last executing test programs: 7.406336229s ago: executing program 1 (id=13245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x843}, 0x44040) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1942}, 0x0, 0x0, 0x0, 0xb, 0x3fe, 0x7ffffbff, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r1, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10000) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000500), 0xa}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f00000027c0)='./file0\x00', 0xfb500f4b7b3e5ea) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffde3, &(0x7f00000002c0)=[{&(0x7f0000000340)="1400000038008f0cd25a80648c251bfd0fb5e9d1", 0x14}], 0x1}, 0x0) socket$kcm(0x29, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) sendmsg$nl_route_sched(r7, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x100, 0xa0000000, 0x8, 0x9}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x48000}, 0x48480) socketpair(0x1, 0x20000000000001, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8948, &(0x7f0000000940)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n4\xb7s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0R\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB\x01\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\tb\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18\x00\b\x00\x00Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a00110000060a0b04000000000000000002000000d4100480240001800b000100736f636b6574000014000280080002400000000308000140000000029c1001800a0001006d617463680000008c1002800a00010073746174650000000b000100726563656e7400005b000300240de55c7e19ba2d0bda197b61b75aabe0fd70b0ca4560ab2d0e8be38a624695253dfa6cae8799305bda20cf62b6ed9bc1ca5801aed8faacc5e04170c1c59b912dca41565911a6497e1e2de3ede03d056202fa53366947000800024000000000080002400000000004100300237a7f1371d167825283c76bea4a6935cf874876782d54ffb7c7c0551f89e8346def38843bf25a9c896ee3dd20184bd8e2103b725c8c120a90e9dc253aa1faf928de44aaafa7871de19b3bfc9beae44b2cf63b027f358363d769fbabd235e851182c2f2a2a8832891d5594fd6ab0006e49e3dc77e7aeefcc7f00b3ee600e935ffc91e359aebf3266ae56ed3f0284ed1fb960a2e4d77d006ed6d084e4aa3fae17452253ddd30ba894d0e97f27c8827fc72eb89c8677fb79edd412e0999e7c1d1c3437bba1876cf039620c2620506e884a3209d69bafd2095d9121f42dadc3562032f96d6b130e320d26dd5882a3d3e948202d89cb9f70a78922993a430730fabe6dae9b45dc4a9b8e7dcd9ea35c46afdaa8ea2928eec7985cffaa0d51bae69a8de7cc3638fa4f85431f7e5c78d8d77949f134719b2df72bc5b1fedf1cf2d03af0dd7cbcfd624f5c8309d2e0800f3d5f420a9c7ef09a747efbfcdd20a7d1d9672a0a319e56cbf15679d7f1533beb654b02e85d4fb1873ab3c2d023b5795afbfb60f01c40b919484f988ab1593196f63bf0a13f5ea20ca122709ff045733dfe0341b9a6c14d7e09af703848ed7d6ed5b622deafeb219b4e8039a85c976f851053b67d9fa15b70341eaaaf1467cbd5ddf5557d83930e291655c8a902263f67dac5c7c2ec7da95d5042df89e84501130a416fdb5f0547858e6fea67d2be55f3549e2fa8cc5b985682fb0acfb7bf783e74de81589d097566acac527c188f68fb5ef488d555af096a5f885ef891d8d7931140ab33304b5466de3d658025e15f732c0de391cb801c3a9d7817a19d4689451b67e7a12a394eee8b3fcd88f6b050bbc4fd83bc8ab0f0c101f6d17ec3490af13a0e37b153a716831ff10e40974773c5d499b8f221e28ba3e1d73d30b401d692a6d4dd702c8e9c462c53df8266d794d391f063cfe5e90e4994be040cdaece15d21492f37f4a84182026d86da33f3c0b35727ce4f0ed916aacdd89d8e3c590220867e9d9a5a16880960019daa6203c8da683df1e661dc41ce5b7d031e974129c354f97f2865d055265dbf18b00ecdef41c12186912e3dd8532e2340d3e7f986d8721ccde74552d294d070d01cb0515ef45c9012b9143f91e156e60f5ea338dfd683a82792acf05edc73bc1a7fecbe859aea3272a4a19c5e6299eb6342d9a885335d742e111b971f8de2269bb1dce04eba40dad5953c7016988a1abc9b26990c966b9fa56de6b29fb75a5ef67c8b1504f18bc8f503e78ba2660863108d9d0f204a3f1e8bed63bd0f82cea7883b0fd0f3a7cc96b1592c29f0eca3b05cb263e6e7d232d4fa004ed68382c790bae22c81bdbac44c5461d54a7432d87b44782e6fdf25fe59102b9fbf61515e8fa8c144b6b3fe1be66ebada1430d159f98b4f04949abe1558de304503e9e3f0cc1cf3640a7e27c696b226e9b24e5ed5cef7609d8c3bc5f7e300367d50d826d467cb9c6b577f962c299a6c89a0c207b27a1fe4847b263be9b10e964c2269a7371e901184e2a0ba9c4b6a130f554eaf1e534603c4eed190db5a0ed2a9e822edd2835336002e9bd9d18c1dfa6cb3eea288ecf65271541fc398c232729fb2d6c245dd96d42a8f956a8bf474fb1def1cfe40b857875462a9153137fb264f3cf280a36ee3366efd834c5822af576d7ff7acfbe649258299160f0eb437db937b187c2b70385362b4a2abcfb69185b13e988579990e7e2b3773f8c9fcfda709ebce9423e7bcdbbfa134b3bfb74b310e2a6342289bc05dc21b4859d2f9569b48775a5d24397cf22699672baf7927c31a534c7ea1f5d8f7e04567a071f6cda7cf2a3451cc5ca82a545e3f93edc6330f1094faa5fe71f507f66e780514cac4f48311a922094f2582e84c558f78db986f728ef0c5243b3d2752aea6f5b41b73cfe3647cac6e360355d1b43092b162eb3c0f813b501112563a2f87070ef69f73624c3f47be135808a6a4cf487b53ab7b46b230932da9543b390d0a661913b38621eb7ccc90bb5b384346dafd9347a4dc9cc3ae9e8b6b06b1bcdef331e0c08734caee8d0dd9d296982506d15357eae349744ca914a396e80b5fed6e4b0d4a7523773750f6f2e470159a932f28ffc0bfffe533ac52d7f734745aebdfec74d24aa4aeef1dac32eab1d6d02eb6c214f0845383c43963fd0d81ebdfd90d6b9affa979759a9dd6140e5cd705799d002cecc557a3f2435d0dcc10d4d69a34843decfdf2d2ce71e55835a73339beaa6c94eb83849e09b3e3031c959e2a17820b6be7570cdd735c71e192412ea132d1d66c8b67425d8232c3517a6597a1e10d792776b299698de7a80fb8dcafc292af1e3338900bfc020f46f939323d8c21ca0a322d6241c8691cd8ca4c3a66c01caec402647ec695763a2beae4025efc32176ad9ed55768585e59b700ebf3db2eb7acd036cdd82a07ddc2f95c5c9e809792594ec191c56e926226c59802dbc35ef82d9d601bf704167544f37ab3bf86afd3c455936bce54f21252cf545db6be2576e2b449781a1122ee6c9a81833d6586944c6d1c82760e6ffddb68f6d46d44d937bb83b50902e2bb432234fae1ddb033cec96c928ea6c618fc0d881f489ec9478cfe843f5372f00fd32b40ef3f505f65406033f8d421ecc166310073c9887c4c37eadbae40f1b2631bfda13d66b380fe799724763590e1188b6838fae2390ebff20a066eeaac1a9fe878da781aee4a5300bb433fdfc848f0eac3250485eb525d87759830dc5d1b4575ae2fd058961b96ec2a3791ed84eaafaf2e69920e7572fb162aa1b3cd9928607c036ac8364f96d39f389c3a2e040cfdfc59a43eece6f8cd8c1a1e8979563091ab94f16aebb67ca3f569bec8a88e05cbd33e50b92e37f3e44fad08dfe1259a9fdc0b098fcf7984ad6894eeccccb4c8f9f3bc09c3eb058dc29bd9cb0b5129cac8f13804c7779a6c1bcdf8803b17408667baa2507c0c3b76e3265eb568928d09f0de198cfb668e3d8746443ba8d99e61e1da9649ebfcac533ac171bf3c3e0c6e30679611d88277860d12f19ad635e85b5c307d4e870ae70b1ade7c65e0dbafc0155e5c350a083fa2a20835e8c64e07c901be4e0c34fb4e8a24f9d9fa0b7819b8d42f1af4ee5e789cca8e3e241db19a24410c93c743e342a948a452e2fe06135d0dcbe4461feb788383d2b8a21ced5431f6eb0d0ef8933278c1c5826c153aedd42de26bed3752c5a9157e3f3ce4ad95ecd25f2849c50147b83780458006b501e5797e81dca0df0e0b156aed4bde27498de8f9830be5739a984c4a38cbbca4e6cca6bcfd1856527b9d202beaab6cd0cfcc2cffc6d007933ae954395b68ac321b56fbbcbe1d042b82eb5ab78bf22136e77f2c53ad6deab214b3b469fa9da3c2eac1505e6517cd296232f7873e9e41b23c6c5c0bc08cf645c750cdc8a6b693e928939e7e75682054bb1ad9d43b1ef497a1c8cc22d67b8d98c1772f908c753c493e079c2cff2d4b854aa3ca853dc2de3d64eb1f153f9ece76cac4d4b559ec751f63fd404eadc12df7743122dfc8c9288ef72bd86604ef2858fa38859dd9178cb907f41a7fc58529d6dd95897d18b23bdd83decef117707322b523308b16601941b8db52707f08a25b2ceea451c7d77d8b9fb18497d813db16420911401ca109675fba09fc645b42351a6e3774d662e9b0a1d4b8f0612c054d5b39293a4a6414b3115167c1f121cbce0feeeebdf824012a47e72a2a1d674b3c2f672b07b05bd346c1874b275d2d2d5436b21c4958c75a588be4b51c583902d2b724dec14239ef6b7d056d841087f480a1e31eb648e1cde46f905e40cee1746bdbae412899a3a171a1a296e5afd1d20bc648bd73dc254edaab2fe23276eb29e7e875754c347a00da9b9542b527181145fcd7d7c65030125d6ab03dbd8d34dc04f28f1faf45b9a4d85f0c8a34ab0ef767fbac30cb769f65848219a2587bfa707851029f5377242a4596680de9f5f5cefbbf7fa17ebf2411a37609d7e647c2ebe5046582f744c5ed90d89d8d78edf80f53a9d5dbc9e2298e6da95695170b5cfe74adec23b9d0fbadc784cfc724eda88ecaf660b758773f01baafe3b0801bb6231386477f344dfed9030fb155ac06be46594744c218439e831cd4aa70de3332a0b7fc730c5505056c31153291a224be8b7e7fd750b97caf1aaf27a9f53464282b3f7a062c7a1ef523d93b6b5d0c6dd31cf7472665cd1abada98e0cdf634438a83f6bf8ab2b8017ff8399c0b7e575a34048c1adffca3da863c3d46f7a103322d5de896ba908e7cf4194ae1093ea325ad99972fdc634abe3a5156912b2f50a028a7c8ef2b3cbd30b2e8a39c1e46a185b77fcb2c2b87cd2645518f20a58d3d78b47c99b094350b5b343385a0b64885b765ba602627455bc06d54d4bca10382681650f99c3f63b4e17ed29651b3c65a9c2523cc0a37693c7c1cd931a653c0de9550db33fe26fbcdc89070ba8602643f98be014ff23a99471bcb7a78b494593dcfe1d498525884deb94d05d2c6dea6e5397567cb2623f7e2b7fec60e15de2302de29fbe6b799119b1d81622c009f7be6562fe63b2e68c4149e102f6bc055957a73a91f3c5e722e2618ee01ac203be5436170eebaa8cbd41b8f5bd8741e5117d6805d16bbb0e9a14eedc9e1b932b48bb19b36adffdba560e9703ad888eb4f49fd849a09653561050cfe6fabf2f92800df2272346e11ac9f08e27f8d93c38e50bd8cbfaf68409167cc47272ffd24735ab44599fa6961985a853b7d81ae35de63c5ba837abcef35c68b157535a3d146e5be915f7e4ca5ccfaea54570354a0041c42451c9d84ce999ad06096526f99a43db6d4644c8ab3afa5baf1ea43e6c45df8abf274a305a58521de0d095c5316321d3735cf357e6e3e22770847baaf396be5a23227ea15b749edd8ee65b65adddd0310ab5cf4f2476ee198ca1f3c021fb12f879c79337c729dad021377233f2d16019c28b9f25671208a71b49c0ad646a11a18861238db3db510d920eb9cfda6a0033c851bdb868311a31dedf869196337e8efd9c6762805f81f7fee941403e4385bb7d0a181409bab2e2fc030089cb0ff5c5459b668e3f8d454a088eab9299f31d5baf1914bba384d454242836466f4c5769cd1a3829113f216d77954c872a764818963441a9a89528084b576cbc6df009785e739285d77d28a2b9d3cfaaf72e6b5a209c4d7c9a05666b115b225830516d1a67b40fe0d1ee8ab00ef356fe49d0cd3a011acd4c92cead0f23b51de190419c4854d86c8d1add1e313e5dade1c62ffb671c765f3f44d108659e5b7976caeaeaba8717690f319433caa294ad9c20473f0b8359dc925a71be4b8dd9dffe7d37653c17e0d5254bf05ff33ceba7ed1b4ed86439dfded5f0f35a7d8c7f6f9a2dbd9b2d16680f2831fa4bcb0af402479a8df1e3f1fc0019480ca1cbd900dffe46979a2cf50efdddfb2c9c1470dc97528d8a632bdc5486111bfccefd3fc615ec77aa7186618085d0ca3e98c330c343ca72b708711d37f935e4684eb971241dda3b1f16216137cb9500b8e5f7ef46169b4eedfdfca081ba739fa16eb7cab2ac0be2dd3a44251a92d286b1822bde835bf49f66fcb274075aa5f95797de67e70d395c2f0c29e339c59c40ef375f6677105bf5fe9c855d4cbd36e9ea8bc376ae93f8e207f420b9e64eac28dd7e0e6f048273100dc55700cce014492cefe2e946d219e100d2fe32cd8a37eaad8e9e1b239e10629f0bd8990b37bb082e17cf77b7959b83d9a9fc87b880394a8fd0e864e8e41d77fd100001800b00010064796e73657400000900010073797a30000000000900020073797a32"], 0x1128}}, 0x20000000) 7.354173286s ago: executing program 4 (id=13247): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x28, 0x9, 0x0, 0xfffff008}, {0x6, 0x1, 0x8}]}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x10000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff3b, 0x0, &(0x7f00000000c0)="a0", 0x0, 0x8}, 0x50) close(r1) socket$kcm(0xa, 0x2, 0x3a) close(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x40000040) getpid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x4, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.459887642s ago: executing program 4 (id=13250): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000500)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0xf00, &(0x7f0000000940)=ANY=[], 0x188}, 0x24008010) 6.339914013s ago: executing program 4 (id=13252): r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x18, &(0x7f0000000040), 0x4) socket$kcm(0x2a, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x2}, 0x104141, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe129, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) sendmsg(r4, &(0x7f0000003680)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000", @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946"], 0x230}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b12d25a80648c2594f90124fc60100c03400f000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x4, @perf_config_ext={0x1}, 0x10a0a0, 0x58, 0x3, 0x4, 0x2, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x6e8}, 0x0, 0x1, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.337124468s ago: executing program 1 (id=13253): socket$kcm(0x2, 0xa, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x19, 0x4, 0x4, 0x5}, 0x50) socket$kcm(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0x0, 0x0, 0x2}], 0x10, 0x4}, 0x94) close(0x3) r0 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x8, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10608, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2b, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002b00)={@map=r4, 0xffffffffffffffff, 0x23, 0x2028}, 0x20) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) r7 = gettid() perf_event_open(0x0, r7, 0x7, r3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_devices(r6, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRESOCT=r6], 0xc) recvmsg$unix(r1, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000), 0x10) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000001980)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x3, 0x100, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x262, 0x9}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 5.541421586s ago: executing program 0 (id=13256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x801, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0xa, &(0x7f0000000180)=[{0x0, 0x8, 0x8, 0x5}, {0x400, 0x5, 0x6, 0xfffffffa}, {0xf, 0x2, 0xb}, {0xc, 0x7, 0x81, 0x4}, {0x200, 0x80, 0x2, 0x1}, {0x3, 0x80, 0xf0, 0x200}, {0x2, 0x1, 0x4, 0x3}, {0x83, 0x3f, 0x2, 0x8}, {0x1, 0x7, 0x1, 0xcee5}, {0xa9, 0x9, 0x9, 0x8002}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x181, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x8000) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000240)={'ip6tnl0\x00'}) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000308016f000000000000000000000000050003008400000039000480080002400000000808000140000000350500030088000000050003003a00000006000240006000000900010073797a30000000000900010073797a3100000000"], 0x60}}, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e60, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000040)="400f", 0x2}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @private=0xa010102}}}], 0x20}, 0x0) 5.515454603s ago: executing program 0 (id=13257): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0xaa, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5a, 0x1, 0x0, 0xc7, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0xfffffffffffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x755756619977ecce) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000280), 0x0}, 0x20) socket$kcm(0x11, 0x3, 0x300) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x400000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f00000004c0)=ANY=[], 0xfe33) ioctl$TUNSETCARRIER(r3, 0x400454e2, 0x0) recvmsg$kcm(r2, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x40000040) socket$kcm(0x11, 0x0, 0x300) r6 = socket$kcm(0x10, 0x2, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$kcm(r6, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f0000000580)=@caif=@util={0x25, "dd917463e8c018c00ad532bca303ea29"}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1943}, 0x101020, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x20800, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe}, 0x0, 0x0, r7, 0x0) 5.014579626s ago: executing program 4 (id=13259): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfdef) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) write$cgroup_devices(r0, 0x0, 0xffdd) 4.73947262s ago: executing program 1 (id=13261): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000000000000, 0x7}, 0x113915, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x28, 0x1, 0x28, &(0x7f0000000280)={0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x4, @perf_config_ext={0x1}, 0x10a0a0, 0x58, 0x3, 0x0, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x0, 0x6e8}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x3, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="2f0000000000000006000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB='/'], 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000680), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00', 0x800}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) socket$kcm(0x11, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fb0fffff00000000000000008500000041000000850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) close(r7) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r7, 0xff04, 0x0) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/4, 0x4}, 0x10000) 4.688559784s ago: executing program 0 (id=13262): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000c0000000b30000007f"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed00007203ffffff9000001d44000000000000730a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080002a10000000000000000000001851000000600000018180000", @ANYRES32=r0, @ANYBLOB="0000000000000000660000000000000018000000f8ffffff00000000000000009500000000000000360a00000000000018010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0xde, &(0x7f0000000340)=""/222}, 0x94) r3 = perf_event_open$cgroup(&(0x7f0000000180)={0x4, 0x80, 0x4, 0x90, 0x9, 0x3e, 0x0, 0x8000000000000001, 0x10000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x5}, 0x10000, 0x4, 0xfffffffd, 0x9, 0x88, 0xc76, 0x15, 0x0, 0x8, 0x0, 0x6}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x5) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r0, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018200000000000006c0000006c0000000200000000000000000000070000000000000000070000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d700000000000000000000000000000000a1d8faf5bd23dd800008"], 0x0, 0x86}, 0x28) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xce}, 0x38) write$cgroup_subtree(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff892f"], 0x3c) r8 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2d) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000007300000000000000", @ANYRES32=r5, @ANYBLOB="ad2a00"/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="041a05338657bb5b000000030000000200"/35], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_tracing={0x1a, 0x23, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0xd, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='GPL\x00', 0x26, 0x0, 0x0, 0x41100, 0x54, '\x00', r4, 0x19, r8, 0x8, &(0x7f0000000800)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x0, 0x3, 0x5, 0x81}, 0x10, 0x1d258, r1, 0x3, &(0x7f0000000880)=[r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f00000008c0)=[{0x5, 0x5, 0x4, 0x2}, {0x2, 0x3, 0x0, 0xb}, {0x5, 0x2, 0xb, 0x2}], 0x10, 0x81}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x488, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x420, 0x2, [0x4, 0x8001, 0x0, 0xc265, 0xe3df, 0xc265, 0x2, 0x800, 0x9, 0x0, 0x10, 0x40, 0x3ff, 0xfff, 0x6, 0x4, 0x7f, 0x2, 0x2135, 0xffff8001, 0x0, 0x3, 0x3, 0x8, 0xb, 0x9, 0x9fbd, 0x0, 0x1, 0x40, 0x8, 0xe, 0x7, 0x200, 0x3, 0x8, 0x7a, 0x5, 0x3, 0xd6bc, 0x3, 0x831a, 0x2, 0x9, 0x2, 0x30, 0x5, 0x87fc, 0xfff, 0x6, 0xa7, 0x7, 0xffffffff, 0xff, 0x1400, 0x7, 0x3, 0x4, 0x7fff, 0x4, 0x4, 0xfffff896, 0x2, 0x8, 0x79, 0x0, 0x80, 0x3, 0x57, 0x8, 0x7fff, 0xf, 0x4, 0x8, 0xa0, 0x1, 0x85, 0x3, 0x1ff, 0x3, 0x85bd, 0x4, 0x865, 0x6, 0xa, 0xfffffff8, 0x2, 0xfffffffa, 0xb7f, 0x8b, 0x80000000, 0x80000000, 0x8, 0x100, 0x2, 0x400, 0x2, 0x4, 0x3, 0x400, 0x5, 0x1, 0x101, 0xd4e, 0x65ad, 0x0, 0x5, 0x7, 0x32, 0x5, 0xad8, 0x3, 0x4, 0x8, 0x4, 0x1, 0x6, 0x0, 0x5, 0x0, 0x6, 0xa0, 0x8, 0x6, 0x100, 0x100, 0x200, 0x0, 0x0, 0xffff, 0x3, 0x1, 0x2, 0x4, 0xfff, 0x2, 0x6, 0x200, 0x3, 0x47, 0x0, 0x2, 0xfffffff8, 0x8, 0x7f, 0x87ca, 0x1, 0x80000001, 0x4, 0x8, 0x401, 0xffff0000, 0xed1, 0x9, 0xfffffff8, 0xfffffffb, 0xfffffffb, 0x3, 0x2, 0x0, 0x2, 0x1, 0xffffff89, 0xfff, 0x0, 0x8, 0x7, 0x0, 0x8, 0xfffffffe, 0x0, 0x4, 0x5, 0x44, 0x5, 0x0, 0x8000, 0x2, 0x0, 0x8, 0x3ff, 0x5, 0x6, 0xb, 0xca43, 0x3, 0x3, 0x6, 0x0, 0x9, 0x3, 0x7, 0x8001, 0xf0000000, 0xc, 0x3, 0x4, 0x7, 0x7f, 0x5, 0x4, 0xd, 0xffffffff, 0x2, 0x7f, 0x9, 0x7, 0x8, 0x7, 0xffff, 0x1d, 0xc5, 0x9, 0x0, 0x1, 0x5, 0x9, 0x3, 0x1, 0x5, 0x2, 0x2, 0x9, 0x7, 0x40, 0x3, 0x400, 0x8, 0x2, 0xc, 0x6, 0x9982, 0x8001, 0x1ff, 0x2706, 0x2, 0x8001, 0x0, 0x2, 0x400, 0x7e, 0xc806, 0xb, 0x1, 0x1, 0x7, 0x3, 0x5, 0x8, 0x2, 0x2, 0x3, 0x41, 0x3, 0x200, 0xc8]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xa5f, 0xffffffffffffffff, 0x4, 0x5e0aede4, 0x4, {0x4, 0x0, 0x4, 0x4, 0x2, 0xc3}, {0x4, 0x1, 0x200, 0x40, 0xfffc, 0x7}, 0x1, 0x4, 0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000200)=@alg={0x128, 0x10, 0x300, 0x70bd28, 0x25dfdbfd, {{'drbg_nopr_sha1\x00'}, '\x00', '\x00', 0x400, 0x400}, [{0x8, 0x1, 0x9}, {0x8, 0x1, 0xb8}, {0x8, 0x1, 0x100}, {0x8, 0x1, 0x7}, {0x8}, {0x8, 0x1, 0x3}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0xfffffffc}, {0x8, 0x1, 0xfffffff8}]}, 0x128}, 0x1, 0x0, 0x0, 0x240000c4}, 0x41) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0x31, 0x0, @val=@perf_event={0x8000000000000000}}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000580)=r2, 0x4) 4.456582015s ago: executing program 3 (id=13265): r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x18, &(0x7f0000000040), 0x4) socket$kcm(0x2a, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x2}, 0x104141, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe129, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) sendmsg(r4, &(0x7f0000003680)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000", @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946"], 0x230}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b12d25a80648c2594f90124fc60100c03400f000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x4, @perf_config_ext={0x1}, 0x10a0a0, 0x58, 0x3, 0x4, 0x2, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x6e8}, 0x0, 0x1, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.777872018s ago: executing program 2 (id=13267): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) socket$kcm(0x18, 0x5, 0x0) 3.733646697s ago: executing program 3 (id=13268): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x3, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x23}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) sendmsg$unix(r1, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4024890}, 0x80) recvmsg$unix(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x2) 3.635009395s ago: executing program 2 (id=13269): r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x18, &(0x7f0000000040), 0x4) socket$kcm(0x2a, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x2}, 0x104141, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe129, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) sendmsg(r4, &(0x7f0000003680)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000", @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946"], 0x230}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b12d25a80648c2594f90124fc60100c03400f000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x4, @perf_config_ext={0x1}, 0x10a0a0, 0x58, 0x3, 0x4, 0x2, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x6e8}, 0x0, 0x1, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.774102044s ago: executing program 3 (id=13270): bpf$BPF_BTF_GET_NEXT_ID(0x7, &(0x7f0000000240)={0x20fffffe}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x15, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x1, 0x7, 0x2, 0x2, 0xffffffff}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x4fb80000, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x9c, 0x76, &(0x7f0000000300)=""/118, 0x41100, 0x16, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xf, 0xc9, 0x665c}, 0x10, 0x1ebc4, 0xffffffffffffffff, 0xa, 0x0, &(0x7f00000003c0)=[{0x1, 0x5, 0x8, 0xc}, {0x3, 0x5, 0xa, 0xc}, {0x3, 0x1, 0xe, 0x5}, {0x3, 0x2, 0x6, 0x3}, {0x3, 0x4, 0xd, 0x14}, {0x5, 0x2, 0xa, 0x4}, {0x3, 0x2, 0xd, 0x8}, {0x2, 0x5, 0x7}, {0x4, 0x5, 0xc, 0x5}, {0x3, 0x3, 0x7, 0x3}], 0x10, 0xffffff7f}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000540)=@o_path={&(0x7f0000000040)='./file0\x00', r1, 0x4000, r2}, 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000850000002300000095000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="a41746f44b3d123a895030569f1e", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 2.608054113s ago: executing program 2 (id=13271): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x3, 0x0, 0x5, 0x5, 0x0, 0xa, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x4, @perf_bp={0x0, 0xd}, 0x104018, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x83, &(0x7f0000000000)=r6, 0x8) socket$kcm(0x10, 0x2, 0x0) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) socketpair(0x1, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8941, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8941, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r8, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x922000000003, 0x11) (async) r9 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b3a25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) (async) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b3a25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[], 0x0}, 0x94) socket$kcm(0xa, 0x1, 0x0) (async) r10 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r10, 0x29, 0x1a, &(0x7f0000000140), 0x4) sendmsg$kcm(r10, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x20000002) (async) sendmsg$kcm(r10, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x20000002) 2.168131744s ago: executing program 2 (id=13272): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0xfffffffe}, 0x0, 0x10, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000300)) socket$kcm(0x10, 0x2, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000005000000000000002300000085000000c60000009500e1cd016ca363b7e8c7000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffc0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close(0x4) socketpair(0xa, 0x1, 0x100, &(0x7f0000000700)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f0000000400000008000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fbffffff00000000d6dc4d11e5ff0300000018001000756c6c2500000000002020207b1af8ff00000000bfa100000000000007f6fffff70000ffb702000008000000b7030000590d0000859d000006000000850000000e0000009500524f7f7159a81e77000000000000d9f7be76f4079c64d4cd0d5e5fde567737aef206b655f5a115ae2f64e6aae03f6db7dfb4100f4f7aaf0d04c99340ee5913b5f7dba40350c03f"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xdc0, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, 0x0, 0xfe33) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002300)=""/4138, 0x102a}], 0x1}, 0x40002022) bpf$ENABLE_STATS(0x20, &(0x7f0000001180), 0x4) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x11, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)=ANY=[@ANYBLOB="140000001000010000000000000000060000000a20000000000a0101000000000000f400010400000900010073797a30000000002c000000030a01020000000000000000e1ff00000900010073797a30000000000900030073797a31000000002c3e36e0dc58ed872dfd37b4029b36000000030a0108000000000000000001000001095b78074c57085cfedef434e8eb3bb100030073797a320e0000000900010073797a30000000001400000011"], 0xa0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 1.455786935s ago: executing program 1 (id=13273): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) r1 = syz_clone(0x200, &(0x7f0000000280)="95de162497e59ec2ff675aeef98f971736adae2c731fc8445c655d0024686edcea6c2264392e3d078ace4a566230156a804bb152247a376c3b1054c4d67b6bd2281cae0afa611c17bf54cef7418a879bfb4029c3540c154acfea6fde7b2a2e7887ec25ae9912f0a05932615742a90731986a339d86d5e0c0d565c80cb70bb1e8f8f4e2c41dd5950c59712a5f45ee861cb3c24592ffbaf55e1e00e85a2c3b82aa13b4bc5713e63225c4b333b84125a50f48b02a907ee38ebf0bc21ba7ddfbc04776f2b39e710efdb5230c70ede351b2b7190c91fe85f51ca9051149f8ed3739bd93e52654286665ce64c4054e53", 0xed, &(0x7f00000003c0), &(0x7f0000000180), &(0x7f0000000b80)="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") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)='GPL\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100)=0x8, 0x12) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000400)={'team0\x00'}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000940)=ANY=[], &(0x7f0000000680)=""/138, 0x8e, 0x8a, 0x1, 0x325}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x12, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, r3}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x3, 0x14, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0xfffffffd, 0x0, 0x9, 0x800000, 0x35, 0x0, 0xb542, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000440)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000880)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT], 0x27) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000500)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r3, @ANYRESHEX=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0xfffffffffffffdc6}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b1600000000000000000200000838000480340001800b0001006e756d67656e00002400028008000440fffffff10800014000000003080003400000000008000240000000500900010073797a30000000000900020073797a3200000000140000001100010000000a00000000000500000a"], 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r10 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) ioctl$TUNSETIFINDEX(r10, 0x400454da, &(0x7f0000000280)) r11 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r11, 0x1, 0x45, &(0x7f00000001c0), 0x4) openat$cgroup_type(r10, &(0x7f00000001c0), 0x2, 0x0) 1.424010831s ago: executing program 0 (id=13274): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="09000000070000000080000001f1000000000000e10952404a49d8706e295a8655b2d70715a1643db7f0bbec76a859c1f06213cb6e438a8eca6264aac1365b759a5bd42e112e1295574b3e08557b008beb049495bfdb6c145e66feffffff900ec7", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), 0x0}, 0x20) r3 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)="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", 0x188}, {0x0}], 0x2}, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000000140)="06ff03076844babeb89e", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41, 0x4}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x1458}, 0x48810) r5 = socket$kcm(0x1e, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10049014) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a00000007000003d98494028ecd72db48095689b6000000000e0100000000000000000000000000000300004fa10200000002000000"], &(0x7f0000000900)=""/28, 0x4a, 0x1c, 0x1, 0x0, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001b00)={{r1}, &(0x7f0000000a00), &(0x7f0000001ac0)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0xb, 0x12, &(0x7f0000000a40)=@raw=[@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}], &(0x7f00000005c0)='GPL\x00', 0x453, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x4, r7, 0x8, &(0x7f0000000980)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001b40), 0x0, 0x10, 0x7fff}, 0x94) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0xd0, 0x14, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0x7e, 0x8, "dcf482a437981760b41b15d9aa6437d49beb8e2f278bdcd9b6427d8f5393d4593c2b3667927d230cfe9a968fa0e9230513c578a9ee444ddffa5ec156a33ecde9614c2b0f1cf73daede055c1f0833be15191b5664df9abdde1885c451297a204c10e034283c8996b6233fda90d70740836f29fb79525b9b618d73"}]}, @NFT_MSG_NEWTABLE={0x130, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x11, 0x6, "caa827f5345c98c89c2610f761"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xdc, 0x6, "f26c231d1754d4a72ae880a0032781e3bcb2c43ce686ee542f03e274b8f02991f78849a57acae29b44214ca81397ee05289b295f9ef36deecf525e6db3d029c8d282b856ed5cf322d26c9f80014b5eb076572e88c464fa5800d5030b70461fb4d1065f34d8c12ad68aa1a301ace9b50d82b09ff3971f44976e8dae0c18d6aa33fb40a6903df6bf5ec2ea164a624de520c7bf0e667323afc23539ef1f1c012db87b70e487c2d245402dccd94dcf7892405ae3d78264f68f65bef42707a48894ee4e6371e2ddd06ea8eef21df43617b6c723608e6744551491"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x1a4, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x170, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'nicvf0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'veth1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x3cc}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 1.423328639s ago: executing program 3 (id=13275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000020301010000000000000000000000190800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040020) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0xc800) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f00000004c0)=@polexpire={0xcc, 0x1b, 0x1, 0x70bd25, 0x25dfdbfd, {{{@in=@remote, @in6=@empty, 0x4e21, 0x6, 0x4e21, 0x2, 0x2, 0x80, 0x20, 0x16}, {0x10, 0x1c3dd7d6, 0x4, 0x38e7, 0x3, 0x3, 0x1, 0x4e5}, {0x83, 0x2, 0x37, 0xe}, 0xfffffffd, 0x6e6bc0, 0x1, 0x0, 0x1d588ee3188df611, 0x2}, 0x3}, [@mark={0xc, 0x15, {0x350759, 0xffffffff}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r9, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000002020102000000000000000002000003240002800c00028005000100210000001400018008000100ac1414aa08000200e00000012dc40cd2a367ecdcaa706f356a0e541e28d41d903a2839d16eb880b2977dbb12652a7ba6366de56e9fc6d3637942ccc48160087b971e701a9382495c1c5abbc4e877518f49c75523a2a0900f7c0c4b70c3237d47346d47426db27671c896789e3122867b6d84c42c414dfd1da033072bedc1193c7f20a928670db7abbf9cb58707c6a01c0b09e90784730e916799"], 0x38}, 0x1, 0x0, 0x0, 0x40840}, 0x4010) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x8, 0x0, 0x800000, 0x200, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r12, &(0x7f0000000600)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000580)=[{&(0x7f00000006c0)=""/81, 0x51}, {&(0x7f0000001480)=""/4096, 0x1000}], 0x2, &(0x7f0000000740)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}, 0x10002) r13 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000035000b63717a3c4a01d8985b0808aa78", 0x14}], 0x1}, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r14, 0x0, 0x2c, 0x0, &(0x7f00000007c0)="c1188e99b95d02ff4284860186dd", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.214154783s ago: executing program 2 (id=13276): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0xa0805, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={0xffffffffffffffff, 0x0, 0x0}, 0x20) recvmsg(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f91124fc60", 0x14}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2080}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0xfffffffffffffd57, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x84000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x830c}, 0x0, 0x8, 0x80000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x3}, 0x50) r4 = socket$kcm(0xa, 0x2, 0x3a) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x88, 0x67, &(0x7f00000002c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040), 0x60}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x4000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8994, &(0x7f0000000080)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.086234812s ago: executing program 4 (id=13277): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001949}, 0x202, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x89, 0x0, 0x0, 0x0, 0x7ff0, 0x4483, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0x1ff}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, r1, 0x9) r3 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r3, r2, 0x0, 0x0, 0x0}, 0x30) perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x12) socket$isdn_base(0x22, 0x3, 0x0) r4 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x4008b100, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002980)={&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002640), 0x0, &(0x7f00000029c0)=ANY=[], 0xe0, 0x4}, 0x4080) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}, 0x1, 0x0, 0x0, 0x40000}, 0x80d0) 865.61079ms ago: executing program 0 (id=13278): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x6, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) 577.041646ms ago: executing program 1 (id=13279): r0 = socket$kcm(0x2, 0x5, 0x84) close(0x3) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x77, &(0x7f0000000000), 0x1000f) 565.676086ms ago: executing program 2 (id=13280): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x3, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x23}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) sendmsg$unix(r1, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002200), 0x0, 0x0, 0x0, 0x4024890}, 0x80) recvmsg$unix(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x2) 456.898748ms ago: executing program 0 (id=13281): r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x18, &(0x7f0000000040), 0x4) socket$kcm(0x2a, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x2}, 0x104141, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe129, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) sendmsg(r4, &(0x7f0000003680)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000", @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946"], 0x230}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b12d25a80648c2594f90124fc60100c03400f000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x4, @perf_config_ext={0x1}, 0x10a0a0, 0x58, 0x3, 0x4, 0x2, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x6e8}, 0x0, 0x1, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 455.989441ms ago: executing program 3 (id=13282): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x6, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) (fail_nth: 7) 397.125741ms ago: executing program 4 (id=13283): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r1}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x80086601, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000000)="27050200160014000600002f86dd", 0xe}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x30}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x88}]}}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x1, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x1, 0x4}, 0xa0, 0x6, 0x0, 0x4, 0x2, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000300)={r3, 0x0, 0x53, 0x0, &(0x7f0000000080)="8108df66955584e3d857f56afe86bc6badd5b3bb6d43785ab02ef8edf3498dd5d5668b9963a5ff89e59c84a17d69c152ebb86681ded9bc34a716748b2fee792f2b31fe9b8911a9379cc68f101dce7355fa6635", 0x0, 0x9, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x2, 0x0, 0x6}, 0x50) 317.115878ms ago: executing program 1 (id=13284): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="004000003a0091468cd934e3ea81e88802"], 0xfe33) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x2d, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @alu={0x7, 0x1, 0x2, 0xb, 0x5, 0xfffffffffffffff8, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @alu={0x7, 0x1, 0x4, 0x2, 0x2, 0xfffffffffffffff0, 0xfffffffffffffff0}, @alu={0x4, 0x0, 0x2, 0x6, 0x4, 0x2, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=[{0x5, 0x3, 0x5, 0x9}], 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={0x0, r2, 0x0, 0xffffffff00000001}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r4 = syz_clone(0x800, &(0x7f00000008c0)="6943d4e60864ea3034c482ffff18197130470b6068b24efa24f87e4c5efc42ed6e1c6bd164443ecd238957394a19d598a70995fd8a558bdf427b061da1eb599510d9da407b03173d02b942fd34c96162ed71f901f08f0d0cb0aa2b7bc0a112fb7f82571e4c4f4cf06f10af0f1c9f94e963caca02a1dcf61b00a7c03f5b314e", 0x7f, &(0x7f0000000740), &(0x7f0000000780), &(0x7f00000009c0)="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") sendmsg$netlink(r2, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000019c0)={0x330, 0x3d, 0x800, 0x70bd25, 0x25dfdbfe, "", [@typed={0x8, 0xdf, 0x0, 0x0, @pid=r4}, @nested={0x1d5, 0x54, 0x0, 0x1, [@nested={0x4, 0x44}, @nested={0x4, 0xc7}, @generic="fff9cc7a51276ba3e698b0f9a0184056f25c09c68b16b3e7f060c493cbf6187728b1b01f1f31058ee24b71fa83e1100c86df812430c812f3241de6e69797661e6cca34d73c44747c384ee929f006fcb7e5725580345245a3159d347f03d60d7a92c0b7f534ead43ea12b0c172142b55614f8", @generic="22d02cecdd9e51a09e304cb211e5c3e9d5499e6e56571e4832b880d8bf549b908ff087168a2c4858aaf8c987cbec3aad2be1133f51e1e88880c75330b50d83bac7bc1e9233e1c623773f5ab7e37171d9cf861f8a22fad0799b018fc675c9b26ed9054a9a8a04230e", @generic="f3b527de6bfaf1eeb616715fcb56ecf009b13e51b612344c", @generic="c37355e14e1134f6a2c60feee52dfaa23977271aee5787dbc387db3949129b504305af1e399ff45892e83e29e1356298f1ed50b7e016568eebe813d5d4e994c1d205c0d13a43de6f8349cafb6407013be49c7d5d6991f277c2c73968f7319475921265290251ad3408a523a27b5ec8eb81f5a2fce5f073bfb5a209817d284958f0d3b95d65524b294fe00b197a5498419c7db2286c1a76886a0bb7939dfe73aabfdc50a9f5c1fa1fc171a83db15118165bede304a946f66cb854fd3a5e7396", @generic="b4d2ff0f331c69f4017513257a66b2f539045845617cce11"]}, @generic="beedf1c44518a5a0d4e893615da7c352fbd82cc360dc142ac36060bded7a178d5994fda7231329859b8f72971cc09618567025725c050e25e8d9b1c84b4cde0ae49a40fed41c53bab583c723faf430c243ddc08b51276e6401ceb636c4e9014f2aa37063e07abee98d9e3c1d281911f3b172c8d39c3c1aa310780ba1", @generic="512ec919342530348cb0ce3b6a4d9cd1701a99dc332c9fb3143b84735c83465a6d31e3c64d74f6a9a65f616bdb9f8c13ce97f3c4b1175eb70c888f321d3bc26edd910eae4d2fc7d0f0c948f617d7272a68db809844131456db7a8c6cbb7a78f61d05480665b8e5a3d079375568063a45de50b340882aee2a4c9c298c5a39d1a3ec3c62b8054c435a06fc7d717d3b01665c5906bee15627cecc0d580322c5dad13cf2d60e2efaf37cdbe2dc783823046897362bb7971b2c27ecc308e5dff803db8f1d32e6"]}, 0x330}], 0x1}, 0x44) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x18) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x401c5820, &(0x7f0000000040)=0x1000) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="fdffffff00"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ea"], 0x50) 0s ago: executing program 3 (id=13285): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (fail_nth: 7) kernel console output (not intermixed with test programs): 12610': attribute type 3 has an invalid length. [ 2068.514570][T13264] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 2068.623908][T13266] netlink: 'syz.4.12612': attribute type 3 has an invalid length. [ 2069.719648][T13286] syzkaller0: entered promiscuous mode [ 2069.761114][T13286] syzkaller0: entered allmulticast mode [ 2069.923766][T13294] netlink: 'syz.2.12620': attribute type 10 has an invalid length. [ 2070.308977][T13300] netlink: 'syz.0.12622': attribute type 10 has an invalid length. [ 2070.877027][T13310] netlink: 'syz.2.12624': attribute type 3 has an invalid length. [ 2070.922883][T13310] __nla_validate_parse: 6 callbacks suppressed [ 2070.922905][T13310] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12624'. [ 2071.448842][T13324] netlink: 67 bytes leftover after parsing attributes in process `syz.2.12631'. [ 2071.821022][T13324] netlink: 'syz.2.12631': attribute type 10 has an invalid length. [ 2071.836750][T13324] netlink: 55 bytes leftover after parsing attributes in process `syz.2.12631'. [ 2072.086740][T13339] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 2072.357537][T13342] netlink: 'syz.1.12633': attribute type 3 has an invalid length. [ 2072.370517][T13342] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12633'. [ 2072.455138][T13331] netlink: 'syz.0.12632': attribute type 3 has an invalid length. [ 2072.586443][T13331] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12632'. [ 2073.055088][T13359] netlink: 'syz.2.12638': attribute type 3 has an invalid length. [ 2073.066432][T13359] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12638'. [ 2073.677743][T13379] netlink: 67 bytes leftover after parsing attributes in process `syz.3.12645'. [ 2073.710454][T13385] netlink: 'syz.4.12646': attribute type 10 has an invalid length. [ 2073.867804][T13372] netlink: 'syz.0.12643': attribute type 3 has an invalid length. [ 2073.888804][T13372] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12643'. [ 2073.952381][T13387] netlink: 'syz.3.12645': attribute type 10 has an invalid length. [ 2074.024299][T13387] netlink: 55 bytes leftover after parsing attributes in process `syz.3.12645'. [ 2074.295857][T13390] netlink: 67 bytes leftover after parsing attributes in process `syz.1.12648'. [ 2074.795112][T13397] netlink: 'syz.1.12648': attribute type 10 has an invalid length. [ 2075.274425][T13404] netlink: 'syz.0.12649': attribute type 10 has an invalid length. [ 2075.685013][T13412] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 2075.726431][T13416] netlink: 'syz.4.12652': attribute type 3 has an invalid length. [ 2076.191941][T13429] netlink: 'syz.3.12657': attribute type 10 has an invalid length. [ 2076.313925][T13426] __nla_validate_parse: 4 callbacks suppressed [ 2076.314036][T13426] netlink: 67 bytes leftover after parsing attributes in process `syz.2.12656'. [ 2076.353635][T13435] netlink: 'syz.1.12655': attribute type 3 has an invalid length. [ 2076.397854][T13435] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12655'. [ 2076.463592][T13422] netlink: 'syz.2.12656': attribute type 10 has an invalid length. [ 2076.534387][T13422] netlink: 55 bytes leftover after parsing attributes in process `syz.2.12656'. [ 2076.634387][T13439] netlink: 'syz.4.12659': attribute type 3 has an invalid length. [ 2076.643829][T13439] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.12659'. [ 2077.629746][T13465] netlink: 67 bytes leftover after parsing attributes in process `syz.3.12663'. [ 2077.717669][T13450] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12662'. [ 2077.772070][T13457] netlink: 55 bytes leftover after parsing attributes in process `syz.3.12663'. [ 2078.369766][T13482] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.12667'. [ 2078.392813][T13480] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12668'. [ 2078.469714][T13481] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.12670'. [ 2079.030358][T13491] validate_nla: 6 callbacks suppressed [ 2079.030382][T13491] netlink: 'syz.0.12671': attribute type 10 has an invalid length. [ 2080.174936][T13516] netlink: 'syz.0.12676': attribute type 10 has an invalid length. [ 2080.211684][T13507] netlink: 'syz.1.12675': attribute type 10 has an invalid length. [ 2080.301484][T13521] netlink: 'syz.3.12677': attribute type 3 has an invalid length. [ 2081.004266][T13531] netlink: 'syz.0.12680': attribute type 10 has an invalid length. [ 2081.178778][T13537] netlink: 'syz.1.12681': attribute type 3 has an invalid length. [ 2081.466087][T13546] netlink: 'syz.2.12683': attribute type 3 has an invalid length. [ 2081.474571][T13546] __nla_validate_parse: 10 callbacks suppressed [ 2081.474593][T13546] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12683'. [ 2082.309867][T13567] netlink: 'syz.2.12688': attribute type 3 has an invalid length. [ 2082.346487][T13567] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12688'. [ 2082.371436][T13566] netlink: 67 bytes leftover after parsing attributes in process `syz.0.12689'. [ 2082.662675][T13568] netlink: 'syz.0.12689': attribute type 10 has an invalid length. [ 2082.763196][T13568] netlink: 55 bytes leftover after parsing attributes in process `syz.0.12689'. [ 2083.259000][T13582] netlink: 'syz.3.12691': attribute type 3 has an invalid length. [ 2083.373288][T13582] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.12691'. [ 2083.520078][T13584] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12692'. [ 2083.581806][T13588] netlink: 67 bytes leftover after parsing attributes in process `syz.2.12695'. [ 2083.674986][T13588] netlink: 55 bytes leftover after parsing attributes in process `syz.2.12695'. [ 2083.972049][T13596] netlink: 55 bytes leftover after parsing attributes in process `syz.2.12696'. [ 2084.007289][T13586] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12694'. [ 2084.534602][T13598] validate_nla: 4 callbacks suppressed [ 2084.534627][T13598] netlink: 'syz.4.12697': attribute type 10 has an invalid length. [ 2084.791476][T13617] netlink: 'syz.0.12700': attribute type 10 has an invalid length. [ 2085.076793][T13622] netlink: 'syz.2.12702': attribute type 3 has an invalid length. [ 2085.238340][T13629] netlink: 'syz.4.12705': attribute type 3 has an invalid length. [ 2085.461482][T13633] netlink: 'syz.1.12703': attribute type 10 has an invalid length. [ 2086.284169][T13645] netlink: 'syz.4.12709': attribute type 3 has an invalid length. [ 2087.193373][T13670] netlink: 'syz.4.12714': attribute type 3 has an invalid length. [ 2087.221927][T13670] __nla_validate_parse: 10 callbacks suppressed [ 2087.221948][T13670] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.12714'. [ 2087.856677][T13684] netlink: 67 bytes leftover after parsing attributes in process `syz.4.12720'. [ 2087.874063][T13681] netlink: 'syz.1.12719': attribute type 3 has an invalid length. [ 2087.891925][T13681] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12719'. [ 2088.103033][T13684] netlink: 'syz.4.12720': attribute type 10 has an invalid length. [ 2088.111006][T13684] netlink: 55 bytes leftover after parsing attributes in process `syz.4.12720'. [ 2088.353104][T13686] netlink: 67 bytes leftover after parsing attributes in process `syz.2.12721'. [ 2088.734540][T13686] netlink: 'syz.2.12721': attribute type 10 has an invalid length. [ 2088.849117][T13686] netlink: 55 bytes leftover after parsing attributes in process `syz.2.12721'. [ 2089.267759][T13706] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 2089.759136][T13721] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 2089.784168][T13722] netlink: 67 bytes leftover after parsing attributes in process `syz.2.12730'. [ 2089.951383][T13723] netlink: 'syz.2.12730': attribute type 10 has an invalid length. [ 2090.118876][T13723] netlink: 55 bytes leftover after parsing attributes in process `syz.2.12730'. [ 2090.967626][T13730] netlink: 'syz.3.12735': attribute type 3 has an invalid length. [ 2090.998696][T13730] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.12735'. [ 2091.156843][T13742] netlink: 'syz.1.12737': attribute type 3 has an invalid length. [ 2091.169042][T13742] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12737'. [ 2091.832554][T13745] netlink: 'syz.4.12740': attribute type 10 has an invalid length. [ 2091.872932][T13757] netlink: 'syz.3.12739': attribute type 10 has an invalid length. [ 2091.962621][T13758] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 2092.211369][T13761] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 2092.882278][T13772] netlink: 'syz.2.12747': attribute type 3 has an invalid length. [ 2092.900190][T13778] netlink: 'syz.1.12748': attribute type 3 has an invalid length. [ 2092.900223][T13778] __nla_validate_parse: 4 callbacks suppressed [ 2092.900239][T13778] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12748'. [ 2093.182665][T13772] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12747'. [ 2093.201201][T13783] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12749'. [ 2093.218321][T13787] netlink: 67 bytes leftover after parsing attributes in process `syz.0.12750'. [ 2093.371503][T13791] netlink: 'syz.0.12750': attribute type 10 has an invalid length. [ 2093.403778][T13791] netlink: 55 bytes leftover after parsing attributes in process `syz.0.12750'. [ 2094.199816][T13809] netlink: 67 bytes leftover after parsing attributes in process `syz.4.12754'. [ 2094.304488][T13804] netlink: 'syz.4.12754': attribute type 10 has an invalid length. [ 2094.322734][T13804] netlink: 55 bytes leftover after parsing attributes in process `syz.4.12754'. [ 2094.551474][T13815] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 2094.843180][T13826] netlink: 67 bytes leftover after parsing attributes in process `syz.4.12758'. [ 2095.152006][T13829] netlink: 'syz.4.12758': attribute type 10 has an invalid length. [ 2095.189096][T13829] netlink: 55 bytes leftover after parsing attributes in process `syz.4.12758'. [ 2095.283170][T13830] netlink: 'syz.2.12761': attribute type 3 has an invalid length. [ 2095.362594][T13830] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12761'. [ 2095.405969][T13825] netlink: 'syz.1.12762': attribute type 3 has an invalid length. [ 2096.548718][T13844] netlink: 'syz.3.12765': attribute type 3 has an invalid length. [ 2096.670046][T13856] netlink: 'syz.0.12768': attribute type 3 has an invalid length. [ 2096.789515][T13864] netlink: 'syz.1.12770': attribute type 10 has an invalid length. [ 2097.593919][T13871] netlink: 'syz.0.12771': attribute type 10 has an invalid length. [ 2097.937898][T13879] netlink: 'syz.2.12775': attribute type 10 has an invalid length. [ 2097.959003][T13877] __nla_validate_parse: 9 callbacks suppressed [ 2097.959054][T13877] netlink: 67 bytes leftover after parsing attributes in process `syz.1.12773'. [ 2098.021835][T13879] netlink: 55 bytes leftover after parsing attributes in process `syz.2.12775'. [ 2098.841033][T13889] netlink: 67 bytes leftover after parsing attributes in process `syz.2.12779'. [ 2099.022566][T13892] netlink: 'syz.1.12773': attribute type 10 has an invalid length. [ 2099.152423][T13894] netlink: 'syz.2.12779': attribute type 10 has an invalid length. [ 2099.174004][T13892] netlink: 55 bytes leftover after parsing attributes in process `syz.1.12773'. [ 2099.249327][T13895] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.12778'. [ 2099.251092][T13894] netlink: 55 bytes leftover after parsing attributes in process `syz.2.12779'. [ 2099.567119][T13905] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 2100.152680][T13914] netlink: 55 bytes leftover after parsing attributes in process `syz.1.12783'. [ 2100.175542][T13916] netlink: 67 bytes leftover after parsing attributes in process `syz.0.12784'. [ 2100.450091][T13917] netlink: 67 bytes leftover after parsing attributes in process `syz.4.12786'. [ 2100.823591][T13920] validate_nla: 2 callbacks suppressed [ 2100.823611][T13920] netlink: 'syz.4.12786': attribute type 10 has an invalid length. [ 2101.041740][T13920] netlink: 55 bytes leftover after parsing attributes in process `syz.4.12786'. [ 2101.096302][T13916] netlink: 'syz.0.12784': attribute type 10 has an invalid length. [ 2101.837036][T13935] netlink: 'syz.2.12788': attribute type 10 has an invalid length. [ 2101.851948][T13936] netlink: 'syz.1.12789': attribute type 3 has an invalid length. [ 2102.233364][T13952] netlink: 'syz.0.12791': attribute type 10 has an invalid length. [ 2102.268566][T13953] netlink: 'syz.4.12792': attribute type 3 has an invalid length. [ 2102.290820][T13949] netlink: 'syz.2.12790': attribute type 10 has an invalid length. [ 2102.698511][T13960] netlink: 'syz.1.12794': attribute type 3 has an invalid length. [ 2102.972992][T13965] netlink: 'syz.3.12796': attribute type 10 has an invalid length. [ 2103.069533][T13965] __nla_validate_parse: 11 callbacks suppressed [ 2103.069636][T13965] netlink: 55 bytes leftover after parsing attributes in process `syz.3.12796'. [ 2103.144176][T13972] netlink: 67 bytes leftover after parsing attributes in process `syz.2.12797'. [ 2103.776560][T13978] netlink: 67 bytes leftover after parsing attributes in process `syz.4.12800'. [ 2103.777691][T13981] netlink: 67 bytes leftover after parsing attributes in process `syz.3.12801'. [ 2104.076199][T13982] netlink: 'syz.4.12800': attribute type 10 has an invalid length. [ 2104.188155][T13982] netlink: 55 bytes leftover after parsing attributes in process `syz.4.12800'. [ 2104.208488][T13984] netlink: 55 bytes leftover after parsing attributes in process `syz.3.12801'. [ 2104.615377][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2104.626180][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2104.638368][T14000] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 2104.916343][T14006] netlink: 67 bytes leftover after parsing attributes in process `syz.4.12807'. [ 2104.934712][T14002] netlink: 67 bytes leftover after parsing attributes in process `syz.0.12805'. [ 2105.207464][T14006] netlink: 55 bytes leftover after parsing attributes in process `syz.4.12807'. [ 2105.221497][T14017] netlink: 67 bytes leftover after parsing attributes in process `syz.1.12809'. [ 2106.058717][T14035] validate_nla: 4 callbacks suppressed [ 2106.058861][T14035] netlink: 'syz.4.12812': attribute type 3 has an invalid length. [ 2106.106240][T14038] netlink: 'syz.3.12810': attribute type 10 has an invalid length. [ 2106.567472][T14052] netlink: 'syz.3.12816': attribute type 10 has an invalid length. [ 2106.672658][T14053] netlink: 'syz.2.12817': attribute type 3 has an invalid length. [ 2107.417077][T14065] netlink: 'syz.2.12821': attribute type 3 has an invalid length. [ 2107.741546][T14078] netlink: 'syz.3.12822': attribute type 3 has an invalid length. [ 2108.262777][T14079] netlink: 'syz.4.12824': attribute type 10 has an invalid length. [ 2108.310767][T14079] __nla_validate_parse: 11 callbacks suppressed [ 2108.310790][T14079] netlink: 55 bytes leftover after parsing attributes in process `syz.4.12824'. [ 2108.877916][T14089] netlink: 67 bytes leftover after parsing attributes in process `syz.2.12828'. [ 2108.968223][T14087] netlink: 72 bytes leftover after parsing attributes in process `syz.3.12827'. [ 2108.980506][T14086] netlink: 67 bytes leftover after parsing attributes in process `syz.0.12826'. [ 2108.997856][T14094] netlink: 67 bytes leftover after parsing attributes in process `syz.1.12829'. [ 2109.081897][T14093] netlink: 'syz.3.12827': attribute type 10 has an invalid length. [ 2109.142610][T14097] netlink: 'syz.2.12828': attribute type 10 has an invalid length. [ 2109.352034][T14097] netlink: 55 bytes leftover after parsing attributes in process `syz.2.12828'. [ 2109.428589][T14098] netlink: 'syz.1.12829': attribute type 10 has an invalid length. [ 2109.497183][T14101] netlink: 67 bytes leftover after parsing attributes in process `syz.4.12830'. [ 2109.513571][T14098] netlink: 55 bytes leftover after parsing attributes in process `syz.1.12829'. [ 2109.543204][T14090] netlink: 55 bytes leftover after parsing attributes in process `syz.0.12826'. [ 2109.775121][T14101] netlink: 55 bytes leftover after parsing attributes in process `syz.4.12830'. [ 2110.159317][T14113] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 2111.080475][T14127] validate_nla: 4 callbacks suppressed [ 2111.080643][T14127] netlink: 'syz.4.12837': attribute type 3 has an invalid length. [ 2111.254553][T14133] netlink: 'syz.1.12838': attribute type 10 has an invalid length. [ 2111.664907][T14138] netlink: 'syz.0.12839': attribute type 10 has an invalid length. [ 2112.098153][T14146] netlink: 'syz.2.12841': attribute type 10 has an invalid length. [ 2112.778896][T14153] netlink: 'syz.1.12843': attribute type 10 has an invalid length. [ 2113.509824][T14168] netlink: 'syz.2.12847': attribute type 3 has an invalid length. [ 2113.520607][T14168] __nla_validate_parse: 11 callbacks suppressed [ 2113.520629][T14168] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12847'. [ 2113.798282][T14173] netlink: 67 bytes leftover after parsing attributes in process `syz.4.12846'. [ 2113.898999][T14173] netlink: 'syz.4.12846': attribute type 10 has an invalid length. [ 2113.983720][T14173] netlink: 55 bytes leftover after parsing attributes in process `syz.4.12846'. [ 2114.503534][T14186] netlink: 67 bytes leftover after parsing attributes in process `syz.3.12850'. [ 2114.615141][T14187] netlink: 'syz.3.12850': attribute type 10 has an invalid length. [ 2114.772313][T14187] netlink: 55 bytes leftover after parsing attributes in process `syz.3.12850'. [ 2115.769682][T14205] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 2116.207822][T14213] netlink: 67 bytes leftover after parsing attributes in process `syz.3.12859'. [ 2116.378518][T14213] netlink: 'syz.3.12859': attribute type 10 has an invalid length. [ 2116.436658][T14213] netlink: 55 bytes leftover after parsing attributes in process `syz.3.12859'. [ 2116.762934][T14226] netlink: 'syz.4.12860': attribute type 3 has an invalid length. [ 2116.770818][T14226] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.12860'. [ 2117.234220][T14237] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 2117.402151][T14244] netlink: 67 bytes leftover after parsing attributes in process `syz.4.12867'. [ 2117.650190][T14244] netlink: 'syz.4.12867': attribute type 10 has an invalid length. [ 2117.708684][T14244] netlink: 55 bytes leftover after parsing attributes in process `syz.4.12867'. [ 2117.968556][T14252] netlink: 'syz.0.12869': attribute type 10 has an invalid length. [ 2118.817602][T14274] __nla_validate_parse: 2 callbacks suppressed [ 2118.817663][T14274] netlink: 72 bytes leftover after parsing attributes in process `syz.2.12878'. [ 2118.868667][T14274] netlink: 'syz.2.12878': attribute type 10 has an invalid length. [ 2120.001811][T14306] netlink: 'syz.1.12886': attribute type 3 has an invalid length. [ 2120.010074][T14306] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12886'. [ 2120.573042][T14313] netlink: 67 bytes leftover after parsing attributes in process `syz.1.12890'. [ 2120.692049][T14326] netlink: 'syz.1.12890': attribute type 10 has an invalid length. [ 2120.724089][T14322] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12892'. [ 2120.901727][T14326] netlink: 55 bytes leftover after parsing attributes in process `syz.1.12890'. [ 2121.371148][T14338] FAULT_INJECTION: forcing a failure. [ 2121.371148][T14338] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 2121.431692][T14338] CPU: 0 UID: 0 PID: 14338 Comm: syz.3.12898 Not tainted syzkaller #0 PREEMPT(full) [ 2121.431737][T14338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2121.431760][T14338] Call Trace: [ 2121.431769][T14338] [ 2121.431779][T14338] dump_stack_lvl+0x189/0x250 [ 2121.431811][T14338] ? __pfx____ratelimit+0x10/0x10 [ 2121.431873][T14338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2121.431897][T14338] ? __pfx__printk+0x10/0x10 [ 2121.431926][T14338] ? __might_fault+0xb0/0x130 [ 2121.431968][T14338] should_fail_ex+0x414/0x560 [ 2121.432001][T14338] _copy_from_user+0x2d/0xb0 [ 2121.432025][T14338] __sys_bpf+0x1ed/0x870 [ 2121.432055][T14338] ? __pfx___sys_bpf+0x10/0x10 [ 2121.432099][T14338] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2121.432129][T14338] ? __pfx_ksys_write+0x10/0x10 [ 2121.432153][T14338] ? rcu_is_watching+0x15/0xb0 [ 2121.432182][T14338] __x64_sys_bpf+0x7c/0x90 [ 2121.432208][T14338] do_syscall_64+0xfa/0x3b0 [ 2121.432243][T14338] ? lockdep_hardirqs_on+0x9c/0x150 [ 2121.432270][T14338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2121.432290][T14338] ? clear_bhb_loop+0x60/0xb0 [ 2121.432315][T14338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2121.432335][T14338] RIP: 0033:0x7fc18a98ebe9 [ 2121.432353][T14338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2121.432371][T14338] RSP: 002b:00007fc18b8b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2121.432392][T14338] RAX: ffffffffffffffda RBX: 00007fc18abb5fa0 RCX: 00007fc18a98ebe9 [ 2121.432407][T14338] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000008 [ 2121.432420][T14338] RBP: 00007fc18b8b1090 R08: 0000000000000000 R09: 0000000000000000 [ 2121.432431][T14338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2121.432443][T14338] R13: 00007fc18abb6038 R14: 00007fc18abb5fa0 R15: 00007ffc4ab9df78 [ 2121.432475][T14338] [ 2122.214069][T14348] netlink: 67 bytes leftover after parsing attributes in process `syz.3.12901'. [ 2122.297881][T14352] netlink: 'syz.3.12901': attribute type 10 has an invalid length. [ 2122.492639][T14352] netlink: 55 bytes leftover after parsing attributes in process `syz.3.12901'. [ 2122.732149][T14361] netlink: 67 bytes leftover after parsing attributes in process `syz.1.12903'. [ 2123.453614][T14361] netlink: 'syz.1.12903': attribute type 10 has an invalid length. [ 2123.591626][T14361] netlink: 55 bytes leftover after parsing attributes in process `syz.1.12903'. [ 2123.781541][T14371] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12907'. [ 2123.846233][T14374] netlink: 'syz.0.12909': attribute type 21 has an invalid length. [ 2123.912911][T14377] netlink: 'syz.0.12910': attribute type 21 has an invalid length. [ 2123.923211][T14378] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12907'. [ 2124.115655][T14388] netlink: 72 bytes leftover after parsing attributes in process `syz.1.12913'. [ 2124.129179][T14389] FAULT_INJECTION: forcing a failure. [ 2124.129179][T14389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2124.147411][T14389] CPU: 0 UID: 0 PID: 14389 Comm: syz.0.12911 Not tainted syzkaller #0 PREEMPT(full) [ 2124.147442][T14389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2124.147457][T14389] Call Trace: [ 2124.147466][T14389] [ 2124.147476][T14389] dump_stack_lvl+0x189/0x250 [ 2124.147508][T14389] ? __pfx____ratelimit+0x10/0x10 [ 2124.147539][T14389] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2124.147565][T14389] ? __pfx__printk+0x10/0x10 [ 2124.147610][T14389] should_fail_ex+0x414/0x560 [ 2124.147645][T14389] _copy_to_user+0x31/0xb0 [ 2124.147672][T14389] simple_read_from_buffer+0xe1/0x170 [ 2124.147710][T14389] proc_fail_nth_read+0x1b3/0x220 [ 2124.147739][T14389] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2124.147769][T14389] ? rw_verify_area+0x2a6/0x4d0 [ 2124.147795][T14389] ? __lock_acquire+0xab9/0xd20 [ 2124.147824][T14389] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2124.147850][T14389] vfs_read+0x200/0xa30 [ 2124.147876][T14389] ? fdget_pos+0x247/0x320 [ 2124.147900][T14389] ? __pfx___mutex_lock+0x10/0x10 [ 2124.147931][T14389] ? __pfx_vfs_read+0x10/0x10 [ 2124.147962][T14389] ? __fget_files+0x2a/0x420 [ 2124.147987][T14389] ? __fget_files+0x3a0/0x420 [ 2124.148005][T14389] ? __fget_files+0x2a/0x420 [ 2124.148042][T14389] ksys_read+0x145/0x250 [ 2124.148074][T14389] ? __pfx_ksys_read+0x10/0x10 [ 2124.148108][T14389] ? do_syscall_64+0xbe/0x3b0 [ 2124.148144][T14389] do_syscall_64+0xfa/0x3b0 [ 2124.148173][T14389] ? lockdep_hardirqs_on+0x9c/0x150 [ 2124.148201][T14389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2124.148226][T14389] ? clear_bhb_loop+0x60/0xb0 [ 2124.148254][T14389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2124.148274][T14389] RIP: 0033:0x7f73ee18d5fc [ 2124.148294][T14389] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2124.148313][T14389] RSP: 002b:00007f73ef039030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2124.148334][T14389] RAX: ffffffffffffffda RBX: 00007f73ee3b6180 RCX: 00007f73ee18d5fc [ 2124.148350][T14389] RDX: 000000000000000f RSI: 00007f73ef0390a0 RDI: 0000000000000005 [ 2124.148363][T14389] RBP: 00007f73ef039090 R08: 0000000000000000 R09: 0000000000000000 [ 2124.148376][T14389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2124.148388][T14389] R13: 00007f73ee3b6218 R14: 00007f73ee3b6180 R15: 00007fffa4736538 [ 2124.148424][T14389] [ 2124.390252][T14391] netlink: 'syz.1.12913': attribute type 10 has an invalid length. [ 2124.521989][T14394] FAULT_INJECTION: forcing a failure. [ 2124.521989][T14394] name failslab, interval 1, probability 0, space 0, times 1 [ 2124.539063][T14394] CPU: 1 UID: 0 PID: 14394 Comm: syz.0.12914 Not tainted syzkaller #0 PREEMPT(full) [ 2124.539095][T14394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2124.539109][T14394] Call Trace: [ 2124.539119][T14394] [ 2124.539129][T14394] dump_stack_lvl+0x189/0x250 [ 2124.539159][T14394] ? __pfx____ratelimit+0x10/0x10 [ 2124.539189][T14394] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2124.539215][T14394] ? __pfx__printk+0x10/0x10 [ 2124.539254][T14394] ? __pfx___might_resched+0x10/0x10 [ 2124.539285][T14394] should_fail_ex+0x414/0x560 [ 2124.539321][T14394] should_failslab+0xa8/0x100 [ 2124.539356][T14394] __kmalloc_noprof+0xcb/0x4f0 [ 2124.539383][T14394] ? kfree+0x4d/0x440 [ 2124.539407][T14394] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2124.539437][T14394] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2124.539462][T14394] ? tomoyo_domain+0xd9/0x130 [ 2124.539505][T14394] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2124.539533][T14394] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2124.539567][T14394] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2124.539596][T14394] ? ksys_write+0x1cb/0x250 [ 2124.539683][T14394] ? __fget_files+0x2a/0x420 [ 2124.539706][T14394] ? __fget_files+0x2a/0x420 [ 2124.539724][T14394] ? __fget_files+0x3a0/0x420 [ 2124.539741][T14394] ? __fget_files+0x2a/0x420 [ 2124.539766][T14394] security_file_ioctl+0xcb/0x2d0 [ 2124.539796][T14394] __se_sys_ioctl+0x47/0x170 [ 2124.539827][T14394] do_syscall_64+0xfa/0x3b0 [ 2124.539857][T14394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2124.539877][T14394] ? asm_sysvec_call_function_single+0x1a/0x20 [ 2124.539897][T14394] ? clear_bhb_loop+0x60/0xb0 [ 2124.539924][T14394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2124.539944][T14394] RIP: 0033:0x7f73ee18ebe9 [ 2124.539964][T14394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2124.539981][T14394] RSP: 002b:00007f73ef07b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2124.540003][T14394] RAX: ffffffffffffffda RBX: 00007f73ee3b5fa0 RCX: 00007f73ee18ebe9 [ 2124.540018][T14394] RDX: 0000200000000480 RSI: 00000000800454e0 RDI: 0000000000000003 [ 2124.540031][T14394] RBP: 00007f73ef07b090 R08: 0000000000000000 R09: 0000000000000000 [ 2124.540044][T14394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2124.540056][T14394] R13: 00007f73ee3b6038 R14: 00007f73ee3b5fa0 R15: 00007fffa4736538 [ 2124.540095][T14394] [ 2124.540120][T14394] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2124.786050][T14394] tap0: tun_chr_ioctl cmd 2147767520 [ 2124.788451][T14399] FAULT_INJECTION: forcing a failure. [ 2124.788451][T14399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2124.807619][T14399] CPU: 0 UID: 0 PID: 14399 Comm: syz.4.12916 Not tainted syzkaller #0 PREEMPT(full) [ 2124.807649][T14399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2124.807663][T14399] Call Trace: [ 2124.807672][T14399] [ 2124.807684][T14399] dump_stack_lvl+0x189/0x250 [ 2124.807715][T14399] ? __pfx____ratelimit+0x10/0x10 [ 2124.807746][T14399] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2124.807771][T14399] ? __pfx__printk+0x10/0x10 [ 2124.807798][T14399] ? lock_acquire+0x175/0x360 [ 2124.807837][T14399] ? __might_fault+0xb0/0x130 [ 2124.807876][T14399] should_fail_ex+0x414/0x560 [ 2124.807929][T14399] _copy_from_user+0x2d/0xb0 [ 2124.807955][T14399] __sys_bpf+0x1ed/0x870 [ 2124.807989][T14399] ? __pfx___sys_bpf+0x10/0x10 [ 2124.808013][T14399] ? sched_clock_cpu+0x74/0x430 [ 2124.808093][T14399] __x64_sys_bpf+0x7c/0x90 [ 2124.808127][T14399] do_syscall_64+0xfa/0x3b0 [ 2124.808161][T14399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2124.808181][T14399] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2124.808213][T14399] ? clear_bhb_loop+0x60/0xb0 [ 2124.808246][T14399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2124.808268][T14399] RIP: 0033:0x7f1c25d8ebe9 [ 2124.808289][T14399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2124.808308][T14399] RSP: 002b:00007f1c26c13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2124.808331][T14399] RAX: ffffffffffffffda RBX: 00007f1c25fb6090 RCX: 00007f1c25d8ebe9 [ 2124.808347][T14399] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 2124.808360][T14399] RBP: 00007f1c26c13090 R08: 0000000000000000 R09: 0000000000000000 [ 2124.808374][T14399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2124.808387][T14399] R13: 00007f1c25fb6128 R14: 00007f1c25fb6090 R15: 00007ffde2709968 [ 2124.808426][T14399] [ 2125.057881][T14402] FAULT_INJECTION: forcing a failure. [ 2125.057881][T14402] name failslab, interval 1, probability 0, space 0, times 0 [ 2125.070938][T14402] CPU: 1 UID: 0 PID: 14402 Comm: syz.2.12917 Not tainted syzkaller #0 PREEMPT(full) [ 2125.070961][T14402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2125.070971][T14402] Call Trace: [ 2125.070978][T14402] [ 2125.070985][T14402] dump_stack_lvl+0x189/0x250 [ 2125.071008][T14402] ? __pfx____ratelimit+0x10/0x10 [ 2125.071030][T14402] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2125.071047][T14402] ? __pfx__printk+0x10/0x10 [ 2125.071066][T14402] ? __lock_acquire+0xab9/0xd20 [ 2125.071093][T14402] ? sig_get_ucounts+0x26/0x450 [ 2125.071118][T14402] should_fail_ex+0x414/0x560 [ 2125.071142][T14402] should_failslab+0xa8/0x100 [ 2125.071165][T14402] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2125.071185][T14402] ? __send_signal_locked+0x22a/0xeb0 [ 2125.071203][T14402] ? sig_get_ucounts+0x3e4/0x450 [ 2125.071228][T14402] __send_signal_locked+0x22a/0xeb0 [ 2125.071248][T14402] ? send_signal_locked+0x1b5/0x8e0 [ 2125.071272][T14402] force_sig_info_to_task+0x30c/0x590 [ 2125.071300][T14402] force_sig+0xc9/0x120 [ 2125.071320][T14402] ? __pfx_force_sig+0x10/0x10 [ 2125.071346][T14402] ? gp_user_force_sig_segv+0xdd/0x220 [ 2125.071363][T14402] ? __pfx_force_sig+0x10/0x10 [ 2125.071384][T14402] exc_general_protection+0xdb/0x200 [ 2125.071404][T14402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2125.071436][T14402] ? clear_bhb_loop+0x60/0xb0 [ 2125.071463][T14402] asm_exc_general_protection+0x26/0x30 [ 2125.071486][T14402] RIP: 0033:0x7f152d167739 [ 2125.071501][T14402] Code: f8 77 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 fd 74 0f c5 fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 [ 2125.071514][T14402] RSP: 002b:00007f152dfea7c8 EFLAGS: 00010283 [ 2125.071529][T14402] RAX: 0000000000000999 RBX: 00007f152dfead30 RCX: 00007f152d378120 [ 2125.071540][T14402] RDX: 9999999999999999 RSI: 00007f152d211b31 RDI: 9999999999999999 [ 2125.071553][T14402] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 2125.071567][T14402] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000073 [ 2125.071579][T14402] R13: 00007f152dfeaeb0 R14: 9999999999999999 R15: 0000000000000000 [ 2125.071612][T14402] [ 2126.201074][T14414] netlink: 67 bytes leftover after parsing attributes in process `syz.0.12919'. [ 2126.337781][T14418] FAULT_INJECTION: forcing a failure. [ 2126.337781][T14418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2126.660113][T14418] CPU: 0 UID: 0 PID: 14418 Comm: syz.4.12923 Not tainted syzkaller #0 PREEMPT(full) [ 2126.660146][T14418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2126.660161][T14418] Call Trace: [ 2126.660169][T14418] [ 2126.660180][T14418] dump_stack_lvl+0x189/0x250 [ 2126.660210][T14418] ? __pfx____ratelimit+0x10/0x10 [ 2126.660240][T14418] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2126.660265][T14418] ? __pfx__printk+0x10/0x10 [ 2126.660295][T14418] ? __might_fault+0xb0/0x130 [ 2126.660338][T14418] should_fail_ex+0x414/0x560 [ 2126.660373][T14418] _copy_from_user+0x2d/0xb0 [ 2126.660398][T14418] __sys_bpf+0x1ed/0x870 [ 2126.660429][T14418] ? __pfx___sys_bpf+0x10/0x10 [ 2126.660473][T14418] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2126.660503][T14418] ? __pfx_ksys_write+0x10/0x10 [ 2126.660547][T14418] __x64_sys_bpf+0x7c/0x90 [ 2126.660573][T14418] do_syscall_64+0xfa/0x3b0 [ 2126.660601][T14418] ? lockdep_hardirqs_on+0x9c/0x150 [ 2126.660629][T14418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2126.660650][T14418] ? clear_bhb_loop+0x60/0xb0 [ 2126.660675][T14418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2126.660696][T14418] RIP: 0033:0x7f1c25d8ebe9 [ 2126.660715][T14418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2126.660734][T14418] RSP: 002b:00007f1c26c34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2126.660755][T14418] RAX: ffffffffffffffda RBX: 00007f1c25fb5fa0 RCX: 00007f1c25d8ebe9 [ 2126.660770][T14418] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 0000000000000000 [ 2126.660783][T14418] RBP: 00007f1c26c34090 R08: 0000000000000000 R09: 0000000000000000 [ 2126.660796][T14418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2126.660808][T14418] R13: 00007f1c25fb6038 R14: 00007f1c25fb5fa0 R15: 00007ffde2709968 [ 2126.660842][T14418] [ 2127.014961][T14414] netlink: 'syz.0.12919': attribute type 10 has an invalid length. [ 2127.060355][T14414] netlink: 55 bytes leftover after parsing attributes in process `syz.0.12919'. [ 2127.233676][T14431] netlink: 'syz.3.12927': attribute type 64 has an invalid length. [ 2127.244376][T14431] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2127.275786][T14431] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.12927'. [ 2127.286932][T14431] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 2127.557139][T14449] netlink: 'syz.3.12932': attribute type 10 has an invalid length. [ 2127.793814][T14463] netlink: 67 bytes leftover after parsing attributes in process `syz.1.12936'. [ 2127.884163][T14464] netlink: 'syz.1.12936': attribute type 10 has an invalid length. [ 2127.951837][T14464] netlink: 55 bytes leftover after parsing attributes in process `syz.1.12936'. [ 2127.969204][T14455] tap0: tun_chr_ioctl cmd 2147767520 [ 2128.758428][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12942'. [ 2128.857171][T14478] netlink: 'syz.3.12942': attribute type 2 has an invalid length. [ 2128.860307][T14482] FAULT_INJECTION: forcing a failure. [ 2128.860307][T14482] name failslab, interval 1, probability 0, space 0, times 0 [ 2128.962151][T14482] CPU: 0 UID: 0 PID: 14482 Comm: syz.1.12943 Not tainted syzkaller #0 PREEMPT(full) [ 2128.962181][T14482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2128.962194][T14482] Call Trace: [ 2128.962206][T14482] [ 2128.962221][T14482] dump_stack_lvl+0x189/0x250 [ 2128.962260][T14482] ? __pfx____ratelimit+0x10/0x10 [ 2128.962299][T14482] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2128.962335][T14482] ? __pfx__printk+0x10/0x10 [ 2128.962414][T14482] ? __pfx___might_resched+0x10/0x10 [ 2128.962468][T14482] should_fail_ex+0x414/0x560 [ 2128.962533][T14482] should_failslab+0xa8/0x100 [ 2128.962581][T14482] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 2128.962620][T14482] ? __get_vm_area_node+0x13f/0x300 [ 2128.962680][T14482] __get_vm_area_node+0x13f/0x300 [ 2128.962745][T14482] __vmalloc_node_range_noprof+0x301/0x12f0 [ 2128.962786][T14482] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 2128.962890][T14482] ? __pfx_perf_trace_lock+0x10/0x10 [ 2128.962955][T14482] ? trace_call_bpf+0xb7/0x850 [ 2128.963003][T14482] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2128.963045][T14482] ? trace_call_bpf+0xb7/0x850 [ 2128.963116][T14482] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 2128.963142][T14482] __vmalloc_noprof+0xb1/0xf0 [ 2128.963179][T14482] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 2128.963230][T14482] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 2128.963291][T14482] bpf_prog_alloc+0x3c/0x1a0 [ 2128.963342][T14482] bpf_prog_load+0x735/0x1930 [ 2128.963450][T14482] ? __pfx_bpf_prog_load+0x10/0x10 [ 2128.963488][T14482] ? __pfx_perf_trace_lock+0x10/0x10 [ 2128.963616][T14482] ? bpf_lsm_bpf+0x9/0x20 [ 2128.963641][T14482] ? security_bpf+0x7e/0x300 [ 2128.963690][T14482] __sys_bpf+0x528/0x870 [ 2128.963739][T14482] ? __pfx___sys_bpf+0x10/0x10 [ 2128.963853][T14482] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2128.963893][T14482] ? __pfx_ksys_write+0x10/0x10 [ 2128.963919][T14482] ? rcu_is_watching+0x15/0xb0 [ 2128.963989][T14482] __x64_sys_bpf+0x7c/0x90 [ 2128.964031][T14482] do_syscall_64+0xfa/0x3b0 [ 2128.964061][T14482] ? lockdep_hardirqs_on+0x9c/0x150 [ 2128.964096][T14482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2128.964121][T14482] ? clear_bhb_loop+0x60/0xb0 [ 2128.964167][T14482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2128.964189][T14482] RIP: 0033:0x7f708518ebe9 [ 2128.964216][T14482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2128.964235][T14482] RSP: 002b:00007f708609b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2128.964257][T14482] RAX: ffffffffffffffda RBX: 00007f70853b5fa0 RCX: 00007f708518ebe9 [ 2128.964272][T14482] RDX: 0000000000000090 RSI: 0000200000000880 RDI: 0000000000000005 [ 2128.964284][T14482] RBP: 00007f708609b090 R08: 0000000000000000 R09: 0000000000000000 [ 2128.964297][T14482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2128.964309][T14482] R13: 00007f70853b6038 R14: 00007f70853b5fa0 R15: 00007ffde6888ff8 [ 2128.964419][T14482] [ 2128.964431][T14482] warn_alloc: 1 callbacks suppressed [ 2128.964443][T14482] syz.1.12943: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 2128.980938][T14478] netlink: 17259 bytes leftover after parsing attributes in process `syz.3.12942'. [ 2128.998571][T14482] ,cpuset=/,mems_allowed=0-1 [ 2129.316436][T14482] CPU: 1 UID: 0 PID: 14482 Comm: syz.1.12943 Not tainted syzkaller #0 PREEMPT(full) [ 2129.316468][T14482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2129.316482][T14482] Call Trace: [ 2129.316492][T14482] [ 2129.316502][T14482] dump_stack_lvl+0x189/0x250 [ 2129.316535][T14482] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 2129.316570][T14482] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2129.316605][T14482] ? __pfx__printk+0x10/0x10 [ 2129.316638][T14482] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2129.316665][T14482] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2129.316702][T14482] warn_alloc+0x214/0x310 [ 2129.316747][T14482] ? __pfx_warn_alloc+0x10/0x10 [ 2129.316784][T14482] ? __get_vm_area_node+0x13f/0x300 [ 2129.316821][T14482] ? __get_vm_area_node+0x2b5/0x300 [ 2129.316862][T14482] __vmalloc_node_range_noprof+0x326/0x12f0 [ 2129.316918][T14482] ? __pfx_perf_trace_lock+0x10/0x10 [ 2129.316950][T14482] ? trace_call_bpf+0xb7/0x850 [ 2129.316976][T14482] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2129.317009][T14482] ? trace_call_bpf+0xb7/0x850 [ 2129.317041][T14482] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 2129.317071][T14482] __vmalloc_noprof+0xb1/0xf0 [ 2129.317102][T14482] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 2129.317137][T14482] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 2129.317176][T14482] bpf_prog_alloc+0x3c/0x1a0 [ 2129.317211][T14482] bpf_prog_load+0x735/0x1930 [ 2129.317279][T14482] ? __pfx_bpf_prog_load+0x10/0x10 [ 2129.317310][T14482] ? __pfx_perf_trace_lock+0x10/0x10 [ 2129.317357][T14482] ? bpf_lsm_bpf+0x9/0x20 [ 2129.317382][T14482] ? security_bpf+0x7e/0x300 [ 2129.317415][T14482] __sys_bpf+0x528/0x870 [ 2129.317447][T14482] ? __pfx___sys_bpf+0x10/0x10 [ 2129.317523][T14482] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2129.317556][T14482] ? __pfx_ksys_write+0x10/0x10 [ 2129.317583][T14482] ? rcu_is_watching+0x15/0xb0 [ 2129.317626][T14482] __x64_sys_bpf+0x7c/0x90 [ 2129.317654][T14482] do_syscall_64+0xfa/0x3b0 [ 2129.317684][T14482] ? lockdep_hardirqs_on+0x9c/0x150 [ 2129.317714][T14482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2129.317736][T14482] ? clear_bhb_loop+0x60/0xb0 [ 2129.317765][T14482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2129.317786][T14482] RIP: 0033:0x7f708518ebe9 [ 2129.317807][T14482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2129.317826][T14482] RSP: 002b:00007f708609b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2129.317849][T14482] RAX: ffffffffffffffda RBX: 00007f70853b5fa0 RCX: 00007f708518ebe9 [ 2129.317865][T14482] RDX: 0000000000000090 RSI: 0000200000000880 RDI: 0000000000000005 [ 2129.317878][T14482] RBP: 00007f708609b090 R08: 0000000000000000 R09: 0000000000000000 [ 2129.317892][T14482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2129.317904][T14482] R13: 00007f70853b6038 R14: 00007f70853b5fa0 R15: 00007ffde6888ff8 [ 2129.317944][T14482] [ 2129.674396][T14482] Mem-Info: [ 2129.677654][T14482] active_anon:10749 inactive_anon:0 isolated_anon:0 [ 2129.677654][T14482] active_file:22263 inactive_file:40630 isolated_file:0 [ 2129.677654][T14482] unevictable:768 dirty:559 writeback:0 [ 2129.677654][T14482] slab_reclaimable:11934 slab_unreclaimable:157541 [ 2129.677654][T14482] mapped:29571 shmem:1355 pagetables:1124 [ 2129.677654][T14482] sec_pagetables:0 bounce:0 [ 2129.677654][T14482] kernel_misc_reclaimable:0 [ 2129.677654][T14482] free:1237765 free_pcp:11053 free_cma:0 [ 2129.724276][T14482] Node 0 active_anon:42996kB inactive_anon:0kB active_file:89052kB inactive_file:162320kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118284kB dirty:2236kB writeback:0kB shmem:3884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10592kB pagetables:4336kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2129.756707][T14482] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2129.786817][T14482] Node 0 DMA free:15252kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:108kB local_pcp:48kB free_cma:0kB [ 2129.831914][T14482] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 2129.837758][T14482] Node 0 DMA32 free:1045264kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42952kB inactive_anon:0kB active_file:89052kB inactive_file:160732kB unevictable:1536kB writepending:2236kB present:3129332kB managed:2557484kB mlocked:0kB bounce:0kB free_pcp:29048kB local_pcp:15836kB free_cma:0kB [ 2129.885421][T14482] lowmem_reserve[]: 0 0 1 1 1 [ 2129.890224][T14482] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1588kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 2129.921454][T14482] lowmem_reserve[]: 0 0 0 0 0 [ 2129.934445][T14482] Node 1 Normal free:3890544kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16832kB local_pcp:4096kB free_cma:0kB [ 2129.975088][T14482] lowmem_reserve[]: 0 0 0 0 0 [ 2129.986101][T14482] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 1*4096kB (M) = 15252kB [ 2130.001247][T14482] Node 0 DMA32: 1946*4kB (UME) 1555*8kB (UME) 1499*16kB (UM) 1731*32kB (UME) 1589*64kB (UME) 1088*128kB (UME) 649*256kB (UME) 415*512kB (UME) 278*1024kB (UME) 21*2048kB (UM) 0*4096kB = 1046864kB [ 2130.025738][T14482] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2130.038700][T14482] Node 1 Normal: 190*4kB (UM) 67*8kB (UME) 36*16kB (UME) 253*32kB (UME) 106*64kB (UME) 22*128kB (UME) 9*256kB (UME) 4*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 943*4096kB (M) = 3890544kB [ 2130.075337][T14482] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2130.086626][T14482] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2130.097466][T14482] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2130.108267][T14482] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2130.118459][T14482] 64245 total pagecache pages [ 2130.124152][T14482] 0 pages in swap cache [ 2130.179493][T14482] Free swap = 124996kB [ 2130.184981][T14482] Total swap = 124996kB [ 2130.189174][T14482] 2097051 pages RAM [ 2130.193479][T14482] 0 pages HighMem/MovableOnly [ 2130.198198][T14482] 425654 pages reserved [ 2130.231812][T14482] 0 pages cma reserved [ 2130.264387][T14495] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.12948'. [ 2130.759357][T14525] netlink: 'syz.2.12958': attribute type 16 has an invalid length. [ 2130.797847][T14525] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12958'. [ 2130.820086][T14522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12956'. [ 2130.837242][T14528] tap0: tun_chr_ioctl cmd 2147767520 [ 2131.153320][T14533] netlink: 67 bytes leftover after parsing attributes in process `syz.0.12960'. [ 2131.301161][T14537] FAULT_INJECTION: forcing a failure. [ 2131.301161][T14537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2131.340425][T14537] CPU: 1 UID: 0 PID: 14537 Comm: syz.4.12961 Not tainted syzkaller #0 PREEMPT(full) [ 2131.340456][T14537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2131.340470][T14537] Call Trace: [ 2131.340479][T14537] [ 2131.340490][T14537] dump_stack_lvl+0x189/0x250 [ 2131.340524][T14537] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2131.340551][T14537] ? __pfx__printk+0x10/0x10 [ 2131.340585][T14537] ? kasan_check_range+0x9f/0x2c0 [ 2131.340624][T14537] should_fail_ex+0x414/0x560 [ 2131.340658][T14537] _copy_to_user+0x31/0xb0 [ 2131.340685][T14537] simple_read_from_buffer+0xe1/0x170 [ 2131.340722][T14537] proc_fail_nth_read+0x1b3/0x220 [ 2131.340751][T14537] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2131.340772][T14537] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2131.340795][T14537] ? vfs_read+0x1e5/0xa30 [ 2131.340825][T14537] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2131.340851][T14537] vfs_read+0x200/0xa30 [ 2131.340877][T14537] ? fdget_pos+0x247/0x320 [ 2131.340901][T14537] ? __pfx___mutex_lock+0x10/0x10 [ 2131.340933][T14537] ? __pfx_vfs_read+0x10/0x10 [ 2131.340962][T14537] ? __fget_files+0x2a/0x420 [ 2131.340986][T14537] ? __fget_files+0x3a0/0x420 [ 2131.341003][T14537] ? __fget_files+0x2a/0x420 [ 2131.341032][T14537] ksys_read+0x145/0x250 [ 2131.341063][T14537] ? __pfx_ksys_read+0x10/0x10 [ 2131.341105][T14537] do_syscall_64+0xfa/0x3b0 [ 2131.341137][T14537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2131.341156][T14537] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2131.341177][T14537] ? clear_bhb_loop+0x60/0xb0 [ 2131.341203][T14537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2131.341230][T14537] RIP: 0033:0x7f1c25d8d5fc [ 2131.341250][T14537] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2131.341268][T14537] RSP: 002b:00007f1c26c13030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2131.341289][T14537] RAX: ffffffffffffffda RBX: 00007f1c25fb6090 RCX: 00007f1c25d8d5fc [ 2131.341304][T14537] RDX: 000000000000000f RSI: 00007f1c26c130a0 RDI: 0000000000000007 [ 2131.341316][T14537] RBP: 00007f1c26c13090 R08: 0000000000000000 R09: 0000000000000000 [ 2131.341328][T14537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2131.341340][T14537] R13: 00007f1c25fb6128 R14: 00007f1c25fb6090 R15: 00007ffde2709968 [ 2131.341375][T14537] [ 2131.607790][T14533] netlink: 'syz.0.12960': attribute type 10 has an invalid length. [ 2131.615918][T14533] netlink: 55 bytes leftover after parsing attributes in process `syz.0.12960'. [ 2133.374549][T14585] FAULT_INJECTION: forcing a failure. [ 2133.374549][T14585] name failslab, interval 1, probability 0, space 0, times 0 [ 2133.406892][T14585] CPU: 1 UID: 0 PID: 14585 Comm: syz.3.12978 Not tainted syzkaller #0 PREEMPT(full) [ 2133.406923][T14585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2133.406936][T14585] Call Trace: [ 2133.406945][T14585] [ 2133.406954][T14585] dump_stack_lvl+0x189/0x250 [ 2133.406984][T14585] ? __pfx____ratelimit+0x10/0x10 [ 2133.407013][T14585] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2133.407037][T14585] ? __pfx__printk+0x10/0x10 [ 2133.407062][T14585] ? irqentry_exit+0x74/0x90 [ 2133.407103][T14585] should_fail_ex+0x414/0x560 [ 2133.407136][T14585] should_failslab+0xa8/0x100 [ 2133.407166][T14585] __kmalloc_noprof+0xcb/0x4f0 [ 2133.407192][T14585] ? bpf_test_init+0xc2/0x170 [ 2133.407232][T14585] bpf_test_init+0xc2/0x170 [ 2133.407263][T14585] bpf_prog_test_run_skb+0x1e9/0x1560 [ 2133.407290][T14585] ? __fget_files+0x2a/0x420 [ 2133.407312][T14585] ? __fget_files+0x2a/0x420 [ 2133.407340][T14585] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 2133.407370][T14585] bpf_prog_test_run+0x2c4/0x340 [ 2133.407404][T14585] __sys_bpf+0x581/0x870 [ 2133.407433][T14585] ? __pfx___sys_bpf+0x10/0x10 [ 2133.407492][T14585] __x64_sys_bpf+0x7c/0x90 [ 2133.407518][T14585] do_syscall_64+0xfa/0x3b0 [ 2133.407548][T14585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2133.407567][T14585] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2133.407587][T14585] ? clear_bhb_loop+0x60/0xb0 [ 2133.407612][T14585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2133.407631][T14585] RIP: 0033:0x7fc18a98ebe9 [ 2133.407650][T14585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2133.407667][T14585] RSP: 002b:00007fc18b8b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2133.407689][T14585] RAX: ffffffffffffffda RBX: 00007fc18abb5fa0 RCX: 00007fc18a98ebe9 [ 2133.407704][T14585] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 2133.407717][T14585] RBP: 00007fc18b8b1090 R08: 0000000000000000 R09: 0000000000000000 [ 2133.407730][T14585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2133.407742][T14585] R13: 00007fc18abb6038 R14: 00007fc18abb5fa0 R15: 00007ffc4ab9df78 [ 2133.407777][T14585] [ 2133.647916][T14589] FAULT_INJECTION: forcing a failure. [ 2133.647916][T14589] name failslab, interval 1, probability 0, space 0, times 0 [ 2133.660872][T14589] CPU: 0 UID: 0 PID: 14589 Comm: syz.2.12980 Not tainted syzkaller #0 PREEMPT(full) [ 2133.660903][T14589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2133.660917][T14589] Call Trace: [ 2133.660928][T14589] [ 2133.660937][T14589] dump_stack_lvl+0x189/0x250 [ 2133.660968][T14589] ? __pfx____ratelimit+0x10/0x10 [ 2133.660997][T14589] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2133.661021][T14589] ? __pfx__printk+0x10/0x10 [ 2133.661057][T14589] ? __pfx___might_resched+0x10/0x10 [ 2133.661083][T14589] should_fail_ex+0x414/0x560 [ 2133.661117][T14589] should_failslab+0xa8/0x100 [ 2133.661150][T14589] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 2133.661180][T14589] ? __alloc_skb+0x112/0x2d0 [ 2133.661215][T14589] __alloc_skb+0x112/0x2d0 [ 2133.661251][T14589] netlink_sendmsg+0x5c6/0xb30 [ 2133.661301][T14589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2133.661336][T14589] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2133.661371][T14589] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2133.661395][T14589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2133.661426][T14589] __sock_sendmsg+0x21c/0x270 [ 2133.661457][T14589] ____sys_sendmsg+0x505/0x830 [ 2133.661486][T14589] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2133.661518][T14589] ? import_iovec+0x74/0xa0 [ 2133.661551][T14589] ___sys_sendmsg+0x21f/0x2a0 [ 2133.661575][T14589] ? __pfx____sys_sendmsg+0x10/0x10 [ 2133.661635][T14589] ? __fget_files+0x2a/0x420 [ 2133.661653][T14589] ? __fget_files+0x3a0/0x420 [ 2133.661683][T14589] __x64_sys_sendmsg+0x19b/0x260 [ 2133.661704][T14589] ? perf_trace_run_bpf_submit+0x100/0x170 [ 2133.661730][T14589] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2133.661762][T14589] ? __pfx_ksys_write+0x10/0x10 [ 2133.661788][T14589] ? rcu_is_watching+0x15/0xb0 [ 2133.661815][T14589] ? do_syscall_64+0xbe/0x3b0 [ 2133.661850][T14589] do_syscall_64+0xfa/0x3b0 [ 2133.661878][T14589] ? lockdep_hardirqs_on+0x9c/0x150 [ 2133.661906][T14589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2133.661927][T14589] ? clear_bhb_loop+0x60/0xb0 [ 2133.661954][T14589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2133.661976][T14589] RIP: 0033:0x7f152d18ebe9 [ 2133.661997][T14589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2133.662016][T14589] RSP: 002b:00007f152dfeb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2133.662039][T14589] RAX: ffffffffffffffda RBX: 00007f152d3b5fa0 RCX: 00007f152d18ebe9 [ 2133.662056][T14589] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 2133.662070][T14589] RBP: 00007f152dfeb090 R08: 0000000000000000 R09: 0000000000000000 [ 2133.662084][T14589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2133.662097][T14589] R13: 00007f152d3b6038 R14: 00007f152d3b5fa0 R15: 00007ffd88e806a8 [ 2133.662132][T14589] [ 2134.076666][T14597] FAULT_INJECTION: forcing a failure. [ 2134.076666][T14597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2134.090212][T14597] CPU: 0 UID: 0 PID: 14597 Comm: syz.2.12983 Not tainted syzkaller #0 PREEMPT(full) [ 2134.090249][T14597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2134.090263][T14597] Call Trace: [ 2134.090272][T14597] [ 2134.090282][T14597] dump_stack_lvl+0x189/0x250 [ 2134.090312][T14597] ? __pfx____ratelimit+0x10/0x10 [ 2134.090342][T14597] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2134.090367][T14597] ? __pfx__printk+0x10/0x10 [ 2134.090414][T14597] should_fail_ex+0x414/0x560 [ 2134.090447][T14597] _copy_from_user+0x2d/0xb0 [ 2134.090473][T14597] __copy_msghdr+0x3c5/0x5b0 [ 2134.090499][T14597] ___sys_sendmsg+0x1a5/0x2a0 [ 2134.090522][T14597] ? __pfx____sys_sendmsg+0x10/0x10 [ 2134.090585][T14597] ? __fget_files+0x2a/0x420 [ 2134.090603][T14597] ? __fget_files+0x3a0/0x420 [ 2134.090634][T14597] __x64_sys_sendmsg+0x19b/0x260 [ 2134.090659][T14597] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2134.090692][T14597] ? __pfx_ksys_write+0x10/0x10 [ 2134.090718][T14597] ? rcu_is_watching+0x15/0xb0 [ 2134.090746][T14597] ? do_syscall_64+0xbe/0x3b0 [ 2134.090780][T14597] do_syscall_64+0xfa/0x3b0 [ 2134.090808][T14597] ? lockdep_hardirqs_on+0x9c/0x150 [ 2134.090836][T14597] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2134.090856][T14597] ? clear_bhb_loop+0x60/0xb0 [ 2134.090882][T14597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2134.090902][T14597] RIP: 0033:0x7f152d18ebe9 [ 2134.090922][T14597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2134.090940][T14597] RSP: 002b:00007f152dfeb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2134.090962][T14597] RAX: ffffffffffffffda RBX: 00007f152d3b5fa0 RCX: 00007f152d18ebe9 [ 2134.090977][T14597] RDX: 0000000024008010 RSI: 0000200000000700 RDI: 0000000000000003 [ 2134.090991][T14597] RBP: 00007f152dfeb090 R08: 0000000000000000 R09: 0000000000000000 [ 2134.091004][T14597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2134.091016][T14597] R13: 00007f152d3b6038 R14: 00007f152d3b5fa0 R15: 00007ffd88e806a8 [ 2134.091049][T14597] [ 2135.409209][T14606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12985'. [ 2135.711196][T14624] FAULT_INJECTION: forcing a failure. [ 2135.711196][T14624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2135.734048][T14624] CPU: 0 UID: 0 PID: 14624 Comm: syz.1.12992 Not tainted syzkaller #0 PREEMPT(full) [ 2135.734081][T14624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2135.734095][T14624] Call Trace: [ 2135.734104][T14624] [ 2135.734115][T14624] dump_stack_lvl+0x189/0x250 [ 2135.734146][T14624] ? __pfx____ratelimit+0x10/0x10 [ 2135.734175][T14624] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2135.734201][T14624] ? __pfx__printk+0x10/0x10 [ 2135.734232][T14624] ? __might_fault+0xb0/0x130 [ 2135.734264][T14624] ? __might_fault+0xb0/0x130 [ 2135.734300][T14624] should_fail_ex+0x414/0x560 [ 2135.734335][T14624] _copy_from_user+0x2d/0xb0 [ 2135.734360][T14624] ____sys_sendmsg+0x2fe/0x830 [ 2135.734391][T14624] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2135.734425][T14624] ? import_iovec+0x74/0xa0 [ 2135.734455][T14624] ___sys_sendmsg+0x21f/0x2a0 [ 2135.734480][T14624] ? __pfx____sys_sendmsg+0x10/0x10 [ 2135.734531][T14624] ? __fget_files+0x2a/0x420 [ 2135.734568][T14624] ? __fget_files+0x2a/0x420 [ 2135.734585][T14624] ? __fget_files+0x3a0/0x420 [ 2135.734619][T14624] __x64_sys_sendmsg+0x19b/0x260 [ 2135.734645][T14624] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2135.734685][T14624] ? __pfx_ksys_write+0x10/0x10 [ 2135.734710][T14624] ? rcu_is_watching+0x15/0xb0 [ 2135.734739][T14624] ? do_syscall_64+0xbe/0x3b0 [ 2135.734774][T14624] do_syscall_64+0xfa/0x3b0 [ 2135.734802][T14624] ? lockdep_hardirqs_on+0x9c/0x150 [ 2135.734830][T14624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2135.734851][T14624] ? clear_bhb_loop+0x60/0xb0 [ 2135.734878][T14624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2135.734898][T14624] RIP: 0033:0x7f708518ebe9 [ 2135.734918][T14624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2135.734937][T14624] RSP: 002b:00007f708609b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2135.734959][T14624] RAX: ffffffffffffffda RBX: 00007f70853b5fa0 RCX: 00007f708518ebe9 [ 2135.734973][T14624] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 2135.734986][T14624] RBP: 00007f708609b090 R08: 0000000000000000 R09: 0000000000000000 [ 2135.735000][T14624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2135.735012][T14624] R13: 00007f70853b6038 R14: 00007f70853b5fa0 R15: 00007ffde6888ff8 [ 2135.735056][T14624] [ 2136.137317][T14631] netlink: 'syz.1.12994': attribute type 1 has an invalid length. [ 2136.158035][T14631] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.12994'. [ 2137.289154][T14658] FAULT_INJECTION: forcing a failure. [ 2137.289154][T14658] name failslab, interval 1, probability 0, space 0, times 0 [ 2137.302275][T14658] CPU: 0 UID: 0 PID: 14658 Comm: syz.0.13005 Not tainted syzkaller #0 PREEMPT(full) [ 2137.302305][T14658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2137.302319][T14658] Call Trace: [ 2137.302328][T14658] [ 2137.302338][T14658] dump_stack_lvl+0x189/0x250 [ 2137.302369][T14658] ? __pfx____ratelimit+0x10/0x10 [ 2137.302398][T14658] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2137.302423][T14658] ? __pfx__printk+0x10/0x10 [ 2137.302454][T14658] ? __lock_acquire+0xab9/0xd20 [ 2137.302495][T14658] should_fail_ex+0x414/0x560 [ 2137.302529][T14658] should_failslab+0xa8/0x100 [ 2137.302561][T14658] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2137.302589][T14658] ? sctp_get_port_local+0x6d3/0x1680 [ 2137.302614][T14658] sctp_get_port_local+0x6d3/0x1680 [ 2137.302649][T14658] ? __pfx_sctp_get_port_local+0x10/0x10 [ 2137.302673][T14658] ? sctp_bind_addr_match+0x28b/0x2b0 [ 2137.302707][T14658] sctp_do_bind+0x4ea/0x940 [ 2137.302740][T14658] sctp_connect_new_asoc+0x25c/0x690 [ 2137.302777][T14658] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 2137.302806][T14658] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2137.302835][T14658] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 2137.302860][T14658] ? security_sctp_bind_connect+0x7e/0x2e0 [ 2137.302893][T14658] sctp_sendmsg+0x155c/0x2810 [ 2137.302947][T14658] ? __pfx_sctp_sendmsg+0x10/0x10 [ 2137.302982][T14658] ? aa_sk_perm+0x81e/0x950 [ 2137.303019][T14658] ? __pfx_aa_sk_perm+0x10/0x10 [ 2137.303053][T14658] ? sock_rps_record_flow+0x19/0x410 [ 2137.303082][T14658] ? inet_sendmsg+0x2f4/0x370 [ 2137.303112][T14658] __sock_sendmsg+0x19c/0x270 [ 2137.303143][T14658] ____sys_sendmsg+0x505/0x830 [ 2137.303172][T14658] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2137.303205][T14658] ? import_iovec+0x74/0xa0 [ 2137.303233][T14658] ___sys_sendmsg+0x21f/0x2a0 [ 2137.303258][T14658] ? __pfx____sys_sendmsg+0x10/0x10 [ 2137.303322][T14658] ? __fget_files+0x2a/0x420 [ 2137.303340][T14658] ? __fget_files+0x3a0/0x420 [ 2137.303372][T14658] __x64_sys_sendmsg+0x19b/0x260 [ 2137.303397][T14658] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2137.303431][T14658] ? __pfx_ksys_write+0x10/0x10 [ 2137.303462][T14658] ? rcu_is_watching+0x15/0xb0 [ 2137.303489][T14658] ? do_syscall_64+0xbe/0x3b0 [ 2137.303523][T14658] do_syscall_64+0xfa/0x3b0 [ 2137.303549][T14658] ? lockdep_hardirqs_on+0x9c/0x150 [ 2137.303576][T14658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2137.303596][T14658] ? clear_bhb_loop+0x60/0xb0 [ 2137.303621][T14658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2137.303640][T14658] RIP: 0033:0x7f73ee18ebe9 [ 2137.303659][T14658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2137.303676][T14658] RSP: 002b:00007f73ef07b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2137.303697][T14658] RAX: ffffffffffffffda RBX: 00007f73ee3b5fa0 RCX: 00007f73ee18ebe9 [ 2137.303712][T14658] RDX: 0000000000008804 RSI: 0000200000000380 RDI: 0000000000000005 [ 2137.303725][T14658] RBP: 00007f73ef07b090 R08: 0000000000000000 R09: 0000000000000000 [ 2137.303738][T14658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2137.303750][T14658] R13: 00007f73ee3b6038 R14: 00007f73ee3b5fa0 R15: 00007fffa4736538 [ 2137.303783][T14658] [ 2138.276494][T14679] netlink: 67 bytes leftover after parsing attributes in process `syz.3.13011'. [ 2138.480340][T14686] netlink: 'syz.4.13016': attribute type 29 has an invalid length. [ 2138.534280][T14684] netlink: 'syz.3.13011': attribute type 10 has an invalid length. [ 2138.619368][T14684] netlink: 55 bytes leftover after parsing attributes in process `syz.3.13011'. [ 2141.003389][T14724] netlink: 'syz.0.13027': attribute type 3 has an invalid length. [ 2141.011286][T14724] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.13027'. [ 2141.214664][T14722] netlink: 'syz.2.13025': attribute type 12 has an invalid length. [ 2141.234723][T14722] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13025'. [ 2141.458923][T14738] netlink: 67 bytes leftover after parsing attributes in process `syz.1.13030'. [ 2141.569693][T14738] netlink: 'syz.1.13030': attribute type 10 has an invalid length. [ 2141.582859][T14738] netlink: 55 bytes leftover after parsing attributes in process `syz.1.13030'. [ 2142.041397][T14748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13033'. [ 2142.495496][T14754] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.13035'. [ 2142.713680][T14764] netlink: zone id is out of range [ 2142.824346][T14764] netlink: zone id is out of range [ 2142.868591][T14764] netlink: zone id is out of range [ 2142.922219][T14764] netlink: zone id is out of range [ 2142.927402][T14764] netlink: zone id is out of range [ 2143.004943][T14764] netlink: zone id is out of range [ 2143.010152][T14764] netlink: zone id is out of range [ 2143.029992][T14764] netlink: zone id is out of range [ 2143.052349][T14764] netlink: zone id is out of range [ 2143.094529][T14764] netlink: zone id is out of range [ 2145.079492][T14828] netlink: 168 bytes leftover after parsing attributes in process `syz.1.13060'. [ 2145.193649][T14832] netlink: 'syz.1.13060': attribute type 4 has an invalid length. [ 2145.243126][T14832] netlink: 152 bytes leftover after parsing attributes in process `syz.1.13060'. [ 2145.284477][T14829] netlink: 'syz.2.13058': attribute type 3 has an invalid length. [ 2145.327117][T14829] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13058'. [ 2146.423940][T14867] netlink: 830 bytes leftover after parsing attributes in process `syz.0.13067'. [ 2146.528533][T14871] rdma_rxe: rxe_newlink: failed to add lo [ 2146.709808][T14872] netlink: 67 bytes leftover after parsing attributes in process `syz.2.13071'. [ 2147.013249][T14872] netlink: 'syz.2.13071': attribute type 10 has an invalid length. [ 2147.051757][T14872] netlink: 55 bytes leftover after parsing attributes in process `syz.2.13071'. [ 2147.096821][T14875] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 2147.676583][T14883] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13075'. [ 2147.700513][T14883] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13075'. [ 2147.825153][T14898] syzkaller0: entered promiscuous mode [ 2147.832993][T14898] syzkaller0: entered allmulticast mode [ 2147.856663][T14878] delete_channel: no stack [ 2149.009616][T14935] tap0: tun_chr_ioctl cmd 2147767520 [ 2149.025568][T14935] FAULT_INJECTION: forcing a failure. [ 2149.025568][T14935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2149.071457][T14935] CPU: 1 UID: 0 PID: 14935 Comm: syz.3.13092 Not tainted syzkaller #0 PREEMPT(full) [ 2149.071488][T14935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2149.071501][T14935] Call Trace: [ 2149.071510][T14935] [ 2149.071520][T14935] dump_stack_lvl+0x189/0x250 [ 2149.071555][T14935] ? __pfx____ratelimit+0x10/0x10 [ 2149.071584][T14935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2149.071608][T14935] ? __pfx__printk+0x10/0x10 [ 2149.071643][T14935] ? __might_fault+0xb0/0x130 [ 2149.071681][T14935] should_fail_ex+0x414/0x560 [ 2149.071716][T14935] _copy_to_user+0x31/0xb0 [ 2149.071743][T14935] simple_read_from_buffer+0xe1/0x170 [ 2149.071781][T14935] proc_fail_nth_read+0x1b3/0x220 [ 2149.071810][T14935] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2149.071840][T14935] ? rw_verify_area+0x2a6/0x4d0 [ 2149.071866][T14935] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2149.071893][T14935] vfs_read+0x200/0xa30 [ 2149.071919][T14935] ? fdget_pos+0x247/0x320 [ 2149.071944][T14935] ? __pfx___mutex_lock+0x10/0x10 [ 2149.071975][T14935] ? __pfx_vfs_read+0x10/0x10 [ 2149.072005][T14935] ? __fget_files+0x2a/0x420 [ 2149.072037][T14935] ? __fget_files+0x3a0/0x420 [ 2149.072054][T14935] ? __fget_files+0x2a/0x420 [ 2149.072086][T14935] ksys_read+0x145/0x250 [ 2149.072117][T14935] ? __pfx_ksys_read+0x10/0x10 [ 2149.072141][T14935] ? rcu_is_watching+0x15/0xb0 [ 2149.072170][T14935] ? do_syscall_64+0xbe/0x3b0 [ 2149.072207][T14935] do_syscall_64+0xfa/0x3b0 [ 2149.072238][T14935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2149.072257][T14935] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2149.072278][T14935] ? clear_bhb_loop+0x60/0xb0 [ 2149.072305][T14935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2149.072325][T14935] RIP: 0033:0x7fc18a98d5fc [ 2149.072345][T14935] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2149.072363][T14935] RSP: 002b:00007fc18b8b1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2149.072385][T14935] RAX: ffffffffffffffda RBX: 00007fc18abb5fa0 RCX: 00007fc18a98d5fc [ 2149.072400][T14935] RDX: 000000000000000f RSI: 00007fc18b8b10a0 RDI: 0000000000000004 [ 2149.072413][T14935] RBP: 00007fc18b8b1090 R08: 0000000000000000 R09: 0000000000000000 [ 2149.072426][T14935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2149.072438][T14935] R13: 00007fc18abb6038 R14: 00007fc18abb5fa0 R15: 00007ffc4ab9df78 [ 2149.072494][T14935] [ 2149.486613][T14941] netlink: 'syz.1.13093': attribute type 3 has an invalid length. [ 2149.499422][T14941] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.13093'. [ 2149.689057][T14944] FAULT_INJECTION: forcing a failure. [ 2149.689057][T14944] name failslab, interval 1, probability 0, space 0, times 0 [ 2149.695701][T14940] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.13094'. [ 2149.727246][T14944] CPU: 1 UID: 0 PID: 14944 Comm: syz.4.13095 Not tainted syzkaller #0 PREEMPT(full) [ 2149.727277][T14944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2149.727291][T14944] Call Trace: [ 2149.727300][T14944] [ 2149.727311][T14944] dump_stack_lvl+0x189/0x250 [ 2149.727343][T14944] ? __pfx____ratelimit+0x10/0x10 [ 2149.727373][T14944] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2149.727399][T14944] ? __pfx__printk+0x10/0x10 [ 2149.727438][T14944] ? __pfx___might_resched+0x10/0x10 [ 2149.727466][T14944] should_fail_ex+0x414/0x560 [ 2149.727501][T14944] should_failslab+0xa8/0x100 [ 2149.727535][T14944] __kmalloc_noprof+0xcb/0x4f0 [ 2149.727563][T14944] ? sk_prot_alloc+0xe7/0x220 [ 2149.727591][T14944] sk_prot_alloc+0xe7/0x220 [ 2149.727609][T14944] ? sk_alloc+0x24/0x370 [ 2149.727631][T14944] sk_alloc+0x3a/0x370 [ 2149.727650][T14944] ? bpf_ctx_init+0x167/0x1d0 [ 2149.727684][T14944] bpf_prog_test_run_skb+0x2ed/0x1560 [ 2149.727726][T14944] ? __fget_files+0x2a/0x420 [ 2149.727765][T14944] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 2149.727796][T14944] bpf_prog_test_run+0x2c4/0x340 [ 2149.727831][T14944] __sys_bpf+0x581/0x870 [ 2149.727861][T14944] ? __pfx___sys_bpf+0x10/0x10 [ 2149.727910][T14944] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2149.727941][T14944] ? __pfx_ksys_write+0x10/0x10 [ 2149.727973][T14944] ? rcu_is_watching+0x15/0xb0 [ 2149.728004][T14944] __x64_sys_bpf+0x7c/0x90 [ 2149.728030][T14944] do_syscall_64+0xfa/0x3b0 [ 2149.728058][T14944] ? lockdep_hardirqs_on+0x9c/0x150 [ 2149.728085][T14944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2149.728106][T14944] ? clear_bhb_loop+0x60/0xb0 [ 2149.728132][T14944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2149.728153][T14944] RIP: 0033:0x7f1c25d8ebe9 [ 2149.728172][T14944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2149.728191][T14944] RSP: 002b:00007f1c26c34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2149.728212][T14944] RAX: ffffffffffffffda RBX: 00007f1c25fb5fa0 RCX: 00007f1c25d8ebe9 [ 2149.728228][T14944] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 2149.728241][T14944] RBP: 00007f1c26c34090 R08: 0000000000000000 R09: 0000000000000000 [ 2149.728272][T14944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2149.728285][T14944] R13: 00007f1c25fb6038 R14: 00007f1c25fb5fa0 R15: 00007ffde2709968 [ 2149.728326][T14944] [ 2150.326115][T14963] netlink: 104 bytes leftover after parsing attributes in process `syz.2.13102'. [ 2151.261108][T14986] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13104'. [ 2151.283488][T14986] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.13104'. [ 2151.704274][T15000] netlink: 67 bytes leftover after parsing attributes in process `syz.1.13108'. [ 2151.906440][T15004] netlink: 'syz.1.13108': attribute type 10 has an invalid length. [ 2152.192274][T15004] netlink: 55 bytes leftover after parsing attributes in process `syz.1.13108'. [ 2152.304912][T15010] netlink: 'syz.2.13112': attribute type 10 has an invalid length. [ 2152.367389][T15010] netlink: 'syz.2.13112': attribute type 10 has an invalid length. [ 2152.544048][T15013] net_ratelimit: 14 callbacks suppressed [ 2152.544087][T15013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2152.850057][T15019] netlink: 'syz.2.13115': attribute type 21 has an invalid length. [ 2152.860836][T15019] netlink: 128 bytes leftover after parsing attributes in process `syz.2.13115'. [ 2152.974160][T15019] netlink: 'syz.2.13115': attribute type 5 has an invalid length. [ 2153.004938][T15019] netlink: 3 bytes leftover after parsing attributes in process `syz.2.13115'. [ 2153.396248][T15033] syzkaller0: entered promiscuous mode [ 2153.404415][T15033] syzkaller0: entered allmulticast mode [ 2153.422762][T15039] FAULT_INJECTION: forcing a failure. [ 2153.422762][T15039] name failslab, interval 1, probability 0, space 0, times 0 [ 2153.520130][T15039] CPU: 1 UID: 0 PID: 15039 Comm: syz.4.13120 Not tainted syzkaller #0 PREEMPT(full) [ 2153.520161][T15039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2153.520175][T15039] Call Trace: [ 2153.520183][T15039] [ 2153.520193][T15039] dump_stack_lvl+0x189/0x250 [ 2153.520223][T15039] ? __pfx____ratelimit+0x10/0x10 [ 2153.520251][T15039] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2153.520275][T15039] ? __pfx__printk+0x10/0x10 [ 2153.520304][T15039] ? __lock_acquire+0xab9/0xd20 [ 2153.520346][T15039] should_fail_ex+0x414/0x560 [ 2153.520393][T15039] should_failslab+0xa8/0x100 [ 2153.520427][T15039] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2153.520454][T15039] ? skb_clone+0x212/0x3a0 [ 2153.520481][T15039] skb_clone+0x212/0x3a0 [ 2153.520508][T15039] __netlink_deliver_tap+0x404/0x850 [ 2153.520552][T15039] ? netlink_deliver_tap+0x2e/0x1b0 [ 2153.520583][T15039] netlink_deliver_tap+0x19c/0x1b0 [ 2153.520613][T15039] netlink_unicast+0x7fa/0x9e0 [ 2153.520650][T15039] ? __pfx_netlink_unicast+0x10/0x10 [ 2153.520680][T15039] ? netlink_sendmsg+0x642/0xb30 [ 2153.520707][T15039] ? skb_put+0x11b/0x210 [ 2153.520741][T15039] netlink_sendmsg+0x805/0xb30 [ 2153.520782][T15039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2153.520816][T15039] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2153.520850][T15039] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2153.520873][T15039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2153.520904][T15039] __sock_sendmsg+0x21c/0x270 [ 2153.520933][T15039] ____sys_sendmsg+0x505/0x830 [ 2153.520960][T15039] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2153.520992][T15039] ? import_iovec+0x74/0xa0 [ 2153.521020][T15039] ___sys_sendmsg+0x21f/0x2a0 [ 2153.521044][T15039] ? __pfx____sys_sendmsg+0x10/0x10 [ 2153.521106][T15039] ? __fget_files+0x2a/0x420 [ 2153.521124][T15039] ? __fget_files+0x3a0/0x420 [ 2153.521153][T15039] __x64_sys_sendmsg+0x19b/0x260 [ 2153.521172][T15039] ? perf_trace_run_bpf_submit+0x100/0x170 [ 2153.521197][T15039] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2153.521228][T15039] ? __pfx_ksys_write+0x10/0x10 [ 2153.521252][T15039] ? rcu_is_watching+0x15/0xb0 [ 2153.521279][T15039] ? do_syscall_64+0xbe/0x3b0 [ 2153.521313][T15039] do_syscall_64+0xfa/0x3b0 [ 2153.521340][T15039] ? lockdep_hardirqs_on+0x9c/0x150 [ 2153.521366][T15039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2153.521395][T15039] ? clear_bhb_loop+0x60/0xb0 [ 2153.521420][T15039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2153.521440][T15039] RIP: 0033:0x7f1c25d8ebe9 [ 2153.521459][T15039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2153.521476][T15039] RSP: 002b:00007f1c26c34038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2153.521498][T15039] RAX: ffffffffffffffda RBX: 00007f1c25fb5fa0 RCX: 00007f1c25d8ebe9 [ 2153.521512][T15039] RDX: 0000000000040044 RSI: 0000200000000080 RDI: 0000000000000003 [ 2153.521525][T15039] RBP: 00007f1c26c34090 R08: 0000000000000000 R09: 0000000000000000 [ 2153.521542][T15039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2153.521553][T15039] R13: 00007f1c25fb6038 R14: 00007f1c25fb5fa0 R15: 00007ffde2709968 [ 2153.521585][T15039] [ 2154.342353][T15048] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 2154.416911][T15052] netlink: 'syz.3.13126': attribute type 21 has an invalid length. [ 2154.431835][T15052] FAULT_INJECTION: forcing a failure. [ 2154.431835][T15052] name failslab, interval 1, probability 0, space 0, times 0 [ 2154.461290][T15052] CPU: 1 UID: 0 PID: 15052 Comm: syz.3.13126 Not tainted syzkaller #0 PREEMPT(full) [ 2154.461326][T15052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2154.461341][T15052] Call Trace: [ 2154.461350][T15052] [ 2154.461360][T15052] dump_stack_lvl+0x189/0x250 [ 2154.461393][T15052] ? __pfx____ratelimit+0x10/0x10 [ 2154.461423][T15052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2154.461450][T15052] ? __pfx__printk+0x10/0x10 [ 2154.461487][T15052] ? __pfx___might_resched+0x10/0x10 [ 2154.461507][T15052] ? fs_reclaim_acquire+0x7d/0x100 [ 2154.461549][T15052] should_fail_ex+0x414/0x560 [ 2154.461582][T15052] should_failslab+0xa8/0x100 [ 2154.461616][T15052] __kmalloc_noprof+0xcb/0x4f0 [ 2154.461646][T15052] ? fib_create_info+0x1728/0x3210 [ 2154.461681][T15052] fib_create_info+0x1728/0x3210 [ 2154.461717][T15052] ? rcu_is_watching+0x15/0xb0 [ 2154.461745][T15052] ? __mutex_lock+0x335/0x1360 [ 2154.461803][T15052] fib_table_insert+0xc6/0x1b50 [ 2154.461834][T15052] ? lwtunnel_valid_encap_type+0xb7/0x210 [ 2154.461862][T15052] ? __pfx___mutex_lock+0x10/0x10 [ 2154.461889][T15052] ? rtm_to_fib_config+0x107f/0x13c0 [ 2154.461938][T15052] inet_rtm_newroute+0x12b/0x210 [ 2154.461965][T15052] ? __lock_acquire+0xab9/0xd20 [ 2154.461996][T15052] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 2154.462048][T15052] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 2154.462073][T15052] rtnetlink_rcv_msg+0x7cc/0xb70 [ 2154.462110][T15052] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2154.462138][T15052] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2154.462166][T15052] ? ref_tracker_free+0x63a/0x7d0 [ 2154.462195][T15052] ? __asan_memcpy+0x40/0x70 [ 2154.462219][T15052] ? __pfx_ref_tracker_free+0x10/0x10 [ 2154.462260][T15052] netlink_rcv_skb+0x205/0x470 [ 2154.462293][T15052] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2154.462330][T15052] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2154.462374][T15052] ? netlink_deliver_tap+0x2e/0x1b0 [ 2154.462414][T15052] netlink_unicast+0x82c/0x9e0 [ 2154.462452][T15052] ? __pfx_netlink_unicast+0x10/0x10 [ 2154.462482][T15052] ? netlink_sendmsg+0x642/0xb30 [ 2154.462510][T15052] ? skb_put+0x11b/0x210 [ 2154.462547][T15052] netlink_sendmsg+0x805/0xb30 [ 2154.462589][T15052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2154.462622][T15052] ? __lock_acquire+0xab9/0xd20 [ 2154.462651][T15052] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2154.462685][T15052] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2154.462708][T15052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2154.462740][T15052] __sock_sendmsg+0x21c/0x270 [ 2154.462770][T15052] sock_write_iter+0x258/0x330 [ 2154.462799][T15052] ? __pfx_sock_write_iter+0x10/0x10 [ 2154.462837][T15052] ? bpf_lsm_file_permission+0x9/0x20 [ 2154.462863][T15052] ? security_file_permission+0x75/0x290 [ 2154.462901][T15052] vfs_write+0x5c6/0xb30 [ 2154.462935][T15052] ? __pfx_sock_write_iter+0x10/0x10 [ 2154.462961][T15052] ? __pfx_vfs_write+0x10/0x10 [ 2154.463000][T15052] ? __fget_files+0x2a/0x420 [ 2154.463031][T15052] ksys_write+0x145/0x250 [ 2154.463062][T15052] ? __pfx_ksys_write+0x10/0x10 [ 2154.463087][T15052] ? rcu_is_watching+0x15/0xb0 [ 2154.463114][T15052] ? do_syscall_64+0xbe/0x3b0 [ 2154.463149][T15052] do_syscall_64+0xfa/0x3b0 [ 2154.463177][T15052] ? lockdep_hardirqs_on+0x9c/0x150 [ 2154.463204][T15052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2154.463225][T15052] ? clear_bhb_loop+0x60/0xb0 [ 2154.463250][T15052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2154.463271][T15052] RIP: 0033:0x7fc18a98ebe9 [ 2154.463291][T15052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2154.463316][T15052] RSP: 002b:00007fc18b8b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2154.463339][T15052] RAX: ffffffffffffffda RBX: 00007fc18abb5fa0 RCX: 00007fc18a98ebe9 [ 2154.463354][T15052] RDX: 000000000000fe45 RSI: 0000200000000000 RDI: 0000000000000003 [ 2154.463367][T15052] RBP: 00007fc18b8b1090 R08: 0000000000000000 R09: 0000000000000000 [ 2154.463380][T15052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2154.463392][T15052] R13: 00007fc18abb6038 R14: 00007fc18abb5fa0 R15: 00007ffc4ab9df78 [ 2154.463427][T15052] [ 2155.043008][T15056] netlink: 56 bytes leftover after parsing attributes in process `syz.4.13127'. [ 2155.120022][T15056] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13127'. [ 2155.431511][T15070] netlink: 209588 bytes leftover after parsing attributes in process `syz.2.13131'. [ 2155.695404][T15073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13134'. [ 2156.031226][T15080] netlink: 68 bytes leftover after parsing attributes in process `syz.1.13135'. [ 2156.198840][T15066] syzkaller0: entered promiscuous mode [ 2156.208362][T15066] syzkaller0: entered allmulticast mode [ 2156.757994][T15084] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13137'. [ 2156.872343][T15095] FAULT_INJECTION: forcing a failure. [ 2156.872343][T15095] name failslab, interval 1, probability 0, space 0, times 0 [ 2156.886176][T15095] CPU: 0 UID: 0 PID: 15095 Comm: syz.3.13140 Not tainted syzkaller #0 PREEMPT(full) [ 2156.886207][T15095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2156.886220][T15095] Call Trace: [ 2156.886229][T15095] [ 2156.886238][T15095] dump_stack_lvl+0x189/0x250 [ 2156.886268][T15095] ? __pfx____ratelimit+0x10/0x10 [ 2156.886297][T15095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2156.886321][T15095] ? __pfx__printk+0x10/0x10 [ 2156.886353][T15095] ? __lock_acquire+0xab9/0xd20 [ 2156.886394][T15095] should_fail_ex+0x414/0x560 [ 2156.886453][T15095] should_failslab+0xa8/0x100 [ 2156.886486][T15095] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2156.886515][T15095] ? skb_clone+0x212/0x3a0 [ 2156.886543][T15095] skb_clone+0x212/0x3a0 [ 2156.886569][T15095] __netlink_deliver_tap+0x404/0x850 [ 2156.886615][T15095] ? netlink_deliver_tap+0x2e/0x1b0 [ 2156.886648][T15095] netlink_deliver_tap+0x19c/0x1b0 [ 2156.886680][T15095] netlink_unicast+0x7fa/0x9e0 [ 2156.886718][T15095] ? __pfx_netlink_unicast+0x10/0x10 [ 2156.886748][T15095] ? netlink_sendmsg+0x642/0xb30 [ 2156.886775][T15095] ? skb_put+0x11b/0x210 [ 2156.886812][T15095] netlink_sendmsg+0x805/0xb30 [ 2156.886854][T15095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2156.886889][T15095] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2156.886924][T15095] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2156.886947][T15095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2156.886979][T15095] __sock_sendmsg+0x21c/0x270 [ 2156.887010][T15095] ____sys_sendmsg+0x505/0x830 [ 2156.887038][T15095] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2156.887070][T15095] ? import_iovec+0x74/0xa0 [ 2156.887099][T15095] ___sys_sendmsg+0x21f/0x2a0 [ 2156.887135][T15095] ? __pfx____sys_sendmsg+0x10/0x10 [ 2156.887190][T15095] ? __fget_files+0x2a/0x420 [ 2156.887205][T15095] ? __fget_files+0x3a0/0x420 [ 2156.887228][T15095] __x64_sys_sendmsg+0x19b/0x260 [ 2156.887247][T15095] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2156.887273][T15095] ? __pfx_ksys_write+0x10/0x10 [ 2156.887293][T15095] ? rcu_is_watching+0x15/0xb0 [ 2156.887315][T15095] ? do_syscall_64+0xbe/0x3b0 [ 2156.887342][T15095] do_syscall_64+0xfa/0x3b0 [ 2156.887365][T15095] ? lockdep_hardirqs_on+0x9c/0x150 [ 2156.887387][T15095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2156.887404][T15095] ? clear_bhb_loop+0x60/0xb0 [ 2156.887431][T15095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2156.887448][T15095] RIP: 0033:0x7fc18a98ebe9 [ 2156.887464][T15095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2156.887479][T15095] RSP: 002b:00007fc18b8b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2156.887497][T15095] RAX: ffffffffffffffda RBX: 00007fc18abb5fa0 RCX: 00007fc18a98ebe9 [ 2156.887510][T15095] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 2156.887520][T15095] RBP: 00007fc18b8b1090 R08: 0000000000000000 R09: 0000000000000000 [ 2156.887531][T15095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2156.887541][T15095] R13: 00007fc18abb6038 R14: 00007fc18abb5fa0 R15: 00007ffc4ab9df78 [ 2156.887568][T15095] [ 2157.353232][T15099] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13141'. [ 2157.627860][ T30] audit: type=1107 audit(1755744098.674:16): pid=15100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 2158.942837][T15099] bond0: (slave dummy0): Releasing backup interface [ 2158.969194][T15102] netlink: 'syz.4.13143': attribute type 29 has an invalid length. [ 2159.349535][T15108] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13145'. [ 2160.054842][T15132] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 2160.066118][T15134] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13155'. [ 2160.082452][T15134] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13155'. [ 2160.251074][T15140] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13158'. [ 2160.300550][T15136] FAULT_INJECTION: forcing a failure. [ 2160.300550][T15136] name failslab, interval 1, probability 0, space 0, times 0 [ 2160.314028][T15136] CPU: 1 UID: 0 PID: 15136 Comm: syz.0.13156 Not tainted syzkaller #0 PREEMPT(full) [ 2160.314058][T15136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2160.314072][T15136] Call Trace: [ 2160.314081][T15136] [ 2160.314091][T15136] dump_stack_lvl+0x189/0x250 [ 2160.314124][T15136] ? lockdep_hardirqs_on+0x9c/0x150 [ 2160.314156][T15136] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2160.314206][T15136] should_fail_ex+0x414/0x560 [ 2160.314242][T15136] should_failslab+0xa8/0x100 [ 2160.314276][T15136] __kmalloc_cache_noprof+0x70/0x3d0 [ 2160.314306][T15136] ? tipc_group_create_member+0x60/0x540 [ 2160.314346][T15136] tipc_group_create_member+0x60/0x540 [ 2160.314382][T15136] ? tipc_nametbl_build_group+0x1e3/0x4d0 [ 2160.314409][T15136] tipc_nametbl_build_group+0x2f0/0x4d0 [ 2160.314429][T15136] ? tipc_nametbl_build_group+0x2e/0x4d0 [ 2160.314463][T15136] tipc_sk_join+0x397/0x6b0 [ 2160.314491][T15136] ? lockdep_hardirqs_on+0x9c/0x150 [ 2160.314525][T15136] ? __pfx_tipc_sk_join+0x10/0x10 [ 2160.314569][T15136] tipc_setsockopt+0x735/0x970 [ 2160.314606][T15136] ? __pfx_tipc_setsockopt+0x10/0x10 [ 2160.314634][T15136] ? __fget_files+0x2a/0x420 [ 2160.314650][T15136] ? aa_sock_opt_perm+0xff/0x1b0 [ 2160.314676][T15136] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 2160.314699][T15136] ? __pfx_tipc_setsockopt+0x10/0x10 [ 2160.314729][T15136] do_sock_setsockopt+0x17c/0x1b0 [ 2160.314772][T15136] __x64_sys_setsockopt+0x13f/0x1b0 [ 2160.314802][T15136] do_syscall_64+0xfa/0x3b0 [ 2160.314835][T15136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2160.314854][T15136] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2160.314875][T15136] ? clear_bhb_loop+0x60/0xb0 [ 2160.314909][T15136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2160.314930][T15136] RIP: 0033:0x7f73ee18ebe9 [ 2160.314950][T15136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2160.314967][T15136] RSP: 002b:00007f73ef07b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2160.314989][T15136] RAX: ffffffffffffffda RBX: 00007f73ee3b5fa0 RCX: 00007f73ee18ebe9 [ 2160.315004][T15136] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000007 [ 2160.315018][T15136] RBP: 00007f73ef07b090 R08: 0000000000000043 R09: 0000000000000000 [ 2160.315030][T15136] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000001 [ 2160.315042][T15136] R13: 00007f73ee3b6038 R14: 00007f73ee3b5fa0 R15: 00007fffa4736538 [ 2160.315081][T15136] [ 2160.591303][T15142] FAULT_INJECTION: forcing a failure. [ 2160.591303][T15142] name failslab, interval 1, probability 0, space 0, times 0 [ 2160.604798][T15142] CPU: 1 UID: 0 PID: 15142 Comm: syz.1.13159 Not tainted syzkaller #0 PREEMPT(full) [ 2160.604825][T15142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2160.604847][T15142] Call Trace: [ 2160.604856][T15142] [ 2160.604865][T15142] dump_stack_lvl+0x189/0x250 [ 2160.604897][T15142] ? __pfx____ratelimit+0x10/0x10 [ 2160.604926][T15142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2160.604952][T15142] ? __pfx__printk+0x10/0x10 [ 2160.604985][T15142] ? __pfx___might_resched+0x10/0x10 [ 2160.605007][T15142] ? fs_reclaim_acquire+0x7d/0x100 [ 2160.605047][T15142] should_fail_ex+0x414/0x560 [ 2160.605083][T15142] should_failslab+0xa8/0x100 [ 2160.605117][T15142] __kmalloc_noprof+0xcb/0x4f0 [ 2160.605144][T15142] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 2160.605179][T15142] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 2160.605216][T15142] genl_family_rcv_msg_doit+0xb8/0x300 [ 2160.605250][T15142] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2160.605281][T15142] ? __pfx_genl_get_cmd+0x10/0x10 [ 2160.605302][T15142] ? __pfx_ovs_flow_cmd_get+0x10/0x10 [ 2160.605331][T15142] ? __pfx_ovs_flow_cmd_dump+0x10/0x10 [ 2160.605380][T15142] genl_rcv_msg+0x60e/0x790 [ 2160.605414][T15142] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2160.605437][T15142] ? __pfx_ovs_flow_cmd_get+0x10/0x10 [ 2160.605469][T15142] ? __asan_memcpy+0x40/0x70 [ 2160.605493][T15142] ? __pfx_ref_tracker_free+0x10/0x10 [ 2160.605534][T15142] netlink_rcv_skb+0x205/0x470 [ 2160.605562][T15142] ? __lock_acquire+0xab9/0xd20 [ 2160.605595][T15142] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2160.605621][T15142] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2160.605678][T15142] ? down_read+0x1ad/0x2e0 [ 2160.605713][T15142] genl_rcv+0x28/0x40 [ 2160.605733][T15142] netlink_unicast+0x82c/0x9e0 [ 2160.605772][T15142] ? __pfx_netlink_unicast+0x10/0x10 [ 2160.605802][T15142] ? netlink_sendmsg+0x642/0xb30 [ 2160.605829][T15142] ? skb_put+0x11b/0x210 [ 2160.605873][T15142] netlink_sendmsg+0x805/0xb30 [ 2160.605917][T15142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2160.605954][T15142] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2160.605991][T15142] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2160.606014][T15142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2160.606047][T15142] __sock_sendmsg+0x21c/0x270 [ 2160.606080][T15142] ____sys_sendmsg+0x505/0x830 [ 2160.606111][T15142] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2160.606146][T15142] ? import_iovec+0x74/0xa0 [ 2160.606176][T15142] ___sys_sendmsg+0x21f/0x2a0 [ 2160.606202][T15142] ? __pfx____sys_sendmsg+0x10/0x10 [ 2160.606255][T15142] ? __fget_files+0x2a/0x420 [ 2160.606293][T15142] ? __fget_files+0x2a/0x420 [ 2160.606311][T15142] ? __fget_files+0x3a0/0x420 [ 2160.606345][T15142] __x64_sys_sendmsg+0x19b/0x260 [ 2160.606372][T15142] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2160.606409][T15142] ? __pfx_ksys_write+0x10/0x10 [ 2160.606434][T15142] ? rcu_is_watching+0x15/0xb0 [ 2160.606464][T15142] ? do_syscall_64+0xbe/0x3b0 [ 2160.606500][T15142] do_syscall_64+0xfa/0x3b0 [ 2160.606528][T15142] ? lockdep_hardirqs_on+0x9c/0x150 [ 2160.606556][T15142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2160.606578][T15142] ? clear_bhb_loop+0x60/0xb0 [ 2160.606605][T15142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2160.606625][T15142] RIP: 0033:0x7f708518ebe9 [ 2160.606646][T15142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2160.606664][T15142] RSP: 002b:00007f708609b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2160.606686][T15142] RAX: ffffffffffffffda RBX: 00007f70853b5fa0 RCX: 00007f708518ebe9 [ 2160.606702][T15142] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2160.606715][T15142] RBP: 00007f708609b090 R08: 0000000000000000 R09: 0000000000000000 [ 2160.606727][T15142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2160.606739][T15142] R13: 00007f70853b6038 R14: 00007f70853b5fa0 R15: 00007ffde6888ff8 [ 2160.606778][T15142] [ 2161.636508][T15158] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.13166'. [ 2161.678787][T15159] FAULT_INJECTION: forcing a failure. [ 2161.678787][T15159] name failslab, interval 1, probability 0, space 0, times 0 [ 2161.745693][T15157] netlink: 'syz.1.13164': attribute type 10 has an invalid length. [ 2161.775566][T15159] CPU: 0 UID: 0 PID: 15159 Comm: syz.2.13165 Not tainted syzkaller #0 PREEMPT(full) [ 2161.775599][T15159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2161.775613][T15159] Call Trace: [ 2161.775623][T15159] [ 2161.775634][T15159] dump_stack_lvl+0x189/0x250 [ 2161.775669][T15159] ? __pfx____ratelimit+0x10/0x10 [ 2161.775701][T15159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2161.775729][T15159] ? __pfx__printk+0x10/0x10 [ 2161.775772][T15159] ? __pfx___might_resched+0x10/0x10 [ 2161.775793][T15159] ? fs_reclaim_acquire+0x7d/0x100 [ 2161.775836][T15159] should_fail_ex+0x414/0x560 [ 2161.775874][T15159] should_failslab+0xa8/0x100 [ 2161.775909][T15159] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2161.775938][T15159] ? security_inode_alloc+0x39/0x330 [ 2161.775970][T15159] security_inode_alloc+0x39/0x330 [ 2161.775997][T15159] inode_init_always_gfp+0x9ed/0xdc0 [ 2161.776049][T15159] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2161.776078][T15159] alloc_inode+0x82/0x1b0 [ 2161.776114][T15159] __sock_create+0x12d/0x9f0 [ 2161.776160][T15159] udp_sock_create4+0xbe/0x4b0 [ 2161.776196][T15159] ? __pfx_udp_sock_create4+0x10/0x10 [ 2161.776246][T15159] rxrpc_lookup_local+0xcae/0x1410 [ 2161.776298][T15159] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 2161.776344][T15159] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2161.776374][T15159] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2161.776402][T15159] ? do_raw_spin_unlock+0x122/0x240 [ 2161.776438][T15159] rxrpc_sendmsg+0x399/0x710 [ 2161.776476][T15159] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 2161.776508][T15159] __sock_sendmsg+0x21c/0x270 [ 2161.776542][T15159] ____sys_sendmsg+0x505/0x830 [ 2161.776578][T15159] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2161.776616][T15159] ? import_iovec+0x74/0xa0 [ 2161.776648][T15159] ___sys_sendmsg+0x21f/0x2a0 [ 2161.776675][T15159] ? __pfx____sys_sendmsg+0x10/0x10 [ 2161.776731][T15159] ? __fget_files+0x2a/0x420 [ 2161.776771][T15159] ? __fget_files+0x2a/0x420 [ 2161.776789][T15159] ? __fget_files+0x3a0/0x420 [ 2161.776829][T15159] __x64_sys_sendmsg+0x19b/0x260 [ 2161.776857][T15159] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2161.776916][T15159] ? __pfx_ksys_write+0x10/0x10 [ 2161.776943][T15159] ? rcu_is_watching+0x15/0xb0 [ 2161.776973][T15159] ? do_syscall_64+0xbe/0x3b0 [ 2161.777011][T15159] do_syscall_64+0xfa/0x3b0 [ 2161.777047][T15159] ? lockdep_hardirqs_on+0x9c/0x150 [ 2161.777077][T15159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2161.777099][T15159] ? clear_bhb_loop+0x60/0xb0 [ 2161.777128][T15159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2161.777149][T15159] RIP: 0033:0x7f152d18ebe9 [ 2161.777169][T15159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2161.777189][T15159] RSP: 002b:00007f152dfeb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2161.777212][T15159] RAX: ffffffffffffffda RBX: 00007f152d3b5fa0 RCX: 00007f152d18ebe9 [ 2161.777229][T15159] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 2161.777243][T15159] RBP: 00007f152dfeb090 R08: 0000000000000000 R09: 0000000000000000 [ 2161.777256][T15159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2161.777269][T15159] R13: 00007f152d3b6038 R14: 00007f152d3b5fa0 R15: 00007ffd88e806a8 [ 2161.777311][T15159] [ 2161.865042][T15159] socket: no more sockets [ 2162.358889][T15174] netlink: 96 bytes leftover after parsing attributes in process `syz.3.13170'. [ 2162.443495][T15178] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13169'. [ 2162.572907][T15178] netlink: 'syz.2.13169': attribute type 1 has an invalid length. [ 2162.610684][T15178] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.13169'. [ 2163.748169][T15202] netlink: 'syz.3.13181': attribute type 21 has an invalid length. [ 2163.765204][T15202] FAULT_INJECTION: forcing a failure. [ 2163.765204][T15202] name failslab, interval 1, probability 0, space 0, times 0 [ 2163.791806][T15202] CPU: 0 UID: 0 PID: 15202 Comm: syz.3.13181 Not tainted syzkaller #0 PREEMPT(full) [ 2163.791848][T15202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2163.791863][T15202] Call Trace: [ 2163.791873][T15202] [ 2163.791883][T15202] dump_stack_lvl+0x189/0x250 [ 2163.791916][T15202] ? __pfx____ratelimit+0x10/0x10 [ 2163.791948][T15202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2163.791975][T15202] ? __pfx__printk+0x10/0x10 [ 2163.792014][T15202] ? __pfx___might_resched+0x10/0x10 [ 2163.792046][T15202] should_fail_ex+0x414/0x560 [ 2163.792082][T15202] should_failslab+0xa8/0x100 [ 2163.792119][T15202] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 2163.792151][T15202] ? __alloc_skb+0x112/0x2d0 [ 2163.792190][T15202] __alloc_skb+0x112/0x2d0 [ 2163.792228][T15202] netlink_ack+0x146/0xa50 [ 2163.792257][T15202] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2163.792287][T15202] ? ref_tracker_free+0x63a/0x7d0 [ 2163.792318][T15202] ? __asan_memcpy+0x40/0x70 [ 2163.792343][T15202] ? __pfx_ref_tracker_free+0x10/0x10 [ 2163.792389][T15202] netlink_rcv_skb+0x28c/0x470 [ 2163.792422][T15202] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2163.792456][T15202] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2163.792504][T15202] ? netlink_deliver_tap+0x2e/0x1b0 [ 2163.792547][T15202] netlink_unicast+0x82c/0x9e0 [ 2163.792587][T15202] ? __pfx_netlink_unicast+0x10/0x10 [ 2163.792620][T15202] ? netlink_sendmsg+0x642/0xb30 [ 2163.792649][T15202] ? skb_put+0x11b/0x210 [ 2163.792687][T15202] netlink_sendmsg+0x805/0xb30 [ 2163.792733][T15202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2163.792775][T15202] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2163.792813][T15202] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2163.792843][T15202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2163.792876][T15202] __sock_sendmsg+0x21c/0x270 [ 2163.792909][T15202] sock_write_iter+0x258/0x330 [ 2163.792940][T15202] ? __pfx_sock_write_iter+0x10/0x10 [ 2163.792963][T15202] ? perf_trace_lock+0xec/0x3b0 [ 2163.792999][T15202] ? bpf_lsm_file_permission+0x9/0x20 [ 2163.793025][T15202] ? security_file_permission+0x75/0x290 [ 2163.793066][T15202] vfs_write+0x5c6/0xb30 [ 2163.793103][T15202] ? __pfx_sock_write_iter+0x10/0x10 [ 2163.793131][T15202] ? __pfx_vfs_write+0x10/0x10 [ 2163.793175][T15202] ? __fget_files+0x2a/0x420 [ 2163.793208][T15202] ksys_write+0x145/0x250 [ 2163.793241][T15202] ? __pfx_ksys_write+0x10/0x10 [ 2163.793266][T15202] ? rcu_is_watching+0x15/0xb0 [ 2163.793296][T15202] ? do_syscall_64+0xbe/0x3b0 [ 2163.793333][T15202] do_syscall_64+0xfa/0x3b0 [ 2163.793362][T15202] ? lockdep_hardirqs_on+0x9c/0x150 [ 2163.793391][T15202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2163.793413][T15202] ? clear_bhb_loop+0x60/0xb0 [ 2163.793462][T15202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2163.793484][T15202] RIP: 0033:0x7fc18a98ebe9 [ 2163.793505][T15202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2163.793522][T15202] RSP: 002b:00007fc18b8b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2163.793544][T15202] RAX: ffffffffffffffda RBX: 00007fc18abb5fa0 RCX: 00007fc18a98ebe9 [ 2163.793560][T15202] RDX: 000000000000fe45 RSI: 0000200000000000 RDI: 0000000000000003 [ 2163.793573][T15202] RBP: 00007fc18b8b1090 R08: 0000000000000000 R09: 0000000000000000 [ 2163.793586][T15202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2163.793598][T15202] R13: 00007fc18abb6038 R14: 00007fc18abb5fa0 R15: 00007ffc4ab9df78 [ 2163.793637][T15202] [ 2164.404916][T15222] FAULT_INJECTION: forcing a failure. [ 2164.404916][T15222] name failslab, interval 1, probability 0, space 0, times 0 [ 2164.420126][T15222] CPU: 0 UID: 0 PID: 15222 Comm: syz.1.13189 Not tainted syzkaller #0 PREEMPT(full) [ 2164.420156][T15222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2164.420169][T15222] Call Trace: [ 2164.420179][T15222] [ 2164.420188][T15222] dump_stack_lvl+0x189/0x250 [ 2164.420220][T15222] ? __pfx____ratelimit+0x10/0x10 [ 2164.420251][T15222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2164.420277][T15222] ? __pfx__printk+0x10/0x10 [ 2164.420311][T15222] ? __pfx___might_resched+0x10/0x10 [ 2164.420333][T15222] ? fs_reclaim_acquire+0x7d/0x100 [ 2164.420374][T15222] should_fail_ex+0x414/0x560 [ 2164.420409][T15222] should_failslab+0xa8/0x100 [ 2164.420443][T15222] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2164.420471][T15222] ? security_file_alloc+0x34/0x330 [ 2164.420504][T15222] security_file_alloc+0x34/0x330 [ 2164.420534][T15222] init_file+0x93/0x2f0 [ 2164.420561][T15222] alloc_empty_file+0x6e/0x1d0 [ 2164.420595][T15222] alloc_file_pseudo+0x13d/0x210 [ 2164.420623][T15222] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 2164.420644][T15222] ? find_get_pmu_context+0x7cd/0x890 [ 2164.420687][T15222] anon_inode_getfile+0xc5/0x1a0 [ 2164.420714][T15222] __se_sys_perf_event_open+0xf20/0x1d70 [ 2164.420756][T15222] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 2164.420798][T15222] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2164.420831][T15222] ? __pfx_ksys_write+0x10/0x10 [ 2164.420858][T15222] ? rcu_is_watching+0x15/0xb0 [ 2164.420886][T15222] ? do_syscall_64+0xbe/0x3b0 [ 2164.420915][T15222] ? __x64_sys_perf_event_open+0x20/0xc0 [ 2164.420944][T15222] do_syscall_64+0xfa/0x3b0 [ 2164.420972][T15222] ? lockdep_hardirqs_on+0x9c/0x150 [ 2164.421002][T15222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2164.421023][T15222] ? clear_bhb_loop+0x60/0xb0 [ 2164.421050][T15222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2164.421071][T15222] RIP: 0033:0x7f708518ebe9 [ 2164.421092][T15222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2164.421109][T15222] RSP: 002b:00007f708609b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2164.421133][T15222] RAX: ffffffffffffffda RBX: 00007f70853b5fa0 RCX: 00007f708518ebe9 [ 2164.421149][T15222] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00002000000000c0 [ 2164.421163][T15222] RBP: 00007f708609b090 R08: 0000000000000009 R09: 0000000000000000 [ 2164.421177][T15222] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2164.421192][T15222] R13: 00007f70853b6038 R14: 00007f70853b5fa0 R15: 00007ffde6888ff8 [ 2164.421229][T15222] [ 2164.747461][T15230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13192'. [ 2164.965133][T15235] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13192'. [ 2165.211971][T15239] netlink: 10 bytes leftover after parsing attributes in process `syz.0.13195'. [ 2165.266011][ T5881] Bluetooth: hci4: unexpected event 0x23 length: 15 > 13 [ 2165.358699][T15241] FAULT_INJECTION: forcing a failure. [ 2165.358699][T15241] name failslab, interval 1, probability 0, space 0, times 0 [ 2165.383758][T15241] CPU: 0 UID: 0 PID: 15241 Comm: syz.2.13196 Not tainted syzkaller #0 PREEMPT(full) [ 2165.383797][T15241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2165.383811][T15241] Call Trace: [ 2165.383821][T15241] [ 2165.383830][T15241] dump_stack_lvl+0x189/0x250 [ 2165.383862][T15241] ? lockdep_hardirqs_on+0x9c/0x150 [ 2165.383894][T15241] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2165.383921][T15241] ? __pfx__printk+0x10/0x10 [ 2165.383968][T15241] should_fail_ex+0x414/0x560 [ 2165.384004][T15241] should_failslab+0xa8/0x100 [ 2165.384039][T15241] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2165.384068][T15241] ? security_file_alloc+0x34/0x330 [ 2165.384102][T15241] security_file_alloc+0x34/0x330 [ 2165.384132][T15241] init_file+0x93/0x2f0 [ 2165.384159][T15241] alloc_empty_file+0x6e/0x1d0 [ 2165.384183][T15241] alloc_file_pseudo+0x13d/0x210 [ 2165.384211][T15241] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 2165.384231][T15241] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2165.384255][T15241] ? idr_preload_end+0xe5/0x200 [ 2165.384300][T15241] anon_inode_getfile+0xc5/0x1a0 [ 2165.384329][T15241] bpf_link_prime+0xfc/0x220 [ 2165.384357][T15241] bpf_raw_tp_link_attach+0x49a/0x6c0 [ 2165.384387][T15241] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 2165.384424][T15241] ? __fget_files+0x2a/0x420 [ 2165.384458][T15241] bpf_raw_tracepoint_open+0x1b2/0x220 [ 2165.384493][T15241] __sys_bpf+0x75a/0x870 [ 2165.384526][T15241] ? __pfx___sys_bpf+0x10/0x10 [ 2165.384686][T15241] __x64_sys_bpf+0x7c/0x90 [ 2165.384724][T15241] do_syscall_64+0xfa/0x3b0 [ 2165.384771][T15241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2165.384791][T15241] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2165.384812][T15241] ? clear_bhb_loop+0x60/0xb0 [ 2165.384839][T15241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2165.384859][T15241] RIP: 0033:0x7f152d18ebe9 [ 2165.384880][T15241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2165.384899][T15241] RSP: 002b:00007f152dfeb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2165.384921][T15241] RAX: ffffffffffffffda RBX: 00007f152d3b5fa0 RCX: 00007f152d18ebe9 [ 2165.384936][T15241] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000011 [ 2165.384948][T15241] RBP: 00007f152dfeb090 R08: 0000000000000000 R09: 0000000000000000 [ 2165.384962][T15241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2165.384974][T15241] R13: 00007f152d3b6038 R14: 00007f152d3b5fa0 R15: 00007ffd88e806a8 [ 2165.385013][T15241] [ 2165.778597][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2165.793159][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2166.146303][T15256] netlink: 'syz.2.13200': attribute type 16 has an invalid length. [ 2166.202666][T15256] netlink: 'syz.2.13200': attribute type 3 has an invalid length. [ 2166.287165][T15256] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13200'. [ 2166.609680][T15275] netlink: 67 bytes leftover after parsing attributes in process `syz.3.13204'. [ 2167.141640][T15269] netlink: 'syz.3.13204': attribute type 10 has an invalid length. [ 2167.157138][T15269] netlink: 55 bytes leftover after parsing attributes in process `syz.3.13204'. [ 2167.974815][T15296] netlink: 104 bytes leftover after parsing attributes in process `syz.4.13210'. [ 2168.351206][T15306] netlink: 'syz.3.13216': attribute type 3 has an invalid length. [ 2168.408997][T15306] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13216'. [ 2169.104429][T15315] lo: entered promiscuous mode [ 2169.285743][T15326] netlink: 67 bytes leftover after parsing attributes in process `syz.0.13224'. [ 2169.360781][T15332] netlink: 'syz.0.13224': attribute type 10 has an invalid length. [ 2169.403818][T15332] netlink: 55 bytes leftover after parsing attributes in process `syz.0.13224'. [ 2169.611280][T15341] netlink: 830 bytes leftover after parsing attributes in process `syz.0.13228'. [ 2169.627699][T15341] netlink: 'syz.0.13228': attribute type 10 has an invalid length. [ 2169.644215][T15341] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 2169.817973][T15349] FAULT_INJECTION: forcing a failure. [ 2169.817973][T15349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2169.833982][T15349] CPU: 1 UID: 0 PID: 15349 Comm: syz.3.13232 Not tainted syzkaller #0 PREEMPT(full) [ 2169.834017][T15349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2169.834032][T15349] Call Trace: [ 2169.834040][T15349] [ 2169.834050][T15349] dump_stack_lvl+0x189/0x250 [ 2169.834076][T15349] ? __pfx____ratelimit+0x10/0x10 [ 2169.834099][T15349] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2169.834120][T15349] ? __pfx__printk+0x10/0x10 [ 2169.834144][T15349] ? __might_fault+0xb0/0x130 [ 2169.834172][T15349] ? __might_fault+0xb0/0x130 [ 2169.834201][T15349] should_fail_ex+0x414/0x560 [ 2169.834229][T15349] _copy_from_user+0x2d/0xb0 [ 2169.834249][T15349] kstrtouint_from_user+0xc4/0x170 [ 2169.834279][T15349] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2169.834322][T15349] proc_fail_nth_write+0x88/0x200 [ 2169.834342][T15349] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2169.834367][T15349] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2169.834389][T15349] vfs_write+0x27b/0xb30 [ 2169.834427][T15349] ? __pfx_vfs_write+0x10/0x10 [ 2169.834452][T15349] ? __fget_files+0x2a/0x420 [ 2169.834472][T15349] ? __fget_files+0x3a0/0x420 [ 2169.834486][T15349] ? __fget_files+0x2a/0x420 [ 2169.834510][T15349] ksys_write+0x145/0x250 [ 2169.834535][T15349] ? __pfx_ksys_write+0x10/0x10 [ 2169.834555][T15349] ? rcu_is_watching+0x15/0xb0 [ 2169.834579][T15349] ? do_syscall_64+0xbe/0x3b0 [ 2169.834608][T15349] do_syscall_64+0xfa/0x3b0 [ 2169.834630][T15349] ? lockdep_hardirqs_on+0x9c/0x150 [ 2169.834653][T15349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2169.834670][T15349] ? clear_bhb_loop+0x60/0xb0 [ 2169.834691][T15349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2169.834707][T15349] RIP: 0033:0x7fc18a98d69f [ 2169.834722][T15349] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 2169.834736][T15349] RSP: 002b:00007fc18b8b1030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2169.834753][T15349] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc18a98d69f [ 2169.834765][T15349] RDX: 0000000000000001 RSI: 00007fc18b8b10a0 RDI: 0000000000000004 [ 2169.834775][T15349] RBP: 00007fc18b8b1090 R08: 0000000000000000 R09: 0000000000000000 [ 2169.834786][T15349] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2169.834796][T15349] R13: 00007fc18abb6038 R14: 00007fc18abb5fa0 R15: 00007ffc4ab9df78 [ 2169.834826][T15349] [ 2170.123545][T15351] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 2170.798287][T15361] netlink: 'syz.4.13237': attribute type 3 has an invalid length. [ 2170.816507][T15361] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.13237'. [ 2171.273029][T15377] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13239'. [ 2171.338303][T15377] netlink: 'syz.2.13239': attribute type 1 has an invalid length. [ 2171.358273][T15382] netlink: 'syz.3.13240': attribute type 17 has an invalid length. [ 2171.366928][T15382] netlink: 'syz.3.13240': attribute type 41 has an invalid length. [ 2171.723715][T15378] netlink: 'syz.1.13241': attribute type 3 has an invalid length. [ 2171.797589][T15378] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13241'. [ 2172.904358][T15399] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 2173.965414][T15417] netlink: 'syz.4.13252': attribute type 3 has an invalid length. [ 2173.984076][T15417] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.13252'. [ 2174.130283][T15421] FAULT_INJECTION: forcing a failure. [ 2174.130283][T15421] name failslab, interval 1, probability 0, space 0, times 0 [ 2174.148802][T15421] CPU: 0 UID: 0 PID: 15421 Comm: syz.0.13254 Not tainted syzkaller #0 PREEMPT(full) [ 2174.148834][T15421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2174.148847][T15421] Call Trace: [ 2174.148857][T15421] [ 2174.148867][T15421] dump_stack_lvl+0x189/0x250 [ 2174.148900][T15421] ? __pfx____ratelimit+0x10/0x10 [ 2174.148930][T15421] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2174.148956][T15421] ? __pfx__printk+0x10/0x10 [ 2174.148996][T15421] ? __pfx___might_resched+0x10/0x10 [ 2174.149015][T15421] ? fs_reclaim_acquire+0x7d/0x100 [ 2174.149057][T15421] should_fail_ex+0x414/0x560 [ 2174.149093][T15421] should_failslab+0xa8/0x100 [ 2174.149135][T15421] __kmalloc_cache_noprof+0x70/0x3d0 [ 2174.149164][T15421] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 2174.149200][T15421] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 2174.149243][T15421] sctp_association_new+0x15d3/0x25f0 [ 2174.149301][T15421] sctp_connect_new_asoc+0x2c5/0x690 [ 2174.149341][T15421] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 2174.149371][T15421] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2174.149404][T15421] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 2174.149429][T15421] ? security_sctp_bind_connect+0x7e/0x2e0 [ 2174.149463][T15421] sctp_sendmsg+0x155c/0x2810 [ 2174.149513][T15421] ? __pfx_sctp_sendmsg+0x10/0x10 [ 2174.149551][T15421] ? aa_sk_perm+0x81e/0x950 [ 2174.149591][T15421] ? __pfx_aa_sk_perm+0x10/0x10 [ 2174.149628][T15421] ? sock_rps_record_flow+0x19/0x410 [ 2174.149660][T15421] ? inet_sendmsg+0x2f4/0x370 [ 2174.149692][T15421] __sock_sendmsg+0x19c/0x270 [ 2174.149725][T15421] ____sys_sendmsg+0x505/0x830 [ 2174.149760][T15421] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2174.149796][T15421] ? import_iovec+0x74/0xa0 [ 2174.149827][T15421] ___sys_sendmsg+0x21f/0x2a0 [ 2174.149852][T15421] ? __pfx____sys_sendmsg+0x10/0x10 [ 2174.149907][T15421] ? __fget_files+0x2a/0x420 [ 2174.149945][T15421] ? __fget_files+0x2a/0x420 [ 2174.149963][T15421] ? __fget_files+0x3a0/0x420 [ 2174.149998][T15421] __x64_sys_sendmsg+0x19b/0x260 [ 2174.150026][T15421] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2174.150045][T15421] ? perf_trace_preemptirq_template+0xa3/0x340 [ 2174.150090][T15421] ? __pfx_ksys_write+0x10/0x10 [ 2174.150122][T15421] ? rcu_is_watching+0x15/0xb0 [ 2174.150153][T15421] ? do_syscall_64+0xbe/0x3b0 [ 2174.150190][T15421] do_syscall_64+0xfa/0x3b0 [ 2174.150219][T15421] ? lockdep_hardirqs_on+0x9c/0x150 [ 2174.150247][T15421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2174.150269][T15421] ? clear_bhb_loop+0x60/0xb0 [ 2174.150296][T15421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2174.150317][T15421] RIP: 0033:0x7f73ee18ebe9 [ 2174.150337][T15421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2174.150356][T15421] RSP: 002b:00007f73ef07b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2174.150380][T15421] RAX: ffffffffffffffda RBX: 00007f73ee3b5fa0 RCX: 00007f73ee18ebe9 [ 2174.150395][T15421] RDX: 0000000000008804 RSI: 0000200000000380 RDI: 0000000000000005 [ 2174.150409][T15421] RBP: 00007f73ef07b090 R08: 0000000000000000 R09: 0000000000000000 [ 2174.150422][T15421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2174.150434][T15421] R13: 00007f73ee3b6038 R14: 00007f73ee3b5fa0 R15: 00007fffa4736538 [ 2174.150473][T15421] [ 2174.550632][T15425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13256'. [ 2174.560613][T15425] netlink: 'syz.0.13256': attribute type 3 has an invalid length. [ 2174.659300][T15432] FAULT_INJECTION: forcing a failure. [ 2174.659300][T15432] name failslab, interval 1, probability 0, space 0, times 0 [ 2174.672904][T15432] CPU: 0 UID: 0 PID: 15432 Comm: syz.2.13258 Not tainted syzkaller #0 PREEMPT(full) [ 2174.672934][T15432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2174.672949][T15432] Call Trace: [ 2174.672962][T15432] [ 2174.672975][T15432] dump_stack_lvl+0x189/0x250 [ 2174.673018][T15432] ? __pfx____ratelimit+0x10/0x10 [ 2174.673059][T15432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2174.673096][T15432] ? __pfx__printk+0x10/0x10 [ 2174.673171][T15432] ? __pfx___might_resched+0x10/0x10 [ 2174.673228][T15432] should_fail_ex+0x414/0x560 [ 2174.673297][T15432] should_failslab+0xa8/0x100 [ 2174.673348][T15432] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2174.673382][T15432] ? sk_prot_alloc+0x57/0x220 [ 2174.673437][T15432] sk_prot_alloc+0x57/0x220 [ 2174.673457][T15432] ? sk_alloc+0x24/0x370 [ 2174.673502][T15432] sk_alloc+0x3a/0x370 [ 2174.673561][T15432] inet_create+0x7a0/0x1000 [ 2174.673600][T15432] ? inet_create+0x9c/0x1000 [ 2174.673661][T15432] __sock_create+0x4b3/0x9f0 [ 2174.673792][T15432] udp_sock_create4+0xbe/0x4b0 [ 2174.673845][T15432] ? __pfx_udp_sock_create4+0x10/0x10 [ 2174.673956][T15432] rxrpc_lookup_local+0xcae/0x1410 [ 2174.674050][T15432] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 2174.674132][T15432] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2174.674182][T15432] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2174.674231][T15432] ? do_raw_spin_unlock+0x122/0x240 [ 2174.674294][T15432] rxrpc_sendmsg+0x399/0x710 [ 2174.674358][T15432] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 2174.674402][T15432] __sock_sendmsg+0x21c/0x270 [ 2174.674457][T15432] ____sys_sendmsg+0x505/0x830 [ 2174.674522][T15432] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2174.674606][T15432] ? import_iovec+0x74/0xa0 [ 2174.674663][T15432] ___sys_sendmsg+0x21f/0x2a0 [ 2174.674709][T15432] ? __pfx____sys_sendmsg+0x10/0x10 [ 2174.674866][T15432] ? __fget_files+0x2a/0x420 [ 2174.674961][T15432] ? __fget_files+0x2a/0x420 [ 2174.674982][T15432] ? __fget_files+0x3a0/0x420 [ 2174.675068][T15432] __x64_sys_sendmsg+0x19b/0x260 [ 2174.675116][T15432] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2174.675135][T15432] ? perf_trace_preemptirq_template+0xa3/0x340 [ 2174.675224][T15432] ? __pfx_ksys_write+0x10/0x10 [ 2174.675249][T15432] ? rcu_is_watching+0x15/0xb0 [ 2174.675308][T15432] ? do_syscall_64+0xbe/0x3b0 [ 2174.675366][T15432] do_syscall_64+0xfa/0x3b0 [ 2174.675397][T15432] ? lockdep_hardirqs_on+0x9c/0x150 [ 2174.675432][T15432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2174.675457][T15432] ? clear_bhb_loop+0x60/0xb0 [ 2174.675503][T15432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2174.675525][T15432] RIP: 0033:0x7f152d18ebe9 [ 2174.675551][T15432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2174.675569][T15432] RSP: 002b:00007f152dfeb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2174.675592][T15432] RAX: ffffffffffffffda RBX: 00007f152d3b5fa0 RCX: 00007f152d18ebe9 [ 2174.675607][T15432] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 2174.675620][T15432] RBP: 00007f152dfeb090 R08: 0000000000000000 R09: 0000000000000000 [ 2174.675633][T15432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2174.675646][T15432] R13: 00007f152d3b6038 R14: 00007f152d3b5fa0 R15: 00007ffd88e806a8 [ 2174.675752][T15432] [ 2175.235394][T15423] netlink: 'syz.3.13255': attribute type 3 has an invalid length. [ 2175.253459][T15423] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13255'. [ 2175.714468][T15448] FAULT_INJECTION: forcing a failure. [ 2175.714468][T15448] name failslab, interval 1, probability 0, space 0, times 0 [ 2175.745267][T15448] CPU: 0 UID: 0 PID: 15448 Comm: syz.2.13264 Not tainted syzkaller #0 PREEMPT(full) [ 2175.745295][T15448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2175.745309][T15448] Call Trace: [ 2175.745317][T15448] [ 2175.745326][T15448] dump_stack_lvl+0x189/0x250 [ 2175.745355][T15448] ? __pfx____ratelimit+0x10/0x10 [ 2175.745384][T15448] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2175.745410][T15448] ? __pfx__printk+0x10/0x10 [ 2175.745448][T15448] ? __pfx___might_resched+0x10/0x10 [ 2175.745466][T15448] ? fs_reclaim_acquire+0x7d/0x100 [ 2175.745503][T15448] should_fail_ex+0x414/0x560 [ 2175.745536][T15448] should_failslab+0xa8/0x100 [ 2175.745572][T15448] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2175.745598][T15448] ? alloc_empty_file+0x55/0x1d0 [ 2175.745625][T15448] alloc_empty_file+0x55/0x1d0 [ 2175.745646][T15448] alloc_file_pseudo+0x13d/0x210 [ 2175.745674][T15448] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 2175.745694][T15448] ? do_raw_spin_unlock+0x122/0x240 [ 2175.745725][T15448] ? _raw_spin_unlock+0x28/0x50 [ 2175.745763][T15448] sock_alloc_file+0xb8/0x2e0 [ 2175.745788][T15448] ? __sys_socket+0x12c/0x1b0 [ 2175.745820][T15448] __sys_socket+0x13d/0x1b0 [ 2175.745856][T15448] __x64_sys_socket+0x7a/0x90 [ 2175.745886][T15448] do_syscall_64+0xfa/0x3b0 [ 2175.745922][T15448] ? lockdep_hardirqs_on+0x9c/0x150 [ 2175.745952][T15448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2175.745972][T15448] ? clear_bhb_loop+0x60/0xb0 [ 2175.745998][T15448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2175.746019][T15448] RIP: 0033:0x7f152d18ebe9 [ 2175.746039][T15448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2175.746059][T15448] RSP: 002b:00007f152dfeb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2175.746081][T15448] RAX: ffffffffffffffda RBX: 00007f152d3b5fa0 RCX: 00007f152d18ebe9 [ 2175.746098][T15448] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000018 [ 2175.746111][T15448] RBP: 00007f152dfeb090 R08: 0000000000000000 R09: 0000000000000000 [ 2175.746124][T15448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2175.746135][T15448] R13: 00007f152d3b6038 R14: 00007f152d3b5fa0 R15: 00007ffd88e806a8 [ 2175.746171][T15448] [ 2176.167147][T15454] netlink: 'syz.3.13265': attribute type 3 has an invalid length. [ 2176.176127][T15454] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13265'. [ 2176.751236][T15465] netlink: 'syz.2.13269': attribute type 3 has an invalid length. [ 2176.759714][T15465] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13269'. [ 2178.624035][T15477] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 2179.164690][T15483] netlink: 'syz.3.13275': attribute type 3 has an invalid length. [ 2179.242010][T15483] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13275'. [ 2179.354707][T15494] netlink: 7 bytes leftover after parsing attributes in process `syz.4.13277'. [ 2179.468535][T15494] netlink: 7 bytes leftover after parsing attributes in process `syz.4.13277'. [ 2179.829813][T15511] FAULT_INJECTION: forcing a failure. [ 2179.829813][T15511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2179.844087][T15511] CPU: 1 UID: 0 PID: 15511 Comm: syz.3.13282 Not tainted syzkaller #0 PREEMPT(full) [ 2179.844118][T15511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2179.844133][T15511] Call Trace: [ 2179.844154][T15511] [ 2179.844164][T15511] dump_stack_lvl+0x189/0x250 [ 2179.844196][T15511] ? __pfx____ratelimit+0x10/0x10 [ 2179.844227][T15511] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2179.844253][T15511] ? __pfx__printk+0x10/0x10 [ 2179.844282][T15511] ? __might_fault+0xb0/0x130 [ 2179.844315][T15511] ? __might_fault+0xb0/0x130 [ 2179.844351][T15511] should_fail_ex+0x414/0x560 [ 2179.844388][T15511] _copy_from_user+0x2d/0xb0 [ 2179.844414][T15511] generic_map_update_batch+0x572/0x7f0 [ 2179.844454][T15511] ? __pfx_generic_map_update_batch+0x10/0x10 [ 2179.844476][T15511] ? __fget_files+0x2a/0x420 [ 2179.844503][T15511] ? __pfx_generic_map_update_batch+0x10/0x10 [ 2179.844524][T15511] bpf_map_do_batch+0x36c/0x5f0 [ 2179.844558][T15511] __sys_bpf+0x6af/0x870 [ 2179.844586][T15511] ? __pfx___sys_bpf+0x10/0x10 [ 2179.844630][T15511] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2179.844658][T15511] ? __pfx_ksys_write+0x10/0x10 [ 2179.844687][T15511] ? rcu_is_watching+0x15/0xb0 [ 2179.844716][T15511] __x64_sys_bpf+0x7c/0x90 [ 2179.844739][T15511] do_syscall_64+0xfa/0x3b0 [ 2179.844763][T15511] ? lockdep_hardirqs_on+0x9c/0x150 [ 2179.844787][T15511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2179.844805][T15511] ? clear_bhb_loop+0x60/0xb0 [ 2179.844828][T15511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2179.844845][T15511] RIP: 0033:0x7fc18a98ebe9 [ 2179.844863][T15511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2179.844879][T15511] RSP: 002b:00007fc18b8b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2179.844899][T15511] RAX: ffffffffffffffda RBX: 00007fc18abb5fa0 RCX: 00007fc18a98ebe9 [ 2179.844913][T15511] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 2179.844925][T15511] RBP: 00007fc18b8b1090 R08: 0000000000000000 R09: 0000000000000000 [ 2179.844936][T15511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2179.844947][T15511] R13: 00007fc18abb6038 R14: 00007fc18abb5fa0 R15: 00007ffc4ab9df78 [ 2179.844981][T15511] [ 2180.141364][T15515] FAULT_INJECTION: forcing a failure. [ 2180.141364][T15515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2180.142539][T15515] [ 2180.142547][T15515] ====================================================== [ 2180.142554][T15515] WARNING: possible circular locking dependency detected [ 2180.142575][T15515] syzkaller #0 Not tainted [ 2180.142583][T15515] ------------------------------------------------------ [ 2180.142603][T15515] syz.3.13285/15515 is trying to acquire lock: [ 2180.142613][T15515] ffffffff8e12e100 (console_owner){-...}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 2180.142657][T15515] [ 2180.142657][T15515] but task is already holding lock: [ 2180.142662][T15515] ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 2180.142704][T15515] [ 2180.142704][T15515] which lock already depends on the new lock. [ 2180.142704][T15515] [ 2180.142709][T15515] [ 2180.142709][T15515] the existing dependency chain (in reverse order) is: [ 2180.142715][T15515] [ 2180.142715][T15515] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 2180.142735][T15515] lock_acquire+0x120/0x360 [ 2180.142757][T15515] _raw_spin_lock_nested+0x32/0x50 [ 2180.142777][T15515] raw_spin_rq_lock_nested+0x2a/0x140 [ 2180.142799][T15515] task_rq_lock+0xbc/0x470 [ 2180.142820][T15515] cgroup_move_task+0x92/0x2a0 [ 2180.142836][T15515] css_set_move_task+0x658/0x9e0 [ 2180.142853][T15515] cgroup_post_fork+0x1ef/0x790 [ 2180.142869][T15515] copy_process+0x3862/0x3c00 [ 2180.142884][T15515] kernel_clone+0x21e/0x840 [ 2180.142901][T15515] user_mode_thread+0xdd/0x140 [ 2180.142917][T15515] rest_init+0x23/0x300 [ 2180.142930][T15515] start_kernel+0x3a9/0x410 [ 2180.142944][T15515] x86_64_start_reservations+0x24/0x30 [ 2180.142964][T15515] x86_64_start_kernel+0x143/0x1c0 [ 2180.142982][T15515] common_startup_64+0x13e/0x147 [ 2180.143002][T15515] [ 2180.143002][T15515] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 2180.143022][T15515] lock_acquire+0x120/0x360 [ 2180.143043][T15515] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2180.143061][T15515] try_to_wake_up+0x67/0x12b0 [ 2180.143078][T15515] __wake_up_common_lock+0x137/0x1f0 [ 2180.143096][T15515] tty_port_default_wakeup+0xa2/0xf0 [ 2180.143112][T15515] serial8250_tx_chars+0x72e/0x970 [ 2180.143134][T15515] serial8250_handle_irq+0x633/0xbb0 [ 2180.143156][T15515] serial8250_default_handle_irq+0xbf/0x1e0 [ 2180.143173][T15515] serial8250_interrupt+0x8a/0x160 [ 2180.143191][T15515] __handle_irq_event_percpu+0x289/0x980 [ 2180.143209][T15515] handle_irq_event+0x8b/0x1e0 [ 2180.143226][T15515] handle_edge_irq+0x23b/0xa10 [ 2180.143241][T15515] __common_interrupt+0x141/0x1f0 [ 2180.143264][T15515] common_interrupt+0xb6/0xe0 [ 2180.143278][T15515] asm_common_interrupt+0x26/0x40 [ 2180.143292][T15515] pv_native_safe_halt+0x13/0x20 [ 2180.143311][T15515] default_idle+0x13/0x20 [ 2180.143323][T15515] default_idle_call+0x74/0xb0 [ 2180.143335][T15515] do_idle+0x1e8/0x510 [ 2180.143349][T15515] cpu_startup_entry+0x44/0x60 [ 2180.143362][T15515] rest_init+0x2de/0x300 [ 2180.143375][T15515] start_kernel+0x3a9/0x410 [ 2180.143388][T15515] x86_64_start_reservations+0x24/0x30 [ 2180.143407][T15515] x86_64_start_kernel+0x143/0x1c0 [ 2180.143426][T15515] common_startup_64+0x13e/0x147 [ 2180.143445][T15515] [ 2180.143445][T15515] -> #2 (&tty->write_wait){-...}-{3:3}: [ 2180.143465][T15515] lock_acquire+0x120/0x360 [ 2180.143486][T15515] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2180.143503][T15515] __wake_up_common_lock+0x2f/0x1f0 [ 2180.143521][T15515] tty_port_default_wakeup+0xa2/0xf0 [ 2180.143535][T15515] serial8250_tx_chars+0x72e/0x970 [ 2180.143557][T15515] serial8250_handle_irq+0x633/0xbb0 [ 2180.143579][T15515] serial8250_default_handle_irq+0xbf/0x1e0 [ 2180.143603][T15515] serial8250_interrupt+0x8a/0x160 [ 2180.143622][T15515] __handle_irq_event_percpu+0x289/0x980 [ 2180.143640][T15515] handle_irq_event+0x8b/0x1e0 [ 2180.143657][T15515] handle_edge_irq+0x23b/0xa10 [ 2180.143672][T15515] __common_interrupt+0x141/0x1f0 [ 2180.143694][T15515] common_interrupt+0xb6/0xe0 [ 2180.143708][T15515] asm_common_interrupt+0x26/0x40 [ 2180.143722][T15515] pv_native_safe_halt+0x13/0x20 [ 2180.143741][T15515] default_idle+0x13/0x20 [ 2180.143753][T15515] default_idle_call+0x74/0xb0 [ 2180.143766][T15515] do_idle+0x1e8/0x510 [ 2180.143778][T15515] cpu_startup_entry+0x44/0x60 [ 2180.143793][T15515] rest_init+0x2de/0x300 [ 2180.143808][T15515] start_kernel+0x3a9/0x410 [ 2180.143820][T15515] x86_64_start_reservations+0x24/0x30 [ 2180.143839][T15515] x86_64_start_kernel+0x143/0x1c0 [ 2180.143856][T15515] common_startup_64+0x13e/0x147 [ 2180.143874][T15515] [ 2180.143874][T15515] -> #1 (&port_lock_key){-...}-{3:3}: [ 2180.143893][T15515] lock_acquire+0x120/0x360 [ 2180.143912][T15515] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2180.143928][T15515] serial8250_console_write+0x17e/0x1ba0 [ 2180.143941][T15515] console_flush_all+0x728/0xc40 [ 2180.143956][T15515] console_unlock+0xc4/0x270 [ 2180.143969][T15515] vprintk_emit+0x5b7/0x7a0 [ 2180.143983][T15515] _printk+0xcf/0x120 [ 2180.144001][T15515] register_console+0xa8b/0xf90 [ 2180.144017][T15515] univ8250_console_init+0x3a/0x70 [ 2180.144035][T15515] console_init+0x10e/0x430 [ 2180.144052][T15515] start_kernel+0x254/0x410 [ 2180.144064][T15515] x86_64_start_reservations+0x24/0x30 [ 2180.144082][T15515] x86_64_start_kernel+0x143/0x1c0 [ 2180.144099][T15515] common_startup_64+0x13e/0x147 [ 2180.144117][T15515] [ 2180.144117][T15515] -> #0 (console_owner){-...}-{0:0}: [ 2180.144135][T15515] validate_chain+0xb9b/0x2140 [ 2180.144148][T15515] __lock_acquire+0xab9/0xd20 [ 2180.144167][T15515] lock_acquire+0x120/0x360 [ 2180.144186][T15515] console_flush_all+0x6d2/0xc40 [ 2180.144202][T15515] console_unlock+0xc4/0x270 [ 2180.144215][T15515] vprintk_emit+0x5b7/0x7a0 [ 2180.144228][T15515] _printk+0xcf/0x120 [ 2180.144245][T15515] should_fail_ex+0x3f5/0x560 [ 2180.144262][T15515] strncpy_from_user+0x36/0x290 [ 2180.144277][T15515] strncpy_from_user_nofault+0x72/0x150 [ 2180.144294][T15515] bpf_probe_read_compat_str+0xe2/0x180 [ 2180.144307][T15515] bpf_prog_5646b9e3b5361e32+0x75/0x7d [ 2180.144319][T15515] bpf_trace_run2+0x281/0x4b0 [ 2180.144335][T15515] __bpf_trace_tlb_flush+0xf5/0x150 [ 2180.144353][T15515] trace_tlb_flush+0x115/0x140 [ 2180.144371][T15515] switch_mm_irqs_off+0x53e/0x7a0 [ 2180.144388][T15515] __schedule+0x110e/0x4cc0 [ 2180.144403][T15515] preempt_schedule_common+0x83/0xd0 [ 2180.144420][T15515] preempt_schedule+0xae/0xc0 [ 2180.144436][T15515] preempt_schedule_thunk+0x16/0x30 [ 2180.144457][T15515] __local_bh_enable_ip+0x13e/0x1c0 [ 2180.144470][T15515] bpf_test_run+0x376/0x7b0 [ 2180.144489][T15515] bpf_prog_test_run_skb+0xb30/0x1560 [ 2180.144507][T15515] bpf_prog_test_run+0x2c4/0x340 [ 2180.144525][T15515] __sys_bpf+0x581/0x870 [ 2180.144541][T15515] __x64_sys_bpf+0x7c/0x90 [ 2180.144556][T15515] do_syscall_64+0xfa/0x3b0 [ 2180.144575][T15515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2180.144593][T15515] [ 2180.144593][T15515] other info that might help us debug this: [ 2180.144593][T15515] [ 2180.144598][T15515] Chain exists of: [ 2180.144598][T15515] console_owner --> &p->pi_lock --> &rq->__lock [ 2180.144598][T15515] [ 2180.144620][T15515] Possible unsafe locking scenario: [ 2180.144620][T15515] [ 2180.144625][T15515] CPU0 CPU1 [ 2180.144629][T15515] ---- ---- [ 2180.144634][T15515] lock(&rq->__lock); [ 2180.144643][T15515] lock(&p->pi_lock); [ 2180.144654][T15515] lock(&rq->__lock); [ 2180.144664][T15515] lock(console_owner); [ 2180.144674][T15515] [ 2180.144674][T15515] *** DEADLOCK *** [ 2180.144674][T15515] [ 2180.144678][T15515] 5 locks held by syz.3.13285/15515: [ 2180.144687][T15515] #0: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: bpf_test_timer_enter+0x1a/0x140 [ 2180.144727][T15515] #1: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 2180.144767][T15515] #2: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x186/0x4b0 [ 2180.144802][T15515] #3: ffffffff8e12e160 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 2180.144838][T15515] #4: ffffffff8e015a30 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 2180.144872][T15515] [ 2180.144872][T15515] stack backtrace: [ 2180.144880][T15515] CPU: 1 UID: 0 PID: 15515 Comm: syz.3.13285 Not tainted syzkaller #0 PREEMPT(full) [ 2180.144897][T15515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2180.144907][T15515] Call Trace: [ 2180.144913][T15515] [ 2180.144920][T15515] dump_stack_lvl+0x189/0x250 [ 2180.144941][T15515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2180.144959][T15515] ? __pfx__printk+0x10/0x10 [ 2180.144981][T15515] ? print_lock_name+0xde/0x100 [ 2180.145004][T15515] print_circular_bug+0x2ee/0x310 [ 2180.145022][T15515] check_noncircular+0x134/0x160 [ 2180.145042][T15515] validate_chain+0xb9b/0x2140 [ 2180.145071][T15515] __lock_acquire+0xab9/0xd20 [ 2180.145096][T15515] ? console_flush_all+0x13a/0xc40 [ 2180.145113][T15515] lock_acquire+0x120/0x360 [ 2180.145134][T15515] ? console_flush_all+0x13a/0xc40 [ 2180.145156][T15515] ? do_raw_spin_unlock+0x122/0x240 [ 2180.145174][T15515] ? console_flush_all+0x13a/0xc40 [ 2180.145192][T15515] console_flush_all+0x6d2/0xc40 [ 2180.145209][T15515] ? console_flush_all+0x13a/0xc40 [ 2180.145228][T15515] ? console_flush_all+0x13a/0xc40 [ 2180.145249][T15515] ? __pfx_console_flush_all+0x10/0x10 [ 2180.145273][T15515] ? is_printk_cpu_sync_owner+0x32/0x40 [ 2180.145295][T15515] console_unlock+0xc4/0x270 [ 2180.145312][T15515] ? __pfx_console_unlock+0x10/0x10 [ 2180.145330][T15515] ? is_printk_cpu_sync_owner+0x32/0x40 [ 2180.145353][T15515] vprintk_emit+0x5b7/0x7a0 [ 2180.145370][T15515] ? __pfx_vprintk_emit+0x10/0x10 [ 2180.145384][T15515] ? perf_trace_lock+0xec/0x3b0 [ 2180.145399][T15515] ? perf_trace_lock+0xec/0x3b0 [ 2180.145420][T15515] _printk+0xcf/0x120 [ 2180.145440][T15515] ? __pfx____ratelimit+0x10/0x10 [ 2180.145461][T15515] ? __pfx__printk+0x10/0x10 [ 2180.145488][T15515] should_fail_ex+0x3f5/0x560 [ 2180.145510][T15515] strncpy_from_user+0x36/0x290 [ 2180.145526][T15515] ? bpf_trace_run2+0x186/0x4b0 [ 2180.145547][T15515] strncpy_from_user_nofault+0x72/0x150 [ 2180.145566][T15515] bpf_probe_read_compat_str+0xe2/0x180 [ 2180.145583][T15515] bpf_prog_5646b9e3b5361e32+0x75/0x7d [ 2180.145602][T15515] bpf_trace_run2+0x281/0x4b0 [ 2180.145620][T15515] ? bpf_trace_run2+0x186/0x4b0 [ 2180.145639][T15515] ? __pfx_bpf_trace_run2+0x10/0x10 [ 2180.145660][T15515] ? __pfx_bpf_trace_run4+0x10/0x10 [ 2180.145678][T15515] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 2180.145700][T15515] __bpf_trace_tlb_flush+0xf5/0x150 [ 2180.145720][T15515] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 2180.145739][T15515] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 2180.145762][T15515] ? perf_cgroup_switch+0xe6/0x910 [ 2180.145780][T15515] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 2180.145800][T15515] ? psi_group_change+0xab8/0x1050 [ 2180.145816][T15515] trace_tlb_flush+0x115/0x140 [ 2180.145836][T15515] switch_mm_irqs_off+0x53e/0x7a0 [ 2180.145859][T15515] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 2180.145877][T15515] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 2180.145902][T15515] __schedule+0x110e/0x4cc0 [ 2180.145934][T15515] ? __pfx___schedule+0x10/0x10 [ 2180.145954][T15515] ? perf_trace_preemptirq_template+0xa3/0x340 [ 2180.145974][T15515] ? irqentry_enter+0x3d/0x60 [ 2180.145999][T15515] ? preempt_schedule+0xae/0xc0 [ 2180.146016][T15515] ? bpf_test_run+0x197/0x7b0 [ 2180.146037][T15515] preempt_schedule_common+0x83/0xd0 [ 2180.146056][T15515] preempt_schedule+0xae/0xc0 [ 2180.146074][T15515] ? __pfx_preempt_schedule+0x10/0x10 [ 2180.146094][T15515] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 2180.146110][T15515] preempt_schedule_thunk+0x16/0x30 [ 2180.146136][T15515] __local_bh_enable_ip+0x13e/0x1c0 [ 2180.146151][T15515] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2180.146167][T15515] ? bpf_test_timer_continue+0x136/0x350 [ 2180.146190][T15515] ? bpf_test_run+0x197/0x7b0 [ 2180.146209][T15515] bpf_test_run+0x376/0x7b0 [ 2180.146240][T15515] ? __pfx_bpf_test_run+0x10/0x10 [ 2180.146273][T15515] ? slab_build_skb+0x273/0x3e0 [ 2180.146295][T15515] ? convert___skb_to_skb+0x3d/0x590 [ 2180.146316][T15515] bpf_prog_test_run_skb+0xb30/0x1560 [ 2180.146345][T15515] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 2180.146366][T15515] bpf_prog_test_run+0x2c4/0x340 [ 2180.146388][T15515] __sys_bpf+0x581/0x870 [ 2180.146408][T15515] ? __pfx___sys_bpf+0x10/0x10 [ 2180.146435][T15515] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2180.146456][T15515] ? __pfx_ksys_write+0x10/0x10 [ 2180.146475][T15515] ? rcu_is_watching+0x15/0xb0 [ 2180.146493][T15515] __x64_sys_bpf+0x7c/0x90 [ 2180.146510][T15515] do_syscall_64+0xfa/0x3b0 [ 2180.146530][T15515] ? lockdep_hardirqs_on+0x9c/0x150 [ 2180.146549][T15515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2180.146563][T15515] ? clear_bhb_loop+0x60/0xb0 [ 2180.146579][T15515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2180.146598][T15515] RIP: 0033:0x7fc18a98ebe9 [ 2180.146610][T15515] Code: Unable to access opcode bytes at 0x7fc18a98ebbf. [ 2180.146617][T15515] RSP: 002b:00007fc18b8b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2180.146631][T15515] RAX: ffffffffffffffda RBX: 00007fc18abb5fa0 RCX: 00007fc18a98ebe9 [ 2180.146642][T15515] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a [ 2180.146652][T15515] RBP: 00007fc18b8b1090 R08: 0000000000000000 R09: 0000000000000000 [ 2180.146661][T15515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2180.146670][T15515] R13: 00007fc18abb6038 R14: 00007fc18abb5fa0 R15: 00007ffc4ab9df78 [ 2180.146689][T15515] [ 2181.480887][T15515] CPU: 1 UID: 0 PID: 15515 Comm: syz.3.13285 Not tainted syzkaller #0 PREEMPT(full) [ 2181.480909][T15515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2181.480918][T15515] Call Trace: [ 2181.480927][T15515] [ 2181.480935][T15515] dump_stack_lvl+0x189/0x250 [ 2181.480958][T15515] ? __pfx____ratelimit+0x10/0x10 [ 2181.480979][T15515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2181.480996][T15515] ? __pfx__printk+0x10/0x10 [ 2181.481023][T15515] should_fail_ex+0x414/0x560 [ 2181.481045][T15515] strncpy_from_user+0x36/0x290 [ 2181.481063][T15515] ? bpf_trace_run2+0x186/0x4b0 [ 2181.481084][T15515] strncpy_from_user_nofault+0x72/0x150 [ 2181.481104][T15515] bpf_probe_read_compat_str+0xe2/0x180 [ 2181.481122][T15515] bpf_prog_5646b9e3b5361e32+0x75/0x7d [ 2181.481136][T15515] bpf_trace_run2+0x281/0x4b0 [ 2181.481155][T15515] ? bpf_trace_run2+0x186/0x4b0 [ 2181.481175][T15515] ? __pfx_bpf_trace_run2+0x10/0x10 [ 2181.481195][T15515] ? __pfx_bpf_trace_run4+0x10/0x10 [ 2181.481213][T15515] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 2181.481240][T15515] __bpf_trace_tlb_flush+0xf5/0x150 [ 2181.481260][T15515] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 2181.481280][T15515] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 2181.481303][T15515] ? perf_cgroup_switch+0xe6/0x910 [ 2181.481322][T15515] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 2181.481341][T15515] ? psi_group_change+0xab8/0x1050 [ 2181.481357][T15515] trace_tlb_flush+0x115/0x140 [ 2181.481378][T15515] switch_mm_irqs_off+0x53e/0x7a0 [ 2181.481401][T15515] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 2181.481420][T15515] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 2181.481446][T15515] __schedule+0x110e/0x4cc0 [ 2181.481479][T15515] ? __pfx___schedule+0x10/0x10 [ 2181.481500][T15515] ? perf_trace_preemptirq_template+0xa3/0x340 [ 2181.481519][T15515] ? irqentry_enter+0x3d/0x60 [ 2181.481544][T15515] ? preempt_schedule+0xae/0xc0 [ 2181.481561][T15515] ? bpf_test_run+0x197/0x7b0 [ 2181.481582][T15515] preempt_schedule_common+0x83/0xd0 [ 2181.481602][T15515] preempt_schedule+0xae/0xc0 [ 2181.481620][T15515] ? __pfx_preempt_schedule+0x10/0x10 [ 2181.481640][T15515] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 2181.481656][T15515] preempt_schedule_thunk+0x16/0x30 [ 2181.481683][T15515] __local_bh_enable_ip+0x13e/0x1c0 [ 2181.481698][T15515] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2181.481715][T15515] ? bpf_test_timer_continue+0x136/0x350 [ 2181.481738][T15515] ? bpf_test_run+0x197/0x7b0 [ 2181.481757][T15515] bpf_test_run+0x376/0x7b0 [ 2181.481789][T15515] ? __pfx_bpf_test_run+0x10/0x10 [ 2181.481822][T15515] ? slab_build_skb+0x273/0x3e0 [ 2181.481844][T15515] ? convert___skb_to_skb+0x3d/0x590 [ 2181.481866][T15515] bpf_prog_test_run_skb+0xb30/0x1560 [ 2181.481895][T15515] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 2181.481916][T15515] bpf_prog_test_run+0x2c4/0x340 [ 2181.481941][T15515] __sys_bpf+0x581/0x870 [ 2181.481962][T15515] ? __pfx___sys_bpf+0x10/0x10 [ 2181.481989][T15515] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2181.482010][T15515] ? __pfx_ksys_write+0x10/0x10 [ 2181.482029][T15515] ? rcu_is_watching+0x15/0xb0 [ 2181.482048][T15515] __x64_sys_bpf+0x7c/0x90 [ 2181.482065][T15515] do_syscall_64+0xfa/0x3b0 [ 2181.482086][T15515] ? lockdep_hardirqs_on+0x9c/0x150 [ 2181.482105][T15515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2181.482120][T15515] ? clear_bhb_loop+0x60/0xb0 [ 2181.482137][T15515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2181.482153][T15515] RIP: 0033:0x7fc18a98ebe9 [ 2181.482166][T15515] Code: Unable to access opcode bytes at 0x7fc18a98ebbf. [ 2181.482174][T15515] RSP: 002b:00007fc18b8b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2181.482189][T15515] RAX: ffffffffffffffda RBX: 00007fc18abb5fa0 RCX: 00007fc18a98ebe9 [ 2181.482201][T15515] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a [ 2181.482211][T15515] RBP: 00007fc18b8b1090 R08: 0000000000000000 R09: 0000000000000000 [ 2181.482226][T15515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2181.482235][T15515] R13: 00007fc18abb6038 R14: 00007fc18abb5fa0 R15: 00007ffc4ab9df78 [ 2181.482255][T15515] [ 2181.874992][T15518] netlink: 'syz.0.13281': attribute type 3 has an invalid length. [ 2181.883154][T15518] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.13281'.