last executing test programs: 11.922548074s ago: executing program 4 (id=2504): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xec, 0xfa, 0x0, 0x0, 0x0, 0x547, 0x45a22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x9}, 0x41, 0x0, 0x0, 0xf, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xb, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71189d000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000007300)={&(0x7f0000000100), 0xc, &(0x7f0000000740)=[{&(0x7f0000000140)={0x30, 0x35, 0x800, 0x70bd27, 0x25dfdbfe, "", [@generic, @generic="f37b591ec64508ed6353cd88ceaab14689fe8c78939fed", @generic, @nested={0x8, 0x511, 0x0, 0x1, [@nested={0x4, 0x102}]}]}, 0x30}, {&(0x7f0000001f80)=ANY=[@ANYBLOB="b41300003d00200029bd7000fbdbdf250400148078124d800400fa8063128f8008008900", @ANYRES32=0x0, @ANYBLOB="471293801e6c506b1e95f900e614a897fdf2ba21866f32c6b393f31204b3693ba3a5a07a0b46cc97b66a17f3bf5058a9eff764a83b103e27ad697d0d992873b3ae5ca7425bd6ffbf50911bd437bb82010a4d236504a7973925b0f1c3a4979cf2ab471d31d732896414f34e5ee10fca6fd408004c00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x13b4}, {&(0x7f0000004f40)=ANY=[@ANYRES32=0x0, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0400e780458a732a14b66a5a2f261dd030888792e38704a2ba2f21d7fa3644210583462b027076b809c4266ad50792d72b6a608ab200b4159970016f630627592c30206c2c728480d0a3b0f0012ba6c267da8d18652e420988"], 0x1224}, {&(0x7f0000000800)={0x114, 0x10, 0x8, 0x70bd2a, 0x25dfdbfe, "", [@typed={0xc, 0x12, 0x0, 0x0, @u64=0x3ff}, @generic="71206d9115f8c46889779af8ac64a98735f08ac044368ad32128f5f6dc069bb58f575ead80f5448176badcb7a65f8895eef62153d76914389bb3d1a4228cdd761e181b1ba93fc6ce95f8cd3e4b5881cf3d7a73770cf043429081d40584b59ec2b53423312362670b7a1f1ee23a4b80b8ec388695544ccd2d269f867db298a92eafb28b984c2fb7fc5c48f788e6435dd51414fe1f7c7ae068831c4ad5c93b2d129cabe7555623143cf1d003880dd652106f37", @typed={0x31, 0x64, 0x0, 0x0, @binary="ff49b1b2cc5db542e9eb47a0f516091a43ee887c42eff07929d33a0eb78713d973ad9de4dc9228fccd19f6791f"}, @typed={0xc, 0x2b, 0x0, 0x0, @u64=0x1}, @typed={0x4, 0x44, 0x0, 0x0, @binary}]}, 0x114}, {0x0}, {&(0x7f0000004780)={0x100, 0x100, 0x200, 0x70bd2b, 0x25dfdbfb, "", [@generic="8f407894f9cf7a49dcbe5bbf06ab19b12698c16aa5cee93a1c9ac9b9c20be67dafe4a8e2defa23aa41b8806ca1cecf773edcaf0f7726b81e2b2fccebbbe5ad9f3d468bc0b2ff6d250d3a4b553206b2327d6ec7b7b7219bb1e16d062fac9d194460a2b35fdd87a5b167724916abcae7228777055d18e9ba1c4dd6663a1982ebb0fe", @typed={0x6b, 0x9e, 0x0, 0x0, @binary="c6dc2ea05601d1efc6f4a50e0be554a8cf52638b2d57d4ba2305b1d8c2488e324a292f26b4bbe70e70d93ed714df66ce4eeb2e39d1ac1a018d5490d3ddcbf42af5c8113906b62a0053a9ed3e56e5777726890f3e1dc92f9f78dcd426bf72393657c801590922fd"}]}, 0x100}, {&(0x7f0000000640)={0x7c, 0x3e, 0x1, 0x70bd2c, 0x25dfdbff, "", [@typed={0xc, 0x13c, 0x0, 0x0, @u64=0x7e89}, @typed={0x5f, 0xb3, 0x0, 0x0, @binary="1e0414916570627ec5ac2d3294b7faaa630e991a67202295f1add752e0bca3e71545a326b6f0b583397a579eeaab0c5c150bca33aedbdf228b87ca3e1b0c250a4eed47dbb49069dfc4b408d8cb9bb49e7bf965370b0872d05afe89"}, @generic]}, 0x7c}], 0x7, &(0x7f00000071c0), 0x0, 0x4810}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0xffffffffffffffdd, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xb8}}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x0, 0x30, 0x0, 0x1000000) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'dvmrp0\x00', 0x1}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r6, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000006fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000000201010800000000000000000a0000053c0002800c00028005fd0100010000002c00018014000300fe880000000000000000000000000001140004"], 0x50}, 0x1, 0x0, 0x0, 0x40815}, 0x20000080) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000000200)='blkio.bfq.sectors\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r9, 0x0, 0x8000) 5.566791365s ago: executing program 1 (id=2522): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000780090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a3200000000f70007404884b24b02a8a7758a688958ed60ecfd057e10926ba77e5596b13e43cd4488e4aa68af5f7236ec205b6e4cac2a0d86c336bf07dbe861f4f57bcef92dcf818d532d4475b5daa4dadc1690f228e860bba5a0b5d9bde86862e8f7fc08f0debd4974c6fae7d737a0007ec948ac4d8714ebff6b25648fb910e0d6d07f023cf5fa4051627b9c5b69e265538f9ba683bf172a5ff815afa543c12e550a1bcc9287080c7c12cc89d216c56febb0b06134672ea6b0077c846396169475f271319988f49ec94f2996e5d0e1cb151fb223e556f10fb681d068e055eb34e5f8fc7a524ffe5f4632a6c74ad0fe0b1542497d76a5a4416c47805e001c000580080001"], 0x1ec}}, 0x0) 5.407973257s ago: executing program 4 (id=2526): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0xf, 0x0, 0x2, 0x0, 0xfffffffc, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x2b, 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x0, 0x4, 0x0, 0x28) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e7b62aa73772cc9f83edf848480000005e140602ab1100000e002b000f000000028000001294", 0x2e}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x1e, &(0x7f0000000500), 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) openat$cgroup_ro(r6, &(0x7f0000000100)='memory.stat\x00', 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f0000000100)=r9) ioctl$TUNGETVNETLE(r6, 0x80047441, &(0x7f0000000140)) 5.385880572s ago: executing program 1 (id=2527): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000080)}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1943}, 0x101020, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x38) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0xd, 0x1, 'batadv_slave_1\x00'}]}]}]}], {0xfffffffffffffc4a}}, 0x70}}, 0x24040880) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040027800c00018006000600800a0000100002800c0008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r0, r8}, 0xc) 5.138925248s ago: executing program 0 (id=2531): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x9, 0x6, "ef9cf51413"}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}}, 0x4000000) (fail_nth: 5) 4.14611338s ago: executing program 0 (id=2533): perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x8, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x1, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x11, &(0x7f0000000300)=ANY=[@ANYBLOB="1830000000000000000000000300000018300000000000000000000000000000180000000000000000000000000000000000000000000000000000000800000018000000000000000000000000000000181000", @ANYRES32, @ANYBLOB="414bd7d90000000018110000", @ANYRES32], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x99, &(0x7f0000000240)=""/153}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x8, 0x6, 0x7a, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x84}, 0x81) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xa}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) 4.144821512s ago: executing program 2 (id=2534): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)}, {0x0}], 0x2}, 0x4000000) socket$kcm(0x2, 0xa, 0x2) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0xffffffffffffffff, 0xe, r1, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7fffffff, 0xfffffffffffffff7}, 0x0, 0x2, 0xfffffffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r2 = socket$kcm(0x11, 0x3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x891d, &(0x7f0000001a80)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xe) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="1400000024000b47564cb6288200eb141fb220cf", 0x14}], 0x1}, 0x4000) 4.068706714s ago: executing program 1 (id=2536): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007e377ec63e1928594bde5beb4d61fe068faf24a46dd7e5592e2e31858684c3160cdd6396a452d5426900"/81], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x0, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000514799a2ab97000fcdbdf25080001"], 0x20}, 0x1, 0x0, 0x0, 0x4008090}, 0x8000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0x34, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f00000004c0), 0x8, 0x82, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)='%+9llu \x00'}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) sendmsg$unix(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f00000009c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="00000000300000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r4, @ANYRES64=0x0, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRESDEC=r4, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) r12 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x2180200, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_RESET(r12, 0x2403, 0x1fe) 3.774649345s ago: executing program 0 (id=2537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) 3.743955933s ago: executing program 4 (id=2538): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="b8", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000840)='g', 0x1}, {&(0x7f0000000140)="06ee1737433af0f8e030cd5627cee5f8a67d9749625b517766aeb1f7f7a5c53f1ce9ed58ff8616bb47be071c45fbe9c67f14a2cc4a4cac12b8653eca7a9dc1c920c44b2e1550e84bc8eb59f77cef811007c79a112e11ac8f22812bce00e8b08b21dcd670a46266ba46da62e445e238bba7ad51543ffffaa0be1a16e25a66e897af1e1dbf20f7fd0bf9", 0x89}, {&(0x7f0000000380)="9413b245f5bd11db76747730616a6e2a908ca43bbf30b5a2b07fac93e6948d48dbf61eb5ccaa216a3aa842ac65248562c888ae4c0fa16a10ebac63f11c82668fd743e7d87856279a4055d16824b4aa6406903ee2c1c8f44d3c1b6e09e2daae321f3266b8609a13620f55fc66b70c224f702149c7bebeb3624fc645000a000827dc0efe2e25b6d4a19866cb90e44f94828e53490b5e5f684a6f8b960a54e52e2f01d0b3205e7a479fdc35de4820efd19420c2cdb6627ed50a643019421842f9c7c877afe1fd8a", 0xc6}, {&(0x7f0000000000)="b97df42d1c151dfd84ebf187c91ff6b0da6cddb0c6e3a90a1522cea93fa8f20ca3830923b067b1472bd70e0135327df4b7a48c96ae8abda49acb9d46", 0x3c}, {&(0x7f0000000880)="0e646f6cd2afdd931922b0032c52f57632cca55ea55cf8a244f9e0059ae5fa971925ddee4bc2c28bd4784bd2d5c1d739ad4222ad0bd67145f048eec223f3c4ac682677bb796503d4347eaf938ad16459fe27432241a03399c706903aad50bfeddd7ae15001a0995d1aa71ca43be9c31db626d2867a66e757b0855f65195802c4632352a0e79ed5f4a3864d5a2756d659977de0139b9b0cd4c344b923362348f6d7f2aedbfdd71115195470fee0359c57f3a8c93235d2f65a36b413e039afa5dfc19e12cfdcc92850dc9b00b6cf15c2faf22cb25d24fa733cebe37d926e1f1382520152d38c62bdda4fcf553fb89697a779225fcac72acdacad31f25723a3027cc9a0ca5cf1d479055b6664eb62920d7c48f7b037582ca65a839b33b8cac6632388de5cc8dfd02af88af58401e270569ffa80df23c8ada7086d0c33f28026161739a8e2e0c722b9ccacd9e09ee140b3e5a365317190752c97e7e6c3a4509cacdacd7558a48cb0cac3256b42506b63f2706d8a0ec7e48fe97454385de94e5c54fdc5f8d338aa00c8b0e05fd16e078368ed70c7156f234d2ead378a5ec5b14ff016af68e605c746ff136502267bec2b70841146fb90b5ac0930477f0cd099f498abadef0e813e5722677b7f7cd19fed11f5a6079e1cd0e5f1045fdac9256ca3b65a60bdbc97adb87c028f35eedcf1d769820ee90ca6b8ba91bfaa02efb4b9ff3674dc576b7fb999bfee6f7be754d5f9ae67ade2e3e29eea9c427c0b476276194a4936c5ebdd546d49a4df6e8cba82eabc14fdf5bc0c8fc27a340eadc42d408b6362437d8903d42f5fee34451b3528b2a30acfdd34798f52df5d677776277c4838c14912d204206e0845ba98eaeff64613dfa773d3fd0185520fbc0571dc3666fa0c954a785989a71bbdeca00b32ab2696023fe8a6df0e1b45b9f8ce22f462cc30d114e8828fd52622622be71ee99715a8ee3df28b28a5fadfc719f63dd4cbab184efff296fd314e0924d8642347ba5d114fd2807588e726aed3ecdae5962aa1b17519f8a786bba6d9948aac35f17c43fd4ed841d05732b98d4047495925003acd4174bcc4097ec9cfab131a01d0ea5556291ca689a052b0f3f6a3825c21047bd87006bfb1c0acc63b78dd7dc1177839143c75e8230fd7c8a934875c00fbda956d0e164fc8486e4d9dc90463ec7cc4d732dc85a248512ea1dc0d1f269c3ed82b2f6daa9a3a254e09583bc4cb63d8b989c481b8f9492a30c6c98be1ed50b4b55a699bbd033cb3cd2b7ddd054106534d8c05f48d756e410730af89c91f938c59c13ecfaa22c86e01c7e8f292d86d033515b1d3374559120401be0949ee8b6f8544ef7664959718d870be04325b46a838be1c86d80dba7b8c1ac25e5c364d72a40e5ad747a6b81f89b0d68e33bd49ed1a938e223c2f68cad4ea53", 0x3f7}], 0x5}, 0x8000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x800, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xf3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x50194, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x6, 0x8, 0x80000000000000, 0x2, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r1, 0x1, 0x3c, &(0x7f0000000500), 0x4) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x30}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r2, 0x20, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x1, &(0x7f00000004c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x14, &(0x7f00000002c0)=""/20, 0x41100, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x63}, 0x94) r4 = getpid() perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x8, 0x40, 0x4, 0x7, 0x0, 0x1, 0x2080, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x2, @perf_config_ext={0x4}, 0x1004, 0x80000001, 0xe9d, 0x8, 0x1, 0x1, 0x0, 0x0, 0x40, 0x0, 0x200}, r4, 0x8, 0xffffffffffffffff, 0x2) 3.674167182s ago: executing program 3 (id=2539): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x2, &(0x7f0000000200), 0x4) 3.601731394s ago: executing program 2 (id=2540): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x2, 0x7, 0x5, 0x0, 0x0, {0x7}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008840}, 0x8000) 3.263041142s ago: executing program 0 (id=2541): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd632397"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffffffffffeb9) r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$sock(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="386fe4d96a52a839788647b46f0398a4af1f50dd1865266ae7d9cd3e2acff9adfa10be4899c3b65bf1038074d729d014f445d6eb8988b94405ed08", 0x3b}, {&(0x7f00000000c0)="45d1c02713b3fe2c34c465ac850fb8211e360361", 0x14}, {&(0x7f0000000300)="7e01f596e47f3b14dc790060942d49032310d6775ce93af7533a2769c8642f71a96b164f04e313e9a308fe84921795cc376a9425e4da3747eeac7859be2417c7f29ddf47fa23fb2b73be584d26d0fb99a8910e241ad973fa78ced3d235f68093db3fef81da84d9848577d825c68b0458588dd9afa44f1bd62c555ca54ae9f71d93d2b6a834f418fd9e71e2534cf1ef3ff251489c0dcb2f90e1c431fb6cf21af6a9ea8cdd38fdf67395b21bbf612c5d0ee89313ab94b4e717969444020529d6d47ef5f7dc05ce3b29d21ca01226d7717046b946163e28829711761cade93bac4002", 0xe1}, {&(0x7f00000006c0)="6a0e7c0e9672b34ff2aa1422ee5e41bb23c4438e52ed0eb7e3000e88c0da294c933dfe66b1a76344ce8a89d86a7680fae3a422192393c18cb312a9c60c2b74231391a9b7ec9a9eaadb86a23532c22375c6e8a68e3f58e55c97e01dcd81e5394c322e78f2e02569ab547a87d0757bd864cff07fa2b2485e6ac04a475b17941ab6fa9d7834a08a23466d07a162ea4c97c4af4f9f2242b5db35e3855f834e8d74856f1392d97a0a6626ab694b8a91519fc041f6bf5d39e74300f8d9f4fbd900eba84a08bc2ec1012b5e0ce074df7185177178f4faa0a4b0216d8ce4b022d7c1c61a511ef8b1e0e7900811ee3ff55a4d5c5f38", 0xf1}, {&(0x7f0000000200)="7ecb67a32fbc883cbf38f4f086af9520d904f65b681564927a40eeae5dc5cf5364e51cf40f09eb24f91c1dedf8f1b3ea998e267d9cbc6a6030f953af9447ac01fe55578395aba2eeffd45d5ac822cff212d18dd24bfcac6d7c681c78a38869d287008fe481c70f2bee76c8107d9ef3bbd410190c704adf4902454be6d142e799101728cb760f5b06d26b12bce40a055b1cb2a9f397094d6b6ced0b76a035", 0x9e}], 0x5, &(0x7f0000000100)=[@txtime={{0x18, 0x1, 0x3d, 0xe29}}], 0x18}, 0x40800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8970, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b4000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009100000095"], &(0x7f0000000440)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000880)=0x60, 0x12) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x1, &(0x7f00000007c0)=@raw=[@ldst={0x3, 0x3, 0x4, 0xa, 0x0, 0xfffffffffffffff4, 0x4}], &(0x7f0000000800)='GPL\x00', 0x2, 0x0, &(0x7f0000000a00), 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000a80)={0x3, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000ac0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000b00)=[{0x4, 0x1, 0x8, 0x4}, {0x4, 0x4, 0x8, 0x9}], 0x10, 0x7f}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={r3, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f0000000c40)=[0x0, 0x0, 0x0], &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x27, &(0x7f0000000cc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000d40), &(0x7f0000000d80), 0x8, 0xd0, 0x8, 0x8, &(0x7f0000000dc0)}}, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r7, &(0x7f0000000400), &(0x7f0000000540)=""/119}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000f40)={r5, r6, 0x25, 0x0, @val=@netfilter={0x7, 0x0, 0x3, 0x1}}, 0x20) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000840)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x40040) 3.217813848s ago: executing program 4 (id=2542): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, 0x0, 0x130600, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000380)) socket$kcm(0x10, 0x400000002, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa100, 0x7, 0x8, 0x0, 0x2b66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095d341d81d785a21345315f1207b550f9f1378a814103024e77e27ba543b9756dbfa48accf0ab608d0611e92216d562f4ceea8a5d5018598c98b4f9862e74779cbef34eba696db234e2a92b664fdec07acae2631bd6feebc4195f338c4f2ca8c7f09c1dad79e5b24bcd6c6928d178c67833fc91d28c98db4a189583c7cec0f8a7b00000072de20ef74d9ca"], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000850000098a0000009500"/32], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1947}, 0x0, 0x0, 0x0, 0x8, 0x40103fe, 0x7, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x4000000}, {0x2, 0x0, 0xfffffffc, 0x8}], 0x10, 0x401}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x1}], 0x20, 0x0, 0x0, 0x10000000}, 0x4925c) close(r7) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8}, 0x94) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x10, &(0x7f0000000000)=r8, 0xc) 2.977754712s ago: executing program 2 (id=2543): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r5, &(0x7f00000007c0)={&(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000400)=[{0x0, 0x64}], 0x1}, 0x20000080) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0904000000000000000002080001006f7366000c00028008000140000000130900010073797a30000000000900020072797a32000000000500074075000000140000001100010000000000000000000000000a"], 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x82, &(0x7f0000000000), 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r8, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000090) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) 2.868549133s ago: executing program 3 (id=2544): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[], 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500001800000061103800000000005e050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 2.68828176s ago: executing program 1 (id=2545): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="1400000024000b47564cb6288200eb141fb220cf", 0x14}], 0x1}, 0x4000) (fail_nth: 2) 2.345367534s ago: executing program 3 (id=2546): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x890b, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5411, &(0x7f0000000140)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x14, &(0x7f0000000100), 0x120) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000200000000001800000018000000020000000000000000000004ffffffff0000000000000006040000000000"], 0x0, 0x32}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r4, 0x1) r5 = socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) close(0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000000)='/proc/net/\x01?\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$kcm(r5, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@id, 0x80, 0x0}, 0x0) close(0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6b}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x15, &(0x7f0000000100), 0x3d) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_procs(r2, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000440)={&(0x7f0000000180)="ab4862457678cbdaf07f2f1ca2eea2b881b897c727b3851dbd831665e6b2bbdfb65157147bfc8bbcd965d70ea65474ac4c755176b2f087b2585bf609d6d3a1beca4716d2274a011b81ea21b40689c95974f3c5c7c1d11a38ef237e93949cc8bd3b7cb1346a71872c88b5ea2709ab76f16e27927be10c43c9cd36fe171c4f1494d9181f389ac8e90debbc179d9cdb5118ce433c09cb8312c844668e03f1b73bddb61fc5", &(0x7f0000000240)=""/156, &(0x7f0000000300)="fe899b09d23bd3d947b0f69b0b98f3bb47d244b96b33a35d0aaf09df23bb7610bd813ec8cda3ad365d35a040f234", &(0x7f0000000340)="8fde48b50b136da479f72d204368ab6764b81f7ed0b5399d333cd6c61cd20b18ce7e86495bc075d12f19fce2fb5b4f01aeddd8bea699fc1cdf045dcbddf677213640c864dc2753402c41d353b5dc6578c1a71ce3d05f647d24af", 0x40, r1, 0x4}, 0x38) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.735941981s ago: executing program 0 (id=2548): socket$nl_generic(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0xffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[], 0x48) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.564178761s ago: executing program 4 (id=2549): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x20a22000, &(0x7f0000000000), 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000480)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x32, 0x0, 0x3, 0xfffffffb}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000001dc0)="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", &(0x7f0000002dc0)=""/4096, 0x4}, 0x20) openat$tun(0xffffffffffffff9c, 0x0, 0x10640, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random='7\x00'}) perf_event_open(&(0x7f0000001340)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x62) r2 = socket$kcm(0x29, 0x7, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x20044080) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1de586023d61ec8bf787304c27790b200000ff000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000100)=[{&(0x7f0000001840)="b564", 0x2}], 0x1, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000007f000000000000000000000076"], 0x18}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000040)={r3, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x41}, 0x80, &(0x7f0000000140)=[{&(0x7f0000001d80)="e4", 0x1}], 0x1}, 0x44850) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.497887866s ago: executing program 2 (id=2550): socket$kcm(0x10, 0x2, 0x4) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20, 0x6}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x64, 0x15, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x4040000) 1.3884584s ago: executing program 3 (id=2551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) 1.040704614s ago: executing program 2 (id=2552): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x9, 0x100, 0x3, 0x4, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="b8", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000840)='g', 0x1}, {&(0x7f0000000140)="06ee1737433af0f8e030cd5627cee5f8a67d9749625b517766aeb1f7f7a5c53f1ce9ed58ff8616bb47be071c45fbe9c67f14a2cc4a4cac12b8653eca7a9dc1c920c44b2e1550e84bc8eb59f77cef811007c79a112e11ac8f22812bce00e8b08b21dcd670a46266ba46da62e445e238bba7ad51543ffffaa0be1a16e25a66e897af1e1dbf20f7fd0bf9", 0x89}, {&(0x7f0000000380)="9413b245f5bd11db76747730616a6e2a908ca43bbf30b5a2b07fac93e6948d48dbf61eb5ccaa216a3aa842ac65248562c888ae4c0fa16a10ebac63f11c82668fd743e7d87856279a4055d16824b4aa6406903ee2c1c8f44d3c1b6e09e2daae321f3266b8609a13620f55fc66b70c224f702149c7bebeb3624fc645000a000827dc0efe2e25b6d4a19866cb90e44f94828e53490b5e5f684a6f8b960a54e52e2f01d0b3205e7a479fdc35de4820efd19420c2cdb6627ed50a643019421842f9c7c877afe1fd8a", 0xc6}, {&(0x7f0000000000)="b97df42d1c151dfd84ebf187c91ff6b0da6cddb0c6e3a90a1522cea93fa8f20ca3830923b067b1472bd70e0135327df4b7a48c96ae8abda49acb9d46", 0x3c}, {&(0x7f0000000880)="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", 0x3f7}], 0x5}, 0x8000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x800, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xf3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x50194, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x6, 0x8, 0x80000000000000, 0x2, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r1, 0x1, 0x3c, &(0x7f0000000500), 0x4) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x30}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r2, 0x20, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x1, &(0x7f00000004c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x14, &(0x7f00000002c0)=""/20, 0x41100, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x63}, 0x94) r4 = getpid() perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x8, 0x40, 0x4, 0x7, 0x0, 0x1, 0x2080, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x2, @perf_config_ext={0x4}, 0x1004, 0x80000001, 0xe9d, 0x8, 0x1, 0x1, 0x0, 0x0, 0x40, 0x0, 0x200}, r4, 0x8, 0xffffffffffffffff, 0x2) 603.319766ms ago: executing program 3 (id=2553): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x2, 0x7, 0x5, 0x0, 0x0, {0x7}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008840}, 0x8000) 178.116146ms ago: executing program 1 (id=2554): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x84082, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)=')$+\\^\x00') ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830c}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xfffffffffdffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0xfffffffe}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002ff0100000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000feffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) 166.729868ms ago: executing program 2 (id=2555): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x84082, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)=')$+\\^\x00') ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830c}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xfffffffffdffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0xfffffffe}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bc7ef9642d29ba564165605dca29708efdf9b15a5c10a126121b2751f642635bcd9a8bf7a928a5d054b0d2c54d519ea75c52f41ed6f2886973626b684c8bd9108c0b0b2ea7e556948f0367aff4fbcede3294f6e73d06ad16dc2d26725ff833b5f83b499918e6a6ec245b781d41aee9624c847e2f2312d6b9db45bad354fc1a3f20407ffe406483a0524937ee7559e4bf70136746b37fdfbbb152758d37ed8bcac41fb7243bdcd536249c7996e898b61927eaa5a8790054ba13d3ade593220f96027090a34aaf7ea92f41aab73e7a85eef87e956bb7c5c76a347264fd99359f4e57b0dcc2bcc188ea880a4b11a8bb81eb22b0ddfc689e3218cf310dcc61cab354149d9107d8a88b0aa5b5661555f00443aee5e714009e52cee5e88f008148ddbc0fa81bf938bed4a1ac778d5337cc0311d0772eeac3eab38426e8d1472ff514aa5379ed21551790cc10148410b4fc27582fd7106a8887a9a0b613dfe10aee77542d887208f5534f5dce4d43f258fc9ef975834e1917666e2aff1cebfc3ce2c1e8ff66bba1d9050000000000000078db7024bf321636bede8651e672ed4f01ba5da2c3f9042a8552bd3f2c9ad546ad0ea20b4d35fb0a15c6239f67c7747a40fe26a88adf727fd1b801b4e56fbffcad99ce68fe2af0d94fdc78d27268de435021dca51acaa7a9e0944bdf579c170db6405944b6791a7713ee54f650fdf71b57c3629fb185efce700620ef5744623be08ec935dd563e6ba0b461bda98b364acf3dcdafa9b0e68c21ea509212c2938aa09cc31aa4ee5bfb8e507181909f5854b13997af4888cd61c8aab5fdfd701a16d546e5a533cd9b985dcc582b67979551dcc750fc51f2c9b6814edeffc76a86ea9f58b7c66fa24540daf14c2163d064f8cf0b4878f81e6b8bc4dabc10dac82b39e033963a6d02434cb783a198829d1373790a85c0e01a362d89e80165d280283af3c2060000000000000034b12a73b0c53bfae5d2f6e55728052247adfe0966c6c5eca57918c4540c979a70a281ba00e408c9fe1b20fa208976dd6a56f9bd9a74d81447c9b265d8c23f0e983e0b1d2d62d1e57c9188e4882634476e62ab1b7415a58208eaaf166d14720092f79a6197fe8b4ea7d5485cc6b3630afed8d3403cfa4d7bf48efb371706e0e65901eea3743c98261cbb7a246cf62f99bbc918741d32539ec0754e7d7f08dd45aaf49623342eabf466e54d8da4346e73da54ba2e4b5e2ae2823864d4147b490e55c9509f75c8828500ac32cab11b0262e75fa9e39e3792d01e0b210fdfb686bfffdc677432f6332c1a27502b43997060acdf7784c79fed0325e06f6b64b6434ebf4730509bcf95b9a1d0ba7c469d55351cc1dce6c90f5872e7ad5eed5f850d9d1f928b4e0263b241e8fe03e5e66252c8a3bd320e8deee5b91c653b8f22f58cff36c2ba4d6774f14229939595d2beb998c9312212de00468fc488591aca07ab75fba4a318d3ee4581711927b77a7f14dbcd639892f8cb0000000000000080411736eb1ee86eec338197a56293c9cdb72e84155681553b896d58b62a96852320e74dc4c9b41d6f90d2353dc573a94a092a84209c12da57f8c78e161b0899eb1c8b694d26c5fbf7f65fefacdbf39151f335dddc3b179a13f6de93ffb338e94738c86e35e9fcc654e4d6618dc1201cbd16e1281df911e6c699da16fbbb7a2e5c77966c98d3e7edd58cabfe6bf1bb7f6329084e3e4a2a36da07bbac3ebc00472f55b7966f250109fcce0ad5d4526d20ef74d1a634d724"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002ff0100000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000feffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 164.328272ms ago: executing program 0 (id=2556): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, &(0x7f00000005c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001300)={r0}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000010c0), 0x10000, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000001100)) r2 = socket$kcm(0x29, 0x2, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={&(0x7f00000013c0), 0x2}, 0x0, 0x0, 0x0, 0x5, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x3, 0x20, 0x0, 0x0, 0xffff, 0x8a410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x8, 0x2}, 0x8018, 0x0, 0x3, 0x9, 0xe, 0x200000, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0x800, 0xffffffffffffffff, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtaction={0x44, 0x30, 0xffff, 0xfffffffe, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000080)='GPL\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f00000062c0)={0x0, 0x0, &(0x7f0000005180)=[{&(0x7f0000004f40)="94", 0x1}], 0x1}, 0x0) close(r2) r5 = socket$kcm(0xa, 0x3, 0x73) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001040)) sendmsg$inet(r5, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @loopback}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="9d7fcf3efc6316a6a555ba8b4726d7ccaf8a060000009cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71ad21b965f615b31105d60a4b16fa2fa1371850a1be85ffcad45b49422b2121d709014f49cf6bd1d18acc4c19e4356669a2ac3e05d5cdc6f0f485c1eb52ea8faf7e83a1468b6a491e71ae3d03cd9677e72413954feae71b5775a6e3e9fa9db9e1ed56e56bff66a7a86214d8145d878e26fa35bd55db98ecdef374d26a5d9cd0e89f3ae45be2d8e1d98ee0865fb64d6dd1e8c89608733370f12be1495d81b36dd72cc28e9c9b2c45f925b38b21818d93ce604772c21824e45793c4073eb44773f8e42c9ebb297dd5e76e856a22253c0e8a80f33b4d015c3f9c0c26bcdd6b440322a23b10d507eecead59faa166bdac1bd840211336dc0c", 0x129}], 0x2, &(0x7f0000001340)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x29, 0x2}}, @ip_tos_u8={{0x11}}], 0x48}, 0x0) 22.013326ms ago: executing program 3 (id=2557): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000e00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (fail_nth: 9) 0s ago: executing program 4 (id=2558): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82030, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) kernel console output (not intermixed with test programs): ibutes in process `syz.2.1181'. [ 317.916635][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1184'. [ 317.989882][ T9653] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1184'. [ 318.051582][ T9647] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1181'. [ 319.555177][ T9646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.574981][ T9646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.591049][ T9646] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 319.605366][ T9646] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.613061][ T9646] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.627388][ T9646] bond0 (unregistering): Released all slaves [ 321.538437][ T9719] rdma_rxe: rxe_newlink: failed to add vcan0 [ 321.560656][ T9719] netlink: 'syz.1.1203': attribute type 12 has an invalid length. [ 323.263914][ T9749] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 323.340502][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.347179][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.423060][ T9750] __nla_validate_parse: 6 callbacks suppressed [ 323.423086][ T9750] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1211'. [ 323.476923][ T9750] bond_slave_0: entered promiscuous mode [ 323.483011][ T9750] bond_slave_1: entered promiscuous mode [ 323.761368][ T9754] FAULT_INJECTION: forcing a failure. [ 323.761368][ T9754] name failslab, interval 1, probability 0, space 0, times 0 [ 323.779240][ T9754] CPU: 0 UID: 0 PID: 9754 Comm: syz.3.1214 Not tainted syzkaller #0 PREEMPT(full) [ 323.779271][ T9754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 323.779285][ T9754] Call Trace: [ 323.779294][ T9754] [ 323.779304][ T9754] dump_stack_lvl+0x189/0x250 [ 323.779341][ T9754] ? __pfx____ratelimit+0x10/0x10 [ 323.779370][ T9754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.779395][ T9754] ? __pfx__printk+0x10/0x10 [ 323.779431][ T9754] ? __pfx___might_resched+0x10/0x10 [ 323.779457][ T9754] should_fail_ex+0x414/0x560 [ 323.779490][ T9754] should_failslab+0xa8/0x100 [ 323.779524][ T9754] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 323.779554][ T9754] ? __alloc_skb+0x112/0x2d0 [ 323.779591][ T9754] __alloc_skb+0x112/0x2d0 [ 323.779626][ T9754] netlink_sendmsg+0x5c6/0xb30 [ 323.779670][ T9754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.779705][ T9754] ? aa_sock_msg_perm+0xf1/0x1d0 [ 323.779739][ T9754] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 323.779763][ T9754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.779795][ T9754] __sock_sendmsg+0x21c/0x270 [ 323.779826][ T9754] ____sys_sendmsg+0x505/0x830 [ 323.779854][ T9754] ? __pfx_____sys_sendmsg+0x10/0x10 [ 323.779887][ T9754] ? import_iovec+0x74/0xa0 [ 323.779915][ T9754] ___sys_sendmsg+0x21f/0x2a0 [ 323.779940][ T9754] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.780002][ T9754] ? __fget_files+0x2a/0x420 [ 323.780020][ T9754] ? __fget_files+0x3a0/0x420 [ 323.780051][ T9754] __x64_sys_sendmsg+0x19b/0x260 [ 323.780070][ T9754] ? perf_trace_run_bpf_submit+0x100/0x170 [ 323.780096][ T9754] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 323.780129][ T9754] ? __pfx_ksys_write+0x10/0x10 [ 323.780154][ T9754] ? rcu_is_watching+0x15/0xb0 [ 323.780182][ T9754] ? do_syscall_64+0xbe/0x3b0 [ 323.780216][ T9754] do_syscall_64+0xfa/0x3b0 [ 323.780245][ T9754] ? lockdep_hardirqs_on+0x9c/0x150 [ 323.780272][ T9754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.780293][ T9754] ? clear_bhb_loop+0x60/0xb0 [ 323.780326][ T9754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.780347][ T9754] RIP: 0033:0x7f34b6b8ebe9 [ 323.780365][ T9754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.780384][ T9754] RSP: 002b:00007f34b7a3c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.780406][ T9754] RAX: ffffffffffffffda RBX: 00007f34b6db5fa0 RCX: 00007f34b6b8ebe9 [ 323.780421][ T9754] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 323.780434][ T9754] RBP: 00007f34b7a3c090 R08: 0000000000000000 R09: 0000000000000000 [ 323.780447][ T9754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.780458][ T9754] R13: 00007f34b6db6038 R14: 00007f34b6db5fa0 R15: 00007ffdc03659c8 [ 323.780492][ T9754] [ 324.279259][ T9753] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1213'. [ 324.702045][ T9768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1217'. [ 325.123287][ T9777] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.1221'. [ 325.962582][ T9781] netlink: 'syz.4.1220': attribute type 3 has an invalid length. [ 326.022441][ T9781] netlink: 'syz.4.1220': attribute type 1 has an invalid length. [ 326.135690][ T9781] netlink: 191264 bytes leftover after parsing attributes in process `syz.4.1220'. [ 326.625577][ T9805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1230'. [ 326.738215][ T9802] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1228'. [ 327.329270][ T9823] netlink: 'syz.0.1236': attribute type 1 has an invalid length. [ 327.337871][ T9823] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1236'. [ 328.412123][ T9840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1242'. [ 328.468850][ T9841] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 328.635927][ T9846] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1245'. [ 328.824280][ T9859] netlink: 'syz.1.1247': attribute type 10 has an invalid length. [ 328.891732][ T9859] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1247'. [ 329.639021][ T9878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1254'. [ 329.956096][ T9887] netlink: 'syz.2.1257': attribute type 3 has an invalid length. [ 329.975193][ T9887] netlink: 'syz.2.1257': attribute type 1 has an invalid length. [ 330.448370][ T9895] netlink: 'syz.1.1260': attribute type 1 has an invalid length. [ 330.456274][ T9895] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1260'. [ 330.470256][ T9895] FAULT_INJECTION: forcing a failure. [ 330.470256][ T9895] name failslab, interval 1, probability 0, space 0, times 0 [ 330.483772][ T9895] CPU: 0 UID: 0 PID: 9895 Comm: syz.1.1260 Not tainted syzkaller #0 PREEMPT(full) [ 330.483799][ T9895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 330.483812][ T9895] Call Trace: [ 330.483821][ T9895] [ 330.483829][ T9895] dump_stack_lvl+0x189/0x250 [ 330.483860][ T9895] ? __pfx____ratelimit+0x10/0x10 [ 330.483889][ T9895] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.483914][ T9895] ? __pfx__printk+0x10/0x10 [ 330.483939][ T9895] ? genl_rcv+0x28/0x40 [ 330.483961][ T9895] ? ____sys_sendmsg+0x505/0x830 [ 330.483981][ T9895] ? __x64_sys_sendmsg+0x19b/0x260 [ 330.484013][ T9895] should_fail_ex+0x414/0x560 [ 330.484045][ T9895] should_failslab+0xa8/0x100 [ 330.484078][ T9895] kmem_cache_alloc_noprof+0x73/0x3c0 [ 330.484106][ T9895] ? skb_clone+0x212/0x3a0 [ 330.484133][ T9895] skb_clone+0x212/0x3a0 [ 330.484159][ T9895] __netlink_deliver_tap+0x404/0x850 [ 330.484204][ T9895] ? netlink_deliver_tap+0x2e/0x1b0 [ 330.484236][ T9895] netlink_deliver_tap+0x19c/0x1b0 [ 330.484268][ T9895] netlink_sendskb+0x68/0x140 [ 330.484297][ T9895] netlink_unicast+0x397/0x9e0 [ 330.484321][ T9895] ? __asan_memcpy+0x40/0x70 [ 330.484354][ T9895] ? __pfx_netlink_unicast+0x10/0x10 [ 330.484391][ T9895] netlink_rcv_skb+0x28c/0x470 [ 330.484418][ T9895] ? __lock_acquire+0xab9/0xd20 [ 330.484448][ T9895] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.484473][ T9895] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 330.484533][ T9895] ? down_read+0x1ad/0x2e0 [ 330.484568][ T9895] genl_rcv+0x28/0x40 [ 330.484588][ T9895] netlink_unicast+0x82c/0x9e0 [ 330.484625][ T9895] ? __pfx_netlink_unicast+0x10/0x10 [ 330.484654][ T9895] ? netlink_sendmsg+0x642/0xb30 [ 330.484681][ T9895] ? skb_put+0x11b/0x210 [ 330.484715][ T9895] netlink_sendmsg+0x805/0xb30 [ 330.484755][ T9895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.484789][ T9895] ? aa_sock_msg_perm+0xf1/0x1d0 [ 330.484824][ T9895] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 330.484852][ T9895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.484883][ T9895] __sock_sendmsg+0x21c/0x270 [ 330.484913][ T9895] ____sys_sendmsg+0x505/0x830 [ 330.484945][ T9895] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.484977][ T9895] ? import_iovec+0x74/0xa0 [ 330.485005][ T9895] ___sys_sendmsg+0x21f/0x2a0 [ 330.485029][ T9895] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.485092][ T9895] ? __fget_files+0x2a/0x420 [ 330.485114][ T9895] ? __fget_files+0x3a0/0x420 [ 330.485144][ T9895] __x64_sys_sendmsg+0x19b/0x260 [ 330.485169][ T9895] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 330.485201][ T9895] ? __pfx_ksys_write+0x10/0x10 [ 330.485225][ T9895] ? rcu_is_watching+0x15/0xb0 [ 330.485252][ T9895] ? do_syscall_64+0xbe/0x3b0 [ 330.485287][ T9895] do_syscall_64+0xfa/0x3b0 [ 330.485314][ T9895] ? lockdep_hardirqs_on+0x9c/0x150 [ 330.485342][ T9895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.485362][ T9895] ? clear_bhb_loop+0x60/0xb0 [ 330.485388][ T9895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.485408][ T9895] RIP: 0033:0x7f86ccd8ebe9 [ 330.485427][ T9895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.485445][ T9895] RSP: 002b:00007f86cdc24038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.485467][ T9895] RAX: ffffffffffffffda RBX: 00007f86ccfb5fa0 RCX: 00007f86ccd8ebe9 [ 330.485481][ T9895] RDX: 0000000010009004 RSI: 0000200000000140 RDI: 0000000000000003 [ 330.485502][ T9895] RBP: 00007f86cdc24090 R08: 0000000000000000 R09: 0000000000000000 [ 330.485514][ T9895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 330.485526][ T9895] R13: 00007f86ccfb6038 R14: 00007f86ccfb5fa0 R15: 00007fffa46a3a98 [ 330.485560][ T9895] [ 330.909670][ T9897] ip6_tunnel: non-ECT from fefd:120e:4000:0200:875a:6596:9ff5:7b00 with DS=0x31 [ 331.025915][ T9909] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1264'. [ 331.218460][ T9915] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1265'. [ 331.390835][ T9914] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1267'. [ 333.095079][ T9951] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1279'. [ 333.105725][ T9957] netlink: 'syz.0.1280': attribute type 2 has an invalid length. [ 333.129318][ T9957] netlink: 119 bytes leftover after parsing attributes in process `syz.0.1280'. [ 333.151974][ T9954] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1281'. [ 333.284214][ T9962] netlink: 'syz.1.1283': attribute type 1 has an invalid length. [ 333.572406][ T9974] net veth1_virt_wifi »»»»»»: renamed from virt_wifi0 [ 333.639827][ T9980] __nla_validate_parse: 1 callbacks suppressed [ 333.639851][ T9980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1290'. [ 333.656344][ T9980] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1290'. [ 333.847915][ T9984] netlink: 'syz.1.1291': attribute type 17 has an invalid length. [ 333.870726][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1293'. [ 333.880148][ T9984] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1291'. [ 334.045536][ T9991] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1295'. [ 334.388705][T10006] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1300'. [ 334.427511][T10006] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1300'. [ 335.438930][T10029] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1308'. [ 335.531294][T10028] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1307'. [ 335.561521][T10034] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1310'. [ 337.140545][T10075] netlink: 'syz.0.1324': attribute type 3 has an invalid length. [ 338.553795][T10094] netlink: 'syz.0.1329': attribute type 39 has an invalid length. [ 338.771764][T10099] __nla_validate_parse: 6 callbacks suppressed [ 338.771802][T10099] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1331'. [ 339.743823][T10118] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1338'. [ 339.941505][T10128] netlink: 'syz.3.1342': attribute type 21 has an invalid length. [ 340.036130][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1345'. [ 340.161127][T10134] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1344'. [ 340.345006][T10144] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1349'. [ 340.386848][T10144] IPv6: NLM_F_CREATE should be specified when creating new route [ 340.394787][T10144] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 340.402238][T10144] IPv6: NLM_F_CREATE should be set when creating new route [ 340.409562][T10144] IPv6: NLM_F_CREATE should be set when creating new route [ 340.416864][T10144] IPv6: NLM_F_CREATE should be set when creating new route [ 341.204874][T10165] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1355'. [ 341.225820][T10165] FAULT_INJECTION: forcing a failure. [ 341.225820][T10165] name failslab, interval 1, probability 0, space 0, times 0 [ 341.272397][T10165] CPU: 1 UID: 0 PID: 10165 Comm: syz.1.1355 Not tainted syzkaller #0 PREEMPT(full) [ 341.272427][T10165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 341.272441][T10165] Call Trace: [ 341.272452][T10165] [ 341.272462][T10165] dump_stack_lvl+0x189/0x250 [ 341.272494][T10165] ? __pfx____ratelimit+0x10/0x10 [ 341.272524][T10165] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.272549][T10165] ? __pfx__printk+0x10/0x10 [ 341.272594][T10165] should_fail_ex+0x414/0x560 [ 341.272628][T10165] should_failslab+0xa8/0x100 [ 341.272662][T10165] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 341.272712][T10165] ? __alloc_skb+0x112/0x2d0 [ 341.272758][T10165] __alloc_skb+0x112/0x2d0 [ 341.272794][T10165] wireless_send_event+0x510/0xc30 [ 341.272841][T10165] ? __pfx_wireless_send_event+0x10/0x10 [ 341.272876][T10165] ? full_name_hash+0x92/0xe0 [ 341.272900][T10165] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 341.272929][T10165] ioctl_standard_call+0x145/0x1b0 [ 341.272964][T10165] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 341.272990][T10165] wext_ioctl_dispatch+0xeb/0x410 [ 341.273019][T10165] ? __pfx_ioctl_standard_call+0x10/0x10 [ 341.273055][T10165] wext_handle_ioctl+0x100/0x1c0 [ 341.273091][T10165] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 341.273118][T10165] ? __lock_acquire+0xab9/0xd20 [ 341.273167][T10165] sock_ioctl+0x15f/0x790 [ 341.273196][T10165] ? __pfx_sock_ioctl+0x10/0x10 [ 341.273222][T10165] ? __fget_files+0x2a/0x420 [ 341.273240][T10165] ? __fget_files+0x3a0/0x420 [ 341.273257][T10165] ? __fget_files+0x2a/0x420 [ 341.273279][T10165] ? bpf_lsm_file_ioctl+0x9/0x20 [ 341.273306][T10165] ? __pfx_sock_ioctl+0x10/0x10 [ 341.273330][T10165] __se_sys_ioctl+0xfc/0x170 [ 341.273359][T10165] do_syscall_64+0xfa/0x3b0 [ 341.273392][T10165] ? lockdep_hardirqs_on+0x9c/0x150 [ 341.273420][T10165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.273440][T10165] ? clear_bhb_loop+0x60/0xb0 [ 341.273466][T10165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.273487][T10165] RIP: 0033:0x7f86ccd8ebe9 [ 341.273506][T10165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.273524][T10165] RSP: 002b:00007f86cdc03038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 341.273546][T10165] RAX: ffffffffffffffda RBX: 00007f86ccfb6090 RCX: 00007f86ccd8ebe9 [ 341.273562][T10165] RDX: 0000200000000040 RSI: 0000000000008b04 RDI: 0000000000000008 [ 341.273575][T10165] RBP: 00007f86cdc03090 R08: 0000000000000000 R09: 0000000000000000 [ 341.273588][T10165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.273600][T10165] R13: 00007f86ccfb6128 R14: 00007f86ccfb6090 R15: 00007fffa46a3a98 [ 341.273635][T10165] [ 341.655897][T10158] žÿÿÿ: renamed from team_slave_1 [ 341.984095][T10174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1359'. [ 342.492742][T10186] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1361'. [ 343.303703][T10205] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1370'. [ 343.379726][T10205] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 343.482953][T10207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1371'. [ 343.991179][T10217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1374'. [ 345.002625][T10227] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1378'. [ 345.200187][T10242] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1380'. [ 345.456601][T10247] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1384'. [ 345.959069][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1388'. [ 346.238027][T10263] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1389'. [ 346.262890][T10263] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1389'. [ 346.273844][T10263] netlink: 'syz.2.1389': attribute type 22 has an invalid length. [ 346.282001][T10263] netlink: 14332 bytes leftover after parsing attributes in process `syz.2.1389'. [ 346.655931][T10268] netlink: 'syz.0.1392': attribute type 29 has an invalid length. [ 346.834893][T10276] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1394'. [ 347.007864][T10278] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1395'. [ 347.582134][T10295] netlink: 'syz.2.1400': attribute type 1 has an invalid length. [ 350.985921][T10339] __nla_validate_parse: 6 callbacks suppressed [ 350.985947][T10339] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1410'. [ 351.891601][T10363] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1417'. [ 351.901683][T10363] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1417'. [ 352.333858][T10363] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1417'. [ 352.351725][T10363] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1417'. [ 352.690114][T10373] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1420'. [ 352.701163][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1419'. [ 352.731430][T10373] netlink: 'syz.0.1420': attribute type 10 has an invalid length. [ 352.786939][T10377] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1422'. [ 352.900266][T10382] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1422'. [ 353.013873][T10384] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1424'. [ 353.057570][T10390] netlink: 'syz.2.1428': attribute type 21 has an invalid length. [ 356.909186][T10473] __nla_validate_parse: 5 callbacks suppressed [ 356.909218][T10473] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1453'. [ 356.980803][T10473] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1453'. [ 357.209679][T10475] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1456'. [ 357.256054][T10473] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1453'. [ 357.286084][T10473] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1453'. [ 357.324617][T10487] netlink: 'syz.0.1459': attribute type 1 has an invalid length. [ 357.456939][T10487] netlink: 16227 bytes leftover after parsing attributes in process `syz.0.1459'. [ 357.786577][T10473] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1453'. [ 357.867773][T10473] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1453'. [ 358.404866][T10507] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.1464'. [ 359.210056][T10526] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1469'. [ 361.233744][T10571] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 362.125125][T10593] __nla_validate_parse: 4 callbacks suppressed [ 362.125148][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1494'. [ 362.632933][T10603] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1498'. [ 362.669940][T10606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1499'. [ 362.693045][T10605] vcan0 speed is unknown, defaulting to 1000 [ 363.214026][T10605] lo speed is unknown, defaulting to 1000 [ 363.447170][T10617] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1502'. [ 363.792805][T10625] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1504'. [ 363.805422][T10625] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1504'. [ 363.999066][T10632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1506'. [ 364.248910][T10625] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1504'. [ 364.295412][T10625] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1504'. [ 364.621916][T10647] netlink: 'syz.0.1511': attribute type 10 has an invalid length. [ 364.677167][T10651] netlink: 'syz.0.1511': attribute type 10 has an invalid length. [ 366.372888][T10676] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1520'. [ 367.330645][T10701] __nla_validate_parse: 4 callbacks suppressed [ 367.330677][T10701] netlink: 446 bytes leftover after parsing attributes in process `syz.3.1526'. [ 367.380931][T10712] netlink: 'syz.3.1526': attribute type 4 has an invalid length. [ 367.427572][T10713] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1531'. [ 367.468703][T10712] netlink: 'syz.3.1526': attribute type 33 has an invalid length. [ 367.490452][T10701] netlink: 446 bytes leftover after parsing attributes in process `syz.3.1526'. [ 367.526874][T10712] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1526'. [ 367.539108][T10701] bond_slave_0: entered promiscuous mode [ 367.545866][T10701] bond_slave_1: entered promiscuous mode [ 367.606615][T10721] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1532'. [ 367.629609][T10713] netlink: 26 bytes leftover after parsing attributes in process `syz.2.1531'. [ 367.813405][T10712] bond_slave_0: left promiscuous mode [ 367.826263][T10712] bond_slave_1: left promiscuous mode [ 367.840712][T10712] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 367.862381][T10721] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1532'. [ 368.355766][T10721] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1532'. [ 368.392045][T10721] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1532'. [ 369.049919][T10755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1541'. [ 369.557100][T10764] netlink: 'syz.3.1543': attribute type 8 has an invalid length. [ 370.457096][T10782] netlink: 'syz.1.1551': attribute type 10 has an invalid length. [ 374.179108][T10842] __nla_validate_parse: 4 callbacks suppressed [ 374.179158][T10842] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1564'. [ 375.525570][T10870] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1572'. [ 375.576401][T10870] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1572'. [ 375.716448][T10870] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1572'. [ 375.730893][T10870] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1572'. [ 375.763068][T10874] netlink: 'syz.1.1574': attribute type 10 has an invalid length. [ 375.783241][T10874] syz_tun: entered promiscuous mode [ 376.062948][T10870] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1572'. [ 376.089411][T10886] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1576'. [ 376.099065][T10870] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1572'. [ 376.133948][T10886] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1576'. [ 376.230721][T10895] FAULT_INJECTION: forcing a failure. [ 376.230721][T10895] name failslab, interval 1, probability 0, space 0, times 0 [ 376.262959][T10895] CPU: 0 UID: 0 PID: 10895 Comm: syz.0.1580 Not tainted syzkaller #0 PREEMPT(full) [ 376.262990][T10895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 376.263006][T10895] Call Trace: [ 376.263015][T10895] [ 376.263024][T10895] dump_stack_lvl+0x189/0x250 [ 376.263054][T10895] ? __pfx____ratelimit+0x10/0x10 [ 376.263080][T10895] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.263102][T10895] ? __pfx__printk+0x10/0x10 [ 376.263129][T10895] ? __pfx___might_resched+0x10/0x10 [ 376.263148][T10895] ? fs_reclaim_acquire+0x7d/0x100 [ 376.263181][T10895] should_fail_ex+0x414/0x560 [ 376.263210][T10895] should_failslab+0xa8/0x100 [ 376.263238][T10895] __kmalloc_noprof+0xcb/0x4f0 [ 376.263261][T10895] ? tomoyo_mount_permission+0x27a/0x970 [ 376.263287][T10895] ? tomoyo_encode+0x28b/0x550 [ 376.263308][T10895] tomoyo_encode+0x28b/0x550 [ 376.263328][T10895] ? tomoyo_mount_permission+0x27a/0x970 [ 376.263356][T10895] tomoyo_mount_permission+0x331/0x970 [ 376.263387][T10895] ? trace_call_bpf+0xb7/0x850 [ 376.263404][T10895] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 376.263459][T10895] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 376.263483][T10895] ? perf_trace_preemptirq_template+0x280/0x340 [ 376.263529][T10895] security_sb_mount+0xec/0x350 [ 376.263550][T10895] path_mount+0xbc/0xfe0 [ 376.263576][T10895] ? user_path_at+0x44/0x60 [ 376.263602][T10895] ? kmem_cache_free+0x18f/0x400 [ 376.263637][T10895] __se_sys_mount+0x317/0x410 [ 376.263670][T10895] ? __pfx___se_sys_mount+0x10/0x10 [ 376.263704][T10895] ? do_syscall_64+0xbe/0x3b0 [ 376.263728][T10895] ? __x64_sys_mount+0x20/0xc0 [ 376.263757][T10895] do_syscall_64+0xfa/0x3b0 [ 376.263781][T10895] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.263806][T10895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.263826][T10895] ? clear_bhb_loop+0x60/0xb0 [ 376.263851][T10895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.263877][T10895] RIP: 0033:0x7fae0298ebe9 [ 376.263902][T10895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.263920][T10895] RSP: 002b:00007fae00bf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 376.263941][T10895] RAX: ffffffffffffffda RBX: 00007fae02bb6090 RCX: 00007fae0298ebe9 [ 376.263956][T10895] RDX: 0000200000000240 RSI: 0000200000000440 RDI: 0000000000000000 [ 376.263969][T10895] RBP: 00007fae00bf6090 R08: 0000200000000ac0 R09: 0000000000000000 [ 376.263982][T10895] R10: 0000000000200020 R11: 0000000000000246 R12: 0000000000000001 [ 376.263994][T10895] R13: 00007fae02bb6128 R14: 00007fae02bb6090 R15: 00007ffe3cb693a8 [ 376.264026][T10895] [ 376.333739][T10896] IPv6: NLM_F_CREATE should be specified when creating new route [ 377.155318][T10918] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1587'. [ 377.321573][T10925] netlink: 'syz.1.1588': attribute type 21 has an invalid length. [ 378.412947][T10936] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 378.467255][T10936] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.312097][T10966] netlink: 'syz.1.1603': attribute type 1 has an invalid length. [ 379.359158][T10966] __nla_validate_parse: 5 callbacks suppressed [ 379.359179][T10966] netlink: 16227 bytes leftover after parsing attributes in process `syz.1.1603'. [ 379.823043][T10981] netlink: 'syz.3.1608': attribute type 1 has an invalid length. [ 379.836260][T10981] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1608'. [ 379.849659][T10980] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1606'. [ 379.895910][T10980] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1606'. [ 379.936526][T10980] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.1606'. [ 380.624820][T10996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1614'. [ 381.005117][T11003] netlink: 'syz.1.1616': attribute type 1 has an invalid length. [ 381.026976][T11003] netlink: 16227 bytes leftover after parsing attributes in process `syz.1.1616'. [ 381.274817][T11014] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1617'. [ 381.316948][T11014] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1617'. [ 381.711383][T11014] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1617'. [ 382.797359][T11041] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 383.760023][T11058] netlink: 'syz.3.1632': attribute type 1 has an invalid length. [ 384.091402][T11064] netlink: 'syz.1.1633': attribute type 21 has an invalid length. [ 384.849585][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.855971][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.322740][T11102] __nla_validate_parse: 8 callbacks suppressed [ 386.322766][T11102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1645'. [ 386.501231][T11109] netlink: 'syz.4.1647': attribute type 1 has an invalid length. [ 386.543530][T11109] netlink: 16227 bytes leftover after parsing attributes in process `syz.4.1647'. [ 388.199348][T11148] netlink: 'syz.1.1661': attribute type 1 has an invalid length. [ 388.237141][T11148] netlink: 16227 bytes leftover after parsing attributes in process `syz.1.1661'. [ 389.330380][T11178] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1664'. [ 389.462851][T11178] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1664'. [ 389.666367][T11178] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1664'. [ 389.702523][T11178] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1664'. [ 390.898577][T11207] netlink: 'syz.4.1675': attribute type 1 has an invalid length. [ 390.971501][T11207] netlink: 16227 bytes leftover after parsing attributes in process `syz.4.1675'. [ 391.071101][T11202] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1673'. [ 391.107356][T11202] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1673'. [ 391.360873][T11202] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1673'. [ 391.381693][T11202] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1673'. [ 391.906160][T11202] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1673'. [ 391.935092][T11202] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1673'. [ 392.898865][T11242] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1683'. [ 394.212892][T11262] FAULT_INJECTION: forcing a failure. [ 394.212892][T11262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.301661][T11262] CPU: 1 UID: 0 PID: 11262 Comm: syz.0.1691 Not tainted syzkaller #0 PREEMPT(full) [ 394.301692][T11262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 394.301706][T11262] Call Trace: [ 394.301715][T11262] [ 394.301724][T11262] dump_stack_lvl+0x189/0x250 [ 394.301757][T11262] ? __pfx____ratelimit+0x10/0x10 [ 394.301787][T11262] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.301813][T11262] ? __pfx__printk+0x10/0x10 [ 394.301844][T11262] ? __might_fault+0xb0/0x130 [ 394.301877][T11262] ? __might_fault+0xb0/0x130 [ 394.301913][T11262] should_fail_ex+0x414/0x560 [ 394.301948][T11262] _copy_from_user+0x2d/0xb0 [ 394.301974][T11262] do_ip_vs_set_ctl+0x2d3/0xa60 [ 394.302008][T11262] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 394.302029][T11262] ? trace_contention_end+0x39/0x120 [ 394.302076][T11262] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 394.302116][T11262] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 394.302153][T11262] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.302197][T11262] nf_setsockopt+0x26c/0x290 [ 394.302223][T11262] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 394.302257][T11262] do_sock_setsockopt+0x17c/0x1b0 [ 394.302304][T11262] __x64_sys_setsockopt+0x13f/0x1b0 [ 394.302332][T11262] do_syscall_64+0xfa/0x3b0 [ 394.302363][T11262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.302383][T11262] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 394.302403][T11262] ? clear_bhb_loop+0x60/0xb0 [ 394.302430][T11262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.302450][T11262] RIP: 0033:0x7fae0298ebe9 [ 394.302469][T11262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.302487][T11262] RSP: 002b:00007fae00bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 394.302508][T11262] RAX: ffffffffffffffda RBX: 00007fae02bb6090 RCX: 00007fae0298ebe9 [ 394.302523][T11262] RDX: 0000000000000480 RSI: 0000000000000000 RDI: 0000000000000006 [ 394.302535][T11262] RBP: 00007fae00bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 394.302548][T11262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.302560][T11262] R13: 00007fae02bb6128 R14: 00007fae02bb6090 R15: 00007ffe3cb693a8 [ 394.302597][T11262] [ 394.946268][T11268] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1693'. [ 395.283506][T11271] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1694'. [ 395.347994][T11271] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1694'. [ 395.525210][T11271] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1694'. [ 395.579018][T11271] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1694'. [ 395.687720][T11295] netlink: 'syz.4.1701': attribute type 22 has an invalid length. [ 396.938797][T11321] __nla_validate_parse: 7 callbacks suppressed [ 396.938823][T11321] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1708'. [ 397.631644][T11337] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1712'. [ 399.628738][T11348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1716'. [ 399.887905][T11360] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1721'. [ 400.588411][T11382] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1728'. [ 401.580892][T11406] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1735'. [ 401.816539][T11420] FAULT_INJECTION: forcing a failure. [ 401.816539][T11420] name failslab, interval 1, probability 0, space 0, times 0 [ 401.833464][T11420] CPU: 0 UID: 0 PID: 11420 Comm: syz.4.1739 Not tainted syzkaller #0 PREEMPT(full) [ 401.833502][T11420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 401.833515][T11420] Call Trace: [ 401.833523][T11420] [ 401.833532][T11420] dump_stack_lvl+0x189/0x250 [ 401.833562][T11420] ? __pfx____ratelimit+0x10/0x10 [ 401.833591][T11420] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.833615][T11420] ? __pfx__printk+0x10/0x10 [ 401.833660][T11420] should_fail_ex+0x414/0x560 [ 401.833693][T11420] should_failslab+0xa8/0x100 [ 401.833724][T11420] kmem_cache_alloc_noprof+0x73/0x3c0 [ 401.833753][T11420] ? skb_clone+0x212/0x3a0 [ 401.833780][T11420] skb_clone+0x212/0x3a0 [ 401.833806][T11420] __netlink_deliver_tap+0x404/0x850 [ 401.833850][T11420] ? netlink_deliver_tap+0x2e/0x1b0 [ 401.833881][T11420] netlink_deliver_tap+0x19c/0x1b0 [ 401.833912][T11420] netlink_dump+0x92b/0xe90 [ 401.833955][T11420] ? __pfx_netlink_dump+0x10/0x10 [ 401.833979][T11420] ? ip_set_dump_start+0x2b8/0x410 [ 401.834024][T11420] ? netlink_lookup+0x30/0x200 [ 401.834051][T11420] ? netlink_lookup+0x30/0x200 [ 401.834075][T11420] ? netlink_lookup+0x30/0x200 [ 401.834109][T11420] __netlink_dump_start+0x5cb/0x7e0 [ 401.834147][T11420] ip_set_dump+0x13e/0x1c0 [ 401.834171][T11420] ? __pfx_ip_set_dump+0x10/0x10 [ 401.834193][T11420] ? __pfx_ip_set_dump_start+0x10/0x10 [ 401.834216][T11420] ? __pfx_ip_set_dump_do+0x10/0x10 [ 401.834239][T11420] ? __pfx_ip_set_dump_done+0x10/0x10 [ 401.834281][T11420] nfnetlink_rcv_msg+0xb4a/0x1130 [ 401.834308][T11420] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 401.834355][T11420] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 401.834379][T11420] ? kasan_save_free_info+0x46/0x50 [ 401.834431][T11420] ? perf_trace_preemptirq_template+0xa3/0x340 [ 401.834459][T11420] ? kasan_quarantine_put+0x3d/0x220 [ 401.834511][T11420] netlink_rcv_skb+0x205/0x470 [ 401.834541][T11420] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 401.834569][T11420] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 401.834612][T11420] ? bpf_lsm_capable+0x9/0x20 [ 401.834639][T11420] ? security_capable+0x7e/0x2e0 [ 401.834677][T11420] nfnetlink_rcv+0x26a/0x2520 [ 401.834708][T11420] ? __dev_queue_xmit+0x1d79/0x3b50 [ 401.834743][T11420] ? __dev_queue_xmit+0x27b/0x3b50 [ 401.834781][T11420] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 401.834806][T11420] ? __pfx___dev_queue_xmit+0x10/0x10 [ 401.834845][T11420] ? ref_tracker_free+0x63a/0x7d0 [ 401.834874][T11420] ? __asan_memcpy+0x40/0x70 [ 401.834896][T11420] ? __pfx_ref_tracker_free+0x10/0x10 [ 401.834922][T11420] ? __skb_clone+0x63/0x7a0 [ 401.834948][T11420] ? __skb_clone+0x483/0x7a0 [ 401.834976][T11420] ? skb_clone+0x246/0x3a0 [ 401.835002][T11420] ? __netlink_deliver_tap+0x807/0x850 [ 401.835030][T11420] ? netlink_deliver_tap+0x2e/0x1b0 [ 401.835067][T11420] ? netlink_deliver_tap+0x2e/0x1b0 [ 401.835105][T11420] netlink_unicast+0x82c/0x9e0 [ 401.835148][T11420] ? __pfx_netlink_unicast+0x10/0x10 [ 401.835177][T11420] ? netlink_sendmsg+0x642/0xb30 [ 401.835204][T11420] ? skb_put+0x11b/0x210 [ 401.835239][T11420] netlink_sendmsg+0x805/0xb30 [ 401.835280][T11420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.835314][T11420] ? aa_sock_msg_perm+0xf1/0x1d0 [ 401.835348][T11420] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 401.835370][T11420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.835401][T11420] __sock_sendmsg+0x21c/0x270 [ 401.835431][T11420] ____sys_sendmsg+0x505/0x830 [ 401.835459][T11420] ? __pfx_____sys_sendmsg+0x10/0x10 [ 401.835496][T11420] ? import_iovec+0x74/0xa0 [ 401.835524][T11420] ___sys_sendmsg+0x21f/0x2a0 [ 401.835547][T11420] ? __pfx____sys_sendmsg+0x10/0x10 [ 401.835611][T11420] ? __fget_files+0x2a/0x420 [ 401.835628][T11420] ? __fget_files+0x3a0/0x420 [ 401.835659][T11420] __x64_sys_sendmsg+0x19b/0x260 [ 401.835683][T11420] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 401.835716][T11420] ? __pfx_ksys_write+0x10/0x10 [ 401.835740][T11420] ? rcu_is_watching+0x15/0xb0 [ 401.835767][T11420] ? do_syscall_64+0xbe/0x3b0 [ 401.835800][T11420] do_syscall_64+0xfa/0x3b0 [ 401.835827][T11420] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.835854][T11420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.835875][T11420] ? clear_bhb_loop+0x60/0xb0 [ 401.835900][T11420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.835919][T11420] RIP: 0033:0x7efd0758ebe9 [ 401.835939][T11420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.835957][T11420] RSP: 002b:00007efd0847b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.835978][T11420] RAX: ffffffffffffffda RBX: 00007efd077b5fa0 RCX: 00007efd0758ebe9 [ 401.835993][T11420] RDX: 0000000004000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 401.836006][T11420] RBP: 00007efd0847b090 R08: 0000000000000000 R09: 0000000000000000 [ 401.836019][T11420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.836031][T11420] R13: 00007efd077b6038 R14: 00007efd077b5fa0 R15: 00007fffc716ba98 [ 401.836065][T11420] [ 402.675266][T11435] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1742'. [ 403.236551][T11452] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1748'. [ 403.349131][T11445] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1747'. [ 403.584922][T11465] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1754'. [ 403.819132][T11472] debugfs: '!' already exists in 'ieee80211' [ 403.849517][T11475] IPv6: Can't replace route, no match found [ 404.348177][T11492] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1762'. [ 404.484239][T11496] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1761'. [ 404.506852][T11496] netlink: 'syz.4.1761': attribute type 22 has an invalid length. [ 404.514752][T11496] netlink: 14332 bytes leftover after parsing attributes in process `syz.4.1761'. [ 404.701449][T11502] netlink: 'syz.3.1765': attribute type 10 has an invalid length. [ 405.150517][T11502] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 405.408853][T11516] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1767'. [ 406.912824][T11539] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1775'. [ 406.963417][T11541] netlink: 'syz.3.1776': attribute type 17 has an invalid length. [ 406.980786][T11541] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1776'. [ 408.228520][T11567] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1784'. [ 408.251021][T11563] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1783'. [ 408.929202][T11581] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1788'. [ 408.942495][T11581] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1788'. [ 409.023910][T11581] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1788'. [ 409.062903][T11581] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1788'. [ 409.634553][T11581] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1788'. [ 409.655865][T11581] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1788'. [ 410.201037][T11610] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1793'. [ 410.311610][T11614] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1796'. [ 410.544827][T11623] netlink: 'syz.2.1798': attribute type 21 has an invalid length. [ 410.765159][T11631] bridge0: port 3(veth1_to_team) entered blocking state [ 410.853603][T11631] bridge0: port 3(veth1_to_team) entered disabled state [ 410.988433][T11631] veth1_to_team: entered allmulticast mode [ 411.040248][T11631] veth1_to_team: entered promiscuous mode [ 411.066454][T11631] bridge0: port 3(veth1_to_team) entered blocking state [ 411.074581][T11631] bridge0: port 3(veth1_to_team) entered forwarding state [ 411.281942][T11624] netlink: 'syz.3.1799': attribute type 11 has an invalid length. [ 411.482264][T11630] vcan0 speed is unknown, defaulting to 1000 [ 412.373105][T11630] lo speed is unknown, defaulting to 1000 [ 414.113386][T11691] __nla_validate_parse: 7 callbacks suppressed [ 414.113460][T11691] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1820'. [ 414.285703][T11693] netlink: 'syz.4.1821': attribute type 29 has an invalid length. [ 414.372771][T11696] netlink: 'syz.4.1821': attribute type 29 has an invalid length. [ 414.441731][T11693] netlink: 24032 bytes leftover after parsing attributes in process `syz.4.1821'. [ 415.129216][T11693] netlink: 104088 bytes leftover after parsing attributes in process `syz.4.1821'. [ 415.280992][T11693] netlink: 24032 bytes leftover after parsing attributes in process `syz.4.1821'. [ 416.463004][T11731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.476126][T11731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.495477][T11731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.505881][T11731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.528872][T11731] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 416.536489][T11731] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 416.564226][T11739] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1834'. [ 416.689533][T11736] vcan0 speed is unknown, defaulting to 1000 [ 417.176215][T11736] lo speed is unknown, defaulting to 1000 [ 418.525987][T11781] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1845'. [ 419.783113][T11816] netlink: 'syz.2.1857': attribute type 1 has an invalid length. [ 419.807191][T11816] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1857'. [ 419.900914][T11808] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1856'. [ 419.942803][T11808] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1856'. [ 420.234631][T11808] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1856'. [ 420.283552][T11808] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1856'. [ 421.296348][T11835] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1860'. [ 421.974084][T11848] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1864'. [ 422.172862][T11858] netlink: 'syz.0.1868': attribute type 3 has an invalid length. [ 422.181537][T11858] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1868'. [ 422.267835][T11865] netlink: 'syz.2.1871': attribute type 9 has an invalid length. [ 422.885631][T11877] siw: device registration error -23 [ 423.112274][T11880] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1873'. [ 423.499233][T11887] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1878'. [ 424.723083][T11917] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 424.760462][T11915] netlink: 'syz.4.1884': attribute type 10 has an invalid length. [ 424.771008][T11915] veth1_vlan: entered allmulticast mode [ 424.910985][T11922] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1886'. [ 424.939685][T11922] netlink: 'syz.2.1886': attribute type 39 has an invalid length. [ 425.322694][T11926] netlink: 4840 bytes leftover after parsing attributes in process `syz.0.1887'. [ 425.462622][T11928] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1888'. [ 425.763134][T11943] netlink: 'syz.1.1895': attribute type 9 has an invalid length. [ 425.776540][T11943] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.1895'. [ 425.913535][T11950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1896'. [ 426.023381][T11957] netlink: 'syz.2.1899': attribute type 22 has an invalid length. [ 426.031670][T11957] netlink: 14380 bytes leftover after parsing attributes in process `syz.2.1899'. [ 426.642438][T11967] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1903'. [ 427.985655][T11982] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1908'. [ 427.998148][T11982] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1908'. [ 430.055408][T11989] netlink: 'syz.2.1910': attribute type 10 has an invalid length. [ 430.400869][T11989] bond0: (slave netdevsim0): Releasing backup interface [ 430.865384][T11989] bridge0: port 3(netdevsim0) entered blocking state [ 430.875408][T11989] bridge0: port 3(netdevsim0) entered disabled state [ 430.884060][T11989] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 430.904184][T11989] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 430.913503][T11996] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1914'. [ 431.933174][T12018] bridge0: port 1(veth1_to_team) entered blocking state [ 431.940559][T12018] bridge0: port 1(veth1_to_team) entered disabled state [ 431.987110][T12018] veth1_to_team: entered allmulticast mode [ 432.053354][T12018] veth1_to_team: entered promiscuous mode [ 432.195183][T12018] bridge0: port 1(veth1_to_team) entered blocking state [ 432.202457][T12018] bridge0: port 1(veth1_to_team) entered forwarding state [ 433.610818][T12042] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1926'. [ 435.311022][T12049] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1929'. [ 435.715988][T12072] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1935'. [ 436.709955][T12091] rdma_rxe: rxe_newlink: failed to add vcan0 [ 436.750156][T12089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.053766][T12082] syzkaller0: entered promiscuous mode [ 437.096989][T12082] syzkaller0: entered allmulticast mode [ 437.156315][T12096] bridge0: port 3(veth1_to_team) entered blocking state [ 437.184225][T12096] bridge0: port 3(veth1_to_team) entered disabled state [ 437.202233][T12096] veth1_to_team: entered allmulticast mode [ 437.277601][T12099] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1940'. [ 437.301747][T12096] veth1_to_team: entered promiscuous mode [ 437.453116][T12092] netlink: 'syz.0.1940': attribute type 11 has an invalid length. [ 438.127414][T12111] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1947'. [ 438.148665][T12111] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1947'. [ 438.249645][T12111] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1947'. [ 438.274867][T12111] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1947'. [ 438.401005][T12111] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1947'. [ 438.410459][T12111] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1947'. [ 441.817742][T12159] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1961'. [ 441.987362][T12171] netlink: 'syz.1.1966': attribute type 10 has an invalid length. [ 442.027263][T12174] netlink: 'syz.0.1965': attribute type 10 has an invalid length. [ 442.032092][T12171] bridge0: port 1(veth1_to_team) entered disabled state [ 442.048765][T12171] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.102417][T12176] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1966'. [ 442.279877][T12171] bridge0: port 1(veth1_to_team) entered blocking state [ 442.290477][T12171] bridge0: port 1(veth1_to_team) entered forwarding state [ 442.305069][T12171] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.314041][T12171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.473960][T12171] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 442.960029][T12191] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.1970'. [ 442.971197][T12197] FAULT_INJECTION: forcing a failure. [ 442.971197][T12197] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 442.992297][T12197] CPU: 1 UID: 0 PID: 12197 Comm: syz.0.1972 Not tainted syzkaller #0 PREEMPT(full) [ 442.992325][T12197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 442.992338][T12197] Call Trace: [ 442.992346][T12197] [ 442.992356][T12197] dump_stack_lvl+0x189/0x250 [ 442.992388][T12197] ? __pfx____ratelimit+0x10/0x10 [ 442.992415][T12197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.992439][T12197] ? __pfx__printk+0x10/0x10 [ 442.992468][T12197] ? fs_reclaim_acquire+0x7d/0x100 [ 442.992509][T12197] should_fail_ex+0x414/0x560 [ 442.992541][T12197] prepare_alloc_pages+0x213/0x610 [ 442.992569][T12197] __alloc_frozen_pages_noprof+0x123/0x370 [ 442.992595][T12197] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 442.992617][T12191] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.1970'. [ 442.992637][T12197] alloc_pages_bulk_noprof+0x560/0x710 [ 442.992665][T12197] ? alloc_pages_noprof+0xbe/0x190 [ 442.992699][T12197] kasan_populate_vmalloc+0xba/0x1a0 [ 442.992726][T12197] alloc_vmap_area+0xd51/0x1490 [ 442.992777][T12197] ? __pfx_alloc_vmap_area+0x10/0x10 [ 442.992809][T12197] ? __kasan_kmalloc+0x93/0xb0 [ 442.992843][T12197] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 442.992874][T12197] ? __sys_bpf+0x60f/0x870 [ 442.992903][T12197] ? __get_vm_area_node+0x13f/0x300 [ 442.992933][T12197] ? dev_map_alloc+0x1c9/0x540 [ 442.992956][T12197] __get_vm_area_node+0x1f8/0x300 [ 442.992998][T12197] __vmalloc_node_range_noprof+0x301/0x12f0 [ 442.993041][T12197] ? dev_map_alloc+0x1c9/0x540 [ 442.993100][T12197] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 442.993133][T12197] ? rcu_is_watching+0x15/0xb0 [ 442.993157][T12197] ? trace_kmalloc+0x1f/0xd0 [ 442.993185][T12197] ? __kmalloc_node_noprof+0x293/0x4e0 [ 442.993215][T12197] ? bpf_map_area_alloc+0x64/0x180 [ 442.993252][T12197] bpf_map_area_alloc+0x12d/0x180 [ 442.993286][T12197] ? dev_map_alloc+0x1c9/0x540 [ 442.993310][T12197] dev_map_alloc+0x1c9/0x540 [ 442.993337][T12197] map_create+0xaa3/0x14d0 [ 442.993374][T12197] ? security_bpf+0x7e/0x300 [ 442.993409][T12197] __sys_bpf+0x60f/0x870 [ 442.993443][T12197] ? __pfx___sys_bpf+0x10/0x10 [ 442.993492][T12197] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 442.993527][T12197] ? __pfx_ksys_write+0x10/0x10 [ 442.993555][T12197] ? rcu_is_watching+0x15/0xb0 [ 442.993587][T12197] __x64_sys_bpf+0x7c/0x90 [ 442.993617][T12197] do_syscall_64+0xfa/0x3b0 [ 442.993649][T12197] ? lockdep_hardirqs_on+0x9c/0x150 [ 442.993681][T12197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.993703][T12197] ? clear_bhb_loop+0x60/0xb0 [ 442.993732][T12197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.993755][T12197] RIP: 0033:0x7fae0298ebe9 [ 442.993777][T12197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.993796][T12197] RSP: 002b:00007fae03729038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 442.993822][T12197] RAX: ffffffffffffffda RBX: 00007fae02bb5fa0 RCX: 00007fae0298ebe9 [ 442.993839][T12197] RDX: 0000000000000048 RSI: 00002000000009c0 RDI: 0000000000000000 [ 442.993853][T12197] RBP: 00007fae03729090 R08: 0000000000000000 R09: 0000000000000000 [ 442.993868][T12197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 442.993881][T12197] R13: 00007fae02bb6038 R14: 00007fae02bb5fa0 R15: 00007ffe3cb693a8 [ 442.993918][T12197] [ 444.058559][T12212] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1976'. [ 444.314959][T12224] netlink: 'syz.3.1980': attribute type 21 has an invalid length. [ 444.333286][T12224] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1980'. [ 444.398537][T12224] bpf: Bad value for 'mode' [ 444.413141][T12224] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1980'. [ 444.445782][T12233] netlink: 'syz.2.1983': attribute type 21 has an invalid length. [ 445.446500][T12256] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1990'. [ 445.719875][T12254] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 445.746301][ T24] lo speed is unknown, defaulting to 1000 [ 445.763006][T12258] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1991'. [ 446.114338][T12271] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1994'. [ 446.145241][T12271] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1994'. [ 446.236094][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.242536][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.297284][T12271] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1994'. [ 446.413584][T12288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.441483][T12288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.491922][T12288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.514097][T12288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.632414][T12289] netlink: 'syz.4.1997': attribute type 1 has an invalid length. [ 446.650483][T12289] netlink: 'syz.4.1997': attribute type 3 has an invalid length. [ 447.264087][T12292] netlink: 'syz.1.1998': attribute type 11 has an invalid length. [ 448.851173][T12321] __nla_validate_parse: 3 callbacks suppressed [ 448.851198][T12321] netlink: 166 bytes leftover after parsing attributes in process `syz.0.2008'. [ 450.138774][T12338] netlink: 'syz.2.2013': attribute type 29 has an invalid length. [ 450.159731][T12343] netlink: 'syz.2.2013': attribute type 29 has an invalid length. [ 450.447843][T12360] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2022'. [ 450.477533][T12360] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2022'. [ 450.869658][T12367] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.2023'. [ 450.899988][T12367] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.2023'. [ 450.980015][T12369] netlink: 'syz.2.2025': attribute type 1 has an invalid length. [ 450.989411][T12369] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2025'. [ 451.098443][T12360] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2022'. [ 451.122762][T12360] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2022'. [ 451.385916][T12375] netlink: 'syz.4.2026': attribute type 2 has an invalid length. [ 451.398851][T12375] netlink: 'syz.4.2026': attribute type 7 has an invalid length. [ 451.409176][T12375] netlink: 85 bytes leftover after parsing attributes in process `syz.4.2026'. [ 451.419003][T12375] netlink: 130140 bytes leftover after parsing attributes in process `syz.4.2026'. [ 451.556861][T12375] netlink: 'syz.4.2026': attribute type 2 has an invalid length. [ 451.620071][T12375] netlink: 'syz.4.2026': attribute type 7 has an invalid length. [ 454.083637][T12430] vcan0 speed is unknown, defaulting to 1000 [ 454.433393][T12443] netlink: 'syz.0.2051': attribute type 12 has an invalid length. [ 454.449272][T12443] __nla_validate_parse: 2 callbacks suppressed [ 454.449296][T12443] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2051'. [ 455.092064][T12430] lo speed is unknown, defaulting to 1000 [ 455.532594][ T30] audit: type=1107 audit(1755575881.904:2): pid=12460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 455.554163][T12467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2058'. [ 455.620872][T12468] FAULT_INJECTION: forcing a failure. [ 455.620872][T12468] name failslab, interval 1, probability 0, space 0, times 0 [ 455.635013][T12468] CPU: 0 UID: 0 PID: 12468 Comm: syz.4.2059 Not tainted syzkaller #0 PREEMPT(full) [ 455.635044][T12468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 455.635057][T12468] Call Trace: [ 455.635067][T12468] [ 455.635076][T12468] dump_stack_lvl+0x189/0x250 [ 455.635108][T12468] ? lockdep_hardirqs_on+0x9c/0x150 [ 455.635141][T12468] ? __pfx_dump_stack_lvl+0x10/0x10 [ 455.635198][T12468] should_fail_ex+0x414/0x560 [ 455.635235][T12468] should_failslab+0xa8/0x100 [ 455.635268][T12468] __kmalloc_cache_noprof+0x70/0x3d0 [ 455.635298][T12468] ? hash_net_create+0x2fe/0xfe0 [ 455.635336][T12468] hash_net_create+0x2fe/0xfe0 [ 455.635365][T12468] ? __nla_parse+0x24/0x60 [ 455.635405][T12468] ? __nla_parse+0x40/0x60 [ 455.635446][T12468] ? __pfx_hash_net_create+0x10/0x10 [ 455.635486][T12468] ip_set_create+0xa94/0x1940 [ 455.635513][T12468] ? ip_set_create+0x4a2/0x1940 [ 455.635556][T12468] ? __pfx_ip_set_create+0x10/0x10 [ 455.635634][T12468] nfnetlink_rcv_msg+0xb4a/0x1130 [ 455.635664][T12468] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 455.635719][T12468] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 455.635789][T12468] ? netlink_rcv_skb+0xa1/0x470 [ 455.635822][T12468] ? kasan_check_range+0x9f/0x2c0 [ 455.635868][T12468] netlink_rcv_skb+0x205/0x470 [ 455.635917][T12468] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 455.635947][T12468] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 455.635994][T12468] ? bpf_lsm_capable+0x9/0x20 [ 455.636022][T12468] ? security_capable+0x7e/0x2e0 [ 455.636064][T12468] nfnetlink_rcv+0x26a/0x2520 [ 455.636093][T12468] ? trace_call_bpf+0xb7/0x850 [ 455.636116][T12468] ? trace_call_bpf+0xb7/0x850 [ 455.636144][T12468] ? trace_call_bpf+0xb7/0x850 [ 455.636167][T12468] ? trace_call_bpf+0xb7/0x850 [ 455.636185][T12468] ? trace_call_bpf+0x5ba/0x850 [ 455.636204][T12468] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 455.636233][T12468] ? trace_call_bpf+0xb7/0x850 [ 455.636255][T12468] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 455.636282][T12468] ? __pfx_trace_call_bpf+0x10/0x10 [ 455.636306][T12468] ? irqentry_exit+0x74/0x90 [ 455.636334][T12468] ? lockdep_hardirqs_on+0x9c/0x150 [ 455.636369][T12468] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 455.636398][T12468] ? perf_trace_preemptirq_template+0x280/0x340 [ 455.636430][T12468] ? irqentry_enter+0x3d/0x60 [ 455.636460][T12468] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 455.636487][T12468] ? perf_trace_lock+0xec/0x3b0 [ 455.636506][T12468] ? __skb_clone+0x483/0x7a0 [ 455.636534][T12468] ? __pfx_perf_trace_lock+0x10/0x10 [ 455.636562][T12468] ? irqentry_exit+0x74/0x90 [ 455.636589][T12468] ? lockdep_hardirqs_on+0x9c/0x150 [ 455.636625][T12468] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 455.636663][T12468] netlink_unicast+0x82c/0x9e0 [ 455.636704][T12468] ? __pfx_netlink_unicast+0x10/0x10 [ 455.636745][T12468] netlink_sendmsg+0x805/0xb30 [ 455.636789][T12468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.636834][T12468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.636880][T12468] __sock_sendmsg+0x21c/0x270 [ 455.636928][T12468] ____sys_sendmsg+0x505/0x830 [ 455.636959][T12468] ? __pfx_____sys_sendmsg+0x10/0x10 [ 455.636994][T12468] ? import_iovec+0x74/0xa0 [ 455.637025][T12468] ___sys_sendmsg+0x21f/0x2a0 [ 455.637051][T12468] ? __pfx____sys_sendmsg+0x10/0x10 [ 455.637108][T12468] ? __fget_files+0x2a/0x420 [ 455.637147][T12468] ? __fget_files+0x2a/0x420 [ 455.637164][T12468] ? __fget_files+0x3a0/0x420 [ 455.637199][T12468] __x64_sys_sendmsg+0x19b/0x260 [ 455.637219][T12468] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 455.637245][T12468] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 455.637281][T12468] ? __pfx_ksys_write+0x10/0x10 [ 455.637320][T12468] ? do_syscall_64+0xbe/0x3b0 [ 455.637356][T12468] do_syscall_64+0xfa/0x3b0 [ 455.637388][T12468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.637409][T12468] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 455.637429][T12468] ? clear_bhb_loop+0x60/0xb0 [ 455.637456][T12468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.637476][T12468] RIP: 0033:0x7efd0758ebe9 [ 455.637497][T12468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.637515][T12468] RSP: 002b:00007efd0847b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.637537][T12468] RAX: ffffffffffffffda RBX: 00007efd077b5fa0 RCX: 00007efd0758ebe9 [ 455.637553][T12468] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 455.637566][T12468] RBP: 00007efd0847b090 R08: 0000000000000000 R09: 0000000000000000 [ 455.637579][T12468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.637590][T12468] R13: 00007efd077b6038 R14: 00007efd077b5fa0 R15: 00007fffc716ba98 [ 455.637627][T12468] [ 456.462554][T12476] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2060'. [ 456.518224][T12481] netlink: 212940 bytes leftover after parsing attributes in process `syz.4.2063'. [ 456.535043][T12476] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2060'. [ 456.855654][T12476] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2060'. [ 456.870941][T12476] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2060'. [ 457.776334][T12521] netlink: 'syz.0.2072': attribute type 2 has an invalid length. [ 457.972134][T12508] netlink: 'syz.2.2069': attribute type 1 has an invalid length. [ 458.034686][T12513] vcan0 speed is unknown, defaulting to 1000 [ 458.256098][T12534] sock: sock_timestamping_bind_phc: sock not bind to device [ 458.600136][T12545] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2079'. [ 458.838199][T12542] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2077'. [ 458.849699][T12542] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2077'. [ 458.918666][T12513] lo speed is unknown, defaulting to 1000 [ 459.532952][T12566] syzkaller0: entered promiscuous mode [ 459.596297][T12566] syzkaller0: entered allmulticast mode [ 459.701598][T12571] __nla_validate_parse: 3 callbacks suppressed [ 459.701622][T12571] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2082'. [ 459.729432][T12573] netlink: 'syz.3.2084': attribute type 2 has an invalid length. [ 459.789880][T12573] netlink: 'syz.3.2084': attribute type 1 has an invalid length. [ 459.995796][T12558] netlink: 'syz.0.2082': attribute type 11 has an invalid length. [ 460.632201][T12580] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2085'. [ 460.641925][T12580] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2085'. [ 460.806855][T12580] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2085'. [ 460.845062][T12580] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2085'. [ 462.431194][T12621] netlink: 'syz.3.2096': attribute type 22 has an invalid length. [ 462.458348][T12621] netlink: 14380 bytes leftover after parsing attributes in process `syz.3.2096'. [ 462.676399][ T51] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 462.991251][T12639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2102'. [ 463.293257][T12636] veth1_to_bond: entered allmulticast mode [ 463.549964][T12646] netlink: 'syz.1.2104': attribute type 21 has an invalid length. [ 463.576965][T12646] IPv6: NLM_F_CREATE should be specified when creating new route [ 463.592188][T12646] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 463.599627][T12646] IPv6: NLM_F_CREATE should be set when creating new route [ 463.607149][T12646] IPv6: NLM_F_CREATE should be set when creating new route [ 463.614505][T12646] IPv6: NLM_F_CREATE should be set when creating new route [ 463.793698][T12661] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2107'. [ 463.901816][T12667] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.2111'. [ 464.145135][T12679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2116'. [ 464.227988][T12681] netlink: 'syz.0.2117': attribute type 1 has an invalid length. [ 464.698276][T12691] lo speed is unknown, defaulting to 1000 [ 464.729827][T12691] __nla_validate_parse: 2 callbacks suppressed [ 464.729857][T12691] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2121'. [ 464.794413][T12699] netlink: 'syz.4.2123': attribute type 1 has an invalid length. [ 464.806917][T12699] netlink: 16227 bytes leftover after parsing attributes in process `syz.4.2123'. [ 465.061274][T12712] FAULT_INJECTION: forcing a failure. [ 465.061274][T12712] name failslab, interval 1, probability 0, space 0, times 0 [ 465.095942][T12712] CPU: 0 UID: 0 PID: 12712 Comm: syz.3.2128 Not tainted syzkaller #0 PREEMPT(full) [ 465.095971][T12712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 465.095983][T12712] Call Trace: [ 465.095992][T12712] [ 465.096002][T12712] dump_stack_lvl+0x189/0x250 [ 465.096031][T12712] ? __pfx____ratelimit+0x10/0x10 [ 465.096073][T12712] ? __pfx_dump_stack_lvl+0x10/0x10 [ 465.096098][T12712] ? __pfx__printk+0x10/0x10 [ 465.096136][T12712] ? __pfx___might_resched+0x10/0x10 [ 465.096164][T12712] should_fail_ex+0x414/0x560 [ 465.096198][T12712] should_failslab+0xa8/0x100 [ 465.096231][T12712] __kmalloc_cache_noprof+0x70/0x3d0 [ 465.096259][T12712] ? nf_tables_newtable+0x435/0x1890 [ 465.096287][T12712] nf_tables_newtable+0x435/0x1890 [ 465.096306][T12712] ? nfnetlink_subsys_unregister+0x192/0x1b0 [ 465.096360][T12712] nfnetlink_rcv+0x1132/0x2520 [ 465.096431][T12712] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 465.096477][T12712] ? ref_tracker_free+0x63a/0x7d0 [ 465.096543][T12712] ? __netlink_deliver_tap+0x807/0x850 [ 465.096579][T12712] ? netlink_deliver_tap+0x2e/0x1b0 [ 465.096631][T12712] netlink_unicast+0x82c/0x9e0 [ 465.096670][T12712] ? __pfx_netlink_unicast+0x10/0x10 [ 465.096700][T12712] ? netlink_sendmsg+0x642/0xb30 [ 465.096726][T12712] ? skb_put+0x11b/0x210 [ 465.096764][T12712] netlink_sendmsg+0x805/0xb30 [ 465.096806][T12712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.096840][T12712] ? aa_sock_msg_perm+0xf1/0x1d0 [ 465.096875][T12712] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 465.096898][T12712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.096929][T12712] __sock_sendmsg+0x21c/0x270 [ 465.096961][T12712] ____sys_sendmsg+0x505/0x830 [ 465.096990][T12712] ? __pfx_____sys_sendmsg+0x10/0x10 [ 465.097025][T12712] ? import_iovec+0x74/0xa0 [ 465.097053][T12712] ___sys_sendmsg+0x21f/0x2a0 [ 465.097089][T12712] ? __pfx____sys_sendmsg+0x10/0x10 [ 465.097141][T12712] ? __fget_files+0x2a/0x420 [ 465.097178][T12712] ? __fget_files+0x2a/0x420 [ 465.097194][T12712] ? __fget_files+0x3a0/0x420 [ 465.097225][T12712] __x64_sys_sendmsg+0x19b/0x260 [ 465.097250][T12712] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 465.097286][T12712] ? __pfx_ksys_write+0x10/0x10 [ 465.097311][T12712] ? rcu_is_watching+0x15/0xb0 [ 465.097340][T12712] ? do_syscall_64+0xbe/0x3b0 [ 465.097376][T12712] do_syscall_64+0xfa/0x3b0 [ 465.097404][T12712] ? lockdep_hardirqs_on+0x9c/0x150 [ 465.097432][T12712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.097451][T12712] ? clear_bhb_loop+0x60/0xb0 [ 465.097477][T12712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.097497][T12712] RIP: 0033:0x7f34b6b8ebe9 [ 465.097516][T12712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.097533][T12712] RSP: 002b:00007f34b7a3c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.097555][T12712] RAX: ffffffffffffffda RBX: 00007f34b6db5fa0 RCX: 00007f34b6b8ebe9 [ 465.097569][T12712] RDX: 0000000000000080 RSI: 0000200000000c40 RDI: 0000000000000004 [ 465.097582][T12712] RBP: 00007f34b7a3c090 R08: 0000000000000000 R09: 0000000000000000 [ 465.097593][T12712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.097604][T12712] R13: 00007f34b6db6038 R14: 00007f34b6db5fa0 R15: 00007ffdc03659c8 [ 465.097641][T12712] [ 465.866359][T12740] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2136'. [ 465.918988][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2135'. [ 466.753072][T12748] netlink: 'syz.2.2138': attribute type 21 has an invalid length. [ 466.789393][T12748] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2138'. [ 466.813205][T12755] netlink: 'syz.3.2140': attribute type 1 has an invalid length. [ 466.832134][T12755] netlink: 16227 bytes leftover after parsing attributes in process `syz.3.2140'. [ 466.837705][T12748] netlink: 'syz.2.2138': attribute type 5 has an invalid length. [ 466.880479][T12748] netlink: 'syz.2.2138': attribute type 6 has an invalid length. [ 466.900758][T12748] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2138'. [ 467.436247][T12781] netlink: 'syz.1.2149': attribute type 39 has an invalid length. [ 467.905150][ T1115] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.621634][T12805] netlink: 'syz.4.2155': attribute type 1 has an invalid length. [ 468.635354][T12806] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2154'. [ 468.646516][T12805] netlink: 16227 bytes leftover after parsing attributes in process `syz.4.2155'. [ 469.411007][T12836] FAULT_INJECTION: forcing a failure. [ 469.411007][T12836] name failslab, interval 1, probability 0, space 0, times 0 [ 469.483469][T12830] netlink: 'syz.4.2162': attribute type 3 has an invalid length. [ 469.495263][T12836] CPU: 0 UID: 0 PID: 12836 Comm: syz.2.2163 Not tainted syzkaller #0 PREEMPT(full) [ 469.495293][T12836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 469.495306][T12836] Call Trace: [ 469.495315][T12836] [ 469.495324][T12836] dump_stack_lvl+0x189/0x250 [ 469.495356][T12836] ? __pfx____ratelimit+0x10/0x10 [ 469.495389][T12836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.495414][T12836] ? __pfx__printk+0x10/0x10 [ 469.495448][T12836] ? __pfx___might_resched+0x10/0x10 [ 469.495469][T12836] ? fs_reclaim_acquire+0x7d/0x100 [ 469.495509][T12836] should_fail_ex+0x414/0x560 [ 469.495544][T12836] should_failslab+0xa8/0x100 [ 469.495577][T12836] __kmalloc_noprof+0xcb/0x4f0 [ 469.495604][T12836] ? tomoyo_encode+0x28b/0x550 [ 469.495631][T12836] tomoyo_encode+0x28b/0x550 [ 469.495661][T12836] tomoyo_realpath_from_path+0x58d/0x5d0 [ 469.495685][T12836] ? tomoyo_domain+0xd9/0x130 [ 469.495715][T12836] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 469.495745][T12836] tomoyo_path_number_perm+0x1e8/0x5a0 [ 469.495785][T12836] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 469.495815][T12836] ? ksys_write+0x1cb/0x250 [ 469.495896][T12836] ? __fget_files+0x2a/0x420 [ 469.495920][T12836] ? __fget_files+0x2a/0x420 [ 469.495937][T12836] ? __fget_files+0x3a0/0x420 [ 469.495954][T12836] ? __fget_files+0x2a/0x420 [ 469.495978][T12836] security_file_ioctl+0xcb/0x2d0 [ 469.496008][T12836] __se_sys_ioctl+0x47/0x170 [ 469.496039][T12836] do_syscall_64+0xfa/0x3b0 [ 469.496067][T12836] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.496095][T12836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.496116][T12836] ? clear_bhb_loop+0x60/0xb0 [ 469.496144][T12836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.496164][T12836] RIP: 0033:0x7f4d0418ebe9 [ 469.496182][T12836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.496201][T12836] RSP: 002b:00007f4d04fa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 469.496223][T12836] RAX: ffffffffffffffda RBX: 00007f4d043b5fa0 RCX: 00007f4d0418ebe9 [ 469.496238][T12836] RDX: 0000200000000000 RSI: 0000000000008b0f RDI: 0000000000000003 [ 469.496251][T12836] RBP: 00007f4d04fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 469.496264][T12836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.496276][T12836] R13: 00007f4d043b6038 R14: 00007f4d043b5fa0 R15: 00007ffcea4b4038 [ 469.496315][T12836] [ 469.496531][T12836] ERROR: Out of memory at tomoyo_realpath_from_path. [ 470.623836][T12854] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2169'. [ 470.705241][T12864] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2173'. [ 470.919837][T12867] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2172'. [ 470.952768][T12867] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2172'. [ 471.167146][T12877] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2176'. [ 471.178872][T12877] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2176'. [ 471.207774][T12877] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2176'. [ 471.383092][T12867] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2172'. [ 471.395682][T12867] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2172'. [ 472.559797][T12915] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2185'. [ 473.211101][T12941] FAULT_INJECTION: forcing a failure. [ 473.211101][T12941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.225271][T12941] CPU: 0 UID: 0 PID: 12941 Comm: syz.4.2192 Not tainted syzkaller #0 PREEMPT(full) [ 473.225301][T12941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 473.225314][T12941] Call Trace: [ 473.225323][T12941] [ 473.225333][T12941] dump_stack_lvl+0x189/0x250 [ 473.225366][T12941] ? __pfx____ratelimit+0x10/0x10 [ 473.225396][T12941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 473.225421][T12941] ? __pfx__printk+0x10/0x10 [ 473.225451][T12941] ? __might_fault+0xb0/0x130 [ 473.225494][T12941] should_fail_ex+0x414/0x560 [ 473.225529][T12941] _copy_from_user+0x2d/0xb0 [ 473.225554][T12941] ___sys_sendmsg+0x158/0x2a0 [ 473.225580][T12941] ? __pfx____sys_sendmsg+0x10/0x10 [ 473.225643][T12941] ? __fget_files+0x2a/0x420 [ 473.225660][T12941] ? __fget_files+0x3a0/0x420 [ 473.225692][T12941] __x64_sys_sendmsg+0x19b/0x260 [ 473.225716][T12941] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 473.225757][T12941] ? __pfx_ksys_write+0x10/0x10 [ 473.225783][T12941] ? rcu_is_watching+0x15/0xb0 [ 473.225810][T12941] ? do_syscall_64+0xbe/0x3b0 [ 473.225845][T12941] do_syscall_64+0xfa/0x3b0 [ 473.225873][T12941] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.225902][T12941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.225923][T12941] ? clear_bhb_loop+0x60/0xb0 [ 473.225948][T12941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.225969][T12941] RIP: 0033:0x7efd0758ebe9 [ 473.225989][T12941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.226007][T12941] RSP: 002b:00007efd0847b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.226029][T12941] RAX: ffffffffffffffda RBX: 00007efd077b5fa0 RCX: 00007efd0758ebe9 [ 473.226044][T12941] RDX: 0000000000040040 RSI: 00002000000003c0 RDI: 0000000000000003 [ 473.226057][T12941] RBP: 00007efd0847b090 R08: 0000000000000000 R09: 0000000000000000 [ 473.226069][T12941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.226081][T12941] R13: 00007efd077b6038 R14: 00007efd077b5fa0 R15: 00007fffc716ba98 [ 473.226115][T12941] [ 473.451953][T12946] netlink: 'syz.4.2192': attribute type 12 has an invalid length. [ 474.386347][T12961] bridge0: port 4(veth1_to_team) entered blocking state [ 474.561701][T12961] bridge0: port 4(veth1_to_team) entered disabled state [ 474.581685][T12961] veth1_to_team: entered allmulticast mode [ 474.615506][T12961] veth1_to_team: entered promiscuous mode [ 474.947244][T12989] netlink: 'syz.4.2204': attribute type 10 has an invalid length. [ 475.973462][T13013] __nla_validate_parse: 11 callbacks suppressed [ 475.973489][T13013] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2212'. [ 476.231875][ T51] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 476.260985][T13024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2214'. [ 476.300203][T13024] veth1_to_bond: entered allmulticast mode [ 476.336175][ T51] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 476.361520][T13029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2216'. [ 476.826161][T13049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2220'. [ 477.385048][T13062] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2225'. [ 477.695647][T13052] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2221'. [ 477.947699][T13073] netlink: 'syz.2.2221': attribute type 11 has an invalid length. [ 478.315311][ T51] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 478.378328][T13078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2228'. [ 478.482033][T13078] veth1_to_bond: entered allmulticast mode [ 478.994155][ T51] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 479.281626][T13105] openvswitch: netlink: Key type 190 is out of range max 32 [ 479.318799][T13105] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2236'. [ 479.437634][T13105] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2236'. [ 479.594694][T13110] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2238'. [ 480.222409][T13134] rdma_rxe: rxe_newlink: failed to add vcan0 [ 480.311716][T13134] netlink: 'syz.3.2246': attribute type 10 has an invalid length. [ 480.322646][T13134] bridge0: port 3(veth1_to_team) entered disabled state [ 480.329954][T13134] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.337505][T13134] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.401707][T13134] bridge0: port 3(veth1_to_team) entered blocking state [ 480.409011][T13134] bridge0: port 3(veth1_to_team) entered forwarding state [ 480.416549][T13134] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.423876][T13134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.431472][T13134] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.438780][T13134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.477782][T13134] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 480.912339][T13147] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 480.980471][T13155] __nla_validate_parse: 2 callbacks suppressed [ 480.980502][T13155] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2250'. [ 481.231599][T13156] netlink: zone id is out of range [ 481.264556][T13156] netlink: zone id is out of range [ 481.415092][T13156] netlink: zone id is out of range [ 481.486493][T13156] netlink: zone id is out of range [ 481.512710][T13156] netlink: zone id is out of range [ 481.624519][T13156] netlink: zone id is out of range [ 481.642857][T13156] netlink: zone id is out of range [ 481.741729][T13162] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.2252'. [ 481.856103][T13156] netlink: zone id is out of range [ 482.235300][T13177] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2258'. [ 482.284621][T13177] netlink: 'syz.0.2258': attribute type 11 has an invalid length. [ 483.147610][T13204] netlink: 'syz.1.2262': attribute type 1 has an invalid length. [ 483.336427][T13208] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2265'. [ 483.714820][T13214] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.2266'. [ 484.155960][ T51] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 484.200586][T13224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2270'. [ 484.795895][T13245] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.2278'. [ 485.453138][T13253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2281'. [ 485.537523][T13257] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2281'. [ 485.743521][T13260] FAULT_INJECTION: forcing a failure. [ 485.743521][T13260] name failslab, interval 1, probability 0, space 0, times 0 [ 485.787164][T13260] CPU: 0 UID: 0 PID: 13260 Comm: syz.3.2283 Not tainted syzkaller #0 PREEMPT(full) [ 485.787195][T13260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 485.787208][T13260] Call Trace: [ 485.787221][T13260] [ 485.787234][T13260] dump_stack_lvl+0x189/0x250 [ 485.787275][T13260] ? __pfx____ratelimit+0x10/0x10 [ 485.787316][T13260] ? __pfx_dump_stack_lvl+0x10/0x10 [ 485.787353][T13260] ? __pfx__printk+0x10/0x10 [ 485.787439][T13260] ? __pfx___might_resched+0x10/0x10 [ 485.787496][T13260] should_fail_ex+0x414/0x560 [ 485.787564][T13260] should_failslab+0xa8/0x100 [ 485.787612][T13260] kmem_cache_alloc_noprof+0x73/0x3c0 [ 485.787645][T13260] ? skb_clone+0x212/0x3a0 [ 485.787701][T13260] skb_clone+0x212/0x3a0 [ 485.787723][T13260] ? pfkey_broadcast_one+0x7d/0x360 [ 485.787780][T13260] pfkey_broadcast_one+0x9b/0x360 [ 485.787815][T13260] ? pfkey_broadcast+0x39c/0x3e0 [ 485.787869][T13260] pfkey_broadcast+0x3a9/0x3e0 [ 485.787907][T13260] ? pfkey_broadcast+0x48/0x3e0 [ 485.787960][T13260] pfkey_sendmsg+0xdd8/0x1090 [ 485.788089][T13260] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 485.788119][T13260] ? trace_call_bpf+0x5ba/0x850 [ 485.788280][T13260] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 485.788306][T13260] ? aa_sock_msg_perm+0xf1/0x1d0 [ 485.788358][T13260] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 485.788394][T13260] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 485.788442][T13260] __sock_sendmsg+0x21c/0x270 [ 485.788502][T13260] ____sys_sendmsg+0x505/0x830 [ 485.788569][T13260] ? __pfx_____sys_sendmsg+0x10/0x10 [ 485.788657][T13260] ? import_iovec+0x74/0xa0 [ 485.788716][T13260] ___sys_sendmsg+0x21f/0x2a0 [ 485.788764][T13260] ? __pfx____sys_sendmsg+0x10/0x10 [ 485.788939][T13260] ? __fget_files+0x2a/0x420 [ 485.789042][T13260] ? __fget_files+0x2a/0x420 [ 485.789063][T13260] ? __fget_files+0x3a0/0x420 [ 485.789154][T13260] __x64_sys_sendmsg+0x19b/0x260 [ 485.789175][T13260] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 485.789218][T13260] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 485.789308][T13260] ? __pfx_ksys_write+0x10/0x10 [ 485.789334][T13260] ? rcu_is_watching+0x15/0xb0 [ 485.789402][T13260] ? do_syscall_64+0xbe/0x3b0 [ 485.789463][T13260] do_syscall_64+0xfa/0x3b0 [ 485.789493][T13260] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.789528][T13260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.789553][T13260] ? clear_bhb_loop+0x60/0xb0 [ 485.789601][T13260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.789625][T13260] RIP: 0033:0x7f34b6b8ebe9 [ 485.789652][T13260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.789670][T13260] RSP: 002b:00007f34b7a3c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.789691][T13260] RAX: ffffffffffffffda RBX: 00007f34b6db5fa0 RCX: 00007f34b6b8ebe9 [ 485.789706][T13260] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 485.789719][T13260] RBP: 00007f34b7a3c090 R08: 0000000000000000 R09: 0000000000000000 [ 485.789731][T13260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.789743][T13260] R13: 00007f34b6db6038 R14: 00007f34b6db5fa0 R15: 00007ffdc03659c8 [ 485.789855][T13260] [ 486.626546][T13278] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.2289'. [ 486.660453][ T51] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 486.714842][ T51] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 486.745557][T13276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2288'. [ 486.752609][T13282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2290'. [ 486.777384][T13282] veth1_to_bond: entered allmulticast mode [ 486.811005][T13284] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2291'. [ 487.648263][T13308] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2300'. [ 488.090960][T13316] netlink: 67 bytes leftover after parsing attributes in process `syz.2.2303'. [ 488.354069][T13318] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2305'. [ 488.587738][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2311'. [ 488.619342][T13333] lo speed is unknown, defaulting to 1000 [ 489.561719][T13368] netlink: 'syz.2.2320': attribute type 25 has an invalid length. [ 489.601224][T13368] netlink: 'syz.2.2320': attribute type 1 has an invalid length. [ 489.628440][T13368] bridge0: port 1(bridge_slave_0) entered learning state [ 489.678256][T13368] netlink: 'syz.2.2320': attribute type 10 has an invalid length. [ 490.008922][T13378] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2322'. [ 490.028926][T13380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2324'. [ 490.040726][T13380] lo speed is unknown, defaulting to 1000 [ 490.322947][T13386] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 490.794057][T13404] ªªªªªª: renamed from wg2 (while UP) [ 491.407195][T13422] lo speed is unknown, defaulting to 1000 [ 492.454328][T13438] __nla_validate_parse: 4 callbacks suppressed [ 492.454353][T13438] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2339'. [ 493.879960][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2348'. [ 493.929843][T13459] lo speed is unknown, defaulting to 1000 [ 494.434765][T13463] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.2350'. [ 495.415532][T13487] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2357'. [ 495.518834][T13493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2360'. [ 495.555519][T13493] lo speed is unknown, defaulting to 1000 [ 495.713564][T13496] delete_channel: no stack [ 495.739739][T13500] netlink: 'syz.3.2362': attribute type 8 has an invalid length. [ 495.801893][T13506] netlink: 'syz.3.2362': attribute type 2 has an invalid length. [ 496.706810][T13522] FAULT_INJECTION: forcing a failure. [ 496.706810][T13522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.736553][T13522] CPU: 0 UID: 0 PID: 13522 Comm: syz.1.2369 Not tainted syzkaller #0 PREEMPT(full) [ 496.736586][T13522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 496.736599][T13522] Call Trace: [ 496.736607][T13522] [ 496.736616][T13522] dump_stack_lvl+0x189/0x250 [ 496.736646][T13522] ? __pfx____ratelimit+0x10/0x10 [ 496.736675][T13522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.736699][T13522] ? __pfx__printk+0x10/0x10 [ 496.736728][T13522] ? __might_fault+0xb0/0x130 [ 496.736783][T13522] should_fail_ex+0x414/0x560 [ 496.736817][T13522] _copy_from_user+0x2d/0xb0 [ 496.736841][T13522] ___sys_sendmsg+0x158/0x2a0 [ 496.736865][T13522] ? __pfx____sys_sendmsg+0x10/0x10 [ 496.736920][T13522] ? __fget_files+0x2a/0x420 [ 496.736935][T13522] ? __fget_files+0x3a0/0x420 [ 496.736958][T13522] __x64_sys_sendmsg+0x19b/0x260 [ 496.736981][T13522] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 496.737009][T13522] ? __pfx_ksys_write+0x10/0x10 [ 496.737030][T13522] ? rcu_is_watching+0x15/0xb0 [ 496.737051][T13522] ? do_syscall_64+0xbe/0x3b0 [ 496.737079][T13522] do_syscall_64+0xfa/0x3b0 [ 496.737102][T13522] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.737124][T13522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.737140][T13522] ? clear_bhb_loop+0x60/0xb0 [ 496.737161][T13522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.737177][T13522] RIP: 0033:0x7f86ccd8ebe9 [ 496.737192][T13522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.737207][T13522] RSP: 002b:00007f86cdc24038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.737224][T13522] RAX: ffffffffffffffda RBX: 00007f86ccfb5fa0 RCX: 00007f86ccd8ebe9 [ 496.737237][T13522] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 496.737247][T13522] RBP: 00007f86cdc24090 R08: 0000000000000000 R09: 0000000000000000 [ 496.737257][T13522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.737266][T13522] R13: 00007f86ccfb6038 R14: 00007f86ccfb5fa0 R15: 00007fffa46a3a98 [ 496.737322][T13522] [ 497.101075][T13525] netlink: 'syz.0.2370': attribute type 2 has an invalid length. [ 497.203691][T13525] netlink: 137592 bytes leftover after parsing attributes in process `syz.0.2370'. [ 497.386933][T13529] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2371'. [ 497.543237][T13536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2373'. [ 497.553007][T13536] lo speed is unknown, defaulting to 1000 [ 497.607843][T13540] netlink: 22 bytes leftover after parsing attributes in process `syz.3.2375'. [ 497.662456][T13543] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2376'. [ 499.279695][T13583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2387'. [ 499.296810][T13583] lo speed is unknown, defaulting to 1000 [ 499.314179][T13578] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2385'. [ 499.434895][T13586] netlink: 'syz.2.2388': attribute type 20 has an invalid length. [ 499.492419][T13586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2388'. [ 499.520494][T13588] À: port 1(vlan0) entered blocking state [ 499.526433][T13588] À: port 1(vlan0) entered disabled state [ 499.553984][T13588] vlan0: entered allmulticast mode [ 499.563807][T13592] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2389'. [ 499.575062][T13590] netlink: 'syz.2.2388': attribute type 21 has an invalid length. [ 499.582941][T13588] veth0_vlan: entered allmulticast mode [ 499.603307][T13588] vlan0: entered promiscuous mode [ 499.632190][T13590] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2388'. [ 499.673109][T13593] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2390'. [ 499.872393][T13597] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2391'. [ 500.268960][T13618] netlink: 'syz.1.2395': attribute type 4 has an invalid length. [ 501.603442][T13651] netlink: 'syz.0.2406': attribute type 39 has an invalid length. [ 502.389684][T13685] FAULT_INJECTION: forcing a failure. [ 502.389684][T13685] name failslab, interval 1, probability 0, space 0, times 0 [ 502.483697][T13685] CPU: 1 UID: 0 PID: 13685 Comm: syz.4.2417 Not tainted syzkaller #0 PREEMPT(full) [ 502.483729][T13685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 502.483742][T13685] Call Trace: [ 502.483750][T13685] [ 502.483759][T13685] dump_stack_lvl+0x189/0x250 [ 502.483789][T13685] ? __pfx____ratelimit+0x10/0x10 [ 502.483819][T13685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 502.483844][T13685] ? __pfx__printk+0x10/0x10 [ 502.483876][T13685] ? __lock_acquire+0xab9/0xd20 [ 502.483917][T13685] should_fail_ex+0x414/0x560 [ 502.483950][T13685] should_failslab+0xa8/0x100 [ 502.483983][T13685] kmem_cache_alloc_noprof+0x73/0x3c0 [ 502.484011][T13685] ? skb_clone+0x212/0x3a0 [ 502.484039][T13685] skb_clone+0x212/0x3a0 [ 502.484066][T13685] __netlink_deliver_tap+0x404/0x850 [ 502.484110][T13685] ? netlink_deliver_tap+0x2e/0x1b0 [ 502.484142][T13685] netlink_deliver_tap+0x19c/0x1b0 [ 502.484173][T13685] netlink_unicast+0x7fa/0x9e0 [ 502.484222][T13685] ? __pfx_netlink_unicast+0x10/0x10 [ 502.484252][T13685] ? netlink_sendmsg+0x642/0xb30 [ 502.484281][T13685] ? skb_put+0x11b/0x210 [ 502.484316][T13685] netlink_sendmsg+0x805/0xb30 [ 502.484358][T13685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.484392][T13685] ? aa_sock_msg_perm+0xf1/0x1d0 [ 502.484428][T13685] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 502.484452][T13685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.484483][T13685] __sock_sendmsg+0x21c/0x270 [ 502.484514][T13685] ____sys_sendmsg+0x505/0x830 [ 502.484542][T13685] ? __pfx_____sys_sendmsg+0x10/0x10 [ 502.484574][T13685] ? import_iovec+0x74/0xa0 [ 502.484603][T13685] ___sys_sendmsg+0x21f/0x2a0 [ 502.484627][T13685] ? __pfx____sys_sendmsg+0x10/0x10 [ 502.484689][T13685] ? __fget_files+0x2a/0x420 [ 502.484708][T13685] ? __fget_files+0x3a0/0x420 [ 502.484739][T13685] __x64_sys_sendmsg+0x19b/0x260 [ 502.484764][T13685] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 502.484797][T13685] ? __pfx_ksys_write+0x10/0x10 [ 502.484822][T13685] ? rcu_is_watching+0x15/0xb0 [ 502.484850][T13685] ? do_syscall_64+0xbe/0x3b0 [ 502.484885][T13685] do_syscall_64+0xfa/0x3b0 [ 502.484913][T13685] ? lockdep_hardirqs_on+0x9c/0x150 [ 502.484941][T13685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.484962][T13685] ? clear_bhb_loop+0x60/0xb0 [ 502.484985][T13685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.485006][T13685] RIP: 0033:0x7efd0758ebe9 [ 502.485025][T13685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.485043][T13685] RSP: 002b:00007efd0847b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 502.485066][T13685] RAX: ffffffffffffffda RBX: 00007efd077b5fa0 RCX: 00007efd0758ebe9 [ 502.485080][T13685] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 502.485094][T13685] RBP: 00007efd0847b090 R08: 0000000000000000 R09: 0000000000000000 [ 502.485106][T13685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.485118][T13685] R13: 00007efd077b6038 R14: 00007efd077b5fa0 R15: 00007fffc716ba98 [ 502.485151][T13685] [ 503.178011][T13693] netlink: 'syz.3.2421': attribute type 7 has an invalid length. [ 503.185846][T13693] netlink: 'syz.3.2421': attribute type 6 has an invalid length. [ 503.588410][T13704] FAULT_INJECTION: forcing a failure. [ 503.588410][T13704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.670090][T13704] CPU: 1 UID: 0 PID: 13704 Comm: syz.4.2425 Not tainted syzkaller #0 PREEMPT(full) [ 503.670122][T13704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 503.670135][T13704] Call Trace: [ 503.670149][T13704] [ 503.670162][T13704] dump_stack_lvl+0x189/0x250 [ 503.670203][T13704] ? __pfx____ratelimit+0x10/0x10 [ 503.670244][T13704] ? __pfx_dump_stack_lvl+0x10/0x10 [ 503.670281][T13704] ? __pfx__printk+0x10/0x10 [ 503.670349][T13704] ? __might_fault+0xb0/0x130 [ 503.670420][T13704] should_fail_ex+0x414/0x560 [ 503.670493][T13704] _copy_to_user+0x31/0xb0 [ 503.670539][T13704] simple_read_from_buffer+0xe1/0x170 [ 503.670609][T13704] proc_fail_nth_read+0x1b3/0x220 [ 503.670661][T13704] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 503.670714][T13704] ? rw_verify_area+0x2a6/0x4d0 [ 503.670748][T13704] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 503.670792][T13704] vfs_read+0x200/0xa30 [ 503.670834][T13704] ? fdget_pos+0x247/0x320 [ 503.670882][T13704] ? __pfx___mutex_lock+0x10/0x10 [ 503.670925][T13704] ? __pfx_vfs_read+0x10/0x10 [ 503.670975][T13704] ? __fget_files+0x2a/0x420 [ 503.671028][T13704] ? __fget_files+0x3a0/0x420 [ 503.671050][T13704] ? __fget_files+0x2a/0x420 [ 503.671127][T13704] ksys_read+0x145/0x250 [ 503.671180][T13704] ? __pfx_ksys_read+0x10/0x10 [ 503.671250][T13704] ? do_syscall_64+0xbe/0x3b0 [ 503.671309][T13704] do_syscall_64+0xfa/0x3b0 [ 503.671340][T13704] ? lockdep_hardirqs_on+0x9c/0x150 [ 503.671375][T13704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.671400][T13704] ? clear_bhb_loop+0x60/0xb0 [ 503.671449][T13704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.671471][T13704] RIP: 0033:0x7efd0758d5fc [ 503.671499][T13704] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 503.671517][T13704] RSP: 002b:00007efd0847b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 503.671538][T13704] RAX: ffffffffffffffda RBX: 00007efd077b5fa0 RCX: 00007efd0758d5fc [ 503.671554][T13704] RDX: 000000000000000f RSI: 00007efd0847b0a0 RDI: 0000000000000004 [ 503.671566][T13704] RBP: 00007efd0847b090 R08: 0000000000000000 R09: 0000000000000000 [ 503.671578][T13704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.671590][T13704] R13: 00007efd077b6038 R14: 00007efd077b5fa0 R15: 00007fffc716ba98 [ 503.671698][T13704] [ 504.223078][T13706] tap0: tun_chr_ioctl cmd 1074025677 [ 504.264936][T13706] tap0: linktype set to 780 [ 505.144700][T13723] __nla_validate_parse: 11 callbacks suppressed [ 505.144725][T13723] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2431'. [ 505.220124][T13727] FAULT_INJECTION: forcing a failure. [ 505.220124][T13727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.241157][T13727] CPU: 1 UID: 0 PID: 13727 Comm: syz.2.2432 Not tainted syzkaller #0 PREEMPT(full) [ 505.241186][T13727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 505.241201][T13727] Call Trace: [ 505.241213][T13727] [ 505.241227][T13727] dump_stack_lvl+0x189/0x250 [ 505.241291][T13727] ? __pfx_dump_stack_lvl+0x10/0x10 [ 505.241330][T13727] ? __pfx__printk+0x10/0x10 [ 505.241407][T13727] ? kasan_check_range+0x9f/0x2c0 [ 505.241494][T13727] should_fail_ex+0x414/0x560 [ 505.241566][T13727] _copy_from_user+0x2d/0xb0 [ 505.241607][T13727] ___sys_recvmsg+0x12e/0x510 [ 505.241681][T13727] ? __pfx____sys_recvmsg+0x10/0x10 [ 505.241880][T13727] ? __fget_files+0x3a0/0x420 [ 505.241980][T13727] __x64_sys_recvmsg+0x198/0x260 [ 505.242034][T13727] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 505.242129][T13727] ? __pfx_ksys_write+0x10/0x10 [ 505.242155][T13727] ? rcu_is_watching+0x15/0xb0 [ 505.242221][T13727] ? do_syscall_64+0xbe/0x3b0 [ 505.242286][T13727] do_syscall_64+0xfa/0x3b0 [ 505.242317][T13727] ? lockdep_hardirqs_on+0x9c/0x150 [ 505.242354][T13727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.242380][T13727] ? clear_bhb_loop+0x60/0xb0 [ 505.242432][T13727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.242454][T13727] RIP: 0033:0x7f4d0418ebe9 [ 505.242481][T13727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.242501][T13727] RSP: 002b:00007f4d04fa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 505.242521][T13727] RAX: ffffffffffffffda RBX: 00007f4d043b5fa0 RCX: 00007f4d0418ebe9 [ 505.242537][T13727] RDX: 0000000000002122 RSI: 0000200000000440 RDI: 0000000000000004 [ 505.242550][T13727] RBP: 00007f4d04fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 505.242562][T13727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.242574][T13727] R13: 00007f4d043b6038 R14: 00007f4d043b5fa0 R15: 00007ffcea4b4038 [ 505.242693][T13727] [ 505.867142][ T51] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 506.085102][T13735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2435'. [ 506.285420][T13741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2437'. [ 506.342016][T13741] lo speed is unknown, defaulting to 1000 [ 507.650629][T13761] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2444'. [ 507.707472][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.714221][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.955683][T13758] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 508.291032][T13772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2449'. [ 508.327567][T13772] lo speed is unknown, defaulting to 1000 [ 509.228404][T13802] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2456'. [ 510.217700][T13823] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2458'. [ 510.353440][T13829] netlink: 'syz.4.2465': attribute type 10 has an invalid length. [ 510.386913][T13829] syz_tun: entered promiscuous mode [ 510.421692][T13829] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 510.500153][T13829] macvtap0: refused to change device tx_queue_len [ 510.575742][T13836] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2468'. [ 510.871034][T13845] net_ratelimit: 1 callbacks suppressed [ 510.871058][T13845] netdevsim0: mtu less than device minimum [ 511.914423][T13863] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2478'. [ 512.494234][T13879] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2482'. [ 512.905843][T13891] FAULT_INJECTION: forcing a failure. [ 512.905843][T13891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.963247][T13891] CPU: 0 UID: 0 PID: 13891 Comm: syz.0.2487 Not tainted syzkaller #0 PREEMPT(full) [ 512.963277][T13891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 512.963290][T13891] Call Trace: [ 512.963298][T13891] [ 512.963307][T13891] dump_stack_lvl+0x189/0x250 [ 512.963338][T13891] ? __pfx____ratelimit+0x10/0x10 [ 512.963366][T13891] ? __pfx_dump_stack_lvl+0x10/0x10 [ 512.963391][T13891] ? __pfx__printk+0x10/0x10 [ 512.963420][T13891] ? __might_fault+0xb0/0x130 [ 512.963460][T13891] should_fail_ex+0x414/0x560 [ 512.963491][T13891] _copy_from_iter+0x1db/0x16f0 [ 512.963515][T13891] ? rcu_is_watching+0x15/0xb0 [ 512.963537][T13891] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 512.963569][T13891] ? __pfx__copy_from_iter+0x10/0x10 [ 512.963591][T13891] ? __build_skb_around+0x257/0x3e0 [ 512.963628][T13891] ? netlink_sendmsg+0x642/0xb30 [ 512.963657][T13891] ? skb_put+0x11b/0x210 [ 512.963692][T13891] netlink_sendmsg+0x6b2/0xb30 [ 512.963734][T13891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.963769][T13891] ? aa_sock_msg_perm+0xf1/0x1d0 [ 512.963805][T13891] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 512.963827][T13891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.963860][T13891] __sock_sendmsg+0x21c/0x270 [ 512.963891][T13891] ____sys_sendmsg+0x505/0x830 [ 512.963918][T13891] ? __pfx_____sys_sendmsg+0x10/0x10 [ 512.963951][T13891] ? import_iovec+0x74/0xa0 [ 512.963979][T13891] ___sys_sendmsg+0x21f/0x2a0 [ 512.964003][T13891] ? __pfx____sys_sendmsg+0x10/0x10 [ 512.964064][T13891] ? __fget_files+0x2a/0x420 [ 512.964082][T13891] ? __fget_files+0x3a0/0x420 [ 512.964120][T13891] __x64_sys_sendmsg+0x19b/0x260 [ 512.964146][T13891] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 512.964173][T13891] ? perf_trace_preemptirq_template+0xa3/0x340 [ 512.964214][T13891] ? __pfx_ksys_write+0x10/0x10 [ 512.964240][T13891] ? rcu_is_watching+0x15/0xb0 [ 512.964267][T13891] ? do_syscall_64+0xbe/0x3b0 [ 512.964303][T13891] do_syscall_64+0xfa/0x3b0 [ 512.964331][T13891] ? lockdep_hardirqs_on+0x9c/0x150 [ 512.964360][T13891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.964381][T13891] ? clear_bhb_loop+0x60/0xb0 [ 512.964406][T13891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.964426][T13891] RIP: 0033:0x7fae0298ebe9 [ 512.964444][T13891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.964462][T13891] RSP: 002b:00007fae03729038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 512.964486][T13891] RAX: ffffffffffffffda RBX: 00007fae02bb5fa0 RCX: 00007fae0298ebe9 [ 512.964501][T13891] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 512.964513][T13891] RBP: 00007fae03729090 R08: 0000000000000000 R09: 0000000000000000 [ 512.964526][T13891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.964539][T13891] R13: 00007fae02bb6038 R14: 00007fae02bb5fa0 R15: 00007ffe3cb693a8 [ 512.964573][T13891] [ 513.595801][T13896] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2489'. [ 513.790511][T13905] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2491'. [ 514.120548][T13905] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2491'. [ 514.171676][T13905] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2491'. [ 515.245404][T13922] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2495'. [ 515.490774][T13934] netlink: 'syz.3.2500': attribute type 20 has an invalid length. [ 515.517821][T13934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2500'. [ 515.584200][T13939] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2502'. [ 515.680942][T13942] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2504'. [ 515.753930][T13944] syzkaller0: entered promiscuous mode [ 515.759780][T13944] syzkaller0: entered allmulticast mode [ 515.774934][T13952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2506'. [ 515.799981][T13947] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2506'. [ 515.898151][T13947] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2506'. [ 515.977154][T13942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2504'. [ 516.321187][T13962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2510'. [ 516.346214][T13962] FAULT_INJECTION: forcing a failure. [ 516.346214][T13962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.375937][T13962] CPU: 1 UID: 0 PID: 13962 Comm: syz.0.2510 Not tainted syzkaller #0 PREEMPT(full) [ 516.375968][T13962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 516.375982][T13962] Call Trace: [ 516.375990][T13962] [ 516.375999][T13962] dump_stack_lvl+0x189/0x250 [ 516.376036][T13962] ? __pfx_dump_stack_lvl+0x10/0x10 [ 516.376062][T13962] ? __pfx__printk+0x10/0x10 [ 516.376102][T13962] ? kasan_check_range+0x1d4/0x2c0 [ 516.376141][T13962] should_fail_ex+0x414/0x560 [ 516.376175][T13962] _copy_to_user+0x31/0xb0 [ 516.376202][T13962] simple_read_from_buffer+0xe1/0x170 [ 516.376239][T13962] proc_fail_nth_read+0x1b3/0x220 [ 516.376267][T13962] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 516.376295][T13962] ? rw_verify_area+0x2a6/0x4d0 [ 516.376322][T13962] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 516.376348][T13962] vfs_read+0x200/0xa30 [ 516.376374][T13962] ? fdget_pos+0x247/0x320 [ 516.376402][T13962] ? __pfx_vfs_read+0x10/0x10 [ 516.376426][T13962] ? irqentry_exit+0x74/0x90 [ 516.376455][T13962] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.376507][T13962] ksys_read+0x145/0x250 [ 516.376538][T13962] ? __pfx_ksys_read+0x10/0x10 [ 516.376569][T13962] ? do_syscall_64+0xbe/0x3b0 [ 516.376603][T13962] do_syscall_64+0xfa/0x3b0 [ 516.376634][T13962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.376653][T13962] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 516.376673][T13962] ? clear_bhb_loop+0x60/0xb0 [ 516.376700][T13962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.376720][T13962] RIP: 0033:0x7fae0298d5fc [ 516.376739][T13962] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 516.376757][T13962] RSP: 002b:00007fae03729030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 516.376780][T13962] RAX: ffffffffffffffda RBX: 00007fae02bb5fa0 RCX: 00007fae0298d5fc [ 516.376795][T13962] RDX: 000000000000000f RSI: 00007fae037290a0 RDI: 0000000000000007 [ 516.376808][T13962] RBP: 00007fae03729090 R08: 0000000000000000 R09: 0000000000000000 [ 516.376820][T13962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.376832][T13962] R13: 00007fae02bb6038 R14: 00007fae02bb5fa0 R15: 00007ffe3cb693a8 [ 516.376867][T13962] [ 516.801644][T13966] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2511'. [ 520.409805][T13988] FAULT_INJECTION: forcing a failure. [ 520.409805][T13988] name failslab, interval 1, probability 0, space 0, times 0 [ 520.425190][T13988] CPU: 0 UID: 0 PID: 13988 Comm: syz.0.2518 Not tainted syzkaller #0 PREEMPT(full) [ 520.425222][T13988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 520.425235][T13988] Call Trace: [ 520.425243][T13988] [ 520.425252][T13988] dump_stack_lvl+0x189/0x250 [ 520.425284][T13988] ? __pfx____ratelimit+0x10/0x10 [ 520.425313][T13988] ? __pfx_dump_stack_lvl+0x10/0x10 [ 520.425340][T13988] ? __pfx__printk+0x10/0x10 [ 520.425374][T13988] ? __pfx___might_resched+0x10/0x10 [ 520.425402][T13988] should_fail_ex+0x414/0x560 [ 520.425438][T13988] should_failslab+0xa8/0x100 [ 520.425472][T13988] __kmalloc_noprof+0xcb/0x4f0 [ 520.425498][T13988] ? kfree+0x4d/0x440 [ 520.425520][T13988] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 520.425549][T13988] tomoyo_realpath_from_path+0xe3/0x5d0 [ 520.425574][T13988] ? tomoyo_domain+0xd9/0x130 [ 520.425605][T13988] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 520.425635][T13988] tomoyo_path_number_perm+0x1e8/0x5a0 [ 520.425678][T13988] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 520.425709][T13988] ? ksys_write+0x1cb/0x250 [ 520.425807][T13988] ? __fget_files+0x2a/0x420 [ 520.425829][T13988] ? __fget_files+0x2a/0x420 [ 520.425843][T13988] ? __fget_files+0x3a0/0x420 [ 520.425857][T13988] ? __fget_files+0x2a/0x420 [ 520.425878][T13988] security_file_ioctl+0xcb/0x2d0 [ 520.425903][T13988] __se_sys_ioctl+0x47/0x170 [ 520.425929][T13988] do_syscall_64+0xfa/0x3b0 [ 520.425952][T13988] ? lockdep_hardirqs_on+0x9c/0x150 [ 520.425975][T13988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.425992][T13988] ? clear_bhb_loop+0x60/0xb0 [ 520.426014][T13988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.426030][T13988] RIP: 0033:0x7fae0298ebe9 [ 520.426048][T13988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.426062][T13988] RSP: 002b:00007fae00bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 520.426080][T13988] RAX: ffffffffffffffda RBX: 00007fae02bb6090 RCX: 00007fae0298ebe9 [ 520.426093][T13988] RDX: 0000200000000040 RSI: 00000000800454e0 RDI: 0000000000000003 [ 520.426103][T13988] RBP: 00007fae00bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 520.426113][T13988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.426123][T13988] R13: 00007fae02bb6128 R14: 00007fae02bb6090 R15: 00007ffe3cb693a8 [ 520.426157][T13988] [ 520.426165][T13988] ERROR: Out of memory at tomoyo_realpath_from_path. [ 520.520217][T13989] netlink: 'syz.3.2519': attribute type 1 has an invalid length. [ 520.585399][T13991] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2517'. [ 520.643751][T13989] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.2519'. [ 521.081803][T13997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2521'. [ 521.869516][T13997] lo speed is unknown, defaulting to 1000 [ 521.963310][T14001] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2522'. [ 522.043211][T14003] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 522.182354][T14009] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2526'. [ 522.218214][T14010] netlink: 'syz.1.2527': attribute type 39 has an invalid length. [ 522.361828][T14017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.466512][T14022] FAULT_INJECTION: forcing a failure. [ 522.466512][T14022] name failslab, interval 1, probability 0, space 0, times 0 [ 522.482045][T14022] CPU: 0 UID: 0 PID: 14022 Comm: syz.0.2531 Not tainted syzkaller #0 PREEMPT(full) [ 522.482074][T14022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 522.482087][T14022] Call Trace: [ 522.482100][T14022] [ 522.482113][T14022] dump_stack_lvl+0x189/0x250 [ 522.482153][T14022] ? __pfx____ratelimit+0x10/0x10 [ 522.482193][T14022] ? __pfx_dump_stack_lvl+0x10/0x10 [ 522.482230][T14022] ? __pfx__printk+0x10/0x10 [ 522.482348][T14022] should_fail_ex+0x414/0x560 [ 522.482416][T14022] should_failslab+0xa8/0x100 [ 522.482466][T14022] kmem_cache_alloc_noprof+0x73/0x3c0 [ 522.482509][T14022] ? skb_clone+0x212/0x3a0 [ 522.482564][T14022] skb_clone+0x212/0x3a0 [ 522.482618][T14022] __netlink_deliver_tap+0x404/0x850 [ 522.482723][T14022] ? netlink_deliver_tap+0x2e/0x1b0 [ 522.482774][T14022] netlink_deliver_tap+0x19c/0x1b0 [ 522.482822][T14022] netlink_unicast+0x7fa/0x9e0 [ 522.482910][T14022] ? __pfx_netlink_unicast+0x10/0x10 [ 522.482961][T14022] ? netlink_sendmsg+0x642/0xb30 [ 522.482994][T14022] ? skb_put+0x11b/0x210 [ 522.483060][T14022] netlink_sendmsg+0x805/0xb30 [ 522.483153][T14022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 522.483204][T14022] ? perf_trace_run_bpf_submit+0x100/0x170 [ 522.483232][T14022] ? aa_sock_msg_perm+0xf1/0x1d0 [ 522.483285][T14022] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 522.483312][T14022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 522.483359][T14022] __sock_sendmsg+0x21c/0x270 [ 522.483416][T14022] ____sys_sendmsg+0x505/0x830 [ 522.483488][T14022] ? __pfx_____sys_sendmsg+0x10/0x10 [ 522.483578][T14022] ? import_iovec+0x74/0xa0 [ 522.483635][T14022] ___sys_sendmsg+0x21f/0x2a0 [ 522.483682][T14022] ? __pfx____sys_sendmsg+0x10/0x10 [ 522.483829][T14022] ? __fget_files+0x2a/0x420 [ 522.483928][T14022] ? __fget_files+0x2a/0x420 [ 522.483949][T14022] ? __fget_files+0x3a0/0x420 [ 522.484036][T14022] __x64_sys_sendmsg+0x19b/0x260 [ 522.484085][T14022] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 522.484170][T14022] ? __pfx_ksys_write+0x10/0x10 [ 522.484196][T14022] ? rcu_is_watching+0x15/0xb0 [ 522.484255][T14022] ? do_syscall_64+0xbe/0x3b0 [ 522.484333][T14022] do_syscall_64+0xfa/0x3b0 [ 522.484364][T14022] ? lockdep_hardirqs_on+0x9c/0x150 [ 522.484399][T14022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.484424][T14022] ? clear_bhb_loop+0x60/0xb0 [ 522.484472][T14022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.484502][T14022] RIP: 0033:0x7fae0298ebe9 [ 522.484529][T14022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.484547][T14022] RSP: 002b:00007fae03729038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 522.484569][T14022] RAX: ffffffffffffffda RBX: 00007fae02bb5fa0 RCX: 00007fae0298ebe9 [ 522.484584][T14022] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 522.484598][T14022] RBP: 00007fae03729090 R08: 0000000000000000 R09: 0000000000000000 [ 522.484610][T14022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.484622][T14022] R13: 00007fae02bb6038 R14: 00007fae02bb5fa0 R15: 00007ffe3cb693a8 [ 522.484730][T14022] [ 523.322273][T14027] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2532'. [ 523.393042][T14029] netlink: 'syz.0.2533': attribute type 10 has an invalid length. [ 523.402491][T14029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.414198][T14029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.469742][T14036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2536'. [ 523.721936][T14046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2537'. [ 523.827222][T14047] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2537'. [ 524.887269][T14061] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2543'. [ 525.128544][T14070] FAULT_INJECTION: forcing a failure. [ 525.128544][T14070] name failslab, interval 1, probability 0, space 0, times 0 [ 525.158676][T14070] CPU: 0 UID: 0 PID: 14070 Comm: syz.1.2545 Not tainted syzkaller #0 PREEMPT(full) [ 525.158708][T14070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 525.158720][T14070] Call Trace: [ 525.158732][T14070] [ 525.158745][T14070] dump_stack_lvl+0x189/0x250 [ 525.158785][T14070] ? __pfx____ratelimit+0x10/0x10 [ 525.158826][T14070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 525.158862][T14070] ? __pfx__printk+0x10/0x10 [ 525.158936][T14070] ? __pfx___might_resched+0x10/0x10 [ 525.158990][T14070] should_fail_ex+0x414/0x560 [ 525.159056][T14070] should_failslab+0xa8/0x100 [ 525.159105][T14070] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 525.159151][T14070] ? __alloc_skb+0x112/0x2d0 [ 525.159215][T14070] __alloc_skb+0x112/0x2d0 [ 525.159280][T14070] netlink_sendmsg+0x5c6/0xb30 [ 525.159372][T14070] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.159423][T14070] ? perf_trace_run_bpf_submit+0x100/0x170 [ 525.159449][T14070] ? aa_sock_msg_perm+0xf1/0x1d0 [ 525.159501][T14070] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 525.159528][T14070] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.159574][T14070] __sock_sendmsg+0x21c/0x270 [ 525.159632][T14070] ____sys_sendmsg+0x505/0x830 [ 525.159701][T14070] ? __pfx_____sys_sendmsg+0x10/0x10 [ 525.159783][T14070] ? import_iovec+0x74/0xa0 [ 525.159837][T14070] ___sys_sendmsg+0x21f/0x2a0 [ 525.159883][T14070] ? __pfx____sys_sendmsg+0x10/0x10 [ 525.160032][T14070] ? __fget_files+0x2a/0x420 [ 525.160135][T14070] ? __fget_files+0x2a/0x420 [ 525.160156][T14070] ? __fget_files+0x3a0/0x420 [ 525.160242][T14070] __x64_sys_sendmsg+0x19b/0x260 [ 525.160289][T14070] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 525.160374][T14070] ? __pfx_ksys_write+0x10/0x10 [ 525.160400][T14070] ? rcu_is_watching+0x15/0xb0 [ 525.160457][T14070] ? do_syscall_64+0xbe/0x3b0 [ 525.160516][T14070] do_syscall_64+0xfa/0x3b0 [ 525.160546][T14070] ? lockdep_hardirqs_on+0x9c/0x150 [ 525.160581][T14070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.160605][T14070] ? clear_bhb_loop+0x60/0xb0 [ 525.160652][T14070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.160674][T14070] RIP: 0033:0x7f86ccd8ebe9 [ 525.160701][T14070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.160718][T14070] RSP: 002b:00007f86cdc24038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.160740][T14070] RAX: ffffffffffffffda RBX: 00007f86ccfb5fa0 RCX: 00007f86ccd8ebe9 [ 525.160754][T14070] RDX: 0000000000004000 RSI: 0000200000000080 RDI: 0000000000000003 [ 525.160767][T14070] RBP: 00007f86cdc24090 R08: 0000000000000000 R09: 0000000000000000 [ 525.160779][T14070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.160790][T14070] R13: 00007f86ccfb6038 R14: 00007f86ccfb5fa0 R15: 00007fffa46a3a98 [ 525.160894][T14070] [ 525.761538][T14072] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2546'. [ 526.209020][T14079] ref_ctr_offset mismatch. inode: 0xaac offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 526.548370][T14088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2551'. [ 526.661384][T14090] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2551'. [ 527.688665][T14104] FAULT_INJECTION: forcing a failure. [ 527.688665][T14104] name failslab, interval 1, probability 0, space 0, times 0 [ 527.748859][T14104] CPU: 1 UID: 0 PID: 14104 Comm: syz.3.2557 Not tainted syzkaller #0 PREEMPT(full) [ 527.748889][T14104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 527.748903][T14104] Call Trace: [ 527.748916][T14104] [ 527.748930][T14104] dump_stack_lvl+0x189/0x250 [ 527.748968][T14104] ? __pfx____ratelimit+0x10/0x10 [ 527.749007][T14104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 527.749043][T14104] ? __pfx__printk+0x10/0x10 [ 527.749119][T14104] ? __pfx___might_resched+0x10/0x10 [ 527.749137][T14104] ? fs_reclaim_acquire+0x7d/0x100 [ 527.749202][T14104] should_fail_ex+0x414/0x560 [ 527.749263][T14104] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 527.749283][T14104] should_failslab+0xa8/0x100 [ 527.749331][T14104] __kvmalloc_node_noprof+0x161/0x5f0 [ 527.749371][T14104] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 527.749425][T14104] rhashtable_init_noprof+0x4ee/0xbb0 [ 527.749485][T14104] rhltable_init_noprof+0x1e/0x60 [ 527.749515][T14104] nf_tables_newtable+0x68f/0x1890 [ 527.749647][T14104] nfnetlink_rcv+0x1132/0x2520 [ 527.749870][T14104] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 527.749895][T14104] ? trace_call_bpf+0xb7/0x850 [ 527.750180][T14104] ? __netlink_deliver_tap+0x807/0x850 [ 527.750220][T14104] ? netlink_deliver_tap+0x2e/0x1b0 [ 527.750358][T14104] netlink_unicast+0x82c/0x9e0 [ 527.750448][T14104] ? __pfx_netlink_unicast+0x10/0x10 [ 527.750499][T14104] ? netlink_sendmsg+0x642/0xb30 [ 527.750527][T14104] ? skb_put+0x11b/0x210 [ 527.750593][T14104] netlink_sendmsg+0x805/0xb30 [ 527.750686][T14104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 527.750736][T14104] ? perf_trace_run_bpf_submit+0x100/0x170 [ 527.750761][T14104] ? aa_sock_msg_perm+0xf1/0x1d0 [ 527.750822][T14104] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 527.750848][T14104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 527.750895][T14104] __sock_sendmsg+0x21c/0x270 [ 527.750952][T14104] ____sys_sendmsg+0x505/0x830 [ 527.751017][T14104] ? __pfx_____sys_sendmsg+0x10/0x10 [ 527.751100][T14104] ? import_iovec+0x74/0xa0 [ 527.751151][T14104] ___sys_sendmsg+0x21f/0x2a0 [ 527.751194][T14104] ? __pfx____sys_sendmsg+0x10/0x10 [ 527.751338][T14104] ? __fget_files+0x2a/0x420 [ 527.751432][T14104] ? __fget_files+0x2a/0x420 [ 527.751453][T14104] ? __fget_files+0x3a0/0x420 [ 527.751539][T14104] __x64_sys_sendmsg+0x19b/0x260 [ 527.751587][T14104] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 527.751672][T14104] ? __pfx_ksys_write+0x10/0x10 [ 527.751697][T14104] ? rcu_is_watching+0x15/0xb0 [ 527.751755][T14104] ? do_syscall_64+0xbe/0x3b0 [ 527.751824][T14104] do_syscall_64+0xfa/0x3b0 [ 527.751853][T14104] ? lockdep_hardirqs_on+0x9c/0x150 [ 527.751888][T14104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.751912][T14104] ? clear_bhb_loop+0x60/0xb0 [ 527.751959][T14104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.751981][T14104] RIP: 0033:0x7f34b6b8ebe9 [ 527.752008][T14104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.752025][T14104] RSP: 002b:00007f34b7a3c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.752047][T14104] RAX: ffffffffffffffda RBX: 00007f34b6db5fa0 RCX: 00007f34b6b8ebe9 [ 527.752064][T14104] RDX: 0000000000000080 RSI: 0000200000000c40 RDI: 0000000000000003 [ 527.752077][T14104] RBP: 00007f34b7a3c090 R08: 0000000000000000 R09: 0000000000000000 [ 527.752089][T14104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.752101][T14104] R13: 00007f34b6db6038 R14: 00007f34b6db5fa0 R15: 00007ffdc03659c8 [ 527.752210][T14104] [ 528.254493][T14106] ================================================================== [ 528.262662][T14106] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x868/0xcf0 [ 528.270544][T14106] Write of size 8 at addr ffff88804ff2e648 by task syz.4.2558/14106 [ 528.278629][T14106] [ 528.281008][T14106] CPU: 1 UID: 0 PID: 14106 Comm: syz.4.2558 Not tainted syzkaller #0 PREEMPT(full) [ 528.281040][T14106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 528.281056][T14106] Call Trace: [ 528.281068][T14106] [ 528.281081][T14106] dump_stack_lvl+0x189/0x250 [ 528.281116][T14106] ? rcu_is_watching+0x15/0xb0 [ 528.281139][T14106] ? __kasan_check_byte+0x12/0x40 [ 528.281180][T14106] ? __pfx_dump_stack_lvl+0x10/0x10 [ 528.281208][T14106] ? rcu_is_watching+0x15/0xb0 [ 528.281229][T14106] ? __virt_addr_valid+0x1c8/0x5c0 [ 528.281263][T14106] ? lock_release+0x4b/0x3e0 [ 528.281321][T14106] ? __virt_addr_valid+0x1c8/0x5c0 [ 528.281355][T14106] ? __virt_addr_valid+0x4a5/0x5c0 [ 528.281400][T14106] print_report+0xca/0x240 [ 528.281428][T14106] ? __bpf_get_stackid+0x868/0xcf0 [ 528.281461][T14106] kasan_report+0x118/0x150 [ 528.281511][T14106] ? __bpf_get_stackid+0x868/0xcf0 [ 528.281583][T14106] __bpf_get_stackid+0x868/0xcf0 [ 528.281674][T14106] ? bpf_prog_12712c88fd19bd5b+0x2a/0x32 [ 528.281711][T14106] bpf_get_stackid_raw_tp+0x196/0x210 [ 528.281765][T14106] bpf_prog_12712c88fd19bd5b+0x2a/0x32 [ 528.281793][T14106] bpf_trace_run4+0x28b/0x4a0 [ 528.281834][T14106] ? bpf_trace_run4+0x19c/0x4a0 [ 528.281882][T14106] ? __pfx_bpf_trace_run4+0x10/0x10 [ 528.281941][T14106] ? __pfx_get_page_from_freelist+0x10/0x10 [ 528.281982][T14106] ? prepare_alloc_pages+0x213/0x610 [ 528.282018][T14106] trace_mm_page_alloc+0x129/0x150 [ 528.282057][T14106] __alloc_frozen_pages_noprof+0x1d6/0x370 [ 528.282098][T14106] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 528.282193][T14106] alloc_pages_bulk_noprof+0x560/0x710 [ 528.282250][T14106] ? alloc_pages_noprof+0xbe/0x190 [ 528.282305][T14106] kasan_populate_vmalloc+0xba/0x1a0 [ 528.282359][T14106] alloc_vmap_area+0xd51/0x1490 [ 528.282454][T14106] ? __pfx_alloc_vmap_area+0x10/0x10 [ 528.282502][T14106] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 528.282536][T14106] ? __alloc_frozen_pages_noprof+0x1d6/0x370 [ 528.282557][T14106] ? __get_vm_area_node+0x13f/0x300 [ 528.282593][T14106] ? bpf_ringbuf_alloc+0x341/0x590 [ 528.282623][T14106] __get_vm_area_node+0x1f8/0x300 [ 528.282668][T14106] ? bpf_ringbuf_alloc+0x341/0x590 [ 528.282703][T14106] vmap+0x162/0x310 [ 528.282739][T14106] ? bpf_ringbuf_alloc+0x341/0x590 [ 528.282787][T14106] bpf_ringbuf_alloc+0x341/0x590 [ 528.282839][T14106] ringbuf_map_alloc+0x1c8/0x2f0 [ 528.282902][T14106] map_create+0xaa3/0x14d0 [ 528.282955][T14106] ? security_bpf+0x7e/0x300 [ 528.283004][T14106] __sys_bpf+0x60f/0x870 [ 528.283049][T14106] ? __pfx___sys_bpf+0x10/0x10 [ 528.283143][T14106] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 528.283187][T14106] ? rcu_is_watching+0x15/0xb0 [ 528.283242][T14106] __x64_sys_bpf+0x7c/0x90 [ 528.283280][T14106] do_syscall_64+0xfa/0x3b0 [ 528.283314][T14106] ? lockdep_hardirqs_on+0x9c/0x150 [ 528.283350][T14106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.283376][T14106] ? clear_bhb_loop+0x60/0xb0 [ 528.283416][T14106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.283440][T14106] RIP: 0033:0x7efd0758ebe9 [ 528.283467][T14106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.283487][T14106] RSP: 002b:00007efd0847b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 528.283511][T14106] RAX: ffffffffffffffda RBX: 00007efd077b5fa0 RCX: 00007efd0758ebe9 [ 528.283528][T14106] RDX: 0000000000000048 RSI: 00002000000007c0 RDI: 0000000000000000 [ 528.283543][T14106] RBP: 00007efd07611e19 R08: 0000000000000000 R09: 0000000000000000 [ 528.283556][T14106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.283569][T14106] R13: 00007efd077b6038 R14: 00007efd077b5fa0 R15: 00007fffc716ba98 [ 528.283646][T14106] [ 528.283655][T14106] [ 528.653413][T14106] Allocated by task 14106: [ 528.657848][T14106] kasan_save_track+0x3e/0x80 [ 528.662603][T14106] __kasan_kmalloc+0x93/0xb0 [ 528.667227][T14106] __kmalloc_node_noprof+0x276/0x4e0 [ 528.672539][T14106] bpf_map_area_alloc+0x64/0x180 [ 528.677509][T14106] prealloc_elems_and_freelist+0x86/0x1d0 [ 528.683266][T14106] stack_map_alloc+0x33f/0x4c0 [ 528.688062][T14106] map_create+0xaa3/0x14d0 [ 528.692619][T14106] __sys_bpf+0x60f/0x870 [ 528.696902][T14106] __x64_sys_bpf+0x7c/0x90 [ 528.701347][T14106] do_syscall_64+0xfa/0x3b0 [ 528.705880][T14106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.711830][T14106] [ 528.714174][T14106] The buggy address belongs to the object at ffff88804ff2e000 [ 528.714174][T14106] which belongs to the cache kmalloc-cg-2k of size 2048 [ 528.728631][T14106] The buggy address is located 8 bytes to the right of [ 528.728631][T14106] allocated 1600-byte region [ffff88804ff2e000, ffff88804ff2e640) [ 528.743230][T14106] [ 528.745570][T14106] The buggy address belongs to the physical page: [ 528.752010][T14106] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4ff28 [ 528.760811][T14106] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 528.769332][T14106] memcg:ffff888026139081 [ 528.773591][T14106] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 528.781590][T14106] page_type: f5(slab) [ 528.785594][T14106] raw: 00fff00000000040 ffff88801a44b3c0 0000000000000000 dead000000000001 [ 528.794232][T14106] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff888026139081 [ 528.802882][T14106] head: 00fff00000000040 ffff88801a44b3c0 0000000000000000 dead000000000001 [ 528.811592][T14106] head: 0000000000000000 0000000000080008 00000000f5000000 ffff888026139081 [ 528.820295][T14106] head: 00fff00000000003 ffffea00013fca01 00000000ffffffff 00000000ffffffff [ 528.828994][T14106] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 528.837680][T14106] page dumped because: kasan: bad access detected [ 528.844123][T14106] page_owner tracks the page as allocated [ 528.849888][T14106] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 12211, tgid 12210 (syz.2.1975), ts 444054386685, free_ts 444045123003 [ 528.872870][T14106] post_alloc_hook+0x240/0x2a0 [ 528.877673][T14106] get_page_from_freelist+0x21e4/0x22c0 [ 528.883245][T14106] __alloc_frozen_pages_noprof+0x181/0x370 [ 528.889076][T14106] alloc_pages_mpol+0x232/0x4a0 [ 528.893956][T14106] allocate_slab+0x8a/0x370 [ 528.898482][T14106] ___slab_alloc+0xbeb/0x1410 [ 528.903190][T14106] __kmalloc_cache_noprof+0x296/0x3d0 [ 528.908595][T14106] bpf_prog_alloc_no_stats+0xdb/0x4b0 [ 528.914000][T14106] bpf_prog_alloc+0x3c/0x1a0 [ 528.918624][T14106] bpf_prog_load+0x735/0x1930 [ 528.923439][T14106] __sys_bpf+0x528/0x870 [ 528.927734][T14106] __x64_sys_bpf+0x7c/0x90 [ 528.932178][T14106] do_syscall_64+0xfa/0x3b0 [ 528.936713][T14106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.942630][T14106] page last free pid 5867 tgid 5867 stack trace: [ 528.948976][T14106] __free_frozen_pages+0xbc4/0xd30 [ 528.954124][T14106] __put_partials+0x156/0x1a0 [ 528.958827][T14106] put_cpu_partial+0x17c/0x250 [ 528.963615][T14106] __slab_free+0x2d5/0x3c0 [ 528.968061][T14106] qlist_free_all+0x97/0x140 [ 528.972676][T14106] kasan_quarantine_reduce+0x148/0x160 [ 528.978160][T14106] __kasan_slab_alloc+0x22/0x80 [ 528.983038][T14106] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 528.988525][T14106] getname_flags+0xb8/0x540 [ 528.993051][T14106] user_path_at+0x24/0x60 [ 528.997408][T14106] __x64_sys_umount+0xee/0x160 [ 529.002203][T14106] do_syscall_64+0xfa/0x3b0 [ 529.006742][T14106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.012790][T14106] [ 529.015135][T14106] Memory state around the buggy address: [ 529.020791][T14106] ffff88804ff2e500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.028891][T14106] ffff88804ff2e580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.036982][T14106] >ffff88804ff2e600: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 529.045063][T14106] ^ [ 529.051508][T14106] ffff88804ff2e680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 529.059673][T14106] ffff88804ff2e700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 529.067756][T14106] ================================================================== [ 529.116795][T14106] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 529.124085][T14106] CPU: 1 UID: 0 PID: 14106 Comm: syz.4.2558 Not tainted syzkaller #0 PREEMPT(full) [ 529.133498][T14106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 529.143602][T14106] Call Trace: [ 529.146928][T14106] [ 529.149905][T14106] dump_stack_lvl+0x99/0x250 [ 529.154591][T14106] ? __asan_memcpy+0x40/0x70 [ 529.159246][T14106] ? __pfx_dump_stack_lvl+0x10/0x10 [ 529.164511][T14106] ? __pfx__printk+0x10/0x10 [ 529.169214][T14106] vpanic+0x281/0x750 [ 529.173244][T14106] ? irqentry_enter+0x3d/0x60 [ 529.177983][T14106] ? __pfx_vpanic+0x10/0x10 [ 529.182552][T14106] ? irqentry_exit+0x74/0x90 [ 529.187243][T14106] panic+0xb9/0xc0 [ 529.191039][T14106] ? __pfx_panic+0x10/0x10 [ 529.195515][T14106] ? __bpf_get_stackid+0x868/0xcf0 [ 529.200739][T14106] ? __bpf_get_stackid+0x868/0xcf0 [ 529.205924][T14106] check_panic_on_warn+0x89/0xb0 [ 529.210928][T14106] ? __bpf_get_stackid+0x868/0xcf0 [ 529.216106][T14106] end_report+0x78/0x160 [ 529.220411][T14106] kasan_report+0x129/0x150 [ 529.224983][T14106] ? __bpf_get_stackid+0x868/0xcf0 [ 529.230189][T14106] __bpf_get_stackid+0x868/0xcf0 [ 529.235247][T14106] ? bpf_prog_12712c88fd19bd5b+0x2a/0x32 [ 529.240941][T14106] bpf_get_stackid_raw_tp+0x196/0x210 [ 529.246390][T14106] bpf_prog_12712c88fd19bd5b+0x2a/0x32 [ 529.251909][T14106] bpf_trace_run4+0x28b/0x4a0 [ 529.256678][T14106] ? bpf_trace_run4+0x19c/0x4a0 [ 529.261605][T14106] ? __pfx_bpf_trace_run4+0x10/0x10 [ 529.266898][T14106] ? __pfx_get_page_from_freelist+0x10/0x10 [ 529.272860][T14106] ? prepare_alloc_pages+0x213/0x610 [ 529.278210][T14106] trace_mm_page_alloc+0x129/0x150 [ 529.283367][T14106] __alloc_frozen_pages_noprof+0x1d6/0x370 [ 529.289211][T14106] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 529.295618][T14106] alloc_pages_bulk_noprof+0x560/0x710 [ 529.301124][T14106] ? alloc_pages_noprof+0xbe/0x190 [ 529.306282][T14106] kasan_populate_vmalloc+0xba/0x1a0 [ 529.311628][T14106] alloc_vmap_area+0xd51/0x1490 [ 529.316558][T14106] ? __pfx_alloc_vmap_area+0x10/0x10 [ 529.321895][T14106] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 529.327953][T14106] ? __alloc_frozen_pages_noprof+0x1d6/0x370 [ 529.333957][T14106] ? __get_vm_area_node+0x13f/0x300 [ 529.339205][T14106] ? bpf_ringbuf_alloc+0x341/0x590 [ 529.344365][T14106] __get_vm_area_node+0x1f8/0x300 [ 529.349440][T14106] ? bpf_ringbuf_alloc+0x341/0x590 [ 529.354741][T14106] vmap+0x162/0x310 [ 529.358588][T14106] ? bpf_ringbuf_alloc+0x341/0x590 [ 529.363743][T14106] bpf_ringbuf_alloc+0x341/0x590 [ 529.368734][T14106] ringbuf_map_alloc+0x1c8/0x2f0 [ 529.373729][T14106] map_create+0xaa3/0x14d0 [ 529.378195][T14106] ? security_bpf+0x7e/0x300 [ 529.382830][T14106] __sys_bpf+0x60f/0x870 [ 529.387112][T14106] ? __pfx___sys_bpf+0x10/0x10 [ 529.391955][T14106] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 529.398587][T14106] ? rcu_is_watching+0x15/0xb0 [ 529.403403][T14106] __x64_sys_bpf+0x7c/0x90 [ 529.407854][T14106] do_syscall_64+0xfa/0x3b0 [ 529.412387][T14106] ? lockdep_hardirqs_on+0x9c/0x150 [ 529.417617][T14106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.423712][T14106] ? clear_bhb_loop+0x60/0xb0 [ 529.428425][T14106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.434341][T14106] RIP: 0033:0x7efd0758ebe9 [ 529.438785][T14106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.458421][T14106] RSP: 002b:00007efd0847b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 529.466870][T14106] RAX: ffffffffffffffda RBX: 00007efd077b5fa0 RCX: 00007efd0758ebe9 [ 529.474869][T14106] RDX: 0000000000000048 RSI: 00002000000007c0 RDI: 0000000000000000 [ 529.482862][T14106] RBP: 00007efd07611e19 R08: 0000000000000000 R09: 0000000000000000 [ 529.490860][T14106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.498850][T14106] R13: 00007efd077b6038 R14: 00007efd077b5fa0 R15: 00007fffc716ba98 [ 529.506891][T14106] [ 529.510303][T14106] Kernel Offset: disabled [ 529.514679][T14106] Rebooting in 86400 seconds..