last executing test programs: 11.53824225s ago: executing program 0 (id=1484): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x4, @perf_config_ext={0x1}, 0x10a0a0, 0x58, 0x3, 0x0, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x0, 0x6e8}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x40f0}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfff0}, 0x0) 11.144603859s ago: executing program 0 (id=1488): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000700)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xb3) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0xa, 0x1, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[], 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x4, 0x1, 0x0, 0x0, 0x8, 0x8820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc8, 0x9}, 0x0, 0xc8, 0x0, 0x6, 0x2, 0x4388, 0x0, 0x0, 0x0, 0x0, 0x40000000000003ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x301, 0xffff0000, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xac}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) write$cgroup_subtree(r7, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112bb000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.908168858s ago: executing program 0 (id=1492): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb, 0xffffffffffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x2, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x8000, 0x5, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8a, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4000000, 0x9, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80000, 0x0, 0x0, 0x319e, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x4, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x401]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) 10.751897607s ago: executing program 0 (id=1493): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xa}, 0x118d2a, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 10.457739084s ago: executing program 0 (id=1498): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xe800, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x7d, &(0x7f0000000000), 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)=0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) recvmsg$unix(r5, &(0x7f00000008c0)={&(0x7f0000000780), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000800)=""/18, 0x12}], 0x1, &(0x7f0000000880)}, 0x40002120) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x804) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r7, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x90, 0x3, 0x7, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8000000000000001}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3ff}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x26fa7a32}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0xd0}, 0x1) perf_event_open(&(0x7f0000000640)={0x4, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5, 0x95cb, 0xa2f984b54f694939, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x1, @perf_bp={0x0, 0x9}, 0x11efa, 0x4, 0x80209c, 0x7, 0x5, 0xfffff273, 0xfffc, 0x0, 0x2000, 0x0, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$AUDIT_SET(r3, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, 0x3e9, 0x506, 0x70bd2b, 0x25dfdbfb, {0x9, 0x0, 0x2, 0x0, 0xfffff001, 0x7, 0x7ff, 0x42, 0x0, 0x9c, 0x9}, ["", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044050}, 0x20000000) r8 = openat$cgroup_ro(r2, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r8, &(0x7f0000000200), 0x43451) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000100000000000000feffff0318110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000004b000000850000001100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000b8000000b80000000400000005000000000000100a000000070000000000000e0200000001dd6200000000000300000d00000000080000000000000007000000040000000700000000000000080000000000000903000000060000000000000700000000030000000000000c010000000d00000000000012040000000800000004000093000000000a00000004000000020000000900000005000000ffffffff0c00000005000000030000000b0000008f080000000100000e0000000000001203000000002e5f00"], &(0x7f00000003c0)=""/230, 0xd4, 0xe6, 0x0, 0x7ff, 0x10000, @value=r6}, 0x28) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000080)={'macvtap0\x00'}) 10.119103161s ago: executing program 0 (id=1504): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x6}, 0x0, 0x2, 0x4, 0x3, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x40080) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44897}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f00000000c0)=@allocspi={0xf8, 0x24, 0x1, 0x70bd25, 0x25dfdbff, {{{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4e23, 0x0, 0x4e20, 0x3, 0x2, 0x20, 0x0, 0x3a}, {@in=@local, 0x4d5, 0x33}, @in=@local, {0x8, 0x10, 0xe0, 0x8001, 0x8, 0x7f7, 0xaaf0, 0x2}, {0x500000, 0x4, 0x4, 0x1}, {0xc908, 0x2127268a, 0x8}, 0x70bd2b, 0x3507, 0x0, 0x0, 0x0, 0x10}, 0x200ff, 0x80000002}}, 0xf8}, 0x1, 0x0, 0x0, 0x880}, 0x48000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0xa249901dd385797, 0x7, 0x5, &(0x7f0000000000)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffef}, 0x94) 9.631054402s ago: executing program 32 (id=1504): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x6}, 0x0, 0x2, 0x4, 0x3, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x40080) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44897}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f00000000c0)=@allocspi={0xf8, 0x24, 0x1, 0x70bd25, 0x25dfdbff, {{{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4e23, 0x0, 0x4e20, 0x3, 0x2, 0x20, 0x0, 0x3a}, {@in=@local, 0x4d5, 0x33}, @in=@local, {0x8, 0x10, 0xe0, 0x8001, 0x8, 0x7f7, 0xaaf0, 0x2}, {0x500000, 0x4, 0x4, 0x1}, {0xc908, 0x2127268a, 0x8}, 0x70bd2b, 0x3507, 0x0, 0x0, 0x0, 0x10}, 0x200ff, 0x80000002}}, 0xf8}, 0x1, 0x0, 0x0, 0x880}, 0x48000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000150400003d0301000000000095000f00000000006926000000000000bf67000000000000450700000fff070035060000f0000000170600000ee50014bf250000000000005d670000000000006507000006000000070700004c0001000f75000000000000bf54000000000000070400000400f9ff2d440100000000009500000000000000050000000000000095000700000000000172dbabb733a0e757c7c45402000000a2d23da04d1ffc187f9955911aa1a2ba7ba030c7267c2de00435fd253cc0f0d9b2c3127c46b0f4f95345de3188f0d808398d09ee4dc258d726eae098804de25df627a64ab8efde50fd7f1d58d67e684c45e506598bae66ea1a7cd29032de94983dfab0e5043daf1b46bef5135c65377bdbe65d525743d88ef4b2ee62652b07e8a4b6e6355cecc13a5ddf4157f2bfab7201112a30274101fceee66eca91bd5fecb254ab358488c400330171128be291297947d474c570a385a44dd9ff4ae730ae9d0ae42d8814a8c96f101df7da839bcdd7b7c33c8cfe6fd599543ac604d8dd42fc66cdb79cd09ceeedce1e69f11967919f82b0276c90420d08897ee8514b43533f07132589a0a37110fd8571b1e69251bba35cd06c8bd430aafbecfd33757b7dc4803123e9107e5cceaec2a391f9b9b577295ac3864f6c1e30e6190a055953e18bedd1859acdd15af7209d15950f9195b401e74f8b5210e28d46dde2658b4695d9ac9ce7cbefc164a5454fc4da6104db281e18a8992b9f8c82b895da647e6ea4cb622314c5c48abfd620adf7757c23a31a619edcfb45a402c5fced05e5274e08a313d6c5fdd0a8d36b1a268056e6f7e9a6daa5632cda5ad2a9ebfac980c7db63137c226f712e522aad0f13b0e5b43d837d040f813d011538"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0xa249901dd385797, 0x7, 0x5, &(0x7f0000000000)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffef}, 0x94) 5.061496714s ago: executing program 3 (id=1535): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c010000100001000000000000000000fc000000000000000000000000000001e000000200"/56, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe80040000000000000000000000003450dccd006c000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000050000000000000000000000000000000a0000004000000000000000480003006465666c6164650000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d00000000000c001500590735000500000076a65debd01c0278e7cd14b39e5834e9e75e8797d29abe88864adb7bcf29973cea7e49ce9173c3e2ce2cc1d7d2e7b96dffa38bd5d041f7034139c96809b2027095c3709f908a3f16f3d8e95af900ec7e2bcd3e95e1bb1363b0c22a6bee709269a64a4e09ba46b60dc7c9f5be8c8501e7699e2b0903b2158e115479190c6919111353b42d49731e2a9d08ca639e47a96645d9f0259487bdf5a8e18f03a2db17c241d241a6cd2f1ac2fa3caaeaa283ebeea14e1045b94756249a71b101014032"], 0x14c}}, 0x40000) socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000008385000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000580)='percpu_alloc_percpu\x00', r2}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000000000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000"], 0x68}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=@newtaction={0x68, 0x30, 0xffff, 0x4000, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x0, 0xc0000000, 0x3, 0x7}, 0x3, r5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x2404c080}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x10, 0x9, 0x9, 0x3b320999548d384b, r1, 0xc2c, '\x00', r5, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140f0011000000000000000000000001000000fc00f5ffffff00001400000000000000010000004f"], 0x4c}, 0x20001850) 4.431624842s ago: executing program 3 (id=1538): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x30}, 0x40880) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r3, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, &(0x7f00000006c0)=""/102, 0x0, 0x66, 0x1, 0x4}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x18, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x43c5ea668360e6a3}}}, &(0x7f0000000500)='GPL\x00', 0x7, 0xb1, &(0x7f0000000600)=""/177, 0x41100, 0x10, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xeb}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}]}}, &(0x7f0000000a80)=""/172, 0x46, 0xac, 0x9}, 0x20) 4.304899229s ago: executing program 1 (id=1540): r0 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x20040000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x28, 0x1, 0x28, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x800) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x23, &(0x7f0000000000), 0xff7b) (fail_nth: 2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) 4.126536256s ago: executing program 1 (id=1543): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xb, 0x42, 0x9c}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x80, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0xfc00) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="91d2e7b67db36628d06bbf673a3818000000003fa79923997b0500000000004aff889c54b7a1766d0f7b51bbc2222d6c23c8d9e89337c2de98a3fe4215c1a9ed5250a497976ef5b72f4e7a9d5156cef127044195568a50a9d8e93709b32eb88caff95f6210d20ab4655e10718a0569ba64fcd593f16a17149362a039a0cde1ad00521f49b51551dbe693c3182a28257863af697f9b97a3c7815503ee3c512ad011a178f88bd7adac171c"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x45, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000080000a9040000000200000000390000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r7, &(0x7f0000000040)}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff9a) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 4.005759802s ago: executing program 2 (id=1545): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4800000000000008, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.464757774s ago: executing program 4 (id=1546): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4800000000000008, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x6, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x27}}, @exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.44736521s ago: executing program 3 (id=1547): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c010000100001000000000000000000fc000000000000000000000000000001e000000200"/56, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x14c}}, 0x40000) socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000008385000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000580)='percpu_alloc_percpu\x00', r2}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000000000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000"], 0x68}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=@newtaction={0x68, 0x30, 0xffff, 0x4000, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x0, 0xc0000000, 0x3, 0x7}, 0x3, r5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x2404c080}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x10, 0x9, 0x9, 0x3b320999548d384b, r1, 0xc2c, '\x00', r5, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140f0011000000000000000000000001000000fc00f5ffffff00001400000000000000010000004f"], 0x4c}, 0x20001850) 3.349478837s ago: executing program 2 (id=1548): sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x140d, 0x300, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@replay_esn_val={0x1c, 0x17, {0x0, 0xfffffffd, 0x0, 0x0, 0x70bd2c}}, @algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}, 0x0, 0x18}}]}, 0x158}}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000711808000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc8f}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x20004000) 3.237225876s ago: executing program 1 (id=1549): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x1}, 0x4520, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc000000000000000000000000000000ff01000000000000000000000000000100000004000000000a00608087000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000fdffffffffffffff0000004000000000f8975bb794ca30e20000000000000000fefffffdffffffff0000000000000000000000000000000000000000000000000900000000b4c416d35251d59318ce914e000000caf9cbbbc2413cb10d9cdf0608295e553947b3"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a0001", 0x37}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x1f00, 0x4, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xf}, 0x100810, 0x100, 0x100, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f0000000040)=0x8000000000000000) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x1, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10fb7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x4, 0xffffebff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x11, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0xc0}, 0x12020) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) 3.235906386s ago: executing program 2 (id=1550): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote, 0x40000}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x2c, 0x2, 0x2, 0x1, 0x0, [@remote]}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}, @dstopts={{0x18, 0x29, 0x37, {0x67}}}], 0x58}, 0x0) 3.130776487s ago: executing program 4 (id=1551): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) close(r1) 3.075720834s ago: executing program 4 (id=1552): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000340)=""/4106, 0x100a}], 0x1}, 0x0) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000140)=[{0x2c, 0x0, 0x0, 0xfffff00c}, {0x6, 0x2, 0x8}]}) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'net'}, {0x2b, 'rlimit'}, {0x0, 'blkio'}, {0x2d, 'net_prio'}, {0x2d, 'cpuset'}]}, 0x26) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2a}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) close(0xffffffffffffffff) r3 = getpid() r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x58412, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7bffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000000000000000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000040)={'macvlan0\x00', @random="0100"}) 2.111234119s ago: executing program 3 (id=1553): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2}]}, 0x94) sendmsg$inet(r2, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0x1}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540), 0x0, 0xc0, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f00000009c0)=@delqdisc={0x60, 0x25, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff7, 0x1}, {0xfff2, 0x1}, {0xb, 0x5}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xd670, "4867b5a67a2da5e458e658912cce7032"}}}, @TCA_RATE={0x6, 0x5, {0x9, 0x61}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5fa}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x84}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, r1, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)}], 0x1, 0x0, 0x0, 0x39c}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40) socket$kcm(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x7, 0x8, 0x1, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x20040000) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001000000000001, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x90a2, 0xca, 0x2, 0x1, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) socket$kcm(0x2, 0xa, 0x2) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0xa) 2.056665348s ago: executing program 2 (id=1554): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x58}}, 0x20004800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1945}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xa) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0xb3) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='c *'], 0xa) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x6ad40, 0x0) ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f0000000280)) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xa9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_config_ext={0x1, 0x6}, 0x800, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000000c0)='cpu\t>0&&\t') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) socket$kcm(0xf, 0x3, 0x2) r7 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0xfe33) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$NFT_MSG_GETCHAIN(r1, 0x0, 0x8000) 2.036541362s ago: executing program 4 (id=1555): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="1800000000000000000000000000000071104f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x800) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) 1.993727856s ago: executing program 1 (id=1556): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x30}, 0x40880) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r3, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, &(0x7f00000006c0)=""/102, 0x0, 0x66, 0x1, 0x4}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x18, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x43c5ea668360e6a3}}}, &(0x7f0000000500)='GPL\x00', 0x7, 0xb1, &(0x7f0000000600)=""/177, 0x41100, 0x10, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xeb}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}]}}, &(0x7f0000000a80)=""/172, 0x46, 0xac, 0x9}, 0x20) 1.760424833s ago: executing program 4 (id=1557): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4800000000000008, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.166363572s ago: executing program 2 (id=1558): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x1dbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="180000000414010029bd7000ffdbdf250800010002"], 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000004000000080000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000fb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000000097f512801d11e63c3121f239184061f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r4}, 0x10) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0000000206050000000000000000000000fffc120003006269746d61703a69702c6d616300000005000400000000000900020073587a31000000002000078005000300200000000c00018008000140ffffffff08000840000000e405000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90724fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 590.516718ms ago: executing program 1 (id=1559): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000, 0x0, 0x0, 0x1, 0x40000, 0x0, 0xffff}, 0x0, 0x200, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x100000007f, 0x442, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x1000000200, 0x4, 0x9, 0x0, 0x400000a, 0xfffc, 0x0, 0x5, 0x0, 0x63}, 0x0, 0x1, r0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r1, &(0x7f0000001240)={&(0x7f0000000a00)=@in6={0xa, 0x4e23, 0xe, @empty, 0x7}, 0x80, 0x0, 0x0, 0x0, 0x300}, 0x0) 336.595048ms ago: executing program 1 (id=1560): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x81, 0x9}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33fe0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000001300)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, 0x0, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000070000000850000005000000095", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$kcm(0xa, 0x5, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483ad4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000000000bcc3fbe7d90de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad04a82ff3cfadcf65eb92adc6c68d66b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a9a362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e2486472b5cba1f3346c1e8e23deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a825360423c1cbc8b5d19167152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd246128f41bcb02000000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca450139c558000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de42957ffe9bb6d752e68d2bc2ce777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f5024df1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfde3be9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118afdba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141489ed926b822becead7a0a2b4a4c008ab16b616d60f347e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c442ad2fe9baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc00000000002364bbd93964a8d0bdc802b9be2563838a91802e3deb150a6a97a73b168ccd8f7872"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r7, 0x29, 0x48, &(0x7f0000000100)=r8, 0x120) close(r6) 335.576941ms ago: executing program 3 (id=1561): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], &(0x7f0000000280)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33fe0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) 307.695583ms ago: executing program 2 (id=1562): r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x5, 0xb5, 0xff, 0x2, 0x0, 0xffffffff, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x7fffffffffffffff, 0x3ff}, 0x104290, 0x3, 0x7f, 0x5, 0x4be9, 0x800, 0x9, 0x0, 0x6, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040), 0x6}, 0xc80, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x1, 0x0, 0x3}, 0x0, 0x1, r0, 0xa) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1e) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x0, 0x772, 0xf0, &(0x7f0000001040)="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", &(0x7f0000000240)=""/240, 0x9, 0x0, 0x0, 0xbb2, 0x0, &(0x7f0000002040)="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", 0x2, 0x0, 0xcc}, 0x50) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xb3) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) socket$kcm(0x1e, 0x4, 0x0) r5 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r5, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r5], 0x48}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fb, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x70, 0x0, 0x9, 0x801, 0x0, 0x0, {0x5}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d0000009700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7ec6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492aba0883783d2831210e00d2bfea3bf97ff8836d000000000000946bdb747e416b3064edb4f5aea06eba207ddab9f9baf98bc5192f23d95d33357fc55f92e5937e10995059f3348f69667b9260d504ba96446e1437af6fa875d9d32fdaaae01e6c74f192a23572ef582b7dd867c163c8cedaa2a2c5baceb37d4a40244c9bdca541cc7e65e20f5b5b735e2f33df9bd0614431d7dc5e47bb31c5b827d51733b64ddad4de1cdadce076d19d62e821b435619fb89fc07f81938200b4ebce83db57a6f5e9b1c2cf4b6ee90772d4865bf448d200e5c4e1e044d3587498128273b65670c02ff5c3c3ca633c41324fdc09e0b2621087db26bb0553612f2be27579ede2344a809e6b27d0044f2337895323357caddb54642dac82ae25deb08e111e0b9fa133c9da85dc50c3454ee0ff915331bd7f32f96fb55c7990334b1a1bc4d5d817b82f9fc278cc4858fbfa4d0f32a863c1ce050caddc5ca3b10c3e63daebba039e9f80fdef113a145ace522e8379474aa8849dcc2501df3ffcb02d29d55a1a2cbe00e836db0e6b0a7ffd680dbcf7b982a956998df3dce0e9091a4d736db69038061e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000a0000000000000003000000850000002c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) socket$kcm(0x10, 0x3, 0x10) 192.767775ms ago: executing program 4 (id=1563): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c010000100001000000000000000000fc000000000000000000000000000001e000000200"/56, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x14c}}, 0x40000) socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000008385000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000580)='percpu_alloc_percpu\x00', r2}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000000000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000"], 0x68}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=@newtaction={0x68, 0x30, 0xffff, 0x4000, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x0, 0xc0000000, 0x3, 0x7}, 0x3, r5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x2404c080}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x10, 0x9, 0x9, 0x3b320999548d384b, r1, 0xc2c, '\x00', r5, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140f0011000000000000000000000001000000fc00f5ffffff00001400000000000000010000004f"], 0x4c}, 0x20001850) 0s ago: executing program 3 (id=1564): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802feffff7f0500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad956", 0xa2}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) kernel console output (not intermixed with test programs): : 'syz.0.1059': attribute type 1 has an invalid length. [ 219.387730][ T8907] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1062'. [ 219.445619][ T8907] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 219.571587][ T8910] netlink: 'syz.2.1063': attribute type 10 has an invalid length. [ 219.591807][ T8911] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1064'. [ 219.611797][ T8910] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1063'. [ 219.655280][ T8911] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1064'. [ 219.676599][ T8916] FAULT_INJECTION: forcing a failure. [ 219.676599][ T8916] name failslab, interval 1, probability 0, space 0, times 0 [ 219.729546][ T8919] netlink: 'syz.3.1067': attribute type 10 has an invalid length. [ 219.733483][ T8916] CPU: 1 UID: 0 PID: 8916 Comm: syz.0.1066 Not tainted syzkaller #0 PREEMPT(full) [ 219.733510][ T8916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 219.733520][ T8916] Call Trace: [ 219.733528][ T8916] [ 219.733535][ T8916] dump_stack_lvl+0x189/0x250 [ 219.733557][ T8916] ? __pfx____ratelimit+0x10/0x10 [ 219.733579][ T8916] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.733600][ T8916] ? __pfx__printk+0x10/0x10 [ 219.733619][ T8916] ? __pfx___might_resched+0x10/0x10 [ 219.733636][ T8916] ? fs_reclaim_acquire+0x7d/0x100 [ 219.733662][ T8916] should_fail_ex+0x414/0x560 [ 219.733691][ T8916] should_failslab+0xa8/0x100 [ 219.733719][ T8916] __kmalloc_cache_noprof+0x6f/0x6f0 [ 219.733739][ T8916] ? ip_set_pernet+0x23/0x240 [ 219.733753][ T8916] ? ip_set_create+0x348/0x1940 [ 219.733775][ T8916] ip_set_create+0x348/0x1940 [ 219.733802][ T8916] ? __mutex_lock+0x335/0x1350 [ 219.733827][ T8916] ? __pfx_ip_set_create+0x10/0x10 [ 219.733881][ T8916] nfnetlink_rcv_msg+0xb4a/0x1130 [ 219.733901][ T8916] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 219.733937][ T8916] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 219.733982][ T8916] ? trace_call_bpf+0xc7/0xb50 [ 219.733998][ T8916] ? __pfx_trace_call_bpf+0x10/0x10 [ 219.734032][ T8916] netlink_rcv_skb+0x205/0x470 [ 219.734054][ T8916] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 219.734074][ T8916] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 219.734105][ T8916] ? bpf_lsm_capable+0x9/0x20 [ 219.734122][ T8916] ? security_capable+0x7e/0x2e0 [ 219.734146][ T8916] nfnetlink_rcv+0x282/0x2590 [ 219.734167][ T8916] ? __dev_queue_xmit+0x27b/0x3b50 [ 219.734191][ T8916] ? __dev_queue_xmit+0x1d79/0x3b50 [ 219.734212][ T8916] ? kasan_save_track+0x3e/0x80 [ 219.734230][ T8916] ? __kasan_slab_alloc+0x6c/0x80 [ 219.734258][ T8916] ? __dev_queue_xmit+0x27b/0x3b50 [ 219.734293][ T8916] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 219.734318][ T8916] ? __pfx___dev_queue_xmit+0x10/0x10 [ 219.734354][ T8916] ? ref_tracker_free+0x63a/0x7d0 [ 219.734372][ T8916] ? __asan_memcpy+0x40/0x70 [ 219.734389][ T8916] ? __pfx_ref_tracker_free+0x10/0x10 [ 219.734403][ T8916] ? __skb_clone+0x63/0x7a0 [ 219.734433][ T8916] ? __skb_clone+0x483/0x7a0 [ 219.734460][ T8916] ? skb_clone+0x246/0x3a0 [ 219.734489][ T8916] ? __netlink_deliver_tap+0x807/0x850 [ 219.734508][ T8916] ? netlink_deliver_tap+0x2e/0x1b0 [ 219.734534][ T8916] ? netlink_deliver_tap+0x2e/0x1b0 [ 219.734561][ T8916] netlink_unicast+0x82c/0x9e0 [ 219.734588][ T8916] ? __pfx_netlink_unicast+0x10/0x10 [ 219.734608][ T8916] ? netlink_sendmsg+0x642/0xb30 [ 219.734625][ T8916] ? skb_put+0x11b/0x210 [ 219.734649][ T8916] netlink_sendmsg+0x805/0xb30 [ 219.734678][ T8916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.734701][ T8916] ? aa_sock_msg_perm+0xf1/0x1d0 [ 219.734721][ T8916] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 219.734743][ T8916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.734764][ T8916] __sock_sendmsg+0x219/0x270 [ 219.734785][ T8916] ____sys_sendmsg+0x505/0x830 [ 219.734816][ T8916] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.734847][ T8916] ? import_iovec+0x74/0xa0 [ 219.734870][ T8916] ___sys_sendmsg+0x21f/0x2a0 [ 219.734894][ T8916] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.734952][ T8916] ? __fget_files+0x2a/0x420 [ 219.734973][ T8916] ? __fget_files+0x3a0/0x420 [ 219.735005][ T8916] __x64_sys_sendmsg+0x19b/0x260 [ 219.735030][ T8916] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 219.735062][ T8916] ? __pfx_ksys_write+0x10/0x10 [ 219.735086][ T8916] ? do_syscall_64+0xbe/0xfa0 [ 219.735111][ T8916] do_syscall_64+0xfa/0xfa0 [ 219.735131][ T8916] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.735151][ T8916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.735168][ T8916] ? clear_bhb_loop+0x60/0xb0 [ 219.735189][ T8916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.735205][ T8916] RIP: 0033:0x7f341078eec9 [ 219.735220][ T8916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.735233][ T8916] RSP: 002b:00007f3411601038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.735252][ T8916] RAX: ffffffffffffffda RBX: 00007f34109e5fa0 RCX: 00007f341078eec9 [ 219.735264][ T8916] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 219.735274][ T8916] RBP: 00007f3411601090 R08: 0000000000000000 R09: 0000000000000000 [ 219.735284][ T8916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.735294][ T8916] R13: 00007f34109e6038 R14: 00007f34109e5fa0 R15: 00007ffced877438 [ 219.735330][ T8916] [ 219.986051][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1068'. [ 220.040171][ T8919] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1067'. [ 220.464252][ T8940] openvswitch: netlink: Flow key attr not present in new flow. [ 220.902038][ T8950] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1078'. [ 221.708619][ T8970] FAULT_INJECTION: forcing a failure. [ 221.708619][ T8970] name failslab, interval 1, probability 0, space 0, times 0 [ 221.723805][ T8970] CPU: 0 UID: 0 PID: 8970 Comm: syz.1.1085 Not tainted syzkaller #0 PREEMPT(full) [ 221.723831][ T8970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 221.723840][ T8970] Call Trace: [ 221.723848][ T8970] [ 221.723855][ T8970] dump_stack_lvl+0x189/0x250 [ 221.723881][ T8970] ? __pfx____ratelimit+0x10/0x10 [ 221.723902][ T8970] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.723918][ T8970] ? __pfx__printk+0x10/0x10 [ 221.723946][ T8970] should_fail_ex+0x414/0x560 [ 221.723975][ T8970] should_failslab+0xa8/0x100 [ 221.724001][ T8970] kmem_cache_alloc_noprof+0x74/0x6e0 [ 221.724023][ T8970] ? skb_ext_add+0x148/0x8f0 [ 221.724050][ T8970] skb_ext_add+0x148/0x8f0 [ 221.724075][ T8970] ? __ipv6_chk_addr_and_flags+0x187/0x7e0 [ 221.724099][ T8970] secpath_set+0x58/0x1f0 [ 221.724117][ T8970] xfrm_input+0x7f0/0x72c0 [ 221.724150][ T8970] ? vti6_input_proto+0x56e/0x720 [ 221.724174][ T8970] xfrm6_ah_rcv+0xa9/0x220 [ 221.724198][ T8970] ? __pfx_xfrm6_ah_rcv+0x10/0x10 [ 221.724220][ T8970] ip6_protocol_deliver_rcu+0xe08/0x15c0 [ 221.724266][ T8970] ip6_input_finish+0x191/0x370 [ 221.724288][ T8970] NF_HOOK+0x30c/0x3a0 [ 221.724307][ T8970] ? __pfx_ip6_input_finish+0x10/0x10 [ 221.724324][ T8970] ? NF_HOOK+0x9a/0x3a0 [ 221.724340][ T8970] ? __pfx_NF_HOOK+0x10/0x10 [ 221.724356][ T8970] ? __pfx_ip6_input_finish+0x10/0x10 [ 221.724394][ T8970] ip6_input+0x16a/0x270 [ 221.724410][ T8970] ? ip6_input+0x23/0x270 [ 221.724429][ T8970] NF_HOOK+0x30c/0x3a0 [ 221.724442][ T8970] ? skb_orphan+0x4f/0xd0 [ 221.724460][ T8970] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 221.724476][ T8970] ? NF_HOOK+0x9a/0x3a0 [ 221.724492][ T8970] ? __pfx_NF_HOOK+0x10/0x10 [ 221.724509][ T8970] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 221.724538][ T8970] __netif_receive_skb+0xd3/0x380 [ 221.724556][ T8970] ? _copy_from_iter+0x24f/0x1790 [ 221.724583][ T8970] ? netif_receive_skb+0x115/0x790 [ 221.724598][ T8970] netif_receive_skb+0x1cb/0x790 [ 221.724613][ T8970] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 221.724630][ T8970] ? __pfx_netif_receive_skb+0x10/0x10 [ 221.724650][ T8970] ? tun_rx_batched+0x160/0x730 [ 221.724669][ T8970] tun_rx_batched+0x1b9/0x730 [ 221.724686][ T8970] ? __lock_acquire+0xab9/0xd20 [ 221.724712][ T8970] ? __pfx_tun_rx_batched+0x10/0x10 [ 221.724733][ T8970] ? tun_get_user+0x272f/0x3e90 [ 221.724765][ T8970] tun_get_user+0x2b65/0x3e90 [ 221.724799][ T8970] ? tun_get_user+0x272f/0x3e90 [ 221.724817][ T8970] ? aa_file_perm+0x44d/0x1550 [ 221.724835][ T8970] ? __pfx_tun_get_user+0x10/0x10 [ 221.724860][ T8970] ? __lock_acquire+0xab9/0xd20 [ 221.724885][ T8970] ? ref_tracker_alloc+0x318/0x460 [ 221.724898][ T8970] ? __lock_acquire+0xab9/0xd20 [ 221.724920][ T8970] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 221.724940][ T8970] ? tun_get+0x1c/0x2f0 [ 221.724963][ T8970] ? tun_get+0x1c/0x2f0 [ 221.724978][ T8970] ? tun_get+0x1c/0x2f0 [ 221.724998][ T8970] tun_chr_write_iter+0x113/0x200 [ 221.725021][ T8970] vfs_write+0x5c6/0xb30 [ 221.725048][ T8970] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 221.725068][ T8970] ? __pfx_vfs_write+0x10/0x10 [ 221.725104][ T8970] ? __fget_files+0x2a/0x420 [ 221.725135][ T8970] ksys_write+0x145/0x250 [ 221.725159][ T8970] ? __pfx_ksys_write+0x10/0x10 [ 221.725181][ T8970] ? do_syscall_64+0xbe/0xfa0 [ 221.725206][ T8970] do_syscall_64+0xfa/0xfa0 [ 221.725226][ T8970] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.725247][ T8970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.725270][ T8970] ? clear_bhb_loop+0x60/0xb0 [ 221.725296][ T8970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.725313][ T8970] RIP: 0033:0x7efe3bd8eec9 [ 221.725331][ T8970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.725346][ T8970] RSP: 002b:00007efe3cb9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 221.725373][ T8970] RAX: ffffffffffffffda RBX: 00007efe3bfe5fa0 RCX: 00007efe3bd8eec9 [ 221.725384][ T8970] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 221.725394][ T8970] RBP: 00007efe3cb9b090 R08: 0000000000000000 R09: 0000000000000000 [ 221.725405][ T8970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 221.725415][ T8970] R13: 00007efe3bfe6038 R14: 00007efe3bfe5fa0 R15: 00007ffc7eafb9a8 [ 221.725441][ T8970] [ 221.738057][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1084'. [ 221.829306][ T8969] openvswitch: netlink: Flow key attr not present in new flow. [ 222.073753][ T8971] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1084'. [ 222.620868][ T8999] FAULT_INJECTION: forcing a failure. [ 222.620868][ T8999] name failslab, interval 1, probability 0, space 0, times 0 [ 222.716567][ T8999] CPU: 0 UID: 0 PID: 8999 Comm: syz.3.1095 Not tainted syzkaller #0 PREEMPT(full) [ 222.716596][ T8999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 222.716608][ T8999] Call Trace: [ 222.716616][ T8999] [ 222.716625][ T8999] dump_stack_lvl+0x189/0x250 [ 222.716652][ T8999] ? __pfx____ratelimit+0x10/0x10 [ 222.716674][ T8999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.716689][ T8999] ? __pfx__printk+0x10/0x10 [ 222.716711][ T8999] ? __pfx___might_resched+0x10/0x10 [ 222.716731][ T8999] should_fail_ex+0x414/0x560 [ 222.716760][ T8999] should_failslab+0xa8/0x100 [ 222.716788][ T8999] __kmalloc_noprof+0xcb/0x7f0 [ 222.716807][ T8999] ? kfree+0x4d/0x6d0 [ 222.716822][ T8999] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 222.716843][ T8999] ? rcu_is_watching+0x15/0xb0 [ 222.716866][ T8999] tomoyo_realpath_from_path+0xe3/0x5d0 [ 222.716895][ T8999] ? tomoyo_mount_permission+0x27a/0x970 [ 222.716915][ T8999] tomoyo_mount_permission+0x377/0x970 [ 222.716937][ T8999] ? tomoyo_mount_permission+0x27a/0x970 [ 222.716956][ T8999] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 222.717192][ T8999] security_sb_mount+0xec/0x350 [ 222.717239][ T8999] path_mount+0xbc/0xfe0 [ 222.717259][ T8999] ? user_path_at+0x44/0x60 [ 222.717274][ T8999] ? kmem_cache_free+0x19b/0x690 [ 222.717302][ T8999] __se_sys_mount+0x313/0x410 [ 222.717326][ T8999] ? __pfx___se_sys_mount+0x10/0x10 [ 222.717348][ T8999] ? do_syscall_64+0xbe/0xfa0 [ 222.717368][ T8999] ? __x64_sys_mount+0x20/0xc0 [ 222.717387][ T8999] do_syscall_64+0xfa/0xfa0 [ 222.717403][ T8999] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.717424][ T8999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.717438][ T8999] ? clear_bhb_loop+0x60/0xb0 [ 222.717459][ T8999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.717474][ T8999] RIP: 0033:0x7f0f4978eec9 [ 222.717490][ T8999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.717505][ T8999] RSP: 002b:00007f0f4a5c3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 222.717524][ T8999] RAX: ffffffffffffffda RBX: 00007f0f499e5fa0 RCX: 00007f0f4978eec9 [ 222.717536][ T8999] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 222.717546][ T8999] RBP: 00007f0f4a5c3090 R08: 0000000000000000 R09: 0000000000000000 [ 222.717556][ T8999] R10: 00000000001004a0 R11: 0000000000000246 R12: 0000000000000001 [ 222.717567][ T8999] R13: 00007f0f499e6038 R14: 00007f0f499e5fa0 R15: 00007ffe4e9c6e18 [ 222.717594][ T8999] [ 222.717604][ T8999] ERROR: Out of memory at tomoyo_realpath_from_path. [ 222.766301][ T9009] netlink: 'syz.1.1099': attribute type 10 has an invalid length. [ 222.996063][ T9009] __nla_validate_parse: 2 callbacks suppressed [ 222.996080][ T9009] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1099'. [ 223.282197][ T9024] netlink: 'syz.3.1104': attribute type 12 has an invalid length. [ 223.291193][ T9024] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1104'. [ 223.384588][ T9026] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1105'. [ 223.472888][ T9032] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1108'. [ 223.477592][ T9030] netlink: 'syz.3.1106': attribute type 21 has an invalid length. [ 223.486075][ T9032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1108'. [ 223.501500][ T9030] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1106'. [ 223.511068][ T9032] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1108'. [ 223.511139][ T9032] netlink: zone id is out of range [ 223.511153][ T9032] netlink: zone id is out of range [ 223.511162][ T9032] netlink: zone id is out of range [ 223.511171][ T9032] netlink: zone id is out of range [ 223.511180][ T9032] netlink: zone id is out of range [ 223.511190][ T9032] netlink: zone id is out of range [ 223.511199][ T9032] netlink: zone id is out of range [ 223.511232][ T9032] netlink: zone id is out of range [ 224.236744][ T9060] netlink: 'syz.4.1116': attribute type 1 has an invalid length. [ 224.488488][ T9076] netlink: 'syz.0.1124': attribute type 1 has an invalid length. [ 224.503567][ T9076] netlink: 'syz.0.1124': attribute type 2 has an invalid length. [ 224.529679][ T9076] netlink: 'syz.0.1124': attribute type 3 has an invalid length. [ 224.564779][ T9076] netlink: 'syz.0.1124': attribute type 5 has an invalid length. [ 224.593449][ T9076] netlink: 'syz.0.1124': attribute type 6 has an invalid length. [ 224.609208][ T9076] netlink: 'syz.0.1124': attribute type 7 has an invalid length. [ 224.619748][ T9076] netlink: 'syz.0.1124': attribute type 1 has an invalid length. [ 224.629418][ T9076] netlink: 449 bytes leftover after parsing attributes in process `syz.0.1124'. [ 224.640750][ T9076] netlink: 130080 bytes leftover after parsing attributes in process `syz.0.1124'. [ 224.667146][ T9076] netlink: 'syz.0.1124': attribute type 1 has an invalid length. [ 224.685484][ T9079] netlink: 'syz.3.1122': attribute type 1 has an invalid length. [ 224.693982][ T9079] netlink: 'syz.3.1122': attribute type 2 has an invalid length. [ 224.723695][ T9076] netlink: 449 bytes leftover after parsing attributes in process `syz.0.1124'. [ 225.545615][ T9110] FAULT_INJECTION: forcing a failure. [ 225.545615][ T9110] name failslab, interval 1, probability 0, space 0, times 0 [ 225.578377][ T9110] CPU: 0 UID: 0 PID: 9110 Comm: syz.4.1135 Not tainted syzkaller #0 PREEMPT(full) [ 225.578404][ T9110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 225.578413][ T9110] Call Trace: [ 225.578421][ T9110] [ 225.578431][ T9110] dump_stack_lvl+0x189/0x250 [ 225.578464][ T9110] ? __pfx____ratelimit+0x10/0x10 [ 225.578489][ T9110] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.578507][ T9110] ? __pfx__printk+0x10/0x10 [ 225.578532][ T9110] ? perf_trace_lock+0x2f8/0x3b0 [ 225.578568][ T9110] should_fail_ex+0x414/0x560 [ 225.578608][ T9110] should_failslab+0xa8/0x100 [ 225.578637][ T9110] kmem_cache_alloc_noprof+0x74/0x6e0 [ 225.578661][ T9110] ? skb_clone+0x212/0x3a0 [ 225.578696][ T9110] skb_clone+0x212/0x3a0 [ 225.578727][ T9110] __netlink_deliver_tap+0x404/0x850 [ 225.578778][ T9110] ? netlink_deliver_tap+0x2e/0x1b0 [ 225.578804][ T9110] netlink_deliver_tap+0x19c/0x1b0 [ 225.578829][ T9110] netlink_sendskb+0x68/0x140 [ 225.578856][ T9110] netlink_unicast+0x397/0x9e0 [ 225.578872][ T9110] ? __asan_memcpy+0x40/0x70 [ 225.578915][ T9110] ? __pfx_netlink_unicast+0x10/0x10 [ 225.578959][ T9110] netlink_rcv_skb+0x28c/0x470 [ 225.578984][ T9110] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 225.579010][ T9110] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 225.579059][ T9110] ? netlink_deliver_tap+0x2e/0x1b0 [ 225.579100][ T9110] netlink_unicast+0x82c/0x9e0 [ 225.579142][ T9110] ? __pfx_netlink_unicast+0x10/0x10 [ 225.579167][ T9110] ? netlink_sendmsg+0x642/0xb30 [ 225.579185][ T9110] ? skb_put+0x11b/0x210 [ 225.579214][ T9110] netlink_sendmsg+0x805/0xb30 [ 225.579266][ T9110] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.579298][ T9110] ? aa_sock_msg_perm+0xf1/0x1d0 [ 225.579328][ T9110] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 225.579351][ T9110] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.579376][ T9110] __sock_sendmsg+0x219/0x270 [ 225.579405][ T9110] ____sys_sendmsg+0x505/0x830 [ 225.579444][ T9110] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.579489][ T9110] ? import_iovec+0x74/0xa0 [ 225.579523][ T9110] ___sys_sendmsg+0x21f/0x2a0 [ 225.579556][ T9110] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.579635][ T9110] ? __fget_files+0x2a/0x420 [ 225.579690][ T9110] ? __fget_files+0x2a/0x420 [ 225.579711][ T9110] ? __fget_files+0x3a0/0x420 [ 225.579763][ T9110] __x64_sys_sendmsg+0x19b/0x260 [ 225.579799][ T9110] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 225.579819][ T9110] ? perf_trace_preemptirq_template+0xa3/0x340 [ 225.579871][ T9110] ? __pfx_ksys_write+0x10/0x10 [ 225.579908][ T9110] ? do_syscall_64+0xbe/0xfa0 [ 225.579944][ T9110] do_syscall_64+0xfa/0xfa0 [ 225.579965][ T9110] ? lockdep_hardirqs_on+0x9c/0x150 [ 225.579989][ T9110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.580007][ T9110] ? clear_bhb_loop+0x60/0xb0 [ 225.580036][ T9110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.580053][ T9110] RIP: 0033:0x7fbeb3d8eec9 [ 225.580073][ T9110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.580086][ T9110] RSP: 002b:00007fbeb4c6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.580105][ T9110] RAX: ffffffffffffffda RBX: 00007fbeb3fe5fa0 RCX: 00007fbeb3d8eec9 [ 225.580118][ T9110] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 225.580128][ T9110] RBP: 00007fbeb4c6f090 R08: 0000000000000000 R09: 0000000000000000 [ 225.580139][ T9110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.580148][ T9110] R13: 00007fbeb3fe6038 R14: 00007fbeb3fe5fa0 R15: 00007ffc10158c08 [ 225.580205][ T9110] [ 226.153813][ T9121] FAULT_INJECTION: forcing a failure. [ 226.153813][ T9121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.346159][ T9121] CPU: 1 UID: 0 PID: 9121 Comm: syz.1.1138 Not tainted syzkaller #0 PREEMPT(full) [ 226.346190][ T9121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 226.346201][ T9121] Call Trace: [ 226.346208][ T9121] [ 226.346216][ T9121] dump_stack_lvl+0x189/0x250 [ 226.346240][ T9121] ? __pfx____ratelimit+0x10/0x10 [ 226.346300][ T9121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.346318][ T9121] ? __pfx__printk+0x10/0x10 [ 226.346336][ T9121] ? __might_fault+0xb0/0x130 [ 226.346368][ T9121] should_fail_ex+0x414/0x560 [ 226.346398][ T9121] _copy_from_user+0x2d/0xb0 [ 226.346421][ T9121] mptcp_setsockopt+0x15ce/0x3560 [ 226.346450][ T9121] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 226.346467][ T9121] ? aa_sk_perm+0x81e/0x950 [ 226.346490][ T9121] ? __pfx_aa_sk_perm+0x10/0x10 [ 226.346510][ T9121] ? aa_sock_opt_perm+0xff/0x1b0 [ 226.346531][ T9121] ? sock_common_setsockopt+0x36/0xc0 [ 226.346549][ T9121] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 226.346570][ T9121] do_sock_setsockopt+0x17c/0x1b0 [ 226.346597][ T9121] __x64_sys_setsockopt+0x13f/0x1b0 [ 226.346623][ T9121] do_syscall_64+0xfa/0xfa0 [ 226.346644][ T9121] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.346666][ T9121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.346683][ T9121] ? clear_bhb_loop+0x60/0xb0 [ 226.346704][ T9121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.346721][ T9121] RIP: 0033:0x7efe3bd8eec9 [ 226.346737][ T9121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.346750][ T9121] RSP: 002b:00007efe3cb9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 226.346783][ T9121] RAX: ffffffffffffffda RBX: 00007efe3bfe5fa0 RCX: 00007efe3bd8eec9 [ 226.346796][ T9121] RDX: 0000000000000023 RSI: 0000000000000001 RDI: 0000000000000003 [ 226.346806][ T9121] RBP: 00007efe3cb9b090 R08: 000000000000ff7b R09: 0000000000000000 [ 226.346817][ T9121] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.346828][ T9121] R13: 00007efe3bfe6038 R14: 00007efe3bfe5fa0 R15: 00007ffc7eafb9a8 [ 226.346859][ T9121] [ 228.467778][ T9186] __nla_validate_parse: 5 callbacks suppressed [ 228.467804][ T9186] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1161'. [ 228.584593][ T9191] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1165'. [ 228.671639][ T9195] FAULT_INJECTION: forcing a failure. [ 228.671639][ T9195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.730401][ T9195] CPU: 0 UID: 0 PID: 9195 Comm: syz.4.1166 Not tainted syzkaller #0 PREEMPT(full) [ 228.730427][ T9195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 228.730438][ T9195] Call Trace: [ 228.730445][ T9195] [ 228.730453][ T9195] dump_stack_lvl+0x189/0x250 [ 228.730475][ T9195] ? __pfx____ratelimit+0x10/0x10 [ 228.730498][ T9195] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.730516][ T9195] ? __pfx__printk+0x10/0x10 [ 228.730534][ T9195] ? __might_fault+0xb0/0x130 [ 228.730566][ T9195] should_fail_ex+0x414/0x560 [ 228.730596][ T9195] _copy_from_user+0x2d/0xb0 [ 228.730618][ T9195] ___sys_sendmsg+0x158/0x2a0 [ 228.730643][ T9195] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.730700][ T9195] ? __fget_files+0x2a/0x420 [ 228.730721][ T9195] ? __fget_files+0x3a0/0x420 [ 228.730753][ T9195] __x64_sys_sendmsg+0x19b/0x260 [ 228.730775][ T9195] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 228.730795][ T9195] ? perf_trace_preemptirq_template+0xa3/0x340 [ 228.730835][ T9195] ? __pfx_ksys_write+0x10/0x10 [ 228.730859][ T9195] ? do_syscall_64+0xbe/0xfa0 [ 228.730884][ T9195] do_syscall_64+0xfa/0xfa0 [ 228.730904][ T9195] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.730922][ T9195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.730938][ T9195] ? clear_bhb_loop+0x60/0xb0 [ 228.730956][ T9195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.730972][ T9195] RIP: 0033:0x7fbeb3d8eec9 [ 228.730987][ T9195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.731001][ T9195] RSP: 002b:00007fbeb4c6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.731019][ T9195] RAX: ffffffffffffffda RBX: 00007fbeb3fe5fa0 RCX: 00007fbeb3d8eec9 [ 228.731030][ T9195] RDX: 000000000000afe6 RSI: 0000200000000380 RDI: 0000000000000003 [ 228.731039][ T9195] RBP: 00007fbeb4c6f090 R08: 0000000000000000 R09: 0000000000000000 [ 228.731048][ T9195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.731057][ T9195] R13: 00007fbeb3fe6038 R14: 00007fbeb3fe5fa0 R15: 00007ffc10158c08 [ 228.731084][ T9195] [ 229.409959][ T52] Bluetooth: hci4: ISO packet for unknown connection handle 2349 [ 229.768845][ T9224] FAULT_INJECTION: forcing a failure. [ 229.768845][ T9224] name failslab, interval 1, probability 0, space 0, times 0 [ 229.802996][ T9224] CPU: 1 UID: 0 PID: 9224 Comm: syz.1.1176 Not tainted syzkaller #0 PREEMPT(full) [ 229.803023][ T9224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 229.803034][ T9224] Call Trace: [ 229.803042][ T9224] [ 229.803050][ T9224] dump_stack_lvl+0x189/0x250 [ 229.803077][ T9224] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.803096][ T9224] ? __pfx__printk+0x10/0x10 [ 229.803129][ T9224] should_fail_ex+0x414/0x560 [ 229.803159][ T9224] should_failslab+0xa8/0x100 [ 229.803184][ T9224] __kmalloc_cache_noprof+0x6f/0x6f0 [ 229.803207][ T9224] ? cryptomgr_notify+0x85/0x970 [ 229.803234][ T9224] cryptomgr_notify+0x85/0x970 [ 229.803277][ T9224] notifier_call_chain+0x1b6/0x3e0 [ 229.803305][ T9224] blocking_notifier_call_chain+0x6a/0x90 [ 229.803327][ T9224] crypto_alg_mod_lookup+0x3b1/0x5f0 [ 229.803352][ T9224] crypto_add_alg+0x235/0x3b0 [ 229.803374][ T9224] ? __pfx_crypto_add_alg+0x10/0x10 [ 229.803395][ T9224] crypto_user_rcv_msg+0x477/0x570 [ 229.803423][ T9224] ? __pfx_crypto_user_rcv_msg+0x10/0x10 [ 229.803464][ T9224] ? __pfx___mutex_trylock_common+0x10/0x10 [ 229.803495][ T9224] ? rcu_is_watching+0x15/0xb0 [ 229.803515][ T9224] ? trace_contention_end+0x39/0x120 [ 229.803536][ T9224] ? __mutex_lock+0x335/0x1350 [ 229.803568][ T9224] netlink_rcv_skb+0x205/0x470 [ 229.803590][ T9224] ? __pfx_crypto_user_rcv_msg+0x10/0x10 [ 229.803613][ T9224] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 229.803650][ T9224] ? netlink_deliver_tap+0x2e/0x1b0 [ 229.803671][ T9224] ? netlink_deliver_tap+0x2e/0x1b0 [ 229.803695][ T9224] crypto_netlink_rcv+0x2a/0x40 [ 229.803723][ T9224] netlink_unicast+0x82c/0x9e0 [ 229.803752][ T9224] ? __pfx_netlink_unicast+0x10/0x10 [ 229.803773][ T9224] ? netlink_sendmsg+0x642/0xb30 [ 229.803792][ T9224] ? skb_put+0x11b/0x210 [ 229.803816][ T9224] netlink_sendmsg+0x805/0xb30 [ 229.803848][ T9224] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.803872][ T9224] ? irqentry_exit+0x74/0x90 [ 229.803891][ T9224] ? aa_sock_msg_perm+0xf1/0x1d0 [ 229.803913][ T9224] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 229.803934][ T9224] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.803955][ T9224] __sock_sendmsg+0x219/0x270 [ 229.803976][ T9224] ____sys_sendmsg+0x505/0x830 [ 229.804005][ T9224] ? __pfx_____sys_sendmsg+0x10/0x10 [ 229.804038][ T9224] ? import_iovec+0x74/0xa0 [ 229.804062][ T9224] ___sys_sendmsg+0x21f/0x2a0 [ 229.804088][ T9224] ? __pfx____sys_sendmsg+0x10/0x10 [ 229.804153][ T9224] ? __fget_files+0x2a/0x420 [ 229.804174][ T9224] ? __fget_files+0x3a0/0x420 [ 229.804209][ T9224] __x64_sys_sendmsg+0x19b/0x260 [ 229.804237][ T9224] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 229.804271][ T9224] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 229.804301][ T9224] ? do_syscall_64+0xbe/0xfa0 [ 229.804333][ T9224] do_syscall_64+0xfa/0xfa0 [ 229.804356][ T9224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.804372][ T9224] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 229.804390][ T9224] ? clear_bhb_loop+0x60/0xb0 [ 229.804411][ T9224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.804428][ T9224] RIP: 0033:0x7efe3bd8eec9 [ 229.804444][ T9224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.804458][ T9224] RSP: 002b:00007efe3cb9b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.804477][ T9224] RAX: ffffffffffffffda RBX: 00007efe3bfe5fa0 RCX: 00007efe3bd8eec9 [ 229.804490][ T9224] RDX: 0000000000040040 RSI: 0000200000000880 RDI: 0000000000000005 [ 229.804501][ T9224] RBP: 00007efe3cb9b090 R08: 0000000000000000 R09: 0000000000000000 [ 229.804511][ T9224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.804522][ T9224] R13: 00007efe3bfe6038 R14: 00007efe3bfe5fa0 R15: 00007ffc7eafb9a8 [ 229.804555][ T9224] [ 230.236313][ T9227] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1178'. [ 230.276787][ T9233] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1178'. [ 230.624782][ T9249] FAULT_INJECTION: forcing a failure. [ 230.624782][ T9249] name failslab, interval 1, probability 0, space 0, times 0 [ 230.641927][ T9249] CPU: 1 UID: 0 PID: 9249 Comm: syz.0.1185 Not tainted syzkaller #0 PREEMPT(full) [ 230.641953][ T9249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 230.641963][ T9249] Call Trace: [ 230.641971][ T9249] [ 230.641978][ T9249] dump_stack_lvl+0x189/0x250 [ 230.642001][ T9249] ? __pfx____ratelimit+0x10/0x10 [ 230.642258][ T9249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.642277][ T9249] ? __pfx__printk+0x10/0x10 [ 230.642304][ T9249] should_fail_ex+0x414/0x560 [ 230.642333][ T9249] should_failslab+0xa8/0x100 [ 230.642364][ T9249] __kmalloc_node_track_caller_noprof+0xcd/0x800 [ 230.642384][ T9249] ? nf_ct_ext_add+0x1b6/0x460 [ 230.642402][ T9249] ? nf_ct_ext_add+0x1b6/0x460 [ 230.642416][ T9249] krealloc_node_align_noprof+0x140/0x390 [ 230.642442][ T9249] nf_ct_ext_add+0x1b6/0x460 [ 230.642461][ T9249] init_conntrack+0x680/0xef0 [ 230.642485][ T9249] ? __pfx_init_conntrack+0x10/0x10 [ 230.642502][ T9249] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 230.642526][ T9249] ? __local_bh_enable_ip+0x12d/0x1c0 [ 230.642555][ T9249] ? __siphash_unaligned+0x232/0x3b0 [ 230.642580][ T9249] nf_conntrack_in+0xbb7/0x15c0 [ 230.642627][ T9249] ? __pfx_nf_conntrack_in+0x10/0x10 [ 230.642655][ T9249] ? ipt_do_table+0x2a3/0x1640 [ 230.642682][ T9249] ? ipv4_conntrack_defrag+0x2a0/0x5b0 [ 230.642695][ T9249] ? ipv4_conntrack_local+0x126/0x210 [ 230.642710][ T9249] ? __pfx_ipv4_conntrack_local+0x10/0x10 [ 230.642727][ T9249] nf_hook_slow+0xc5/0x220 [ 230.642748][ T9249] nf_hook+0x217/0x380 [ 230.642767][ T9249] ? __ip_make_skb+0x139c/0x1cf0 [ 230.642781][ T9249] ? nf_hook+0x9d/0x380 [ 230.642799][ T9249] ? __pfx_nf_hook+0x10/0x10 [ 230.642817][ T9249] ? __pfx_dst_output+0x10/0x10 [ 230.642838][ T9249] ? ip_fast_csum+0x1ee/0x2b0 [ 230.642855][ T9249] __ip_local_out+0x4db/0x600 [ 230.642872][ T9249] ? __pfx_dst_output+0x10/0x10 [ 230.642891][ T9249] ip_push_pending_frames+0x94/0x150 [ 230.642906][ T9249] raw_sendmsg+0x1440/0x18b0 [ 230.642931][ T9249] ? __pfx_raw_sendmsg+0x10/0x10 [ 230.642958][ T9249] ? aa_sk_perm+0x81e/0x950 [ 230.642977][ T9249] ? __pfx_aa_sk_perm+0x10/0x10 [ 230.642988][ T9249] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 230.643007][ T9249] ? sock_rps_record_flow+0x19/0x410 [ 230.643025][ T9249] ? inet_sendmsg+0x2f4/0x370 [ 230.643038][ T9249] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 230.643060][ T9249] __sock_sendmsg+0x19c/0x270 [ 230.643076][ T9249] ____sys_sendmsg+0x505/0x830 [ 230.643097][ T9249] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.643121][ T9249] ? import_iovec+0x74/0xa0 [ 230.643139][ T9249] ___sys_sendmsg+0x21f/0x2a0 [ 230.643157][ T9249] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.643200][ T9249] ? __fget_files+0x2a/0x420 [ 230.643217][ T9249] ? __fget_files+0x3a0/0x420 [ 230.643258][ T9249] __x64_sys_sendmsg+0x19b/0x260 [ 230.643279][ T9249] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 230.643295][ T9249] ? perf_trace_preemptirq_template+0xa3/0x340 [ 230.643325][ T9249] ? __pfx_ksys_write+0x10/0x10 [ 230.643346][ T9249] ? do_syscall_64+0xbe/0xfa0 [ 230.643367][ T9249] do_syscall_64+0xfa/0xfa0 [ 230.643388][ T9249] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.643406][ T9249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.643419][ T9249] ? clear_bhb_loop+0x60/0xb0 [ 230.643436][ T9249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.643449][ T9249] RIP: 0033:0x7f341078eec9 [ 230.643464][ T9249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.643476][ T9249] RSP: 002b:00007f3411601038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.643493][ T9249] RAX: ffffffffffffffda RBX: 00007f34109e5fa0 RCX: 00007f341078eec9 [ 230.643504][ T9249] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 230.643512][ T9249] RBP: 00007f3411601090 R08: 0000000000000000 R09: 0000000000000000 [ 230.643520][ T9249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 230.643528][ T9249] R13: 00007f34109e6038 R14: 00007f34109e5fa0 R15: 00007ffced877438 [ 230.643559][ T9249] [ 231.265141][ T9252] syzkaller0: tun_chr_ioctl cmd 35111 [ 231.294225][ T9252] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1186'. [ 231.315764][ T9252] net_ratelimit: 2 callbacks suppressed [ 231.315785][ T9252] netlink: zone id is out of range [ 231.328280][ T9252] netlink: zone id is out of range [ 231.333603][ T9252] netlink: zone id is out of range [ 231.339194][ T9252] netlink: zone id is out of range [ 231.344416][ T9252] netlink: zone id is out of range [ 231.349687][ T9252] netlink: zone id is out of range [ 231.356533][ T9252] netlink: zone id is out of range [ 231.362081][ T9252] netlink: zone id is out of range [ 231.370718][ T9252] netlink: zone id is out of range [ 231.375998][ T9252] netlink: zone id is out of range [ 231.742248][ T9271] validate_nla: 27 callbacks suppressed [ 231.742281][ T9271] netlink: 'syz.2.1192': attribute type 1 has an invalid length. [ 231.785113][ T9271] netlink: 'syz.2.1192': attribute type 2 has an invalid length. [ 232.020666][ T9279] syzkaller0: entered allmulticast mode [ 232.897271][ T9311] netlink: 'syz.4.1209': attribute type 1 has an invalid length. [ 232.911116][ T9311] netlink: 'syz.4.1209': attribute type 2 has an invalid length. [ 233.058202][ T9322] netlink: 'syz.0.1213': attribute type 4 has an invalid length. [ 233.072372][ T9322] netlink: 'syz.0.1213': attribute type 11 has an invalid length. [ 233.123661][ T9322] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1213'. [ 233.169272][ T9325] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 233.370382][ T9329] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1216'. [ 233.399508][ T9328] FAULT_INJECTION: forcing a failure. [ 233.399508][ T9328] name failslab, interval 1, probability 0, space 0, times 0 [ 233.435160][ T9328] CPU: 0 UID: 0 PID: 9328 Comm: syz.4.1214 Not tainted syzkaller #0 PREEMPT(full) [ 233.435192][ T9328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 233.435202][ T9328] Call Trace: [ 233.435211][ T9328] [ 233.435219][ T9328] dump_stack_lvl+0x189/0x250 [ 233.435247][ T9328] ? __pfx____ratelimit+0x10/0x10 [ 233.435271][ T9328] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.435308][ T9328] ? __pfx__printk+0x10/0x10 [ 233.435343][ T9328] ? __pfx___might_resched+0x10/0x10 [ 233.435368][ T9328] should_fail_ex+0x414/0x560 [ 233.435407][ T9328] should_failslab+0xa8/0x100 [ 233.435442][ T9328] kmem_cache_alloc_node_noprof+0x77/0x710 [ 233.435470][ T9328] ? __alloc_skb+0x112/0x2d0 [ 233.435498][ T9328] __alloc_skb+0x112/0x2d0 [ 233.435524][ T9328] netlink_ack+0x146/0xa50 [ 233.435547][ T9328] ? __pfx_genl_rcv_msg+0x10/0x10 [ 233.435578][ T9328] ? __asan_memcpy+0x40/0x70 [ 233.435597][ T9328] ? __pfx_ref_tracker_free+0x10/0x10 [ 233.435629][ T9328] netlink_rcv_skb+0x28c/0x470 [ 233.435648][ T9328] ? __lock_acquire+0xab9/0xd20 [ 233.435673][ T9328] ? __pfx_genl_rcv_msg+0x10/0x10 [ 233.435699][ T9328] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 233.435738][ T9328] ? down_read+0x1ad/0x2e0 [ 233.435920][ T9328] genl_rcv+0x28/0x40 [ 233.435942][ T9328] netlink_unicast+0x82c/0x9e0 [ 233.435975][ T9328] ? __pfx_netlink_unicast+0x10/0x10 [ 233.435994][ T9328] ? netlink_sendmsg+0x642/0xb30 [ 233.436011][ T9328] ? skb_put+0x11b/0x210 [ 233.436034][ T9328] netlink_sendmsg+0x805/0xb30 [ 233.436064][ T9328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.436089][ T9328] ? aa_sock_msg_perm+0xf1/0x1d0 [ 233.436114][ T9328] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 233.436139][ T9328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.436161][ T9328] __sock_sendmsg+0x219/0x270 [ 233.436186][ T9328] ____sys_sendmsg+0x505/0x830 [ 233.436218][ T9328] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.436254][ T9328] ? import_iovec+0x74/0xa0 [ 233.436281][ T9328] ___sys_sendmsg+0x21f/0x2a0 [ 233.436308][ T9328] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.436360][ T9328] ? __fget_files+0x2a/0x420 [ 233.436401][ T9328] ? __fget_files+0x2a/0x420 [ 233.436422][ T9328] ? __fget_files+0x3a0/0x420 [ 233.436458][ T9328] __x64_sys_sendmsg+0x19b/0x260 [ 233.436579][ T9328] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 233.436600][ T9328] ? perf_trace_preemptirq_template+0xa3/0x340 [ 233.436640][ T9328] ? __pfx_ksys_write+0x10/0x10 [ 233.436668][ T9328] ? do_syscall_64+0xbe/0xfa0 [ 233.436697][ T9328] do_syscall_64+0xfa/0xfa0 [ 233.436718][ T9328] ? lockdep_hardirqs_on+0x9c/0x150 [ 233.436753][ T9328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.436766][ T9328] ? clear_bhb_loop+0x60/0xb0 [ 233.436785][ T9328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.436799][ T9328] RIP: 0033:0x7fbeb3d8eec9 [ 233.436813][ T9328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.436827][ T9328] RSP: 002b:00007fbeb4c6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.436847][ T9328] RAX: ffffffffffffffda RBX: 00007fbeb3fe5fa0 RCX: 00007fbeb3d8eec9 [ 233.436861][ T9328] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 000000000000000b [ 233.436877][ T9328] RBP: 00007fbeb4c6f090 R08: 0000000000000000 R09: 0000000000000000 [ 233.436887][ T9328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.436898][ T9328] R13: 00007fbeb3fe6038 R14: 00007fbeb3fe5fa0 R15: 00007ffc10158c08 [ 233.436936][ T9328] [ 234.363260][ T9357] netlink: 'syz.4.1222': attribute type 7 has an invalid length. [ 234.394095][ T9346] netlink: 'syz.3.1220': attribute type 13 has an invalid length. [ 234.416438][ T9357] netlink: 781 bytes leftover after parsing attributes in process `syz.4.1222'. [ 234.448610][ T9357] netlink: 130080 bytes leftover after parsing attributes in process `syz.4.1222'. [ 234.487977][ T9362] netlink: 'syz.0.1225': attribute type 1 has an invalid length. [ 234.498711][ T9362] netlink: 'syz.0.1225': attribute type 2 has an invalid length. [ 234.536364][ T9357] netlink: 781 bytes leftover after parsing attributes in process `syz.4.1222'. [ 234.579202][ T9365] netlink: 809 bytes leftover after parsing attributes in process `syz.1.1226'. [ 234.591584][ T9365] netlink: 130160 bytes leftover after parsing attributes in process `syz.1.1226'. [ 234.605102][ T9365] netlink: 809 bytes leftover after parsing attributes in process `syz.1.1226'. [ 235.172420][ T9374] FAULT_INJECTION: forcing a failure. [ 235.172420][ T9374] name failslab, interval 1, probability 0, space 0, times 0 [ 235.193793][ T9369] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1227'. [ 235.213028][ T9374] CPU: 0 UID: 0 PID: 9374 Comm: syz.3.1229 Not tainted syzkaller #0 PREEMPT(full) [ 235.213055][ T9374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 235.213065][ T9374] Call Trace: [ 235.213072][ T9374] [ 235.213080][ T9374] dump_stack_lvl+0x189/0x250 [ 235.213113][ T9374] ? __pfx____ratelimit+0x10/0x10 [ 235.213136][ T9374] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.213150][ T9374] ? __pfx__printk+0x10/0x10 [ 235.213172][ T9374] ? __pfx___might_resched+0x10/0x10 [ 235.213185][ T9374] ? fs_reclaim_acquire+0x7d/0x100 [ 235.213206][ T9374] should_fail_ex+0x414/0x560 [ 235.213232][ T9374] should_failslab+0xa8/0x100 [ 235.213261][ T9374] kmem_cache_alloc_node_noprof+0x77/0x710 [ 235.213286][ T9374] ? __alloc_skb+0x112/0x2d0 [ 235.213309][ T9374] __alloc_skb+0x112/0x2d0 [ 235.213424][ T9374] netlink_sendmsg+0x5c6/0xb30 [ 235.213456][ T9374] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.213478][ T9374] ? aa_sock_msg_perm+0xf1/0x1d0 [ 235.213500][ T9374] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 235.213525][ T9374] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.213545][ T9374] __sock_sendmsg+0x219/0x270 [ 235.213566][ T9374] ____sys_sendmsg+0x505/0x830 [ 235.213591][ T9374] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.213616][ T9374] ? import_iovec+0x74/0xa0 [ 235.213636][ T9374] ___sys_sendmsg+0x21f/0x2a0 [ 235.213657][ T9374] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.213709][ T9374] ? __fget_files+0x2a/0x420 [ 235.213731][ T9374] ? __fget_files+0x3a0/0x420 [ 235.213759][ T9374] __x64_sys_sendmsg+0x19b/0x260 [ 235.213784][ T9374] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 235.213805][ T9374] ? perf_trace_preemptirq_template+0xa3/0x340 [ 235.213837][ T9374] ? __pfx_ksys_write+0x10/0x10 [ 235.213861][ T9374] ? do_syscall_64+0xbe/0xfa0 [ 235.213888][ T9374] do_syscall_64+0xfa/0xfa0 [ 235.213908][ T9374] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.213929][ T9374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.213946][ T9374] ? clear_bhb_loop+0x60/0xb0 [ 235.213968][ T9374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.213984][ T9374] RIP: 0033:0x7f0f4978eec9 [ 235.214002][ T9374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.214016][ T9374] RSP: 002b:00007f0f4a5c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.214035][ T9374] RAX: ffffffffffffffda RBX: 00007f0f499e5fa0 RCX: 00007f0f4978eec9 [ 235.214045][ T9374] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 235.214056][ T9374] RBP: 00007f0f4a5c3090 R08: 0000000000000000 R09: 0000000000000000 [ 235.214067][ T9374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.214076][ T9374] R13: 00007f0f499e6038 R14: 00007f0f499e5fa0 R15: 00007ffe4e9c6e18 [ 235.214105][ T9374] [ 235.557226][ T9376] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.568188][ T9376] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.697339][ T9376] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.704993][ T9376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.713920][ T9376] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.722206][ T9376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.774707][ T9376] team0: Port device bridge0 added [ 236.607633][ T9406] netlink: 781 bytes leftover after parsing attributes in process `syz.2.1239'. [ 236.652149][ T9406] netlink: 130080 bytes leftover after parsing attributes in process `syz.2.1239'. [ 236.716241][ T9406] netlink: 781 bytes leftover after parsing attributes in process `syz.2.1239'. [ 236.895867][ T9415] validate_nla: 4 callbacks suppressed [ 236.895888][ T9415] netlink: 'syz.3.1243': attribute type 2 has an invalid length. [ 237.854123][ T9431] netlink: 'syz.4.1249': attribute type 39 has an invalid length. [ 238.904119][ T9470] FAULT_INJECTION: forcing a failure. [ 238.904119][ T9470] name failslab, interval 1, probability 0, space 0, times 0 [ 238.933759][ T9470] CPU: 1 UID: 0 PID: 9470 Comm: syz.1.1261 Not tainted syzkaller #0 PREEMPT(full) [ 238.933788][ T9470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 238.933800][ T9470] Call Trace: [ 238.933808][ T9470] [ 238.933822][ T9470] dump_stack_lvl+0x189/0x250 [ 238.933852][ T9470] ? __pfx____ratelimit+0x10/0x10 [ 238.933878][ T9470] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.933897][ T9470] ? __pfx__printk+0x10/0x10 [ 238.933923][ T9470] ? __pfx___might_resched+0x10/0x10 [ 238.933949][ T9470] should_fail_ex+0x414/0x560 [ 238.933982][ T9470] should_failslab+0xa8/0x100 [ 238.934011][ T9470] kmem_cache_alloc_node_noprof+0x77/0x710 [ 238.934035][ T9470] ? __alloc_skb+0x112/0x2d0 [ 238.934065][ T9470] __alloc_skb+0x112/0x2d0 [ 238.934094][ T9470] netlink_dump+0x1b7/0xe90 [ 238.934122][ T9470] ? __netlink_lookup+0xbd/0x810 [ 238.934147][ T9470] ? __pfx_netlink_dump+0x10/0x10 [ 238.934164][ T9470] ? __netlink_lookup+0x752/0x810 [ 238.934202][ T9470] ? netlink_lookup+0x30/0x200 [ 238.934221][ T9470] ? netlink_lookup+0x30/0x200 [ 238.934237][ T9470] ? netlink_lookup+0x30/0x200 [ 238.934262][ T9470] __netlink_dump_start+0x5cb/0x7e0 [ 238.934291][ T9470] packet_diag_handler_dump+0x1bc/0x270 [ 238.934317][ T9470] ? __pfx_packet_diag_handler_dump+0x10/0x10 [ 238.934338][ T9470] ? __pfx_packet_diag_dump+0x10/0x10 [ 238.934362][ T9470] ? sock_diag_lock_handler+0x19/0x290 [ 238.934381][ T9470] ? sock_diag_lock_handler+0x19/0x290 [ 238.934407][ T9470] sock_diag_rcv_msg+0x4c9/0x600 [ 238.934431][ T9470] netlink_rcv_skb+0x205/0x470 [ 238.934453][ T9470] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 238.934474][ T9470] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 238.934511][ T9470] ? netlink_deliver_tap+0x2e/0x1b0 [ 238.934547][ T9470] netlink_unicast+0x82c/0x9e0 [ 238.934576][ T9470] ? __pfx_netlink_unicast+0x10/0x10 [ 238.934597][ T9470] ? netlink_sendmsg+0x642/0xb30 [ 238.934615][ T9470] ? skb_put+0x11b/0x210 [ 238.934640][ T9470] netlink_sendmsg+0x805/0xb30 [ 238.934671][ T9470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.934695][ T9470] ? irqentry_exit+0x74/0x90 [ 238.934716][ T9470] ? aa_sock_msg_perm+0xf1/0x1d0 [ 238.934740][ T9470] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 238.934765][ T9470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.934787][ T9470] __sock_sendmsg+0x219/0x270 [ 238.934806][ T9470] ____sys_sendmsg+0x505/0x830 [ 238.934833][ T9470] ? __pfx_____sys_sendmsg+0x10/0x10 [ 238.934865][ T9470] ? import_iovec+0x74/0xa0 [ 238.934891][ T9470] ___sys_sendmsg+0x21f/0x2a0 [ 238.934917][ T9470] ? __pfx____sys_sendmsg+0x10/0x10 [ 238.934983][ T9470] ? __fget_files+0x2a/0x420 [ 238.935006][ T9470] ? __fget_files+0x3a0/0x420 [ 238.935039][ T9470] __x64_sys_sendmsg+0x19b/0x260 [ 238.935065][ T9470] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 238.935112][ T9470] do_syscall_64+0xfa/0xfa0 [ 238.935137][ T9470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.935153][ T9470] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 238.935171][ T9470] ? clear_bhb_loop+0x60/0xb0 [ 238.935192][ T9470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.935209][ T9470] RIP: 0033:0x7efe3bd8eec9 [ 238.935227][ T9470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.935241][ T9470] RSP: 002b:00007efe3cb9b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.935260][ T9470] RAX: ffffffffffffffda RBX: 00007efe3bfe5fa0 RCX: 00007efe3bd8eec9 [ 238.935273][ T9470] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000a [ 238.935284][ T9470] RBP: 00007efe3cb9b090 R08: 0000000000000000 R09: 0000000000000000 [ 238.935293][ T9470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.935303][ T9470] R13: 00007efe3bfe6038 R14: 00007efe3bfe5fa0 R15: 00007ffc7eafb9a8 [ 238.935335][ T9470] [ 239.783098][ T9484] FAULT_INJECTION: forcing a failure. [ 239.783098][ T9484] name failslab, interval 1, probability 0, space 0, times 0 [ 239.797326][ T9484] CPU: 1 UID: 0 PID: 9484 Comm: syz.4.1265 Not tainted syzkaller #0 PREEMPT(full) [ 239.797350][ T9484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 239.797372][ T9484] Call Trace: [ 239.797381][ T9484] [ 239.797390][ T9484] dump_stack_lvl+0x189/0x250 [ 239.797425][ T9484] ? __pfx____ratelimit+0x10/0x10 [ 239.797451][ T9484] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.797471][ T9484] ? __pfx__printk+0x10/0x10 [ 239.797501][ T9484] ? __pfx___might_resched+0x10/0x10 [ 239.797532][ T9484] should_fail_ex+0x414/0x560 [ 239.797572][ T9484] should_failslab+0xa8/0x100 [ 239.797596][ T9484] kmem_cache_alloc_node_noprof+0x77/0x710 [ 239.797619][ T9484] ? __alloc_skb+0x112/0x2d0 [ 239.797656][ T9484] __alloc_skb+0x112/0x2d0 [ 239.797688][ T9484] netlink_ack+0x146/0xa50 [ 239.797704][ T9484] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 239.797728][ T9484] ? perf_trace_run_bpf_submit+0xee/0x170 [ 239.797778][ T9484] netlink_rcv_skb+0x28c/0x470 [ 239.797807][ T9484] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 239.797833][ T9484] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 239.797883][ T9484] ? netlink_deliver_tap+0x2e/0x1b0 [ 239.797919][ T9484] netlink_unicast+0x82c/0x9e0 [ 239.797966][ T9484] ? __pfx_netlink_unicast+0x10/0x10 [ 239.797992][ T9484] ? netlink_sendmsg+0x642/0xb30 [ 239.798010][ T9484] ? skb_put+0x11b/0x210 [ 239.798040][ T9484] netlink_sendmsg+0x805/0xb30 [ 239.798091][ T9484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.798123][ T9484] ? aa_sock_msg_perm+0xf1/0x1d0 [ 239.798152][ T9484] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 239.798176][ T9484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.798201][ T9484] __sock_sendmsg+0x219/0x270 [ 239.798231][ T9484] ____sys_sendmsg+0x505/0x830 [ 239.798276][ T9484] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.798324][ T9484] ? import_iovec+0x74/0xa0 [ 239.798358][ T9484] ___sys_sendmsg+0x21f/0x2a0 [ 239.798386][ T9484] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.798465][ T9484] ? __fget_files+0x2a/0x420 [ 239.798519][ T9484] ? __fget_files+0x2a/0x420 [ 239.798540][ T9484] ? __fget_files+0x3a0/0x420 [ 239.798587][ T9484] __x64_sys_sendmsg+0x19b/0x260 [ 239.798620][ T9484] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 239.798637][ T9484] ? perf_trace_preemptirq_template+0xa3/0x340 [ 239.798765][ T9484] ? __pfx_ksys_write+0x10/0x10 [ 239.798800][ T9484] ? do_syscall_64+0xbe/0xfa0 [ 239.798834][ T9484] do_syscall_64+0xfa/0xfa0 [ 239.798856][ T9484] ? lockdep_hardirqs_on+0x9c/0x150 [ 239.798880][ T9484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.798898][ T9484] ? clear_bhb_loop+0x60/0xb0 [ 239.798927][ T9484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.798943][ T9484] RIP: 0033:0x7fbeb3d8eec9 [ 239.798961][ T9484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.798972][ T9484] RSP: 002b:00007fbeb4c6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.798991][ T9484] RAX: ffffffffffffffda RBX: 00007fbeb3fe5fa0 RCX: 00007fbeb3d8eec9 [ 239.799003][ T9484] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000004 [ 239.799015][ T9484] RBP: 00007fbeb4c6f090 R08: 0000000000000000 R09: 0000000000000000 [ 239.799025][ T9484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.799035][ T9484] R13: 00007fbeb3fe6038 R14: 00007fbeb3fe5fa0 R15: 00007ffc10158c08 [ 239.799090][ T9484] [ 240.164045][ T9488] __nla_validate_parse: 3 callbacks suppressed [ 240.164072][ T9488] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1263'. [ 240.205098][ T9488] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1263'. [ 240.221410][ T9488] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1263'. [ 240.439199][ T9498] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1269'. [ 240.451918][ T9498] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1269'. [ 240.463476][ T9498] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1269'. [ 241.165949][ T9528] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1278'. [ 241.185284][ T9528] net_ratelimit: 5 callbacks suppressed [ 241.185314][ T9528] openvswitch: netlink: Flow actions attr not present in new flow. [ 241.299772][ T9533] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1280'. [ 241.343295][ T9533] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1280'. [ 241.456296][ T9536] FAULT_INJECTION: forcing a failure. [ 241.456296][ T9536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.512976][ T9536] CPU: 0 UID: 0 PID: 9536 Comm: syz.3.1282 Not tainted syzkaller #0 PREEMPT(full) [ 241.513003][ T9536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 241.513011][ T9536] Call Trace: [ 241.513018][ T9536] [ 241.513026][ T9536] dump_stack_lvl+0x189/0x250 [ 241.513048][ T9536] ? __pfx____ratelimit+0x10/0x10 [ 241.513068][ T9536] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.513083][ T9536] ? __pfx__printk+0x10/0x10 [ 241.513100][ T9536] ? __might_fault+0xb0/0x130 [ 241.513128][ T9536] should_fail_ex+0x414/0x560 [ 241.513165][ T9536] _copy_from_user+0x2d/0xb0 [ 241.513186][ T9536] sock_do_ioctl+0x182/0x300 [ 241.513207][ T9536] ? __pfx_sock_do_ioctl+0x10/0x10 [ 241.513238][ T9536] sock_ioctl+0x576/0x790 [ 241.513254][ T9536] ? __pfx_sock_ioctl+0x10/0x10 [ 241.513273][ T9536] ? __fget_files+0x3a0/0x420 [ 241.513292][ T9536] ? __fget_files+0x2a/0x420 [ 241.513315][ T9536] ? bpf_lsm_file_ioctl+0x9/0x20 [ 241.513332][ T9536] ? __pfx_sock_ioctl+0x10/0x10 [ 241.513348][ T9536] __se_sys_ioctl+0xfc/0x170 [ 241.513370][ T9536] do_syscall_64+0xfa/0xfa0 [ 241.513391][ T9536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.513405][ T9536] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 241.513420][ T9536] ? clear_bhb_loop+0x60/0xb0 [ 241.513440][ T9536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.513456][ T9536] RIP: 0033:0x7f0f4978eec9 [ 241.513472][ T9536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.513486][ T9536] RSP: 002b:00007f0f4a5c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 241.513504][ T9536] RAX: ffffffffffffffda RBX: 00007f0f499e5fa0 RCX: 00007f0f4978eec9 [ 241.513517][ T9536] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000004 [ 241.513528][ T9536] RBP: 00007f0f4a5c3090 R08: 0000000000000000 R09: 0000000000000000 [ 241.513537][ T9536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.513547][ T9536] R13: 00007f0f499e6038 R14: 00007f0f499e5fa0 R15: 00007ffe4e9c6e18 [ 241.513573][ T9536] [ 242.330247][ T9554] FAULT_INJECTION: forcing a failure. [ 242.330247][ T9554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.441039][ T9554] CPU: 1 UID: 0 PID: 9554 Comm: syz.3.1290 Not tainted syzkaller #0 PREEMPT(full) [ 242.441066][ T9554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 242.441077][ T9554] Call Trace: [ 242.441085][ T9554] [ 242.441093][ T9554] dump_stack_lvl+0x189/0x250 [ 242.441117][ T9554] ? __pfx____ratelimit+0x10/0x10 [ 242.441141][ T9554] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.441159][ T9554] ? __pfx__printk+0x10/0x10 [ 242.441193][ T9554] should_fail_ex+0x414/0x560 [ 242.441225][ T9554] _copy_to_user+0x31/0xb0 [ 242.441250][ T9554] simple_read_from_buffer+0xe1/0x170 [ 242.441280][ T9554] proc_fail_nth_read+0x1b3/0x220 [ 242.441303][ T9554] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 242.441326][ T9554] ? rw_verify_area+0x2a6/0x4d0 [ 242.441352][ T9554] ? __lock_acquire+0xab9/0xd20 [ 242.441374][ T9554] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 242.441395][ T9554] vfs_read+0x200/0xa30 [ 242.441414][ T9554] ? fdget_pos+0x247/0x320 [ 242.441442][ T9554] ? __pfx___mutex_lock+0x10/0x10 [ 242.441467][ T9554] ? __pfx_vfs_read+0x10/0x10 [ 242.441490][ T9554] ? __fget_files+0x2a/0x420 [ 242.441517][ T9554] ? __fget_files+0x3a0/0x420 [ 242.441538][ T9554] ? __fget_files+0x2a/0x420 [ 242.441571][ T9554] ksys_read+0x145/0x250 [ 242.441595][ T9554] ? __pfx_ksys_read+0x10/0x10 [ 242.441626][ T9554] ? do_syscall_64+0xbe/0xfa0 [ 242.441654][ T9554] do_syscall_64+0xfa/0xfa0 [ 242.441675][ T9554] ? lockdep_hardirqs_on+0x9c/0x150 [ 242.441697][ T9554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.441714][ T9554] ? clear_bhb_loop+0x60/0xb0 [ 242.441736][ T9554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.441753][ T9554] RIP: 0033:0x7f0f4978d8dc [ 242.441769][ T9554] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 242.441783][ T9554] RSP: 002b:00007f0f4a5c3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 242.441802][ T9554] RAX: ffffffffffffffda RBX: 00007f0f499e5fa0 RCX: 00007f0f4978d8dc [ 242.441815][ T9554] RDX: 000000000000000f RSI: 00007f0f4a5c30a0 RDI: 0000000000000004 [ 242.441825][ T9554] RBP: 00007f0f4a5c3090 R08: 0000000000000000 R09: 0000000000000000 [ 242.441836][ T9554] R10: 00002000000009c0 R11: 0000000000000246 R12: 0000000000000001 [ 242.441846][ T9554] R13: 00007f0f499e6038 R14: 00007f0f499e5fa0 R15: 00007ffe4e9c6e18 [ 242.441883][ T9554] [ 243.322566][ T9583] FAULT_INJECTION: forcing a failure. [ 243.322566][ T9583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.363877][ T9583] CPU: 0 UID: 0 PID: 9583 Comm: syz.1.1300 Not tainted syzkaller #0 PREEMPT(full) [ 243.363902][ T9583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 243.363912][ T9583] Call Trace: [ 243.363918][ T9583] [ 243.363926][ T9583] dump_stack_lvl+0x189/0x250 [ 243.363948][ T9583] ? __pfx____ratelimit+0x10/0x10 [ 243.363969][ T9583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.363987][ T9583] ? __pfx__printk+0x10/0x10 [ 243.364002][ T9583] ? __might_fault+0xb0/0x130 [ 243.364022][ T9583] ? __might_fault+0xb0/0x130 [ 243.364043][ T9583] should_fail_ex+0x414/0x560 [ 243.364075][ T9583] _copy_from_user+0x2d/0xb0 [ 243.364098][ T9583] ___sys_sendmsg+0x158/0x2a0 [ 243.364126][ T9583] ? __pfx____sys_sendmsg+0x10/0x10 [ 243.364176][ T9583] ? __fget_files+0x2a/0x420 [ 243.364215][ T9583] ? __fget_files+0x2a/0x420 [ 243.364244][ T9583] ? __fget_files+0x3a0/0x420 [ 243.364280][ T9583] __x64_sys_sendmsg+0x19b/0x260 [ 243.364308][ T9583] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 243.364343][ T9583] ? __pfx_ksys_write+0x10/0x10 [ 243.364370][ T9583] ? do_syscall_64+0xbe/0xfa0 [ 243.364397][ T9583] do_syscall_64+0xfa/0xfa0 [ 243.364419][ T9583] ? lockdep_hardirqs_on+0x9c/0x150 [ 243.364441][ T9583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.364459][ T9583] ? clear_bhb_loop+0x60/0xb0 [ 243.364486][ T9583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.364503][ T9583] RIP: 0033:0x7efe3bd8eec9 [ 243.364521][ T9583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.364535][ T9583] RSP: 002b:00007efe3cb9b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.364554][ T9583] RAX: ffffffffffffffda RBX: 00007efe3bfe5fa0 RCX: 00007efe3bd8eec9 [ 243.364568][ T9583] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 243.364579][ T9583] RBP: 00007efe3cb9b090 R08: 0000000000000000 R09: 0000000000000000 [ 243.364590][ T9583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.364600][ T9583] R13: 00007efe3bfe6038 R14: 00007efe3bfe5fa0 R15: 00007ffc7eafb9a8 [ 243.364637][ T9583] [ 247.151098][ T9619] netlink: 'syz.3.1315': attribute type 10 has an invalid length. [ 247.206008][ T9619] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1315'. [ 247.276771][ T9622] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1316'. [ 248.318160][ T9651] FAULT_INJECTION: forcing a failure. [ 248.318160][ T9651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.337755][ T9651] CPU: 0 UID: 0 PID: 9651 Comm: syz.1.1323 Not tainted syzkaller #0 PREEMPT(full) [ 248.337790][ T9651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 248.337801][ T9651] Call Trace: [ 248.337809][ T9651] [ 248.337817][ T9651] dump_stack_lvl+0x189/0x250 [ 248.337841][ T9651] ? __pfx____ratelimit+0x10/0x10 [ 248.337865][ T9651] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.337883][ T9651] ? __pfx__printk+0x10/0x10 [ 248.337901][ T9651] ? __might_fault+0xb0/0x130 [ 248.337925][ T9651] ? __might_fault+0xb0/0x130 [ 248.337952][ T9651] should_fail_ex+0x414/0x560 [ 248.337985][ T9651] _copy_from_iter+0x1de/0x1790 [ 248.338024][ T9651] ? __pfx__copy_from_iter+0x10/0x10 [ 248.338047][ T9651] ? __build_skb_around+0x262/0x3f0 [ 248.338072][ T9651] ? netlink_sendmsg+0x642/0xb30 [ 248.338092][ T9651] ? skb_put+0x11b/0x210 [ 248.338119][ T9651] netlink_sendmsg+0x6b2/0xb30 [ 248.338151][ T9651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.338177][ T9651] ? aa_sock_msg_perm+0xf1/0x1d0 [ 248.338199][ T9651] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 248.338223][ T9651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.338246][ T9651] __sock_sendmsg+0x219/0x270 [ 248.338269][ T9651] sock_write_iter+0x279/0x360 [ 248.338290][ T9651] ? __pfx_sock_write_iter+0x10/0x10 [ 248.338303][ T9651] ? perf_trace_lock+0xec/0x3b0 [ 248.338333][ T9651] ? bpf_lsm_file_permission+0x9/0x20 [ 248.338350][ T9651] ? security_file_permission+0x75/0x290 [ 248.338385][ T9651] vfs_write+0x5c6/0xb30 [ 248.338413][ T9651] ? __pfx_sock_write_iter+0x10/0x10 [ 248.338431][ T9651] ? __pfx_vfs_write+0x10/0x10 [ 248.338464][ T9651] ? __fget_files+0x2a/0x420 [ 248.338497][ T9651] ksys_write+0x145/0x250 [ 248.338520][ T9651] ? __pfx_ksys_write+0x10/0x10 [ 248.338545][ T9651] ? do_syscall_64+0xbe/0xfa0 [ 248.338573][ T9651] do_syscall_64+0xfa/0xfa0 [ 248.338596][ T9651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.338613][ T9651] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 248.338629][ T9651] ? clear_bhb_loop+0x60/0xb0 [ 248.338651][ T9651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.338667][ T9651] RIP: 0033:0x7efe3bd8eec9 [ 248.338684][ T9651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.338698][ T9651] RSP: 002b:00007efe3cb7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 248.338717][ T9651] RAX: ffffffffffffffda RBX: 00007efe3bfe6090 RCX: 00007efe3bd8eec9 [ 248.338730][ T9651] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 248.338741][ T9651] RBP: 00007efe3cb7a090 R08: 0000000000000000 R09: 0000000000000000 [ 248.338752][ T9651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.338769][ T9651] R13: 00007efe3bfe6128 R14: 00007efe3bfe6090 R15: 00007ffc7eafb9a8 [ 248.338808][ T9651] [ 250.545311][ T9655] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.1324'. [ 251.422211][ T9691] netlink: 'syz.1.1338': attribute type 1 has an invalid length. [ 251.462038][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1338'. [ 251.477702][ T9690] netlink: 'syz.0.1337': attribute type 1 has an invalid length. [ 251.504355][ T9690] netlink: 'syz.0.1337': attribute type 2 has an invalid length. [ 251.605096][ T9700] FAULT_INJECTION: forcing a failure. [ 251.605096][ T9700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.626900][ T9700] CPU: 0 UID: 0 PID: 9700 Comm: syz.4.1342 Not tainted syzkaller #0 PREEMPT(full) [ 251.626926][ T9700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 251.626937][ T9700] Call Trace: [ 251.626943][ T9700] [ 251.626951][ T9700] dump_stack_lvl+0x189/0x250 [ 251.626974][ T9700] ? __pfx____ratelimit+0x10/0x10 [ 251.626996][ T9700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.627013][ T9700] ? __pfx__printk+0x10/0x10 [ 251.627031][ T9700] ? __might_fault+0xb0/0x130 [ 251.627063][ T9700] should_fail_ex+0x414/0x560 [ 251.627090][ T9700] _copy_from_user+0x2d/0xb0 [ 251.627110][ T9700] ___sys_sendmsg+0x158/0x2a0 [ 251.627134][ T9700] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.627190][ T9700] ? __fget_files+0x2a/0x420 [ 251.627209][ T9700] ? __fget_files+0x3a0/0x420 [ 251.627241][ T9700] __x64_sys_sendmsg+0x19b/0x260 [ 251.627266][ T9700] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 251.627285][ T9700] ? perf_trace_preemptirq_template+0xa3/0x340 [ 251.627315][ T9700] ? __pfx_ksys_write+0x10/0x10 [ 251.627338][ T9700] ? do_syscall_64+0xbe/0xfa0 [ 251.627363][ T9700] do_syscall_64+0xfa/0xfa0 [ 251.627383][ T9700] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.627404][ T9700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.627425][ T9700] ? clear_bhb_loop+0x60/0xb0 [ 251.627446][ T9700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.627462][ T9700] RIP: 0033:0x7fbeb3d8eec9 [ 251.627477][ T9700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.627490][ T9700] RSP: 002b:00007fbeb4c6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.627509][ T9700] RAX: ffffffffffffffda RBX: 00007fbeb3fe5fa0 RCX: 00007fbeb3d8eec9 [ 251.627522][ T9700] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 251.627542][ T9700] RBP: 00007fbeb4c6f090 R08: 0000000000000000 R09: 0000000000000000 [ 251.627552][ T9700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.627561][ T9700] R13: 00007fbeb3fe6038 R14: 00007fbeb3fe5fa0 R15: 00007ffc10158c08 [ 251.627593][ T9700] [ 252.153133][ T9718] netlink: 'syz.0.1344': attribute type 1 has an invalid length. [ 252.164655][ T9718] netlink: 'syz.0.1344': attribute type 3 has an invalid length. [ 252.173260][ T9718] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1344'. [ 252.202905][ T9719] FAULT_INJECTION: forcing a failure. [ 252.202905][ T9719] name failslab, interval 1, probability 0, space 0, times 0 [ 252.223344][ T9719] CPU: 1 UID: 0 PID: 9719 Comm: syz.3.1346 Not tainted syzkaller #0 PREEMPT(full) [ 252.223370][ T9719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 252.223380][ T9719] Call Trace: [ 252.223387][ T9719] [ 252.223396][ T9719] dump_stack_lvl+0x189/0x250 [ 252.223421][ T9719] ? __pfx____ratelimit+0x10/0x10 [ 252.223455][ T9719] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.223475][ T9719] ? __pfx__printk+0x10/0x10 [ 252.223502][ T9719] ? perf_trace_lock+0xec/0x3b0 [ 252.223539][ T9719] should_fail_ex+0x414/0x560 [ 252.223570][ T9719] should_failslab+0xa8/0x100 [ 252.223593][ T9719] kmem_cache_alloc_noprof+0x74/0x6e0 [ 252.223633][ T9719] ? skb_clone+0x212/0x3a0 [ 252.223667][ T9719] skb_clone+0x212/0x3a0 [ 252.223698][ T9719] __netlink_deliver_tap+0x404/0x850 [ 252.223745][ T9719] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.223770][ T9719] netlink_deliver_tap+0x19c/0x1b0 [ 252.223802][ T9719] __netlink_sendskb+0x47/0x90 [ 252.223825][ T9719] netlink_dump+0xa84/0xe90 [ 252.223871][ T9719] ? __pfx_netlink_dump+0x10/0x10 [ 252.223924][ T9719] ? genl_start+0x499/0x6c0 [ 252.223964][ T9719] __netlink_dump_start+0x5cb/0x7e0 [ 252.224002][ T9719] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 252.224035][ T9719] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 252.224076][ T9719] ? __pfx_genl_start+0x10/0x10 [ 252.224097][ T9719] ? __pfx_genl_dumpit+0x10/0x10 [ 252.224117][ T9719] ? __pfx_genl_done+0x10/0x10 [ 252.224143][ T9719] ? bpf_lsm_capable+0x9/0x20 [ 252.224160][ T9719] ? security_capable+0x7e/0x2e0 [ 252.224193][ T9719] genl_rcv_msg+0x5da/0x790 [ 252.224237][ T9719] ? __pfx_genl_rcv_msg+0x10/0x10 [ 252.224261][ T9719] ? __pfx_batadv_gw_dump+0x10/0x10 [ 252.224290][ T9719] ? __asan_memcpy+0x40/0x70 [ 252.224308][ T9719] ? __pfx_ref_tracker_free+0x10/0x10 [ 252.224342][ T9719] netlink_rcv_skb+0x205/0x470 [ 252.224360][ T9719] ? __lock_acquire+0xab9/0xd20 [ 252.224385][ T9719] ? __pfx_genl_rcv_msg+0x10/0x10 [ 252.224414][ T9719] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 252.224473][ T9719] ? down_read+0x1ad/0x2e0 [ 252.224497][ T9719] genl_rcv+0x28/0x40 [ 252.224524][ T9719] netlink_unicast+0x82c/0x9e0 [ 252.224573][ T9719] ? __pfx_netlink_unicast+0x10/0x10 [ 252.224607][ T9719] ? netlink_sendmsg+0x642/0xb30 [ 252.224629][ T9719] ? skb_put+0x11b/0x210 [ 252.224662][ T9719] netlink_sendmsg+0x805/0xb30 [ 252.224704][ T9719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.224733][ T9719] ? aa_sock_msg_perm+0xf1/0x1d0 [ 252.224758][ T9719] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 252.224781][ T9719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.224810][ T9719] __sock_sendmsg+0x219/0x270 [ 252.224833][ T9719] ____sys_sendmsg+0x505/0x830 [ 252.224870][ T9719] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.224909][ T9719] ? import_iovec+0x74/0xa0 [ 252.224936][ T9719] ___sys_sendmsg+0x21f/0x2a0 [ 252.224963][ T9719] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.225027][ T9719] ? __fget_files+0x2a/0x420 [ 252.225075][ T9719] ? __fget_files+0x2a/0x420 [ 252.225093][ T9719] ? __fget_files+0x3a0/0x420 [ 252.225136][ T9719] __x64_sys_sendmsg+0x19b/0x260 [ 252.225170][ T9719] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 252.225189][ T9719] ? irqentry_exit+0x74/0x90 [ 252.225257][ T9719] do_syscall_64+0xfa/0xfa0 [ 252.225289][ T9719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.225326][ T9719] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 252.225342][ T9719] ? clear_bhb_loop+0x60/0xb0 [ 252.225368][ T9719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.225383][ T9719] RIP: 0033:0x7f0f4978eec9 [ 252.225401][ T9719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.225415][ T9719] RSP: 002b:00007f0f4a5c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.225434][ T9719] RAX: ffffffffffffffda RBX: 00007f0f499e5fa0 RCX: 00007f0f4978eec9 [ 252.225446][ T9719] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 252.225457][ T9719] RBP: 00007f0f4a5c3090 R08: 0000000000000000 R09: 0000000000000000 [ 252.225467][ T9719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.225477][ T9719] R13: 00007f0f499e6038 R14: 00007f0f499e5fa0 R15: 00007ffe4e9c6e18 [ 252.225526][ T9719] [ 252.714610][ T9723] FAULT_INJECTION: forcing a failure. [ 252.714610][ T9723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.748263][ T9723] CPU: 1 UID: 0 PID: 9723 Comm: syz.2.1348 Not tainted syzkaller #0 PREEMPT(full) [ 252.748290][ T9723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 252.748301][ T9723] Call Trace: [ 252.748309][ T9723] [ 252.748317][ T9723] dump_stack_lvl+0x189/0x250 [ 252.748340][ T9723] ? __pfx____ratelimit+0x10/0x10 [ 252.748362][ T9723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.748379][ T9723] ? __pfx__printk+0x10/0x10 [ 252.748405][ T9723] ? __might_fault+0xb0/0x130 [ 252.748438][ T9723] should_fail_ex+0x414/0x560 [ 252.748466][ T9723] _copy_from_iter+0x1de/0x1790 [ 252.748493][ T9723] ? _copy_from_iter+0x24f/0x1790 [ 252.748518][ T9723] ? __pfx__copy_from_iter+0x10/0x10 [ 252.748535][ T9723] ? sock_alloc_send_pskb+0x86b/0x980 [ 252.748565][ T9723] ? __pfx__copy_from_iter+0x10/0x10 [ 252.748587][ T9723] ? page_copy_sane+0x16a/0x280 [ 252.748614][ T9723] copy_page_from_iter+0xdd/0x170 [ 252.748638][ T9723] skb_copy_datagram_from_iter+0x306/0x720 [ 252.748676][ T9723] tun_get_user+0x1691/0x3e90 [ 252.748718][ T9723] ? aa_file_perm+0x44d/0x1550 [ 252.748739][ T9723] ? __pfx_tun_get_user+0x10/0x10 [ 252.748757][ T9723] ? _parse_integer_limit+0x1ae/0x1f0 [ 252.748783][ T9723] ? __lock_acquire+0xab9/0xd20 [ 252.748814][ T9723] ? ref_tracker_alloc+0x318/0x460 [ 252.748829][ T9723] ? __lock_acquire+0xab9/0xd20 [ 252.748853][ T9723] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 252.748875][ T9723] ? tun_get+0x1c/0x2f0 [ 252.748897][ T9723] ? tun_get+0x1c/0x2f0 [ 252.748913][ T9723] ? tun_get+0x1c/0x2f0 [ 252.748933][ T9723] tun_chr_write_iter+0x113/0x200 [ 252.748952][ T9723] vfs_write+0x5c6/0xb30 [ 252.748980][ T9723] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 252.749000][ T9723] ? __pfx_vfs_write+0x10/0x10 [ 252.749031][ T9723] ? __fget_files+0x2a/0x420 [ 252.749064][ T9723] ksys_write+0x145/0x250 [ 252.749089][ T9723] ? __pfx_ksys_write+0x10/0x10 [ 252.749116][ T9723] ? do_syscall_64+0xbe/0xfa0 [ 252.749154][ T9723] do_syscall_64+0xfa/0xfa0 [ 252.749175][ T9723] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.749197][ T9723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.749215][ T9723] ? clear_bhb_loop+0x60/0xb0 [ 252.749234][ T9723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.749250][ T9723] RIP: 0033:0x7fa628f8eec9 [ 252.749264][ T9723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.749277][ T9723] RSP: 002b:00007fa629dee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 252.749295][ T9723] RAX: ffffffffffffffda RBX: 00007fa6291e6090 RCX: 00007fa628f8eec9 [ 252.749307][ T9723] RDX: 000000000000fdef RSI: 0000200000000200 RDI: 00000000000000c8 [ 252.749316][ T9723] RBP: 00007fa629dee090 R08: 0000000000000000 R09: 0000000000000000 [ 252.749326][ T9723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 252.749336][ T9723] R13: 00007fa6291e6128 R14: 00007fa6291e6090 R15: 00007ffcb9dacb98 [ 252.749366][ T9723] [ 253.283230][ T9736] FAULT_INJECTION: forcing a failure. [ 253.283230][ T9736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.389969][ T9741] netlink: 'syz.4.1355': attribute type 1 has an invalid length. [ 253.398142][ T9741] netlink: 'syz.4.1355': attribute type 2 has an invalid length. [ 253.430995][ T9736] CPU: 1 UID: 0 PID: 9736 Comm: syz.0.1351 Not tainted syzkaller #0 PREEMPT(full) [ 253.431019][ T9736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 253.431029][ T9736] Call Trace: [ 253.431037][ T9736] [ 253.431045][ T9736] dump_stack_lvl+0x189/0x250 [ 253.431066][ T9736] ? __pfx____ratelimit+0x10/0x10 [ 253.431085][ T9736] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.431099][ T9736] ? __pfx__printk+0x10/0x10 [ 253.431115][ T9736] ? __might_fault+0xb0/0x130 [ 253.431145][ T9736] should_fail_ex+0x414/0x560 [ 253.431175][ T9736] _copy_from_iter+0x1de/0x1790 [ 253.431207][ T9736] ? __pfx__copy_from_iter+0x10/0x10 [ 253.431226][ T9736] ? __build_skb_around+0x262/0x3f0 [ 253.431250][ T9736] ? netlink_sendmsg+0x642/0xb30 [ 253.431269][ T9736] ? skb_put+0x11b/0x210 [ 253.431292][ T9736] netlink_sendmsg+0x6b2/0xb30 [ 253.431320][ T9736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.431343][ T9736] ? __lock_acquire+0xab9/0xd20 [ 253.431364][ T9736] ? aa_sock_msg_perm+0xf1/0x1d0 [ 253.431383][ T9736] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 253.431406][ T9736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.431427][ T9736] __sock_sendmsg+0x219/0x270 [ 253.431449][ T9736] sock_write_iter+0x279/0x360 [ 253.431467][ T9736] ? __pfx_sock_write_iter+0x10/0x10 [ 253.431492][ T9736] ? bpf_lsm_file_permission+0x9/0x20 [ 253.431506][ T9736] ? security_file_permission+0x75/0x290 [ 253.431534][ T9736] vfs_write+0x5c6/0xb30 [ 253.431558][ T9736] ? __pfx_sock_write_iter+0x10/0x10 [ 253.431573][ T9736] ? __pfx_vfs_write+0x10/0x10 [ 253.431601][ T9736] ? __fget_files+0x2a/0x420 [ 253.431629][ T9736] ksys_write+0x145/0x250 [ 253.431650][ T9736] ? __pfx_ksys_write+0x10/0x10 [ 253.431684][ T9736] ? do_syscall_64+0xbe/0xfa0 [ 253.431729][ T9736] do_syscall_64+0xfa/0xfa0 [ 253.431750][ T9736] ? lockdep_hardirqs_on+0x9c/0x150 [ 253.431772][ T9736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.431789][ T9736] ? clear_bhb_loop+0x60/0xb0 [ 253.431813][ T9736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.431830][ T9736] RIP: 0033:0x7f341078eec9 [ 253.431846][ T9736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.431861][ T9736] RSP: 002b:00007f34115e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 253.431880][ T9736] RAX: ffffffffffffffda RBX: 00007f34109e6090 RCX: 00007f341078eec9 [ 253.431893][ T9736] RDX: 000000000000fe33 RSI: 00002000000004c0 RDI: 0000000000000005 [ 253.431904][ T9736] RBP: 00007f34115e0090 R08: 0000000000000000 R09: 0000000000000000 [ 253.431914][ T9736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.431924][ T9736] R13: 00007f34109e6128 R14: 00007f34109e6090 R15: 00007ffced877438 [ 253.431954][ T9736] [ 254.038175][ T9754] netlink: 'syz.4.1357': attribute type 10 has an invalid length. [ 254.052348][ T9754] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1357'. [ 254.070577][ T9758] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 254.091173][ T9758] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1362'. [ 254.198864][ T9754] netlink: 'syz.4.1357': attribute type 10 has an invalid length. [ 254.220177][ T9754] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1357'. [ 254.273661][ T9764] FAULT_INJECTION: forcing a failure. [ 254.273661][ T9764] name failslab, interval 1, probability 0, space 0, times 0 [ 254.313798][ T9765] netlink: 'syz.0.1363': attribute type 10 has an invalid length. [ 254.320410][ T9764] CPU: 0 UID: 0 PID: 9764 Comm: syz.1.1365 Not tainted syzkaller #0 PREEMPT(full) [ 254.320434][ T9764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 254.320443][ T9764] Call Trace: [ 254.320449][ T9764] [ 254.320455][ T9764] dump_stack_lvl+0x189/0x250 [ 254.320476][ T9764] ? __pfx____ratelimit+0x10/0x10 [ 254.320498][ T9764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.320516][ T9764] ? __pfx__printk+0x10/0x10 [ 254.320540][ T9764] ? __pfx___might_resched+0x10/0x10 [ 254.320569][ T9764] should_fail_ex+0x414/0x560 [ 254.320600][ T9764] should_failslab+0xa8/0x100 [ 254.320625][ T9764] kmem_cache_alloc_node_noprof+0x77/0x710 [ 254.320647][ T9764] ? __alloc_skb+0x112/0x2d0 [ 254.320666][ T9764] ? netlink_autobind+0xdb/0x300 [ 254.320700][ T9764] __alloc_skb+0x112/0x2d0 [ 254.320725][ T9764] netlink_sendmsg+0x5c6/0xb30 [ 254.320757][ T9764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.320781][ T9764] ? aa_sock_msg_perm+0xf1/0x1d0 [ 254.320803][ T9764] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 254.320826][ T9764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.320848][ T9764] __sock_sendmsg+0x219/0x270 [ 254.320869][ T9764] ____sys_sendmsg+0x505/0x830 [ 254.320899][ T9764] ? __pfx_____sys_sendmsg+0x10/0x10 [ 254.320933][ T9764] ? import_iovec+0x74/0xa0 [ 254.320959][ T9764] ___sys_sendmsg+0x21f/0x2a0 [ 254.320984][ T9764] ? __pfx____sys_sendmsg+0x10/0x10 [ 254.321038][ T9764] ? __fget_files+0x2a/0x420 [ 254.321075][ T9764] ? __fget_files+0x2a/0x420 [ 254.321095][ T9764] ? __fget_files+0x3a0/0x420 [ 254.321129][ T9764] __x64_sys_sendmsg+0x19b/0x260 [ 254.321155][ T9764] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 254.321174][ T9764] ? perf_trace_preemptirq_template+0xa3/0x340 [ 254.321210][ T9764] ? __pfx_ksys_write+0x10/0x10 [ 254.321236][ T9764] ? do_syscall_64+0xbe/0xfa0 [ 254.321266][ T9764] do_syscall_64+0xfa/0xfa0 [ 254.321286][ T9764] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.321307][ T9764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.321324][ T9764] ? clear_bhb_loop+0x60/0xb0 [ 254.321345][ T9764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.321362][ T9764] RIP: 0033:0x7efe3bd8eec9 [ 254.321377][ T9764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.321391][ T9764] RSP: 002b:00007efe3cb9b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.321410][ T9764] RAX: ffffffffffffffda RBX: 00007efe3bfe5fa0 RCX: 00007efe3bd8eec9 [ 254.321422][ T9764] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 254.321432][ T9764] RBP: 00007efe3cb9b090 R08: 0000000000000000 R09: 0000000000000000 [ 254.321442][ T9764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.321452][ T9764] R13: 00007efe3bfe6038 R14: 00007efe3bfe5fa0 R15: 00007ffc7eafb9a8 [ 254.321485][ T9764] [ 254.627634][ T9765] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1363'. [ 254.643743][ T9765] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 255.459687][ T9790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1371'. [ 255.715624][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.722850][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.879367][ T9800] FAULT_INJECTION: forcing a failure. [ 255.879367][ T9800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.917716][ T9800] CPU: 0 UID: 0 PID: 9800 Comm: syz.0.1374 Not tainted syzkaller #0 PREEMPT(full) [ 255.917742][ T9800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 255.917753][ T9800] Call Trace: [ 255.917760][ T9800] [ 255.917768][ T9800] dump_stack_lvl+0x189/0x250 [ 255.917792][ T9800] ? __pfx____ratelimit+0x10/0x10 [ 255.917815][ T9800] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.917832][ T9800] ? __pfx__printk+0x10/0x10 [ 255.917851][ T9800] ? __might_fault+0xb0/0x130 [ 255.917883][ T9800] should_fail_ex+0x414/0x560 [ 255.917911][ T9800] _copy_from_iter+0x1de/0x1790 [ 255.917929][ T9800] ? skb_set_owner_w+0x25b/0x3a0 [ 255.917968][ T9800] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.917995][ T9800] ? __pfx__copy_from_iter+0x10/0x10 [ 255.918026][ T9800] ? skb_copy_datagram_from_iter+0xe5/0x720 [ 255.918057][ T9800] skb_copy_datagram_from_iter+0xf5/0x720 [ 255.918086][ T9800] ? skb_put+0x11b/0x210 [ 255.918110][ T9800] tun_get_user+0x1691/0x3e90 [ 255.918150][ T9800] ? aa_file_perm+0x44d/0x1550 [ 255.918175][ T9800] ? __pfx_tun_get_user+0x10/0x10 [ 255.918193][ T9800] ? _parse_integer_limit+0x1ae/0x1f0 [ 255.918218][ T9800] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.918247][ T9800] ? ref_tracker_alloc+0x318/0x460 [ 255.918262][ T9800] ? __lock_acquire+0xab9/0xd20 [ 255.918287][ T9800] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 255.918310][ T9800] ? tun_get+0x1c/0x2f0 [ 255.918334][ T9800] ? tun_get+0x1c/0x2f0 [ 255.918351][ T9800] ? tun_get+0x1c/0x2f0 [ 255.918374][ T9800] tun_chr_write_iter+0x113/0x200 [ 255.918396][ T9800] vfs_write+0x5c6/0xb30 [ 255.918422][ T9800] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 255.918442][ T9800] ? __pfx_vfs_write+0x10/0x10 [ 255.918485][ T9800] ksys_write+0x145/0x250 [ 255.918508][ T9800] ? __pfx_ksys_write+0x10/0x10 [ 255.918532][ T9800] ? do_syscall_64+0xbe/0xfa0 [ 255.918559][ T9800] do_syscall_64+0xfa/0xfa0 [ 255.918587][ T9800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.918604][ T9800] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 255.918620][ T9800] ? clear_bhb_loop+0x60/0xb0 [ 255.918642][ T9800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.918658][ T9800] RIP: 0033:0x7f341078eec9 [ 255.918674][ T9800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.918688][ T9800] RSP: 002b:00007f34115e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 255.918708][ T9800] RAX: ffffffffffffffda RBX: 00007f34109e6090 RCX: 00007f341078eec9 [ 255.918719][ T9800] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 00000000000000c8 [ 255.918729][ T9800] RBP: 00007f34115e0090 R08: 0000000000000000 R09: 0000000000000000 [ 255.918738][ T9800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.918753][ T9800] R13: 00007f34109e6128 R14: 00007f34109e6090 R15: 00007ffced877438 [ 255.918780][ T9800] [ 256.433214][ T9815] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1380'. [ 256.445202][ T9815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1380'. [ 256.455254][ T9815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1380'. [ 256.968247][ T9830] netlink: 'syz.0.1385': attribute type 10 has an invalid length. [ 256.992887][ T9830] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1385'. [ 257.706924][ T9838] lo speed is unknown, defaulting to 1000 [ 257.715958][ T9838] lo speed is unknown, defaulting to 1000 [ 257.825705][ T9838] lo speed is unknown, defaulting to 1000 [ 257.931509][ T9838] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 258.069960][ T9838] lo speed is unknown, defaulting to 1000 [ 258.116194][ T9838] lo speed is unknown, defaulting to 1000 [ 258.129734][ T9838] lo speed is unknown, defaulting to 1000 [ 258.171979][ T9838] lo speed is unknown, defaulting to 1000 [ 258.181982][ T9838] lo speed is unknown, defaulting to 1000 [ 258.497869][ T9852] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1393'. [ 258.978968][ T9874] netlink: 'syz.4.1400': attribute type 10 has an invalid length. [ 259.036530][ T30] audit: type=1107 audit(1759940961.207:3): pid=9867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 259.113050][ T9878] netlink: 'syz.3.1402': attribute type 10 has an invalid length. [ 259.132326][ T9878] bond0: (slave dummy0): Releasing backup interface [ 259.144182][ T9878] team0: Port device dummy0 added [ 259.158707][ T9878] netlink: 'syz.3.1402': attribute type 10 has an invalid length. [ 259.216362][ T9878] team0: Port device dummy0 removed [ 259.241597][ T9878] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 259.370967][ T9880] __nla_validate_parse: 1 callbacks suppressed [ 259.370990][ T9880] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1404'. [ 259.464276][ T9884] netlink: 208608 bytes leftover after parsing attributes in process `syz.3.1405'. [ 259.495381][ T9884] netlink: 'syz.3.1405': attribute type 1 has an invalid length. [ 259.518371][ T9884] netlink: 'syz.3.1405': attribute type 2 has an invalid length. [ 259.536449][ T9884] netlink: 'syz.3.1405': attribute type 3 has an invalid length. [ 259.563195][ T9884] netlink: 'syz.3.1405': attribute type 4 has an invalid length. [ 259.580920][ T9884] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1405'. [ 260.069269][ T9898] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1408'. [ 261.225069][ T9928] netlink: 'syz.2.1419': attribute type 1 has an invalid length. [ 261.701483][ T9948] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 262.265000][ T9972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1436'. [ 262.276199][ T9972] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 262.292710][ T9972] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1436'. [ 262.400097][ T9975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1437'. [ 262.703796][ T9991] netlink: 'syz.3.1442': attribute type 2 has an invalid length. [ 262.842143][ T9998] netlink: 'syz.4.1444': attribute type 1 has an invalid length. [ 262.920307][T10002] FAULT_INJECTION: forcing a failure. [ 262.920307][T10002] name failslab, interval 1, probability 0, space 0, times 0 [ 262.973745][T10002] CPU: 0 UID: 0 PID: 10002 Comm: syz.3.1446 Not tainted syzkaller #0 PREEMPT(full) [ 262.973772][T10002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 262.973789][T10002] Call Trace: [ 262.973797][T10002] [ 262.973805][T10002] dump_stack_lvl+0x189/0x250 [ 262.973830][T10002] ? __pfx____ratelimit+0x10/0x10 [ 262.973852][T10002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.973870][T10002] ? __pfx__printk+0x10/0x10 [ 262.973893][T10002] ? __pfx___might_resched+0x10/0x10 [ 262.973909][T10002] ? fs_reclaim_acquire+0x7d/0x100 [ 262.973937][T10002] should_fail_ex+0x414/0x560 [ 262.973966][T10002] should_failslab+0xa8/0x100 [ 262.973992][T10002] kmem_cache_alloc_node_noprof+0x77/0x710 [ 262.974013][T10002] ? __alloc_skb+0x112/0x2d0 [ 262.974031][T10002] ? netlink_autobind+0xdb/0x300 [ 262.974056][T10002] __alloc_skb+0x112/0x2d0 [ 262.974080][T10002] netlink_sendmsg+0x5c6/0xb30 [ 262.974110][T10002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.974134][T10002] ? aa_sock_msg_perm+0xf1/0x1d0 [ 262.974163][T10002] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 262.974186][T10002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.974208][T10002] __sock_sendmsg+0x219/0x270 [ 262.974229][T10002] ____sys_sendmsg+0x505/0x830 [ 262.974258][T10002] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.974290][T10002] ? import_iovec+0x74/0xa0 [ 262.974320][T10002] ___sys_sendmsg+0x21f/0x2a0 [ 262.974346][T10002] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.974404][T10002] ? __fget_files+0x2a/0x420 [ 262.974426][T10002] ? __fget_files+0x3a0/0x420 [ 262.974458][T10002] __x64_sys_sendmsg+0x19b/0x260 [ 262.974483][T10002] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 262.974509][T10002] ? perf_trace_preemptirq_template+0xa3/0x340 [ 262.974543][T10002] ? __pfx_ksys_write+0x10/0x10 [ 262.974567][T10002] ? do_syscall_64+0xbe/0xfa0 [ 262.974593][T10002] do_syscall_64+0xfa/0xfa0 [ 262.974616][T10002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.974633][T10002] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 262.974650][T10002] ? clear_bhb_loop+0x60/0xb0 [ 262.974671][T10002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.974688][T10002] RIP: 0033:0x7f0f4978eec9 [ 262.974705][T10002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.974719][T10002] RSP: 002b:00007f0f4a5c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.974738][T10002] RAX: ffffffffffffffda RBX: 00007f0f499e5fa0 RCX: 00007f0f4978eec9 [ 262.974750][T10002] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000005 [ 262.974762][T10002] RBP: 00007f0f4a5c3090 R08: 0000000000000000 R09: 0000000000000000 [ 262.974772][T10002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.974785][T10002] R13: 00007f0f499e6038 R14: 00007f0f499e5fa0 R15: 00007ffe4e9c6e18 [ 262.974809][T10002] [ 263.794652][T10016] FAULT_INJECTION: forcing a failure. [ 263.794652][T10016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.847751][T10016] CPU: 0 UID: 0 PID: 10016 Comm: syz.3.1452 Not tainted syzkaller #0 PREEMPT(full) [ 263.847778][T10016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 263.847789][T10016] Call Trace: [ 263.847796][T10016] [ 263.847805][T10016] dump_stack_lvl+0x189/0x250 [ 263.847828][T10016] ? __pfx____ratelimit+0x10/0x10 [ 263.847850][T10016] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.847867][T10016] ? __pfx__printk+0x10/0x10 [ 263.847906][T10016] should_fail_ex+0x414/0x560 [ 263.847935][T10016] _copy_from_user+0x2d/0xb0 [ 263.847957][T10016] bpf_test_init+0xd8/0x150 [ 263.847981][T10016] bpf_prog_test_run_xdp+0x49e/0x10e0 [ 263.848017][T10016] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 263.848042][T10016] ? __fget_files+0x2a/0x420 [ 263.848069][T10016] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 263.848089][T10016] bpf_prog_test_run+0x2c7/0x340 [ 263.848117][T10016] __sys_bpf+0x562/0x860 [ 263.848140][T10016] ? __pfx___sys_bpf+0x10/0x10 [ 263.848942][T10016] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 263.848967][T10016] ? ksys_write+0x22a/0x250 [ 263.848989][T10016] ? __pfx_ksys_write+0x10/0x10 [ 263.849014][T10016] __x64_sys_bpf+0x7c/0x90 [ 263.849035][T10016] do_syscall_64+0xfa/0xfa0 [ 263.849056][T10016] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.849075][T10016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.849088][T10016] ? clear_bhb_loop+0x60/0xb0 [ 263.849110][T10016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.849133][T10016] RIP: 0033:0x7f0f4978eec9 [ 263.849149][T10016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.849163][T10016] RSP: 002b:00007f0f4a5c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 263.849181][T10016] RAX: ffffffffffffffda RBX: 00007f0f499e5fa0 RCX: 00007f0f4978eec9 [ 263.849190][T10016] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 000000000000000a [ 263.849220][T10016] RBP: 00007f0f4a5c3090 R08: 0000000000000000 R09: 0000000000000000 [ 263.849231][T10016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.849240][T10016] R13: 00007f0f499e6038 R14: 00007f0f499e5fa0 R15: 00007ffe4e9c6e18 [ 263.849271][T10016] [ 264.088344][ T3574] wlan1: Trigger new scan to find an IBSS to join [ 264.150137][T10024] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1456'. [ 264.227763][T10030] FAULT_INJECTION: forcing a failure. [ 264.227763][T10030] name failslab, interval 1, probability 0, space 0, times 0 [ 264.242569][T10030] CPU: 1 UID: 0 PID: 10030 Comm: syz.0.1455 Not tainted syzkaller #0 PREEMPT(full) [ 264.242595][T10030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 264.242606][T10030] Call Trace: [ 264.242613][T10030] [ 264.242621][T10030] dump_stack_lvl+0x189/0x250 [ 264.242646][T10030] ? __pfx____ratelimit+0x10/0x10 [ 264.242668][T10030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.242686][T10030] ? __pfx__printk+0x10/0x10 [ 264.242707][T10030] ? __pfx___might_resched+0x10/0x10 [ 264.242724][T10030] ? fs_reclaim_acquire+0x7d/0x100 [ 264.242751][T10030] should_fail_ex+0x414/0x560 [ 264.242781][T10030] should_failslab+0xa8/0x100 [ 264.242806][T10030] __kmalloc_cache_noprof+0x6f/0x6f0 [ 264.242826][T10030] ? rxrpc_net+0x45/0x270 [ 264.242841][T10030] ? rxrpc_lookup_local+0x54e/0x1410 [ 264.242866][T10030] rxrpc_lookup_local+0x54e/0x1410 [ 264.242895][T10030] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 264.242922][T10030] ? __local_bh_enable_ip+0x12d/0x1c0 [ 264.242940][T10030] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.242965][T10030] ? __local_bh_enable_ip+0x12d/0x1c0 [ 264.242981][T10030] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 264.242999][T10030] ? do_raw_spin_unlock+0x122/0x240 [ 264.243025][T10030] rxrpc_sendmsg+0x399/0x710 [ 264.243054][T10030] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 264.243087][T10030] __sock_sendmsg+0x219/0x270 [ 264.243110][T10030] ____sys_sendmsg+0x505/0x830 [ 264.243138][T10030] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.243171][T10030] ? import_iovec+0x74/0xa0 [ 264.243197][T10030] ___sys_sendmsg+0x21f/0x2a0 [ 264.243222][T10030] ? __pfx____sys_sendmsg+0x10/0x10 [ 264.243281][T10030] ? __fget_files+0x2a/0x420 [ 264.243302][T10030] ? __fget_files+0x3a0/0x420 [ 264.243335][T10030] __x64_sys_sendmsg+0x19b/0x260 [ 264.243362][T10030] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 264.243394][T10030] ? __pfx_ksys_write+0x10/0x10 [ 264.243419][T10030] ? do_syscall_64+0xbe/0xfa0 [ 264.243446][T10030] do_syscall_64+0xfa/0xfa0 [ 264.243467][T10030] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.243488][T10030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.243505][T10030] ? clear_bhb_loop+0x60/0xb0 [ 264.243531][T10030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.243548][T10030] RIP: 0033:0x7f341078eec9 [ 264.243564][T10030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.243578][T10030] RSP: 002b:00007f34115e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.243597][T10030] RAX: ffffffffffffffda RBX: 00007f34109e6090 RCX: 00007f341078eec9 [ 264.243610][T10030] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 264.243621][T10030] RBP: 00007f34115e0090 R08: 0000000000000000 R09: 0000000000000000 [ 264.243632][T10030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.243642][T10030] R13: 00007f34109e6128 R14: 00007f34109e6090 R15: 00007ffced877438 [ 264.243674][T10030] [ 264.268151][T10031] FAULT_INJECTION: forcing a failure. [ 264.268151][T10031] name failslab, interval 1, probability 0, space 0, times 0 [ 264.593132][T10031] CPU: 1 UID: 0 PID: 10031 Comm: syz.4.1457 Not tainted syzkaller #0 PREEMPT(full) [ 264.593158][T10031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 264.593168][T10031] Call Trace: [ 264.593174][T10031] [ 264.593182][T10031] dump_stack_lvl+0x189/0x250 [ 264.593204][T10031] ? __pfx____ratelimit+0x10/0x10 [ 264.593227][T10031] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.593245][T10031] ? __pfx__printk+0x10/0x10 [ 264.593272][T10031] ? __pfx___might_resched+0x10/0x10 [ 264.593295][T10031] should_fail_ex+0x414/0x560 [ 264.593339][T10031] should_failslab+0xa8/0x100 [ 264.593365][T10031] __kmalloc_cache_noprof+0x6f/0x6f0 [ 264.593385][T10031] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.593407][T10031] ? __nft_trans_set_add+0x5e/0x710 [ 264.593432][T10031] __nft_trans_set_add+0x5e/0x710 [ 264.593459][T10031] nf_tables_newset+0x1d74/0x2540 [ 264.593502][T10031] ? __pfx_nf_tables_newset+0x10/0x10 [ 264.593555][T10031] ? __nla_parse+0x40/0x60 [ 264.593580][T10031] nfnetlink_rcv+0x11d6/0x2590 [ 264.593644][T10031] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 264.593685][T10031] ? ref_tracker_free+0x63a/0x7d0 [ 264.593741][T10031] ? __netlink_deliver_tap+0x807/0x850 [ 264.593761][T10031] ? netlink_deliver_tap+0x2e/0x1b0 [ 264.593814][T10031] netlink_unicast+0x82c/0x9e0 [ 264.593845][T10031] ? __pfx_netlink_unicast+0x10/0x10 [ 264.593870][T10031] ? netlink_sendmsg+0x642/0xb30 [ 264.593888][T10031] ? skb_put+0x11b/0x210 [ 264.593914][T10031] netlink_sendmsg+0x805/0xb30 [ 264.593947][T10031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.593973][T10031] ? aa_sock_msg_perm+0xf1/0x1d0 [ 264.593996][T10031] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 264.594019][T10031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.594042][T10031] __sock_sendmsg+0x219/0x270 [ 264.594065][T10031] ____sys_sendmsg+0x505/0x830 [ 264.594096][T10031] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.594131][T10031] ? import_iovec+0x74/0xa0 [ 264.594159][T10031] ___sys_sendmsg+0x21f/0x2a0 [ 264.594185][T10031] ? __pfx____sys_sendmsg+0x10/0x10 [ 264.594256][T10031] ? __fget_files+0x2a/0x420 [ 264.594277][T10031] ? __fget_files+0x3a0/0x420 [ 264.594314][T10031] __x64_sys_sendmsg+0x19b/0x260 [ 264.594341][T10031] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 264.594378][T10031] ? __pfx_ksys_write+0x10/0x10 [ 264.594405][T10031] ? do_syscall_64+0xbe/0xfa0 [ 264.594433][T10031] do_syscall_64+0xfa/0xfa0 [ 264.594454][T10031] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.594476][T10031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.594493][T10031] ? clear_bhb_loop+0x60/0xb0 [ 264.594515][T10031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.594532][T10031] RIP: 0033:0x7fbeb3d8eec9 [ 264.594549][T10031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.594563][T10031] RSP: 002b:00007fbeb4c4e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.594583][T10031] RAX: ffffffffffffffda RBX: 00007fbeb3fe6090 RCX: 00007fbeb3d8eec9 [ 264.594596][T10031] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000004 [ 264.594607][T10031] RBP: 00007fbeb4c4e090 R08: 0000000000000000 R09: 0000000000000000 [ 264.594618][T10031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 264.594629][T10031] R13: 00007fbeb3fe6128 R14: 00007fbeb3fe6090 R15: 00007ffc10158c08 [ 264.594665][T10031] [ 264.958630][T10032] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 265.488330][T10049] netlink: 'syz.0.1463': attribute type 1 has an invalid length. [ 265.575605][T10059] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1465'. [ 265.847579][T10074] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1471'. [ 265.879509][T10068] FAULT_INJECTION: forcing a failure. [ 265.879509][T10068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.895553][T10068] CPU: 0 UID: 0 PID: 10068 Comm: syz.3.1470 Not tainted syzkaller #0 PREEMPT(full) [ 265.895578][T10068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 265.895589][T10068] Call Trace: [ 265.895600][T10068] [ 265.895611][T10068] dump_stack_lvl+0x189/0x250 [ 265.895644][T10068] ? __pfx____ratelimit+0x10/0x10 [ 265.895676][T10068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.895703][T10068] ? __pfx__printk+0x10/0x10 [ 265.895734][T10068] ? shmem_alloc_and_add_folio+0xcb3/0xf60 [ 265.895793][T10068] ? filemap_get_entry+0xad/0x2f0 [ 265.895815][T10068] ? filemap_get_entry+0xad/0x2f0 [ 265.895857][T10068] should_fail_ex+0x414/0x560 [ 265.895917][T10068] copy_folio_from_iter_atomic+0x325/0x1910 [ 265.895946][T10068] ? shmem_allowable_huge_orders+0x1d7/0x4f0 [ 265.896010][T10068] ? shmem_get_folio_gfp+0x1432/0x1660 [ 265.896087][T10068] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 265.896164][T10068] ? shmem_write_begin+0x15f/0x2b0 [ 265.896218][T10068] generic_perform_write+0x5df/0x900 [ 265.896306][T10068] ? __pfx_generic_perform_write+0x10/0x10 [ 265.896328][T10068] ? do_raw_spin_unlock+0x122/0x240 [ 265.896359][T10068] ? mnt_put_write_access_file+0xc0/0x100 [ 265.896393][T10068] ? file_update_time+0x416/0x490 [ 265.896443][T10068] shmem_file_write_iter+0xf8/0x120 [ 265.896509][T10068] vfs_write+0x5c6/0xb30 [ 265.896573][T10068] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 265.896608][T10068] ? __pfx_vfs_write+0x10/0x10 [ 265.896681][T10068] ? __fget_files+0x2a/0x420 [ 265.896756][T10068] ksys_write+0x145/0x250 [ 265.896846][T10068] ? __pfx_ksys_write+0x10/0x10 [ 265.896895][T10068] ? do_syscall_64+0xbe/0xfa0 [ 265.896942][T10068] do_syscall_64+0xfa/0xfa0 [ 265.896965][T10068] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.897018][T10068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.897039][T10068] ? clear_bhb_loop+0x60/0xb0 [ 265.897084][T10068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.897104][T10068] RIP: 0033:0x7f0f4978eec9 [ 265.897128][T10068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.897143][T10068] RSP: 002b:00007f0f4a5c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 265.897163][T10068] RAX: ffffffffffffffda RBX: 00007f0f499e5fa0 RCX: 00007f0f4978eec9 [ 265.897177][T10068] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000009 [ 265.897189][T10068] RBP: 00007f0f4a5c3090 R08: 0000000000000000 R09: 0000000000000000 [ 265.897200][T10068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.897211][T10068] R13: 00007f0f499e6038 R14: 00007f0f499e5fa0 R15: 00007ffe4e9c6e18 [ 265.897322][T10068] [ 266.230016][T10074] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.245575][ T5891] lo speed is unknown, defaulting to 1000 [ 266.251858][ T5891] syz2: Port: 1 Link DOWN [ 266.992169][T10106] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1480'. [ 267.346475][T10121] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1485'. [ 267.347613][T10122] netlink: 'syz.2.1486': attribute type 1 has an invalid length. [ 267.417463][T10118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1485'. [ 268.011607][T10143] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1496'. [ 268.376099][T10153] netlink: 'syz.3.1502': attribute type 12 has an invalid length. [ 268.390955][T10153] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1502'. [ 268.492668][T10149] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 268.517112][T10149] CPU: 0 UID: 0 PID: 10149 Comm: syz.2.1499 Not tainted syzkaller #0 PREEMPT(full) [ 268.517147][T10149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 268.517159][T10149] Call Trace: [ 268.517168][T10149] [ 268.517176][T10149] dump_stack_lvl+0x189/0x250 [ 268.517205][T10149] ? kernfs_path_from_node+0x2f/0x290 [ 268.517230][T10149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.517251][T10149] ? __pfx__printk+0x10/0x10 [ 268.517282][T10149] ? kernfs_path_from_node+0x2f/0x290 [ 268.517302][T10149] ? kernfs_path_from_node+0x250/0x290 [ 268.517321][T10149] ? kernfs_path_from_node+0x2f/0x290 [ 268.517348][T10149] sysfs_warn_dup+0x8e/0xa0 [ 268.517371][T10149] sysfs_do_create_link_sd+0xc0/0x110 [ 268.517395][T10149] device_add_class_symlinks+0x1cf/0x240 [ 268.517424][T10149] device_add+0x475/0xb50 [ 268.517452][T10149] wiphy_register+0x1c81/0x2aa0 [ 268.517502][T10149] ? __pfx_wiphy_register+0x10/0x10 [ 268.517530][T10149] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 268.517562][T10149] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 268.517590][T10149] ieee80211_register_hw+0x3473/0x40d0 [ 268.517629][T10149] ? ieee80211_register_hw+0x1411/0x40d0 [ 268.517661][T10149] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 268.517679][T10149] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 268.517707][T10149] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 268.517729][T10149] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 268.517757][T10149] ? __hrtimer_setup+0x187/0x210 [ 268.517775][T10149] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 268.517799][T10149] mac80211_hwsim_new_radio+0x2f7a/0x5210 [ 268.517869][T10149] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 268.517897][T10149] ? trace_kmalloc+0x1f/0xd0 [ 268.517919][T10149] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 268.517942][T10149] ? kstrndup+0xbf/0x160 [ 268.517972][T10149] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 268.518006][T10149] ? __pfx___nla_validate_parse+0x10/0x10 [ 268.518047][T10149] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 268.518085][T10149] ? rcu_is_watching+0x15/0xb0 [ 268.518112][T10149] ? __nla_parse+0x40/0x60 [ 268.518137][T10149] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 268.518167][T10149] genl_family_rcv_msg_doit+0x215/0x300 [ 268.518212][T10149] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 268.518256][T10149] ? bpf_lsm_capable+0x9/0x20 [ 268.518277][T10149] ? security_capable+0x7e/0x2e0 [ 268.518306][T10149] genl_rcv_msg+0x60e/0x790 [ 268.518343][T10149] ? __pfx_genl_rcv_msg+0x10/0x10 [ 268.518369][T10149] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 268.518398][T10149] ? perf_trace_run_bpf_submit+0xee/0x170 [ 268.518440][T10149] netlink_rcv_skb+0x205/0x470 [ 268.518459][T10149] ? __lock_acquire+0xab9/0xd20 [ 268.518485][T10149] ? __pfx_genl_rcv_msg+0x10/0x10 [ 268.518522][T10149] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 268.518571][T10149] ? down_read+0x1ad/0x2e0 [ 268.518595][T10149] genl_rcv+0x28/0x40 [ 268.518620][T10149] netlink_unicast+0x82c/0x9e0 [ 268.518655][T10149] ? __pfx_netlink_unicast+0x10/0x10 [ 268.518681][T10149] ? netlink_sendmsg+0x642/0xb30 [ 268.518702][T10149] ? skb_put+0x11b/0x210 [ 268.518732][T10149] netlink_sendmsg+0x805/0xb30 [ 268.518769][T10149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.518800][T10149] ? aa_sock_msg_perm+0xf1/0x1d0 [ 268.518823][T10149] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 268.518846][T10149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.518878][T10149] __sock_sendmsg+0x219/0x270 [ 268.518902][T10149] ____sys_sendmsg+0x505/0x830 [ 268.518934][T10149] ? __pfx_____sys_sendmsg+0x10/0x10 [ 268.518967][T10149] ? import_iovec+0x74/0xa0 [ 268.518996][T10149] ___sys_sendmsg+0x21f/0x2a0 [ 268.519025][T10149] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.519077][T10149] ? __fget_files+0x2a/0x420 [ 268.519119][T10149] ? __fget_files+0x2a/0x420 [ 268.519138][T10149] ? __fget_files+0x3a0/0x420 [ 268.519175][T10149] __x64_sys_sendmsg+0x19b/0x260 [ 268.519204][T10149] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 268.519249][T10149] ? do_syscall_64+0xbe/0xfa0 [ 268.519276][T10149] do_syscall_64+0xfa/0xfa0 [ 268.519297][T10149] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.519320][T10149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.519338][T10149] ? clear_bhb_loop+0x60/0xb0 [ 268.519360][T10149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.519377][T10149] RIP: 0033:0x7fa628f8eec9 [ 268.519399][T10149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.519412][T10149] RSP: 002b:00007fa629e0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.519432][T10149] RAX: ffffffffffffffda RBX: 00007fa6291e5fa0 RCX: 00007fa628f8eec9 [ 268.519444][T10149] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000007 [ 268.519455][T10149] RBP: 00007fa629011f91 R08: 0000000000000000 R09: 0000000000000000 [ 268.519465][T10149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.519474][T10149] R13: 00007fa6291e6038 R14: 00007fa6291e5fa0 R15: 00007ffcb9dacb98 [ 268.519507][T10149] [ 269.125624][ T1105] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.201898][T10162] lo speed is unknown, defaulting to 1000 [ 269.397293][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 269.406735][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 269.415635][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 269.424072][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 269.433057][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 269.510207][ T1105] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.698543][T10181] netlink: 741 bytes leftover after parsing attributes in process `syz.2.1510'. [ 269.721499][T10181] netlink: 130160 bytes leftover after parsing attributes in process `syz.2.1510'. [ 269.733561][T10181] netlink: 741 bytes leftover after parsing attributes in process `syz.2.1510'. [ 269.746630][ T1105] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.858873][T10167] lo speed is unknown, defaulting to 1000 [ 270.229711][T10190] FAULT_INJECTION: forcing a failure. [ 270.229711][T10190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.265080][T10190] CPU: 1 UID: 0 PID: 10190 Comm: syz.3.1512 Not tainted syzkaller #0 PREEMPT(full) [ 270.265107][T10190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 270.265117][T10190] Call Trace: [ 270.265127][T10190] [ 270.265137][T10190] dump_stack_lvl+0x189/0x250 [ 270.265168][T10190] ? __pfx____ratelimit+0x10/0x10 [ 270.265199][T10190] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.265226][T10190] ? __pfx__printk+0x10/0x10 [ 270.265263][T10190] ? __might_fault+0xb0/0x130 [ 270.265303][T10190] ? __might_fault+0xb0/0x130 [ 270.265356][T10190] should_fail_ex+0x414/0x560 [ 270.265410][T10190] _copy_from_iter+0x1de/0x1790 [ 270.265477][T10190] ? _copy_from_iter+0x24f/0x1790 [ 270.265526][T10190] ? __pfx__copy_from_iter+0x10/0x10 [ 270.265540][T10190] ? sock_alloc_send_pskb+0x86b/0x980 [ 270.265598][T10190] ? __pfx__copy_from_iter+0x10/0x10 [ 270.265639][T10190] ? page_copy_sane+0x16a/0x280 [ 270.265675][T10190] copy_page_from_iter+0xdd/0x170 [ 270.265721][T10190] skb_copy_datagram_from_iter+0x306/0x720 [ 270.265801][T10190] tun_get_user+0x1691/0x3e90 [ 270.265897][T10190] ? trace_call_bpf+0xc7/0xb50 [ 270.265921][T10190] ? __pfx_trace_call_bpf+0x10/0x10 [ 270.265949][T10190] ? aa_file_perm+0x44d/0x1550 [ 270.265974][T10190] ? __pfx_tun_get_user+0x10/0x10 [ 270.266022][T10190] ? perf_trace_run_bpf_submit+0x100/0x170 [ 270.266071][T10190] ? perf_trace_lock+0x2f8/0x3b0 [ 270.266128][T10190] ? __pfx_perf_trace_lock+0x10/0x10 [ 270.266154][T10190] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 270.266205][T10190] ? tun_get+0x1c/0x2f0 [ 270.266261][T10190] ? tun_get+0x1c/0x2f0 [ 270.266283][T10190] ? tun_get+0x1c/0x2f0 [ 270.266324][T10190] tun_chr_write_iter+0x113/0x200 [ 270.266358][T10190] vfs_write+0x5c6/0xb30 [ 270.266406][T10190] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 270.266442][T10190] ? __pfx_vfs_write+0x10/0x10 [ 270.266514][T10190] ? __fget_files+0x2a/0x420 [ 270.266578][T10190] ksys_write+0x145/0x250 [ 270.266628][T10190] ? __pfx_ksys_write+0x10/0x10 [ 270.266672][T10190] ? do_syscall_64+0xbe/0xfa0 [ 270.266716][T10190] do_syscall_64+0xfa/0xfa0 [ 270.266735][T10190] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.266762][T10190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.266782][T10190] ? clear_bhb_loop+0x60/0xb0 [ 270.266817][T10190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.266835][T10190] RIP: 0033:0x7f0f4978eec9 [ 270.266857][T10190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.266869][T10190] RSP: 002b:00007f0f4a5c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 270.266885][T10190] RAX: ffffffffffffffda RBX: 00007f0f499e5fa0 RCX: 00007f0f4978eec9 [ 270.266895][T10190] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 00000000000000c8 [ 270.266903][T10190] RBP: 00007f0f4a5c3090 R08: 0000000000000000 R09: 0000000000000000 [ 270.266911][T10190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 270.266919][T10190] R13: 00007f0f499e6038 R14: 00007f0f499e5fa0 R15: 00007ffe4e9c6e18 [ 270.266990][T10190] [ 270.855701][ T1105] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.994478][T10200] FAULT_INJECTION: forcing a failure. [ 270.994478][T10200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.010976][T10200] CPU: 1 UID: 0 PID: 10200 Comm: syz.3.1516 Not tainted syzkaller #0 PREEMPT(full) [ 271.010998][T10200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 271.011006][T10200] Call Trace: [ 271.011014][T10200] [ 271.011020][T10200] dump_stack_lvl+0x189/0x250 [ 271.011041][T10200] ? __pfx____ratelimit+0x10/0x10 [ 271.011058][T10200] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.011072][T10200] ? __pfx__printk+0x10/0x10 [ 271.011087][T10200] ? __might_fault+0xb0/0x130 [ 271.011113][T10200] should_fail_ex+0x414/0x560 [ 271.011138][T10200] _copy_from_user+0x2d/0xb0 [ 271.011156][T10200] ___sys_sendmsg+0x158/0x2a0 [ 271.011177][T10200] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.011230][T10200] ? __fget_files+0x2a/0x420 [ 271.011249][T10200] ? __fget_files+0x3a0/0x420 [ 271.011275][T10200] __x64_sys_sendmsg+0x19b/0x260 [ 271.011295][T10200] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 271.011311][T10200] ? perf_trace_preemptirq_template+0xa3/0x340 [ 271.011340][T10200] ? __pfx_ksys_write+0x10/0x10 [ 271.011361][T10200] ? do_syscall_64+0xbe/0xfa0 [ 271.011386][T10200] do_syscall_64+0xfa/0xfa0 [ 271.011404][T10200] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.011423][T10200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.011436][T10200] ? clear_bhb_loop+0x60/0xb0 [ 271.011454][T10200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.011468][T10200] RIP: 0033:0x7f0f4978eec9 [ 271.011482][T10200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.011494][T10200] RSP: 002b:00007f0f4a5c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.011511][T10200] RAX: ffffffffffffffda RBX: 00007f0f499e5fa0 RCX: 00007f0f4978eec9 [ 271.011522][T10200] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000005 [ 271.011532][T10200] RBP: 00007f0f4a5c3090 R08: 0000000000000000 R09: 0000000000000000 [ 271.011541][T10200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.011549][T10200] R13: 00007f0f499e6038 R14: 00007f0f499e5fa0 R15: 00007ffe4e9c6e18 [ 271.011575][T10200] [ 271.387921][T10208] netlink: 'syz.2.1517': attribute type 10 has an invalid length. [ 271.456101][ T5844] Bluetooth: hci0: command tx timeout [ 271.626973][T10213] netlink: 741 bytes leftover after parsing attributes in process `syz.4.1520'. [ 271.627508][ T1105] bridge_slave_1: left allmulticast mode [ 271.647250][T10213] netlink: 130160 bytes leftover after parsing attributes in process `syz.4.1520'. [ 271.673803][ T1105] bridge_slave_1: left promiscuous mode [ 271.682295][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.693861][T10213] netlink: 741 bytes leftover after parsing attributes in process `syz.4.1520'. [ 271.751948][T10217] netlink: 'syz.3.1521': attribute type 10 has an invalid length. [ 271.783773][ T1105] bridge_slave_0: left allmulticast mode [ 271.798681][ T1105] bridge_slave_0: left promiscuous mode [ 271.807276][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.172484][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.185166][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.197013][ T1105] bond0 (unregistering): Released all slaves [ 272.483348][T10167] chnl_net:caif_netlink_parms(): no params data found [ 272.497893][T10227] netlink: 'syz.1.1525': attribute type 16 has an invalid length. [ 272.506457][T10227] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1525'. [ 272.750098][T10227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1525'. [ 272.785113][T10227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1525'. [ 272.829152][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1525'. [ 272.916002][T10245] netlink: 'syz.3.1530': attribute type 1 has an invalid length. [ 273.104852][T10247] netlink: 'syz.1.1531': attribute type 1 has an invalid length. [ 273.114026][T10247] netlink: 'syz.1.1531': attribute type 2 has an invalid length. [ 273.155589][T10250] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1530'. [ 273.534928][ T5844] Bluetooth: hci0: command tx timeout [ 273.736307][T10273] netlink: 'syz.1.1536': attribute type 11 has an invalid length. [ 273.773406][T10273] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1536'. [ 273.917064][T10269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.074357][T10276] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1537'. [ 274.094619][T10277] netlink: 'syz.1.1537': attribute type 2 has an invalid length. [ 274.105570][T10167] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.113536][T10167] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.136915][T10167] bridge_slave_0: entered allmulticast mode [ 274.167153][T10167] bridge_slave_0: entered promiscuous mode [ 274.187661][T10167] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.201639][T10167] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.210778][T10167] bridge_slave_1: entered allmulticast mode [ 274.219230][T10167] bridge_slave_1: entered promiscuous mode [ 274.337704][ T1105] hsr_slave_0: left promiscuous mode [ 274.360483][ T1105] hsr_slave_1: left promiscuous mode [ 274.390174][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.402879][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.426532][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.437788][T10288] netlink: 'syz.2.1542': attribute type 1 has an invalid length. [ 274.454913][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.462396][T10288] netlink: 'syz.2.1542': attribute type 2 has an invalid length. [ 274.511487][ T1105] veth1_macvtap: left promiscuous mode [ 274.521386][T10292] netlink: del zone limit has 4 unknown bytes [ 274.530474][T10292] FAULT_INJECTION: forcing a failure. [ 274.530474][T10292] name failslab, interval 1, probability 0, space 0, times 0 [ 274.545637][T10292] CPU: 1 UID: 0 PID: 10292 Comm: syz.4.1544 Not tainted syzkaller #0 PREEMPT(full) [ 274.545665][T10292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 274.545675][T10292] Call Trace: [ 274.545683][T10292] [ 274.545699][T10292] dump_stack_lvl+0x189/0x250 [ 274.545729][T10292] ? __pfx____ratelimit+0x10/0x10 [ 274.545765][T10292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.545785][T10292] ? __pfx__printk+0x10/0x10 [ 274.545824][T10292] ? __pfx___might_resched+0x10/0x10 [ 274.545857][T10292] should_fail_ex+0x414/0x560 [ 274.545901][T10292] should_failslab+0xa8/0x100 [ 274.545934][T10292] kmem_cache_alloc_node_noprof+0x77/0x710 [ 274.545961][T10292] ? __alloc_skb+0x112/0x2d0 [ 274.546001][T10292] __alloc_skb+0x112/0x2d0 [ 274.546037][T10292] netlink_ack+0x146/0xa50 [ 274.546057][T10292] ? __pfx_genl_rcv_msg+0x10/0x10 [ 274.546089][T10292] ? perf_trace_run_bpf_submit+0xee/0x170 [ 274.546146][T10292] netlink_rcv_skb+0x28c/0x470 [ 274.546166][T10292] ? __lock_acquire+0xab9/0xd20 [ 274.546195][T10292] ? __pfx_genl_rcv_msg+0x10/0x10 [ 274.546227][T10292] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 274.546308][T10292] ? down_read+0x1ad/0x2e0 [ 274.546341][T10292] genl_rcv+0x28/0x40 [ 274.546365][T10292] netlink_unicast+0x82c/0x9e0 [ 274.546412][T10292] ? __pfx_netlink_unicast+0x10/0x10 [ 274.546441][T10292] ? netlink_sendmsg+0x642/0xb30 [ 274.546460][T10292] ? skb_put+0x11b/0x210 [ 274.546493][T10292] netlink_sendmsg+0x805/0xb30 [ 274.546544][T10292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.546581][T10292] ? aa_sock_msg_perm+0xf1/0x1d0 [ 274.546610][T10292] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 274.546635][T10292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.546663][T10292] __sock_sendmsg+0x219/0x270 [ 274.546695][T10292] ____sys_sendmsg+0x505/0x830 [ 274.546743][T10292] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.546793][T10292] ? import_iovec+0x74/0xa0 [ 274.546825][T10292] ___sys_sendmsg+0x21f/0x2a0 [ 274.546858][T10292] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.546936][T10292] ? __fget_files+0x2a/0x420 [ 274.546992][T10292] ? __fget_files+0x2a/0x420 [ 274.547014][T10292] ? __fget_files+0x3a0/0x420 [ 274.547066][T10292] __x64_sys_sendmsg+0x19b/0x260 [ 274.547100][T10292] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 274.547119][T10292] ? perf_trace_preemptirq_template+0xa3/0x340 [ 274.547173][T10292] ? __pfx_ksys_write+0x10/0x10 [ 274.547217][T10292] ? do_syscall_64+0xbe/0xfa0 [ 274.547259][T10292] do_syscall_64+0xfa/0xfa0 [ 274.547281][T10292] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.547306][T10292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.547324][T10292] ? clear_bhb_loop+0x60/0xb0 [ 274.547361][T10292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.547382][T10292] RIP: 0033:0x7fbeb3d8eec9 [ 274.547402][T10292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.547417][T10292] RSP: 002b:00007fbeb4c6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.547438][T10292] RAX: ffffffffffffffda RBX: 00007fbeb3fe5fa0 RCX: 00007fbeb3d8eec9 [ 274.547451][T10292] RDX: 0000000000004010 RSI: 0000200000000000 RDI: 0000000000000003 [ 274.547462][T10292] RBP: 00007fbeb4c6f090 R08: 0000000000000000 R09: 0000000000000000 [ 274.547473][T10292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 274.547487][T10292] R13: 00007fbeb3fe6038 R14: 00007fbeb3fe5fa0 R15: 00007ffc10158c08 [ 274.547556][T10292] [ 274.548564][ T1105] veth0_macvtap: left promiscuous mode [ 274.671286][ T5844] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 275.402686][T10310] netlink: 'syz.1.1549': attribute type 10 has an invalid length. [ 275.628085][ T5844] Bluetooth: hci0: command tx timeout [ 275.781243][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 275.835697][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 276.426896][T10167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.458621][T10167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.062936][T10335] __nla_validate_parse: 2 callbacks suppressed [ 277.064223][T10335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1557'. [ 277.242834][T10167] team0: Port device team_slave_0 added [ 277.293230][T10167] team0: Port device team_slave_1 added [ 277.696250][ T5844] Bluetooth: hci0: command tx timeout [ 277.763895][T10347] netlink: 741 bytes leftover after parsing attributes in process `syz.2.1558'. [ 277.774478][T10347] netlink: 130160 bytes leftover after parsing attributes in process `syz.2.1558'. [ 277.787541][T10347] netlink: 741 bytes leftover after parsing attributes in process `syz.2.1558'. [ 277.976647][T10167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.984220][T10167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.042918][T10167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.079388][T10167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.092670][T10167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.223763][T10167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.539683][T10361] netlink: 'syz.2.1562': attribute type 2 has an invalid length. [ 278.568400][T10361] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1562'. [ 278.573784][ T1105] ------------[ cut here ]------------ [ 278.584616][ T1105] WARNING: CPU: 1 PID: 1105 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x26d/0x2f0 [ 278.595662][ T1105] Modules linked in: [ 278.599955][ T1105] CPU: 1 UID: 0 PID: 1105 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 278.611223][ T1105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 278.621703][ T1105] Workqueue: netns cleanup_net [ 278.626770][ T1105] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 278.632376][ T1105] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 4b f4 36 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 99 e5 16 f8 e8 64 51 d1 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 56 51 d1 f7 90 0f 0b 90 e9 60 fe ff ff [ 278.652563][ T1105] RSP: 0018:ffffc9000408f878 EFLAGS: 00010293 [ 278.658993][ T1105] RAX: ffffffff89edd2ec RBX: ffff888031dcc900 RCX: ffff88802698bc80 [ 278.667919][ T1105] RDX: 0000000000000000 RSI: ffffffff8d9cc7dc RDI: ffff88802698bc80 [ 278.676776][ T1105] RBP: ffffc9000408f990 R08: ffffffff8f9db437 R09: 1ffffffff1f3b686 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 278.684940][ T1105] R10: dffffc0000000000 R11: fffffbfff1f3b687 R12: ffffffff8f5d4bc0 [ 278.693050][ T1105] R13: 1ffff92000811f3c R14: ffff888031dcddc0 R15: dffffc0000000000 [ 278.701918][ T1105] FS: 0000000000000000(0000) GS:ffff888125e27000(0000) knlGS:0000000000000000 [ 278.707509][T10361] nbd: must specify at least one socket [ 278.711153][ T1105] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 278.724388][ T1105] CR2: 00007f84d3b55eb8 CR3: 0000000051112000 CR4: 00000000003526f0 [ 278.732606][ T1105] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 278.741482][ T1105] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 278.750111][ T1105] Call Trace: [ 278.753440][ T1105] [ 278.757042][ T1105] xfrm_net_exit+0x2d/0x70 [ 278.761956][ T1105] ops_undo_list+0x497/0x990 [ 278.767670][ T1105] ? __pfx_ops_undo_list+0x10/0x10 [ 278.772954][ T1105] ? do_raw_spin_unlock+0x122/0x240 [ 278.778986][ T1105] cleanup_net+0x4d8/0x820 [ 278.783731][ T1105] ? __pfx_cleanup_net+0x10/0x10 [ 278.789066][ T1105] ? _raw_spin_unlock_irq+0x23/0x50 [ 278.790299][T10167] hsr_slave_0: entered promiscuous mode [ 278.794552][ T1105] ? process_scheduled_works+0x9ef/0x17b0 [ 278.794588][ T1105] ? process_scheduled_works+0x9ef/0x17b0 [ 278.794616][ T1105] process_scheduled_works+0xade/0x17b0 [ 278.818515][ T1105] ? __pfx_process_scheduled_works+0x10/0x10 [ 278.824752][ T1105] worker_thread+0x8a0/0xda0 [ 278.830152][ T1105] kthread+0x70e/0x8a0 [ 278.834364][ T1105] ? __pfx_worker_thread+0x10/0x10 [ 278.839600][ T1105] ? __pfx_kthread+0x10/0x10 [ 278.844338][ T1105] ? _raw_spin_unlock_irq+0x23/0x50 [ 278.852544][ T1105] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.859687][ T1105] ? __pfx_kthread+0x10/0x10 [ 278.864882][ T1105] ret_from_fork+0x4bc/0x870 [ 278.870693][ T1105] ? __pfx_ret_from_fork+0x10/0x10 [ 278.871465][T10167] hsr_slave_1: entered promiscuous mode [ 278.876481][ T1105] ? __switch_to_asm+0x39/0x70 [ 278.887047][ T1105] ? __switch_to_asm+0x33/0x70 [ 278.891873][ T1105] ? __pfx_kthread+0x10/0x10 [ 278.898320][ T1105] ret_from_fork_asm+0x1a/0x30 [ 278.903565][ T1105] [ 278.907015][ T1105] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 278.914581][ T1105] CPU: 1 UID: 0 PID: 1105 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 278.924889][ T1105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 278.935328][ T1105] Workqueue: netns cleanup_net [ 278.940486][ T1105] Call Trace: [ 278.943891][ T1105] [ 278.947721][ T1105] dump_stack_lvl+0x99/0x250 [ 278.952344][ T1105] ? __asan_memcpy+0x40/0x70 [ 278.957053][ T1105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.962429][ T1105] ? __pfx__printk+0x10/0x10 [ 278.967331][ T1105] vpanic+0x237/0x6d0 [ 278.971432][ T1105] ? __pfx_vpanic+0x10/0x10 [ 278.976403][ T1105] panic+0xb9/0xc0 [ 278.980602][ T1105] ? __pfx_panic+0x10/0x10 [ 278.985174][ T1105] __warn+0x31b/0x4b0 [ 278.989460][ T1105] ? xfrm_state_fini+0x26d/0x2f0 [ 278.994437][ T1105] ? xfrm_state_fini+0x26d/0x2f0 [ 279.001445][ T1105] report_bug+0x2be/0x4f0 [ 279.006529][ T1105] ? xfrm_state_fini+0x26d/0x2f0 [ 279.011590][ T1105] ? xfrm_state_fini+0x26d/0x2f0 [ 279.018053][ T1105] ? xfrm_state_fini+0x26f/0x2f0 [ 279.023130][ T1105] handle_bug+0x84/0x160 [ 279.027481][ T1105] exc_invalid_op+0x1a/0x50 [ 279.032158][ T1105] asm_exc_invalid_op+0x1a/0x20 [ 279.037097][ T1105] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 279.042869][ T1105] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 4b f4 36 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 99 e5 16 f8 e8 64 51 d1 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 56 51 d1 f7 90 0f 0b 90 e9 60 fe ff ff [ 279.063823][ T1105] RSP: 0018:ffffc9000408f878 EFLAGS: 00010293 [ 279.069906][ T1105] RAX: ffffffff89edd2ec RBX: ffff888031dcc900 RCX: ffff88802698bc80 [ 279.077983][ T1105] RDX: 0000000000000000 RSI: ffffffff8d9cc7dc RDI: ffff88802698bc80 [ 279.086007][ T1105] RBP: ffffc9000408f990 R08: ffffffff8f9db437 R09: 1ffffffff1f3b686 [ 279.094092][ T1105] R10: dffffc0000000000 R11: fffffbfff1f3b687 R12: ffffffff8f5d4bc0 [ 279.102137][ T1105] R13: 1ffff92000811f3c R14: ffff888031dcddc0 R15: dffffc0000000000 [ 279.110133][ T1105] ? xfrm_state_fini+0x26c/0x2f0 [ 279.115109][ T1105] ? xfrm_state_fini+0x26c/0x2f0 [ 279.120169][ T1105] xfrm_net_exit+0x2d/0x70 [ 279.124789][ T1105] ops_undo_list+0x497/0x990 [ 279.129509][ T1105] ? __pfx_ops_undo_list+0x10/0x10 [ 279.134774][ T1105] ? do_raw_spin_unlock+0x122/0x240 [ 279.140116][ T1105] cleanup_net+0x4d8/0x820 [ 279.144825][ T1105] ? __pfx_cleanup_net+0x10/0x10 [ 279.149854][ T1105] ? _raw_spin_unlock_irq+0x23/0x50 [ 279.155048][ T1105] ? process_scheduled_works+0x9ef/0x17b0 [ 279.161293][ T1105] ? process_scheduled_works+0x9ef/0x17b0 [ 279.167019][ T1105] process_scheduled_works+0xade/0x17b0 [ 279.172687][ T1105] ? __pfx_process_scheduled_works+0x10/0x10 [ 279.178687][ T1105] worker_thread+0x8a0/0xda0 [ 279.183420][ T1105] kthread+0x70e/0x8a0 [ 279.187678][ T1105] ? __pfx_worker_thread+0x10/0x10 [ 279.193337][ T1105] ? __pfx_kthread+0x10/0x10 [ 279.197971][ T1105] ? _raw_spin_unlock_irq+0x23/0x50 [ 279.203215][ T1105] ? lockdep_hardirqs_on+0x9c/0x150 [ 279.208431][ T1105] ? __pfx_kthread+0x10/0x10 [ 279.213323][ T1105] ret_from_fork+0x4bc/0x870 [ 279.218914][ T1105] ? __pfx_ret_from_fork+0x10/0x10 [ 279.224344][ T1105] ? __switch_to_asm+0x39/0x70 [ 279.230446][ T1105] ? __switch_to_asm+0x33/0x70 [ 279.235427][ T1105] ? __pfx_kthread+0x10/0x10 [ 279.240230][ T1105] ret_from_fork_asm+0x1a/0x30 [ 279.245855][ T1105] [ 279.249893][ T1105] Kernel Offset: disabled [ 279.254668][ T1105] Rebooting in 86400 seconds..