115][ T9606] ? _copy_from_user+0x94/0xb0 [ 275.740138][ T9606] ? bpf_test_init+0x133/0x170 [ 275.740171][ T9606] ? xdp_convert_md_to_buff+0x5b/0x330 [ 275.740196][ T9606] bpf_prog_test_run_xdp+0x713/0x1000 [ 275.740237][ T9606] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 275.740269][ T9606] ? __fget_files+0x2a/0x420 [ 275.740301][ T9606] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 275.740325][ T9606] bpf_prog_test_run+0x2c7/0x340 [ 275.740352][ T9606] __sys_bpf+0x581/0x870 [ 275.740375][ T9606] ? __pfx___sys_bpf+0x10/0x10 [ 275.740411][ T9606] ? ksys_write+0x22a/0x250 [ 275.740434][ T9606] ? __pfx_ksys_write+0x10/0x10 [ 275.740452][ T9606] ? rcu_is_watching+0x15/0xb0 [ 275.740487][ T9606] __x64_sys_bpf+0x7c/0x90 [ 275.740520][ T9606] do_syscall_64+0xfa/0x3b0 [ 275.740550][ T9606] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.740578][ T9606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.740600][ T9606] ? clear_bhb_loop+0x60/0xb0 [ 275.740627][ T9606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.740661][ T9606] RIP: 0033:0x7f689218e9a9 [ 275.740678][ T9606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.740697][ T9606] RSP: 002b:00007f6893015038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 275.740720][ T9606] RAX: ffffffffffffffda RBX: 00007f68923b5fa0 RCX: 00007f689218e9a9 [ 275.740741][ T9606] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 275.740755][ T9606] RBP: 00007f6893015090 R08: 0000000000000000 R09: 0000000000000000 [ 275.740768][ T9606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.740781][ T9606] R13: 0000000000000000 R14: 00007f68923b5fa0 R15: 00007ffc6e6c80f8 [ 275.740814][ T9606] [ 276.215081][ T9618] netlink: 'syz.0.1200': attribute type 10 has an invalid length. [ 276.226588][ T9618] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1200'. [ 276.238391][ T9618] batman_adv: batadv0: Adding interface: vlan1 [ 276.244767][ T9618] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.271105][ T9618] batman_adv: batadv0: Interface activated: vlan1 [ 276.484944][ T9622] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.1202'. [ 276.550236][ T9622] netlink: 6332 bytes leftover after parsing attributes in process `syz.4.1202'. [ 277.625787][ T9667] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1217'. [ 277.638462][ T9667] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.1217'. [ 278.812431][ T9707] netlink: 'syz.3.1230': attribute type 10 has an invalid length. [ 278.905363][ T9710] netlink: 'syz.0.1231': attribute type 2 has an invalid length. [ 279.075169][ T9715] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1233'. [ 279.590948][ T9735] netlink: 'syz.1.1242': attribute type 7 has an invalid length. [ 280.002700][ T9748] netlink: 'syz.3.1247': attribute type 10 has an invalid length. [ 280.276939][ T9756] netlink: 'syz.3.1251': attribute type 29 has an invalid length. [ 283.189694][ T9794] __nla_validate_parse: 1 callbacks suppressed [ 283.189719][ T9794] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1259'. [ 283.213311][ T9793] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1259'. [ 284.314587][ T9800] netlink: 'syz.0.1261': attribute type 27 has an invalid length. [ 284.333321][ T9800] netlink: 'syz.0.1261': attribute type 4 has an invalid length. [ 284.370746][ T9800] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1261'. [ 286.964390][ T9841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1274'. [ 289.460349][ T9878] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1284'. [ 289.813531][ T9889] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.1287'. [ 289.839362][ T9889] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.1287'. [ 290.133077][ T9898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1291'. [ 290.147850][ T9898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1291'. [ 290.169388][ T9898] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1291'. [ 290.209131][ T9898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1291'. [ 290.268287][ T9898] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1291'. [ 291.634686][ T9933] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1302'. [ 291.675856][ T9936] netlink: 'syz.4.1303': attribute type 10 has an invalid length. [ 291.685098][ T9933] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.1302'. [ 292.146680][ T9952] netlink: 'syz.1.1308': attribute type 2 has an invalid length. [ 292.196641][ T9952] netlink: 'syz.1.1308': attribute type 2 has an invalid length. [ 292.404446][ T9961] netlink: 'syz.2.1311': attribute type 10 has an invalid length. [ 293.222413][ T9979] netlink: 'syz.2.1315': attribute type 10 has an invalid length. [ 294.613998][T10020] netlink: 'syz.2.1327': attribute type 10 has an invalid length. [ 294.662036][T10022] netlink: 'syz.4.1328': attribute type 29 has an invalid length. [ 294.747340][T10025] netlink: 'syz.4.1328': attribute type 29 has an invalid length. [ 294.769371][T10025] netlink: 'syz.4.1328': attribute type 29 has an invalid length. [ 294.787217][T10025] netlink: 'syz.4.1328': attribute type 29 has an invalid length. [ 294.866101][T10027] __nla_validate_parse: 2 callbacks suppressed [ 294.866133][T10027] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1330'. [ 294.885074][T10027] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.1330'. [ 296.521912][T10063] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1342'. [ 296.554928][T10063] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.1342'. [ 296.883042][T10080] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.1348'. [ 296.957103][T10083] validate_nla: 1 callbacks suppressed [ 296.957126][T10083] netlink: 'syz.3.1348': attribute type 2 has an invalid length. [ 296.981457][T10083] netlink: 137592 bytes leftover after parsing attributes in process `syz.3.1348'. [ 297.632673][T10099] netlink: 'syz.4.1354': attribute type 10 has an invalid length. [ 298.350979][T10099] team0: Port device geneve1 added [ 298.722584][T10111] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1357'. [ 298.763412][T10111] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.1357'. [ 300.944671][T10147] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1365'. [ 300.954015][T10147] FAULT_INJECTION: forcing a failure. [ 300.954015][T10147] name failslab, interval 1, probability 0, space 0, times 0 [ 300.971207][T10147] CPU: 1 UID: 0 PID: 10147 Comm: syz.1.1365 Not tainted 6.16.0-rc6-syzkaller-g5b4c54ac49af #0 PREEMPT(full) [ 300.971236][T10147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 300.971250][T10147] Call Trace: [ 300.971258][T10147] [ 300.971267][T10147] dump_stack_lvl+0x189/0x250 [ 300.971299][T10147] ? __pfx____ratelimit+0x10/0x10 [ 300.971328][T10147] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.971354][T10147] ? __pfx__printk+0x10/0x10 [ 300.971390][T10147] ? __pfx___might_resched+0x10/0x10 [ 300.971421][T10147] ? fs_reclaim_acquire+0x7d/0x100 [ 300.971452][T10147] should_fail_ex+0x414/0x560 [ 300.971485][T10147] should_failslab+0xa8/0x100 [ 300.971510][T10147] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 300.971533][T10147] ? __alloc_skb+0x112/0x2d0 [ 300.971559][T10147] __alloc_skb+0x112/0x2d0 [ 300.971584][T10147] netlink_ack+0x146/0xa50 [ 300.971603][T10147] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 300.971634][T10147] ? ref_tracker_free+0x63a/0x7d0 [ 300.971662][T10147] ? __copy_skb_header+0xa7/0x550 [ 300.971689][T10147] ? __pfx_ref_tracker_free+0x10/0x10 [ 300.971718][T10147] ? __skb_clone+0x63/0x7a0 [ 300.971761][T10147] netlink_rcv_skb+0x28c/0x470 [ 300.971781][T10147] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 300.971813][T10147] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 300.971845][T10147] ? netlink_deliver_tap+0x2e/0x1b0 [ 300.971863][T10147] ? netlink_deliver_tap+0x2e/0x1b0 [ 300.971908][T10147] netlink_unicast+0x759/0x8e0 [ 300.971956][T10147] netlink_sendmsg+0x805/0xb30 [ 300.971988][T10147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.972014][T10147] ? aa_sock_msg_perm+0x94/0x160 [ 300.972044][T10147] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 300.972072][T10147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.972095][T10147] __sock_sendmsg+0x21c/0x270 [ 300.972127][T10147] ____sys_sendmsg+0x505/0x830 [ 300.972158][T10147] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.972190][T10147] ? import_iovec+0x74/0xa0 [ 300.972216][T10147] ___sys_sendmsg+0x21f/0x2a0 [ 300.972243][T10147] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.972308][T10147] ? __fget_files+0x2a/0x420 [ 300.972332][T10147] ? __fget_files+0x3a0/0x420 [ 300.972366][T10147] __x64_sys_sendmsg+0x19b/0x260 [ 300.972413][T10147] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 300.972446][T10147] ? __pfx_ksys_write+0x10/0x10 [ 300.972461][T10147] ? rcu_is_watching+0x15/0xb0 [ 300.972488][T10147] ? do_syscall_64+0xbe/0x3b0 [ 300.972537][T10147] do_syscall_64+0xfa/0x3b0 [ 300.972564][T10147] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.972592][T10147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.972613][T10147] ? clear_bhb_loop+0x60/0xb0 [ 300.972640][T10147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.972661][T10147] RIP: 0033:0x7f689218e9a9 [ 300.972680][T10147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.972699][T10147] RSP: 002b:00007f6892ff4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.972722][T10147] RAX: ffffffffffffffda RBX: 00007f68923b6080 RCX: 00007f689218e9a9 [ 300.972738][T10147] RDX: 0000000000000014 RSI: 0000200000000000 RDI: 0000000000000005 [ 300.972751][T10147] RBP: 00007f6892ff4090 R08: 0000000000000000 R09: 0000000000000000 [ 300.972764][T10147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.972777][T10147] R13: 0000000000000000 R14: 00007f68923b6080 R15: 00007ffc6e6c80f8 [ 300.972808][T10147] [ 301.601047][T10154] sit0: entered promiscuous mode [ 301.607138][T10154] sit0: entered allmulticast mode [ 301.688330][T10160] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1371'. [ 301.698329][T10160] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.1371'. [ 302.499290][ T51] Bluetooth: hci2: unexpected subevent 0x12 length: 14 > 5 [ 304.176229][T10235] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1395'. [ 304.377310][T10243] netlink: 'syz.2.1399': attribute type 1 has an invalid length. [ 304.565554][T10241] netlink: 'syz.1.1397': attribute type 10 has an invalid length. [ 304.585012][T10241] netlink: 'syz.1.1397': attribute type 16 has an invalid length. [ 304.599849][T10241] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1397'. [ 304.980808][T10258] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.1403'. [ 305.070226][T10261] netlink: 'syz.2.1404': attribute type 13 has an invalid length. [ 305.168861][T10261] netlink: 'syz.2.1404': attribute type 58 has an invalid length. [ 305.176814][T10261] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1404'. [ 305.635583][T10285] IPv6: Can't replace route, no match found [ 306.907952][T10303] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1418'. [ 307.107233][T10302] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1418'. [ 308.627062][T10304] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1418'. [ 308.973238][T10335] syzkaller0: entered promiscuous mode [ 308.990600][T10335] syzkaller0: entered allmulticast mode [ 309.058132][T10338] netlink: 'syz.3.1430': attribute type 10 has an invalid length. [ 314.134210][T10390] netlink: 'syz.2.1446': attribute type 2 has an invalid length. [ 316.655189][T10443] netlink: 'syz.1.1459': attribute type 39 has an invalid length. [ 317.304438][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.310909][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.934762][T10492] netlink: 'syz.2.1473': attribute type 10 has an invalid length. [ 319.211051][T10496] netlink: 'syz.0.1475': attribute type 10 has an invalid length. [ 320.340195][T10509] netlink: 'syz.1.1478': attribute type 39 has an invalid length. [ 320.391731][T10500] delete_channel: no stack [ 323.728613][T10558] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1492'. [ 323.755560][T10554] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1492'. [ 323.798135][T10560] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1492'. [ 326.222411][T10572] netlink: 'syz.2.1496': attribute type 29 has an invalid length. [ 326.340510][T10579] netlink: 'syz.1.1497': attribute type 10 has an invalid length. [ 326.542304][T10585] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1500'. [ 326.565326][T10586] FAULT_INJECTION: forcing a failure. [ 326.565326][T10586] name failslab, interval 1, probability 0, space 0, times 0 [ 326.578516][T10586] CPU: 0 UID: 0 PID: 10586 Comm: syz.3.1501 Not tainted 6.16.0-rc6-syzkaller-g5b4c54ac49af #0 PREEMPT(full) [ 326.578560][T10586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 326.578587][T10586] Call Trace: [ 326.578596][T10586] [ 326.578605][T10586] dump_stack_lvl+0x189/0x250 [ 326.578635][T10586] ? __pfx____ratelimit+0x10/0x10 [ 326.578662][T10586] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.578688][T10586] ? __pfx__printk+0x10/0x10 [ 326.578736][T10586] should_fail_ex+0x414/0x560 [ 326.578772][T10586] should_failslab+0xa8/0x100 [ 326.578799][T10586] kmem_cache_alloc_noprof+0x73/0x3c0 [ 326.578820][T10586] ? skb_clone+0x212/0x3a0 [ 326.578853][T10586] skb_clone+0x212/0x3a0 [ 326.578892][T10586] bpf_clone_redirect+0xad/0x3d0 [ 326.578932][T10586] ? bpf_test_run+0x197/0x7b0 [ 326.578953][T10586] bpf_prog_e26ebb0c7d00e66b+0x62/0x6b [ 326.578976][T10586] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.579019][T10586] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 326.579053][T10586] ? seqcount_lockdep_reader_access+0x17e/0x1c0 [ 326.579087][T10586] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 326.579123][T10586] ? __local_bh_disable_ip+0xf1/0x190 [ 326.579149][T10586] ? __pfx___cant_migrate+0x10/0x10 [ 326.579179][T10586] ? read_tsc+0x9/0x20 [ 326.579194][T10586] ? ktime_get+0x1cb/0x1f0 [ 326.579230][T10586] bpf_test_run+0x315/0x7b0 [ 326.579280][T10586] ? __pfx_bpf_test_run+0x10/0x10 [ 326.579334][T10586] ? slab_build_skb+0x273/0x3e0 [ 326.579355][T10586] ? convert___skb_to_skb+0x3d/0x590 [ 326.579380][T10586] bpf_prog_test_run_skb+0xb30/0x1560 [ 326.579436][T10586] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 326.579472][T10586] bpf_prog_test_run+0x2c7/0x340 [ 326.579500][T10586] __sys_bpf+0x581/0x870 [ 326.579523][T10586] ? __pfx___sys_bpf+0x10/0x10 [ 326.579565][T10586] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 326.579615][T10586] __x64_sys_bpf+0x7c/0x90 [ 326.579648][T10586] do_syscall_64+0xfa/0x3b0 [ 326.579679][T10586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.579700][T10586] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 326.579722][T10586] ? clear_bhb_loop+0x60/0xb0 [ 326.579749][T10586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.579771][T10586] RIP: 0033:0x7f729318e9a9 [ 326.579790][T10586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.579809][T10586] RSP: 002b:00007f72940bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 326.579832][T10586] RAX: ffffffffffffffda RBX: 00007f72933b5fa0 RCX: 00007f729318e9a9 [ 326.579848][T10586] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 326.579867][T10586] RBP: 00007f72940bf090 R08: 0000000000000000 R09: 0000000000000000 [ 326.579880][T10586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.579893][T10586] R13: 0000000000000000 R14: 00007f72933b5fa0 R15: 00007ffd45d0f828 [ 326.579930][T10586] [ 329.500970][T10572] netlink: 'syz.2.1496': attribute type 29 has an invalid length. [ 329.863914][T10605] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1507'. [ 329.911253][T10602] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1507'. [ 330.163247][T10605] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1507'. [ 330.219941][T10609] sit0: entered allmulticast mode [ 330.232560][T10609] sit0: entered promiscuous mode [ 330.373323][T10614] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.1511'. [ 330.394965][T10614] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.1511'. [ 330.467258][T10619] FAULT_INJECTION: forcing a failure. [ 330.467258][T10619] name failslab, interval 1, probability 0, space 0, times 0 [ 330.504665][T10619] CPU: 1 UID: 0 PID: 10619 Comm: syz.0.1513 Not tainted 6.16.0-rc6-syzkaller-g5b4c54ac49af #0 PREEMPT(full) [ 330.504700][T10619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 330.504715][T10619] Call Trace: [ 330.504726][T10619] [ 330.504738][T10619] dump_stack_lvl+0x189/0x250 [ 330.504776][T10619] ? __pfx____ratelimit+0x10/0x10 [ 330.504812][T10619] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.504845][T10619] ? __pfx__printk+0x10/0x10 [ 330.504902][T10619] ? __pfx___might_resched+0x10/0x10 [ 330.504948][T10619] should_fail_ex+0x414/0x560 [ 330.505001][T10619] should_failslab+0xa8/0x100 [ 330.505039][T10619] kmem_cache_alloc_noprof+0x73/0x3c0 [ 330.505064][T10619] ? skb_clone+0x212/0x3a0 [ 330.505112][T10619] skb_clone+0x212/0x3a0 [ 330.505140][T10619] ? pfkey_broadcast_one+0x7d/0x360 [ 330.505187][T10619] pfkey_broadcast_one+0x9b/0x360 [ 330.505219][T10619] ? pfkey_broadcast+0x39c/0x3e0 [ 330.505265][T10619] pfkey_broadcast+0x3a9/0x3e0 [ 330.505302][T10619] ? pfkey_broadcast+0x48/0x3e0 [ 330.505346][T10619] pfkey_sendmsg+0xdd8/0x1090 [ 330.505436][T10619] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 330.505546][T10619] ? perf_trace_run_bpf_submit+0xee/0x170 [ 330.505590][T10619] ? aa_sock_msg_perm+0x94/0x160 [ 330.505644][T10619] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 330.505673][T10619] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 330.505710][T10619] __sock_sendmsg+0x21c/0x270 [ 330.505753][T10619] ____sys_sendmsg+0x505/0x830 [ 330.505799][T10619] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.505854][T10619] ? import_iovec+0x74/0xa0 [ 330.505891][T10619] ___sys_sendmsg+0x21f/0x2a0 [ 330.505927][T10619] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.506017][T10619] ? __fget_files+0x2a/0x420 [ 330.506079][T10619] ? __fget_files+0x2a/0x420 [ 330.506103][T10619] ? __fget_files+0x3a0/0x420 [ 330.506161][T10619] __x64_sys_sendmsg+0x19b/0x260 [ 330.506198][T10619] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 330.506254][T10619] ? __pfx_ksys_write+0x10/0x10 [ 330.506271][T10619] ? rcu_is_watching+0x15/0xb0 [ 330.506313][T10619] ? do_syscall_64+0xbe/0x3b0 [ 330.506355][T10619] do_syscall_64+0xfa/0x3b0 [ 330.506382][T10619] ? lockdep_hardirqs_on+0x9c/0x150 [ 330.506419][T10619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.506441][T10619] ? clear_bhb_loop+0x60/0xb0 [ 330.506475][T10619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.506496][T10619] RIP: 0033:0x7ff507d8e9a9 [ 330.506517][T10619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.506536][T10619] RSP: 002b:00007ff508c87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.506569][T10619] RAX: ffffffffffffffda RBX: 00007ff507fb5fa0 RCX: 00007ff507d8e9a9 [ 330.506585][T10619] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000004 [ 330.506598][T10619] RBP: 00007ff508c87090 R08: 0000000000000000 R09: 0000000000000000 [ 330.506611][T10619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.506622][T10619] R13: 0000000000000000 R14: 00007ff507fb5fa0 R15: 00007fffa456c248 [ 330.506685][T10619] [ 330.507923][T10617] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1512'. [ 330.870069][T10617] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.1512'. [ 332.841491][T10653] netlink: 'syz.4.1523': attribute type 3 has an invalid length. [ 332.893110][T10653] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1523'. [ 333.050632][T10664] netlink: 'syz.0.1526': attribute type 21 has an invalid length. [ 333.068530][T10664] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1526'. [ 333.136805][T10664] netlink: 'syz.0.1526': attribute type 4 has an invalid length. [ 333.151806][T10664] netlink: 'syz.0.1526': attribute type 5 has an invalid length. [ 333.172838][T10664] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1526'. [ 334.277618][T10692] can: request_module (can-proto-3) failed. [ 334.544240][T10707] FAULT_INJECTION: forcing a failure. [ 334.544240][T10707] name failslab, interval 1, probability 0, space 0, times 0 [ 334.583671][T10707] CPU: 1 UID: 0 PID: 10707 Comm: syz.2.1539 Not tainted 6.16.0-rc6-syzkaller-g5b4c54ac49af #0 PREEMPT(full) [ 334.583705][T10707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 334.583719][T10707] Call Trace: [ 334.583728][T10707] [ 334.583738][T10707] dump_stack_lvl+0x189/0x250 [ 334.583770][T10707] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.583801][T10707] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.583850][T10707] should_fail_ex+0x414/0x560 [ 334.583887][T10707] should_failslab+0xa8/0x100 [ 334.583916][T10707] kmem_cache_alloc_noprof+0x73/0x3c0 [ 334.583938][T10707] ? skb_clone+0x212/0x3a0 [ 334.583971][T10707] skb_clone+0x212/0x3a0 [ 334.584002][T10707] __netlink_deliver_tap+0x404/0x850 [ 334.584043][T10707] ? netlink_deliver_tap+0x2e/0x1b0 [ 334.584087][T10707] netlink_deliver_tap+0x19c/0x1b0 [ 334.584112][T10707] netlink_unicast+0x730/0x8e0 [ 334.584180][T10707] netlink_sendmsg+0x805/0xb30 [ 334.584219][T10707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.584257][T10707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.584283][T10707] __sock_sendmsg+0x21c/0x270 [ 334.584320][T10707] ____sys_sendmsg+0x505/0x830 [ 334.584362][T10707] ? __pfx_____sys_sendmsg+0x10/0x10 [ 334.584402][T10707] ? import_iovec+0x74/0xa0 [ 334.584431][T10707] ___sys_sendmsg+0x21f/0x2a0 [ 334.584462][T10707] ? __pfx____sys_sendmsg+0x10/0x10 [ 334.584494][T10707] ? perf_trace_preemptirq_template+0xa3/0x340 [ 334.584528][T10707] ? irqentry_enter+0x3d/0x60 [ 334.584608][T10707] ? __x64_sys_sendmsg+0x101/0x260 [ 334.584645][T10707] __x64_sys_sendmsg+0x19b/0x260 [ 334.584676][T10707] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 334.584738][T10707] do_syscall_64+0xfa/0x3b0 [ 334.584771][T10707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.584793][T10707] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 334.584817][T10707] ? clear_bhb_loop+0x60/0xb0 [ 334.584845][T10707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.584868][T10707] RIP: 0033:0x7fd27eb8e9a9 [ 334.584888][T10707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.584909][T10707] RSP: 002b:00007fd27f9b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.584933][T10707] RAX: ffffffffffffffda RBX: 00007fd27edb6160 RCX: 00007fd27eb8e9a9 [ 334.584950][T10707] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000007 [ 334.584964][T10707] RBP: 00007fd27f9b2090 R08: 0000000000000000 R09: 0000000000000000 [ 334.584978][T10707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.584991][T10707] R13: 0000000000000000 R14: 00007fd27edb6160 R15: 00007ffedbe980c8 [ 334.585031][T10707] [ 337.375875][T10723] netlink: 'syz.3.1544': attribute type 2 has an invalid length. [ 337.441060][T10723] __nla_validate_parse: 12 callbacks suppressed [ 337.441115][T10723] netlink: 137592 bytes leftover after parsing attributes in process `syz.3.1544'. [ 338.721802][T10755] netlink: 'syz.2.1555': attribute type 29 has an invalid length. [ 338.752522][T10755] netlink: 'syz.2.1555': attribute type 29 has an invalid length. [ 338.936042][T10762] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1556'. [ 338.963502][T10760] netlink: 'syz.4.1558': attribute type 10 has an invalid length. [ 338.985154][T10757] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1556'. [ 339.012860][T10762] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1556'. [ 339.397817][T10770] netlink: 'syz.2.1560': attribute type 1 has an invalid length. [ 339.800094][T10792] netlink: 'syz.1.1566': attribute type 1 has an invalid length. [ 339.808624][T10792] netlink: 'syz.1.1566': attribute type 3 has an invalid length. [ 339.817603][T10792] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1566'. [ 340.336617][T10801] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1571'. [ 341.961696][T10824] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1577'. [ 345.143067][T10865] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1587'. [ 345.891862][T10880] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1592'. [ 346.106968][T10885] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1593'. [ 346.150551][T10881] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1593'. [ 352.257729][T10914] netlink: 'syz.3.1604': attribute type 7 has an invalid length. [ 352.888213][T10942] netlink: 'syz.3.1613': attribute type 3 has an invalid length. [ 352.896201][T10942] netlink: 'syz.3.1613': attribute type 2 has an invalid length. [ 352.986043][T10942] netlink: 198000 bytes leftover after parsing attributes in process `syz.3.1613'. [ 353.622682][T10955] netlink: 'syz.2.1617': attribute type 49 has an invalid length. [ 353.978698][T10961] netlink: 'syz.3.1618': attribute type 21 has an invalid length. [ 354.862957][T10984] netlink: 7986 bytes leftover after parsing attributes in process `syz.2.1625'. [ 355.360482][T10997] netlink: 'syz.0.1628': attribute type 21 has an invalid length. [ 355.430339][T11000] netlink: 'syz.0.1628': attribute type 4 has an invalid length. [ 355.547058][T10997] netlink: 'syz.0.1628': attribute type 6 has an invalid length. [ 355.555374][T10997] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1628'. [ 355.813068][T11007] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1630'. [ 355.831270][T11007] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.1630'. [ 355.866682][T11011] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1632'. [ 356.247753][T11020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1635'. [ 356.287862][T11020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1635'. [ 356.303523][T11020] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1635'. [ 356.331855][T11020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1635'. [ 358.037679][T11078] pim6reg: tun_chr_ioctl cmd 21731 [ 358.351430][T11089] FAULT_INJECTION: forcing a failure. [ 358.351430][T11089] name failslab, interval 1, probability 0, space 0, times 0 [ 358.368903][T11089] CPU: 1 UID: 0 PID: 11089 Comm: syz.4.1659 Not tainted 6.16.0-rc6-syzkaller-g5b4c54ac49af #0 PREEMPT(full) [ 358.368934][T11089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 358.368948][T11089] Call Trace: [ 358.368956][T11089] [ 358.368966][T11089] dump_stack_lvl+0x189/0x250 [ 358.369000][T11089] ? __pfx____ratelimit+0x10/0x10 [ 358.369030][T11089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.369057][T11089] ? __pfx__printk+0x10/0x10 [ 358.369108][T11089] should_fail_ex+0x414/0x560 [ 358.369155][T11089] should_failslab+0xa8/0x100 [ 358.369201][T11089] __kmalloc_cache_noprof+0x70/0x3d0 [ 358.369224][T11089] ? sctp_add_bind_addr+0x8c/0x370 [ 358.369281][T11089] sctp_add_bind_addr+0x8c/0x370 [ 358.369320][T11089] sctp_copy_local_addr_list+0x30b/0x4e0 [ 358.369359][T11089] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 358.369390][T11089] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 358.369430][T11089] ? sctp_v4_is_any+0x35/0x60 [ 358.369461][T11089] ? sctp_copy_one_addr+0x93/0x360 [ 358.369500][T11089] sctp_bind_addr_copy+0xb3/0x3c0 [ 358.369533][T11089] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 358.369568][T11089] sctp_connect_new_asoc+0x2e0/0x690 [ 358.369598][T11089] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 358.369620][T11089] ? __local_bh_enable_ip+0x12d/0x1c0 [ 358.369657][T11089] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 358.369689][T11089] ? security_sctp_bind_connect+0x7e/0x2e0 [ 358.369719][T11089] sctp_sendmsg+0x155c/0x2810 [ 358.369761][T11089] ? __pfx_sctp_sendmsg+0x10/0x10 [ 358.369790][T11089] ? aa_sk_perm+0x81e/0x950 [ 358.369817][T11089] ? perf_trace_lock_acquire+0xf5/0x410 [ 358.369848][T11089] ? __pfx_aa_sk_perm+0x10/0x10 [ 358.369880][T11089] ? sock_rps_record_flow+0x19/0x410 [ 358.369917][T11089] ? inet_sendmsg+0x2f4/0x370 [ 358.369953][T11089] __sock_sendmsg+0x19c/0x270 [ 358.369990][T11089] ____sys_sendmsg+0x505/0x830 [ 358.370024][T11089] ? __pfx_____sys_sendmsg+0x10/0x10 [ 358.370062][T11089] ? import_iovec+0x74/0xa0 [ 358.370090][T11089] ___sys_sendmsg+0x21f/0x2a0 [ 358.370119][T11089] ? __pfx____sys_sendmsg+0x10/0x10 [ 358.370197][T11089] ? __fget_files+0x2a/0x420 [ 358.370222][T11089] ? __fget_files+0x3a0/0x420 [ 358.370270][T11089] __x64_sys_sendmsg+0x19b/0x260 [ 358.370294][T11089] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 358.370326][T11089] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 358.370367][T11089] ? __pfx_ksys_write+0x10/0x10 [ 358.370386][T11089] ? rcu_is_watching+0x15/0xb0 [ 358.370419][T11089] ? do_syscall_64+0xbe/0x3b0 [ 358.370456][T11089] do_syscall_64+0xfa/0x3b0 [ 358.370486][T11089] ? lockdep_hardirqs_on+0x9c/0x150 [ 358.370514][T11089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.370537][T11089] ? clear_bhb_loop+0x60/0xb0 [ 358.370566][T11089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.370588][T11089] RIP: 0033:0x7f703818e9a9 [ 358.370609][T11089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.370629][T11089] RSP: 002b:00007f7038f55038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.370653][T11089] RAX: ffffffffffffffda RBX: 00007f70383b5fa0 RCX: 00007f703818e9a9 [ 358.370669][T11089] RDX: 0000000000008804 RSI: 0000200000000380 RDI: 0000000000000005 [ 358.370684][T11089] RBP: 00007f7038f55090 R08: 0000000000000000 R09: 0000000000000000 [ 358.370698][T11089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 358.370711][T11089] R13: 0000000000000000 R14: 00007f70383b5fa0 R15: 00007fffc7029a48 [ 358.370751][T11089] [ 359.133409][T11100] __nla_validate_parse: 4 callbacks suppressed [ 359.133432][T11100] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1663'. [ 359.192541][T11100] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.1663'. [ 362.865029][T11140] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1675'. [ 362.908955][T11140] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1675'. [ 363.467562][T11152] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1679'. [ 363.548873][T11150] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1679'. [ 363.602280][T11149] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1679'. [ 363.949642][T11159] netlink: 'syz.0.1680': attribute type 10 has an invalid length. [ 363.974365][T11156] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1681'. [ 364.127580][T11159] team0: Port device geneve1 added [ 364.217291][T11171] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1686'. [ 364.418767][T11175] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1686'. [ 364.889775][T11186] netlink: 6527 bytes leftover after parsing attributes in process `syz.4.1687'. [ 366.998959][T11192] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1691'. [ 367.709015][T11216] netlink: 'syz.2.1700': attribute type 16 has an invalid length. [ 367.942116][T11216] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1700'. [ 368.385000][T11233] netlink: 'syz.4.1705': attribute type 39 has an invalid length. [ 370.354220][T11261] netlink: 'syz.4.1714': attribute type 7 has an invalid length. [ 370.671380][T11270] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1716'. [ 370.829710][T11267] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1716'. [ 370.911267][T11270] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1716'. [ 371.130003][T11277] netlink: 'syz.1.1719': attribute type 10 has an invalid length. [ 371.848207][T11291] sctp: [Deprecated]: syz.1.1723 (pid 11291) Use of int in max_burst socket option deprecated. [ 371.848207][T11291] Use struct sctp_assoc_value instead [ 371.976942][T11297] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.1724'. [ 372.070033][T11303] netlink: 'syz.4.1726': attribute type 10 has an invalid length. [ 374.382046][T11316] syzkaller0: entered promiscuous mode [ 374.387618][T11316] syzkaller0: entered allmulticast mode [ 374.402815][T11327] netlink: 'syz.3.1733': attribute type 10 has an invalid length. [ 375.212236][T11332] netlink: 'syz.0.1734': attribute type 3 has an invalid length. [ 375.231988][T11332] netlink: 'syz.0.1734': attribute type 2 has an invalid length. [ 375.251775][T11332] netlink: 198000 bytes leftover after parsing attributes in process `syz.0.1734'. [ 375.482386][T11336] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1736'. [ 375.493703][T11336] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.1736'. [ 375.563475][T11334] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1735'. [ 376.837780][T11327] team0: Port device wlan1 added [ 377.046593][T11345] netlink: 'syz.2.1737': attribute type 22 has an invalid length. [ 377.070507][T11346] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1739'. [ 377.073542][T11345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1737'. [ 377.092831][T11346] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.1739'. [ 377.403919][T11358] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1742'. [ 377.415514][T11357] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1742'. [ 377.839296][T11369] netlink: 'syz.3.1745': attribute type 1 has an invalid length. [ 377.847207][T11369] netlink: 16227 bytes leftover after parsing attributes in process `syz.3.1745'. [ 378.668209][T11387] netlink: 'syz.4.1752': attribute type 22 has an invalid length. [ 378.678806][T11387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1752'. [ 378.736124][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.744026][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.203808][T11398] netlink: 103612 bytes leftover after parsing attributes in process `syz.1.1754'. [ 379.425270][T11401] netlink: 'syz.2.1755': attribute type 10 has an invalid length. [ 379.533653][T11406] netlink: 'syz.2.1755': attribute type 10 has an invalid length. [ 379.567364][T11406] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1755'. [ 379.621765][T11406] team0: entered promiscuous mode [ 379.644587][T11406] team_slave_0: entered promiscuous mode [ 379.665671][T11406] team_slave_1: entered promiscuous mode [ 379.701861][T11406] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 379.710844][T11406] bond0: entered promiscuous mode [ 379.721021][T11406] : entered promiscuous mode [ 379.731635][T11406] bond_slave_1: entered promiscuous mode [ 379.749708][T11406] vlan0: entered promiscuous mode [ 379.762716][T11406] geneve1: entered promiscuous mode [ 379.832204][T11406] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.363865][T11443] netlink: 'syz.4.1768': attribute type 29 has an invalid length. [ 381.373567][T11443] netlink: 'syz.4.1768': attribute type 29 has an invalid length. [ 382.982630][T11471] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.1776'. [ 382.994155][T11471] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.1776'. [ 386.193066][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1780'. [ 386.238052][T11484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1780'. [ 386.281528][T11484] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1780'. [ 386.331219][T11484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1780'. [ 386.358704][T11484] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1780'. [ 386.922483][T11496] netlink: 64967 bytes leftover after parsing attributes in process `syz.4.1785'. [ 390.464359][T11577] netlink: 'syz.3.1805': attribute type 49 has an invalid length. [ 392.836492][T11623] netlink: 'syz.0.1820': attribute type 49 has an invalid length. [ 394.563085][T11662] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1833'. [ 394.863869][T11672] netlink: 'syz.1.1834': attribute type 21 has an invalid length. [ 394.965367][T11678] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1838'. [ 395.028882][T11678] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1838'. [ 396.382299][T11694] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1842'. [ 396.461348][T11696] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1843'. [ 396.527717][T11698] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1843'. [ 397.453204][T11715] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1849'. [ 398.641737][T11720] syzkaller0: entered promiscuous mode [ 398.677949][T11720] syzkaller0: entered allmulticast mode [ 401.560214][T11767] netlink: 'syz.2.1863': attribute type 10 has an invalid length. [ 401.568322][T11767] netlink: 'syz.2.1863': attribute type 19 has an invalid length. [ 401.580743][T11767] netlink: 14536 bytes leftover after parsing attributes in process `syz.2.1863'. [ 401.601743][T11767] netlink: 'syz.2.1863': attribute type 10 has an invalid length. [ 401.769091][T11767] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.803864][T11767] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.817805][T11767] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.827584][T11767] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.855097][T11767] geneve0: entered promiscuous mode [ 401.887599][T11767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.897284][T11767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.907713][T11767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.916609][T11767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.933919][T11767] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 402.577669][T11776] syzkaller0: entered promiscuous mode [ 402.583557][T11776] syzkaller0: entered allmulticast mode [ 405.476531][T11801] netlink: 'syz.3.1874': attribute type 6 has an invalid length. [ 405.484583][T11801] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1874'. [ 407.024788][T11816] netlink: 'syz.2.1880': attribute type 10 has an invalid length. [ 407.343344][T11819] netlink: 'syz.3.1881': attribute type 10 has an invalid length. [ 410.599713][T11838] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1887'. [ 411.139804][T11847] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1890'. [ 411.174086][T11846] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1889'. [ 411.784060][T11856] FAULT_INJECTION: forcing a failure. [ 411.784060][T11856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.804595][T11856] CPU: 1 UID: 0 PID: 11856 Comm: syz.2.1893 Not tainted 6.16.0-rc6-syzkaller-g5b4c54ac49af #0 PREEMPT(full) [ 411.804627][T11856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 411.804641][T11856] Call Trace: [ 411.804656][T11856] [ 411.804672][T11856] dump_stack_lvl+0x189/0x250 [ 411.804716][T11856] ? __pfx____ratelimit+0x10/0x10 [ 411.804762][T11856] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.804806][T11856] ? __pfx__printk+0x10/0x10 [ 411.804959][T11856] should_fail_ex+0x414/0x560 [ 411.805045][T11856] _copy_to_user+0x31/0xb0 [ 411.805108][T11856] map_get_next_key+0x48b/0x5f0 [ 411.805150][T11856] ? map_get_next_key+0x269/0x5f0 [ 411.805213][T11856] __sys_bpf+0x65e/0x870 [ 411.805271][T11856] ? __pfx___sys_bpf+0x10/0x10 [ 411.805443][T11856] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 411.805494][T11856] ? __pfx_ksys_write+0x10/0x10 [ 411.805513][T11856] ? rcu_is_watching+0x15/0xb0 [ 411.805607][T11856] __x64_sys_bpf+0x7c/0x90 [ 411.805662][T11856] do_syscall_64+0xfa/0x3b0 [ 411.805693][T11856] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.805732][T11856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.805758][T11856] ? clear_bhb_loop+0x60/0xb0 [ 411.805814][T11856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.805837][T11856] RIP: 0033:0x7fd27eb8e9a9 [ 411.805866][T11856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.805885][T11856] RSP: 002b:00007fd27f9f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 411.805908][T11856] RAX: ffffffffffffffda RBX: 00007fd27edb5fa0 RCX: 00007fd27eb8e9a9 [ 411.805924][T11856] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000004 [ 411.805938][T11856] RBP: 00007fd27f9f4090 R08: 0000000000000000 R09: 0000000000000000 [ 411.805951][T11856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.805964][T11856] R13: 0000000000000000 R14: 00007fd27edb5fa0 R15: 00007ffedbe980c8 [ 411.806109][T11856] [ 412.207613][T11860] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1894'. [ 412.221544][T11861] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1894'. [ 412.412809][T11867] netlink: 'syz.2.1895': attribute type 49 has an invalid length. [ 416.158379][ C1] sched: DL replenish lagged too much [ 517.958544][ C1] ------------[ cut here ]------------ [ 517.964906][ C1] WARNING: CPU: 1 PID: 11833 at kernel/rcu/tree_stall.h:1015 rcu_check_gp_start_stall+0x2e4/0x470 [ 517.975546][ C1] Modules linked in: [ 517.979990][ C1] CPU: 1 UID: 0 PID: 11833 Comm: syz.0.1885 Not tainted 6.16.0-rc6-syzkaller-g5b4c54ac49af #0 PREEMPT(full) [ 517.991683][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 518.001770][ C1] RIP: 0010:rcu_check_gp_start_stall+0x2e4/0x470 [ 518.008133][ C1] Code: ff ff 48 c7 c7 00 84 af 99 be 04 00 00 00 e8 03 8f 7b 00 4c 89 f7 b8 01 00 00 00 87 05 15 cf 07 18 85 c0 0f 85 17 ff ff ff 90 <0f> 0b 90 48 81 ff 40 44 14 8e 74 47 48 c7 c0 30 1a a2 8f 48 c1 e8 [ 518.027776][ C1] RSP: 0018:ffffc90000a08bb8 EFLAGS: 00010046 [ 518.033877][ C1] RAX: 0000000000000000 RBX: 0000000000000a02 RCX: ffffffff81a7b4dd [ 518.041870][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8e144440 [ 518.049870][ C1] RBP: ffffc90000a08e30 R08: 0000000000000003 R09: 0000000000000004 [ 518.057867][ C1] R10: dffffc0000000000 R11: fffffbfff335f080 R12: 0000000000002904 [ 518.065871][ C1] R13: 1ffff110170e75fa R14: ffffffff8e144440 R15: dffffc0000000000 [ 518.073869][ C1] FS: 00007ff508c876c0(0000) GS:ffff888125d1f000(0000) knlGS:0000000000000000 [ 518.082856][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 518.089481][ C1] CR2: 000020000062b000 CR3: 000000002a43e000 CR4: 00000000003526f0 [ 518.097491][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 518.105489][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 518.113513][ C1] Call Trace: [ 518.116816][ C1] [ 518.119700][ C1] rcu_core+0x5f7/0x1710 [ 518.124002][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 518.129254][ C1] ? __pfx_perf_trace_lock+0x10/0x10 [ 518.134589][ C1] ? __pfx_rcu_core+0x10/0x10 [ 518.139302][ C1] ? sched_balance_domains+0x121/0x9e0 [ 518.144838][ C1] ? __rcu_read_unlock+0x84/0xe0 [ 518.149823][ C1] ? sched_balance_domains+0x8be/0x9e0 [ 518.155491][ C1] ? sched_balance_domains+0x121/0x9e0 [ 518.161019][ C1] handle_softirqs+0x283/0x870 [ 518.165824][ C1] ? autoremove_wake_function+0x39/0x100 [ 518.171508][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 518.176323][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 518.181634][ C1] ? irq_work_single+0x1ac/0x240 [ 518.186613][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 518.191885][ C1] __irq_exit_rcu+0xca/0x1f0 [ 518.196505][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 518.201747][ C1] ? rcu_is_watching+0x15/0xb0 [ 518.206546][ C1] irq_exit_rcu+0x9/0x30 [ 518.210819][ C1] sysvec_irq_work+0xa3/0xc0 [ 518.215464][ C1] [ 518.218427][ C1] [ 518.221406][ C1] asm_sysvec_irq_work+0x1a/0x20 [ 518.226374][ C1] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0 [ 518.232563][ C1] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 92 37 f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b [ 518.252194][ C1] RSP: 0018:ffffc9000b6def80 EFLAGS: 00000206 [ 518.258290][ C1] RAX: deb9cbff9f3e3400 RBX: 1ffff920016dbdf8 RCX: deb9cbff9f3e3400 [ 518.266302][ C1] RDX: 0000000000000006 RSI: ffffffff8d9986de RDI: ffffffff8be29f00 [ 518.274337][ C1] RBP: ffffc9000b6df080 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e [ 518.282331][ C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffffff8e144400 [ 518.290328][ C1] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000002 [ 518.298444][ C1] ? __pfx_perf_trace_lock+0x10/0x10 [ 518.303766][ C1] ? migrate_enable+0x29c/0x3c0 [ 518.308734][ C1] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 518.314768][ C1] ? trace_call_bpf+0xb7/0x850 [ 518.319601][ C1] __rcu_read_unlock+0x84/0xe0 [ 518.324412][ C1] ? trace_call_bpf+0xb7/0x850 [ 518.329207][ C1] trace_call_bpf+0x5ae/0x850 [ 518.333918][ C1] ? trace_call_bpf+0xb7/0x850 [ 518.338736][ C1] ? __pfx_trace_call_bpf+0x10/0x10 [ 518.344035][ C1] perf_trace_run_bpf_submit+0x78/0x170 [ 518.349652][ C1] perf_trace_lock+0x2f8/0x3b0 [ 518.354484][ C1] ? __pfx_perf_trace_lock+0x10/0x10 [ 518.359842][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 518.364991][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 518.370136][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 518.375308][ C1] lock_release+0x3b2/0x3e0 [ 518.379842][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 518.385098][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 518.390248][ C1] __virt_addr_valid+0x475/0x5c0 [ 518.395244][ C1] kasan_addr_to_slab+0xf/0x90 [ 518.400068][ C1] kasan_record_aux_stack+0xf/0xd0 [ 518.405219][ C1] kvfree_call_rcu+0xbb/0x410 [ 518.409962][ C1] drop_sysctl_table+0x385/0x510 [ 518.415013][ C1] ? __pfx_drop_sysctl_table+0x10/0x10 [ 518.420579][ C1] ? kvfree_call_rcu+0x374/0x410 [ 518.425586][ C1] drop_sysctl_table+0x39c/0x510 [ 518.430602][ C1] ? __pfx_drop_sysctl_table+0x10/0x10 [ 518.436113][ C1] ? do_raw_spin_lock+0x121/0x290 [ 518.441258][ C1] ? unregister_sysctl_table+0x39/0x60 [ 518.446755][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 518.452169][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 518.458133][ C1] unregister_sysctl_table+0x41/0x60 [ 518.463453][ C1] nf_log_net_exit+0x60/0xc0 [ 518.468078][ C1] ops_undo_list+0x49a/0x990 [ 518.472723][ C1] ? __pfx_ops_undo_list+0x10/0x10 [ 518.477850][ C1] ? ops_init+0x469/0x5c0 [ 518.482252][ C1] setup_net+0x3e2/0x4b0 [ 518.486542][ C1] ? __pfx_setup_net+0x10/0x10 [ 518.491342][ C1] ? copy_net_ns+0x304/0x4d0 [ 518.495959][ C1] ? down_read_killable+0x1d1/0x350 [ 518.501205][ C1] copy_net_ns+0x31b/0x4d0 [ 518.505675][ C1] create_new_namespaces+0x3f3/0x720 [ 518.511028][ C1] ? security_capable+0x7e/0x2e0 [ 518.516041][ C1] ? copy_namespaces+0x5c/0x4b0 [ 518.520957][ C1] copy_namespaces+0x438/0x4b0 [ 518.525761][ C1] ? copy_process+0x978/0x3b80 [ 518.530559][ C1] copy_process+0x1700/0x3b80 [ 518.535322][ C1] ? copy_process+0x978/0x3b80 [ 518.540182][ C1] ? __pfx_copy_process+0x10/0x10 [ 518.545287][ C1] ? wake_up_q+0xca/0x110 [ 518.549714][ C1] kernel_clone+0x21e/0x870 [ 518.554281][ C1] ? __pfx_futex_wake+0x10/0x10 [ 518.559213][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 518.564321][ C1] ? do_futex+0x395/0x420 [ 518.568729][ C1] __x64_sys_clone+0x18b/0x1e0 [ 518.573539][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 518.578925][ C1] ? rcu_is_watching+0x15/0xb0 [ 518.583756][ C1] ? do_syscall_64+0xbe/0x3b0 [ 518.588505][ C1] do_syscall_64+0xfa/0x3b0 [ 518.593043][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 518.598270][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.604412][ C1] ? clear_bhb_loop+0x60/0xb0 [ 518.609134][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.615072][ C1] RIP: 0033:0x7ff507d8e9a9 [ 518.619532][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.639288][ C1] RSP: 002b:00007ff508c86fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 518.647753][ C1] RAX: ffffffffffffffda RBX: 00007ff507fb5fa0 RCX: 00007ff507d8e9a9 [ 518.655747][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000e50c1600 [ 518.663741][ C1] RBP: 00007ff507e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 518.671737][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 518.679737][ C1] R13: 0000000000000000 R14: 00007ff507fb5fa0 R15: 00007fffa456c248 [ 518.687791][ C1] [ 518.690859][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 518.698157][ C1] CPU: 1 UID: 0 PID: 11833 Comm: syz.0.1885 Not tainted 6.16.0-rc6-syzkaller-g5b4c54ac49af #0 PREEMPT(full) [ 518.709812][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 518.719900][ C1] Call Trace: [ 518.723219][ C1] [ 518.726091][ C1] dump_stack_lvl+0x99/0x250 [ 518.730725][ C1] ? __asan_memcpy+0x40/0x70 [ 518.735374][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 518.740608][ C1] ? __pfx__printk+0x10/0x10 [ 518.745302][ C1] panic+0x2db/0x790 [ 518.749250][ C1] ? __pfx_panic+0x10/0x10 [ 518.753763][ C1] __warn+0x31b/0x4b0 [ 518.757777][ C1] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 518.763549][ C1] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 518.769310][ C1] report_bug+0x2be/0x4f0 [ 518.773668][ C1] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 518.779441][ C1] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 518.785193][ C1] ? rcu_check_gp_start_stall+0x2e6/0x470 [ 518.791045][ C1] handle_bug+0x84/0x160 [ 518.795326][ C1] exc_invalid_op+0x1a/0x50 [ 518.799921][ C1] asm_exc_invalid_op+0x1a/0x20 [ 518.804823][ C1] RIP: 0010:rcu_check_gp_start_stall+0x2e4/0x470 [ 518.811193][ C1] Code: ff ff 48 c7 c7 00 84 af 99 be 04 00 00 00 e8 03 8f 7b 00 4c 89 f7 b8 01 00 00 00 87 05 15 cf 07 18 85 c0 0f 85 17 ff ff ff 90 <0f> 0b 90 48 81 ff 40 44 14 8e 74 47 48 c7 c0 30 1a a2 8f 48 c1 e8 [ 518.830922][ C1] RSP: 0018:ffffc90000a08bb8 EFLAGS: 00010046 [ 518.837039][ C1] RAX: 0000000000000000 RBX: 0000000000000a02 RCX: ffffffff81a7b4dd [ 518.845029][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8e144440 [ 518.853019][ C1] RBP: ffffc90000a08e30 R08: 0000000000000003 R09: 0000000000000004 [ 518.861013][ C1] R10: dffffc0000000000 R11: fffffbfff335f080 R12: 0000000000002904 [ 518.869019][ C1] R13: 1ffff110170e75fa R14: ffffffff8e144440 R15: dffffc0000000000 [ 518.877043][ C1] ? rcu_check_gp_start_stall+0x2cd/0x470 [ 518.882824][ C1] ? rcu_check_gp_start_stall+0x2cd/0x470 [ 518.888584][ C1] rcu_core+0x5f7/0x1710 [ 518.892875][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 518.898109][ C1] ? __pfx_perf_trace_lock+0x10/0x10 [ 518.903431][ C1] ? __pfx_rcu_core+0x10/0x10 [ 518.908133][ C1] ? sched_balance_domains+0x121/0x9e0 [ 518.913657][ C1] ? __rcu_read_unlock+0x84/0xe0 [ 518.918638][ C1] ? sched_balance_domains+0x8be/0x9e0 [ 518.924163][ C1] ? sched_balance_domains+0x121/0x9e0 [ 518.929684][ C1] handle_softirqs+0x283/0x870 [ 518.934479][ C1] ? autoremove_wake_function+0x39/0x100 [ 518.940158][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 518.944971][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 518.950284][ C1] ? irq_work_single+0x1ac/0x240 [ 518.955267][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 518.960549][ C1] __irq_exit_rcu+0xca/0x1f0 [ 518.965170][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 518.970413][ C1] ? rcu_is_watching+0x15/0xb0 [ 518.975225][ C1] irq_exit_rcu+0x9/0x30 [ 518.979492][ C1] sysvec_irq_work+0xa3/0xc0 [ 518.984115][ C1] [ 518.987061][ C1] [ 518.990015][ C1] asm_sysvec_irq_work+0x1a/0x20 [ 518.994976][ C1] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0 [ 519.001173][ C1] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 92 37 f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b [ 519.020805][ C1] RSP: 0018:ffffc9000b6def80 EFLAGS: 00000206 [ 519.026933][ C1] RAX: deb9cbff9f3e3400 RBX: 1ffff920016dbdf8 RCX: deb9cbff9f3e3400 [ 519.034929][ C1] RDX: 0000000000000006 RSI: ffffffff8d9986de RDI: ffffffff8be29f00 [ 519.042931][ C1] RBP: ffffc9000b6df080 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e [ 519.050928][ C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffffff8e144400 [ 519.058926][ C1] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000002 [ 519.066988][ C1] ? __pfx_perf_trace_lock+0x10/0x10 [ 519.072302][ C1] ? migrate_enable+0x29c/0x3c0 [ 519.077175][ C1] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 519.083195][ C1] ? trace_call_bpf+0xb7/0x850 [ 519.088027][ C1] __rcu_read_unlock+0x84/0xe0 [ 519.092829][ C1] ? trace_call_bpf+0xb7/0x850 [ 519.097609][ C1] trace_call_bpf+0x5ae/0x850 [ 519.102311][ C1] ? trace_call_bpf+0xb7/0x850 [ 519.107115][ C1] ? __pfx_trace_call_bpf+0x10/0x10 [ 519.112376][ C1] perf_trace_run_bpf_submit+0x78/0x170 [ 519.117964][ C1] perf_trace_lock+0x2f8/0x3b0 [ 519.122791][ C1] ? __pfx_perf_trace_lock+0x10/0x10 [ 519.128134][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 519.133287][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 519.138441][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 519.143626][ C1] lock_release+0x3b2/0x3e0 [ 519.148146][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 519.153390][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 519.158546][ C1] __virt_addr_valid+0x475/0x5c0 [ 519.163553][ C1] kasan_addr_to_slab+0xf/0x90 [ 519.168368][ C1] kasan_record_aux_stack+0xf/0xd0 [ 519.173547][ C1] kvfree_call_rcu+0xbb/0x410 [ 519.178323][ C1] drop_sysctl_table+0x385/0x510 [ 519.183388][ C1] ? __pfx_drop_sysctl_table+0x10/0x10 [ 519.188934][ C1] ? kvfree_call_rcu+0x374/0x410 [ 519.193953][ C1] drop_sysctl_table+0x39c/0x510 [ 519.199047][ C1] ? __pfx_drop_sysctl_table+0x10/0x10 [ 519.204545][ C1] ? do_raw_spin_lock+0x121/0x290 [ 519.209601][ C1] ? unregister_sysctl_table+0x39/0x60 [ 519.215097][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 519.220518][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 519.226483][ C1] unregister_sysctl_table+0x41/0x60 [ 519.231818][ C1] nf_log_net_exit+0x60/0xc0 [ 519.236450][ C1] ops_undo_list+0x49a/0x990 [ 519.241198][ C1] ? __pfx_ops_undo_list+0x10/0x10 [ 519.246337][ C1] ? ops_init+0x469/0x5c0 [ 519.250731][ C1] setup_net+0x3e2/0x4b0 [ 519.255045][ C1] ? __pfx_setup_net+0x10/0x10 [ 519.259850][ C1] ? copy_net_ns+0x304/0x4d0 [ 519.264507][ C1] ? down_read_killable+0x1d1/0x350 [ 519.269756][ C1] copy_net_ns+0x31b/0x4d0 [ 519.274223][ C1] create_new_namespaces+0x3f3/0x720 [ 519.279557][ C1] ? security_capable+0x7e/0x2e0 [ 519.284546][ C1] ? copy_namespaces+0x5c/0x4b0 [ 519.289440][ C1] copy_namespaces+0x438/0x4b0 [ 519.294245][ C1] ? copy_process+0x978/0x3b80 [ 519.299036][ C1] copy_process+0x1700/0x3b80 [ 519.303770][ C1] ? copy_process+0x978/0x3b80 [ 519.308635][ C1] ? __pfx_copy_process+0x10/0x10 [ 519.313790][ C1] ? wake_up_q+0xca/0x110 [ 519.318165][ C1] kernel_clone+0x21e/0x870 [ 519.322696][ C1] ? __pfx_futex_wake+0x10/0x10 [ 519.327606][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 519.332693][ C1] ? do_futex+0x395/0x420 [ 519.337081][ C1] __x64_sys_clone+0x18b/0x1e0 [ 519.341893][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 519.347302][ C1] ? rcu_is_watching+0x15/0xb0 [ 519.352108][ C1] ? do_syscall_64+0xbe/0x3b0 [ 519.356824][ C1] do_syscall_64+0xfa/0x3b0 [ 519.361348][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 519.366570][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.372652][ C1] ? clear_bhb_loop+0x60/0xb0 [ 519.377379][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.383289][ C1] RIP: 0033:0x7ff507d8e9a9 [ 519.387724][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.407348][ C1] RSP: 002b:00007ff508c86fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 519.415793][ C1] RAX: ffffffffffffffda RBX: 00007ff507fb5fa0 RCX: 00007ff507d8e9a9 [ 519.423797][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000e50c1600 [ 519.431785][ C1] RBP: 00007ff507e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 519.439785][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 519.447776][ C1] R13: 0000000000000000 R14: 00007ff507fb5fa0 R15: 00007fffa456c248 [ 519.455824][ C1] [ 519.459219][ C1] Kernel Offset: disabled [ 519.463576][ C1] Rebooting in 86400 seconds..