last executing test programs: 5.478490245s ago: executing program 4 (id=1405): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x53}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x3}, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x20000800) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) 5.370734745s ago: executing program 4 (id=1406): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x48, 0x9, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004011) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000040), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x24000059) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e7", 0x4b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000002200)=""/254, 0xfe}, {&(0x7f00000007c0)=""/243, 0xf3}, {&(0x7f0000000f00)=""/4054, 0xfd6}, {&(0x7f0000000340)=""/210, 0xd2}, {&(0x7f0000000500)=""/196, 0xc4}, {&(0x7f0000001f00)=""/229, 0xe5}, {&(0x7f0000003340)=""/4082, 0xff2}, {&(0x7f0000000e00)=""/216, 0xd8}, {&(0x7f0000000680)=""/194, 0xc2}, {&(0x7f0000000a40)=""/194, 0xc2}, {&(0x7f0000000240)=""/117, 0x75}, {&(0x7f0000000640)=""/31, 0x1f}], 0xc}, 0x40012100) recvmsg$kcm(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000007440000000c0a01020000000000000000010000000900020073797a3200000000180003801400008004000180080003400000000104000b800900010073797a3200000000140000001000010000000000000000000000000a"], 0xb0}}, 0x0) 4.837265452s ago: executing program 0 (id=1409): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r4, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40040) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x8a, &(0x7f0000000040), 0x4) 4.682882516s ago: executing program 0 (id=1410): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7ffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 4.676294038s ago: executing program 0 (id=1411): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x9c5, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x104040, 0x0, 0x0, 0x3, 0x3fe, 0x7fffffff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0x0, 0x8, 0x8}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x2, &(0x7f0000000cc0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8dfc}], &(0x7f0000000100)='GPL\x00', 0x7, 0x24, &(0x7f0000000300)=""/36, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x1, 0x5, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[0x1, r1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000000000000000000000200000085000000c400000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b40)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000b80)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x404, 0x9}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r4, 0x15b4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@fallback, 0x9, 0x0, 0x8, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0], &(0x7f0000000700)=[0x0, 0x0]}, 0x40) mkdir(&(0x7f0000000000)='./file\x00', 0x0) mkdir(&(0x7f0000000040)='./file/file0/..//file0/file0\x00', 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r2, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f00000007c0)=[0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f00000008c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x25, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000bc0)={0x0, 0x4, 0x18}, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080304000000e8fe03a1180015000600142603600e1208000f0000810401a80016040a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x8008) socket$kcm(0x10, 0x2, 0x0) 4.558923518s ago: executing program 0 (id=1412): socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x7, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], 0x0}, 0x94) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000900000000000000213f0000c5"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) setsockopt$sock_attach_bpf(r0, 0x107, 0xe, &(0x7f0000000000)=r3, 0x4) 4.494992805s ago: executing program 4 (id=1413): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00'}, 0x3d) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2040}, 0x0, 0xd, 0xffffffffffffffff, 0x0) close(r1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000900)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0x36, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x48, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="010000000900000007000000040000000c800000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="40000000ff0000000300"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000008c0), 0x1}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0600000004000000ff0f000005000000000000001a46a8688b8558cc0bda3e87ec4f25700dd504b62d078308bd6eb286cabcd5f2cc4729eaba4382286e0a1c73557440aef8a141924419bdc6ab42b292dc5422a09a93001e95cd66b0345274cc2db3d9fd24b684c2a71c2383d8e761a750c731f3d2f377775c3388d2de8d1016f8bd1fd2209bbd6d38255a47b6bae17133dd9c9a1e2892fbb8e0587f116db9284ff3ef030f29f075324a4c35d9a032243dd0bed38b930af70cc9329200670320da55edc4aab72454171a138b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000001380)=ANY=[@ANYBLOB="18000000000000000000000000000000181100000d23c0ebd8c2ff9771da6c36789f4246f8ad741286b66c9e5b107f9064d42f667a645840650cb58ad36fee1bcbed7cdcf74f4f201752587e55ead5908796a29d7de358725e9956d303cf34278c888eda6e2a89f9421cf81554ef881681659e3f99f55fd13119c21ab94c96075c0273e7a4bfa17c516920", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, 0x0, &(0x7f0000000000)=""/31}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) setsockopt$sock_attach_bpf(r0, 0x6, 0xe, &(0x7f00000000c0), 0xd8) 3.847318943s ago: executing program 1 (id=1415): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7ffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 3.754063504s ago: executing program 4 (id=1417): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) sendmsg$nl_xfrm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000001640)=@allocspi={0xf8, 0x28, 0x339, 0x0, 0x0, {{{@in=@multicast1, @in=@multicast1, 0x0, 0x376}, {@in, 0x20, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x0, 0x0, 0x2}}, 0x0, 0x4}}, 0xf8}}, 0x0) 3.556906998s ago: executing program 1 (id=1420): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) 3.383554602s ago: executing program 4 (id=1421): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7ffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 3.182487705s ago: executing program 1 (id=1423): socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000950000000000efe5cee5c7767a81064752df03db2163d283e188b66648e58fcbbd06e93373dabe050edaa89fd6026b3b7e4def9a0b2a32712be8e088f63e95d5548b9be37189469fab796192438aad7ee06bb10e2e8af5ab7e60283d772c22b11ec919f33d1ea6a5862f7dfa07c6a0fddadcf806626801526ed85ee9cef69b0884a53e3a126f37eab1961932d9b48c882b3718b1ba04a4c8d4af9caed42c8b0d96883a"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000780)='ns/pid_for_children\x00') bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x6}, 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4008744b, &(0x7f0000000180)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8264, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xe, 0x439}, 0x2018, 0xffffffff, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) r5 = socket$kcm(0x15, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) recvmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffd}, 0x100) 3.156038105s ago: executing program 4 (id=1424): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x9, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcece}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x0, 0x0, 0x49, 0x5}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'wg1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.304613405s ago: executing program 3 (id=1427): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x8110, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x57}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_config_ext={0x3}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0xfffffffd, 0x0, 0x40}, 0x0, 0xffffffffffffffff, r0, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) r2 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r2}, 0x20) recvmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/249, 0xf9}], 0x1}, 0x40000140) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r3, &(0x7f0000001dc0)={&(0x7f0000000940)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f0000000d00)=[{&(0x7f00000009c0)="e6df877a623bcc70b46fca126996", 0xe}, {&(0x7f0000000a00)="515efd58834e3878eb1d9c8eaddfa25735e92fd325433229831656ed60d93163cefc5b2eb7ccbc1a9b7ebc44eab4f209cbf84325e7239ce53a22d7e60a3629615e9a3cdaa018a87240", 0x49}, {&(0x7f0000000a80)="ab0dae1b02db682a5c3da331dc85d1044746cc5eb8e9d59422146a30759363b85fe20df16c73e518d67d5b9cf7b60390c4dfa128ee0713cbaae817e276135d1049b8a87064152548efee22318f332c528288ebee39bc28836ce33e993a518498b34c0e9edc6488b72ac5cde1c36c1d42800fc21d07cce983356b2022fd0151aeb062c8c1d9c859b5ece6b6d378da2687ef8d4c581fdc1c39d73333b9e509d53684a995d5a8c4a5f17cd3c9b1198a31aa8e1f7190c556eb0719b0a1bd2a97f58aa386633034bd14e6f69380a688391a4e4d544e6439ac45f248ada44ba1d436beaf6451faa435b0bcb8a0d97b", 0xec}, {&(0x7f0000000b80)="6c4cc139d0cef49f43466e7239bfb09481f7c3ae858134e15d3aa3c88444d6e39d2fc698cc817ab3d0b5e63ce39ca2ed7de7e4e95b408ef5558ecd280850d742fa40be8a845aacbf26680f164a76e90015b2adfcb3c33783af2272f957d27c0eb1fbd781f84fe2965ee34c6561ba595709610556789f9dea73dfafd9470ef36c1752b94caf80d369b09cf93b3482126f6c10fb6a91e8959c1455ebd92c", 0x9d}, {&(0x7f0000000c40)="e2a42fb6ce566f77b9197bd8b89574771df34da1014e94e7e6ae8aeaedbcdcbbd69e13080d72868fbae2427b339fea74808454d2dc3ec4f8cf8950813af1b74369a13ef065f7c69355f190c6a945831e0bdc8fb24a531278f628e7d39629dc9c9a57d62c7abfa3982754dd8d6234cfaa687fb557818c2246fd409ff1c072389cb21d85718d27d969ca8d0dc90cb76d59f9f31d2772fee449af2be49d09a0b63e6c3a2bcf9d4e4a5aee99b3b44ba4361164d126c9c1aebb0a5a63", 0xba}], 0x5, &(0x7f0000000d80)=[{0x1010, 0x29, 0x1, "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"}, {0x30, 0x110, 0x80000000, "0caeec406e7f8be1ad3228710b8571bdc7b31e8db6056dbbcf"}], 0x1040}, 0x28040) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002380)={r6, 0xe0, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000002080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f00000020c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002100)=[0x0, 0x0, 0x0], 0x0, 0x7d, &(0x7f0000002140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000021c0), &(0x7f0000002200), 0x8, 0x55, 0x8, 0x8, &(0x7f0000002240)}}, 0x10) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000880)={0x1d, r7, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18, &(0x7f00000018c0)={&(0x7f00000008c0)="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", 0x1000}, 0x1, 0x0, 0x0, 0x20000400}, 0x44014) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8922, &(0x7f0000000080)) r9 = syz_clone(0x10000000, &(0x7f0000000440)="bb31428192a039498cb2e5d56fc9b86508fd03921ea8c11e89e00bd0d0b32a6094a2c8a7150c6aa87c5555b09dea4d4f091970fadec43519c629603201e5f59283d52de6fcdf86c6118d21b242bdabe25e00fde79aa30f7d131a4037001467d6ada3bab1268bd158c6d4e22aeaef7685d9f4498a6541731740dfdae02720a2d3d25e8c886af4cf2ebdba46c315553be4614da0fbac92cc7f57843c7fe3", 0x9d, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="b6924a6d5494d5e082cb2a9201f3e479a2e44d0dd06f57076ea3f28a149da5b76b79216eef37342c551836e26037a9875fada7a250547233d9f667ebd37a02b3703dccbcba0f2f310e7ee0375bc502b501b9b4260c1f7c147e52eeac451157a4730a52428826316de1680e10229a7f7ea96716fd1c67a5b841104c896e4ec5a485cb2aaff6fabf6daf113b1bb108204afe59e074678fd4d0fcfdb7e1f5334a18aabd383af09fa672cf543a63d14a59c61d3ff533dc56beb2b26c88a07993777cf0533a90381db424943740901bb03147e6393bd5d3cf8d3991f026fa64242afaff8269e109c2d79536d221") sendmsg$nl_generic(r8, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x138, 0x31, 0x800, 0x70bd29, 0x25dfdbfe, {0x1f}, [@typed={0x8, 0x46, 0x0, 0x0, @ipv4=@local}, @typed={0xc, 0xe8, 0x0, 0x0, @u64=0x5345}, @generic="375097d4f84bd19ee8bfc391553b8ca083ad2d5c6e2e207fa5c7ae9a3b7439701758e027ac715daf70c1d22ba6761258e035be4470dc903a361a8184b92c76da7830327f628d31191d67aec098602582f93f0b89fd8fedbf387153c3bbe1c8d5ca6b21400795d69e1416684cb741d657b7e771fd3c7c941e224bdb6fd87cc43e15aac63cbf6f50f45214f05045fcd83d90461d6f0e34c94879ce7746fe7eb7ee4f6810d84a", @generic="857169829157facdd58a0f1dad04ad6c8bcd0965328fc36d5b3fb745f4d529986e45f9b2f509a858b4bcca6ab7cb7e5c5e859ca5c6a487eea1585726b2805fd5f37cdd0f4b8b170a635cb2f325e8ff1edf2cf1ab9a38", @nested={0x14, 0x2f, 0x0, 0x1, [@typed={0x6, 0x14b, 0x0, 0x0, @str='\'\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @pid=r9}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x40}, 0x810) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}, 0x10040) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000000)=r11, 0x10) 2.11201237s ago: executing program 2 (id=1428): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x53}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x3}, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x20000800) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) 1.916774298s ago: executing program 2 (id=1429): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0xc810) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001000), 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf49289808e355a43, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800db68f240f6ae81dc8c06a100000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001500)={0x6, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000000000000009161e89a003c712a959e82b6b13e6469d0ac11d517efc9165772780205c5a9fe8cd255271bd358c312f9f964fdef6e2d21a13ca7d0ebe56eca4d372e34eaa775a593904ba88bf09dab59"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000001280)=""/156, 0xfa, 0x9c, 0x0, 0x9, 0x10000}, 0x28) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10) close(0x3) 1.540770969s ago: executing program 2 (id=1430): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0xb, 0x8000, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x0, 0x7, 0x39b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r2, &(0x7f0000000600), &(0x7f0000000080)=""/61}, 0x20) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x7c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xe, 0xfd90, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe40}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.454796552s ago: executing program 1 (id=1431): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00'}, 0x3d) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2040}, 0x0, 0xd, 0xffffffffffffffff, 0x0) close(r1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000900)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0x36, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x48, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="010000000900000007000000040000000c800000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="40000000ff0000000300"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r4) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0600000004000000ff0f000005000000000000001a46a8688b8558cc0bda3e87ec4f25700dd504b62d078308bd6eb286cabcd5f2cc4729eaba4382286e0a1c73557440aef8a141924419bdc6ab42b292dc5422a09a93001e95cd66b0345274cc2db3d9fd24b684c2a71c2383d8e761a750c731f3d2f377775c3388d2de8d1016f8bd1fd2209bbd6d38255a47b6bae17133dd9c9a1e2892fbb8e0587f116db9284ff3ef030f29f075324a4c35d9a032243dd0bed38b930af70cc9329200670320da55edc4aab72454171a138b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000001380)=ANY=[@ANYBLOB="18000000000000000000000000000000181100000d23c0ebd8c2ff9771da6c36789f4246f8ad741286b66c9e5b107f9064d42f667a645840650cb58ad36fee1bcbed7cdcf74f4f201752587e55ead5908796a29d7de358725e9956d303cf34278c888eda6e2a89f9421cf81554ef881681659e3f99f55fd13119c21ab94c96075c0273e7a4bfa17c516920", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r7}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, 0x0, &(0x7f0000000000)=""/31}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='timer_start\x00', r8}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) setsockopt$sock_attach_bpf(r0, 0x6, 0xe, &(0x7f00000000c0), 0xd8) 1.390104527s ago: executing program 0 (id=1432): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, 0x0, 0x0) close(0x3) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x46, &(0x7f00000002c0), 0x161) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup(r6, &(0x7f0000000780)='syz1\x00', 0x1ff) 1.373842909s ago: executing program 3 (id=1433): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) 913.617424ms ago: executing program 3 (id=1434): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7ffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 674.553449ms ago: executing program 0 (id=1435): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20040800) sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x8004) sendmsg$inet(r3, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r4, &(0x7f00000039c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af014a31ba377a1b2cc32b38d3aa2a70297400"/57, 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c50a0000000000007910480000000000610444000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 582.932282ms ago: executing program 3 (id=1436): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 434.407587ms ago: executing program 1 (id=1437): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x10, 0x9}, 0x14105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x10000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x122) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 343.613326ms ago: executing program 2 (id=1438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d300000000000000800000000000000140000001100"], 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) 336.273025ms ago: executing program 3 (id=1439): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x94, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x828, 0x0, 0x0, 0x0, 0x156e, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x9a0c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xafe6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000fc0)="d8", 0x1}], 0x1}, 0x4000000) 162.682668ms ago: executing program 2 (id=1440): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff00000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000600000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 46.739466ms ago: executing program 2 (id=1441): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 4.226794ms ago: executing program 3 (id=1442): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) 0s ago: executing program 1 (id=1443): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): owmem_reserve[]: 0 2497 2499 2499 2499 [ 134.001227][ T6722] Node 0 DMA32 free:1378588kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24188kB inactive_anon:0kB active_file:58896kB inactive_file:157596kB unevictable:1536kB writepending:1128kB present:3129332kB managed:2557484kB mlocked:0kB bounce:0kB free_pcp:38740kB local_pcp:17456kB free_cma:0kB [ 134.062339][ T6722] lowmem_reserve[]: 0 0 1 1 1 [ 134.070313][ T6722] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 134.118231][ T6722] lowmem_reserve[]: 0 0 0 0 0 [ 134.124479][ T6722] Node 1 Normal free:3887060kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19456kB local_pcp:9152kB free_cma:0kB [ 134.183236][ T6722] lowmem_reserve[]: 0 0 0 0 0 [ 134.188028][ T6722] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 134.221843][ T6722] Node 0 DMA32: 1329*4kB (UM) 595*8kB (UME) 244*16kB (UME) 292*32kB (UME) 160*64kB (UME) 89*128kB (UME) 60*256kB (UM) 11*512kB (UM) 9*1024kB (UM) 10*2048kB (UME) 313*4096kB (M) = 1377692kB [ 134.299925][ T6722] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 134.337553][ T6722] Node 1 Normal: 161*4kB (UME) 46*8kB (UME) 44*16kB (UME) 61*32kB (UME) 14*64kB (UME) 8*128kB (UME) 2*256kB (M) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3887060kB [ 134.403549][ T6722] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 134.440213][ T6722] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 134.454065][ T6749] lo speed is unknown, defaulting to 1000 [ 134.464430][ T6722] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 134.491480][ T6722] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 134.512671][ T6722] 55920 total pagecache pages [ 134.538902][ T6722] 0 pages in swap cache [ 134.547670][ T6722] Free swap = 124996kB [ 134.558458][ T6722] Total swap = 124996kB [ 134.588447][ T6722] 2097051 pages RAM [ 134.598017][ T6722] 0 pages HighMem/MovableOnly [ 134.616436][ T6722] 425654 pages reserved [ 134.631776][ T6722] 0 pages cma reserved [ 134.877125][ T6763] __nla_validate_parse: 5 callbacks suppressed [ 134.877149][ T6763] netlink: 26 bytes leftover after parsing attributes in process `syz.1.262'. [ 135.846386][ T6776] validate_nla: 4 callbacks suppressed [ 135.846407][ T6776] netlink: 'syz.3.266': attribute type 2 has an invalid length. [ 136.002048][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 136.041584][ T6778] netlink: 33 bytes leftover after parsing attributes in process `syz.1.268'. [ 136.073229][ T6778] netlink: 33 bytes leftover after parsing attributes in process `syz.1.268'. [ 136.721846][ T6790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.732032][ T6790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.822817][ T6790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.849594][ T6790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.121087][ T6798] lo speed is unknown, defaulting to 1000 [ 137.135479][ T6803] netlink: 26 bytes leftover after parsing attributes in process `syz.1.277'. [ 137.233770][ T6805] netlink: 'syz.2.279': attribute type 29 has an invalid length. [ 137.330599][ T6805] netlink: 'syz.2.279': attribute type 29 has an invalid length. [ 137.348812][ T6805] netlink: 'syz.2.279': attribute type 29 has an invalid length. [ 137.384458][ T6805] netlink: 'syz.2.279': attribute type 29 has an invalid length. [ 137.674893][ T6826] netlink: 'syz.3.284': attribute type 2 has an invalid length. [ 137.680968][ T6827] netlink: 40 bytes leftover after parsing attributes in process `syz.0.288'. [ 137.788172][ T6823] netlink: 'syz.2.285': attribute type 15 has an invalid length. [ 137.915415][ T6834] FAULT_INJECTION: forcing a failure. [ 137.915415][ T6834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.986121][ T6834] CPU: 1 UID: 0 PID: 6834 Comm: syz.1.289 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 137.986162][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 137.986175][ T6834] Call Trace: [ 137.986183][ T6834] [ 137.986192][ T6834] dump_stack_lvl+0x189/0x250 [ 137.986224][ T6834] ? __pfx____ratelimit+0x10/0x10 [ 137.986261][ T6834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.986286][ T6834] ? __pfx__printk+0x10/0x10 [ 137.986318][ T6834] ? __might_fault+0xb0/0x130 [ 137.986361][ T6834] should_fail_ex+0x414/0x560 [ 137.986395][ T6834] _copy_from_user+0x2d/0xb0 [ 137.986421][ T6834] generic_map_update_batch+0x572/0x7f0 [ 137.986459][ T6834] ? __pfx_generic_map_update_batch+0x10/0x10 [ 137.986483][ T6834] ? __fget_files+0x2a/0x420 [ 137.986511][ T6834] ? __pfx_generic_map_update_batch+0x10/0x10 [ 137.986533][ T6834] bpf_map_do_batch+0x369/0x5f0 [ 137.986572][ T6834] __sys_bpf+0x6af/0x870 [ 137.986603][ T6834] ? __pfx___sys_bpf+0x10/0x10 [ 137.986649][ T6834] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 137.986681][ T6834] ? __pfx_ksys_write+0x10/0x10 [ 137.986707][ T6834] ? rcu_is_watching+0x15/0xb0 [ 137.986737][ T6834] __x64_sys_bpf+0x7c/0x90 [ 137.986763][ T6834] do_syscall_64+0xfa/0x3b0 [ 137.986793][ T6834] ? lockdep_hardirqs_on+0x9c/0x150 [ 137.986821][ T6834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.986843][ T6834] ? clear_bhb_loop+0x60/0xb0 [ 137.986869][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.986890][ T6834] RIP: 0033:0x7ff84bf8ebe9 [ 137.986908][ T6834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.986926][ T6834] RSP: 002b:00007ff84cd61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 137.986948][ T6834] RAX: ffffffffffffffda RBX: 00007ff84c1b6090 RCX: 00007ff84bf8ebe9 [ 137.986963][ T6834] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 137.986977][ T6834] RBP: 00007ff84cd61090 R08: 0000000000000000 R09: 0000000000000000 [ 137.986990][ T6834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.987002][ T6834] R13: 00007ff84c1b6128 R14: 00007ff84c1b6090 R15: 00007ffd2e0693a8 [ 137.987036][ T6834] [ 138.560727][ T6843] netlink: 26 bytes leftover after parsing attributes in process `syz.3.292'. [ 138.764892][ T6853] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.296'. [ 138.775224][ T6853] net_ratelimit: 76 callbacks suppressed [ 138.775256][ T6853] netlink: zone id is out of range [ 138.841451][ T6853] netlink: zone id is out of range [ 138.873192][ T6853] netlink: get zone limit has 8 unknown bytes [ 138.960672][ T6851] netlink: 'syz.0.294': attribute type 2 has an invalid length. [ 139.056545][ T6851] netlink: 164 bytes leftover after parsing attributes in process `syz.0.294'. [ 139.096729][ T6858] lo speed is unknown, defaulting to 1000 [ 139.141896][ T6851] netlink: 'syz.0.294': attribute type 2 has an invalid length. [ 139.163536][ T6851] netlink: 164 bytes leftover after parsing attributes in process `syz.0.294'. [ 139.922532][ T6893] netlink: 'syz.2.310': attribute type 29 has an invalid length. [ 141.049987][ T6921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.318'. [ 141.227699][ T6925] FAULT_INJECTION: forcing a failure. [ 141.227699][ T6925] name failslab, interval 1, probability 0, space 0, times 1 [ 141.240603][ T6925] CPU: 1 UID: 0 PID: 6925 Comm: syz.3.320 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 141.240632][ T6925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 141.240644][ T6925] Call Trace: [ 141.240653][ T6925] [ 141.240663][ T6925] dump_stack_lvl+0x189/0x250 [ 141.240695][ T6925] ? __pfx____ratelimit+0x10/0x10 [ 141.240726][ T6925] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.240753][ T6925] ? __pfx__printk+0x10/0x10 [ 141.240795][ T6925] ? __pfx___might_resched+0x10/0x10 [ 141.240813][ T6925] ? fs_reclaim_acquire+0x7d/0x100 [ 141.240863][ T6925] should_fail_ex+0x414/0x560 [ 141.240902][ T6925] should_failslab+0xa8/0x100 [ 141.240937][ T6925] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 141.240968][ T6925] ? kobject_set_name_vargs+0x61/0x110 [ 141.241010][ T6925] kvasprintf+0xdc/0x190 [ 141.241041][ T6925] ? __pfx_kvasprintf+0x10/0x10 [ 141.241071][ T6925] ? __raw_spin_lock_init+0x45/0x100 [ 141.241107][ T6925] ? kvasprintf_const+0xe1/0x240 [ 141.241137][ T6925] kobject_set_name_vargs+0x61/0x110 [ 141.241174][ T6925] device_create+0x22f/0x2f0 [ 141.241204][ T6925] ? timer_init_key+0x171/0x2d0 [ 141.241236][ T6925] ? __pfx_device_create+0x10/0x10 [ 141.241263][ T6925] ? ieee80211_alloc_hw_nm+0x18d2/0x1f20 [ 141.241303][ T6925] mac80211_hwsim_new_radio+0x418/0x5340 [ 141.241343][ T6925] ? __pfx_stack_trace_save+0x10/0x10 [ 141.241374][ T6925] ? stack_depot_save_flags+0x40/0x860 [ 141.241402][ T6925] ? netlink_deliver_tap+0x19c/0x1b0 [ 141.241431][ T6925] ? netlink_unicast+0x741/0x9e0 [ 141.241454][ T6925] ? netlink_sendmsg+0x805/0xb30 [ 141.241482][ T6925] ? __sock_sendmsg+0x21c/0x270 [ 141.241528][ T6925] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 141.241553][ T6925] ? __nla_validate_parse+0x2400/0x2d40 [ 141.241583][ T6925] ? __sock_sendmsg+0x21c/0x270 [ 141.241606][ T6925] ? ____sys_sendmsg+0x505/0x830 [ 141.241647][ T6925] hwsim_new_radio_nl+0xea4/0x1b10 [ 141.241680][ T6925] ? __pfx___nla_validate_parse+0x10/0x10 [ 141.241736][ T6925] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 141.241786][ T6925] ? __nla_parse+0x40/0x60 [ 141.241825][ T6925] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 141.241864][ T6925] genl_family_rcv_msg_doit+0x215/0x300 [ 141.241893][ T6925] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 141.241929][ T6925] ? bpf_lsm_capable+0x9/0x20 [ 141.241951][ T6925] ? security_capable+0x7e/0x2e0 [ 141.241984][ T6925] genl_rcv_msg+0x60e/0x790 [ 141.242011][ T6925] ? __pfx_genl_rcv_msg+0x10/0x10 [ 141.242029][ T6925] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 141.242053][ T6925] ? perf_trace_lock_acquire+0xf5/0x410 [ 141.242082][ T6925] netlink_rcv_skb+0x208/0x470 [ 141.242106][ T6925] ? __lock_acquire+0xab9/0xd20 [ 141.242131][ T6925] ? __pfx_genl_rcv_msg+0x10/0x10 [ 141.242152][ T6925] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 141.242201][ T6925] ? down_read+0x1ad/0x2e0 [ 141.242233][ T6925] genl_rcv+0x28/0x40 [ 141.242251][ T6925] netlink_unicast+0x82c/0x9e0 [ 141.242288][ T6925] ? __pfx_netlink_unicast+0x10/0x10 [ 141.242314][ T6925] ? netlink_sendmsg+0x642/0xb30 [ 141.242336][ T6925] ? skb_put+0x11b/0x210 [ 141.242370][ T6925] netlink_sendmsg+0x805/0xb30 [ 141.242415][ T6925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.242453][ T6925] ? aa_sock_msg_perm+0xf1/0x1d0 [ 141.242490][ T6925] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 141.242514][ T6925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.242548][ T6925] __sock_sendmsg+0x21c/0x270 [ 141.242582][ T6925] ____sys_sendmsg+0x505/0x830 [ 141.242614][ T6925] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.242652][ T6925] ? import_iovec+0x74/0xa0 [ 141.242684][ T6925] ___sys_sendmsg+0x21f/0x2a0 [ 141.242711][ T6925] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.242769][ T6925] ? __fget_files+0x2a/0x420 [ 141.242811][ T6925] ? __fget_files+0x2a/0x420 [ 141.242828][ T6925] ? __fget_files+0x3a0/0x420 [ 141.242874][ T6925] __x64_sys_sendmsg+0x19b/0x260 [ 141.242903][ T6925] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 141.242943][ T6925] ? __pfx_ksys_write+0x10/0x10 [ 141.242973][ T6925] ? rcu_is_watching+0x15/0xb0 [ 141.243004][ T6925] ? do_syscall_64+0xbe/0x3b0 [ 141.243043][ T6925] do_syscall_64+0xfa/0x3b0 [ 141.243071][ T6925] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.243099][ T6925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.243120][ T6925] ? clear_bhb_loop+0x60/0xb0 [ 141.243149][ T6925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.243169][ T6925] RIP: 0033:0x7fcaca98ebe9 [ 141.243189][ T6925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.243206][ T6925] RSP: 002b:00007fcacb778038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.243227][ T6925] RAX: ffffffffffffffda RBX: 00007fcacabb5fa0 RCX: 00007fcaca98ebe9 [ 141.243242][ T6925] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 141.243255][ T6925] RBP: 00007fcacb778090 R08: 0000000000000000 R09: 0000000000000000 [ 141.243266][ T6925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.243277][ T6925] R13: 00007fcacabb6038 R14: 00007fcacabb5fa0 R15: 00007fff686df178 [ 141.243320][ T6925] [ 141.913219][ T6933] validate_nla: 3 callbacks suppressed [ 141.913238][ T6933] netlink: 'syz.4.324': attribute type 29 has an invalid length. [ 141.927926][ T6933] netlink: 'syz.4.324': attribute type 29 has an invalid length. [ 141.936568][ T6933] netlink: 'syz.4.324': attribute type 29 has an invalid length. [ 141.945485][ T6933] netlink: 'syz.4.324': attribute type 29 has an invalid length. [ 143.167488][ T6968] netlink: 26 bytes leftover after parsing attributes in process `syz.4.337'. [ 143.284214][ T6970] netlink: 'syz.1.338': attribute type 29 has an invalid length. [ 143.293983][ T6970] netlink: 'syz.1.338': attribute type 29 has an invalid length. [ 143.302881][ T6970] netlink: 'syz.1.338': attribute type 29 has an invalid length. [ 143.360165][ T6976] netlink: 'syz.1.338': attribute type 29 has an invalid length. [ 143.445933][ T6978] lo speed is unknown, defaulting to 1000 [ 143.608070][ T6985] FAULT_INJECTION: forcing a failure. [ 143.608070][ T6985] name failslab, interval 1, probability 0, space 0, times 0 [ 143.621120][ T6985] CPU: 1 UID: 0 PID: 6985 Comm: syz.1.343 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 143.621149][ T6985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 143.621161][ T6985] Call Trace: [ 143.621171][ T6985] [ 143.621182][ T6985] dump_stack_lvl+0x189/0x250 [ 143.621218][ T6985] ? __pfx____ratelimit+0x10/0x10 [ 143.621252][ T6985] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.621283][ T6985] ? __pfx__printk+0x10/0x10 [ 143.621339][ T6985] ? atomic_notifier_call_chain+0x26/0x180 [ 143.621361][ T6985] ? atomic_notifier_call_chain+0x26/0x180 [ 143.621399][ T6985] should_fail_ex+0x414/0x560 [ 143.621448][ T6985] should_failslab+0xa8/0x100 [ 143.621489][ T6985] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 143.621524][ T6985] ? __alloc_skb+0x112/0x2d0 [ 143.621574][ T6985] __alloc_skb+0x112/0x2d0 [ 143.621624][ T6985] fdb_notify+0xa6/0x160 [ 143.621663][ T6985] fdb_delete+0xec4/0x1160 [ 143.621711][ T6985] ? fdb_delete+0x39a/0x1160 [ 143.621755][ T6985] ? __pfx_fdb_delete+0x10/0x10 [ 143.621817][ T6985] br_fdb_changeaddr+0x1fe/0x420 [ 143.621873][ T6985] br_device_event+0x637/0x910 [ 143.621918][ T6985] ? __pfx_br_device_event+0x10/0x10 [ 143.621977][ T6985] notifier_call_chain+0x1b6/0x3e0 [ 143.622027][ T6985] netif_set_mac_address+0x37c/0x4c0 [ 143.622074][ T6985] ? __pfx_netif_set_mac_address+0x10/0x10 [ 143.622103][ T6985] ? down_write+0x162/0x1f0 [ 143.622148][ T6985] ? netdev_name_node_lookup+0xdf/0x120 [ 143.622204][ T6985] dev_set_mac_address_user+0x137/0x270 [ 143.622257][ T6985] dev_ioctl+0x7b4/0x1150 [ 143.622307][ T6985] sock_do_ioctl+0x22c/0x300 [ 143.622334][ T6985] ? irqentry_exit+0x74/0x90 [ 143.622371][ T6985] ? __pfx_sock_do_ioctl+0x10/0x10 [ 143.622419][ T6985] ? __pfx_sock_ioctl+0x10/0x10 [ 143.622474][ T6985] sock_ioctl+0x576/0x790 [ 143.622513][ T6985] ? __pfx_sock_ioctl+0x10/0x10 [ 143.622544][ T6985] ? __fget_files+0x2a/0x420 [ 143.622564][ T6985] ? __fget_files+0x3a0/0x420 [ 143.622583][ T6985] ? __fget_files+0x2a/0x420 [ 143.622616][ T6985] ? bpf_lsm_file_ioctl+0x9/0x20 [ 143.622646][ T6985] ? __pfx_sock_ioctl+0x10/0x10 [ 143.622676][ T6985] __se_sys_ioctl+0xfc/0x170 [ 143.622715][ T6985] do_syscall_64+0xfa/0x3b0 [ 143.622743][ T6985] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.622774][ T6985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.622796][ T6985] ? clear_bhb_loop+0x60/0xb0 [ 143.622830][ T6985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.622851][ T6985] RIP: 0033:0x7ff84bf8ebe9 [ 143.622874][ T6985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.622891][ T6985] RSP: 002b:00007ff84cd82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.622919][ T6985] RAX: ffffffffffffffda RBX: 00007ff84c1b5fa0 RCX: 00007ff84bf8ebe9 [ 143.622934][ T6985] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000005 [ 143.622952][ T6985] RBP: 00007ff84cd82090 R08: 0000000000000000 R09: 0000000000000000 [ 143.622964][ T6985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.622976][ T6985] R13: 00007ff84c1b6038 R14: 00007ff84c1b5fa0 R15: 00007ffd2e0693a8 [ 143.623043][ T6985] [ 144.490690][ T6999] netlink: 26 bytes leftover after parsing attributes in process `syz.1.350'. [ 144.549939][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.351'. [ 144.590050][ T6997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.349'. [ 144.642882][ T6997] netlink: 33 bytes leftover after parsing attributes in process `syz.4.349'. [ 144.700235][ T6997] netlink: 33 bytes leftover after parsing attributes in process `syz.4.349'. [ 144.821745][ T7008] netlink: 152 bytes leftover after parsing attributes in process `syz.2.352'. [ 144.909898][ T7006] netlink: 'syz.1.353': attribute type 1 has an invalid length. [ 144.911215][ T7011] netlink: 'syz.3.355': attribute type 29 has an invalid length. [ 144.930677][ T7006] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.353'. [ 145.082843][ T7015] FAULT_INJECTION: forcing a failure. [ 145.082843][ T7015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.132871][ T7015] CPU: 0 UID: 0 PID: 7015 Comm: syz.2.356 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 145.132899][ T7015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 145.132910][ T7015] Call Trace: [ 145.132918][ T7015] [ 145.132926][ T7015] dump_stack_lvl+0x189/0x250 [ 145.132955][ T7015] ? __pfx____ratelimit+0x10/0x10 [ 145.132981][ T7015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.133005][ T7015] ? __pfx__printk+0x10/0x10 [ 145.133045][ T7015] should_fail_ex+0x414/0x560 [ 145.133075][ T7015] _copy_to_user+0x31/0xb0 [ 145.133100][ T7015] simple_read_from_buffer+0xe1/0x170 [ 145.133133][ T7015] proc_fail_nth_read+0x1b3/0x220 [ 145.133158][ T7015] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.133184][ T7015] ? rw_verify_area+0x2a6/0x4d0 [ 145.133208][ T7015] ? __lock_acquire+0xab9/0xd20 [ 145.133234][ T7015] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.133258][ T7015] vfs_read+0x200/0xa30 [ 145.133282][ T7015] ? fdget_pos+0x247/0x320 [ 145.133303][ T7015] ? __pfx___mutex_lock+0x10/0x10 [ 145.133332][ T7015] ? __pfx_vfs_read+0x10/0x10 [ 145.133359][ T7015] ? __fget_files+0x2a/0x420 [ 145.133380][ T7015] ? __fget_files+0x3a0/0x420 [ 145.133396][ T7015] ? __fget_files+0x2a/0x420 [ 145.133422][ T7015] ksys_read+0x145/0x250 [ 145.133450][ T7015] ? __pfx_ksys_read+0x10/0x10 [ 145.133489][ T7015] do_syscall_64+0xfa/0x3b0 [ 145.133517][ T7015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.133543][ T7015] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 145.133563][ T7015] ? clear_bhb_loop+0x60/0xb0 [ 145.133587][ T7015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.133605][ T7015] RIP: 0033:0x7f745e38d5fc [ 145.133623][ T7015] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 145.133639][ T7015] RSP: 002b:00007f745c5f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 145.133659][ T7015] RAX: ffffffffffffffda RBX: 00007f745e5b5fa0 RCX: 00007f745e38d5fc [ 145.133673][ T7015] RDX: 000000000000000f RSI: 00007f745c5f60a0 RDI: 000000000000000b [ 145.133685][ T7015] RBP: 00007f745c5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 145.133696][ T7015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.133707][ T7015] R13: 00007f745e5b6038 R14: 00007f745e5b5fa0 R15: 00007ffee60304a8 [ 145.133739][ T7015] [ 145.531496][ T7028] netlink: 26 bytes leftover after parsing attributes in process `syz.1.363'. [ 145.924990][ T7041] lo speed is unknown, defaulting to 1000 [ 146.658133][ T7068] __nla_validate_parse: 3 callbacks suppressed [ 146.658153][ T7068] netlink: 26 bytes leftover after parsing attributes in process `syz.1.377'. [ 146.958030][ T7076] validate_nla: 11 callbacks suppressed [ 146.958054][ T7076] netlink: 'syz.0.378': attribute type 31 has an invalid length. [ 147.934067][ T7088] lo speed is unknown, defaulting to 1000 [ 148.911141][ T7111] netlink: 26 bytes leftover after parsing attributes in process `syz.1.389'. [ 149.076725][ T7110] netlink: 'syz.2.388': attribute type 2 has an invalid length. [ 150.284096][ T7149] netlink: 26 bytes leftover after parsing attributes in process `syz.2.402'. [ 150.501927][ T7157] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.405'. [ 150.512035][ T7157] netlink: zone id is out of range [ 150.527705][ T7157] netlink: get zone limit has 8 unknown bytes [ 150.644567][ T7160] netlink: 'syz.0.403': attribute type 11 has an invalid length. [ 150.847473][ T7151] netlink: 'syz.0.403': attribute type 2 has an invalid length. [ 150.913366][ T7151] netlink: 12374 bytes leftover after parsing attributes in process `syz.0.403'. [ 150.999257][ T7164] netlink: 'syz.3.407': attribute type 10 has an invalid length. [ 151.032867][ T7164] team0: Device veth1_macvtap failed to register rx_handler [ 151.328273][ T7177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.411'. [ 151.622766][ T7184] netlink: 188 bytes leftover after parsing attributes in process `syz.4.415'. [ 152.698621][ T7223] FAULT_INJECTION: forcing a failure. [ 152.698621][ T7223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.712371][ T7223] CPU: 1 UID: 0 PID: 7223 Comm: syz.1.427 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 152.712401][ T7223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 152.712414][ T7223] Call Trace: [ 152.712424][ T7223] [ 152.712435][ T7223] dump_stack_lvl+0x189/0x250 [ 152.712471][ T7223] ? __pfx____ratelimit+0x10/0x10 [ 152.712505][ T7223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.712536][ T7223] ? __pfx__printk+0x10/0x10 [ 152.712573][ T7223] ? __might_fault+0xb0/0x130 [ 152.712616][ T7223] ? __might_fault+0xb0/0x130 [ 152.712667][ T7223] should_fail_ex+0x414/0x560 [ 152.712716][ T7223] _copy_from_user+0x2d/0xb0 [ 152.712748][ T7223] ___sys_sendmsg+0x158/0x2a0 [ 152.712785][ T7223] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.712876][ T7223] ? __fget_files+0x2a/0x420 [ 152.712938][ T7223] ? __fget_files+0x2a/0x420 [ 152.712957][ T7223] ? __fget_files+0x3a0/0x420 [ 152.713029][ T7223] __x64_sys_sendmsg+0x19b/0x260 [ 152.713063][ T7223] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 152.713119][ T7223] ? __pfx_ksys_write+0x10/0x10 [ 152.713144][ T7223] ? rcu_is_watching+0x15/0xb0 [ 152.713185][ T7223] ? do_syscall_64+0xbe/0x3b0 [ 152.713231][ T7223] do_syscall_64+0xfa/0x3b0 [ 152.713268][ T7223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.713288][ T7223] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 152.713308][ T7223] ? clear_bhb_loop+0x60/0xb0 [ 152.713351][ T7223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.713372][ T7223] RIP: 0033:0x7ff84bf8ebe9 [ 152.713393][ T7223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.713411][ T7223] RSP: 002b:00007ff84cd82038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.713433][ T7223] RAX: ffffffffffffffda RBX: 00007ff84c1b5fa0 RCX: 00007ff84bf8ebe9 [ 152.713448][ T7223] RDX: 0000000020048000 RSI: 0000200000014800 RDI: 0000000000000008 [ 152.713461][ T7223] RBP: 00007ff84cd82090 R08: 0000000000000000 R09: 0000000000000000 [ 152.713473][ T7223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.713484][ T7223] R13: 00007ff84c1b6038 R14: 00007ff84c1b5fa0 R15: 00007ffd2e0693a8 [ 152.713551][ T7223] [ 153.223869][ T5871] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 153.245871][ T7234] netlink: 152 bytes leftover after parsing attributes in process `syz.3.431'. [ 153.396442][ T7239] netlink: 294 bytes leftover after parsing attributes in process `syz.4.433'. [ 156.649134][ T7258] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.436'. [ 157.122674][ T7270] veth0_vlan: entered allmulticast mode [ 157.139773][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.445'. [ 157.183641][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.445'. [ 157.195883][ T7278] netlink: 'syz.0.444': attribute type 12 has an invalid length. [ 157.206072][ T7278] netlink: 132 bytes leftover after parsing attributes in process `syz.0.444'. [ 157.229176][ T7271] lo speed is unknown, defaulting to 1000 [ 157.303577][ T7276] netlink: 20 bytes leftover after parsing attributes in process `syz.4.445'. [ 157.313329][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.445'. [ 157.344132][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.447'. [ 158.858978][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'. [ 159.530395][ T7343] lo speed is unknown, defaulting to 1000 [ 160.202142][ T7360] FAULT_INJECTION: forcing a failure. [ 160.202142][ T7360] name failslab, interval 1, probability 0, space 0, times 0 [ 160.261406][ T7360] CPU: 0 UID: 0 PID: 7360 Comm: syz.2.473 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 160.261438][ T7360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 160.261452][ T7360] Call Trace: [ 160.261464][ T7360] [ 160.261477][ T7360] dump_stack_lvl+0x189/0x250 [ 160.261519][ T7360] ? __pfx____ratelimit+0x10/0x10 [ 160.261560][ T7360] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.261598][ T7360] ? __pfx__printk+0x10/0x10 [ 160.261677][ T7360] ? __pfx___might_resched+0x10/0x10 [ 160.261733][ T7360] should_fail_ex+0x414/0x560 [ 160.261809][ T7360] should_failslab+0xa8/0x100 [ 160.261857][ T7360] __kmalloc_cache_noprof+0x70/0x3d0 [ 160.261893][ T7360] ? call_usermodehelper_setup+0x8e/0x270 [ 160.261926][ T7360] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 160.261987][ T7360] call_usermodehelper_setup+0x8e/0x270 [ 160.262022][ T7360] ? __pfx_free_modprobe_argv+0x10/0x10 [ 160.262083][ T7360] __request_module+0x39f/0x5e0 [ 160.262164][ T7360] ? __pfx___request_module+0x10/0x10 [ 160.262195][ T7360] ? __up_read+0x280/0x680 [ 160.262245][ T7360] ? __pfx___up_read+0x10/0x10 [ 160.262370][ T7360] crypto_alg_mod_lookup+0xeb/0x5f0 [ 160.262438][ T7360] crypto_add_alg+0x235/0x3b0 [ 160.262475][ T7360] ? __pfx_crypto_add_alg+0x10/0x10 [ 160.262505][ T7360] crypto_user_rcv_msg+0x477/0x570 [ 160.262528][ T7360] ? arch_stack_walk+0xfc/0x150 [ 160.262593][ T7360] ? __pfx_crypto_user_rcv_msg+0x10/0x10 [ 160.262734][ T7360] ? __pfx___mutex_trylock_common+0x10/0x10 [ 160.262800][ T7360] ? rcu_is_watching+0x15/0xb0 [ 160.262833][ T7360] ? trace_contention_end+0x39/0x120 [ 160.262869][ T7360] ? __mutex_lock+0x335/0x1360 [ 160.262948][ T7360] netlink_rcv_skb+0x208/0x470 [ 160.262997][ T7360] ? __pfx_crypto_user_rcv_msg+0x10/0x10 [ 160.263050][ T7360] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 160.263171][ T7360] ? netlink_deliver_tap+0x2e/0x1b0 [ 160.263210][ T7360] ? netlink_deliver_tap+0x2e/0x1b0 [ 160.263274][ T7360] crypto_netlink_rcv+0x2a/0x40 [ 160.263302][ T7360] netlink_unicast+0x82c/0x9e0 [ 160.263387][ T7360] ? __pfx_netlink_unicast+0x10/0x10 [ 160.263440][ T7360] ? netlink_sendmsg+0x642/0xb30 [ 160.263470][ T7360] ? skb_put+0x11b/0x210 [ 160.263537][ T7360] netlink_sendmsg+0x805/0xb30 [ 160.263629][ T7360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.263690][ T7360] ? aa_sock_msg_perm+0xf1/0x1d0 [ 160.263752][ T7360] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 160.263780][ T7360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.263828][ T7360] __sock_sendmsg+0x21c/0x270 [ 160.263884][ T7360] ____sys_sendmsg+0x505/0x830 [ 160.263951][ T7360] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.264039][ T7360] ? import_iovec+0x74/0xa0 [ 160.264094][ T7360] ___sys_sendmsg+0x21f/0x2a0 [ 160.264142][ T7360] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.264371][ T7360] ? __fget_files+0x2a/0x420 [ 160.264394][ T7360] ? __fget_files+0x3a0/0x420 [ 160.264481][ T7360] __x64_sys_sendmsg+0x19b/0x260 [ 160.264530][ T7360] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 160.264616][ T7360] ? __pfx_ksys_write+0x10/0x10 [ 160.264643][ T7360] ? rcu_is_watching+0x15/0xb0 [ 160.264701][ T7360] ? do_syscall_64+0xbe/0x3b0 [ 160.264767][ T7360] do_syscall_64+0xfa/0x3b0 [ 160.264799][ T7360] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.264836][ T7360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.264861][ T7360] ? clear_bhb_loop+0x60/0xb0 [ 160.264909][ T7360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.264932][ T7360] RIP: 0033:0x7f745e38ebe9 [ 160.264960][ T7360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.264977][ T7360] RSP: 002b:00007f745c5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.265000][ T7360] RAX: ffffffffffffffda RBX: 00007f745e5b5fa0 RCX: 00007f745e38ebe9 [ 160.265016][ T7360] RDX: 0000000000040040 RSI: 0000200000000880 RDI: 0000000000000006 [ 160.265028][ T7360] RBP: 00007f745c5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 160.265041][ T7360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 160.265053][ T7360] R13: 00007f745e5b6038 R14: 00007f745e5b5fa0 R15: 00007ffee60304a8 [ 160.265163][ T7360] [ 161.027687][ T7375] netlink: 48 bytes leftover after parsing attributes in process `syz.2.478'. [ 161.061914][ T7375] IPv6: Can't replace route, no match found [ 161.241045][ T7384] netlink: 56 bytes leftover after parsing attributes in process `syz.1.479'. [ 161.519951][ T7393] lo speed is unknown, defaulting to 1000 [ 161.533508][ T7398] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.485'. [ 161.553918][ T7398] netlink: zone id is out of range [ 161.563206][ T7398] netlink: zone id is out of range [ 161.568575][ T7398] netlink: get zone limit has 8 unknown bytes [ 161.676505][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.487'. [ 161.699251][ T7402] netlink: 'syz.1.488': attribute type 11 has an invalid length. [ 161.713125][ T7402] netlink: 149476 bytes leftover after parsing attributes in process `syz.1.488'. [ 161.893768][ T7401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.896159][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.491'. [ 162.227216][ T7423] netlink: 164 bytes leftover after parsing attributes in process `syz.1.495'. [ 162.301475][ T7429] netlink: 'syz.3.497': attribute type 2 has an invalid length. [ 162.321059][ T7429] netlink: 164 bytes leftover after parsing attributes in process `syz.3.497'. [ 162.354521][ T7430] netlink: 2 bytes leftover after parsing attributes in process `syz.4.496'. [ 162.364843][ T7430] batadv_slave_1: entered promiscuous mode [ 162.612121][ T7440] netlink: 'syz.3.502': attribute type 10 has an invalid length. [ 162.654687][ T7437] bridge_slave_1: left allmulticast mode [ 162.681728][ T7437] bridge_slave_1: left promiscuous mode [ 162.697336][ T7437] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.129759][ T7437] bridge_slave_0: left allmulticast mode [ 163.150632][ T7437] bridge_slave_0: left promiscuous mode [ 163.167651][ T7437] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.335641][ T7462] FAULT_INJECTION: forcing a failure. [ 163.335641][ T7462] name failslab, interval 1, probability 0, space 0, times 0 [ 163.348524][ T7462] CPU: 0 UID: 0 PID: 7462 Comm: syz.3.509 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 163.348553][ T7462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 163.348567][ T7462] Call Trace: [ 163.348575][ T7462] [ 163.348584][ T7462] dump_stack_lvl+0x189/0x250 [ 163.348615][ T7462] ? __pfx____ratelimit+0x10/0x10 [ 163.348646][ T7462] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.348673][ T7462] ? __pfx__printk+0x10/0x10 [ 163.348708][ T7462] ? rcu_is_watching+0x15/0xb0 [ 163.348743][ T7462] should_fail_ex+0x414/0x560 [ 163.348779][ T7462] should_failslab+0xa8/0x100 [ 163.348814][ T7462] kmem_cache_alloc_noprof+0x73/0x3c0 [ 163.348843][ T7462] ? skb_clone+0x212/0x3a0 [ 163.348874][ T7462] skb_clone+0x212/0x3a0 [ 163.348902][ T7462] bpf_clone_redirect+0xad/0x3d0 [ 163.348939][ T7462] ? bpf_test_run+0x197/0x7b0 [ 163.348970][ T7462] bpf_prog_1eda3e3d4f38ab1d+0x5f/0x68 [ 163.349005][ T7462] ? perf_trace_preemptirq_template+0xa3/0x340 [ 163.349036][ T7462] ? __local_bh_enable_ip+0xce/0x1c0 [ 163.349061][ T7462] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 163.349089][ T7462] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 163.349116][ T7462] ? lockdep_hardirqs_on+0x9c/0x150 [ 163.349145][ T7462] ? ktime_get+0x3e/0x1f0 [ 163.349168][ T7462] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 163.349204][ T7462] ? __local_bh_disable_ip+0xf1/0x190 [ 163.349225][ T7462] ? __pfx___cant_migrate+0x10/0x10 [ 163.349245][ T7462] ? __local_bh_enable_ip+0x12d/0x1c0 [ 163.349266][ T7462] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 163.349294][ T7462] ? bpf_test_timer_continue+0x136/0x350 [ 163.349339][ T7462] bpf_test_run+0x318/0x7b0 [ 163.349401][ T7462] ? __pfx_bpf_test_run+0x10/0x10 [ 163.349466][ T7462] ? slab_build_skb+0x273/0x3e0 [ 163.349498][ T7462] ? convert___skb_to_skb+0x3d/0x590 [ 163.349532][ T7462] bpf_prog_test_run_skb+0xb30/0x1560 [ 163.349585][ T7462] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 163.349617][ T7462] bpf_prog_test_run+0x2c7/0x340 [ 163.349659][ T7462] __sys_bpf+0x581/0x870 [ 163.349691][ T7462] ? __pfx___sys_bpf+0x10/0x10 [ 163.349743][ T7462] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 163.349775][ T7462] ? __pfx_ksys_write+0x10/0x10 [ 163.349801][ T7462] ? rcu_is_watching+0x15/0xb0 [ 163.349833][ T7462] __x64_sys_bpf+0x7c/0x90 [ 163.349861][ T7462] do_syscall_64+0xfa/0x3b0 [ 163.349890][ T7462] ? lockdep_hardirqs_on+0x9c/0x150 [ 163.349919][ T7462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.349941][ T7462] ? clear_bhb_loop+0x60/0xb0 [ 163.349968][ T7462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.349989][ T7462] RIP: 0033:0x7fcaca98ebe9 [ 163.350008][ T7462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.350026][ T7462] RSP: 002b:00007fcacb778038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 163.350048][ T7462] RAX: ffffffffffffffda RBX: 00007fcacabb5fa0 RCX: 00007fcaca98ebe9 [ 163.350063][ T7462] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 163.350076][ T7462] RBP: 00007fcacb778090 R08: 0000000000000000 R09: 0000000000000000 [ 163.350089][ T7462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 163.350101][ T7462] R13: 00007fcacabb6038 R14: 00007fcacabb5fa0 R15: 00007fff686df178 [ 163.350140][ T7462] [ 164.117634][ T7471] netlink: 'syz.1.513': attribute type 2 has an invalid length. [ 164.137027][ T7471] __nla_validate_parse: 3 callbacks suppressed [ 164.137079][ T7471] netlink: 132 bytes leftover after parsing attributes in process `syz.1.513'. [ 164.148378][ T7473] netlink: 'syz.2.514': attribute type 2 has an invalid length. [ 164.164221][ T7473] netlink: 132 bytes leftover after parsing attributes in process `syz.2.514'. [ 164.198206][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.515'. [ 164.211004][ T7477] netlink: 33 bytes leftover after parsing attributes in process `syz.4.515'. [ 164.220786][ T7477] netlink: 33 bytes leftover after parsing attributes in process `syz.4.515'. [ 164.798643][ T7494] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.520'. [ 164.837549][ T7494] netlink: zone id is out of range [ 164.861294][ T7494] netlink: zone id is out of range [ 164.899682][ T7494] netlink: get zone limit has 8 unknown bytes [ 165.249462][ T7510] netlink: 28 bytes leftover after parsing attributes in process `syz.3.525'. [ 165.582529][ T7524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.530'. [ 165.596033][ T7527] netlink: 'syz.0.533': attribute type 6 has an invalid length. [ 165.623878][ T7527] netlink: 140 bytes leftover after parsing attributes in process `syz.0.533'. [ 165.819358][ T7527] netlink: 'syz.0.533': attribute type 10 has an invalid length. [ 166.260999][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.542'. [ 167.637961][ T7590] netlink: 'syz.1.554': attribute type 2 has an invalid length. [ 167.664048][ T7590] netlink: 'syz.1.554': attribute type 2 has an invalid length. [ 167.769311][ T7600] FAULT_INJECTION: forcing a failure. [ 167.769311][ T7600] name failslab, interval 1, probability 0, space 0, times 0 [ 167.807172][ T7600] CPU: 1 UID: 0 PID: 7600 Comm: syz.1.558 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 167.807206][ T7600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 167.807219][ T7600] Call Trace: [ 167.807227][ T7600] [ 167.807237][ T7600] dump_stack_lvl+0x189/0x250 [ 167.807269][ T7600] ? __pfx____ratelimit+0x10/0x10 [ 167.807299][ T7600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.807325][ T7600] ? __pfx__printk+0x10/0x10 [ 167.807362][ T7600] ? __pfx___might_resched+0x10/0x10 [ 167.807388][ T7600] should_fail_ex+0x414/0x560 [ 167.807428][ T7600] should_failslab+0xa8/0x100 [ 167.807462][ T7600] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 167.807493][ T7600] ? __alloc_skb+0x112/0x2d0 [ 167.807530][ T7600] __alloc_skb+0x112/0x2d0 [ 167.807566][ T7600] netlink_sendmsg+0x5c6/0xb30 [ 167.807609][ T7600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.807644][ T7600] ? aa_sock_msg_perm+0xf1/0x1d0 [ 167.807680][ T7600] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 167.807703][ T7600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.807735][ T7600] __sock_sendmsg+0x21c/0x270 [ 167.807766][ T7600] ____sys_sendmsg+0x505/0x830 [ 167.807795][ T7600] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.807827][ T7600] ? import_iovec+0x74/0xa0 [ 167.807856][ T7600] ___sys_sendmsg+0x21f/0x2a0 [ 167.807881][ T7600] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.807944][ T7600] ? __fget_files+0x2a/0x420 [ 167.807961][ T7600] ? __fget_files+0x3a0/0x420 [ 167.807992][ T7600] __x64_sys_sendmsg+0x19b/0x260 [ 167.808017][ T7600] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 167.808057][ T7600] ? __pfx_ksys_write+0x10/0x10 [ 167.808084][ T7600] ? rcu_is_watching+0x15/0xb0 [ 167.808111][ T7600] ? do_syscall_64+0xbe/0x3b0 [ 167.808146][ T7600] do_syscall_64+0xfa/0x3b0 [ 167.808175][ T7600] ? lockdep_hardirqs_on+0x9c/0x150 [ 167.808203][ T7600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.808223][ T7600] ? clear_bhb_loop+0x60/0xb0 [ 167.808249][ T7600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.808269][ T7600] RIP: 0033:0x7ff84bf8ebe9 [ 167.808289][ T7600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.808307][ T7600] RSP: 002b:00007ff84cd82038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.808329][ T7600] RAX: ffffffffffffffda RBX: 00007ff84c1b5fa0 RCX: 00007ff84bf8ebe9 [ 167.808345][ T7600] RDX: 0000000020040840 RSI: 0000200000000000 RDI: 0000000000000003 [ 167.808364][ T7600] RBP: 00007ff84cd82090 R08: 0000000000000000 R09: 0000000000000000 [ 167.808377][ T7600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.808389][ T7600] R13: 00007ff84c1b6038 R14: 00007ff84c1b5fa0 R15: 00007ffd2e0693a8 [ 167.808423][ T7600] [ 168.565218][ T7625] FAULT_INJECTION: forcing a failure. [ 168.565218][ T7625] name failslab, interval 1, probability 0, space 0, times 0 [ 168.578614][ T7625] CPU: 0 UID: 0 PID: 7625 Comm: syz.0.568 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 168.578645][ T7625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 168.578659][ T7625] Call Trace: [ 168.578668][ T7625] [ 168.578677][ T7625] dump_stack_lvl+0x189/0x250 [ 168.578709][ T7625] ? __pfx____ratelimit+0x10/0x10 [ 168.578739][ T7625] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.578765][ T7625] ? __pfx__printk+0x10/0x10 [ 168.578802][ T7625] ? __pfx___might_resched+0x10/0x10 [ 168.578822][ T7625] ? fs_reclaim_acquire+0x7d/0x100 [ 168.578861][ T7625] should_fail_ex+0x414/0x560 [ 168.578895][ T7625] should_failslab+0xa8/0x100 [ 168.578929][ T7625] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 168.578959][ T7625] ? __alloc_skb+0x112/0x2d0 [ 168.578995][ T7625] __alloc_skb+0x112/0x2d0 [ 168.579033][ T7625] netlink_ack+0x146/0xa50 [ 168.579083][ T7625] netlink_rcv_skb+0x28c/0x470 [ 168.579114][ T7625] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 168.579144][ T7625] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 168.579188][ T7625] ? bpf_lsm_capable+0x9/0x20 [ 168.579217][ T7625] ? security_capable+0x7e/0x2e0 [ 168.579264][ T7625] nfnetlink_rcv+0x26a/0x2520 [ 168.579294][ T7625] ? __dev_queue_xmit+0x1d79/0x3b50 [ 168.579330][ T7625] ? __dev_queue_xmit+0x27b/0x3b50 [ 168.579368][ T7625] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 168.579395][ T7625] ? __pfx___dev_queue_xmit+0x10/0x10 [ 168.579442][ T7625] ? ref_tracker_free+0x63a/0x7d0 [ 168.579473][ T7625] ? __asan_memcpy+0x40/0x70 [ 168.579497][ T7625] ? __pfx_ref_tracker_free+0x10/0x10 [ 168.579525][ T7625] ? __skb_clone+0x63/0x7a0 [ 168.579552][ T7625] ? __skb_clone+0x483/0x7a0 [ 168.579582][ T7625] ? skb_clone+0x246/0x3a0 [ 168.579608][ T7625] ? __netlink_deliver_tap+0x807/0x850 [ 168.579639][ T7625] ? netlink_deliver_tap+0x2e/0x1b0 [ 168.579677][ T7625] ? netlink_deliver_tap+0x2e/0x1b0 [ 168.579717][ T7625] netlink_unicast+0x82c/0x9e0 [ 168.579755][ T7625] ? __pfx_netlink_unicast+0x10/0x10 [ 168.579785][ T7625] ? netlink_sendmsg+0x642/0xb30 [ 168.579814][ T7625] ? skb_put+0x11b/0x210 [ 168.579851][ T7625] netlink_sendmsg+0x805/0xb30 [ 168.579893][ T7625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.579929][ T7625] ? aa_sock_msg_perm+0xf1/0x1d0 [ 168.579964][ T7625] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 168.579987][ T7625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.580021][ T7625] __sock_sendmsg+0x21c/0x270 [ 168.580052][ T7625] ____sys_sendmsg+0x505/0x830 [ 168.580080][ T7625] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.580113][ T7625] ? import_iovec+0x74/0xa0 [ 168.580141][ T7625] ___sys_sendmsg+0x21f/0x2a0 [ 168.580166][ T7625] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.580228][ T7625] ? __fget_files+0x2a/0x420 [ 168.580255][ T7625] ? __fget_files+0x3a0/0x420 [ 168.580286][ T7625] __x64_sys_sendmsg+0x19b/0x260 [ 168.580311][ T7625] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 168.580344][ T7625] ? __pfx_ksys_write+0x10/0x10 [ 168.580370][ T7625] ? rcu_is_watching+0x15/0xb0 [ 168.580398][ T7625] ? do_syscall_64+0xbe/0x3b0 [ 168.580432][ T7625] do_syscall_64+0xfa/0x3b0 [ 168.580461][ T7625] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.580490][ T7625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.580511][ T7625] ? clear_bhb_loop+0x60/0xb0 [ 168.580538][ T7625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.580558][ T7625] RIP: 0033:0x7f51eb78ebe9 [ 168.580578][ T7625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.580595][ T7625] RSP: 002b:00007f51ec5c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.580618][ T7625] RAX: ffffffffffffffda RBX: 00007f51eb9b5fa0 RCX: 00007f51eb78ebe9 [ 168.580633][ T7625] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 168.580646][ T7625] RBP: 00007f51ec5c7090 R08: 0000000000000000 R09: 0000000000000000 [ 168.580659][ T7625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.580672][ T7625] R13: 00007f51eb9b6038 R14: 00007f51eb9b5fa0 R15: 00007ffc2db96d38 [ 168.580705][ T7625] [ 168.646481][ T7627] FAULT_INJECTION: forcing a failure. [ 168.646481][ T7627] name failslab, interval 1, probability 0, space 0, times 0 [ 168.704366][ T7629] netlink: 'syz.2.569': attribute type 2 has an invalid length. [ 168.909945][ T7634] netlink: 'syz.2.569': attribute type 2 has an invalid length. [ 168.927975][ T7627] CPU: 0 UID: 0 PID: 7627 Comm: syz.3.567 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 168.928010][ T7627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 168.928022][ T7627] Call Trace: [ 168.928031][ T7627] [ 168.928040][ T7627] dump_stack_lvl+0x189/0x250 [ 168.928073][ T7627] ? __pfx____ratelimit+0x10/0x10 [ 168.928104][ T7627] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.928130][ T7627] ? __pfx__printk+0x10/0x10 [ 168.928177][ T7627] should_fail_ex+0x414/0x560 [ 168.928213][ T7627] should_failslab+0xa8/0x100 [ 168.928248][ T7627] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 168.928279][ T7627] ? __alloc_skb+0x112/0x2d0 [ 168.928318][ T7627] __alloc_skb+0x112/0x2d0 [ 168.928355][ T7627] xfrm_alloc_compat+0x1a6/0x16f0 [ 168.928393][ T7627] ? xfrm_get_translator+0x1b/0x240 [ 168.928420][ T7627] ? __pfx_xfrm_alloc_compat+0x10/0x10 [ 168.928451][ T7627] xfrm_nlmsg_multicast+0xda/0x1f0 [ 168.928479][ T7627] xfrm_send_state_notify+0xc5f/0x18b0 [ 168.928510][ T7627] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 168.928530][ T7627] ? km_state_notify+0x25/0x1f0 [ 168.928565][ T7627] ? km_state_notify+0x25/0x1f0 [ 168.928586][ T7627] ? km_state_notify+0x25/0x1f0 [ 168.928609][ T7627] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 168.928633][ T7627] km_state_notify+0x110/0x1f0 [ 168.928661][ T7627] xfrm_add_sa+0x3752/0x4070 [ 168.928698][ T7627] ? __pfx_xfrm_add_sa+0x10/0x10 [ 168.928719][ T7627] ? apparmor_capable+0x137/0x1b0 [ 168.928751][ T7627] ? __nla_parse+0x40/0x60 [ 168.928789][ T7627] xfrm_user_rcv_msg+0x7a0/0xab0 [ 168.928822][ T7627] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 168.928889][ T7627] ? __pfx___mutex_trylock_common+0x10/0x10 [ 168.928925][ T7627] ? rcu_is_watching+0x15/0xb0 [ 168.928948][ T7627] ? trace_contention_end+0x39/0x120 [ 168.928973][ T7627] ? __mutex_lock+0x335/0x1360 [ 168.929011][ T7627] netlink_rcv_skb+0x208/0x470 [ 168.929045][ T7627] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 168.929074][ T7627] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 168.929121][ T7627] ? netlink_deliver_tap+0x2e/0x1b0 [ 168.929152][ T7627] ? netlink_deliver_tap+0x2e/0x1b0 [ 168.929186][ T7627] xfrm_netlink_rcv+0x79/0x90 [ 168.929231][ T7627] netlink_unicast+0x82c/0x9e0 [ 168.929268][ T7627] ? __pfx_netlink_unicast+0x10/0x10 [ 168.929300][ T7627] ? netlink_sendmsg+0x642/0xb30 [ 168.929330][ T7627] ? skb_put+0x11b/0x210 [ 168.929373][ T7627] netlink_sendmsg+0x805/0xb30 [ 168.929419][ T7627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.929457][ T7627] ? aa_sock_msg_perm+0xf1/0x1d0 [ 168.929497][ T7627] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 168.929523][ T7627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.929559][ T7627] __sock_sendmsg+0x21c/0x270 [ 168.929593][ T7627] ____sys_sendmsg+0x505/0x830 [ 168.929624][ T7627] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.929659][ T7627] ? import_iovec+0x74/0xa0 [ 168.929692][ T7627] ___sys_sendmsg+0x21f/0x2a0 [ 168.929719][ T7627] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.929789][ T7627] ? __fget_files+0x2a/0x420 [ 168.929808][ T7627] ? __fget_files+0x3a0/0x420 [ 168.929843][ T7627] __x64_sys_sendmsg+0x19b/0x260 [ 168.929870][ T7627] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 168.929906][ T7627] ? __pfx_ksys_write+0x10/0x10 [ 168.929945][ T7627] ? rcu_is_watching+0x15/0xb0 [ 168.929974][ T7627] ? do_syscall_64+0xbe/0x3b0 [ 168.930012][ T7627] do_syscall_64+0xfa/0x3b0 [ 168.930044][ T7627] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.930076][ T7627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.930098][ T7627] ? clear_bhb_loop+0x60/0xb0 [ 168.930129][ T7627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.930150][ T7627] RIP: 0033:0x7fcaca98ebe9 [ 168.930172][ T7627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.930191][ T7627] RSP: 002b:00007fcacb778038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.930216][ T7627] RAX: ffffffffffffffda RBX: 00007fcacabb5fa0 RCX: 00007fcaca98ebe9 [ 168.930233][ T7627] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 168.930248][ T7627] RBP: 00007fcacb778090 R08: 0000000000000000 R09: 0000000000000000 [ 168.930261][ T7627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 168.930276][ T7627] R13: 00007fcacabb6038 R14: 00007fcacabb5fa0 R15: 00007fff686df178 [ 168.930313][ T7627] [ 168.978974][ T7635] netlink: 'syz.0.571': attribute type 2 has an invalid length. [ 169.346076][ T7640] __nla_validate_parse: 5 callbacks suppressed [ 169.346098][ T7640] netlink: 64 bytes leftover after parsing attributes in process `syz.1.572'. [ 169.348813][ T7635] netlink: 137592 bytes leftover after parsing attributes in process `syz.0.571'. [ 169.840378][ T7659] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.579'. [ 170.881918][ T7679] netlink: 16 bytes leftover after parsing attributes in process `syz.1.586'. [ 171.048352][ T7685] tap0: tun_chr_ioctl cmd 1074025672 [ 171.064340][ T7685] tap0: ignored: set checksum enabled [ 171.366340][ T7702] netlink: 132 bytes leftover after parsing attributes in process `syz.4.594'. [ 172.546739][ T7740] netlink: 'syz.1.608': attribute type 10 has an invalid length. [ 172.556121][ T7740] netlink: 40 bytes leftover after parsing attributes in process `syz.1.608'. [ 173.034158][ T7753] netlink: 28 bytes leftover after parsing attributes in process `syz.2.609'. [ 173.902397][ T7740] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 173.919102][ T7748] FAULT_INJECTION: forcing a failure. [ 173.919102][ T7748] name failslab, interval 1, probability 0, space 0, times 0 [ 173.934423][ T7748] CPU: 0 UID: 0 PID: 7748 Comm: syz.3.611 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 173.934453][ T7748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 173.934465][ T7748] Call Trace: [ 173.934474][ T7748] [ 173.934483][ T7748] dump_stack_lvl+0x189/0x250 [ 173.934533][ T7748] ? __pfx____ratelimit+0x10/0x10 [ 173.934563][ T7748] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.934588][ T7748] ? __pfx__printk+0x10/0x10 [ 173.934621][ T7748] ? __pfx___might_resched+0x10/0x10 [ 173.934641][ T7748] ? fs_reclaim_acquire+0x7d/0x100 [ 173.934679][ T7748] should_fail_ex+0x414/0x560 [ 173.934712][ T7748] should_failslab+0xa8/0x100 [ 173.934745][ T7748] kmem_cache_alloc_noprof+0x73/0x3c0 [ 173.934772][ T7748] ? radix_tree_node_alloc+0x7e/0x3a0 [ 173.934804][ T7748] radix_tree_node_alloc+0x7e/0x3a0 [ 173.934838][ T7748] idr_get_free+0x2b3/0xa70 [ 173.934885][ T7748] idr_alloc_u32+0x159/0x2d0 [ 173.934919][ T7748] ? __pfx_idr_alloc_u32+0x10/0x10 [ 173.934961][ T7748] tcf_idr_check_alloc+0x5de/0x7b0 [ 173.934989][ T7748] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 173.935016][ T7748] ? __nla_parse+0x40/0x60 [ 173.935052][ T7748] tcf_nat_init+0x1b7/0x920 [ 173.935091][ T7748] ? __pfx_tcf_nat_init+0x10/0x10 [ 173.935129][ T7748] ? nla_memcpy+0x5b/0xc0 [ 173.935170][ T7748] tcf_action_init_1+0x463/0x6d0 [ 173.935202][ T7748] ? __pfx_tcf_action_init_1+0x10/0x10 [ 173.935226][ T7748] ? _raw_read_unlock+0x28/0x50 [ 173.935250][ T7748] ? tc_action_load_ops+0x214/0x4e0 [ 173.935299][ T7748] ? __nla_parse+0x40/0x60 [ 173.935333][ T7748] tcf_action_init+0x2cf/0xab0 [ 173.935370][ T7748] ? __pfx_tcf_action_init+0x10/0x10 [ 173.935427][ T7748] ? __pfx___nla_validate_parse+0x10/0x10 [ 173.935457][ T7748] ? trace_sched_exit_tp+0x36/0x110 [ 173.935484][ T7748] ? __schedule+0x17ae/0x4cc0 [ 173.935547][ T7748] tc_ctl_action+0x430/0xbd0 [ 173.935583][ T7748] ? __pfx_tc_ctl_action+0x10/0x10 [ 173.935614][ T7748] ? rcu_is_watching+0x15/0xb0 [ 173.935688][ T7748] ? __pfx_tc_ctl_action+0x10/0x10 [ 173.935713][ T7748] rtnetlink_rcv_msg+0x779/0xb70 [ 173.935748][ T7748] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 173.935796][ T7748] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 173.935824][ T7748] ? ref_tracker_free+0x63a/0x7d0 [ 173.935861][ T7748] ? __asan_memcpy+0x40/0x70 [ 173.935885][ T7748] ? __pfx_ref_tracker_free+0x10/0x10 [ 173.935913][ T7748] ? __skb_clone+0x63/0x7a0 [ 173.935947][ T7748] netlink_rcv_skb+0x208/0x470 [ 173.935979][ T7748] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 173.936012][ T7748] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 173.936057][ T7748] ? netlink_deliver_tap+0x2e/0x1b0 [ 173.936097][ T7748] netlink_unicast+0x82c/0x9e0 [ 173.936135][ T7748] ? __pfx_netlink_unicast+0x10/0x10 [ 173.936165][ T7748] ? netlink_sendmsg+0x642/0xb30 [ 173.936194][ T7748] ? skb_put+0x11b/0x210 [ 173.936231][ T7748] netlink_sendmsg+0x805/0xb30 [ 173.936274][ T7748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.936309][ T7748] ? aa_sock_msg_perm+0xf1/0x1d0 [ 173.936345][ T7748] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 173.936369][ T7748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.936402][ T7748] __sock_sendmsg+0x21c/0x270 [ 173.936447][ T7748] ____sys_sendmsg+0x505/0x830 [ 173.936475][ T7748] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.936509][ T7748] ? import_iovec+0x74/0xa0 [ 173.936538][ T7748] ___sys_sendmsg+0x21f/0x2a0 [ 173.936562][ T7748] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.936610][ T7748] ? __fget_files+0x2a/0x420 [ 173.936645][ T7748] ? __fget_files+0x2a/0x420 [ 173.936662][ T7748] ? __fget_files+0x3a0/0x420 [ 173.936694][ T7748] __x64_sys_sendmsg+0x19b/0x260 [ 173.936719][ T7748] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 173.936753][ T7748] ? __pfx_ksys_write+0x10/0x10 [ 173.936779][ T7748] ? rcu_is_watching+0x15/0xb0 [ 173.936806][ T7748] ? do_syscall_64+0xbe/0x3b0 [ 173.936841][ T7748] do_syscall_64+0xfa/0x3b0 [ 173.936876][ T7748] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.936905][ T7748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.936926][ T7748] ? clear_bhb_loop+0x60/0xb0 [ 173.936952][ T7748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.936973][ T7748] RIP: 0033:0x7fcaca98ebe9 [ 173.936992][ T7748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.937010][ T7748] RSP: 002b:00007fcacb778038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.937033][ T7748] RAX: ffffffffffffffda RBX: 00007fcacabb5fa0 RCX: 00007fcaca98ebe9 [ 173.937049][ T7748] RDX: 0000000000000980 RSI: 00002000000002c0 RDI: 0000000000000003 [ 173.937062][ T7748] RBP: 00007fcacb778090 R08: 0000000000000000 R09: 0000000000000000 [ 173.937075][ T7748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.937087][ T7748] R13: 00007fcacabb6038 R14: 00007fcacabb5fa0 R15: 00007fff686df178 [ 173.937122][ T7748] [ 174.434695][ T7753] netlink: 60 bytes leftover after parsing attributes in process `syz.2.609'. [ 174.721943][ T7770] netlink: 'syz.1.617': attribute type 1 has an invalid length. [ 174.730200][ T7770] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.617'. [ 176.296536][ T7780] netlink: 'syz.1.619': attribute type 1 has an invalid length. [ 176.304650][ T7780] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.619'. [ 176.316141][ T7796] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.625'. [ 176.327248][ T7796] netlink: 'syz.3.625': attribute type 1 has an invalid length. [ 176.693659][ T7810] netlink: 132 bytes leftover after parsing attributes in process `syz.1.627'. [ 176.714701][ T7809] netlink: 132 bytes leftover after parsing attributes in process `syz.0.629'. [ 176.751641][ T7809] netlink: 830 bytes leftover after parsing attributes in process `syz.0.629'. [ 176.787163][ T7806] netlink: 'syz.3.628': attribute type 12 has an invalid length. [ 176.831296][ T7806] netlink: 132 bytes leftover after parsing attributes in process `syz.3.628'. [ 176.866570][ T7806] syz.3.628 (7806) used obsolete PPPIOCDETACH ioctl [ 177.314239][ T7827] netlink: 'syz.0.636': attribute type 21 has an invalid length. [ 177.322267][ T7827] netlink: 164 bytes leftover after parsing attributes in process `syz.0.636'. [ 177.440327][ T7830] netlink: 40 bytes leftover after parsing attributes in process `syz.0.636'. [ 177.702875][ T7840] mac80211_hwsim hwsim6 .3ãc¤±: renamed from wlan1 (while UP) [ 177.781238][ T7840] netlink: 'syz.4.641': attribute type 21 has an invalid length. [ 177.969609][ T7844] netlink: zone id is out of range [ 177.988664][ T7844] netlink: zone id is out of range [ 178.017300][ T7844] netlink: get zone limit has 8 unknown bytes [ 178.040333][ T7849] netlink: 'syz.3.644': attribute type 10 has an invalid length. [ 178.052531][ T7849] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 178.831774][ T7861] netlink: 'syz.1.650': attribute type 29 has an invalid length. [ 178.841215][ T7861] netlink: 'syz.1.650': attribute type 29 has an invalid length. [ 178.849915][ T7861] netlink: 'syz.1.650': attribute type 29 has an invalid length. [ 179.091025][ T7873] netlink: zone id is out of range [ 179.098455][ T7873] netlink: zone id is out of range [ 179.111538][ T7873] netlink: get zone limit has 8 unknown bytes [ 179.326758][ T7879] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 180.224734][ T7897] validate_nla: 1 callbacks suppressed [ 180.224753][ T7897] netlink: 'syz.3.665': attribute type 2 has an invalid length. [ 180.243681][ T7898] netlink: 'syz.0.664': attribute type 29 has an invalid length. [ 180.252553][ T7898] netlink: 'syz.0.664': attribute type 29 has an invalid length. [ 180.284028][ T7898] netlink: 'syz.0.664': attribute type 29 has an invalid length. [ 180.300391][ T7897] __nla_validate_parse: 9 callbacks suppressed [ 180.300626][ T7897] netlink: 164 bytes leftover after parsing attributes in process `syz.3.665'. [ 180.319797][ T7898] netlink: 'syz.0.664': attribute type 29 has an invalid length. [ 180.410094][ T7904] netlink: 'syz.1.668': attribute type 29 has an invalid length. [ 180.434444][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.670'. [ 180.443734][ T7904] netlink: 'syz.1.668': attribute type 29 has an invalid length. [ 180.467428][ T7906] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.669'. [ 180.480881][ T7906] netlink: zone id is out of range [ 180.542929][ T7906] netlink: zone id is out of range [ 180.555299][ T7913] netlink: 'syz.1.668': attribute type 29 has an invalid length. [ 180.559415][ T7906] netlink: get zone limit has 8 unknown bytes [ 180.634626][ T7904] netlink: 'syz.1.668': attribute type 29 has an invalid length. [ 180.951586][ T7921] lo speed is unknown, defaulting to 1000 [ 181.022193][ T7928] lo: entered allmulticast mode [ 181.062505][ T24] lo speed is unknown, defaulting to 1000 [ 181.080387][ T24] syz2: Port: 1 Link DOWN [ 181.216641][ T7928] lo: entered promiscuous mode [ 181.240373][ T7937] netlink: 24 bytes leftover after parsing attributes in process `syz.0.681'. [ 181.242791][ T7928] lo: left allmulticast mode [ 181.258973][ T5929] lo speed is unknown, defaulting to 1000 [ 181.265157][ T5929] syz2: Port: 1 Link ACTIVE [ 181.280716][ T7939] netlink: 'syz.1.680': attribute type 29 has an invalid length. [ 181.713927][ T7950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.686'. [ 181.934985][ T7952] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.685'. [ 182.007791][ T7956] netlink: 76 bytes leftover after parsing attributes in process `syz.1.687'. [ 182.017731][ T1310] wlan1: Trigger new scan to find an IBSS to join [ 182.037751][ T7952] netlink: zone id is out of range [ 182.134483][ T7952] netlink: zone id is out of range [ 182.223659][ T7952] netlink: get zone limit has 8 unknown bytes [ 182.303542][ T7944] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.683'. [ 182.628929][ T7971] FAULT_INJECTION: forcing a failure. [ 182.628929][ T7971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.642311][ T7971] CPU: 0 UID: 0 PID: 7971 Comm: syz.1.688 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 182.642344][ T7971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 182.642357][ T7971] Call Trace: [ 182.642365][ T7971] [ 182.642374][ T7971] dump_stack_lvl+0x189/0x250 [ 182.642407][ T7971] ? __pfx____ratelimit+0x10/0x10 [ 182.642437][ T7971] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.642464][ T7971] ? __pfx__printk+0x10/0x10 [ 182.642499][ T7971] ? __pfx_migrate_enable+0x10/0x10 [ 182.642532][ T7971] should_fail_ex+0x414/0x560 [ 182.642567][ T7971] _copy_to_user+0x31/0xb0 [ 182.642594][ T7971] generic_map_lookup_batch+0x896/0xcc0 [ 182.642647][ T7971] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 182.642670][ T7971] ? __fget_files+0x2a/0x420 [ 182.642692][ T7971] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 182.642716][ T7971] bpf_map_do_batch+0x25b/0x5f0 [ 182.642746][ T7971] ? security_bpf+0x7e/0x300 [ 182.642795][ T7971] __sys_bpf+0x557/0x870 [ 182.642826][ T7971] ? __pfx___sys_bpf+0x10/0x10 [ 182.642869][ T7971] ? ksys_write+0x22a/0x250 [ 182.642900][ T7971] ? __pfx_ksys_write+0x10/0x10 [ 182.642925][ T7971] ? rcu_is_watching+0x15/0xb0 [ 182.642953][ T7971] __x64_sys_bpf+0x7c/0x90 [ 182.642982][ T7971] do_syscall_64+0xfa/0x3b0 [ 182.643012][ T7971] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.643039][ T7971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.643068][ T7971] ? clear_bhb_loop+0x60/0xb0 [ 182.643094][ T7971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.643114][ T7971] RIP: 0033:0x7ff84bf8ebe9 [ 182.643134][ T7971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.643151][ T7971] RSP: 002b:00007ff84cd61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 182.643173][ T7971] RAX: ffffffffffffffda RBX: 00007ff84c1b6090 RCX: 00007ff84bf8ebe9 [ 182.643188][ T7971] RDX: 0000000000000038 RSI: 00002000000001c0 RDI: 0000000000000018 [ 182.643201][ T7971] RBP: 00007ff84cd61090 R08: 0000000000000000 R09: 0000000000000000 [ 182.643214][ T7971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.643226][ T7971] R13: 00007ff84c1b6128 R14: 00007ff84c1b6090 R15: 00007ffd2e0693a8 [ 182.643260][ T7971] [ 183.193062][ T7985] FAULT_INJECTION: forcing a failure. [ 183.193062][ T7985] name failslab, interval 1, probability 0, space 0, times 0 [ 183.227777][ T7985] CPU: 0 UID: 0 PID: 7985 Comm: syz.3.695 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 183.227804][ T7985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 183.227816][ T7985] Call Trace: [ 183.227824][ T7985] [ 183.227832][ T7985] dump_stack_lvl+0x189/0x250 [ 183.227861][ T7985] ? __pfx____ratelimit+0x10/0x10 [ 183.227887][ T7985] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.227911][ T7985] ? __pfx__printk+0x10/0x10 [ 183.227944][ T7985] ? __pfx___might_resched+0x10/0x10 [ 183.227962][ T7985] ? fs_reclaim_acquire+0x7d/0x100 [ 183.227998][ T7985] should_fail_ex+0x414/0x560 [ 183.228028][ T7985] should_failslab+0xa8/0x100 [ 183.228059][ T7985] __kmalloc_cache_noprof+0x70/0x3d0 [ 183.228086][ T7985] ? nft_delchain+0x54/0x4b0 [ 183.228113][ T7985] nft_delchain+0x54/0x4b0 [ 183.228143][ T7985] nft_flush_table+0xa14/0xea0 [ 183.228174][ T7985] nf_tables_deltable+0x5cc/0xe10 [ 183.228207][ T7985] ? __pfx_nf_tables_deltable+0x10/0x10 [ 183.228226][ T7985] ? nfnl_pernet+0x23/0x240 [ 183.228259][ T7985] ? __nla_parse+0x40/0x60 [ 183.228293][ T7985] nfnetlink_rcv+0x1132/0x2520 [ 183.228350][ T7985] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 183.228391][ T7985] ? ref_tracker_free+0x63a/0x7d0 [ 183.228447][ T7985] ? __netlink_deliver_tap+0x807/0x850 [ 183.228475][ T7985] ? netlink_deliver_tap+0x2e/0x1b0 [ 183.228521][ T7985] netlink_unicast+0x82c/0x9e0 [ 183.228574][ T7985] ? __pfx_netlink_unicast+0x10/0x10 [ 183.228603][ T7985] ? netlink_sendmsg+0x642/0xb30 [ 183.228631][ T7985] ? skb_put+0x11b/0x210 [ 183.228667][ T7985] netlink_sendmsg+0x805/0xb30 [ 183.228708][ T7985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.228743][ T7985] ? aa_sock_msg_perm+0xf1/0x1d0 [ 183.228777][ T7985] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 183.228800][ T7985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.228832][ T7985] __sock_sendmsg+0x21c/0x270 [ 183.228862][ T7985] ____sys_sendmsg+0x505/0x830 [ 183.228890][ T7985] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.228921][ T7985] ? import_iovec+0x74/0xa0 [ 183.228950][ T7985] ___sys_sendmsg+0x21f/0x2a0 [ 183.228974][ T7985] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.229036][ T7985] ? __fget_files+0x2a/0x420 [ 183.229053][ T7985] ? __fget_files+0x3a0/0x420 [ 183.229083][ T7985] __x64_sys_sendmsg+0x19b/0x260 [ 183.229108][ T7985] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 183.229151][ T7985] ? __pfx_ksys_write+0x10/0x10 [ 183.229175][ T7985] ? rcu_is_watching+0x15/0xb0 [ 183.229205][ T7985] ? do_syscall_64+0xbe/0x3b0 [ 183.229237][ T7985] do_syscall_64+0xfa/0x3b0 [ 183.229263][ T7985] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.229288][ T7985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.229308][ T7985] ? clear_bhb_loop+0x60/0xb0 [ 183.229350][ T7985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.229370][ T7985] RIP: 0033:0x7fcaca98ebe9 [ 183.229388][ T7985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.229404][ T7985] RSP: 002b:00007fcacb778038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.229426][ T7985] RAX: ffffffffffffffda RBX: 00007fcacabb5fa0 RCX: 00007fcaca98ebe9 [ 183.229441][ T7985] RDX: 0000000000000080 RSI: 0000200000000340 RDI: 0000000000000003 [ 183.229454][ T7985] RBP: 00007fcacb778090 R08: 0000000000000000 R09: 0000000000000000 [ 183.229478][ T7985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.229489][ T7985] R13: 00007fcacabb6038 R14: 00007fcacabb5fa0 R15: 00007fff686df178 [ 183.229520][ T7985] [ 184.714759][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.709'. [ 184.769962][ T8033] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.709'. [ 185.238212][ T8040] validate_nla: 10 callbacks suppressed [ 185.238234][ T8040] netlink: 'syz.1.714': attribute type 39 has an invalid length. [ 185.883466][ T13] wlan1: Trigger new scan to find an IBSS to join [ 187.125805][ T4344] wlan1: Creating new IBSS network, BSSID 92:36:11:3d:7b:16 [ 187.134279][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.733'. [ 188.081279][ T8124] netlink: 'syz.2.743': attribute type 39 has an invalid length. [ 188.355132][ T8133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.578663][ T8140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.750'. [ 189.493473][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.759'. [ 190.271947][ T8180] lo speed is unknown, defaulting to 1000 [ 190.320815][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.764'. [ 190.483870][ T8197] netlink: 132 bytes leftover after parsing attributes in process `syz.3.765'. [ 190.610883][ T8192] netlink: 830 bytes leftover after parsing attributes in process `syz.3.765'. [ 190.900777][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.771'. [ 190.903184][ T8205] netlink: 'syz.1.770': attribute type 39 has an invalid length. [ 191.359268][ T8222] netlink: 'syz.0.776': attribute type 29 has an invalid length. [ 191.388431][ T8222] netlink: 'syz.0.776': attribute type 29 has an invalid length. [ 191.417759][ T8222] netlink: 'syz.0.776': attribute type 29 has an invalid length. [ 191.437230][ T8224] netlink: 'syz.1.777': attribute type 10 has an invalid length. [ 191.447485][ T8222] netlink: 'syz.0.776': attribute type 29 has an invalid length. [ 191.459891][ T8224] bond0: (slave bond_slave_0): Releasing backup interface [ 191.537394][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.778'. [ 191.538007][ T8226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.778'. [ 192.452117][ T8268] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.788'. [ 192.462279][ T8268] netlink: zone id is out of range [ 192.467681][ T8268] netlink: zone id is out of range [ 192.473176][ T8268] netlink: get zone limit has 8 unknown bytes [ 193.783291][ T8306] netlink: 'syz.0.801': attribute type 2 has an invalid length. [ 193.801616][ T8306] netlink: 164 bytes leftover after parsing attributes in process `syz.0.801'. [ 194.270646][ T8320] netlink: 'syz.4.810': attribute type 2 has an invalid length. [ 194.307627][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.315267][ T8320] netlink: 164 bytes leftover after parsing attributes in process `syz.4.810'. [ 194.333347][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.405632][ T8325] netlink: 'syz.4.810': attribute type 2 has an invalid length. [ 194.423900][ T8325] netlink: 164 bytes leftover after parsing attributes in process `syz.4.810'. [ 194.550476][ T8329] netlink: 'syz.0.811': attribute type 39 has an invalid length. [ 195.875226][ T8362] netlink: 164 bytes leftover after parsing attributes in process `syz.3.823'. [ 195.889521][ T8362] netlink: 164 bytes leftover after parsing attributes in process `syz.3.823'. [ 196.141162][ T8371] validate_nla: 3 callbacks suppressed [ 196.141180][ T8371] netlink: 'syz.0.826': attribute type 39 has an invalid length. [ 196.944558][ T8391] netlink: 'syz.3.832': attribute type 10 has an invalid length. [ 197.042153][ T8391] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 197.120180][ T8386] netlink: 60 bytes leftover after parsing attributes in process `syz.0.829'. [ 197.396535][ T8408] netlink: 'syz.2.839': attribute type 39 has an invalid length. [ 197.750633][ T8417] lo speed is unknown, defaulting to 1000 [ 198.953365][ T8454] netlink: 'syz.2.856': attribute type 3 has an invalid length. [ 198.999490][ T8454] netlink: 'syz.2.856': attribute type 2 has an invalid length. [ 199.007982][ T8454] netlink: 198112 bytes leftover after parsing attributes in process `syz.2.856'. [ 200.170010][ T8478] FAULT_INJECTION: forcing a failure. [ 200.170010][ T8478] name failslab, interval 1, probability 0, space 0, times 0 [ 200.189083][ T8478] CPU: 0 UID: 0 PID: 8478 Comm: syz.1.862 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 200.189113][ T8478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 200.189126][ T8478] Call Trace: [ 200.189138][ T8478] [ 200.189151][ T8478] dump_stack_lvl+0x189/0x250 [ 200.189193][ T8478] ? __pfx____ratelimit+0x10/0x10 [ 200.189235][ T8478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.189273][ T8478] ? __pfx__printk+0x10/0x10 [ 200.189350][ T8478] ? __pfx___might_resched+0x10/0x10 [ 200.189417][ T8478] should_fail_ex+0x414/0x560 [ 200.189486][ T8478] should_failslab+0xa8/0x100 [ 200.189537][ T8478] __kmalloc_cache_noprof+0x70/0x3d0 [ 200.189572][ T8478] ? genl_start+0x1c9/0x6c0 [ 200.189637][ T8478] genl_start+0x1c9/0x6c0 [ 200.189664][ T8478] ? netlink_lookup+0x30/0x200 [ 200.189764][ T8478] __netlink_dump_start+0x466/0x7e0 [ 200.189866][ T8478] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 200.189873][ T8476] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.861'. [ 200.189923][ T8478] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 200.189948][ T8478] ? genl_get_cmd+0x496/0x910 [ 200.190016][ T8478] ? __pfx_genl_start+0x10/0x10 [ 200.190038][ T8478] ? __pfx_genl_dumpit+0x10/0x10 [ 200.190059][ T8478] ? __pfx_genl_done+0x10/0x10 [ 200.190114][ T8478] ? trace_call_bpf+0xb7/0x850 [ 200.190144][ T8478] ? trace_call_bpf+0x5ba/0x850 [ 200.190206][ T8478] genl_rcv_msg+0x5da/0x790 [ 200.190293][ T8478] ? __pfx_genl_rcv_msg+0x10/0x10 [ 200.190322][ T8478] ? __pfx_ctrl_dumppolicy_start+0x10/0x10 [ 200.190346][ T8478] ? __pfx_ctrl_dumppolicy+0x10/0x10 [ 200.190368][ T8478] ? __pfx_ctrl_dumppolicy_done+0x10/0x10 [ 200.190418][ T8478] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 200.190513][ T8478] netlink_rcv_skb+0x208/0x470 [ 200.190548][ T8478] ? __lock_acquire+0xab9/0xd20 [ 200.190598][ T8478] ? __pfx_genl_rcv_msg+0x10/0x10 [ 200.190647][ T8478] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 200.190834][ T8478] ? down_read+0x1ad/0x2e0 [ 200.190900][ T8478] genl_rcv+0x28/0x40 [ 200.190930][ T8478] netlink_unicast+0x82c/0x9e0 [ 200.191044][ T8478] ? __pfx_netlink_unicast+0x10/0x10 [ 200.191100][ T8478] ? netlink_sendmsg+0x642/0xb30 [ 200.191132][ T8478] ? skb_put+0x11b/0x210 [ 200.191204][ T8478] netlink_sendmsg+0x805/0xb30 [ 200.191308][ T8478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.191364][ T8478] ? perf_trace_run_bpf_submit+0x100/0x170 [ 200.191394][ T8478] ? aa_sock_msg_perm+0xf1/0x1d0 [ 200.191470][ T8478] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 200.191502][ T8478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.191556][ T8478] __sock_sendmsg+0x21c/0x270 [ 200.191622][ T8478] ____sys_sendmsg+0x505/0x830 [ 200.191701][ T8478] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.191801][ T8478] ? import_iovec+0x74/0xa0 [ 200.191873][ T8478] ___sys_sendmsg+0x21f/0x2a0 [ 200.191928][ T8478] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.192113][ T8478] ? __fget_files+0x2a/0x420 [ 200.192220][ T8478] ? __fget_files+0x2a/0x420 [ 200.192244][ T8478] ? __fget_files+0x3a0/0x420 [ 200.192341][ T8478] __x64_sys_sendmsg+0x19b/0x260 [ 200.192394][ T8478] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 200.192490][ T8478] ? __pfx_ksys_write+0x10/0x10 [ 200.192518][ T8478] ? rcu_is_watching+0x15/0xb0 [ 200.192583][ T8478] ? do_syscall_64+0xbe/0x3b0 [ 200.192650][ T8478] do_syscall_64+0xfa/0x3b0 [ 200.192684][ T8478] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.192722][ T8478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.192750][ T8478] ? clear_bhb_loop+0x60/0xb0 [ 200.192803][ T8478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.192835][ T8478] RIP: 0033:0x7ff84bf8ebe9 [ 200.192864][ T8478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.192884][ T8478] RSP: 002b:00007ff84cd82038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.192908][ T8478] RAX: ffffffffffffffda RBX: 00007ff84c1b5fa0 RCX: 00007ff84bf8ebe9 [ 200.192931][ T8478] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 200.192944][ T8478] RBP: 00007ff84cd82090 R08: 0000000000000000 R09: 0000000000000000 [ 200.192959][ T8478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.192974][ T8478] R13: 00007ff84c1b6038 R14: 00007ff84c1b5fa0 R15: 00007ffd2e0693a8 [ 200.193097][ T8478] [ 200.907503][ T8476] netlink: zone id is out of range [ 200.959080][ T8476] netlink: zone id is out of range [ 200.977812][ T8476] netlink: get zone limit has 8 unknown bytes [ 201.016334][ T8484] lo speed is unknown, defaulting to 1000 [ 201.204166][ T8495] netlink: 'syz.4.867': attribute type 2 has an invalid length. [ 201.212445][ T8495] netlink: 164 bytes leftover after parsing attributes in process `syz.4.867'. [ 201.224190][ T8495] netlink: 'syz.4.867': attribute type 2 has an invalid length. [ 201.231949][ T8495] netlink: 164 bytes leftover after parsing attributes in process `syz.4.867'. [ 201.974083][ T8521] netlink: 60 bytes leftover after parsing attributes in process `syz.3.876'. [ 202.145415][ T8523] netlink: 60 bytes leftover after parsing attributes in process `syz.3.876'. [ 202.175550][ T8526] netlink: 'syz.4.877': attribute type 12 has an invalid length. [ 202.183560][ T8526] netlink: 132 bytes leftover after parsing attributes in process `syz.4.877'. [ 202.533973][ T8539] netlink: 'syz.1.881': attribute type 2 has an invalid length. [ 202.556546][ T8539] netlink: 164 bytes leftover after parsing attributes in process `syz.1.881'. [ 202.583295][ T8539] netlink: 'syz.1.881': attribute type 2 has an invalid length. [ 202.595094][ T8539] netlink: 164 bytes leftover after parsing attributes in process `syz.1.881'. [ 202.807181][ T8559] netlink: 'syz.4.885': attribute type 21 has an invalid length. [ 202.815495][ T8559] netlink: 132 bytes leftover after parsing attributes in process `syz.4.885'. [ 203.710460][ T8578] lo speed is unknown, defaulting to 1000 [ 204.195514][ T8595] netlink: 'syz.1.894': attribute type 2 has an invalid length. [ 204.203465][ T8595] netlink: 164 bytes leftover after parsing attributes in process `syz.1.894'. [ 204.224419][ T8595] netlink: 'syz.1.894': attribute type 2 has an invalid length. [ 204.232873][ T8595] netlink: 164 bytes leftover after parsing attributes in process `syz.1.894'. [ 204.648559][ T8617] netlink: 277 bytes leftover after parsing attributes in process `syz.0.902'. [ 205.314790][ T8649] netlink: 'syz.2.909': attribute type 13 has an invalid length. [ 205.322649][ T8649] netlink: 'syz.2.909': attribute type 17 has an invalid length. [ 205.360443][ T8649] bridge0: left promiscuous mode [ 205.370697][ T8649] bridge0: left allmulticast mode [ 205.385889][ T8649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 206.258764][ T8682] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.919'. [ 206.674069][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.923'. [ 207.555307][ T8718] validate_nla: 1 callbacks suppressed [ 207.555327][ T8718] netlink: 'syz.3.933': attribute type 4 has an invalid length. [ 207.583895][ T8718] netlink: 152 bytes leftover after parsing attributes in process `syz.3.933'. [ 207.631497][ T8718] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 207.668300][ T8720] netlink: 'syz.0.935': attribute type 10 has an invalid length. [ 207.701685][ T8720] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 208.130453][ T8728] lo speed is unknown, defaulting to 1000 [ 208.137252][ T8725] netlink: 'syz.3.936': attribute type 2 has an invalid length. [ 208.145481][ T8725] netlink: 164 bytes leftover after parsing attributes in process `syz.3.936'. [ 208.192391][ T8734] netlink: 'syz.3.936': attribute type 2 has an invalid length. [ 208.223125][ T8734] netlink: 164 bytes leftover after parsing attributes in process `syz.3.936'. [ 208.576826][ T8757] netlink: 'syz.0.946': attribute type 39 has an invalid length. [ 208.854106][ T8766] netlink: 'syz.4.948': attribute type 1 has an invalid length. [ 208.913403][ T8766] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.948'. [ 208.936769][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.948'. [ 209.542611][ T8795] delete_channel: no stack [ 209.547597][ T8795] delete_channel: no stack [ 209.690895][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.959'. [ 209.903282][ T8804] netlink: 'syz.1.960': attribute type 39 has an invalid length. [ 209.969273][ T8806] netlink: 'syz.3.961': attribute type 2 has an invalid length. [ 210.046666][ T8806] netlink: 'syz.3.961': attribute type 1 has an invalid length. [ 210.255157][ T8806] netlink: 'syz.3.961': attribute type 10 has an invalid length. [ 210.395120][ T8806] team0: Port device wlan1 added [ 210.451724][ T8819] netlink: 144 bytes leftover after parsing attributes in process `syz.0.966'. [ 210.762447][ T8806] syz.3.961 (8806) used greatest stack depth: 18296 bytes left [ 211.027047][ T8839] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.972'. [ 211.725966][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 211.732089][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 211.738572][ T5880] Bluetooth: hci4: command 0x0406 tx timeout [ 211.759539][ T5869] Bluetooth: hci0: command 0x0406 tx timeout [ 212.104314][ T8863] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.981'. [ 212.164889][ T8867] FAULT_INJECTION: forcing a failure. [ 212.164889][ T8867] name failslab, interval 1, probability 0, space 0, times 0 [ 212.183780][ T8867] CPU: 0 UID: 0 PID: 8867 Comm: syz.2.980 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 212.183810][ T8867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 212.183823][ T8867] Call Trace: [ 212.183836][ T8867] [ 212.183848][ T8867] dump_stack_lvl+0x189/0x250 [ 212.183887][ T8867] ? __pfx____ratelimit+0x10/0x10 [ 212.183927][ T8867] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.183964][ T8867] ? __pfx__printk+0x10/0x10 [ 212.183991][ T8867] ? nfnetlink_parse_nat_setup+0x50b/0x680 [ 212.184042][ T8867] ? __pfx_nfnetlink_parse_nat_setup+0x10/0x10 [ 212.184128][ T8867] should_fail_ex+0x414/0x560 [ 212.184201][ T8867] should_failslab+0xa8/0x100 [ 212.184251][ T8867] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 212.184287][ T8867] ? nf_ct_ext_add+0x1ab/0x450 [ 212.184340][ T8867] ? nf_ct_ext_add+0x1ab/0x450 [ 212.184366][ T8867] krealloc_noprof+0x124/0x340 [ 212.184426][ T8867] nf_ct_ext_add+0x1ab/0x450 [ 212.184493][ T8867] ctnetlink_new_conntrack+0x11e7/0x2070 [ 212.184539][ T8867] ? ctnetlink_new_conntrack+0x6d3/0x2070 [ 212.184612][ T8867] ? __pfx_ctnetlink_new_conntrack+0x10/0x10 [ 212.184632][ T8867] ? trace_contention_end+0x39/0x120 [ 212.184668][ T8867] ? __mutex_lock+0x335/0x1360 [ 212.184695][ T8867] ? perf_trace_run_bpf_submit+0x100/0x170 [ 212.184757][ T8867] ? perf_trace_lock+0x2f8/0x3b0 [ 212.184811][ T8867] ? nfnetlink_rcv_msg+0x9dc/0x1130 [ 212.184993][ T8867] nfnetlink_rcv_msg+0xb4d/0x1130 [ 212.185026][ T8867] ? perf_swevent_get_recursion_context+0xa6/0x100 [ 212.185052][ T8867] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 212.185196][ T8867] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 212.185496][ T8867] netlink_rcv_skb+0x208/0x470 [ 212.185544][ T8867] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 212.185592][ T8867] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 212.185697][ T8867] ? bpf_lsm_capable+0x9/0x20 [ 212.185726][ T8867] ? security_capable+0x7e/0x2e0 [ 212.185826][ T8867] nfnetlink_rcv+0x26a/0x2520 [ 212.185881][ T8867] ? __pfx_perf_trace_lock+0x10/0x10 [ 212.185900][ T8867] ? migrate_enable+0x29c/0x3c0 [ 212.185946][ T8867] ? trace_call_bpf+0xb7/0x850 [ 212.185982][ T8867] ? trace_call_bpf+0xb7/0x850 [ 212.186049][ T8867] ? trace_call_bpf+0xb7/0x850 [ 212.186090][ T8867] ? trace_call_bpf+0xb7/0x850 [ 212.186130][ T8867] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 212.186155][ T8867] ? trace_call_bpf+0xb7/0x850 [ 212.186188][ T8867] ? __pfx___dev_queue_xmit+0x10/0x10 [ 212.186244][ T8867] ? __pfx_trace_call_bpf+0x10/0x10 [ 212.186340][ T8867] ? perf_trace_run_bpf_submit+0x100/0x170 [ 212.186398][ T8867] ? perf_trace_lock+0x2f8/0x3b0 [ 212.186431][ T8867] ? __skb_clone+0x483/0x7a0 [ 212.186488][ T8867] ? __pfx_perf_trace_lock+0x10/0x10 [ 212.186522][ T8867] ? skb_clone+0x246/0x3a0 [ 212.186575][ T8867] ? __netlink_deliver_tap+0x807/0x850 [ 212.186614][ T8867] ? netlink_deliver_tap+0x2e/0x1b0 [ 212.186693][ T8867] ? netlink_deliver_tap+0x2e/0x1b0 [ 212.186780][ T8867] netlink_unicast+0x82c/0x9e0 [ 212.186871][ T8867] ? __pfx_netlink_unicast+0x10/0x10 [ 212.186924][ T8867] ? netlink_sendmsg+0x642/0xb30 [ 212.186965][ T8867] ? skb_put+0x11b/0x210 [ 212.187029][ T8867] netlink_sendmsg+0x805/0xb30 [ 212.187121][ T8867] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.187178][ T8867] ? perf_trace_run_bpf_submit+0x100/0x170 [ 212.187203][ T8867] ? aa_sock_msg_perm+0xf1/0x1d0 [ 212.187256][ T8867] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 212.187283][ T8867] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.187335][ T8867] __sock_sendmsg+0x21c/0x270 [ 212.187392][ T8867] ____sys_sendmsg+0x505/0x830 [ 212.187454][ T8867] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.187536][ T8867] ? import_iovec+0x74/0xa0 [ 212.187591][ T8867] ___sys_sendmsg+0x21f/0x2a0 [ 212.187637][ T8867] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.187778][ T8867] ? __fget_files+0x2a/0x420 [ 212.187887][ T8867] ? __fget_files+0x2a/0x420 [ 212.187907][ T8867] ? __fget_files+0x3a0/0x420 [ 212.187996][ T8867] __x64_sys_sendmsg+0x19b/0x260 [ 212.188045][ T8867] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 212.188131][ T8867] ? __pfx_ksys_write+0x10/0x10 [ 212.188206][ T8867] ? do_syscall_64+0xbe/0x3b0 [ 212.188270][ T8867] do_syscall_64+0xfa/0x3b0 [ 212.188314][ T8867] ? lockdep_hardirqs_on+0x9c/0x150 [ 212.188349][ T8867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.188375][ T8867] ? clear_bhb_loop+0x60/0xb0 [ 212.188421][ T8867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.188443][ T8867] RIP: 0033:0x7f745e38ebe9 [ 212.188470][ T8867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.188489][ T8867] RSP: 002b:00007f745c5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.188511][ T8867] RAX: ffffffffffffffda RBX: 00007f745e5b5fa0 RCX: 00007f745e38ebe9 [ 212.188526][ T8867] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 212.188539][ T8867] RBP: 00007f745c5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 212.188553][ T8867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.188565][ T8867] R13: 00007f745e5b6038 R14: 00007f745e5b5fa0 R15: 00007ffee60304a8 [ 212.188668][ T8867] [ 212.842602][ T8869] lo speed is unknown, defaulting to 1000 [ 213.011220][ T8877] validate_nla: 2 callbacks suppressed [ 213.011240][ T8877] netlink: 'syz.3.985': attribute type 4 has an invalid length. [ 213.048557][ T8877] netlink: 152 bytes leftover after parsing attributes in process `syz.3.985'. [ 213.099027][ T8877] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 213.761964][ T8905] netlink: 348 bytes leftover after parsing attributes in process `syz.4.994'. [ 213.814077][ T8902] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.994'. [ 214.024165][ T8909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.995'. [ 214.438130][ T8921] netlink: 'syz.2.999': attribute type 11 has an invalid length. [ 214.449341][ T8921] FAULT_INJECTION: forcing a failure. [ 214.449341][ T8921] name failslab, interval 1, probability 0, space 0, times 0 [ 214.463684][ T8921] CPU: 1 UID: 0 PID: 8921 Comm: syz.2.999 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 214.463714][ T8921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 214.463727][ T8921] Call Trace: [ 214.463735][ T8921] [ 214.463744][ T8921] dump_stack_lvl+0x189/0x250 [ 214.463775][ T8921] ? __pfx____ratelimit+0x10/0x10 [ 214.463804][ T8921] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.463829][ T8921] ? __pfx__printk+0x10/0x10 [ 214.463864][ T8921] ? __pfx___might_resched+0x10/0x10 [ 214.463884][ T8921] ? fs_reclaim_acquire+0x7d/0x100 [ 214.463923][ T8921] should_fail_ex+0x414/0x560 [ 214.463956][ T8921] should_failslab+0xa8/0x100 [ 214.463988][ T8921] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 214.464026][ T8921] ? __alloc_skb+0x112/0x2d0 [ 214.464060][ T8921] __alloc_skb+0x112/0x2d0 [ 214.464095][ T8921] netlink_ack+0x146/0xa50 [ 214.464121][ T8921] ? __pfx_genl_rcv_msg+0x10/0x10 [ 214.464148][ T8921] ? __asan_memcpy+0x40/0x70 [ 214.464171][ T8921] ? __pfx_ref_tracker_free+0x10/0x10 [ 214.464209][ T8921] netlink_rcv_skb+0x28c/0x470 [ 214.464236][ T8921] ? __lock_acquire+0xab9/0xd20 [ 214.464267][ T8921] ? __pfx_genl_rcv_msg+0x10/0x10 [ 214.464292][ T8921] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 214.464343][ T8921] ? down_read+0x1ad/0x2e0 [ 214.464377][ T8921] genl_rcv+0x28/0x40 [ 214.464398][ T8921] netlink_unicast+0x82c/0x9e0 [ 214.464435][ T8921] ? __pfx_netlink_unicast+0x10/0x10 [ 214.464465][ T8921] ? netlink_sendmsg+0x642/0xb30 [ 214.464493][ T8921] ? skb_put+0x11b/0x210 [ 214.464528][ T8921] netlink_sendmsg+0x805/0xb30 [ 214.464569][ T8921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.464604][ T8921] ? aa_sock_msg_perm+0xf1/0x1d0 [ 214.464638][ T8921] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 214.464661][ T8921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.464693][ T8921] __sock_sendmsg+0x21c/0x270 [ 214.464723][ T8921] ____sys_sendmsg+0x505/0x830 [ 214.464751][ T8921] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.464782][ T8921] ? import_iovec+0x74/0xa0 [ 214.464810][ T8921] ___sys_sendmsg+0x21f/0x2a0 [ 214.464834][ T8921] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.464896][ T8921] ? __fget_files+0x2a/0x420 [ 214.464914][ T8921] ? __fget_files+0x3a0/0x420 [ 214.464944][ T8921] __x64_sys_sendmsg+0x19b/0x260 [ 214.464969][ T8921] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 214.464988][ T8921] ? perf_trace_preemptirq_template+0xa3/0x340 [ 214.465035][ T8921] ? __pfx_ksys_write+0x10/0x10 [ 214.465061][ T8921] ? rcu_is_watching+0x15/0xb0 [ 214.465088][ T8921] ? do_syscall_64+0xbe/0x3b0 [ 214.465140][ T8921] do_syscall_64+0xfa/0x3b0 [ 214.465169][ T8921] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.465198][ T8921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.465219][ T8921] ? clear_bhb_loop+0x60/0xb0 [ 214.465246][ T8921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.465267][ T8921] RIP: 0033:0x7f745e38ebe9 [ 214.465286][ T8921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.465305][ T8921] RSP: 002b:00007f745c5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.465328][ T8921] RAX: ffffffffffffffda RBX: 00007f745e5b5fa0 RCX: 00007f745e38ebe9 [ 214.465344][ T8921] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 214.465358][ T8921] RBP: 00007f745c5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 214.465371][ T8921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.465384][ T8921] R13: 00007f745e5b6038 R14: 00007f745e5b5fa0 R15: 00007ffee60304a8 [ 214.465419][ T8921] [ 215.004771][ T8936] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.1002'. [ 215.020238][ T8936] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1002'. [ 215.079409][ T8936] lo speed is unknown, defaulting to 1000 [ 215.578087][ T8960] lo speed is unknown, defaulting to 1000 [ 215.638361][ T8961] FAULT_INJECTION: forcing a failure. [ 215.638361][ T8961] name failslab, interval 1, probability 0, space 0, times 0 [ 215.651751][ T8961] CPU: 0 UID: 0 PID: 8961 Comm: syz.2.1009 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 215.651780][ T8961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 215.651793][ T8961] Call Trace: [ 215.651801][ T8961] [ 215.651810][ T8961] dump_stack_lvl+0x189/0x250 [ 215.651841][ T8961] ? __pfx____ratelimit+0x10/0x10 [ 215.651871][ T8961] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.651898][ T8961] ? __pfx__printk+0x10/0x10 [ 215.651937][ T8961] ? atomic_notifier_call_chain+0x26/0x180 [ 215.651973][ T8961] ? atomic_notifier_call_chain+0x26/0x180 [ 215.652000][ T8961] should_fail_ex+0x414/0x560 [ 215.652034][ T8961] should_failslab+0xa8/0x100 [ 215.652067][ T8961] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 215.652097][ T8961] ? __alloc_skb+0x112/0x2d0 [ 215.652126][ T8961] ? rht_lock+0xff/0x220 [ 215.652176][ T8961] __alloc_skb+0x112/0x2d0 [ 215.652213][ T8961] fdb_notify+0xa6/0x160 [ 215.652244][ T8961] fdb_delete+0xec4/0x1160 [ 215.652289][ T8961] ? fdb_delete+0x39a/0x1160 [ 215.652320][ T8961] ? __pfx_fdb_delete+0x10/0x10 [ 215.652358][ T8961] br_fdb_find_delete_local+0x122/0x140 [ 215.652390][ T8961] nbp_vlan_delete+0x183/0x220 [ 215.652423][ T8961] br_vlan_info+0x137/0x460 [ 215.652453][ T8961] ? __pfx_br_vlan_info+0x10/0x10 [ 215.652492][ T8961] br_process_vlan_info+0x301/0x890 [ 215.652530][ T8961] ? __pfx_br_process_vlan_info+0x10/0x10 [ 215.652559][ T8961] ? br_afspec+0x365/0x5f0 [ 215.652591][ T8961] br_afspec+0x395/0x5f0 [ 215.652629][ T8961] ? __pfx_br_afspec+0x10/0x10 [ 215.652677][ T8961] br_dellink+0x20a/0x2a0 [ 215.652703][ T8961] ? __pfx_br_dellink+0x10/0x10 [ 215.652734][ T8961] ? mutex_is_locked+0x17/0x50 [ 215.652760][ T8961] rtnl_bridge_dellink+0x47b/0x6e0 [ 215.652797][ T8961] ? __pfx_rtnl_bridge_dellink+0x10/0x10 [ 215.652828][ T8961] ? __pfx_rtnl_bridge_dellink+0x10/0x10 [ 215.652860][ T8961] ? rtnetlink_rcv_msg+0x766/0xb70 [ 215.652895][ T8961] ? __pfx_rtnl_bridge_dellink+0x10/0x10 [ 215.652926][ T8961] rtnetlink_rcv_msg+0x779/0xb70 [ 215.652961][ T8961] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 215.652989][ T8961] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 215.653016][ T8961] ? ref_tracker_free+0x63a/0x7d0 [ 215.653045][ T8961] ? __asan_memcpy+0x40/0x70 [ 215.653069][ T8961] ? __pfx_ref_tracker_free+0x10/0x10 [ 215.653095][ T8961] ? __skb_clone+0x63/0x7a0 [ 215.653128][ T8961] netlink_rcv_skb+0x208/0x470 [ 215.653160][ T8961] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 215.653193][ T8961] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 215.653237][ T8961] ? netlink_deliver_tap+0x2e/0x1b0 [ 215.653277][ T8961] netlink_unicast+0x82c/0x9e0 [ 215.653315][ T8961] ? __pfx_netlink_unicast+0x10/0x10 [ 215.653345][ T8961] ? netlink_sendmsg+0x642/0xb30 [ 215.653390][ T8961] ? skb_put+0x11b/0x210 [ 215.653427][ T8961] netlink_sendmsg+0x805/0xb30 [ 215.653457][ T8961] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.653496][ T8961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.653533][ T8961] ? bpf_lsm_socket_sendmsg+0x4/0x20 [ 215.653576][ T8961] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 215.653599][ T8961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.653632][ T8961] __sock_sendmsg+0x21c/0x270 [ 215.653671][ T8961] ____sys_sendmsg+0x505/0x830 [ 215.653700][ T8961] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.653735][ T8961] ? import_iovec+0x74/0xa0 [ 215.653764][ T8961] ___sys_sendmsg+0x21f/0x2a0 [ 215.653790][ T8961] ? __pfx____sys_sendmsg+0x10/0x10 [ 215.653856][ T8961] ? __fget_files+0x2a/0x420 [ 215.653875][ T8961] ? __fget_files+0x3a0/0x420 [ 215.653906][ T8961] __x64_sys_sendmsg+0x19b/0x260 [ 215.653932][ T8961] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 215.653968][ T8961] ? __pfx_ksys_write+0x10/0x10 [ 215.654004][ T8961] ? do_syscall_64+0xbe/0x3b0 [ 215.654039][ T8961] do_syscall_64+0xfa/0x3b0 [ 215.654072][ T8961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.654092][ T8961] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 215.654114][ T8961] ? clear_bhb_loop+0x60/0xb0 [ 215.654141][ T8961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.654162][ T8961] RIP: 0033:0x7f745e38ebe9 [ 215.654182][ T8961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.654201][ T8961] RSP: 002b:00007f745c5d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.654225][ T8961] RAX: ffffffffffffffda RBX: 00007f745e5b6090 RCX: 00007f745e38ebe9 [ 215.654241][ T8961] RDX: 0000000020004080 RSI: 0000200000000040 RDI: 000000000000000b [ 215.654256][ T8961] RBP: 00007f745c5d5090 R08: 0000000000000000 R09: 0000000000000000 [ 215.654269][ T8961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.654282][ T8961] R13: 00007f745e5b6128 R14: 00007f745e5b6090 R15: 00007ffee60304a8 [ 215.654318][ T8961] [ 216.244539][ T8964] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1011'. [ 216.320165][ T8971] netlink: 182 bytes leftover after parsing attributes in process `syz.1.1013'. [ 216.773280][ T8980] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 216.923950][ T5182] Bluetooth: hci3: command 0x0406 tx timeout [ 217.137094][ T4344] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 217.375649][ T8993] lo speed is unknown, defaulting to 1000 [ 217.682648][ T9008] netlink: 'syz.1.1025': attribute type 2 has an invalid length. [ 217.728899][ T9008] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1025'. [ 217.793710][ T9011] netlink: 'syz.1.1025': attribute type 2 has an invalid length. [ 217.801509][ T9011] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1025'. [ 217.948013][ T9015] mac80211_hwsim hwsim7 .3ãc¤±: renamed from wlan1 (while UP) [ 217.995893][ T9021] FAULT_INJECTION: forcing a failure. [ 217.995893][ T9021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.036533][ T9021] CPU: 1 UID: 0 PID: 9021 Comm: syz.4.1030 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 218.036571][ T9021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 218.036584][ T9021] Call Trace: [ 218.036593][ T9021] [ 218.036602][ T9021] dump_stack_lvl+0x189/0x250 [ 218.036634][ T9021] ? __pfx____ratelimit+0x10/0x10 [ 218.036666][ T9021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.036693][ T9021] ? __pfx__printk+0x10/0x10 [ 218.036725][ T9021] ? __might_fault+0xb0/0x130 [ 218.036772][ T9021] should_fail_ex+0x414/0x560 [ 218.036814][ T9021] _copy_from_user+0x2d/0xb0 [ 218.036841][ T9021] ___sys_sendmsg+0x158/0x2a0 [ 218.036869][ T9021] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.036941][ T9021] ? __fget_files+0x2a/0x420 [ 218.036958][ T9021] ? __fget_files+0x3a0/0x420 [ 218.037003][ T9021] __x64_sys_sendmsg+0x19b/0x260 [ 218.037026][ T9021] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 218.037059][ T9021] ? __pfx_ksys_write+0x10/0x10 [ 218.037080][ T9021] ? rcu_is_watching+0x15/0xb0 [ 218.037107][ T9021] ? do_syscall_64+0xbe/0x3b0 [ 218.037138][ T9021] do_syscall_64+0xfa/0x3b0 [ 218.037162][ T9021] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.037185][ T9021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.037203][ T9021] ? clear_bhb_loop+0x60/0xb0 [ 218.037226][ T9021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.037243][ T9021] RIP: 0033:0x7f7fdeb8ebe9 [ 218.037277][ T9021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.037293][ T9021] RSP: 002b:00007f7fdf991038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.037312][ T9021] RAX: ffffffffffffffda RBX: 00007f7fdedb5fa0 RCX: 00007f7fdeb8ebe9 [ 218.037325][ T9021] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 218.037336][ T9021] RBP: 00007f7fdf991090 R08: 0000000000000000 R09: 0000000000000000 [ 218.037347][ T9021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.037357][ T9021] R13: 00007f7fdedb6038 R14: 00007f7fdedb5fa0 R15: 00007ffc35eb0a38 [ 218.037396][ T9021] [ 218.448695][ T9026] lo speed is unknown, defaulting to 1000 [ 219.132240][ T9046] lo speed is unknown, defaulting to 1000 [ 219.440493][ T9067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1046'. [ 219.997359][ T9080] netlink: 'syz.0.1050': attribute type 2 has an invalid length. [ 220.142914][ T9085] lo speed is unknown, defaulting to 1000 [ 220.951344][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1056'. [ 221.019107][ T9109] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1059'. [ 221.082683][ T9111] netlink: 'syz.1.1060': attribute type 10 has an invalid length. [ 221.116579][ T9111] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.141879][ T9111] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.329327][ T9111] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.339337][ T9111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.356173][ T9111] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.364997][ T9111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.366478][ T9119] netlink: 'syz.3.1062': attribute type 10 has an invalid length. [ 221.401147][ T9120] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1056'. [ 221.517274][ T9111] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 221.579868][ T9116] syzkaller0: tun_chr_ioctl cmd 1074025681 [ 221.650298][ T9119] .3ãc¤±: mtu less than device minimum [ 221.662194][ T9119] team0: Device .3ãc¤± failed to change mtu [ 221.670170][ T9119] bond0: (slave team0): Error -22 calling dev_set_mtu [ 221.685088][ T9114] lo speed is unknown, defaulting to 1000 [ 221.744774][ T9121] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 223.004285][ T9155] mac80211_hwsim hwsim3 .3ãc¤±: renamed from wlan1 (while UP) [ 223.462379][ T9168] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1077'. [ 223.925757][ T9173] lo speed is unknown, defaulting to 1000 [ 224.381405][ T9183] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1081'. [ 224.862595][ T9199] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1087'. [ 226.518886][ T9244] FAULT_INJECTION: forcing a failure. [ 226.518886][ T9244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.559804][ T9244] CPU: 0 UID: 0 PID: 9244 Comm: syz.3.1102 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 226.559833][ T9244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 226.559845][ T9244] Call Trace: [ 226.559853][ T9244] [ 226.559862][ T9244] dump_stack_lvl+0x189/0x250 [ 226.559910][ T9244] ? __pfx____ratelimit+0x10/0x10 [ 226.559938][ T9244] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.559975][ T9244] ? __pfx__printk+0x10/0x10 [ 226.560018][ T9244] should_fail_ex+0x414/0x560 [ 226.560051][ T9244] _copy_to_user+0x31/0xb0 [ 226.560089][ T9244] bpf_test_finish+0x1ab/0x700 [ 226.560121][ T9244] ? csum_partial+0x239/0x2c0 [ 226.560143][ T9244] ? __pfx_bpf_test_finish+0x10/0x10 [ 226.560175][ T9244] ? bpf_prog_test_run_skb+0x6ac/0x1560 [ 226.560206][ T9244] bpf_prog_test_run_skb+0xed5/0x1560 [ 226.560251][ T9244] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 226.560280][ T9244] bpf_prog_test_run+0x2c7/0x340 [ 226.560312][ T9244] __sys_bpf+0x581/0x870 [ 226.560340][ T9244] ? __pfx___sys_bpf+0x10/0x10 [ 226.560381][ T9244] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 226.560410][ T9244] ? __pfx_ksys_write+0x10/0x10 [ 226.560453][ T9244] ? rcu_is_watching+0x15/0xb0 [ 226.560482][ T9244] __x64_sys_bpf+0x7c/0x90 [ 226.560508][ T9244] do_syscall_64+0xfa/0x3b0 [ 226.560534][ T9244] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.560559][ T9244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.560577][ T9244] ? clear_bhb_loop+0x60/0xb0 [ 226.560600][ T9244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.560618][ T9244] RIP: 0033:0x7fcaca98ebe9 [ 226.560636][ T9244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.560654][ T9244] RSP: 002b:00007fcacb778038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 226.560676][ T9244] RAX: ffffffffffffffda RBX: 00007fcacabb5fa0 RCX: 00007fcaca98ebe9 [ 226.560691][ T9244] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 226.560705][ T9244] RBP: 00007fcacb778090 R08: 0000000000000000 R09: 0000000000000000 [ 226.560718][ T9244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.560729][ T9244] R13: 00007fcacabb6038 R14: 00007fcacabb5fa0 R15: 00007fff686df178 [ 226.560763][ T9244] [ 227.470386][ T9272] FAULT_INJECTION: forcing a failure. [ 227.470386][ T9272] name failslab, interval 1, probability 0, space 0, times 0 [ 227.533054][ T9272] CPU: 1 UID: 0 PID: 9272 Comm: syz.1.1109 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 227.533088][ T9272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 227.533102][ T9272] Call Trace: [ 227.533111][ T9272] [ 227.533120][ T9272] dump_stack_lvl+0x189/0x250 [ 227.533159][ T9272] ? __pfx____ratelimit+0x10/0x10 [ 227.533189][ T9272] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.533220][ T9272] ? __pfx__printk+0x10/0x10 [ 227.533253][ T9272] ? __lock_acquire+0xab9/0xd20 [ 227.533297][ T9272] should_fail_ex+0x414/0x560 [ 227.533332][ T9272] should_failslab+0xa8/0x100 [ 227.533366][ T9272] kmem_cache_alloc_noprof+0x73/0x3c0 [ 227.533395][ T9272] ? skb_clone+0x212/0x3a0 [ 227.533424][ T9272] skb_clone+0x212/0x3a0 [ 227.533453][ T9272] __netlink_deliver_tap+0x404/0x850 [ 227.533500][ T9272] ? netlink_deliver_tap+0x2e/0x1b0 [ 227.533534][ T9272] netlink_deliver_tap+0x19c/0x1b0 [ 227.533568][ T9272] netlink_unicast+0x7fa/0x9e0 [ 227.533607][ T9272] ? __pfx_netlink_unicast+0x10/0x10 [ 227.533638][ T9272] ? netlink_sendmsg+0x642/0xb30 [ 227.533668][ T9272] ? skb_put+0x11b/0x210 [ 227.533705][ T9272] netlink_sendmsg+0x805/0xb30 [ 227.533749][ T9272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.533786][ T9272] ? aa_sock_msg_perm+0xf1/0x1d0 [ 227.533822][ T9272] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 227.533847][ T9272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.533880][ T9272] __sock_sendmsg+0x21c/0x270 [ 227.533912][ T9272] ____sys_sendmsg+0x505/0x830 [ 227.533942][ T9272] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.533976][ T9272] ? import_iovec+0x74/0xa0 [ 227.534006][ T9272] ___sys_sendmsg+0x21f/0x2a0 [ 227.534031][ T9272] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.534096][ T9272] ? __fget_files+0x2a/0x420 [ 227.534115][ T9272] ? __fget_files+0x3a0/0x420 [ 227.534154][ T9272] __x64_sys_sendmsg+0x19b/0x260 [ 227.534181][ T9272] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 227.534215][ T9272] ? __pfx_ksys_write+0x10/0x10 [ 227.534241][ T9272] ? rcu_is_watching+0x15/0xb0 [ 227.534270][ T9272] ? do_syscall_64+0xbe/0x3b0 [ 227.534305][ T9272] do_syscall_64+0xfa/0x3b0 [ 227.534335][ T9272] ? lockdep_hardirqs_on+0x9c/0x150 [ 227.534364][ T9272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.534385][ T9272] ? clear_bhb_loop+0x60/0xb0 [ 227.534412][ T9272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.534434][ T9272] RIP: 0033:0x7ff84bf8ebe9 [ 227.534453][ T9272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.534472][ T9272] RSP: 002b:00007ff84cd82038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.534496][ T9272] RAX: ffffffffffffffda RBX: 00007ff84c1b5fa0 RCX: 00007ff84bf8ebe9 [ 227.534512][ T9272] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000004 [ 227.534526][ T9272] RBP: 00007ff84cd82090 R08: 0000000000000000 R09: 0000000000000000 [ 227.534539][ T9272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.534552][ T9272] R13: 00007ff84c1b6038 R14: 00007ff84c1b5fa0 R15: 00007ffd2e0693a8 [ 227.534588][ T9272] [ 227.534704][ T9272] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1109'. [ 227.866192][ T9272] unsupported nlmsg_type 40 [ 227.956469][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1114'. [ 228.201069][ T9285] netlink: 'syz.0.1115': attribute type 2 has an invalid length. [ 228.213154][ T9285] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1115'. [ 228.236747][ T9285] netlink: 'syz.0.1115': attribute type 2 has an invalid length. [ 228.312642][ T9285] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1115'. [ 229.322057][ T9315] FAULT_INJECTION: forcing a failure. [ 229.322057][ T9315] name failslab, interval 1, probability 0, space 0, times 0 [ 229.383271][ T9315] CPU: 1 UID: 0 PID: 9315 Comm: syz.4.1126 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 229.383304][ T9315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 229.383318][ T9315] Call Trace: [ 229.383329][ T9315] [ 229.383341][ T9315] dump_stack_lvl+0x189/0x250 [ 229.383379][ T9315] ? __pfx____ratelimit+0x10/0x10 [ 229.383414][ T9315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.383447][ T9315] ? __pfx__printk+0x10/0x10 [ 229.383503][ T9315] ? __pfx___might_resched+0x10/0x10 [ 229.383548][ T9315] should_fail_ex+0x414/0x560 [ 229.383599][ T9315] should_failslab+0xa8/0x100 [ 229.383642][ T9315] __kmalloc_noprof+0xcb/0x4f0 [ 229.383672][ T9315] ? kfree+0x4d/0x440 [ 229.383696][ T9315] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 229.383738][ T9315] tomoyo_realpath_from_path+0xe3/0x5d0 [ 229.383770][ T9315] ? tomoyo_domain+0xd9/0x130 [ 229.383829][ T9315] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 229.383866][ T9315] tomoyo_path_number_perm+0x1e8/0x5a0 [ 229.383911][ T9315] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 229.383953][ T9315] ? perf_trace_run_bpf_submit+0xee/0x170 [ 229.384113][ T9315] ? __fget_files+0x2a/0x420 [ 229.384147][ T9315] ? __fget_files+0x2a/0x420 [ 229.384172][ T9315] ? __fget_files+0x3a0/0x420 [ 229.384192][ T9315] ? __fget_files+0x2a/0x420 [ 229.384229][ T9315] security_file_ioctl+0xcb/0x2d0 [ 229.384271][ T9315] __se_sys_ioctl+0x47/0x170 [ 229.384313][ T9315] do_syscall_64+0xfa/0x3b0 [ 229.384344][ T9315] ? lockdep_hardirqs_on+0x9c/0x150 [ 229.384378][ T9315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.384402][ T9315] ? clear_bhb_loop+0x60/0xb0 [ 229.384439][ T9315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.384462][ T9315] RIP: 0033:0x7f7fdeb8ebe9 [ 229.384485][ T9315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.384504][ T9315] RSP: 002b:00007f7fdf991038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.384527][ T9315] RAX: ffffffffffffffda RBX: 00007f7fdedb5fa0 RCX: 00007f7fdeb8ebe9 [ 229.384543][ T9315] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000009 [ 229.384558][ T9315] RBP: 00007f7fdf991090 R08: 0000000000000000 R09: 0000000000000000 [ 229.384572][ T9315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.384584][ T9315] R13: 00007f7fdedb6038 R14: 00007f7fdedb5fa0 R15: 00007ffc35eb0a38 [ 229.384654][ T9315] [ 229.390382][ T9315] ERROR: Out of memory at tomoyo_realpath_from_path. [ 229.704364][ T9315] wg2: entered promiscuous mode [ 229.715273][ T9315] wg2: entered allmulticast mode [ 229.925343][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1133'. [ 229.950938][ T9337] bpf: Bad value for 'mode' [ 230.495036][ T9354] lo speed is unknown, defaulting to 1000 [ 230.621082][ T9356] lo speed is unknown, defaulting to 1000 [ 230.792673][ T9370] netlink: 'syz.1.1145': attribute type 2 has an invalid length. [ 230.801057][ T9370] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1145'. [ 230.826128][ T9370] netlink: 'syz.1.1145': attribute type 2 has an invalid length. [ 230.835865][ T9370] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1145'. [ 232.100640][ T9386] FAULT_INJECTION: forcing a failure. [ 232.100640][ T9386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.120592][ T9386] CPU: 1 UID: 0 PID: 9386 Comm: syz.3.1148 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 232.120626][ T9386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 232.120640][ T9386] Call Trace: [ 232.120649][ T9386] [ 232.120659][ T9386] dump_stack_lvl+0x189/0x250 [ 232.120692][ T9386] ? __pfx____ratelimit+0x10/0x10 [ 232.120724][ T9386] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.120752][ T9386] ? __pfx__printk+0x10/0x10 [ 232.120802][ T9386] should_fail_ex+0x414/0x560 [ 232.120849][ T9386] _copy_to_user+0x31/0xb0 [ 232.120879][ T9386] bpf_test_finish+0x1ab/0x700 [ 232.120926][ T9386] ? __pfx_bpf_test_finish+0x10/0x10 [ 232.120966][ T9386] ? slab_build_skb+0x273/0x3e0 [ 232.121006][ T9386] bpf_prog_test_run_skb+0xed5/0x1560 [ 232.121061][ T9386] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 232.121096][ T9386] bpf_prog_test_run+0x2c7/0x340 [ 232.121134][ T9386] __sys_bpf+0x581/0x870 [ 232.121168][ T9386] ? __pfx___sys_bpf+0x10/0x10 [ 232.121221][ T9386] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 232.121255][ T9386] ? __pfx_ksys_write+0x10/0x10 [ 232.121282][ T9386] ? rcu_is_watching+0x15/0xb0 [ 232.121317][ T9386] __x64_sys_bpf+0x7c/0x90 [ 232.121345][ T9386] do_syscall_64+0xfa/0x3b0 [ 232.121376][ T9386] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.121406][ T9386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.121429][ T9386] ? clear_bhb_loop+0x60/0xb0 [ 232.121458][ T9386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.121479][ T9386] RIP: 0033:0x7fcaca98ebe9 [ 232.121501][ T9386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.121520][ T9386] RSP: 002b:00007fcacb757038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 232.121544][ T9386] RAX: ffffffffffffffda RBX: 00007fcacabb6090 RCX: 00007fcaca98ebe9 [ 232.121565][ T9386] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 232.121579][ T9386] RBP: 00007fcacb757090 R08: 0000000000000000 R09: 0000000000000000 [ 232.121593][ T9386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.121607][ T9386] R13: 00007fcacabb6128 R14: 00007fcacabb6090 R15: 00007fff686df178 [ 232.121647][ T9386] [ 233.218357][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1151'. [ 234.479958][ T9400] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1154'. [ 234.622194][ T9400] hsr_slave_0: left promiscuous mode [ 234.639977][ T9408] netlink: 'syz.3.1156': attribute type 2 has an invalid length. [ 234.668679][ T9408] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1156'. [ 234.721779][ T9411] netlink: 'syz.3.1156': attribute type 2 has an invalid length. [ 234.735654][ T9400] hsr_slave_1: left promiscuous mode [ 234.748163][ T9411] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1156'. [ 235.063731][ T9409] lo speed is unknown, defaulting to 1000 [ 235.941801][ T9428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1162'. [ 235.951033][ T9428] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1162'. [ 236.147084][ T9426] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1163'. [ 236.243115][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1166'. [ 236.648826][ T9447] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1169'. [ 236.884991][ T9451] netlink: 'syz.0.1170': attribute type 2 has an invalid length. [ 236.925561][ T9451] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1170'. [ 236.955867][ T9463] netlink: 'syz.0.1170': attribute type 2 has an invalid length. [ 236.983822][ T9462] netlink: zone id is out of range [ 236.989310][ T9462] netlink: zone id is out of range [ 237.015110][ T9462] netlink: get zone limit has 8 unknown bytes [ 237.364195][ T9461] ªªªªªª: renamed from vlan0 [ 237.427533][ T9474] netlink: 'syz.1.1176': attribute type 3 has an invalid length. [ 237.750493][ T9479] netlink: 'syz.3.1177': attribute type 1 has an invalid length. [ 238.704641][ T9479] infiniband syz!: set active [ 238.713481][ T9479] infiniband syz!: added team_slave_0 [ 239.065940][ T9479] RDS/IB: syz!: added [ 239.079329][ T9479] smc: adding ib device syz! with port count 1 [ 239.105143][ T9490] lo speed is unknown, defaulting to 1000 [ 239.116106][ T9479] smc: ib device syz! port 1 has pnetid [ 239.546175][ T9506] __nla_validate_parse: 3 callbacks suppressed [ 239.546199][ T9506] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1185'. [ 239.767303][ T9512] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.1187'. [ 239.861013][ T9517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1188'. [ 239.912415][ T9517] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1188'. [ 240.096039][ T9512] lo speed is unknown, defaulting to 1000 [ 240.680083][ T9524] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1190'. [ 241.104233][ T9529] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1192'. [ 242.284295][ T9526] lo speed is unknown, defaulting to 1000 [ 242.663690][ T9542] FAULT_INJECTION: forcing a failure. [ 242.663690][ T9542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.684760][ T9542] CPU: 1 UID: 0 PID: 9542 Comm: syz.3.1196 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 242.684791][ T9542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 242.684805][ T9542] Call Trace: [ 242.684812][ T9542] [ 242.684821][ T9542] dump_stack_lvl+0x189/0x250 [ 242.684852][ T9542] ? __pfx____ratelimit+0x10/0x10 [ 242.684881][ T9542] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.684906][ T9542] ? __pfx__printk+0x10/0x10 [ 242.684949][ T9542] should_fail_ex+0x414/0x560 [ 242.684983][ T9542] _copy_from_user+0x2d/0xb0 [ 242.685008][ T9542] ___bpf_copy_key+0xa5/0x110 [ 242.685042][ T9542] map_delete_elem+0x1a9/0x560 [ 242.685071][ T9542] ? bpf_lsm_bpf+0x9/0x20 [ 242.685105][ T9542] ? security_bpf+0x7e/0x300 [ 242.685137][ T9542] __sys_bpf+0x4d0/0x870 [ 242.685167][ T9542] ? __pfx___sys_bpf+0x10/0x10 [ 242.685209][ T9542] ? ksys_write+0x22a/0x250 [ 242.685241][ T9542] ? __pfx_ksys_write+0x10/0x10 [ 242.685265][ T9542] ? rcu_is_watching+0x15/0xb0 [ 242.685295][ T9542] __x64_sys_bpf+0x7c/0x90 [ 242.685321][ T9542] do_syscall_64+0xfa/0x3b0 [ 242.685349][ T9542] ? lockdep_hardirqs_on+0x9c/0x150 [ 242.685377][ T9542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.685398][ T9542] ? clear_bhb_loop+0x60/0xb0 [ 242.685423][ T9542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.685444][ T9542] RIP: 0033:0x7fcaca98ebe9 [ 242.685462][ T9542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.685481][ T9542] RSP: 002b:00007fcacb778038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 242.685502][ T9542] RAX: ffffffffffffffda RBX: 00007fcacabb5fa0 RCX: 00007fcaca98ebe9 [ 242.685518][ T9542] RDX: 0000000000000020 RSI: 00002000000007c0 RDI: 0000000000000003 [ 242.685531][ T9542] RBP: 00007fcacb778090 R08: 0000000000000000 R09: 0000000000000000 [ 242.685545][ T9542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.685557][ T9542] R13: 00007fcacabb6038 R14: 00007fcacabb5fa0 R15: 00007fff686df178 [ 242.685591][ T9542] [ 243.022722][ T9545] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1198'. [ 243.306489][ T9551] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 244.578247][ T9568] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1203'. [ 244.595675][ T9568] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 244.606665][ T9568] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 244.815230][ T9575] sit0: entered allmulticast mode [ 245.496287][ T9595] lo speed is unknown, defaulting to 1000 [ 245.549989][ T9600] netlink: 'syz.2.1213': attribute type 10 has an invalid length. [ 245.584376][ T9600] veth1_vlan: entered allmulticast mode [ 246.020767][ T9600] team0: Device veth1_vlan failed to register rx_handler [ 246.308535][ T9600] syz.2.1213 (9600) used greatest stack depth: 17912 bytes left [ 246.359556][ T9616] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1219'. [ 246.851939][ T9623] netlink: 'syz.1.1222': attribute type 2 has an invalid length. [ 246.861303][ T9623] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1222'. [ 246.917865][ T9630] netlink: 'syz.1.1222': attribute type 2 has an invalid length. [ 246.935550][ T9630] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1222'. [ 248.241936][ T9660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1233'. [ 248.369062][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 249.056088][ T9689] syzkaller0: entered promiscuous mode [ 249.061775][ T9689] syzkaller0: entered allmulticast mode [ 249.366850][ T9703] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1249'. [ 250.493490][ T9710] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 251.154637][ T9739] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1259'. [ 251.580409][ T9757] siw: device registration error -23 [ 252.159673][ T9777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1274'. [ 255.110342][ T9850] sit0: entered promiscuous mode [ 255.790839][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.801461][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.220074][ T9872] lo speed is unknown, defaulting to 1000 [ 256.789620][ T9881] veth0_vlan: entered allmulticast mode [ 258.409062][ T9900] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 259.426567][ T30] audit: type=1107 audit(1755187426.896:2): pid=9909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 260.711563][ T9915] lo speed is unknown, defaulting to 1000 [ 261.577466][ T9942] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1335'. [ 262.463992][ T9958] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1341'. [ 262.683153][ T5976] page_pool_release_retry() stalled pool shutdown: id 28, 1 inflight 60 sec [ 262.739366][ T9970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1348'. [ 263.083792][ T9986] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1356'. [ 263.227394][ T9997] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1361'. [ 263.350874][T10001] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1363'. [ 263.406129][T10001] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1363'. [ 263.453882][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1364'. [ 263.557396][T10004] syzkaller0: entered promiscuous mode [ 263.566398][T10004] syzkaller0: entered allmulticast mode [ 264.622142][T10035] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1375'. [ 264.632305][T10035] netlink: zone id is out of range [ 264.638764][T10035] netlink: get zone limit has 8 unknown bytes [ 264.777384][T10037] netlink: 'syz.4.1376': attribute type 2 has an invalid length. [ 264.785446][T10037] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1376'. [ 264.829570][T10043] netlink: 'syz.4.1376': attribute type 2 has an invalid length. [ 265.177317][T10023] lo speed is unknown, defaulting to 1000 [ 266.706623][T10072] netlink: 'syz.3.1386': attribute type 11 has an invalid length. [ 267.221049][T10082] netlink: 'syz.0.1390': attribute type 2 has an invalid length. [ 267.229175][T10082] __nla_validate_parse: 2 callbacks suppressed [ 267.229194][T10082] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1390'. [ 267.313679][T10088] netlink: 'syz.0.1390': attribute type 2 has an invalid length. [ 267.356075][T10088] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1390'. [ 267.444727][T10090] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1392'. [ 267.496425][T10090] netlink: 'syz.4.1392': attribute type 13 has an invalid length. [ 267.504781][T10090] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.1392'. [ 267.876608][T10095] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1394'. [ 268.214547][T10112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1398'. [ 268.309630][T10115] netlink: 'syz.4.1400': attribute type 23 has an invalid length. [ 268.559824][T10125] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1404'. [ 269.134917][T10137] netlink: 'syz.2.1408': attribute type 2 has an invalid length. [ 269.142788][T10137] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1408'. [ 269.187180][T10139] netlink: 'syz.2.1408': attribute type 2 has an invalid length. [ 269.195283][T10139] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1408'. [ 270.212845][T10147] lo speed is unknown, defaulting to 1000 [ 270.520081][T10163] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1417'. [ 270.695147][T10168] netlink: 'syz.1.1420': attribute type 23 has an invalid length. [ 272.759042][T10200] netlink: 'syz.3.1433': attribute type 23 has an invalid length. [ 273.554903][T10213] syz!: rxe_newlink: already configured on team_slave_0 [ 274.108233][T10225] [ 274.110804][T10225] ============================= [ 274.115744][T10225] WARNING: suspicious RCU usage [ 274.120672][T10225] 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 Not tainted [ 274.127370][T10225] ----------------------------- [ 274.132225][T10225] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 274.140780][T10225] [ 274.140780][T10225] other info that might help us debug this: [ 274.140780][T10225] [ 274.151175][T10225] [ 274.151175][T10225] rcu_scheduler_active = 2, debug_locks = 1 [ 274.159345][T10225] 1 lock held by syz.2.1441/10225: [ 274.164686][T10225] #0: ffffffff8e13a0c0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80 [ 274.175537][T10225] [ 274.175537][T10225] stack backtrace: [ 274.181454][T10225] CPU: 1 UID: 0 PID: 10225 Comm: syz.2.1441 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 274.181484][T10225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 274.181498][T10225] Call Trace: [ 274.181507][T10225] [ 274.181516][T10225] dump_stack_lvl+0x189/0x250 [ 274.181552][T10225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.181580][T10225] ? __pfx__printk+0x10/0x10 [ 274.181628][T10225] lockdep_rcu_suspicious+0x140/0x1d0 [ 274.181656][T10225] get_callchain_entry+0x2b6/0x3c0 [ 274.181697][T10225] get_perf_callchain+0xa1/0x6b0 [ 274.181733][T10225] ? rcu_read_lock_sched_held+0x89/0x100 [ 274.181761][T10225] ? __pfx_get_perf_callchain+0x10/0x10 [ 274.181803][T10225] ? preempt_schedule+0xae/0xc0 [ 274.181837][T10225] __bpf_get_stack+0x3fc/0xa60 [ 274.181885][T10225] ? __pfx___bpf_get_stack+0x10/0x10 [ 274.181956][T10225] ? __lock_acquire+0xab9/0xd20 [ 274.182010][T10225] bpf_get_stack+0x33/0x50 [ 274.182039][T10225] ? bpf_prog_d43750871481577d+0x46/0x4e [ 274.182059][T10225] bpf_get_stack_raw_tp+0x1a9/0x220 [ 274.182092][T10225] bpf_prog_d43750871481577d+0x46/0x4e [ 274.182112][T10225] bpf_prog_run_pin_on_cpu+0x6a/0x150 [ 274.182146][T10225] bpf_prog_test_run_syscall+0x312/0x4b0 [ 274.182182][T10225] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 274.182211][T10225] ? __fget_files+0x2a/0x420 [ 274.182236][T10225] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 274.182269][T10225] bpf_prog_test_run+0x2c7/0x340 [ 274.182301][T10225] __sys_bpf+0x581/0x870 [ 274.182331][T10225] ? __pfx___sys_bpf+0x10/0x10 [ 274.182375][T10225] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 274.182418][T10225] ? rcu_is_watching+0x15/0xb0 [ 274.182445][T10225] __x64_sys_bpf+0x7c/0x90 [ 274.182487][T10225] do_syscall_64+0xfa/0x3b0 [ 274.182514][T10225] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.182540][T10225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.182560][T10225] ? clear_bhb_loop+0x60/0xb0 [ 274.182585][T10225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.182604][T10225] RIP: 0033:0x7f745e38ebe9 [ 274.182622][T10225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.182640][T10225] RSP: 002b:00007f745c5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 274.182661][T10225] RAX: ffffffffffffffda RBX: 00007f745e5b5fa0 RCX: 00007f745e38ebe9 [ 274.182675][T10225] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 274.182689][T10225] RBP: 00007f745e411e19 R08: 0000000000000000 R09: 0000000000000000 [ 274.182701][T10225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.182713][T10225] R13: 00007f745e5b6038 R14: 00007f745e5b5fa0 R15: 00007ffee60304a8 [ 274.182746][T10225] [ 274.616748][T10229] lo speed is unknown, defaulting to 1000 [ 275.573060][T10178] lo speed is unknown, defaulting to 1000 [ 279.402494][ T1310] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)