last executing test programs: 5.531289999s ago: executing program 3 (id=1156): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x360) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x52000, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f0000000200), &(0x7f00000008c0)}, 0x20) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0xab780d6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x200, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfff9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="120000000000000000d4114f8a"], 0x20) setsockopt$sock_attach_bpf(r4, 0x107, 0x5, &(0x7f00000000c0), 0x3e) sendmsg$kcm(r3, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=[{0x18, 0x84, 0x0, 'b'}], 0x18}, 0x41) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 5.132116215s ago: executing program 1 (id=1160): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x2}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{}], 0x1}, 0x40810) recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 4.827546996s ago: executing program 0 (id=1161): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000000}}, 0x0, 0xffffffffffffffff, r0, 0xa) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89fd, &(0x7f0000000080)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) close(r4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x10) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) ioctl$TUNGETVNETLE(r1, 0x40047452, &(0x7f0000000180)) 4.198154963s ago: executing program 4 (id=1162): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8910, &(0x7f0000000140)={'pim6reg1\x00', @dev}) 4.113473639s ago: executing program 1 (id=1163): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000280)="9d620779ea615afc62509ef66829f350afffa7d3c374d710e6856e15970665e8110430bcc47afa425b441e478b6e087d22e45a7af40a43a0503b3f4e3841af7ed86c9492e17b535a2a2fea018315a63204d214c8f9377929088abd3c9e56dc58ec50efc9a87042f5498bc91e900484d22307d0d2ba774f5a042f66663a550694588cea7f", 0x84}], 0x1}, 0x4000) 3.827918781s ago: executing program 2 (id=1165): bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)=0x12800) socket$kcm(0x28, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000001000)="b9ffe4306844268cb89914f008005d7d06f3ce084d3b369d50e3d5854804c6f82446", 0x0, 0x23, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x4}, 0x14105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x9) r6 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x8311}, 0x0, 0x2, 0xfffffffe, 0x9, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000080)='\x00') gettid() r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x161) 2.938757885s ago: executing program 1 (id=1166): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x3}]}, {0x0, [0x30, 0x2e]}}, 0x0, 0x28}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x4, @perf_config_ext={0x3, 0x8001}, 0x804, 0xffffffff, 0x8001, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r2, 0x0, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xb0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 2.869441793s ago: executing program 2 (id=1167): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, @perf_bp={0x0, 0x1}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16493812}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0xdf54e1f734805a61) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) r3 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) r7 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x64, &(0x7f0000000000)=r10, 0x10) 1.780042624s ago: executing program 1 (id=1168): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b82, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x18302, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @perf_bp={0x0, 0x8}, 0x1c00, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x9}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macsec0\x00', 0x1}) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x400300}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x9000000}, {{}, {}, {}, {0x85, 0x0, 0x0, 0xb4}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f900"}) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB], 0x20) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b13", 0x9}], 0x1}, 0x4080) r3 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x7}, 0x400, 0x0, 0x1, 0x7, 0xfffffffffffff08e, 0x1000}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.712165806s ago: executing program 4 (id=1169): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000025c0)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="28000000ff7f0000000001000300", @ANYBLOB, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair(0x22, 0x2, 0x4, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={&(0x7f0000000040), 0xd}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x22, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) r2 = socket$kcm(0x2, 0x1, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x28, 0x0, 0x0) 1.641265184s ago: executing program 2 (id=1170): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea608641602f36504001a00381931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb3678a40cb53fc8d8faaafe63e09e", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7ff3, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x0, @perf_bp={0x0, 0x3}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001a40)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, @perf_config_ext={0xffffffffffffffff, 0x8}, 0x9000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x2}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x80, 0x0}, 0x20000010) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @dev, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r4 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000d00)=""/254, 0xfe}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000003980)=""/4028, 0xfbc}, {&(0x7f0000000140)=""/221, 0xdd}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/209, 0xd1}, {&(0x7f0000000680)=""/237, 0xed}, {&(0x7f0000000540)=""/159, 0x9f}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 1.566880854s ago: executing program 0 (id=1171): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40) recvmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000840)=""/254, 0xfe}], 0x1}, 0x18103) 1.56175045s ago: executing program 3 (id=1172): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, 0x0, 0x20044818) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0x1}, {&(0x7f0000000140)="ce15fc9dc237ed5b37773a15b2f2615b0230a382c5bd51f04ff7e6c1f67c42c528244c3436e3d42cd667901a878ce7a4ebb5c55bd9c6f14079c1afebfbd8107a4a469b59ae1543bdc3085d6a10876755db80", 0x52}, {0x0}, {&(0x7f00000001c0)}], 0x4}, 0x4000081) 1.468097072s ago: executing program 4 (id=1173): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b37, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) setsockopt$sock_attach_bpf(r0, 0x107, 0xe, &(0x7f0000000000), 0x4) 1.46705733s ago: executing program 0 (id=1174): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, r0, 0x1) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f00000004c0)='.', 0x1}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="20000000000000008400000002000000948404"], 0x20}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x21, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x3}}]}}, 0x0, 0x4e}, 0x28) r5 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$TUNSETVNETBE(r6, 0x400454de, &(0x7f0000000400)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x48) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = syz_clone(0x50000080, &(0x7f0000000340)="63fee6a6a375a20bedf665b4bc91e8a7698d97c317cc7e8035e2ad92fc60d280f5ba7fc2db306d1e57ad3d0969c362199168309468ca7a8397ebcd1a58ae89194035c5615420f726a3121de32f2a996aa02a5d59a77d90ca1a2c3a26077e349d857a502fcf0d06c91f7efc3fcd9008f52ba6c2f35d9a7f8e1294c30bdfbf3afc0891d51673951aacf394cd", 0x8b, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)="dfdaf97d7d1665cd5d0c6c8980e1f02c6d") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x5) 1.436868488s ago: executing program 3 (id=1175): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b82, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x9) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0xb, 0x5, 0x7, &(0x7f00000001c0)) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x18302, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @perf_bp={0x0, 0x8}, 0x1c00, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0xb) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f0000000040)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x82, 0x2}]}}}], 0x38}, 0x4000) r4 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x9}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macsec0\x00', 0x1}) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x400300}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000000000000000018110000", @ANYRES32, @ANYRESDEC=r2], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) socketpair(0x10, 0x80000, 0x1f7, &(0x7f0000000200)) close(r5) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f900"}) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB], 0x20) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x4e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa4}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b13", 0x9}], 0x1}, 0x4080) r7 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r7, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x7}, 0x400, 0x0, 0x1, 0x7, 0xfffffffffffff08e, 0x1000}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.42407048s ago: executing program 1 (id=1176): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000280)="9d620779ea615afc62509ef66829f350afffa7d3c374d710e6856e15970665e8110430bcc47afa425b441e478b6e087d22e45a7af40a43a0503b3f4e3841af7ed86c9492e17b535a2a2fea018315a63204d214c8f9377929088abd3c9e56dc58ec50efc9a87042f5498bc91e900484d22307d0d2ba774f5a042f66663a550694588cea7f", 0x84}], 0x1}, 0x4000) 843.94958ms ago: executing program 0 (id=1177): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={&(0x7f0000000040)}, 0x14035, 0x2e, 0xfffffc03, 0x3, 0x2, 0x80, 0x6, 0x0, 0x0, 0x0, 0x100000000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$kcm(0x1e, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xeea6ec81, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, r0, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc79, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xf00}, 0xc) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r6 = socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x4, 0x2, 0xa25eb5e9f2c0872c, {0x2, 0x4e24, @multicast2}}, 0x80, 0x0}, 0x24040008) setsockopt$sock_attach_bpf(r6, 0x84, 0x84, &(0x7f0000000000), 0x90) write$cgroup_pid(r5, &(0x7f0000000000), 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r7 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f00000002c0)=@pptp={0x18, 0x2, {0x3, @multicast1}}, 0x80, 0x0}, 0x40) write$cgroup_devices(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="63202a3a2a20776d00e02a322d09120ecc6baa46b3ba622eec36b90668ca04120e5e304f73345488266722c21834b1577836160864225389b200"/67], 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) 841.923664ms ago: executing program 4 (id=1178): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x3}]}, {0x0, [0x30, 0x2e]}}, 0x0, 0x28}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x4, @perf_config_ext={0x3, 0x8001}, 0x804, 0xffffffff, 0x8001, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r2, 0x0, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xb0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 722.580229ms ago: executing program 3 (id=1179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8910, &(0x7f0000000140)={'pim6reg1\x00', @dev}) 629.349398ms ago: executing program 0 (id=1180): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, @perf_bp={0x0, 0x1}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16493812}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) r3 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) r7 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x64, &(0x7f0000000000)=r10, 0x10) 564.137416ms ago: executing program 2 (id=1181): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x3, 0x1, 0x4, 0x0, 0x0, 0x7ff0, 0x82, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x6}, 0x14105, 0x2e, 0xfffffbff, 0x0, 0x2, 0x8, 0xfffb, 0x0, 0xfffffffd, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x29, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e0800000709000000000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 291.374158ms ago: executing program 4 (id=1182): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1851599fe73f00be0000000000b100f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) 240.341208ms ago: executing program 2 (id=1183): socket$kcm(0xa, 0x2, 0x0) r0 = gettid() bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000085dc339a796066c31fe3fb69f5ff0f00"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x4, @perf_bp={&(0x7f0000000040), 0x2}, 0x5205, 0x9, 0xffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x407fff, 0xaea}, 0x2aa, 0xe1e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xa, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) socket$kcm(0xa, 0x2, 0x0) (async) gettid() (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000085dc339a796066c31fe3fb69f5ff0f00"], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x4, @perf_bp={&(0x7f0000000040), 0x2}, 0x5205, 0x9, 0xffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x407fff, 0xaea}, 0x2aa, 0xe1e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xa, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) (async) socket$kcm(0x2, 0x1, 0x0) (async) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) (async) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) (async) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) (async) 240.061556ms ago: executing program 3 (id=1184): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40) recvmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000840)=""/254, 0xfe}], 0x1}, 0x18103) 132.646432ms ago: executing program 0 (id=1185): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, 0x0, 0x20044818) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0x1}, {&(0x7f0000000140)="ce15fc9dc237ed5b37773a15b2f2615b0230a382c5bd51f04ff7e6c1f67c42c528244c3436e3d42cd667901a878ce7a4ebb5c55bd9c6f14079c1afebfbd8107a4a469b59ae1543bdc3085d6a10876755db80", 0x52}, {0x0}, {&(0x7f00000001c0)}], 0x4, &(0x7f0000000080)}, 0x4000081) 52.063255ms ago: executing program 3 (id=1186): close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socket$kcm(0x29, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d4010000400000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x6}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="2641d7d22306876718aead6170ce79451109cd472f89195a0f644e8346033119535b961a11b211357662c63003cfd2729c49e9bfe2d46536b2a0f2daa93ebd2f81ae91b939eff91e8fb8cab607b22da4f6fed427ff0ca516baf9dc0079b9b44b378de87c3512a2d2583053170249602fe446bb2168a7321bff95e8aa07c926fabaaa4c670c6148a92da5b8603d7c4376e50b90e42510e4627734ae07c10b8e705a33e5325933a345c80685812d8562e583a3b9f881"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20) 49.983127ms ago: executing program 4 (id=1187): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={&(0x7f0000000040)}, 0x14035, 0x2e, 0xfffffc03, 0x3, 0x2, 0x80, 0x6, 0x0, 0x0, 0x0, 0x100000000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$kcm(0x1e, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xeea6ec81, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, r0, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc7a, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xf00}, 0xc) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r6 = socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x4, 0x2, 0xa25eb5e9f2c0872c, {0x2, 0x4e24, @multicast2}}, 0x80, 0x0}, 0x24040008) setsockopt$sock_attach_bpf(r6, 0x84, 0x84, &(0x7f0000000000), 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) write$cgroup_pid(r5, &(0x7f0000000000), 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r7 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f00000002c0)=@pptp={0x18, 0x2, {0x3, @multicast1}}, 0x80, 0x0}, 0x40) write$cgroup_devices(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="63202a3a2a20776d00e02a322d09120ecc6baa46b3ba622eec36b90668ca04120e5e304f73345488266722c21834b1577836160864225389b200"/67], 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) 7.87234ms ago: executing program 2 (id=1188): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@fallback, 0x0, 0x1, 0x2, &(0x7f0000000240)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000280)=[0x0], &(0x7f0000000380)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x0}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x8, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@map=r1, 0xffffffffffffffff, 0x2d, 0x8, 0x0, @void, @value=r3, @void, @void, r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 0s ago: executing program 1 (id=1189): socket$kcm(0x2a, 0x2, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x4}, 0x14105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x340fd}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004680)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x4, 0x1, 0x0, 0x6, 0x4, [{0x6, 0xb}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x28) kernel console output (not intermixed with test programs): 07f56e2db5fa0 RCX: 00007f56e2b8e929 [ 195.215473][ T7665] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 195.215484][ T7665] RBP: 00007f56e39f0090 R08: 0000000000000000 R09: 0000000000000000 [ 195.215495][ T7665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.215506][ T7665] R13: 0000000000000000 R14: 00007f56e2db5fa0 R15: 00007fff0c4ffd08 [ 195.215533][ T7665] [ 195.569128][ T7673] tun0: tun_chr_ioctl cmd 1074025677 [ 195.574671][ T7673] tun0: linktype set to 864 [ 195.647748][ T7676] FAULT_INJECTION: forcing a failure. [ 195.647748][ T7676] name failslab, interval 1, probability 0, space 0, times 0 [ 195.663086][ T7676] CPU: 1 UID: 0 PID: 7676 Comm: syz.3.533 Not tainted 6.16.0-rc3-syzkaller-g212ec9229567 #0 PREEMPT(full) [ 195.663113][ T7676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 195.663124][ T7676] Call Trace: [ 195.663132][ T7676] [ 195.663141][ T7676] dump_stack_lvl+0x189/0x250 [ 195.663171][ T7676] ? __pfx____ratelimit+0x10/0x10 [ 195.663202][ T7676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.663227][ T7676] ? __pfx__printk+0x10/0x10 [ 195.663253][ T7676] ? __pfx___might_resched+0x10/0x10 [ 195.663275][ T7676] ? fs_reclaim_acquire+0x7d/0x100 [ 195.663303][ T7676] should_fail_ex+0x414/0x560 [ 195.663332][ T7676] should_failslab+0xa8/0x100 [ 195.663356][ T7676] kmem_cache_alloc_noprof+0x73/0x3c0 [ 195.663374][ T7676] ? getname_flags+0xb8/0x540 [ 195.663394][ T7676] ? hw_breakpoint_exceptions_notify+0x16d/0x680 [ 195.663422][ T7676] getname_flags+0xb8/0x540 [ 195.663450][ T7676] do_sys_openat2+0xbc/0x1c0 [ 195.663472][ T7676] ? atomic_notifier_call_chain+0x26/0x180 [ 195.663500][ T7676] ? __pfx_do_sys_openat2+0x10/0x10 [ 195.663521][ T7676] ? perf_trace_preemptirq_template+0xa3/0x340 [ 195.663548][ T7676] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 195.663572][ T7676] ? __pfx_notify_die+0x10/0x10 [ 195.663586][ T7676] ? rcu_is_watching+0x15/0xb0 [ 195.663616][ T7676] __x64_sys_openat+0x138/0x170 [ 195.663646][ T7676] do_syscall_64+0xfa/0x3b0 [ 195.663662][ T7676] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.663678][ T7676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.663694][ T7676] ? clear_bhb_loop+0x60/0xb0 [ 195.663714][ T7676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.663730][ T7676] RIP: 0033:0x7fe57038d290 [ 195.663745][ T7676] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 195.663757][ T7676] RSP: 002b:00007fe571245f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 195.663774][ T7676] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fe57038d290 [ 195.663787][ T7676] RDX: 0000000000000002 RSI: 00007fe571245fa0 RDI: 00000000ffffff9c [ 195.663797][ T7676] RBP: 00007fe571245fa0 R08: 0000000000000000 R09: 0000000000000000 [ 195.663808][ T7676] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 195.663817][ T7676] R13: 0000000000000000 R14: 00007fe5705b5fa0 R15: 00007ffc2acbf6e8 [ 195.663846][ T7676] [ 196.718119][ T7704] netlink: 'syz.4.544': attribute type 3 has an invalid length. [ 196.736610][ T7704] netlink: 'syz.4.544': attribute type 2 has an invalid length. [ 196.775470][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 196.781688][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 196.789985][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 196.796629][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 196.803495][ T7704] netlink: 198000 bytes leftover after parsing attributes in process `syz.4.544'. [ 196.805465][ T5150] Bluetooth: hci2: command 0x0406 tx timeout [ 196.874860][ T7711] FAULT_INJECTION: forcing a failure. [ 196.874860][ T7711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.032234][ T7711] CPU: 1 UID: 0 PID: 7711 Comm: syz.2.546 Not tainted 6.16.0-rc3-syzkaller-g212ec9229567 #0 PREEMPT(full) [ 197.032265][ T7711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 197.032275][ T7711] Call Trace: [ 197.032287][ T7711] [ 197.032296][ T7711] dump_stack_lvl+0x189/0x250 [ 197.032329][ T7711] ? __pfx____ratelimit+0x10/0x10 [ 197.032351][ T7711] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.032381][ T7711] ? __pfx__printk+0x10/0x10 [ 197.032415][ T7711] ? __might_fault+0xb0/0x130 [ 197.032455][ T7711] should_fail_ex+0x414/0x560 [ 197.032496][ T7711] strncpy_from_user+0x36/0x290 [ 197.032534][ T7711] getname_flags+0xf3/0x540 [ 197.032574][ T7711] user_path_create+0x23/0x50 [ 197.032599][ T7711] bpf_obj_pin_user+0x132/0x330 [ 197.032630][ T7711] ? __pfx_bpf_obj_pin_user+0x10/0x10 [ 197.032680][ T7711] __sys_bpf+0x767/0x860 [ 197.032713][ T7711] ? __pfx___sys_bpf+0x10/0x10 [ 197.032783][ T7711] ? ksys_write+0x22a/0x250 [ 197.032813][ T7711] ? __pfx_ksys_write+0x10/0x10 [ 197.032829][ T7711] ? rcu_is_watching+0x15/0xb0 [ 197.032877][ T7711] __x64_sys_bpf+0x7c/0x90 [ 197.032904][ T7711] do_syscall_64+0xfa/0x3b0 [ 197.032923][ T7711] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.032942][ T7711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.032961][ T7711] ? clear_bhb_loop+0x60/0xb0 [ 197.032990][ T7711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.033008][ T7711] RIP: 0033:0x7f08a6f8e929 [ 197.033028][ T7711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.033043][ T7711] RSP: 002b:00007f08a7df1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 197.033064][ T7711] RAX: ffffffffffffffda RBX: 00007f08a71b5fa0 RCX: 00007f08a6f8e929 [ 197.033077][ T7711] RDX: 0000000000000018 RSI: 0000200000000080 RDI: 0000000000000006 [ 197.033088][ T7711] RBP: 00007f08a7df1090 R08: 0000000000000000 R09: 0000000000000000 [ 197.033100][ T7711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.033110][ T7711] R13: 0000000000000000 R14: 00007f08a71b5fa0 R15: 00007ffded9b75b8 [ 197.033166][ T7711] [ 198.201902][ T7729] netlink: 22 bytes leftover after parsing attributes in process `syz.3.551'. [ 198.501223][ T7736] netlink: 'syz.2.553': attribute type 39 has an invalid length. [ 199.739336][ T7743] FAULT_INJECTION: forcing a failure. [ 199.739336][ T7743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.764430][ T7743] CPU: 0 UID: 0 PID: 7743 Comm: syz.1.556 Not tainted 6.16.0-rc3-syzkaller-g212ec9229567 #0 PREEMPT(full) [ 199.764468][ T7743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 199.764478][ T7743] Call Trace: [ 199.764486][ T7743] [ 199.764494][ T7743] dump_stack_lvl+0x189/0x250 [ 199.764525][ T7743] ? __pfx____ratelimit+0x10/0x10 [ 199.764543][ T7743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.764567][ T7743] ? __pfx__printk+0x10/0x10 [ 199.764597][ T7743] should_fail_ex+0x414/0x560 [ 199.764626][ T7743] _copy_to_user+0x31/0xb0 [ 199.764648][ T7743] bpf_test_finish+0x1ab/0x700 [ 199.764678][ T7743] ? __pfx_bpf_test_finish+0x10/0x10 [ 199.764701][ T7743] ? bpf_test_timer_leave+0x10b/0x150 [ 199.764726][ T7743] bpf_prog_test_run_flow_dissector+0x44e/0x5c0 [ 199.764760][ T7743] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 199.764785][ T7743] ? __fget_files+0x2a/0x420 [ 199.764811][ T7743] ? __fget_files+0x2a/0x420 [ 199.764835][ T7743] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 199.764858][ T7743] bpf_prog_test_run+0x2c4/0x340 [ 199.764885][ T7743] __sys_bpf+0x4a4/0x860 [ 199.764908][ T7743] ? __pfx___sys_bpf+0x10/0x10 [ 199.764942][ T7743] ? ksys_write+0x22a/0x250 [ 199.764962][ T7743] ? __pfx_ksys_write+0x10/0x10 [ 199.764977][ T7743] ? rcu_is_watching+0x15/0xb0 [ 199.765007][ T7743] __x64_sys_bpf+0x7c/0x90 [ 199.765026][ T7743] do_syscall_64+0xfa/0x3b0 [ 199.765041][ T7743] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.765056][ T7743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.765073][ T7743] ? clear_bhb_loop+0x60/0xb0 [ 199.765093][ T7743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.765108][ T7743] RIP: 0033:0x7fad87b8e929 [ 199.765123][ T7743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.765139][ T7743] RSP: 002b:00007fad88994038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 199.765158][ T7743] RAX: ffffffffffffffda RBX: 00007fad87db5fa0 RCX: 00007fad87b8e929 [ 199.765171][ T7743] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 199.765182][ T7743] RBP: 00007fad88994090 R08: 0000000000000000 R09: 0000000000000000 [ 199.765192][ T7743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.765201][ T7743] R13: 0000000000000000 R14: 00007fad87db5fa0 R15: 00007fff4a5b7568 [ 199.765229][ T7743] [ 199.960726][ T7757] netlink: 'syz.2.558': attribute type 10 has an invalid length. [ 200.065533][ T7757] team0: Device ipvlan1 failed to register rx_handler [ 200.490612][ T7772] netlink: 22 bytes leftover after parsing attributes in process `syz.4.565'. [ 200.777693][ T7781] netlink: 'syz.4.568': attribute type 4 has an invalid length. [ 200.806814][ T7781] netlink: 152 bytes leftover after parsing attributes in process `syz.4.568'. [ 200.917304][ T7781] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 201.030429][ T7793] netlink: 60 bytes leftover after parsing attributes in process `syz.2.572'. [ 201.074810][ T7791] netlink: 60 bytes leftover after parsing attributes in process `syz.2.572'. [ 201.086549][ T7794] netlink: 60 bytes leftover after parsing attributes in process `syz.2.572'. [ 201.101148][ T7794] FAULT_INJECTION: forcing a failure. [ 201.101148][ T7794] name failslab, interval 1, probability 0, space 0, times 0 [ 201.114601][ T7794] CPU: 0 UID: 0 PID: 7794 Comm: syz.2.572 Not tainted 6.16.0-rc3-syzkaller-g212ec9229567 #0 PREEMPT(full) [ 201.114625][ T7794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 201.114634][ T7794] Call Trace: [ 201.114640][ T7794] [ 201.114647][ T7794] dump_stack_lvl+0x189/0x250 [ 201.114678][ T7794] ? __pfx____ratelimit+0x10/0x10 [ 201.114695][ T7794] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.114719][ T7794] ? __pfx__printk+0x10/0x10 [ 201.114737][ T7794] ? perf_trace_lock+0xec/0x3b0 [ 201.114772][ T7794] should_fail_ex+0x414/0x560 [ 201.114799][ T7794] should_failslab+0xa8/0x100 [ 201.114820][ T7794] kmem_cache_alloc_noprof+0x73/0x3c0 [ 201.114838][ T7794] ? skb_clone+0x212/0x3a0 [ 201.114866][ T7794] skb_clone+0x212/0x3a0 [ 201.114893][ T7794] __netlink_deliver_tap+0x404/0x850 [ 201.114926][ T7794] ? netlink_deliver_tap+0x2e/0x1b0 [ 201.114943][ T7794] netlink_deliver_tap+0x19c/0x1b0 [ 201.114956][ T7794] netlink_dump+0x8e4/0xe20 [ 201.114966][ T7794] ? __skb_try_recv_from_queue+0x58f/0x730 [ 201.114988][ T7794] ? __pfx_netlink_dump+0x10/0x10 [ 201.115015][ T7794] netlink_recvmsg+0x676/0xa30 [ 201.115037][ T7794] ? __pfx_netlink_recvmsg+0x10/0x10 [ 201.115053][ T7794] ? aa_sock_msg_perm+0x94/0x160 [ 201.115068][ T7794] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 201.115082][ T7794] ? security_socket_recvmsg+0x7e/0x2e0 [ 201.115093][ T7794] ? __pfx_netlink_recvmsg+0x10/0x10 [ 201.115105][ T7794] sock_recvmsg+0x229/0x270 [ 201.115118][ T7794] ____sys_recvmsg+0x1c9/0x460 [ 201.115138][ T7794] ? __pfx_____sys_recvmsg+0x10/0x10 [ 201.115161][ T7794] ? import_iovec+0x74/0xa0 [ 201.115175][ T7794] ___sys_recvmsg+0x1b5/0x510 [ 201.115192][ T7794] ? __pfx____sys_recvmsg+0x10/0x10 [ 201.115221][ T7794] ? __fget_files+0x3a0/0x420 [ 201.115241][ T7794] __x64_sys_recvmsg+0x198/0x260 [ 201.115256][ T7794] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 201.115275][ T7794] ? __pfx_ksys_write+0x10/0x10 [ 201.115290][ T7794] ? do_syscall_64+0xbe/0x3b0 [ 201.115302][ T7794] do_syscall_64+0xfa/0x3b0 [ 201.115312][ T7794] ? lockdep_hardirqs_on+0x9c/0x150 [ 201.115328][ T7794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.115338][ T7794] ? clear_bhb_loop+0x60/0xb0 [ 201.115350][ T7794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.115359][ T7794] RIP: 0033:0x7f08a6f8e929 [ 201.115370][ T7794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.115378][ T7794] RSP: 002b:00007f08a7daf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 201.115390][ T7794] RAX: ffffffffffffffda RBX: 00007f08a71b6160 RCX: 00007f08a6f8e929 [ 201.115397][ T7794] RDX: 0000000040000002 RSI: 0000200000000e80 RDI: 0000000000000003 [ 201.115403][ T7794] RBP: 00007f08a7daf090 R08: 0000000000000000 R09: 0000000000000000 [ 201.115409][ T7794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.115415][ T7794] R13: 0000000000000001 R14: 00007f08a71b6160 R15: 00007ffded9b75b8 [ 201.115432][ T7794] [ 201.768756][ T7811] netlink: 22 bytes leftover after parsing attributes in process `syz.0.578'. [ 202.451462][ T7829] netlink: 'syz.2.584': attribute type 10 has an invalid length. [ 202.470548][ T7832] FAULT_INJECTION: forcing a failure. [ 202.470548][ T7832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.512358][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 202.520108][ T7832] CPU: 0 UID: 0 PID: 7832 Comm: syz.0.585 Not tainted 6.16.0-rc3-syzkaller-g212ec9229567 #0 PREEMPT(full) [ 202.520130][ T7832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 202.520138][ T7832] Call Trace: [ 202.520146][ T7832] [ 202.520153][ T7832] dump_stack_lvl+0x189/0x250 [ 202.520178][ T7832] ? __pfx____ratelimit+0x10/0x10 [ 202.520192][ T7832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.520211][ T7832] ? __pfx__printk+0x10/0x10 [ 202.520226][ T7832] ? __might_fault+0xb0/0x130 [ 202.520242][ T7832] ? __might_fault+0xb0/0x130 [ 202.520261][ T7832] should_fail_ex+0x414/0x560 [ 202.520284][ T7832] _copy_from_user+0x2d/0xb0 [ 202.520300][ T7832] __tun_chr_ioctl+0x1c4/0x1df0 [ 202.520321][ T7832] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 202.520339][ T7832] ? __fget_files+0x2a/0x420 [ 202.520355][ T7832] ? __fget_files+0x3a0/0x420 [ 202.520369][ T7832] ? __fget_files+0x2a/0x420 [ 202.520387][ T7832] ? bpf_lsm_file_ioctl+0x9/0x20 [ 202.520400][ T7832] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 202.520420][ T7832] __se_sys_ioctl+0xf9/0x170 [ 202.520436][ T7832] do_syscall_64+0xfa/0x3b0 [ 202.520449][ T7832] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.520463][ T7832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.520476][ T7832] ? clear_bhb_loop+0x60/0xb0 [ 202.520493][ T7832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.520506][ T7832] RIP: 0033:0x7f5d52b8e929 [ 202.520521][ T7832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.520532][ T7832] RSP: 002b:00007f5d53a16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.520547][ T7832] RAX: ffffffffffffffda RBX: 00007f5d52db5fa0 RCX: 00007f5d52b8e929 [ 202.520556][ T7832] RDX: 0000200000000200 RSI: 00000000400454d9 RDI: 0000000000000003 [ 202.520565][ T7832] RBP: 00007f5d53a16090 R08: 0000000000000000 R09: 0000000000000000 [ 202.520573][ T7832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.520580][ T7832] R13: 0000000000000000 R14: 00007f5d52db5fa0 R15: 00007fff08c4aec8 [ 202.520605][ T7832] [ 202.520793][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 202.747620][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 202.755583][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 202.763492][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 202.771280][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 202.779176][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 202.790718][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 202.801889][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 202.812358][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 202.820239][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 202.829918][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 202.840400][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 202.848335][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 202.856662][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 202.864580][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 202.872560][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 202.880358][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 202.888402][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 202.896279][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 202.909413][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 202.917381][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 202.925409][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 202.933669][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 202.941463][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 202.949370][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 202.957354][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 202.965738][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 202.973612][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 202.981413][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 202.989379][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 202.997315][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 203.010702][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 203.023220][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 203.031082][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 203.039020][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 203.046953][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 203.054902][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 203.062782][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 203.070575][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 203.078965][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 203.086807][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 203.094689][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 203.102568][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 203.115515][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 203.123569][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 203.131374][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 203.139318][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 203.147222][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 203.155142][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 203.163542][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 203.171347][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 203.179511][ T7839] FAULT_INJECTION: forcing a failure. [ 203.179511][ T7839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.180343][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 203.201826][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 203.212868][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 203.220654][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 203.231122][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 203.239017][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 203.247018][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 203.255613][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 203.263660][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 203.271510][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 203.279429][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 203.287436][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 203.295285][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 203.303517][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 203.322739][ T7839] CPU: 1 UID: 0 PID: 7839 Comm: syz.1.587 Not tainted 6.16.0-rc3-syzkaller-g212ec9229567 #0 PREEMPT(full) [ 203.322764][ T7839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 203.322773][ T7839] Call Trace: [ 203.322784][ T7839] [ 203.322796][ T7839] dump_stack_lvl+0x189/0x250 [ 203.322833][ T7839] ? __pfx____ratelimit+0x10/0x10 [ 203.322861][ T7839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.322894][ T7839] ? __pfx__printk+0x10/0x10 [ 203.322924][ T7839] ? __might_fault+0xb0/0x130 [ 203.322963][ T7839] ? __might_fault+0xb0/0x130 [ 203.323017][ T7839] should_fail_ex+0x414/0x560 [ 203.323062][ T7839] _copy_from_iter+0x1db/0x16f0 [ 203.323090][ T7839] ? __alloc_frozen_pages_noprof+0x1d6/0x370 [ 203.323154][ T7839] ? __pfx__copy_from_iter+0x10/0x10 [ 203.323176][ T7839] ? policy_nodemask+0x27c/0x720 [ 203.323198][ T7839] ? aa_file_perm+0x11f/0xed0 [ 203.323252][ T7839] ? page_copy_sane+0x4e/0x280 [ 203.323288][ T7839] copy_page_from_iter+0xdd/0x170 [ 203.323330][ T7839] anon_pipe_write+0x99a/0x1360 [ 203.323474][ T7839] ? __pfx_anon_pipe_write+0x10/0x10 [ 203.323498][ T7839] ? common_file_perm+0x199/0x200 [ 203.323544][ T7839] ? bpf_lsm_file_permission+0x9/0x20 [ 203.323561][ T7839] ? security_file_permission+0x75/0x290 [ 203.323633][ T7839] vfs_write+0x54b/0xa90 [ 203.323685][ T7839] ? __pfx_anon_pipe_write+0x10/0x10 [ 203.323719][ T7839] ? __pfx_vfs_write+0x10/0x10 [ 203.323796][ T7839] ? __fget_files+0x2a/0x420 [ 203.323871][ T7839] ksys_write+0x145/0x250 [ 203.323911][ T7839] ? __pfx_ksys_write+0x10/0x10 [ 203.323938][ T7839] ? rcu_is_watching+0x15/0xb0 [ 203.323973][ T7839] ? trace_sys_enter+0x25/0x120 [ 203.324029][ T7839] do_syscall_64+0xfa/0x3b0 [ 203.324049][ T7839] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.324072][ T7839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.324092][ T7839] ? clear_bhb_loop+0x60/0xb0 [ 203.324133][ T7839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.324152][ T7839] RIP: 0033:0x7fad87b8e929 [ 203.324175][ T7839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.324190][ T7839] RSP: 002b:00007fad88994038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 203.324210][ T7839] RAX: ffffffffffffffda RBX: 00007fad87db5fa0 RCX: 00007fad87b8e929 [ 203.324223][ T7839] RDX: 00000000fffffdef RSI: 00002000000001c0 RDI: 0000000000000000 [ 203.324235][ T7839] RBP: 00007fad88994090 R08: 0000000000000000 R09: 0000000000000000 [ 203.324246][ T7839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.324256][ T7839] R13: 0000000000000000 R14: 00007fad87db5fa0 R15: 00007fff4a5b7568 [ 203.324339][ T7839] [ 203.326141][ T7829] veth0_vlan: left promiscuous mode [ 203.626134][ T7829] veth0_vlan: entered promiscuous mode [ 203.651358][ T7829] team0: Device veth0_vlan failed to register rx_handler [ 203.785040][ T7846] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 203.792101][ T7846] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 203.863116][ T7846] veth0_to_bridge: entered allmulticast mode [ 203.871090][ T7846] veth0_to_bridge: entered promiscuous mode [ 203.915926][ T7857] netlink: 22 bytes leftover after parsing attributes in process `syz.3.593'. [ 203.950140][ T7854] netlink: 'syz.1.592': attribute type 3 has an invalid length. [ 203.958205][ T7854] netlink: 'syz.1.592': attribute type 2 has an invalid length. [ 203.970153][ T7854] netlink: 198000 bytes leftover after parsing attributes in process `syz.1.592'. [ 204.491970][ T7880] netlink: 60 bytes leftover after parsing attributes in process `syz.3.600'. [ 204.513260][ T7877] netlink: 60 bytes leftover after parsing attributes in process `syz.3.600'. [ 204.745108][ T7880] netlink: 60 bytes leftover after parsing attributes in process `syz.3.600'. [ 205.109519][ T7880] netlink: 96168 bytes leftover after parsing attributes in process `syz.3.600'. [ 205.445301][ T7892] FAULT_INJECTION: forcing a failure. [ 205.445301][ T7892] name failslab, interval 1, probability 0, space 0, times 0 [ 205.498058][ T7892] CPU: 0 UID: 0 PID: 7892 Comm: syz.2.604 Not tainted 6.16.0-rc3-syzkaller-g212ec9229567 #0 PREEMPT(full) [ 205.498084][ T7892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 205.498095][ T7892] Call Trace: [ 205.498103][ T7892] [ 205.498111][ T7892] dump_stack_lvl+0x189/0x250 [ 205.498150][ T7892] ? __pfx____ratelimit+0x10/0x10 [ 205.498169][ T7892] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.498193][ T7892] ? __pfx__printk+0x10/0x10 [ 205.498219][ T7892] ? __pfx___might_resched+0x10/0x10 [ 205.498251][ T7892] should_fail_ex+0x414/0x560 [ 205.498280][ T7892] should_failslab+0xa8/0x100 [ 205.498303][ T7892] __kmalloc_noprof+0xcb/0x4f0 [ 205.498321][ T7892] ? sk_prot_alloc+0xe7/0x220 [ 205.498349][ T7892] sk_prot_alloc+0xe7/0x220 [ 205.498368][ T7892] ? sk_alloc+0x24/0x370 [ 205.498392][ T7892] sk_alloc+0x3a/0x370 [ 205.498412][ T7892] ? bpf_ctx_init+0x167/0x1d0 [ 205.498436][ T7892] bpf_prog_test_run_skb+0x2ed/0x1560 [ 205.498456][ T7892] ? __fget_files+0x2a/0x420 [ 205.498494][ T7892] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 205.498517][ T7892] bpf_prog_test_run+0x2c4/0x340 [ 205.498546][ T7892] __sys_bpf+0x4a4/0x860 [ 205.498570][ T7892] ? __pfx___sys_bpf+0x10/0x10 [ 205.498610][ T7892] ? ksys_write+0x22a/0x250 [ 205.498632][ T7892] ? __pfx_ksys_write+0x10/0x10 [ 205.498647][ T7892] ? rcu_is_watching+0x15/0xb0 [ 205.498729][ T7892] __x64_sys_bpf+0x7c/0x90 [ 205.498752][ T7892] do_syscall_64+0xfa/0x3b0 [ 205.498769][ T7892] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.498784][ T7892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.498801][ T7892] ? clear_bhb_loop+0x60/0xb0 [ 205.498824][ T7892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.498839][ T7892] RIP: 0033:0x7f08a6f8e929 [ 205.498855][ T7892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.498875][ T7892] RSP: 002b:00007f08a7df1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 205.498890][ T7892] RAX: ffffffffffffffda RBX: 00007f08a71b5fa0 RCX: 00007f08a6f8e929 [ 205.498900][ T7892] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 205.498909][ T7892] RBP: 00007f08a7df1090 R08: 0000000000000000 R09: 0000000000000000 [ 205.498917][ T7892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.498925][ T7892] R13: 0000000000000000 R14: 00007f08a71b5fa0 R15: 00007ffded9b75b8 [ 205.498950][ T7892] [ 205.873877][ T7897] netlink: 'syz.4.607': attribute type 3 has an invalid length. [ 205.905333][ T7897] netlink: 'syz.4.607': attribute type 2 has an invalid length. [ 205.914231][ T7900] FAULT_INJECTION: forcing a failure. [ 205.914231][ T7900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.926302][ T7897] netlink: 198000 bytes leftover after parsing attributes in process `syz.4.607'. [ 205.930963][ T7900] CPU: 0 UID: 0 PID: 7900 Comm: syz.3.606 Not tainted 6.16.0-rc3-syzkaller-g212ec9229567 #0 PREEMPT(full) [ 205.930990][ T7900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 205.931001][ T7900] Call Trace: [ 205.931009][ T7900] [ 205.931017][ T7900] dump_stack_lvl+0x189/0x250 [ 205.931047][ T7900] ? __pfx____ratelimit+0x10/0x10 [ 205.931066][ T7900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.931090][ T7900] ? __pfx__printk+0x10/0x10 [ 205.931110][ T7900] ? __might_fault+0xb0/0x130 [ 205.931131][ T7900] ? __might_fault+0xb0/0x130 [ 205.931156][ T7900] should_fail_ex+0x414/0x560 [ 205.931185][ T7900] _copy_from_iter+0x1db/0x16f0 [ 205.931208][ T7900] ? rcu_is_watching+0x15/0xb0 [ 205.931234][ T7900] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 205.931255][ T7900] ? __pfx__copy_from_iter+0x10/0x10 [ 205.931275][ T7900] ? __build_skb_around+0x257/0x3e0 [ 205.931301][ T7900] ? netlink_sendmsg+0x642/0xb30 [ 205.931320][ T7900] ? skb_put+0x11b/0x210 [ 205.931345][ T7900] netlink_sendmsg+0x6b2/0xb30 [ 205.931377][ T7900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.931403][ T7900] ? aa_sock_msg_perm+0x94/0x160 [ 205.931429][ T7900] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 205.931452][ T7900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.931474][ T7900] __sock_sendmsg+0x219/0x270 [ 205.931496][ T7900] ____sys_sendmsg+0x505/0x830 [ 205.931525][ T7900] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.931559][ T7900] ? import_iovec+0x74/0xa0 [ 205.931582][ T7900] ___sys_sendmsg+0x21f/0x2a0 [ 205.931608][ T7900] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.931655][ T7900] ? __fget_files+0x2a/0x420 [ 205.931691][ T7900] ? __fget_files+0x2a/0x420 [ 205.931710][ T7900] ? __fget_files+0x3a0/0x420 [ 205.931742][ T7900] __x64_sys_sendmsg+0x19b/0x260 [ 205.931768][ T7900] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 205.931802][ T7900] ? __pfx_ksys_write+0x10/0x10 [ 205.931818][ T7900] ? rcu_is_watching+0x15/0xb0 [ 205.931854][ T7900] ? do_syscall_64+0xbe/0x3b0 [ 205.931877][ T7900] do_syscall_64+0xfa/0x3b0 [ 205.931894][ T7900] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.931914][ T7900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.931930][ T7900] ? clear_bhb_loop+0x60/0xb0 [ 205.931952][ T7900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.931969][ T7900] RIP: 0033:0x7fe57038e929 [ 205.931985][ T7900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.932001][ T7900] RSP: 002b:00007fe571246038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.932020][ T7900] RAX: ffffffffffffffda RBX: 00007fe5705b5fa0 RCX: 00007fe57038e929 [ 205.932032][ T7900] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 205.932043][ T7900] RBP: 00007fe571246090 R08: 0000000000000000 R09: 0000000000000000 [ 205.932054][ T7900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.932064][ T7900] R13: 0000000000000000 R14: 00007fe5705b5fa0 R15: 00007ffc2acbf6e8 [ 205.932095][ T7900] [ 206.202956][ T7908] netlink: 22 bytes leftover after parsing attributes in process `syz.0.609'. [ 207.762178][ T7944] netlink: 'syz.1.621': attribute type 39 has an invalid length. [ 208.341347][ T7954] netlink: 22 bytes leftover after parsing attributes in process `syz.0.626'. [ 209.226256][ T7963] netlink: 'syz.4.628': attribute type 10 has an invalid length. [ 209.237342][ T7966] netlink: 'syz.0.629': attribute type 1 has an invalid length. [ 209.257621][ T7966] netlink: 'syz.0.629': attribute type 4 has an invalid length. [ 209.290552][ T7963] team0: Device ipvlan1 failed to register rx_handler [ 209.322482][ T7966] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.629'. [ 209.354116][ T7966] FAULT_INJECTION: forcing a failure. [ 209.354116][ T7966] name failslab, interval 1, probability 0, space 0, times 0 [ 209.367478][ T7966] CPU: 1 UID: 0 PID: 7966 Comm: syz.0.629 Not tainted 6.16.0-rc3-syzkaller-g212ec9229567 #0 PREEMPT(full) [ 209.367502][ T7966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 209.367512][ T7966] Call Trace: [ 209.367520][ T7966] [ 209.367527][ T7966] dump_stack_lvl+0x189/0x250 [ 209.367558][ T7966] ? __pfx____ratelimit+0x10/0x10 [ 209.367575][ T7966] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.367601][ T7966] ? __pfx__printk+0x10/0x10 [ 209.367627][ T7966] ? ref_tracker_alloc+0x318/0x460 [ 209.367654][ T7966] should_fail_ex+0x414/0x560 [ 209.367682][ T7966] should_failslab+0xa8/0x100 [ 209.367705][ T7966] kmem_cache_alloc_noprof+0x73/0x3c0 [ 209.367732][ T7966] ? skb_clone+0x212/0x3a0 [ 209.367759][ T7966] skb_clone+0x212/0x3a0 [ 209.367786][ T7966] __netlink_deliver_tap+0x404/0x850 [ 209.367821][ T7966] ? netlink_deliver_tap+0x2e/0x1b0 [ 209.367843][ T7966] netlink_deliver_tap+0x19c/0x1b0 [ 209.367865][ T7966] netlink_unicast+0x72f/0x8d0 [ 209.367896][ T7966] netlink_sendmsg+0x805/0xb30 [ 209.367927][ T7966] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.367953][ T7966] ? aa_sock_msg_perm+0x94/0x160 [ 209.367977][ T7966] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 209.368000][ T7966] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.368022][ T7966] __sock_sendmsg+0x219/0x270 [ 209.368044][ T7966] sock_write_iter+0x258/0x330 [ 209.368072][ T7966] ? __pfx_sock_write_iter+0x10/0x10 [ 209.368108][ T7966] ? bpf_lsm_file_permission+0x9/0x20 [ 209.368124][ T7966] ? security_file_permission+0x75/0x290 [ 209.368153][ T7966] vfs_write+0x54b/0xa90 [ 209.368178][ T7966] ? __pfx_sock_write_iter+0x10/0x10 [ 209.368204][ T7966] ? __pfx_vfs_write+0x10/0x10 [ 209.368234][ T7966] ? __fget_files+0x2a/0x420 [ 209.368263][ T7966] ksys_write+0x145/0x250 [ 209.368284][ T7966] ? __pfx_ksys_write+0x10/0x10 [ 209.368300][ T7966] ? rcu_is_watching+0x15/0xb0 [ 209.368331][ T7966] ? do_syscall_64+0xbe/0x3b0 [ 209.368354][ T7966] do_syscall_64+0xfa/0x3b0 [ 209.368370][ T7966] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.368386][ T7966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.368403][ T7966] ? clear_bhb_loop+0x60/0xb0 [ 209.368444][ T7966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.368482][ T7966] RIP: 0033:0x7f5d52b8e929 [ 209.368498][ T7966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.368513][ T7966] RSP: 002b:00007f5d53a16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 209.368533][ T7966] RAX: ffffffffffffffda RBX: 00007f5d52db5fa0 RCX: 00007f5d52b8e929 [ 209.368546][ T7966] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 209.368558][ T7966] RBP: 00007f5d53a16090 R08: 0000000000000000 R09: 0000000000000000 [ 209.368569][ T7966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.368580][ T7966] R13: 0000000000000000 R14: 00007f5d52db5fa0 R15: 00007fff08c4aec8 [ 209.368609][ T7966] [ 209.368634][ T7966] netlink: 'syz.0.629': attribute type 1 has an invalid length. [ 209.628328][ T7971] FAULT_INJECTION: forcing a failure. [ 209.628328][ T7971] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 209.656503][ T7966] netlink: 'syz.0.629': attribute type 4 has an invalid length. [ 209.700055][ T7966] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.629'. [ 209.771496][ T7971] CPU: 1 UID: 0 PID: 7971 Comm: syz.1.630 Not tainted 6.16.0-rc3-syzkaller-g212ec9229567 #0 PREEMPT(full) [ 209.771525][ T7971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 209.771536][ T7971] Call Trace: [ 209.771544][ T7971] [ 209.771552][ T7971] dump_stack_lvl+0x189/0x250 [ 209.771582][ T7971] ? __pfx____ratelimit+0x10/0x10 [ 209.771599][ T7971] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.771624][ T7971] ? __pfx__printk+0x10/0x10 [ 209.771646][ T7971] ? fs_reclaim_acquire+0x7d/0x100 [ 209.771678][ T7971] should_fail_ex+0x414/0x560 [ 209.771714][ T7971] prepare_alloc_pages+0x213/0x610 [ 209.771744][ T7971] __alloc_frozen_pages_noprof+0x123/0x370 [ 209.771771][ T7971] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 209.771805][ T7971] ? policy_nodemask+0x27c/0x720 [ 209.771826][ T7971] ? __lock_acquire+0xab9/0xd20 [ 209.771851][ T7971] alloc_pages_mpol+0x232/0x4a0 [ 209.771877][ T7971] vma_alloc_folio_noprof+0xe4/0x200 [ 209.771901][ T7971] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 209.771934][ T7971] folio_prealloc+0x30/0x180 [ 209.771958][ T7971] do_wp_page+0x1231/0x5800 [ 209.772000][ T7971] ? __pfx_do_wp_page+0x10/0x10 [ 209.772015][ T7971] ? do_raw_spin_lock+0x121/0x290 [ 209.772038][ T7971] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 209.772069][ T7971] __handle_mm_fault+0x1144/0x5620 [ 209.772108][ T7971] ? __pfx___handle_mm_fault+0x10/0x10 [ 209.772149][ T7971] ? find_vma+0xe7/0x160 [ 209.772167][ T7971] ? __pfx_find_vma+0x10/0x10 [ 209.772188][ T7971] handle_mm_fault+0x40a/0x8e0 [ 209.772218][ T7971] do_user_addr_fault+0x764/0x1390 [ 209.772259][ T7971] exc_page_fault+0x76/0xf0 [ 209.772282][ T7971] asm_exc_page_fault+0x26/0x30 [ 209.772297][ T7971] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 209.772317][ T7971] Code: 00 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 4f 00 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 209.772332][ T7971] RSP: 0018:ffffc900031e7698 EFLAGS: 00050206 [ 209.772348][ T7971] RAX: ffffffff84bfa801 RBX: ffff8880552e00e8 RCX: 000000000000f5d0 [ 209.772360][ T7971] RDX: 0000000000000000 RSI: ffff8880552e0ce8 RDI: 0000200000001000 [ 209.772372][ T7971] RBP: ffffc900031e7800 R08: ffff8880552f02b7 R09: 1ffff1100aa5e056 [ 209.772384][ T7971] R10: dffffc0000000000 R11: ffffed100aa5e057 R12: dffffc0000000000 [ 209.772397][ T7971] R13: 0000000000000000 R14: 00007ffffffff000 R15: 00000000000101d0 [ 209.772417][ T7971] ? _copy_to_iter+0x3f1/0x16f0 [ 209.772442][ T7971] _copy_to_iter+0x484/0x16f0 [ 209.772462][ T7971] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 209.772495][ T7971] ? __pfx__copy_to_iter+0x10/0x10 [ 209.772518][ T7971] ? remove_wait_queue+0x33/0x120 [ 209.772543][ T7971] ? tipc_wait_for_rcvmsg+0x4ef/0x630 [ 209.772573][ T7971] __skb_datagram_iter+0xf8/0x990 [ 209.772596][ T7971] ? __pfx_tipc_wait_for_rcvmsg+0x10/0x10 [ 209.772611][ T7971] ? __local_bh_enable_ip+0x12d/0x1c0 [ 209.772636][ T7971] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 209.772662][ T7971] ? __pfx_tipc_sk_anc_data_recv+0x10/0x10 [ 209.772677][ T7971] ? __local_bh_enable_ip+0x12d/0x1c0 [ 209.772711][ T7971] skb_copy_datagram_iter+0xc5/0x230 [ 209.772738][ T7971] tipc_recvstream+0x72d/0xe70 [ 209.772782][ T7971] ? __pfx_tipc_recvstream+0x10/0x10 [ 209.772806][ T7971] sock_recvmsg+0x229/0x270 [ 209.772829][ T7971] ____sys_recvmsg+0x1c9/0x460 [ 209.772862][ T7971] ? __pfx_____sys_recvmsg+0x10/0x10 [ 209.772900][ T7971] ? import_iovec+0x74/0xa0 [ 209.772923][ T7971] ___sys_recvmsg+0x1b5/0x510 [ 209.772953][ T7971] ? __pfx____sys_recvmsg+0x10/0x10 [ 209.773003][ T7971] ? __fget_files+0x3a0/0x420 [ 209.773036][ T7971] __x64_sys_recvmsg+0x198/0x260 [ 209.773062][ T7971] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 209.773096][ T7971] ? __pfx_ksys_write+0x10/0x10 [ 209.773111][ T7971] ? rcu_is_watching+0x15/0xb0 [ 209.773143][ T7971] ? do_syscall_64+0xbe/0x3b0 [ 209.773165][ T7971] do_syscall_64+0xfa/0x3b0 [ 209.773182][ T7971] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.773198][ T7971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.773215][ T7971] ? clear_bhb_loop+0x60/0xb0 [ 209.773235][ T7971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.773250][ T7971] RIP: 0033:0x7fad87b8e929 [ 209.773266][ T7971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.773280][ T7971] RSP: 002b:00007fad88994038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 209.773297][ T7971] RAX: ffffffffffffffda RBX: 00007fad87db5fa0 RCX: 00007fad87b8e929 [ 209.773310][ T7971] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000004 [ 209.773320][ T7971] RBP: 00007fad88994090 R08: 0000000000000000 R09: 0000000000000000 [ 209.773330][ T7971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.773340][ T7971] R13: 0000000000000000 R14: 00007fad87db5fa0 R15: 00007fff4a5b7568 [ 209.773369][ T7971] [ 210.301007][ T7980] FAULT_INJECTION: forcing a failure. [ 210.301007][ T7980] name failslab, interval 1, probability 0, space 0, times 0 [ 210.316254][ T7980] CPU: 1 UID: 0 PID: 7980 Comm: syz.2.634 Not tainted 6.16.0-rc3-syzkaller-g212ec9229567 #0 PREEMPT(full) [ 210.316277][ T7980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 210.316288][ T7980] Call Trace: [ 210.316294][ T7980] [ 210.316302][ T7980] dump_stack_lvl+0x189/0x250 [ 210.316329][ T7980] ? __pfx____ratelimit+0x10/0x10 [ 210.316344][ T7980] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.316369][ T7980] ? __pfx__printk+0x10/0x10 [ 210.316388][ T7980] ? __pfx___might_resched+0x10/0x10 [ 210.316409][ T7980] ? fs_reclaim_acquire+0x7d/0x100 [ 210.316434][ T7980] should_fail_ex+0x414/0x560 [ 210.316460][ T7980] should_failslab+0xa8/0x100 [ 210.316481][ T7980] kmem_cache_alloc_noprof+0x73/0x3c0 [ 210.316498][ T7980] ? security_file_alloc+0x34/0x330 [ 210.316519][ T7980] security_file_alloc+0x34/0x330 [ 210.316540][ T7980] init_file+0x93/0x2f0 [ 210.316564][ T7980] alloc_empty_file+0x6e/0x1d0 [ 210.316586][ T7980] path_openat+0x107/0x3830 [ 210.316601][ T7980] ? arch_stack_walk+0xfc/0x150 [ 210.316642][ T7980] ? kasan_save_track+0x4f/0x80 [ 210.316657][ T7980] ? kasan_save_track+0x3e/0x80 [ 210.316671][ T7980] ? __kasan_slab_alloc+0x6c/0x80 [ 210.316688][ T7980] ? getname_flags+0xb8/0x540 [ 210.316718][ T7980] ? __pfx_path_openat+0x10/0x10 [ 210.316732][ T7980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.316769][ T7980] do_filp_open+0x1fa/0x410 [ 210.316783][ T7980] ? __lock_acquire+0xab9/0xd20 [ 210.316807][ T7980] ? __pfx_do_filp_open+0x10/0x10 [ 210.316844][ T7980] ? _raw_spin_unlock+0x28/0x50 [ 210.316867][ T7980] ? alloc_fd+0x64c/0x6c0 [ 210.316896][ T7980] do_sys_openat2+0x121/0x1c0 [ 210.316915][ T7980] ? atomic_notifier_call_chain+0x26/0x180 [ 210.316942][ T7980] ? __pfx_do_sys_openat2+0x10/0x10 [ 210.316961][ T7980] ? perf_trace_preemptirq_template+0xa3/0x340 [ 210.316984][ T7980] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 210.317006][ T7980] ? __pfx_notify_die+0x10/0x10 [ 210.317026][ T7980] __x64_sys_openat+0x138/0x170 [ 210.317054][ T7980] do_syscall_64+0xfa/0x3b0 [ 210.317071][ T7980] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.317086][ T7980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.317103][ T7980] ? clear_bhb_loop+0x60/0xb0 [ 210.317123][ T7980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.317139][ T7980] RIP: 0033:0x7f08a6f8d290 [ 210.317165][ T7980] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 210.317180][ T7980] RSP: 002b:00007f08a7df0f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 210.317199][ T7980] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f08a6f8d290 [ 210.317212][ T7980] RDX: 0000000000000002 RSI: 00007f08a7df0fa0 RDI: 00000000ffffff9c [ 210.317223][ T7980] RBP: 00007f08a7df0fa0 R08: 0000000000000000 R09: 0000000000000000 [ 210.317234][ T7980] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 210.317244][ T7980] R13: 0000000000000000 R14: 00007f08a71b5fa0 R15: 00007ffded9b75b8 [ 210.317274][ T7980] [ 210.795694][ T7990] netlink: 'syz.2.636': attribute type 11 has an invalid length. [ 210.803720][ T7990] netlink: 140 bytes leftover after parsing attributes in process `syz.2.636'. [ 211.015091][ T7993] netlink: 22 bytes leftover after parsing attributes in process `syz.0.640'. [ 214.593019][ T8074] FAULT_INJECTION: forcing a failure. [ 214.593019][ T8074] name failslab, interval 1, probability 0, space 0, times 0 [ 214.607587][ T8074] CPU: 1 UID: 0 PID: 8074 Comm: syz.4.671 Not tainted 6.16.0-rc3-syzkaller-g212ec9229567 #0 PREEMPT(full) [ 214.607614][ T8074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 214.607624][ T8074] Call Trace: [ 214.607634][ T8074] [ 214.607643][ T8074] dump_stack_lvl+0x189/0x250 [ 214.607676][ T8074] ? __pfx____ratelimit+0x10/0x10 [ 214.607697][ T8074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.607725][ T8074] ? __pfx__printk+0x10/0x10 [ 214.607765][ T8074] ? __pfx___might_resched+0x10/0x10 [ 214.607805][ T8074] should_fail_ex+0x414/0x560 [ 214.607846][ T8074] should_failslab+0xa8/0x100 [ 214.607901][ T8074] __kmalloc_noprof+0xcb/0x4f0 [ 214.607923][ T8074] ? sk_prot_alloc+0xe7/0x220 [ 214.607967][ T8074] sk_prot_alloc+0xe7/0x220 [ 214.607988][ T8074] ? sk_alloc+0x24/0x370 [ 214.608019][ T8074] sk_alloc+0x3a/0x370 [ 214.608041][ T8074] ? bpf_ctx_init+0x167/0x1d0 [ 214.608074][ T8074] bpf_prog_test_run_skb+0x2ed/0x1560 [ 214.608096][ T8074] ? __fget_files+0x2a/0x420 [ 214.608157][ T8074] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 214.608184][ T8074] bpf_prog_test_run+0x2c4/0x340 [ 214.608222][ T8074] __sys_bpf+0x4a4/0x860 [ 214.608254][ T8074] ? __pfx___sys_bpf+0x10/0x10 [ 214.608322][ T8074] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 214.608350][ T8074] ? __pfx_ksys_write+0x10/0x10 [ 214.608367][ T8074] ? rcu_is_watching+0x15/0xb0 [ 214.608414][ T8074] __x64_sys_bpf+0x7c/0x90 [ 214.608441][ T8074] do_syscall_64+0xfa/0x3b0 [ 214.608459][ T8074] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.608479][ T8074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.608497][ T8074] ? clear_bhb_loop+0x60/0xb0 [ 214.608527][ T8074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.608544][ T8074] RIP: 0033:0x7f56e2b8e929 [ 214.608563][ T8074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.608578][ T8074] RSP: 002b:00007f56e39f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 214.608597][ T8074] RAX: ffffffffffffffda RBX: 00007f56e2db5fa0 RCX: 00007f56e2b8e929 [ 214.608611][ T8074] RDX: 0000000000000050 RSI: 0000200000000780 RDI: 000000000000000a [ 214.608622][ T8074] RBP: 00007f56e39f0090 R08: 0000000000000000 R09: 0000000000000000 [ 214.608633][ T8074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.608643][ T8074] R13: 0000000000000000 R14: 00007f56e2db5fa0 R15: 00007fff0c4ffd08 [ 214.608702][ T8074] [ 214.977040][ T8077] FAULT_INJECTION: forcing a failure. [ 214.977040][ T8077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.022966][ T8077] CPU: 0 UID: 0 PID: 8077 Comm: syz.2.672 Not tainted 6.16.0-rc3-syzkaller-g212ec9229567 #0 PREEMPT(full) [ 215.022994][ T8077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 215.023005][ T8077] Call Trace: [ 215.023016][ T8077] [ 215.023027][ T8077] dump_stack_lvl+0x189/0x250 [ 215.023065][ T8077] ? __pfx____ratelimit+0x10/0x10 [ 215.023092][ T8077] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.023137][ T8077] ? __pfx__printk+0x10/0x10 [ 215.023168][ T8077] ? __might_fault+0xb0/0x130 [ 215.023207][ T8077] ? __might_fault+0xb0/0x130 [ 215.023261][ T8077] should_fail_ex+0x414/0x560 [ 215.023317][ T8077] _copy_from_user+0x2d/0xb0 [ 215.023349][ T8077] vti6_siocdevprivate+0x1af/0x700 [ 215.023396][ T8077] ? __pfx_vti6_siocdevprivate+0x10/0x10 [ 215.023415][ T8077] ? rcu_is_watching+0x15/0xb0 [ 215.023562][ T8077] ? netdev_name_node_lookup+0xdf/0x120 [ 215.023616][ T8077] dev_ifsioc+0xb54/0xf00 [ 215.023686][ T8077] dev_ioctl+0x84c/0x1150 [ 215.023735][ T8077] sock_ioctl+0x719/0x790 [ 215.023782][ T8077] ? __pfx_sock_ioctl+0x10/0x10 [ 215.023827][ T8077] ? __fget_files+0x3a0/0x420 [ 215.023851][ T8077] ? __fget_files+0x2a/0x420 [ 215.023896][ T8077] ? bpf_lsm_file_ioctl+0x9/0x20 [ 215.023919][ T8077] ? __pfx_sock_ioctl+0x10/0x10 [ 215.023953][ T8077] __se_sys_ioctl+0xf9/0x170 [ 215.023993][ T8077] do_syscall_64+0xfa/0x3b0 [ 215.024011][ T8077] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.024033][ T8077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.024054][ T8077] ? clear_bhb_loop+0x60/0xb0 [ 215.024093][ T8077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.024117][ T8077] RIP: 0033:0x7f08a6f8e929 [ 215.024146][ T8077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.024161][ T8077] RSP: 002b:00007f08a7df1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 215.024181][ T8077] RAX: ffffffffffffffda RBX: 00007f08a71b5fa0 RCX: 00007f08a6f8e929 [ 215.024194][ T8077] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000006 [ 215.024206][ T8077] RBP: 00007f08a7df1090 R08: 0000000000000000 R09: 0000000000000000 [ 215.024217][ T8077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.024227][ T8077] R13: 0000000000000000 R14: 00007f08a71b5fa0 R15: 00007ffded9b75b8 [ 215.024320][ T8077] [ 215.764860][ T8096] tun0: tun_chr_ioctl cmd 1074025677 [ 215.770381][ T8096] tun0: linktype set to 864 [ 215.834520][ T8106] FAULT_INJECTION: forcing a failure. [ 215.834520][ T8106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.857658][ T8106] CPU: 0 UID: 0 PID: 8106 Comm: syz.0.682 Not tainted 6.16.0-rc3-syzkaller-g212ec9229567 #0 PREEMPT(full) [ 215.857684][ T8106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 215.857695][ T8106] Call Trace: [ 215.857703][ T8106] [ 215.857711][ T8106] dump_stack_lvl+0x189/0x250 [ 215.857742][ T8106] ? __pfx____ratelimit+0x10/0x10 [ 215.857760][ T8106] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.857786][ T8106] ? __pfx__printk+0x10/0x10 [ 215.857805][ T8106] ? __might_fault+0xb0/0x130 [ 215.857828][ T8106] ? __might_fault+0xb0/0x130 [ 215.857853][ T8106] should_fail_ex+0x414/0x560 [ 215.857883][ T8106] _copy_from_iter+0x1db/0x16f0 [ 215.857907][ T8106] ? rcu_is_watching+0x15/0xb0 [ 215.857934][ T8106] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 215.857956][ T8106] ? __pfx__copy_from_iter+0x10/0x10 [ 215.857977][ T8106] ? __build_skb_around+0x257/0x3e0 [ 215.858003][ T8106] ? netlink_sendmsg+0x642/0xb30 [ 215.858023][ T8106] ? skb_put+0x11b/0x210 [ 215.858049][ T8106] netlink_sendmsg+0x6b2/0xb30 [ 215.858090][ T8106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.858117][ T8106] ? aa_sock_msg_perm+0x94/0x160 [ 215.858143][ T8106] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 215.858165][ T8106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.858189][ T8106] __sock_sendmsg+0x219/0x270 [ 215.858212][ T8106] ____sys_sendmsg+0x505/0x830 [ 215.858243][ T8106] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.858290][ T8106] ? import_iovec+0x74/0xa0 [ 215.858314][ T8106] ___sys_sendmsg+0x21f/0x2a0 [ 215.858341][ T8106] ? __pfx____sys_sendmsg+0x10/0x10 [ 215.858392][ T8106] ? __fget_files+0x2a/0x420 [ 215.858429][ T8106] ? __fget_files+0x2a/0x420 [ 215.858448][ T8106] ? __fget_files+0x3a0/0x420 [ 215.858483][ T8106] __x64_sys_sendmsg+0x19b/0x260 [ 215.858510][ T8106] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 215.858545][ T8106] ? __pfx_ksys_write+0x10/0x10 [ 215.858562][ T8106] ? rcu_is_watching+0x15/0xb0 [ 215.858593][ T8106] ? do_syscall_64+0xbe/0x3b0 [ 215.858616][ T8106] do_syscall_64+0xfa/0x3b0 [ 215.858633][ T8106] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.858650][ T8106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.858667][ T8106] ? clear_bhb_loop+0x60/0xb0 [ 215.858690][ T8106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.858707][ T8106] RIP: 0033:0x7f5d52b8e929 [ 215.858723][ T8106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.858738][ T8106] RSP: 002b:00007f5d539f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.858758][ T8106] RAX: ffffffffffffffda RBX: 00007f5d52db6080 RCX: 00007f5d52b8e929 [ 215.858771][ T8106] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 215.858782][ T8106] RBP: 00007f5d539f5090 R08: 0000000000000000 R09: 0000000000000000 [ 215.858792][ T8106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.858802][ T8106] R13: 0000000000000000 R14: 00007f5d52db6080 R15: 00007fff08c4aec8 [ 215.858834][ T8106] [ 216.359736][ T8116] netlink: 60 bytes leftover after parsing attributes in process `syz.2.684'. [ 216.395781][ T8112] netlink: 60 bytes leftover after parsing attributes in process `syz.2.684'. [ 216.512184][ T8116] netlink: 60 bytes leftover after parsing attributes in process `syz.2.684'. [ 216.641659][ T8125] netlink: 'syz.2.689': attribute type 33 has an invalid length. [ 216.651256][ T8125] netlink: 'syz.2.689': attribute type 23 has an invalid length. [ 216.661226][ T8125] netlink: 'syz.2.689': attribute type 26 has an invalid length. [ 216.671203][ T8125] netlink: 'syz.2.689': attribute type 28 has an invalid length. [ 216.686778][ T8125] netlink: 'syz.2.689': attribute type 29 has an invalid length. [ 216.702526][ T8125] netlink: 'syz.2.689': attribute type 31 has an invalid length. [ 216.757239][ T51] Bluetooth: hci1: Malformed LE Event: 0x0d [ 218.559888][ T8147] FAULT_INJECTION: forcing a failure. [ 218.559888][ T8147] name failslab, interval 1, probability 0, space 0, times 0 [ 218.590929][ T8147] CPU: 0 UID: 0 PID: 8147 Comm: syz.0.695 Not tainted 6.16.0-rc3-syzkaller-g212ec9229567 #0 PREEMPT(full) [ 218.590957][ T8147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 218.590969][ T8147] Call Trace: [ 218.590978][ T8147] [ 218.590987][ T8147] dump_stack_lvl+0x189/0x250 [ 218.591018][ T8147] ? __pfx____ratelimit+0x10/0x10 [ 218.591038][ T8147] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.591064][ T8147] ? __pfx__printk+0x10/0x10 [ 218.591089][ T8147] ? __timer_delete+0x346/0x390 [ 218.591122][ T8147] should_fail_ex+0x414/0x560 [ 218.591155][ T8147] should_failslab+0xa8/0x100 [ 218.591185][ T8147] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 218.591207][ T8147] ? __alloc_skb+0x112/0x2d0 [ 218.591234][ T8147] __alloc_skb+0x112/0x2d0 [ 218.591262][ T8147] __ipv6_ifa_notify+0x1e8/0xac0 [ 218.591301][ T8147] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 218.591339][ T8147] ? __cancel_work+0x254/0x2e0 [ 218.591362][ T8147] ? __cancel_work+0x25e/0x2e0 [ 218.591391][ T8147] ? __pfx___cancel_work+0x10/0x10 [ 218.591412][ T8147] ? ipv6_del_addr+0x60c/0x8f0 [ 218.591443][ T8147] ipv6_del_addr+0x6b1/0x8f0 [ 218.591477][ T8147] inet6_addr_del+0x473/0x600 [ 218.591514][ T8147] addrconf_del_ifaddr+0x113/0x160 [ 218.591531][ T8147] ? __pfx_addrconf_del_ifaddr+0x10/0x10 [ 218.591550][ T8147] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 218.591577][ T8147] inet6_ioctl+0x10f/0x280 [ 218.591597][ T8147] ? __pfx_inet6_ioctl+0x10/0x10 [ 218.591614][ T8147] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 218.591637][ T8147] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 218.591657][ T8147] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 218.591682][ T8147] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 218.591721][ T8147] sock_do_ioctl+0xd9/0x300 [ 218.591744][ T8147] ? __pfx_sock_do_ioctl+0x10/0x10 [ 218.591827][ T8147] sock_ioctl+0x576/0x790 [ 218.591858][ T8147] ? __pfx_sock_ioctl+0x10/0x10 [ 218.591885][ T8147] ? __fget_files+0x2a/0x420 [ 218.591906][ T8147] ? __fget_files+0x3a0/0x420 [ 218.591925][ T8147] ? __fget_files+0x2a/0x420 [ 218.591952][ T8147] ? bpf_lsm_file_ioctl+0x9/0x20 [ 218.591971][ T8147] ? __pfx_sock_ioctl+0x10/0x10 [ 218.591996][ T8147] __se_sys_ioctl+0xf9/0x170 [ 218.592019][ T8147] do_syscall_64+0xfa/0x3b0 [ 218.592041][ T8147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.592057][ T8147] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 218.592075][ T8147] ? clear_bhb_loop+0x60/0xb0 [ 218.592099][ T8147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.592117][ T8147] RIP: 0033:0x7f5d52b8e929 [ 218.592134][ T8147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.592150][ T8147] RSP: 002b:00007f5d53a16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 218.592169][ T8147] RAX: ffffffffffffffda RBX: 00007f5d52db5fa0 RCX: 00007f5d52b8e929 [ 218.592182][ T8147] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 000000000000000d [ 218.592194][ T8147] RBP: 00007f5d53a16090 R08: 0000000000000000 R09: 0000000000000000 [ 218.592205][ T8147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.592216][ T8147] R13: 0000000000000000 R14: 00007f5d52db5fa0 R15: 00007fff08c4aec8 [ 218.592254][ T8147] [ 219.264818][ T8145] syzkaller0: entered promiscuous mode [ 219.270361][ T8145] syzkaller0: entered allmulticast mode [ 222.058056][ T8213] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 222.064740][ T8213] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 222.110883][ T8213] netlink: 'syz.0.719': attribute type 2 has an invalid length. [ 222.120214][ T8213] netlink: 'syz.0.719': attribute type 8 has an invalid length. [ 222.150182][ T8213] netlink: 132 bytes leftover after parsing attributes in process `syz.0.719'. [ 222.191221][ T8224] netlink: 'syz.2.722': attribute type 10 has an invalid length. [ 222.214509][ T8224] team0: Device ipvlan1 failed to register rx_handler [ 223.061038][ T8244] netlink: 60 bytes leftover after parsing attributes in process `syz.0.727'. [ 223.422757][ T8262] FAULT_INJECTION: forcing a failure. [ 223.422757][ T8262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.426152][ T8257] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 223.442564][ T8257] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 223.480430][ T8265] netlink: 'syz.1.734': attribute type 2 has an invalid length. [ 223.490472][ T8262] CPU: 1 UID: 0 PID: 8262 Comm: syz.3.736 Not tainted 6.16.0-rc3-syzkaller-g212ec9229567 #0 PREEMPT(full) [ 223.490498][ T8262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 223.490508][ T8262] Call Trace: [ 223.490515][ T8262] [ 223.490524][ T8262] dump_stack_lvl+0x189/0x250 [ 223.490554][ T8262] ? __pfx____ratelimit+0x10/0x10 [ 223.490571][ T8262] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.490596][ T8262] ? __pfx__printk+0x10/0x10 [ 223.490615][ T8262] ? __might_fault+0xb0/0x130 [ 223.490645][ T8262] should_fail_ex+0x414/0x560 [ 223.490673][ T8262] _copy_from_iter+0x1db/0x16f0 [ 223.490701][ T8262] ? __pfx__copy_from_iter+0x10/0x10 [ 223.490719][ T8262] ? __build_skb_around+0x257/0x3e0 [ 223.490743][ T8262] ? netlink_sendmsg+0x642/0xb30 [ 223.490763][ T8262] ? skb_put+0x11b/0x210 [ 223.490786][ T8262] netlink_sendmsg+0x6b2/0xb30 [ 223.490815][ T8262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.490854][ T8262] ? aa_sock_msg_perm+0x94/0x160 [ 223.490878][ T8262] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 223.490900][ T8262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.490922][ T8262] __sock_sendmsg+0x219/0x270 [ 223.490940][ T8262] ____sys_sendmsg+0x505/0x830 [ 223.490968][ T8262] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.490996][ T8262] ? import_iovec+0x74/0xa0 [ 223.491018][ T8262] ___sys_sendmsg+0x21f/0x2a0 [ 223.491042][ T8262] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.491099][ T8262] ? __fget_files+0x2a/0x420 [ 223.491118][ T8262] ? __fget_files+0x3a0/0x420 [ 223.491148][ T8262] __x64_sys_sendmsg+0x19b/0x260 [ 223.491172][ T8262] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 223.491202][ T8262] ? __pfx_ksys_write+0x10/0x10 [ 223.491218][ T8262] ? rcu_is_watching+0x15/0xb0 [ 223.491254][ T8262] ? do_syscall_64+0xbe/0x3b0 [ 223.491274][ T8262] do_syscall_64+0xfa/0x3b0 [ 223.491289][ T8262] ? lockdep_hardirqs_on+0x9c/0x150 [ 223.491305][ T8262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.491321][ T8262] ? clear_bhb_loop+0x60/0xb0 [ 223.491340][ T8262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.491355][ T8262] RIP: 0033:0x7fe57038e929 [ 223.491370][ T8262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.491385][ T8262] RSP: 002b:00007fe571246038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.491405][ T8262] RAX: ffffffffffffffda RBX: 00007fe5705b5fa0 RCX: 00007fe57038e929 [ 223.491418][ T8262] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 223.491429][ T8262] RBP: 00007fe571246090 R08: 0000000000000000 R09: 0000000000000000 [ 223.491440][ T8262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.491449][ T8262] R13: 0000000000000000 R14: 00007fe5705b5fa0 R15: 00007ffc2acbf6e8 [ 223.491474][ T8262] [ 223.795509][ T8265] netlink: 'syz.1.734': attribute type 8 has an invalid length. [ 223.829609][ T8265] netlink: 132 bytes leftover after parsing attributes in process `syz.1.734'. [ 224.030544][ T8272] netlink: 'syz.4.740': attribute type 10 has an invalid length. [ 224.111568][ T8272] batman_adv: batadv0: Adding interface: netdevsim0 [ 224.118485][ T8272] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.119953][ T8279] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 224.144201][ T8272] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 224.273756][ T8282] netlink: 'syz.2.741': attribute type 39 has an invalid length. [ 224.753204][ T8291] netlink: 'syz.1.743': attribute type 39 has an invalid length. [ 224.877681][ T8305] FAULT_INJECTION: forcing a failure. [ 224.877681][ T8305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.905594][ T8305] CPU: 0 UID: 0 PID: 8305 Comm: syz.3.748 Not tainted 6.16.0-rc3-syzkaller-g212ec9229567 #0 PREEMPT(full) [ 224.905623][ T8305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 224.905635][ T8305] Call Trace: [ 224.905642][ T8305] [ 224.905650][ T8305] dump_stack_lvl+0x189/0x250 [ 224.905682][ T8305] ? __pfx____ratelimit+0x10/0x10 [ 224.905702][ T8305] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.905731][ T8305] ? __pfx__printk+0x10/0x10 [ 224.905752][ T8305] ? __might_fault+0xb0/0x130 [ 224.905789][ T8305] should_fail_ex+0x414/0x560 [ 224.905822][ T8305] _copy_from_user+0x2d/0xb0 [ 224.905841][ T8305] ___sys_sendmsg+0x158/0x2a0 [ 224.905869][ T8305] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.905947][ T8305] ? __fget_files+0x2a/0x420 [ 224.905968][ T8305] ? __fget_files+0x3a0/0x420 [ 224.906005][ T8305] __x64_sys_sendmsg+0x19b/0x260 [ 224.906033][ T8305] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 224.906071][ T8305] ? __pfx_ksys_write+0x10/0x10 [ 224.906095][ T8305] ? rcu_is_watching+0x15/0xb0 [ 224.906128][ T8305] ? do_syscall_64+0xbe/0x3b0 [ 224.906154][ T8305] do_syscall_64+0xfa/0x3b0 [ 224.906170][ T8305] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.906188][ T8305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.906205][ T8305] ? clear_bhb_loop+0x60/0xb0 [ 224.906229][ T8305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.906246][ T8305] RIP: 0033:0x7fe57038e929 [ 224.906262][ T8305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.906278][ T8305] RSP: 002b:00007fe571246038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.906298][ T8305] RAX: ffffffffffffffda RBX: 00007fe5705b5fa0 RCX: 00007fe57038e929 [ 224.906311][ T8305] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 224.906322][ T8305] RBP: 00007fe571246090 R08: 0000000000000000 R09: 0000000000000000 [ 224.906333][ T8305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.906344][ T8305] R13: 0000000000000000 R14: 00007fe5705b5fa0 R15: 00007ffc2acbf6e8 [ 224.906381][ T8305] [ 224.908991][ T8307] netlink: 22 bytes leftover after parsing attributes in process `syz.0.749'. [ 225.495892][ T8322] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 225.502597][ T8322] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 225.513818][ T8322] netlink: 'syz.1.753': attribute type 2 has an invalid length. [ 225.521641][ T8322] netlink: 'syz.1.753': attribute type 8 has an invalid length. [ 225.540662][ T8322] netlink: 132 bytes leftover after parsing attributes in process `syz.1.753'. [ 227.335224][ T8360] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.766'. [ 227.493269][ T8362] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 227.500505][ T8362] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 227.520655][ T8362] validate_nla: 1 callbacks suppressed [ 227.520677][ T8362] netlink: 'syz.1.767': attribute type 2 has an invalid length. [ 227.548147][ T8362] netlink: 'syz.1.767': attribute type 8 has an invalid length. [ 227.589609][ T8362] netlink: 132 bytes leftover after parsing attributes in process `syz.1.767'. [ 228.579678][ T8396] netlink: 'syz.0.779': attribute type 39 has an invalid length. [ 228.751450][ T8400] netlink: 'syz.2.781': attribute type 10 has an invalid length. [ 228.761567][ T8400] veth0_vlan: left promiscuous mode [ 228.772015][ T8400] veth0_vlan: entered promiscuous mode [ 228.789332][ T8400] team0: Device veth0_vlan failed to register rx_handler [ 229.502432][ T8416] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 229.509157][ T8416] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 229.534074][ T8416] netlink: 'syz.0.786': attribute type 2 has an invalid length. [ 229.541902][ T8416] netlink: 'syz.0.786': attribute type 8 has an invalid length. [ 229.602883][ T8416] netlink: 132 bytes leftover after parsing attributes in process `syz.0.786'. [ 230.034779][ T8428] tun0: tun_chr_ioctl cmd 1074025677 [ 230.052053][ T8428] tun0: linktype set to 864 [ 230.766836][ T8441] FAULT_INJECTION: forcing a failure. [ 230.766836][ T8441] name failslab, interval 1, probability 0, space 0, times 0 [ 230.802866][ T8441] CPU: 1 UID: 0 PID: 8441 Comm: syz.3.794 Not tainted 6.16.0-rc3-syzkaller-g212ec9229567 #0 PREEMPT(full) [ 230.802894][ T8441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 230.802904][ T8441] Call Trace: [ 230.802914][ T8441] [ 230.802924][ T8441] dump_stack_lvl+0x189/0x250 [ 230.802959][ T8441] ? __pfx____ratelimit+0x10/0x10 [ 230.802982][ T8441] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.803011][ T8441] ? __pfx__printk+0x10/0x10 [ 230.803054][ T8441] ? __pfx___might_resched+0x10/0x10 [ 230.803101][ T8441] should_fail_ex+0x414/0x560 [ 230.803146][ T8441] should_failslab+0xa8/0x100 [ 230.803176][ T8441] __kmalloc_noprof+0xcb/0x4f0 [ 230.803194][ T8441] ? kfree+0x4d/0x440 [ 230.803209][ T8441] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 230.803252][ T8441] tomoyo_realpath_from_path+0xe3/0x5d0 [ 230.803312][ T8441] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 230.803339][ T8441] tomoyo_path_number_perm+0x1e8/0x5a0 [ 230.803375][ T8441] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 230.803402][ T8441] ? perf_trace_run_bpf_submit+0xee/0x170 [ 230.803544][ T8441] ? __fget_files+0x2a/0x420 [ 230.803578][ T8441] ? __fget_files+0x2a/0x420 [ 230.803599][ T8441] ? __fget_files+0x3a0/0x420 [ 230.803621][ T8441] ? __fget_files+0x2a/0x420 [ 230.803657][ T8441] security_file_ioctl+0xcb/0x2d0 [ 230.803690][ T8441] __se_sys_ioctl+0x47/0x170 [ 230.803721][ T8441] do_syscall_64+0xfa/0x3b0 [ 230.803739][ T8441] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.803759][ T8441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.803778][ T8441] ? clear_bhb_loop+0x60/0xb0 [ 230.803808][ T8441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.803826][ T8441] RIP: 0033:0x7fe57038e929 [ 230.803846][ T8441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.803860][ T8441] RSP: 002b:00007fe571246038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.803880][ T8441] RAX: ffffffffffffffda RBX: 00007fe5705b5fa0 RCX: 00007fe57038e929 [ 230.803892][ T8441] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 000000000000000e [ 230.803903][ T8441] RBP: 00007fe571246090 R08: 0000000000000000 R09: 0000000000000000 [ 230.803914][ T8441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.803925][ T8441] R13: 0000000000000000 R14: 00007fe5705b5fa0 R15: 00007ffc2acbf6e8 [ 230.803988][ T8441] [ 230.803996][ T8441] ERROR: Out of memory at tomoyo_realpath_from_path. [ 231.329464][ T8453] netlink: 'syz.4.797': attribute type 2 has an invalid length. [ 231.378319][ T8453] netlink: 'syz.4.797': attribute type 8 has an invalid length. [ 231.404664][ T8453] netlink: 132 bytes leftover after parsing attributes in process `syz.4.797'. [ 234.546234][ T1001] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 234.788432][ T8476] netlink: 'syz.4.803': attribute type 10 has an invalid length. [ 234.817550][ T8476] team0: Port device geneve1 added [ 234.994160][ T8480] netlink: 'syz.0.805': attribute type 10 has an invalid length. [ 235.189353][ T8480] team0: Port device geneve1 added [ 235.581710][ T8482] IPv6: NLM_F_REPLACE set, but no existing node found! [ 237.465632][ T8511] tun0: tun_chr_ioctl cmd 1074025677 [ 237.485288][ T8511] tun0: linktype set to 864 [ 243.742600][ T8513] team0: Port device team_slave_0 removed [ 243.749958][ T8513] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 247.158460][ T8545] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 247.165233][ T8545] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 247.231282][ T8553] netlink: 'syz.3.824': attribute type 2 has an invalid length. [ 247.241954][ T8548] netlink: 'syz.4.823': attribute type 10 has an invalid length. [ 247.275346][ T8553] netlink: 'syz.3.824': attribute type 8 has an invalid length. [ 247.281169][ T8548] batman_adv: batadv0: Removing interface: netdevsim0 [ 247.346806][ T8553] netlink: 132 bytes leftover after parsing attributes in process `syz.3.824'. [ 247.385553][ T8548] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 247.434833][ T8557] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 248.240671][ T8561] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 248.247347][ T8561] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 248.275253][ T8561] netlink: 'syz.3.829': attribute type 2 has an invalid length. [ 248.288350][ T8561] netlink: 'syz.3.829': attribute type 8 has an invalid length. [ 248.301057][ T8561] netlink: 132 bytes leftover after parsing attributes in process `syz.3.829'. [ 248.869580][ T8589] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 248.876328][ T8589] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 248.890654][ T8585] netlink: 'syz.4.837': attribute type 2 has an invalid length. [ 248.898437][ T8585] netlink: 'syz.4.837': attribute type 8 has an invalid length. [ 248.909949][ T8587] netlink: 'syz.2.838': attribute type 21 has an invalid length. [ 248.920869][ T8585] netlink: 132 bytes leftover after parsing attributes in process `syz.4.837'. [ 249.019770][ T8592] tun0: tun_chr_ioctl cmd 1074025677 [ 249.035143][ T8592] tun0: linktype set to 864 [ 251.310097][ T8604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.317801][ T8604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.326684][ T8604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.337694][ T8604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.363447][ T8618] netlink: 60 bytes leftover after parsing attributes in process `syz.0.846'. [ 251.488731][ T8634] netlink: 'syz.4.853': attribute type 10 has an invalid length. [ 251.503696][ T8634] bond0: (slave netdevsim0): Releasing backup interface [ 251.527140][ T8634] batman_adv: batadv0: Adding interface: netdevsim0 [ 251.537051][ T8634] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.573338][ T8634] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 251.588124][ T8638] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 251.824733][ T8649] netlink: 60 bytes leftover after parsing attributes in process `syz.3.856'. [ 251.838189][ T8647] netlink: 'syz.2.858': attribute type 10 has an invalid length. [ 251.865358][ T8642] netlink: 60 bytes leftover after parsing attributes in process `syz.3.856'. [ 251.875366][ T8637] tun0: tun_chr_ioctl cmd 1074025677 [ 251.880827][ T8637] tun0: linktype set to 864 [ 251.899258][ T8647] batman_adv: batadv0: Adding interface: netdevsim0 [ 251.906168][ T8647] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.941811][ T8650] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 251.948532][ T8647] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 251.948607][ T8650] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 251.975821][ T8653] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 251.998105][ T8649] netlink: 60 bytes leftover after parsing attributes in process `syz.3.856'. [ 252.011095][ T8648] netlink: 132 bytes leftover after parsing attributes in process `syz.4.855'. [ 254.270409][ T8675] tun0: tun_chr_ioctl cmd 1074025677 [ 254.277384][ T8675] tun0: linktype set to 864 [ 254.310282][ T8679] netlink: 152 bytes leftover after parsing attributes in process `syz.3.865'. [ 254.486933][ T8688] netlink: 'syz.4.866': attribute type 11 has an invalid length. [ 254.541887][ T8688] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.866'. [ 254.572575][ T8691] validate_nla: 2 callbacks suppressed [ 254.572608][ T8691] netlink: 'syz.2.868': attribute type 10 has an invalid length. [ 254.583204][ T8693] netlink: 'syz.4.866': attribute type 10 has an invalid length. [ 254.599305][ T8691] netlink: 168 bytes leftover after parsing attributes in process `syz.2.868'. [ 254.656153][ T8697] netlink: 'syz.3.870': attribute type 10 has an invalid length. [ 254.664250][ T8699] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.871'. [ 254.681830][ T8693] wlan1: mtu less than device minimum [ 254.690567][ T8693] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 254.697817][ T8699] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 254.707880][ T8699] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 254.724968][ T8686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.739358][ T8704] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 255.030265][ T8717] netlink: 'syz.4.876': attribute type 21 has an invalid length. [ 255.038674][ T8716] netlink: 'syz.2.877': attribute type 10 has an invalid length. [ 255.048086][ T8717] netlink: 128 bytes leftover after parsing attributes in process `syz.4.876'. [ 255.080104][ T8716] team0: Device ipvlan1 failed to register rx_handler [ 255.307648][ T8710] netlink: 'syz.1.874': attribute type 39 has an invalid length. [ 255.362768][ T8724] netlink: 'syz.4.876': attribute type 21 has an invalid length. [ 255.492636][ T8724] netlink: 128 bytes leftover after parsing attributes in process `syz.4.876'. [ 255.613687][ T8717] netlink: 'syz.4.876': attribute type 5 has an invalid length. [ 255.656998][ T8717] netlink: 'syz.4.876': attribute type 6 has an invalid length. [ 255.837836][ T8717] netlink: 3 bytes leftover after parsing attributes in process `syz.4.876'. [ 255.865479][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.872100][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.132623][ T8724] netlink: 'syz.4.876': attribute type 4 has an invalid length. [ 256.140354][ T8724] netlink: 3 bytes leftover after parsing attributes in process `syz.4.876'. [ 256.299483][ T8739] tun0: tun_chr_ioctl cmd 1074025677 [ 256.310214][ T8739] tun0: linktype set to 864 [ 256.481372][ T8742] FAULT_INJECTION: forcing a failure. [ 256.481372][ T8742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.554972][ T8746] netlink: 168 bytes leftover after parsing attributes in process `syz.1.883'. [ 256.597912][ T8742] CPU: 1 UID: 0 PID: 8742 Comm: syz.3.881 Not tainted 6.16.0-rc3-syzkaller-g212ec9229567 #0 PREEMPT(full) [ 256.597941][ T8742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 256.597965][ T8742] Call Trace: [ 256.597973][ T8742] [ 256.597981][ T8742] dump_stack_lvl+0x189/0x250 [ 256.598013][ T8742] ? __pfx____ratelimit+0x10/0x10 [ 256.598032][ T8742] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.598058][ T8742] ? __pfx__printk+0x10/0x10 [ 256.598079][ T8742] ? __might_fault+0xb0/0x130 [ 256.598103][ T8742] ? __might_fault+0xb0/0x130 [ 256.598129][ T8742] should_fail_ex+0x414/0x560 [ 256.598160][ T8742] _copy_from_user+0x2d/0xb0 [ 256.598181][ T8742] sk_setsockopt+0x276/0x2d30 [ 256.598205][ T8742] ? __pfx___might_resched+0x10/0x10 [ 256.598235][ T8742] ? __pfx_perf_trace_lock+0x10/0x10 [ 256.598261][ T8742] ? __pfx_sk_setsockopt+0x10/0x10 [ 256.598280][ T8742] ? vfs_write+0x8d8/0xa90 [ 256.598305][ T8742] ? aa_sk_perm+0x81e/0x950 [ 256.598326][ T8742] ? perf_trace_lock+0xec/0x3b0 [ 256.598354][ T8742] ? __pfx_aa_sk_perm+0x10/0x10 [ 256.598376][ T8742] ? __pfx_perf_trace_lock+0x10/0x10 [ 256.598405][ T8742] ? aa_sock_opt_perm+0x74/0x110 [ 256.598430][ T8742] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 256.598456][ T8742] do_sock_setsockopt+0x201/0x3e0 [ 256.598483][ T8742] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 256.598509][ T8742] ? __fget_files+0x2a/0x420 [ 256.598539][ T8742] __x64_sys_setsockopt+0x18b/0x220 [ 256.598572][ T8742] do_syscall_64+0xfa/0x3b0 [ 256.598588][ T8742] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.598604][ T8742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.598622][ T8742] ? clear_bhb_loop+0x60/0xb0 [ 256.598644][ T8742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.598660][ T8742] RIP: 0033:0x7fe57038e929 [ 256.598677][ T8742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.598693][ T8742] RSP: 002b:00007fe571246038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 256.598711][ T8742] RAX: ffffffffffffffda RBX: 00007fe5705b5fa0 RCX: 00007fe57038e929 [ 256.598725][ T8742] RDX: 0000000000000032 RSI: 0000000000000001 RDI: 0000000000000003 [ 256.598735][ T8742] RBP: 00007fe571246090 R08: 0000000000000020 R09: 0000000000000000 [ 256.598754][ T8742] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 256.598764][ T8742] R13: 0000000000000000 R14: 00007fe5705b5fa0 R15: 00007ffc2acbf6e8 [ 256.598799][ T8742] [ 256.852913][ T8744] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 256.859761][ T8744] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 256.880962][ T8744] team0: Port device wlan1 added [ 257.485145][ T8761] Driver unsupported XDP return value 0 on prog (id 597) dev N/A, expect packet loss! [ 259.685378][ T8770] team0: Device ipvlan1 failed to register rx_handler [ 259.696480][ T8784] : renamed from bond0 (while UP) [ 259.873560][ T8793] validate_nla: 3 callbacks suppressed [ 259.873593][ T8793] netlink: 'syz.1.897': attribute type 10 has an invalid length. [ 259.892552][ T8793] netlink: 168 bytes leftover after parsing attributes in process `syz.1.897'. [ 259.943351][ T8790] netlink: 14 bytes leftover after parsing attributes in process `syz.4.895'. [ 260.736467][ T8813] FAULT_INJECTION: forcing a failure. [ 260.736467][ T8813] name failslab, interval 1, probability 0, space 0, times 0 [ 260.840751][ T8813] CPU: 0 UID: 0 PID: 8813 Comm: syz.0.905 Not tainted 6.16.0-rc3-syzkaller-g212ec9229567 #0 PREEMPT(full) [ 260.840784][ T8813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 260.840795][ T8813] Call Trace: [ 260.840804][ T8813] [ 260.840813][ T8813] dump_stack_lvl+0x189/0x250 [ 260.840852][ T8813] ? __pfx____ratelimit+0x10/0x10 [ 260.840873][ T8813] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.840903][ T8813] ? __pfx__printk+0x10/0x10 [ 260.840943][ T8813] ? __pfx___might_resched+0x10/0x10 [ 260.840984][ T8813] should_fail_ex+0x414/0x560 [ 260.841023][ T8813] ? bpf_test_run_xdp_live+0x18e/0x1b10 [ 260.841044][ T8813] should_failslab+0xa8/0x100 [ 260.841072][ T8813] __kvmalloc_node_noprof+0x161/0x5f0 [ 260.841097][ T8813] ? bpf_test_run_xdp_live+0x18e/0x1b10 [ 260.841144][ T8813] bpf_test_run_xdp_live+0x18e/0x1b10 [ 260.841180][ T8813] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 260.841220][ T8813] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 260.841266][ T8813] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 260.841287][ T8813] ? 0xffffffffa0205540 [ 260.841313][ T8813] ? 0xffffffffa0205540 [ 260.841455][ T8813] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 260.841489][ T8813] ? rep_movs_alternative+0x4a/0x90 [ 260.841518][ T8813] ? _copy_from_user+0x94/0xb0 [ 260.841546][ T8813] ? bpf_test_init+0x133/0x170 [ 260.841566][ T8813] ? xdp_convert_md_to_buff+0x5b/0x330 [ 260.841599][ T8813] bpf_prog_test_run_xdp+0x713/0x1000 [ 260.841669][ T8813] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 260.841707][ T8813] ? __fget_files+0x2a/0x420 [ 260.841747][ T8813] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 260.841775][ T8813] bpf_prog_test_run+0x2c4/0x340 [ 260.841813][ T8813] __sys_bpf+0x4a4/0x860 [ 260.841847][ T8813] ? __pfx___sys_bpf+0x10/0x10 [ 260.841958][ T8813] __x64_sys_bpf+0x7c/0x90 [ 260.841985][ T8813] do_syscall_64+0xfa/0x3b0 [ 260.842009][ T8813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.842025][ T8813] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 260.842043][ T8813] ? clear_bhb_loop+0x60/0xb0 [ 260.842073][ T8813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.842090][ T8813] RIP: 0033:0x7f5d52b8e929 [ 260.842109][ T8813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.842129][ T8813] RSP: 002b:00007f5d53a16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 260.842149][ T8813] RAX: ffffffffffffffda RBX: 00007f5d52db5fa0 RCX: 00007f5d52b8e929 [ 260.842162][ T8813] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 260.842174][ T8813] RBP: 00007f5d53a16090 R08: 0000000000000000 R09: 0000000000000000 [ 260.842185][ T8813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.842195][ T8813] R13: 0000000000000000 R14: 00007f5d52db5fa0 R15: 00007fff08c4aec8 [ 260.842254][ T8813] [ 261.194913][ T8818] FAULT_INJECTION: forcing a failure. [ 261.194913][ T8818] name failslab, interval 1, probability 0, space 0, times 0 [ 261.207887][ T8818] CPU: 0 UID: 0 PID: 8818 Comm: syz.4.907 Not tainted 6.16.0-rc3-syzkaller-g212ec9229567 #0 PREEMPT(full) [ 261.207902][ T8818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.207908][ T8818] Call Trace: [ 261.207915][ T8818] [ 261.207921][ T8818] dump_stack_lvl+0x189/0x250 [ 261.207940][ T8818] ? __pfx____ratelimit+0x10/0x10 [ 261.207951][ T8818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.207965][ T8818] ? __pfx__printk+0x10/0x10 [ 261.207981][ T8818] ? __pfx___might_resched+0x10/0x10 [ 261.207999][ T8818] ? fs_reclaim_acquire+0x7d/0x100 [ 261.208026][ T8818] should_fail_ex+0x414/0x560 [ 261.208055][ T8818] should_failslab+0xa8/0x100 [ 261.208078][ T8818] kmem_cache_alloc_noprof+0x73/0x3c0 [ 261.208096][ T8818] ? alloc_empty_file+0x55/0x1d0 [ 261.208117][ T8818] alloc_empty_file+0x55/0x1d0 [ 261.208131][ T8818] alloc_file_pseudo+0x13d/0x210 [ 261.208147][ T8818] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 261.208170][ T8818] anon_inode_getfile+0xc5/0x1a0 [ 261.208186][ T8818] __se_sys_perf_event_open+0xf20/0x1d70 [ 261.208210][ T8818] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 261.208232][ T8818] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 261.208247][ T8818] ? __pfx_ksys_write+0x10/0x10 [ 261.208255][ T8818] ? rcu_is_watching+0x15/0xb0 [ 261.208274][ T8818] ? do_syscall_64+0xbe/0x3b0 [ 261.208283][ T8818] ? __x64_sys_perf_event_open+0x20/0xc0 [ 261.208298][ T8818] do_syscall_64+0xfa/0x3b0 [ 261.208308][ T8818] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.208317][ T8818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.208326][ T8818] ? clear_bhb_loop+0x60/0xb0 [ 261.208345][ T8818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.208355][ T8818] RIP: 0033:0x7f56e2b8e929 [ 261.208366][ T8818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.208374][ T8818] RSP: 002b:00007f56e39f0038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 261.208385][ T8818] RAX: ffffffffffffffda RBX: 00007f56e2db5fa0 RCX: 00007f56e2b8e929 [ 261.208392][ T8818] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000200 [ 261.208399][ T8818] RBP: 00007f56e39f0090 R08: 0000000000000000 R09: 0000000000000000 [ 261.208405][ T8818] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 261.208411][ T8818] R13: 0000000000000000 R14: 00007f56e2db5fa0 R15: 00007fff0c4ffd08 [ 261.208429][ T8818] [ 261.610789][ T8827] tun0: tun_chr_ioctl cmd 1074025677 [ 261.619899][ T8827] tun0: linktype set to 864 [ 261.700558][ T8830] netlink: 'syz.4.910': attribute type 10 has an invalid length. [ 262.864312][ T8856] netlink: 22 bytes leftover after parsing attributes in process `syz.1.919'. [ 263.334051][ T8870] netlink: 'syz.3.923': attribute type 10 has an invalid length. [ 263.878941][ T8874] FAULT_INJECTION: forcing a failure. [ 263.878941][ T8874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.900047][ T8874] CPU: 0 UID: 0 PID: 8874 Comm: syz.4.925 Not tainted 6.16.0-rc3-syzkaller-g212ec9229567 #0 PREEMPT(full) [ 263.900076][ T8874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 263.900088][ T8874] Call Trace: [ 263.900099][ T8874] [ 263.900110][ T8874] dump_stack_lvl+0x189/0x250 [ 263.900148][ T8874] ? __pfx____ratelimit+0x10/0x10 [ 263.900177][ T8874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.900211][ T8874] ? __pfx__printk+0x10/0x10 [ 263.900243][ T8874] ? __might_fault+0xb0/0x130 [ 263.900282][ T8874] ? __might_fault+0xb0/0x130 [ 263.900339][ T8874] should_fail_ex+0x414/0x560 [ 263.900397][ T8874] _copy_from_iter+0x1db/0x16f0 [ 263.900487][ T8874] ? __pfx__copy_from_iter+0x10/0x10 [ 263.900526][ T8874] ? __build_skb_around+0x257/0x3e0 [ 263.900575][ T8874] ? netlink_sendmsg+0x642/0xb30 [ 263.900595][ T8874] ? skb_put+0x11b/0x210 [ 263.900646][ T8874] netlink_sendmsg+0x6b2/0xb30 [ 263.900723][ T8874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.900770][ T8874] ? aa_sock_msg_perm+0x94/0x160 [ 263.900811][ T8874] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 263.900838][ T8874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.900874][ T8874] __sock_sendmsg+0x219/0x270 [ 263.900920][ T8874] ____sys_sendmsg+0x505/0x830 [ 263.900983][ T8874] ? __pfx_____sys_sendmsg+0x10/0x10 [ 263.901068][ T8874] ? import_iovec+0x74/0xa0 [ 263.901116][ T8874] ___sys_sendmsg+0x21f/0x2a0 [ 263.901163][ T8874] ? __pfx____sys_sendmsg+0x10/0x10 [ 263.901302][ T8874] ? __fget_files+0x2a/0x420 [ 263.901394][ T8874] ? __fget_files+0x2a/0x420 [ 263.901416][ T8874] ? __fget_files+0x3a0/0x420 [ 263.901498][ T8874] __x64_sys_sendmsg+0x19b/0x260 [ 263.901541][ T8874] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 263.901697][ T8874] do_syscall_64+0xfa/0x3b0 [ 263.901728][ T8874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.901745][ T8874] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 263.901762][ T8874] ? clear_bhb_loop+0x60/0xb0 [ 263.901802][ T8874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.901821][ T8874] RIP: 0033:0x7f56e2b8e929 [ 263.901844][ T8874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.901859][ T8874] RSP: 002b:00007f56e39f0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.901879][ T8874] RAX: ffffffffffffffda RBX: 00007f56e2db5fa0 RCX: 00007f56e2b8e929 [ 263.901892][ T8874] RDX: ff0f000020000080 RSI: 0000200000000000 RDI: 0000000000000007 [ 263.901904][ T8874] RBP: 00007f56e39f0090 R08: 0000000000000000 R09: 0000000000000000 [ 263.901915][ T8874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.901926][ T8874] R13: 0000000000000000 R14: 00007f56e2db5fa0 R15: 00007fff0c4ffd08 [ 263.902028][ T8874] [ 264.848167][ T8885] netlink: 'syz.4.929': attribute type 10 has an invalid length. [ 264.916176][ T8886] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 265.373587][ T8870] geneve1: entered promiscuous mode [ 265.379179][ T8870] geneve1: entered allmulticast mode [ 265.385614][ T8870] team0: Port device geneve1 added [ 266.226253][ T8900] netlink: 60 bytes leftover after parsing attributes in process `syz.0.934'. [ 267.376882][ T8925] netlink: 'syz.1.942': attribute type 10 has an invalid length. [ 267.612681][ T8925] team0: Port device geneve1 added [ 268.293651][ T8947] FAULT_INJECTION: forcing a failure. [ 268.293651][ T8947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.312141][ T8947] CPU: 0 UID: 0 PID: 8947 Comm: syz.2.952 Not tainted 6.16.0-rc3-syzkaller-g212ec9229567 #0 PREEMPT(full) [ 268.312168][ T8947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 268.312179][ T8947] Call Trace: [ 268.312188][ T8947] [ 268.312197][ T8947] dump_stack_lvl+0x189/0x250 [ 268.312233][ T8947] ? __pfx____ratelimit+0x10/0x10 [ 268.312269][ T8947] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.312301][ T8947] ? __pfx__printk+0x10/0x10 [ 268.312323][ T8947] ? __might_fault+0xb0/0x130 [ 268.312353][ T8947] ? __might_fault+0xb0/0x130 [ 268.312389][ T8947] should_fail_ex+0x414/0x560 [ 268.312429][ T8947] _copy_from_user+0x2d/0xb0 [ 268.312454][ T8947] ___sys_sendmsg+0x158/0x2a0 [ 268.312489][ T8947] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.312572][ T8947] ? __fget_files+0x2a/0x420 [ 268.312641][ T8947] ? __fget_files+0x2a/0x420 [ 268.312662][ T8947] ? __fget_files+0x3a0/0x420 [ 268.312714][ T8947] __x64_sys_sendmsg+0x19b/0x260 [ 268.312736][ T8947] ? perf_trace_run_bpf_submit+0x100/0x170 [ 268.312766][ T8947] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 268.312821][ T8947] ? rcu_is_watching+0x15/0xb0 [ 268.312860][ T8947] ? do_syscall_64+0xbe/0x3b0 [ 268.312888][ T8947] do_syscall_64+0xfa/0x3b0 [ 268.312905][ T8947] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.312923][ T8947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.312941][ T8947] ? clear_bhb_loop+0x60/0xb0 [ 268.312969][ T8947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.312986][ T8947] RIP: 0033:0x7f08a6f8e929 [ 268.313005][ T8947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.313020][ T8947] RSP: 002b:00007f08a7df1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.313039][ T8947] RAX: ffffffffffffffda RBX: 00007f08a71b5fa0 RCX: 00007f08a6f8e929 [ 268.313052][ T8947] RDX: 0000000020004000 RSI: 0000200000000080 RDI: 0000000000000004 [ 268.313062][ T8947] RBP: 00007f08a7df1090 R08: 0000000000000000 R09: 0000000000000000 [ 268.313071][ T8947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.313081][ T8947] R13: 0000000000000000 R14: 00007f08a71b5fa0 R15: 00007ffded9b75b8 [ 268.313135][ T8947] [ 268.980656][ T8963] netlink: 'syz.2.960': attribute type 3 has an invalid length. [ 269.018031][ T8963] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.960'. [ 269.371457][ T8981] FAULT_INJECTION: forcing a failure. [ 269.371457][ T8981] name failslab, interval 1, probability 0, space 0, times 0 [ 269.391912][ T8981] CPU: 0 UID: 0 PID: 8981 Comm: syz.0.966 Not tainted 6.16.0-rc3-syzkaller-g212ec9229567 #0 PREEMPT(full) [ 269.391941][ T8981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 269.391953][ T8981] Call Trace: [ 269.391961][ T8981] [ 269.391970][ T8981] dump_stack_lvl+0x189/0x250 [ 269.392002][ T8981] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.392021][ T8981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.392056][ T8981] ? dump_stack+0x9/0x20 [ 269.392080][ T8981] should_fail_ex+0x414/0x560 [ 269.392110][ T8981] ? bpf_test_run_xdp_live+0x18e/0x1b10 [ 269.392131][ T8981] should_failslab+0xa8/0x100 [ 269.392153][ T8981] __kvmalloc_node_noprof+0x161/0x5f0 [ 269.392173][ T8981] ? bpf_test_run_xdp_live+0x18e/0x1b10 [ 269.392202][ T8981] bpf_test_run_xdp_live+0x18e/0x1b10 [ 269.392228][ T8981] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 269.392256][ T8981] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 269.392287][ T8981] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 269.392307][ T8981] ? 0xffffffffa0205540 [ 269.392322][ T8981] ? 0xffffffffa0205540 [ 269.392397][ T8981] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 269.392428][ T8981] ? _copy_from_user+0x94/0xb0 [ 269.392448][ T8981] ? bpf_test_init+0x133/0x170 [ 269.392465][ T8981] ? xdp_convert_md_to_buff+0x5b/0x330 [ 269.392489][ T8981] bpf_prog_test_run_xdp+0x713/0x1000 [ 269.392529][ T8981] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 269.392557][ T8981] ? __fget_files+0x2a/0x420 [ 269.392584][ T8981] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 269.392608][ T8981] bpf_prog_test_run+0x2c4/0x340 [ 269.392637][ T8981] __sys_bpf+0x4a4/0x860 [ 269.392663][ T8981] ? __pfx___sys_bpf+0x10/0x10 [ 269.392705][ T8981] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 269.392743][ T8981] __x64_sys_bpf+0x7c/0x90 [ 269.392766][ T8981] do_syscall_64+0xfa/0x3b0 [ 269.392786][ T8981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.392803][ T8981] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 269.392821][ T8981] ? clear_bhb_loop+0x60/0xb0 [ 269.392842][ T8981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.392860][ T8981] RIP: 0033:0x7f5d52b8e929 [ 269.392876][ T8981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.392891][ T8981] RSP: 002b:00007f5d53a16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 269.392911][ T8981] RAX: ffffffffffffffda RBX: 00007f5d52db5fa0 RCX: 00007f5d52b8e929 [ 269.392923][ T8981] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 269.392935][ T8981] RBP: 00007f5d53a16090 R08: 0000000000000000 R09: 0000000000000000 [ 269.392946][ T8981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.392956][ T8981] R13: 0000000000000000 R14: 00007f5d52db5fa0 R15: 00007fff08c4aec8 [ 269.392987][ T8981] [ 270.002215][ T8991] netlink: 'syz.2.968': attribute type 1 has an invalid length. [ 270.011437][ T8991] netlink: 'syz.2.968': attribute type 4 has an invalid length. [ 270.033594][ T8991] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.968'. [ 270.895404][ T9017] netlink: 'syz.4.979': attribute type 3 has an invalid length. [ 270.913046][ T9017] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.979'. [ 270.958177][ T9021] FAULT_INJECTION: forcing a failure. [ 270.958177][ T9021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.002495][ T9021] CPU: 1 UID: 0 PID: 9021 Comm: syz.2.980 Not tainted 6.16.0-rc3-syzkaller-g212ec9229567 #0 PREEMPT(full) [ 271.002521][ T9021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 271.002530][ T9021] Call Trace: [ 271.002537][ T9021] [ 271.002544][ T9021] dump_stack_lvl+0x189/0x250 [ 271.002575][ T9021] ? __pfx____ratelimit+0x10/0x10 [ 271.002592][ T9021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.002617][ T9021] ? __pfx__printk+0x10/0x10 [ 271.002636][ T9021] ? __might_fault+0xb0/0x130 [ 271.002657][ T9021] ? __might_fault+0xb0/0x130 [ 271.002682][ T9021] should_fail_ex+0x414/0x560 [ 271.002711][ T9021] _copy_from_user+0x2d/0xb0 [ 271.002732][ T9021] ___sys_sendmsg+0x158/0x2a0 [ 271.002759][ T9021] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.002808][ T9021] ? __fget_files+0x2a/0x420 [ 271.002845][ T9021] ? __fget_files+0x2a/0x420 [ 271.002863][ T9021] ? __fget_files+0x3a0/0x420 [ 271.002896][ T9021] __x64_sys_sendmsg+0x19b/0x260 [ 271.002923][ T9021] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 271.002959][ T9021] ? __pfx_ksys_write+0x10/0x10 [ 271.002975][ T9021] ? rcu_is_watching+0x15/0xb0 [ 271.003007][ T9021] ? do_syscall_64+0xbe/0x3b0 [ 271.003029][ T9021] do_syscall_64+0xfa/0x3b0 [ 271.003045][ T9021] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.003061][ T9021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.003078][ T9021] ? clear_bhb_loop+0x60/0xb0 [ 271.003100][ T9021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.003117][ T9021] RIP: 0033:0x7f08a6f8e929 [ 271.003132][ T9021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.003147][ T9021] RSP: 002b:00007f08a7df1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.003167][ T9021] RAX: ffffffffffffffda RBX: 00007f08a71b5fa0 RCX: 00007f08a6f8e929 [ 271.003179][ T9021] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 271.003190][ T9021] RBP: 00007f08a7df1090 R08: 0000000000000000 R09: 0000000000000000 [ 271.003201][ T9021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.003211][ T9021] R13: 0000000000000000 R14: 00007f08a71b5fa0 R15: 00007ffded9b75b8 [ 271.003244][ T9021] [ 272.111635][ T9045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.988'. [ 272.120780][ T9045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.988'. [ 272.137810][ T9043] FAULT_INJECTION: forcing a failure. [ 272.137810][ T9043] name failslab, interval 1, probability 0, space 0, times 0 [ 272.154181][ T9045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.988'. [ 272.163333][ T9043] CPU: 1 UID: 0 PID: 9043 Comm: syz.3.987 Not tainted 6.16.0-rc3-syzkaller-g212ec9229567 #0 PREEMPT(full) [ 272.163359][ T9043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 272.163371][ T9043] Call Trace: [ 272.163379][ T9043] [ 272.163386][ T9043] dump_stack_lvl+0x189/0x250 [ 272.163417][ T9043] ? __pfx____ratelimit+0x10/0x10 [ 272.163436][ T9043] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.163459][ T9043] ? __pfx__printk+0x10/0x10 [ 272.163484][ T9043] ? __pfx___might_resched+0x10/0x10 [ 272.163507][ T9043] ? fs_reclaim_acquire+0x7d/0x100 [ 272.163534][ T9043] should_fail_ex+0x414/0x560 [ 272.163561][ T9043] should_failslab+0xa8/0x100 [ 272.163584][ T9043] kmem_cache_alloc_noprof+0x73/0x3c0 [ 272.163601][ T9043] ? alloc_empty_file+0x55/0x1d0 [ 272.163629][ T9043] alloc_empty_file+0x55/0x1d0 [ 272.163653][ T9043] path_openat+0x107/0x3830 [ 272.163668][ T9043] ? arch_stack_walk+0xfc/0x150 [ 272.163713][ T9043] ? kasan_save_track+0x4f/0x80 [ 272.163728][ T9043] ? kasan_save_track+0x3e/0x80 [ 272.163743][ T9043] ? __kasan_slab_alloc+0x6c/0x80 [ 272.163760][ T9043] ? getname_flags+0xb8/0x540 [ 272.163780][ T9043] ? __pfx_path_openat+0x10/0x10 [ 272.163795][ T9043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.163833][ T9043] do_filp_open+0x1fa/0x410 [ 272.163848][ T9043] ? __lock_acquire+0xab9/0xd20 [ 272.163881][ T9043] ? __pfx_do_filp_open+0x10/0x10 [ 272.163921][ T9043] ? _raw_spin_unlock+0x28/0x50 [ 272.163943][ T9043] ? alloc_fd+0x64c/0x6c0 [ 272.163975][ T9043] do_sys_openat2+0x121/0x1c0 [ 272.164001][ T9043] ? __pfx_do_sys_openat2+0x10/0x10 [ 272.164038][ T9043] __x64_sys_openat+0x138/0x170 [ 272.164066][ T9043] do_syscall_64+0xfa/0x3b0 [ 272.164086][ T9043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.164101][ T9043] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 272.164118][ T9043] ? clear_bhb_loop+0x60/0xb0 [ 272.164139][ T9043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.164156][ T9043] RIP: 0033:0x7fe57038e929 [ 272.164172][ T9043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.164187][ T9043] RSP: 002b:00007fe571225038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 272.164210][ T9043] RAX: ffffffffffffffda RBX: 00007fe5705b6080 RCX: 00007fe57038e929 [ 272.164223][ T9043] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 272.164236][ T9043] RBP: 00007fe571225090 R08: 0000000000000000 R09: 0000000000000000 [ 272.164247][ T9043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.164258][ T9043] R13: 0000000000000000 R14: 00007fe5705b6080 R15: 00007ffc2acbf6e8 [ 272.164288][ T9043] [ 272.750157][ T9059] FAULT_INJECTION: forcing a failure. [ 272.750157][ T9059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.755126][ T9055] FAULT_INJECTION: forcing a failure. [ 272.755126][ T9055] name failslab, interval 1, probability 0, space 0, times 0 [ 272.787507][ T9055] CPU: 0 UID: 0 PID: 9055 Comm: syz.0.992 Not tainted 6.16.0-rc3-syzkaller-g212ec9229567 #0 PREEMPT(full) [ 272.787535][ T9055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 272.787545][ T9055] Call Trace: [ 272.787552][ T9055] [ 272.787561][ T9055] dump_stack_lvl+0x189/0x250 [ 272.787591][ T9055] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.787611][ T9055] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.787654][ T9055] should_fail_ex+0x414/0x560 [ 272.787685][ T9055] should_failslab+0xa8/0x100 [ 272.787707][ T9055] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 272.787726][ T9055] ? perf_trace_lock+0xec/0x3b0 [ 272.787749][ T9055] ? __alloc_skb+0x112/0x2d0 [ 272.787776][ T9055] __alloc_skb+0x112/0x2d0 [ 272.787800][ T9055] alloc_skb_with_frags+0xca/0x890 [ 272.787837][ T9055] sock_alloc_send_pskb+0x857/0x990 [ 272.787893][ T9055] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 272.787917][ T9055] ? ___sys_sendmsg+0x1e7/0x2a0 [ 272.787941][ T9055] ? __pfx___scm_send+0x10/0x10 [ 272.787959][ T9055] ? __pfx___might_resched+0x10/0x10 [ 272.787987][ T9055] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 272.788016][ T9055] unix_stream_sendmsg+0x4c2/0xc90 [ 272.788059][ T9055] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 272.788090][ T9055] ? aa_sock_msg_perm+0x94/0x160 [ 272.788115][ T9055] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 272.788137][ T9055] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 272.788158][ T9055] __sock_sendmsg+0x219/0x270 [ 272.788179][ T9055] ____sys_sendmsg+0x505/0x830 [ 272.788204][ T9055] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.788237][ T9055] ? import_iovec+0x74/0xa0 [ 272.788259][ T9055] ___sys_sendmsg+0x21f/0x2a0 [ 272.788281][ T9055] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.788324][ T9055] ? __fget_files+0x2a/0x420 [ 272.788358][ T9055] ? __fget_files+0x2a/0x420 [ 272.788377][ T9055] ? __fget_files+0x3a0/0x420 [ 272.788407][ T9055] __x64_sys_sendmsg+0x19b/0x260 [ 272.788434][ T9055] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 272.788484][ T9055] do_syscall_64+0xfa/0x3b0 [ 272.788504][ T9055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.788520][ T9055] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 272.788537][ T9055] ? clear_bhb_loop+0x60/0xb0 [ 272.788557][ T9055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.788573][ T9055] RIP: 0033:0x7f5d52b8e929 [ 272.788590][ T9055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.788604][ T9055] RSP: 002b:00007f5d53a16038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.788624][ T9055] RAX: ffffffffffffffda RBX: 00007f5d52db5fa0 RCX: 00007f5d52b8e929 [ 272.788636][ T9055] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000006 [ 272.788648][ T9055] RBP: 00007f5d53a16090 R08: 0000000000000000 R09: 0000000000000000 [ 272.788658][ T9055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.788669][ T9055] R13: 0000000000000000 R14: 00007f5d52db5fa0 R15: 00007fff08c4aec8 [ 272.788700][ T9055] [ 272.792101][ T9059] CPU: 0 UID: 0 PID: 9059 Comm: syz.3.993 Not tainted 6.16.0-rc3-syzkaller-g212ec9229567 #0 PREEMPT(full) [ 272.792126][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 272.792136][ T9059] Call Trace: [ 272.792143][ T9059] [ 272.792150][ T9059] dump_stack_lvl+0x189/0x250 [ 272.792182][ T9059] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.792208][ T9059] ? __pfx__printk+0x10/0x10 [ 272.792244][ T9059] should_fail_ex+0x414/0x560 [ 272.792274][ T9059] _copy_from_iter+0x1db/0x16f0 [ 272.792303][ T9059] ? __pfx__copy_from_iter+0x10/0x10 [ 272.792320][ T9059] ? __build_skb_around+0x257/0x3e0 [ 272.792343][ T9059] ? netlink_sendmsg+0x642/0xb30 [ 272.792362][ T9059] ? skb_put+0x11b/0x210 [ 272.792387][ T9059] netlink_sendmsg+0x6b2/0xb30 [ 272.792418][ T9059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.792443][ T9059] ? aa_sock_msg_perm+0x94/0x160 [ 272.792468][ T9059] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 272.792492][ T9059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.792515][ T9059] __sock_sendmsg+0x219/0x270 [ 272.792536][ T9059] ____sys_sendmsg+0x505/0x830 [ 272.792566][ T9059] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.792608][ T9059] ? import_iovec+0x74/0xa0 [ 272.792631][ T9059] ___sys_sendmsg+0x21f/0x2a0 [ 272.792656][ T9059] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.792702][ T9059] ? __fget_files+0x2a/0x420 [ 272.792735][ T9059] ? __fget_files+0x2a/0x420 [ 272.792752][ T9059] ? __fget_files+0x3a0/0x420 [ 272.792786][ T9059] __x64_sys_sendmsg+0x19b/0x260 [ 272.792813][ T9059] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 272.792879][ T9059] do_syscall_64+0xfa/0x3b0 [ 272.792900][ T9059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.792916][ T9059] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 272.792933][ T9059] ? clear_bhb_loop+0x60/0xb0 [ 272.792954][ T9059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.792969][ T9059] RIP: 0033:0x7fe57038e929 [ 272.792986][ T9059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.792999][ T9059] RSP: 002b:00007fe571246038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.793018][ T9059] RAX: ffffffffffffffda RBX: 00007fe5705b5fa0 RCX: 00007fe57038e929 [ 272.793030][ T9059] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 0000000000000007 [ 272.793042][ T9059] RBP: 00007fe571246090 R08: 0000000000000000 R09: 0000000000000000 [ 272.793052][ T9059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.793062][ T9059] R13: 0000000000000000 R14: 00007fe5705b5fa0 R15: 00007ffc2acbf6e8 [ 272.793092][ T9059] [ 273.704166][ T9069] netlink: 'syz.0.996': attribute type 3 has an invalid length. [ 273.712193][ T9069] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.996'. [ 273.734867][ T9067] netlink: 'syz.1.995': attribute type 39 has an invalid length. [ 274.029656][ T9079] netlink: 'syz.4.1000': attribute type 10 has an invalid length. [ 274.735060][ T9105] netlink: 'syz.4.1008': attribute type 39 has an invalid length. [ 275.506541][ T9108] netlink: 'syz.1.1009': attribute type 10 has an invalid length. [ 275.709960][ T9108] veth1_macvtap: left promiscuous mode [ 276.237788][ T9138] netlink: 'syz.2.1020': attribute type 10 has an invalid length. [ 276.248099][ T9135] netlink: 'syz.3.1017': attribute type 3 has an invalid length. [ 276.262510][ T9135] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.1017'. [ 276.308749][ T9138] team0: Port device syz_tun added [ 276.754852][ T9157] netlink: 'syz.1.1026': attribute type 10 has an invalid length. [ 276.775887][ T9157] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.810898][ T9157] bond0: (slave team0): Enslaving as an active interface with an up link [ 276.956762][ T9159] netlink: 'syz.4.1025': attribute type 39 has an invalid length. [ 277.313372][ T9172] netlink: 64731 bytes leftover after parsing attributes in process `syz.0.1031'. [ 277.613612][ T9187] FAULT_INJECTION: forcing a failure. [ 277.613612][ T9187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.632671][ T9187] CPU: 0 UID: 0 PID: 9187 Comm: syz.3.1035 Not tainted 6.16.0-rc3-syzkaller-g212ec9229567 #0 PREEMPT(full) [ 277.632697][ T9187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 277.632706][ T9187] Call Trace: [ 277.632712][ T9187] [ 277.632719][ T9187] dump_stack_lvl+0x189/0x250 [ 277.632746][ T9187] ? __pfx____ratelimit+0x10/0x10 [ 277.632761][ T9187] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.632782][ T9187] ? __pfx__printk+0x10/0x10 [ 277.632799][ T9187] ? __might_fault+0xb0/0x130 [ 277.632826][ T9187] should_fail_ex+0x414/0x560 [ 277.632851][ T9187] _copy_from_user+0x2d/0xb0 [ 277.632869][ T9187] dev_ethtool+0xd0/0x1990 [ 277.632893][ T9187] ? __lock_acquire+0xab9/0xd20 [ 277.632918][ T9187] ? __pfx_dev_ethtool+0x10/0x10 [ 277.632949][ T9187] ? dev_load+0x21/0x1f0 [ 277.632966][ T9187] ? dev_load+0x21/0x1f0 [ 277.632983][ T9187] dev_ioctl+0x392/0x1150 [ 277.633003][ T9187] sock_do_ioctl+0x22c/0x300 [ 277.633020][ T9187] ? __pfx_sock_do_ioctl+0x10/0x10 [ 277.633032][ T9187] ? __lock_acquire+0xab9/0xd20 [ 277.633066][ T9187] sock_ioctl+0x576/0x790 [ 277.633090][ T9187] ? __pfx_sock_ioctl+0x10/0x10 [ 277.633111][ T9187] ? __fget_files+0x2a/0x420 [ 277.633128][ T9187] ? __fget_files+0x3a0/0x420 [ 277.633143][ T9187] ? __fget_files+0x2a/0x420 [ 277.633164][ T9187] ? bpf_lsm_file_ioctl+0x9/0x20 [ 277.633178][ T9187] ? __pfx_sock_ioctl+0x10/0x10 [ 277.633199][ T9187] __se_sys_ioctl+0xf9/0x170 [ 277.633216][ T9187] do_syscall_64+0xfa/0x3b0 [ 277.633232][ T9187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.633245][ T9187] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 277.633259][ T9187] ? clear_bhb_loop+0x60/0xb0 [ 277.633277][ T9187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.633291][ T9187] RIP: 0033:0x7fe57038e929 [ 277.633305][ T9187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.633317][ T9187] RSP: 002b:00007fe571246038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.633334][ T9187] RAX: ffffffffffffffda RBX: 00007fe5705b5fa0 RCX: 00007fe57038e929 [ 277.633344][ T9187] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000011 [ 277.633354][ T9187] RBP: 00007fe571246090 R08: 0000000000000000 R09: 0000000000000000 [ 277.633363][ T9187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.633371][ T9187] R13: 0000000000000000 R14: 00007fe5705b5fa0 R15: 00007ffc2acbf6e8 [ 277.633397][ T9187] [ 278.009670][ T9194] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1034'. [ 278.091669][ T9188] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1034'. [ 278.706712][ T9199] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1040'. [ 278.835815][ T9206] netlink: 14546 bytes leftover after parsing attributes in process `syz.2.1043'. [ 278.909979][ T9210] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1044'. [ 280.135579][ T9210] batadv_slave_1: entered promiscuous mode [ 280.873464][ T9246] netlink: 'syz.4.1053': attribute type 2 has an invalid length. [ 280.902382][ T9246] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1053'. [ 281.417705][ T9272] FAULT_INJECTION: forcing a failure. [ 281.417705][ T9272] name failslab, interval 1, probability 0, space 0, times 0 [ 281.472755][ T9272] CPU: 1 UID: 0 PID: 9272 Comm: syz.3.1063 Not tainted 6.16.0-rc3-syzkaller-g212ec9229567 #0 PREEMPT(full) [ 281.472780][ T9272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 281.472790][ T9272] Call Trace: [ 281.472798][ T9272] [ 281.472806][ T9272] dump_stack_lvl+0x189/0x250 [ 281.472834][ T9272] ? __pfx____ratelimit+0x10/0x10 [ 281.472851][ T9272] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.472875][ T9272] ? __pfx__printk+0x10/0x10 [ 281.472897][ T9272] ? __pfx___might_resched+0x10/0x10 [ 281.472921][ T9272] ? fs_reclaim_acquire+0x7d/0x100 [ 281.472949][ T9272] should_fail_ex+0x414/0x560 [ 281.472980][ T9272] should_failslab+0xa8/0x100 [ 281.473002][ T9272] kmem_cache_alloc_noprof+0x73/0x3c0 [ 281.473021][ T9272] ? security_file_alloc+0x34/0x330 [ 281.473048][ T9272] security_file_alloc+0x34/0x330 [ 281.473071][ T9272] init_file+0x93/0x2f0 [ 281.473096][ T9272] alloc_empty_file+0x6e/0x1d0 [ 281.473118][ T9272] alloc_file_pseudo+0x13d/0x210 [ 281.473142][ T9272] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 281.473191][ T9272] anon_inode_getfile+0xc5/0x1a0 [ 281.473218][ T9272] __se_sys_perf_event_open+0xf20/0x1d70 [ 281.473258][ T9272] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 281.473300][ T9272] ? __pfx_ksys_write+0x10/0x10 [ 281.473325][ T9272] ? do_syscall_64+0xbe/0x3b0 [ 281.473340][ T9272] ? __x64_sys_perf_event_open+0x20/0xc0 [ 281.473367][ T9272] do_syscall_64+0xfa/0x3b0 [ 281.473382][ T9272] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.473399][ T9272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.473416][ T9272] ? clear_bhb_loop+0x60/0xb0 [ 281.473439][ T9272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.473454][ T9272] RIP: 0033:0x7fe57038e929 [ 281.473470][ T9272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.473485][ T9272] RSP: 002b:00007fe571246038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 281.473502][ T9272] RAX: ffffffffffffffda RBX: 00007fe5705b5fa0 RCX: 00007fe57038e929 [ 281.473514][ T9272] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000080 [ 281.473525][ T9272] RBP: 00007fe571246090 R08: 0000000000000000 R09: 0000000000000000 [ 281.473534][ T9272] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 281.473545][ T9272] R13: 0000000000000001 R14: 00007fe5705b5fa0 R15: 00007ffc2acbf6e8 [ 281.473578][ T9272] [ 282.531708][ T9292] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1068'. [ 282.563086][ T9291] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1068'. [ 282.578673][ T9291] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1068'. [ 282.675331][ T9295] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 282.684198][ T9295] syzkaller0: owner set to 1 [ 283.209781][ T9307] netlink: 'syz.3.1075': attribute type 39 has an invalid length. [ 283.378841][ T9317] FAULT_INJECTION: forcing a failure. [ 283.378841][ T9317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.420541][ T9317] CPU: 1 UID: 0 PID: 9317 Comm: syz.2.1079 Not tainted 6.16.0-rc3-syzkaller-g212ec9229567 #0 PREEMPT(full) [ 283.420569][ T9317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 283.420580][ T9317] Call Trace: [ 283.420587][ T9317] [ 283.420596][ T9317] dump_stack_lvl+0x189/0x250 [ 283.420626][ T9317] ? __pfx____ratelimit+0x10/0x10 [ 283.420644][ T9317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.420699][ T9317] ? __pfx__printk+0x10/0x10 [ 283.420714][ T9317] ? lock_acquire+0x175/0x360 [ 283.420756][ T9317] should_fail_ex+0x414/0x560 [ 283.420784][ T9317] _copy_from_user+0x2d/0xb0 [ 283.420804][ T9317] ___sys_sendmsg+0x158/0x2a0 [ 283.420831][ T9317] ? __pfx____sys_sendmsg+0x10/0x10 [ 283.420900][ T9317] ? __fget_files+0x2a/0x420 [ 283.420920][ T9317] ? __fget_files+0x3a0/0x420 [ 283.420953][ T9317] __x64_sys_sendmsg+0x19b/0x260 [ 283.420980][ T9317] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 283.421022][ T9317] ? do_syscall_64+0xbe/0x3b0 [ 283.421044][ T9317] do_syscall_64+0xfa/0x3b0 [ 283.421062][ T9317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.421079][ T9317] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 283.421096][ T9317] ? clear_bhb_loop+0x60/0xb0 [ 283.421118][ T9317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.421133][ T9317] RIP: 0033:0x7f08a6f8e929 [ 283.421149][ T9317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.421164][ T9317] RSP: 002b:00007f08a7df1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.421182][ T9317] RAX: ffffffffffffffda RBX: 00007f08a71b5fa0 RCX: 00007f08a6f8e929 [ 283.421194][ T9317] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 283.421205][ T9317] RBP: 00007f08a7df1090 R08: 0000000000000000 R09: 0000000000000000 [ 283.421216][ T9317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.421227][ T9317] R13: 0000000000000000 R14: 00007f08a71b5fa0 R15: 00007ffded9b75b8 [ 283.421260][ T9317] [ 283.783886][ T9321] netlink: 26 bytes leftover after parsing attributes in process `syz.1.1081'. [ 284.097161][ T9339] FAULT_INJECTION: forcing a failure. [ 284.097161][ T9339] name failslab, interval 1, probability 0, space 0, times 0 [ 284.167522][ T9339] CPU: 1 UID: 0 PID: 9339 Comm: syz.0.1088 Not tainted 6.16.0-rc3-syzkaller-g212ec9229567 #0 PREEMPT(full) [ 284.167548][ T9339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 284.167558][ T9339] Call Trace: [ 284.167565][ T9339] [ 284.167572][ T9339] dump_stack_lvl+0x189/0x250 [ 284.167612][ T9339] ? __pfx____ratelimit+0x10/0x10 [ 284.167630][ T9339] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.167653][ T9339] ? __pfx__printk+0x10/0x10 [ 284.167677][ T9339] ? __pfx___might_resched+0x10/0x10 [ 284.167708][ T9339] should_fail_ex+0x414/0x560 [ 284.167737][ T9339] should_failslab+0xa8/0x100 [ 284.167760][ T9339] __kmalloc_noprof+0xcb/0x4f0 [ 284.167775][ T9339] ? kfree+0x4d/0x440 [ 284.167787][ T9339] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 284.167819][ T9339] tomoyo_realpath_from_path+0xe3/0x5d0 [ 284.167843][ T9339] ? tomoyo_domain+0xd9/0x130 [ 284.167866][ T9339] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 284.167889][ T9339] tomoyo_path_number_perm+0x1e8/0x5a0 [ 284.167915][ T9339] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 284.167936][ T9339] ? ksys_write+0x1cb/0x250 [ 284.167995][ T9339] ? __fget_files+0x2a/0x420 [ 284.168019][ T9339] ? __fget_files+0x2a/0x420 [ 284.168039][ T9339] ? __fget_files+0x3a0/0x420 [ 284.168057][ T9339] ? __fget_files+0x2a/0x420 [ 284.168082][ T9339] security_file_ioctl+0xcb/0x2d0 [ 284.168105][ T9339] __se_sys_ioctl+0x47/0x170 [ 284.168126][ T9339] do_syscall_64+0xfa/0x3b0 [ 284.168143][ T9339] ? lockdep_hardirqs_on+0x9c/0x150 [ 284.168158][ T9339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.168175][ T9339] ? clear_bhb_loop+0x60/0xb0 [ 284.168197][ T9339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.168213][ T9339] RIP: 0033:0x7f5d52b8e929 [ 284.168230][ T9339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.168245][ T9339] RSP: 002b:00007f5d53a16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.168264][ T9339] RAX: ffffffffffffffda RBX: 00007f5d52db5fa0 RCX: 00007f5d52b8e929 [ 284.168276][ T9339] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000007 [ 284.168287][ T9339] RBP: 00007f5d53a16090 R08: 0000000000000000 R09: 0000000000000000 [ 284.168298][ T9339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.168308][ T9339] R13: 0000000000000000 R14: 00007f5d52db5fa0 R15: 00007fff08c4aec8 [ 284.168340][ T9339] [ 284.168347][ T9339] ERROR: Out of memory at tomoyo_realpath_from_path. [ 284.427023][ T9351] netlink: 'syz.3.1092': attribute type 10 has an invalid length. [ 285.306867][ T9351] veth0_macvtap: left promiscuous mode [ 285.765253][ T9373] sctp: [Deprecated]: syz.3.1101 (pid 9373) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.765253][ T9373] Use struct sctp_sack_info instead [ 285.818548][ T9379] FAULT_INJECTION: forcing a failure. [ 285.818548][ T9379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.834992][ T9379] CPU: 1 UID: 0 PID: 9379 Comm: syz.4.1102 Not tainted 6.16.0-rc3-syzkaller-g212ec9229567 #0 PREEMPT(full) [ 285.835017][ T9379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 285.835028][ T9379] Call Trace: [ 285.835035][ T9379] [ 285.835042][ T9379] dump_stack_lvl+0x189/0x250 [ 285.835071][ T9379] ? __pfx____ratelimit+0x10/0x10 [ 285.835088][ T9379] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.835112][ T9379] ? __pfx__printk+0x10/0x10 [ 285.835131][ T9379] ? __might_fault+0xb0/0x130 [ 285.835161][ T9379] should_fail_ex+0x414/0x560 [ 285.835188][ T9379] _copy_from_user+0x2d/0xb0 [ 285.835208][ T9379] generic_map_update_batch+0x572/0x7f0 [ 285.835239][ T9379] ? __pfx_generic_map_update_batch+0x10/0x10 [ 285.835258][ T9379] ? __fget_files+0x2a/0x420 [ 285.835285][ T9379] ? __pfx_generic_map_update_batch+0x10/0x10 [ 285.835302][ T9379] bpf_map_do_batch+0x369/0x5f0 [ 285.835326][ T9379] __sys_bpf+0x384/0x860 [ 285.835348][ T9379] ? __pfx___sys_bpf+0x10/0x10 [ 285.835385][ T9379] ? rcu_is_watching+0x15/0xb0 [ 285.835412][ T9379] __x64_sys_bpf+0x7c/0x90 [ 285.835430][ T9379] do_syscall_64+0xfa/0x3b0 [ 285.835449][ T9379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.835464][ T9379] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 285.835480][ T9379] ? clear_bhb_loop+0x60/0xb0 [ 285.835498][ T9379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.835513][ T9379] RIP: 0033:0x7f56e2b8e929 [ 285.835528][ T9379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.835541][ T9379] RSP: 002b:00007f56e39f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 285.835559][ T9379] RAX: ffffffffffffffda RBX: 00007f56e2db5fa0 RCX: 00007f56e2b8e929 [ 285.835570][ T9379] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 285.835580][ T9379] RBP: 00007f56e39f0090 R08: 0000000000000000 R09: 0000000000000000 [ 285.835589][ T9379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.835598][ T9379] R13: 0000000000000000 R14: 00007f56e2db5fa0 R15: 00007fff0c4ffd08 [ 285.835623][ T9379] [ 286.182242][ T9385] netlink: 'syz.2.1105': attribute type 21 has an invalid length. [ 286.281883][ T9385] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1105'. [ 286.956562][ T9404] netlink: 'syz.2.1110': attribute type 3 has an invalid length. [ 286.982574][ T9404] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.1110'. [ 287.123736][ T51] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 287.219182][ T9415] netlink: 'syz.0.1114': attribute type 10 has an invalid length. [ 287.435464][ T9420] netlink: 22 bytes leftover after parsing attributes in process `syz.4.1116'. [ 287.868262][ T9435] netlink: 'syz.1.1120': attribute type 39 has an invalid length. [ 288.061877][ T9437] syzkaller0: entered promiscuous mode [ 288.088804][ T9437] syzkaller0: entered allmulticast mode [ 288.735257][ T9454] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.1126'. [ 288.933597][ T9464] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1130'. [ 289.420731][ T9474] netlink: 'syz.0.1132': attribute type 3 has an invalid length. [ 289.457513][ T9474] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.1132'. [ 291.128867][ T9489] netlink: 'syz.1.1138': attribute type 39 has an invalid length. [ 291.438089][ T9509] netlink: 'syz.3.1144': attribute type 3 has an invalid length. [ 291.473928][ T9509] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.1144'. [ 292.381051][ T9521] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1149'. [ 292.805948][ T9540] tun0: tun_chr_ioctl cmd 1074025677 [ 292.813571][ T9540] tun0: linktype set to 864 [ 292.879334][ T9536] netlink: 'syz.4.1153': attribute type 10 has an invalid length. [ 292.956991][ T9536] bond0: (slave bond_slave_0): Releasing backup interface [ 293.006059][ T9546] netlink: 'syz.4.1153': attribute type 12 has an invalid length. [ 293.052637][ T9546] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1153'. [ 293.083287][ T9548] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 293.315771][ T9555] netlink: 'syz.1.1160': attribute type 3 has an invalid length. [ 293.372569][ T9555] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.1160'. [ 297.043093][ T9597] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1174'. [ 298.247431][ T9636] ------------[ cut here ]------------ [ 298.253313][ T9636] verifier bug: expected array map for tail call(1) [ 298.279045][ T9636] WARNING: CPU: 0 PID: 9636 at kernel/bpf/verifier.c:11084 record_func_key+0x2d6/0x490 [ 298.288867][ T9636] Modules linked in: [ 298.292996][ T9636] CPU: 0 UID: 0 PID: 9636 Comm: syz.2.1188 Not tainted 6.16.0-rc3-syzkaller-g212ec9229567 #0 PREEMPT(full) [ 298.304596][ T9636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 298.315386][ T9636] RIP: 0010:record_func_key+0x2d6/0x490 [ 298.320988][ T9636] Code: 09 cc e8 cd 64 e3 ff 80 3d 78 15 ae 0d 01 74 ba e8 bf 64 e3 ff c6 05 6a 15 ae 0d 01 90 48 c7 c7 e0 e3 91 8b e8 bb 07 a7 ff 90 <0f> 0b 90 90 eb 9f e8 9f 64 e3 ff eb 05 e8 98 64 e3 ff 48 8b 5c 24 [ 298.341270][ T9636] RSP: 0018:ffffc9000f5eec70 EFLAGS: 00010246 [ 298.347656][ T9636] RAX: 851187b36800f300 RBX: dffffc0000000000 RCX: 0000000000080000 [ 298.355754][ T9636] RDX: ffffc9000c3e9000 RSI: 000000000000575f RDI: 0000000000005760 [ 298.363814][ T9636] RBP: 0000000000000001 R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 298.371904][ T9636] R10: dffffc0000000000 R11: ffffed10170c4853 R12: ffff888053282000 [ 298.379991][ T9636] R13: ffff888053287000 R14: ffff888023ac8000 R15: 1ffff11004759006 [ 298.388176][ T9636] FS: 00007f08a7df16c0(0000) GS:ffff888125c4d000(0000) knlGS:0000000000000000 [ 298.397248][ T9636] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 298.403933][ T9636] CR2: 000000110c318e77 CR3: 0000000076700000 CR4: 00000000003526f0 [ 298.411941][ T9636] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 298.420123][ T9636] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 298.428180][ T9636] Call Trace: [ 298.431491][ T9636] [ 298.434528][ T9636] check_helper_call+0x2fb8/0x6b60 [ 298.439996][ T9636] ? __pfx_check_helper_call+0x10/0x10 [ 298.445748][ T9636] ? verbose+0x10a/0x180 [ 298.450045][ T9636] ? bpf_vlog_reset+0x1db/0x340 [ 298.455172][ T9636] ? print_insn_state+0x106/0x170 [ 298.460231][ T9636] do_check+0x95ec/0xe080 [ 298.464641][ T9636] ? unwind_get_return_address+0x4d/0x90 [ 298.470315][ T9636] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 298.476594][ T9636] ? bpf_prog_load+0x1318/0x1930 [ 298.481561][ T9636] ? __x64_sys_bpf+0x7c/0x90 [ 298.486231][ T9636] ? do_syscall_64+0xfa/0x3b0 [ 298.490955][ T9636] ? __pfx_do_check+0x10/0x10 [ 298.495708][ T9636] ? __pfx_verbose+0x10/0x10 [ 298.500322][ T9636] ? __pfx_disasm_kfunc_name+0x10/0x10 [ 298.505863][ T9636] ? __asan_memset+0x22/0x50 [ 298.510491][ T9636] ? init_func_state+0x1ddf/0x2d20 [ 298.515703][ T9636] do_check_common+0x188f/0x23f0 [ 298.520680][ T9636] bpf_check+0x10252/0x1a5d0 [ 298.525369][ T9636] ? __lock_acquire+0xab9/0xd20 [ 298.530292][ T9636] ? is_bpf_text_address+0x26/0x2b0 [ 298.535765][ T9636] ? is_bpf_text_address+0x292/0x2b0 [ 298.541396][ T9636] ? is_bpf_text_address+0x26/0x2b0 [ 298.546931][ T9636] ? __kernel_text_address+0xd/0x40 [ 298.552176][ T9636] ? unwind_get_return_address+0x4d/0x90 [ 298.557921][ T9636] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 298.564178][ T9636] ? __pfx_bpf_check+0x10/0x10 [ 298.568983][ T9636] ? __lock_acquire+0xab9/0xd20 [ 298.573949][ T9636] ? __pfx___mutex_trylock_common+0x10/0x10 [ 298.579879][ T9636] ? css_rstat_updated+0x1a5/0xca0 [ 298.585092][ T9636] ? pcpu_block_update+0x1b5/0x8d0 [ 298.590310][ T9636] ? __lock_acquire+0xab9/0xd20 [ 298.595292][ T9636] ? ktime_get_with_offset+0x8c/0x2a0 [ 298.600705][ T9636] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 298.607163][ T9636] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.612454][ T9636] ? ktime_get_with_offset+0x8c/0x2a0 [ 298.617847][ T9636] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 298.624194][ T9636] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 298.630835][ T9636] ? bpf_obj_name_cpy+0x194/0x1e0 [ 298.635948][ T9636] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 298.641175][ T9636] ? security_bpf_prog_load+0x7f/0x310 [ 298.647031][ T9636] bpf_prog_load+0x1318/0x1930 [ 298.651843][ T9636] ? __pfx_bpf_prog_load+0x10/0x10 [ 298.657287][ T9636] ? bpf_lsm_bpf+0x9/0x20 [ 298.661645][ T9636] ? security_bpf+0x7e/0x300 [ 298.666333][ T9636] __sys_bpf+0x5f1/0x860 [ 298.670609][ T9636] ? __pfx___sys_bpf+0x10/0x10 [ 298.675493][ T9636] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 298.682191][ T9636] ? rcu_is_watching+0x15/0xb0 [ 298.687045][ T9636] __x64_sys_bpf+0x7c/0x90 [ 298.691492][ T9636] do_syscall_64+0xfa/0x3b0 [ 298.696170][ T9636] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.701407][ T9636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.707538][ T9636] ? clear_bhb_loop+0x60/0xb0 [ 298.712265][ T9636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.718304][ T9636] RIP: 0033:0x7f08a6f8e929 [ 298.722820][ T9636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.742516][ T9636] RSP: 002b:00007f08a7df1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 298.751269][ T9636] RAX: ffffffffffffffda RBX: 00007f08a71b5fa0 RCX: 00007f08a6f8e929 [ 298.759527][ T9636] RDX: 0000000000000094 RSI: 00002000000008c0 RDI: 0000000000000005 [ 298.767586][ T9636] RBP: 00007f08a7010b39 R08: 0000000000000000 R09: 0000000000000000 [ 298.775875][ T9636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.783999][ T9636] R13: 0000000000000000 R14: 00007f08a71b5fa0 R15: 00007ffded9b75b8 [ 298.792005][ T9636] [ 298.795126][ T9636] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 298.802431][ T9636] CPU: 0 UID: 0 PID: 9636 Comm: syz.2.1188 Not tainted 6.16.0-rc3-syzkaller-g212ec9229567 #0 PREEMPT(full) [ 298.813898][ T9636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 298.823951][ T9636] Call Trace: [ 298.827227][ T9636] [ 298.830166][ T9636] dump_stack_lvl+0x99/0x250 [ 298.834779][ T9636] ? __asan_memcpy+0x40/0x70 [ 298.839389][ T9636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.844598][ T9636] ? __pfx__printk+0x10/0x10 [ 298.849217][ T9636] panic+0x2db/0x790 [ 298.853166][ T9636] ? __pfx_panic+0x10/0x10 [ 298.857640][ T9636] __warn+0x31b/0x4b0 [ 298.861644][ T9636] ? record_func_key+0x2d6/0x490 [ 298.866600][ T9636] ? record_func_key+0x2d6/0x490 [ 298.871560][ T9636] report_bug+0x2be/0x4f0 [ 298.875893][ T9636] ? record_func_key+0x2d6/0x490 [ 298.880834][ T9636] ? record_func_key+0x2d6/0x490 [ 298.885784][ T9636] ? record_func_key+0x2d8/0x490 [ 298.890721][ T9636] handle_bug+0x84/0x160 [ 298.894961][ T9636] exc_invalid_op+0x1a/0x50 [ 298.899462][ T9636] asm_exc_invalid_op+0x1a/0x20 [ 298.904441][ T9636] RIP: 0010:record_func_key+0x2d6/0x490 [ 298.910047][ T9636] Code: 09 cc e8 cd 64 e3 ff 80 3d 78 15 ae 0d 01 74 ba e8 bf 64 e3 ff c6 05 6a 15 ae 0d 01 90 48 c7 c7 e0 e3 91 8b e8 bb 07 a7 ff 90 <0f> 0b 90 90 eb 9f e8 9f 64 e3 ff eb 05 e8 98 64 e3 ff 48 8b 5c 24 [ 298.929671][ T9636] RSP: 0018:ffffc9000f5eec70 EFLAGS: 00010246 [ 298.935747][ T9636] RAX: 851187b36800f300 RBX: dffffc0000000000 RCX: 0000000000080000 [ 298.943719][ T9636] RDX: ffffc9000c3e9000 RSI: 000000000000575f RDI: 0000000000005760 [ 298.951694][ T9636] RBP: 0000000000000001 R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 298.959678][ T9636] R10: dffffc0000000000 R11: ffffed10170c4853 R12: ffff888053282000 [ 298.967659][ T9636] R13: ffff888053287000 R14: ffff888023ac8000 R15: 1ffff11004759006 [ 298.975655][ T9636] check_helper_call+0x2fb8/0x6b60 [ 298.980795][ T9636] ? __pfx_check_helper_call+0x10/0x10 [ 298.986266][ T9636] ? verbose+0x10a/0x180 [ 298.990524][ T9636] ? bpf_vlog_reset+0x1db/0x340 [ 298.995380][ T9636] ? print_insn_state+0x106/0x170 [ 299.000418][ T9636] do_check+0x95ec/0xe080 [ 299.004749][ T9636] ? unwind_get_return_address+0x4d/0x90 [ 299.010388][ T9636] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 299.016567][ T9636] ? bpf_prog_load+0x1318/0x1930 [ 299.021507][ T9636] ? __x64_sys_bpf+0x7c/0x90 [ 299.026108][ T9636] ? do_syscall_64+0xfa/0x3b0 [ 299.030808][ T9636] ? __pfx_do_check+0x10/0x10 [ 299.035499][ T9636] ? __pfx_verbose+0x10/0x10 [ 299.040086][ T9636] ? __pfx_disasm_kfunc_name+0x10/0x10 [ 299.045546][ T9636] ? __asan_memset+0x22/0x50 [ 299.050263][ T9636] ? init_func_state+0x1ddf/0x2d20 [ 299.055430][ T9636] do_check_common+0x188f/0x23f0 [ 299.060398][ T9636] bpf_check+0x10252/0x1a5d0 [ 299.065034][ T9636] ? __lock_acquire+0xab9/0xd20 [ 299.069912][ T9636] ? is_bpf_text_address+0x26/0x2b0 [ 299.075131][ T9636] ? is_bpf_text_address+0x292/0x2b0 [ 299.080449][ T9636] ? is_bpf_text_address+0x26/0x2b0 [ 299.085683][ T9636] ? __kernel_text_address+0xd/0x40 [ 299.090982][ T9636] ? unwind_get_return_address+0x4d/0x90 [ 299.096620][ T9636] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 299.102874][ T9636] ? __pfx_bpf_check+0x10/0x10 [ 299.107646][ T9636] ? __lock_acquire+0xab9/0xd20 [ 299.112512][ T9636] ? __pfx___mutex_trylock_common+0x10/0x10 [ 299.118406][ T9636] ? css_rstat_updated+0x1a5/0xca0 [ 299.123532][ T9636] ? pcpu_block_update+0x1b5/0x8d0 [ 299.128657][ T9636] ? __lock_acquire+0xab9/0xd20 [ 299.133517][ T9636] ? ktime_get_with_offset+0x8c/0x2a0 [ 299.138893][ T9636] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 299.145136][ T9636] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.150334][ T9636] ? ktime_get_with_offset+0x8c/0x2a0 [ 299.155803][ T9636] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 299.162102][ T9636] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 299.168714][ T9636] ? bpf_obj_name_cpy+0x194/0x1e0 [ 299.173747][ T9636] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 299.178951][ T9636] ? security_bpf_prog_load+0x7f/0x310 [ 299.184420][ T9636] bpf_prog_load+0x1318/0x1930 [ 299.189202][ T9636] ? __pfx_bpf_prog_load+0x10/0x10 [ 299.194346][ T9636] ? bpf_lsm_bpf+0x9/0x20 [ 299.198862][ T9636] ? security_bpf+0x7e/0x300 [ 299.203460][ T9636] __sys_bpf+0x5f1/0x860 [ 299.207708][ T9636] ? __pfx___sys_bpf+0x10/0x10 [ 299.212494][ T9636] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 299.219118][ T9636] ? rcu_is_watching+0x15/0xb0 [ 299.223895][ T9636] __x64_sys_bpf+0x7c/0x90 [ 299.228317][ T9636] do_syscall_64+0xfa/0x3b0 [ 299.232824][ T9636] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.238021][ T9636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.244097][ T9636] ? clear_bhb_loop+0x60/0xb0 [ 299.248870][ T9636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.254766][ T9636] RIP: 0033:0x7f08a6f8e929 [ 299.259194][ T9636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.278900][ T9636] RSP: 002b:00007f08a7df1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 299.287323][ T9636] RAX: ffffffffffffffda RBX: 00007f08a71b5fa0 RCX: 00007f08a6f8e929 [ 299.295304][ T9636] RDX: 0000000000000094 RSI: 00002000000008c0 RDI: 0000000000000005 [ 299.303286][ T9636] RBP: 00007f08a7010b39 R08: 0000000000000000 R09: 0000000000000000 [ 299.311255][ T9636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.319230][ T9636] R13: 0000000000000000 R14: 00007f08a71b5fa0 R15: 00007ffded9b75b8 [ 299.327221][ T9636] [ 299.330496][ T9636] Kernel Offset: disabled [ 299.334822][ T9636] Rebooting in 86400 seconds..