last executing test programs: 2.067842004s ago: executing program 3 (id=1026): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a1, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="2600010000000000dfff0f00fd94ea41a1a4082d59151f6e7cdf30f1af297120bad976eb2d164d27da577529194bd0e6398e15b895ae5b42cec1758fc3914d213830dbe7f2d551934eec2a993ab2c921ddb27690dbf75b5ac2aadc6cae9e971169e8921b02497245d7852bd0793e6c2cc9545c5f348d020751181512df43dfd017c53a64f96997440ba1e8b390118fbd4ac8b09185c1b544003ac1b08bb06e19bbff55002ffcfdb212a9ea9b933669cbd25757c23dcb69d615d37fd893f61043fdb2131e0b6a703e62a5da7d61eba309e112f5a84c68ca171e5a7a3ea9b59524d8ab9ea85f1c0f1769e0", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) socket$kcm(0x29, 0x7, 0x0) close(0x3) 1.910680139s ago: executing program 1 (id=1029): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1200000004000000040000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000006e89329682d5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket$kcm(0x11, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000080)=r3, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, 0x0, 0x9, 0x801, 0x0, 0x0, {0x5}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_TUPLE={0x68, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3c, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000417254150000000d000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_type(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r10, &(0x7f0000000280), 0x9) r11 = openat$cgroup_procs(r9, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000c40), 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = socket$kcm(0x10, 0x2, 0x2) sendmsg$kcm(r12, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001280)="16", 0x1}], 0x1}, 0x0) 1.735984806s ago: executing program 1 (id=1032): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1200000004000000040000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000006e89329682d5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket$kcm(0x11, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000080)=r3, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, 0x0, 0x9, 0x801, 0x0, 0x0, {0x5}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_TUPLE={0x68, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3c, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000417254150000000d0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_type(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r10, &(0x7f0000000280), 0x9) r11 = openat$cgroup_procs(r9, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000c40), 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = socket$kcm(0x10, 0x2, 0x2) sendmsg$kcm(r12, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001280)="16", 0x1}], 0x1}, 0x0) 1.680603566s ago: executing program 3 (id=1033): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x86652da295c9ade7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8ec, 0xc}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x35c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(0x0, 0x0, 0x5, r0, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) unlink(&(0x7f0000000200)='./cgroup\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$can_j1939(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x1d, 0x0, 0x3, {0x2, 0xfe, 0x4}, 0xfe}, 0x18, &(0x7f0000000140)={&(0x7f0000000080)="2e0d56fad5fec869865cca115f0bfc1cee794196ae914c004e5b7f764ec44ae29d7cc58df49a245b1e20f1483ee0560492323b9443e3769b6519a150d3f01f2dbb2462f6de5505ef56659427a56499a063a515635cf8295231c3c9cc789987912e0f8a79aa828116f4e8d1a910cb95a07f0fd0016d927949e0eeb19db5398c8eccb1fbc2c12f9a4bd33d27f9d3e1f220e37b138f0501ec943d8feec00544932178f951", 0xa3}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x2, 0xa, 0x73) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) socket$kcm(0x2d, 0x2, 0x0) socket$kcm(0x15, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x8000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090) recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000040)=r4, 0x4) 1.561781032s ago: executing program 3 (id=1036): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x3a0ffffffff) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000280)=0x1fffc) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x61, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xdbe1}, 0x4110, 0x0, 0x0, 0x8, 0x37e, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40400) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000140), 0x4d) recvmsg(r2, 0x0, 0x80) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003100000002200000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x20040040) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYRES32=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8000) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000feffffff000000000300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000d602000000000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000200)="449d060721b9e6bb51f2f6f20504", 0x0, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) socket$kcm(0x2, 0x3, 0x2) 1.520960908s ago: executing program 1 (id=1037): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x86652da295c9ade7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(0x0, 0x0, 0x5, r0, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) unlink(&(0x7f0000000200)='./cgroup\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$can_j1939(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x1d, 0x0, 0x3, {0x2, 0xfe, 0x4}, 0xfe}, 0x18, &(0x7f0000000140)={&(0x7f0000000080)="2e0d56fad5fec869865cca115f0bfc1cee794196ae914c004e5b7f764ec44ae29d7cc58df49a245b1e20f1483ee0560492323b9443e3769b6519a150d3f01f2dbb2462f6de5505ef56659427a56499a063a515635cf8295231c3c9cc789987912e0f8a79aa828116f4e8d1a910cb95a07f0fd0016d927949e0eeb19db5398c8eccb1fbc2c12f9a4bd33d27f9d3e1f220e37b138f0501ec943d8feec00544932178f951", 0xa3}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x2, 0xa, 0x73) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) socket$kcm(0x2d, 0x2, 0x0) socket$kcm(0x15, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090) recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=r4, 0x4) 1.445813195s ago: executing program 0 (id=1038): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x224, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x9, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.394672599s ago: executing program 4 (id=1039): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f00000005c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001380)}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000040), 0x8) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20000014) ioctl$TUNSETLINK(r1, 0x400454cd, 0x205) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0xf, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x19}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000280)=@pptp={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0xc}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000bc0)="1d7018af74526b721871bf3d752dc8c7b983027943fba819f8a8156f86f41eb3d9c77303c6540cd0f9e669a5c2f9bde1718f4d76482581d62bf6af9b4d963092eedac58b6d71b0b116c18784b44fd1884e5af5a004e48a3b43a95d742208c560a6763e574f90848687aafbe44719f77404fdbaa5da0e90f7402404f7aa6947acc666463df97dd4596af2da0def92fb2d936a00e1c8d8227998e7a3645331f7dcce9fd84b19f8f8101c3dbf2428f3931a429c8e581ac8644958785793c822c3e64905", 0xc2}, {&(0x7f00000006c0)="7f44f6dc6aee6bbbbeb864e1625042373066da18f87fbcc270611976c85a9e27b01982c983b510450e4913f2bba23144c3dc97c268c41ff4a14c59dc35fe342f30dee35badd597f436292e4d60abf0ddf6", 0x51}, {&(0x7f0000000a40)="6f9d9e6f8af878088381cc6d9fd0dee1b52499829bd4ce2ef40d007e3a127ab6ca7bad4425474341241891857fd9f406bdef7f65630477818fc1a1fc656cab33946b3074531f305cf74a7f18035da2d9dd53e8fcea39a9c3947d400b45941b109588053207e431814ebbb4b63788729057e49d49583397cf8096cccbfce059389da2b21b4c48e8813f880eb2", 0x8c}], 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="800000000000000039010000000400005bc6d6ec44cae3fb1f5b71dbee92cba9a75364c749dea255e31769ee9f08c058bca2330710c4f4d0b2c7b6d3d0bec6121f186de0a9c2e9808107329ebf7e7ca3b5887ccc1e25f1d258fd000000000000000735ae2683aab47fcfde725719542743fa21ecdfa610532d0a19390000000011f7e1691667624fbf06c846f9b5b256"], 0x80}, 0x40000) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x3}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)="f4001100052b3325fe80070000000000000000000009ffffffe000"/40, 0xfd1b}], 0x1}, 0x20040000) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000eaea7110be000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) 1.342113642s ago: executing program 1 (id=1040): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x8000000000000001}, 0x0, 0x80000002, 0xfffffffe, 0x0, 0x80000000, 0x0, 0x3ffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000020009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb7s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0R\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB\x01\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\tb\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18\x00\b\x00\x00Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x10, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007910000000000000c70000000000000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0xc4, &(0x7f00000002c0)=""/196}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000005300000095dbd0ff7fa57b0000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) ioctl$SIOCSIFHWADDR(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000cf00000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1f) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x0) close(0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x20000000000003cf, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x8000000000000000, 0x7ff}, 0x110c40, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) 1.164683018s ago: executing program 0 (id=1042): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0xa, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f0000000340)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x9d, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4a, 0x4a, 0x4, [@datasec={0x1, 0x1, 0x0, 0xf, 0x2, [{0x2, 0xa9de, 0x7}], "11c2"}, @func={0x4, 0x0, 0x0, 0xc, 0x2}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @float={0xd, 0x0, 0x0, 0x10, 0x8}, @const={0x1, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x61, 0x30]}}, &(0x7f0000000600)=""/63, 0x68, 0x3f, 0x1, 0x0, 0x10000}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0xa, 0x4, 0x3, 0x148e, 0x1, 0x597, '\x00', r0, r1, 0x5, 0x1, 0x3, 0xf}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000080000000600000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r4, 0x0, 0x0}, 0x10) 1.135377628s ago: executing program 2 (id=1043): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1200000004000000040000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000006e89329682d5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket$kcm(0x11, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000080)=r3, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, 0x0, 0x9, 0x801, 0x0, 0x0, {0x5}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_TUPLE={0x68, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3c, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000417254150000000d000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_type(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r10, &(0x7f0000000280), 0x9) r11 = openat$cgroup_procs(r9, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000c40), 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = socket$kcm(0x10, 0x2, 0x2) sendmsg$kcm(r12, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001280)="16", 0x1}], 0x1}, 0x0) 1.092267671s ago: executing program 0 (id=1044): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f00000005c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="000000003750d849d10000950000285cbdfde38996e80ee2"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001380)}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000040), 0x8) ioctl$TUNSETLINK(r1, 0x400454cd, 0x205) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0xf, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x19}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000280)=@pptp={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0xc}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000bc0)="1d7018af74526b721871bf3d752dc8c7b983027943fba819f8a8156f86f41eb3d9c77303c6540cd0f9e669a5c2f9bde1718f4d76482581d62bf6af9b4d963092eedac58b6d71b0b116c18784b44fd1884e5af5a004e48a3b43a95d742208c560a6763e574f90848687aafbe44719f77404fdbaa5da0e90f7402404f7aa6947acc666463df97dd4596af2da0def92fb2d936a00e1c8d8227998e7a3645331f7dcce9fd84b19f8f8101c3dbf2428f3931a429c8e581ac8644958785793c822c3e64905", 0xc2}, {&(0x7f00000006c0)="7f44f6dc6aee6bbbbeb864e1625042373066da18f87fbcc270611976c85a9e27b01982c983b510450e4913f2bba23144c3dc97c268c41ff4a14c59dc35fe342f30dee35badd597f436292e4d60abf0ddf6", 0x51}, {&(0x7f0000000a40)="6f9d9e6f8af878088381cc6d9fd0dee1b52499829bd4ce2ef40d007e3a127ab6ca7bad4425474341241891857fd9f406bdef7f65630477818fc1a1fc656cab33946b3074531f305cf74a7f18035da2d9dd53e8fcea39a9c3947d400b45941b109588053207e431814ebbb4b63788729057e49d49583397cf8096cccbfce059389da2b21b4c48e8813f880eb2", 0x8c}], 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="800000000000000039010000000400005bc6d6ec44cae3fb1f5b71dbee92cba9a75364c749dea255e31769ee9f08c058bca2330710c4f4d0b2c7b6d3d0bec6121f186de0a9c2e9808107329ebf7e7ca3b5887ccc1e25f1d258fd000000000000000735ae2683aab47fcfde725719542743fa21ecdfa610532d0a19390000000011f7e1691667624fbf06c846f9b5b256"], 0x80}, 0x40000) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x3}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)="f4001100052b3325fe80070000000000000000000009ffffffe000"/40, 0xfd1b}], 0x1}, 0x20040000) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000eaea7110be000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) 1.091792759s ago: executing program 3 (id=1045): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1200000004000000040000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000006e89329682d5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket$kcm(0x11, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000080)=r3, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, 0x0, 0x9, 0x801, 0x0, 0x0, {0x5}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_TUPLE={0x68, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3c, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000417254150000000d000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_type(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r10, &(0x7f0000000280), 0x9) r11 = openat$cgroup_procs(r9, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000c40), 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = socket$kcm(0x10, 0x2, 0x2) sendmsg$kcm(r12, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001280)="16", 0x1}], 0x1}, 0x0) 1.054973614s ago: executing program 1 (id=1046): r0 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) ioctl$TUNGETVNETBE(r0, 0x800454df, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0x10000}, {0x10000002, 0x0, 0x0, 0x9}]}, 0x90) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb}, 0x4) setsockopt$sock_attach_bpf(r3, 0x84, 0x75, &(0x7f0000000000)=r6, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x10}}], 0x10}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r7) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/uts\x00') 995.49294ms ago: executing program 4 (id=1047): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async, rerun: 32) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000500)="fe", 0x1}], 0x1}, 0x4) sendmsg(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000540)="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", 0x3192}], 0x1}, 0x40) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 961.612425ms ago: executing program 2 (id=1048): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1200000004000000040000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000006e89329682d5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket$kcm(0x11, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000080)=r3, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, 0x0, 0x9, 0x801, 0x0, 0x0, {0x5}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_TUPLE={0x68, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3c, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000417254150000000d0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_type(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r10, &(0x7f0000000280), 0x9) r11 = openat$cgroup_procs(r9, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000c40), 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = socket$kcm(0x10, 0x2, 0x2) sendmsg$kcm(r12, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001280)="16", 0x1}], 0x1}, 0x0) 948.530257ms ago: executing program 3 (id=1049): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000f30007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) 780.420779ms ago: executing program 4 (id=1050): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x86652da295c9ade7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(0x0, 0x0, 0x5, r0, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) unlink(&(0x7f0000000200)='./cgroup\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$can_j1939(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x1d, 0x0, 0x3, {0x2, 0xfe, 0x4}, 0xfe}, 0x18, &(0x7f0000000140)={&(0x7f0000000080)="2e0d56fad5fec869865cca115f0bfc1cee794196ae914c004e5b7f764ec44ae29d7cc58df49a245b1e20f1483ee0560492323b9443e3769b6519a150d3f01f2dbb2462f6de5505ef56659427a56499a063a515635cf8295231c3c9cc789987912e0f8a79aa828116f4e8d1a910cb95a07f0fd0016d927949e0eeb19db5398c8eccb1fbc2c12f9a4bd33d27f9d3e1f220e37b138f0501ec943d8feec00544932178f951", 0xa3}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x2, 0xa, 0x73) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) socket$kcm(0x2d, 0x2, 0x0) socket$kcm(0x15, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090) recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=r4, 0x4) 780.031241ms ago: executing program 3 (id=1051): r0 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) ioctl$TUNGETVNETBE(r0, 0x800454df, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x10}}], 0x10}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/uts\x00') (fail_nth: 9) 748.129978ms ago: executing program 2 (id=1052): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x224, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x9, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000017000000bfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff0000000015040000000001d80f030000000000003404ffc101ed0a0014040000170000803c40ff80000000007b0a00fe000000004e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d0cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090d030000003acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931481747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e31a3446cd57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9be0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd08000000e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119d2a673bdae05779208409e6cf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468dbcf8b776fe4c629"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 724.722968ms ago: executing program 0 (id=1053): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1200000004000000040000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000006e89329682d5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket$kcm(0x11, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000080)=r3, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, 0x0, 0x9, 0x801, 0x0, 0x0, {0x5}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_TUPLE={0x68, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3c, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000417254150000000d000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_type(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r10, &(0x7f0000000280), 0x9) r11 = openat$cgroup_procs(r9, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000c40), 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = socket$kcm(0x10, 0x2, 0x2) sendmsg$kcm(r12, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001280)="16", 0x1}], 0x1}, 0x0) 664.909829ms ago: executing program 4 (id=1054): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000025c0)="d8000000240081064e81f882db44565b5f0006000000e8fe0ba1f1ffffff0200142603600e120800080024000000a80009001100014003000000036010fab94dcf5c0661c1d67fa94c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe", 0x65}], 0x1}, 0x0) socket$kcm(0x2, 0x1, 0x84) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc98, 0x0, @perf_config_ext={0x3, 0x8001}, 0x28e4dcf2182c8c55, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) mkdir(0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r1, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/233, 0xe9}, {0x0}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000b00)=""/157, 0x9d}, {&(0x7f0000000280)=""/209, 0xd1}], 0x6}, 0x0) 636.092692ms ago: executing program 2 (id=1055): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000025c0)="d8000000240081064e81f882db44565b5f0006000000e8fe0ba1f1ffffff0200142603600e120800080024000000a80009001100014003000000036010fab94dcf5c0661c1d67fa94c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f", 0x6f}], 0x1}, 0x0) socket$kcm(0x2, 0x1, 0x84) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc98, 0x0, @perf_config_ext={0x3, 0x8001}, 0x28e4dcf2182c8c55, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) mkdir(0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r1, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/233, 0xe9}, {0x0}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000b00)=""/157, 0x9d}, {&(0x7f0000000280)=""/209, 0xd1}], 0x6}, 0x0) 267.998725ms ago: executing program 2 (id=1056): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="b40000000001010400000000000000000a000000440001802c00018014000300ff01000000020000000000000000000114000400ff010a000000000000000000000000010c000280050001000000000006000340000200003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000a0007"], 0xb4}, 0x1, 0x200000000000000}, 0x0) 266.773827ms ago: executing program 0 (id=1066): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1200000004000000040000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000006e89329682d5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket$kcm(0x11, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000080)=r3, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, 0x0, 0x9, 0x801, 0x0, 0x0, {0x5}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_TUPLE={0x68, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3c, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000417254150000000d000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_type(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r10, &(0x7f0000000280), 0x9) r11 = openat$cgroup_procs(r9, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000c40), 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = socket$kcm(0x10, 0x2, 0x2) sendmsg$kcm(r12, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001280)="16", 0x1}], 0x1}, 0x0) 213.011483ms ago: executing program 4 (id=1057): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8ec, 0xc}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x35c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) r1 = socket$kcm(0x2, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8918, &(0x7f0000000000)) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000001c0)=r3, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000001e00)={0x0, 0x0, 0x0}, 0x41) r4 = socket$kcm(0x2, 0x5, 0x84) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x40}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x40100, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f92aa3c92b", 0x14}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x20008050) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0xfffffffc, 0x8}]}, 0x94) 133.67178ms ago: executing program 2 (id=1058): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x224, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x9, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x8, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 67.079119ms ago: executing program 1 (id=1059): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a308400000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002106000d40931000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000010140)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x2100, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x1a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x10000, 0x0, 0x1, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r4, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xc5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x50, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[], 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)=0xfdfdffff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket$kcm(0x23, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x80, 0xfd, 0x0, 0x5d35, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x1}, 0x4000, 0x0, 0x0, 0x6, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x3b70, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xb51}, 0x15905, 0x32, 0xfffffbff, 0x2, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, 0x0, 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) perf_event_open$cgroup(0x0, r8, 0xf, r9, 0x0) socket$kcm(0x10, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, r10}, 0x38) 66.298861ms ago: executing program 0 (id=1060): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x3a0ffffffff) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000280)=0x1fffc) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x61, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xdbe1}, 0x4110, 0x0, 0x0, 0x8, 0x37e, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40400) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000140), 0x4d) recvmsg(r2, 0x0, 0x80) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003100000002200000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x20040040) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYRES32=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8000) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000feffffff000000000300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000d602000000000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000200)="449d060721b9e6bb51f2f6f20504", 0x0, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) socket$kcm(0x2, 0x3, 0x2) 0s ago: executing program 4 (id=1061): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f00000005c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001380)}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000040), 0x8) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20000014) ioctl$TUNSETLINK(r1, 0x400454cd, 0x205) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0xf, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x19}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000280)=@pptp={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0xc}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000bc0)="1d7018af74526b721871bf3d752dc8c7b983027943fba819f8a8156f86f41eb3d9c77303c6540cd0f9e669a5c2f9bde1718f4d76482581d62bf6af9b4d963092eedac58b6d71b0b116c18784b44fd1884e5af5a004e48a3b43a95d742208c560a6763e574f90848687aafbe44719f77404fdbaa5da0e90f7402404f7aa6947acc666463df97dd4596af2da0def92fb2d936a00e1c8d8227998e7a3645331f7dcce9fd84b19f8f8101c3dbf2428f3931a429c8e581ac8644958785793c822c3e64905", 0xc2}, {&(0x7f00000006c0)="7f44f6dc6aee6bbbbeb864e1625042373066da18f87fbcc270611976c85a9e27b01982c983b510450e4913f2bba23144c3dc97c268c41ff4a14c59dc35fe342f30dee35badd597f436292e4d60abf0ddf6", 0x51}, {&(0x7f0000000a40)="6f9d9e6f8af878088381cc6d9fd0dee1b52499829bd4ce2ef40d007e3a127ab6ca7bad4425474341241891857fd9f406bdef7f65630477818fc1a1fc656cab33946b3074531f305cf74a7f18035da2d9dd53e8fcea39a9c3947d400b45941b109588053207e431814ebbb4b63788729057e49d49583397cf8096cccbfce059389da2b21b4c48e8813f880eb2", 0x8c}], 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="800000000000000039010000000400005bc6d6ec44cae3fb1f5b71dbee92cba9a75364c749dea255e31769ee9f08c058bca2330710c4f4d0b2c7b6d3d0bec6121f186de0a9c2e9808107329ebf7e7ca3b5887ccc1e25f1d258fd000000000000000735ae2683aab47fcfde725719542743fa21ecdfa610532d0a19390000000011f7e1691667624fbf06c846f9b5b256"], 0x80}, 0x40000) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x3}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)="f4001100052b3325fe80070000000000000000000009ffffffe000"/40, 0xfd1b}], 0x1}, 0x20040000) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000eaea7110be000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) kernel console output (not intermixed with test programs): 50:50:50:50 [ 94.459994][ T5989] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7'. [ 94.488031][ T5990] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7'. [ 94.554295][ T1325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.600099][ T1325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.667290][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.691359][ T1325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.711034][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.732243][ T1325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.929554][ T5988] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3'. [ 94.983344][ T5998] netlink: 'syz.1.8': attribute type 10 has an invalid length. [ 95.106685][ T5998] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 95.178779][ T5998] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 95.287116][ T5998] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 95.358145][ T6003] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1'. [ 95.437189][ T6003] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 95.526196][ T6010] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.550770][ T6008] sctp: [Deprecated]: syz.3.4 (pid 6008) Use of int in maxseg socket option. [ 95.550770][ T6008] Use struct sctp_assoc_value instead [ 95.576060][ T6014] netlink: 'syz.2.10': attribute type 10 has an invalid length. [ 95.616748][ T5879] Bluetooth: hci2: command tx timeout [ 95.767296][ T5879] Bluetooth: hci1: command tx timeout [ 95.768224][ T52] Bluetooth: hci0: command tx timeout [ 95.779421][ T5879] Bluetooth: hci3: command tx timeout [ 95.779503][ T5879] Bluetooth: hci4: command tx timeout [ 96.001428][ T6014] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 96.087482][ T6014] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 96.105073][ T6014] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 96.342357][ T6019] netlink: 'syz.4.12': attribute type 2 has an invalid length. [ 96.387480][ T6019] netlink: 'syz.4.12': attribute type 1 has an invalid length. [ 96.440862][ T6019] netlink: 'syz.4.12': attribute type 1 has an invalid length. [ 96.479506][ T6023] netlink: 'syz.0.13': attribute type 2 has an invalid length. [ 96.512972][ T6023] netlink: 'syz.0.13': attribute type 1 has an invalid length. [ 96.583146][ T6016] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.783521][ T6038] syz.0.18 uses obsolete (PF_INET,SOCK_PACKET) [ 96.921227][ T6016] syz.1.11 (6016) used greatest stack depth: 15816 bytes left [ 97.849395][ T6063] Zero length message leads to an empty skb [ 98.174585][ T6052] can: request_module (can-proto-0) failed. [ 98.223816][ T6076] netlink: 20 bytes leftover after parsing attributes in process `syz.0.28'. [ 98.368489][ T6082] netlink: 182 bytes leftover after parsing attributes in process `syz.0.29'. [ 98.506539][ T6074] sctp: [Deprecated]: syz.1.27 (pid 6074) Use of int in maxseg socket option. [ 98.506539][ T6074] Use struct sctp_assoc_value instead [ 98.646886][ T6089] Driver unsupported XDP return value 0 on prog (id 26) dev N/A, expect packet loss! [ 98.918470][ T6101] veth0_vlan: entered allmulticast mode [ 99.372825][ T6108] validate_nla: 5 callbacks suppressed [ 99.372846][ T6108] netlink: 'syz.1.37': attribute type 29 has an invalid length. [ 99.398361][ T6108] netlink: 'syz.1.37': attribute type 29 has an invalid length. [ 99.414096][ T6108] netlink: 'syz.1.37': attribute type 29 has an invalid length. [ 99.713831][ T6124] netlink: 64 bytes leftover after parsing attributes in process `syz.1.43'. [ 99.768706][ T6127] netlink: 60 bytes leftover after parsing attributes in process `syz.1.43'. [ 99.833032][ T6129] netlink: 'syz.3.45': attribute type 2 has an invalid length. [ 99.863054][ T6129] netlink: 'syz.3.45': attribute type 1 has an invalid length. [ 99.872287][ T6129] netlink: 'syz.3.45': attribute type 1 has an invalid length. [ 100.670136][ T6146] netlink: 'syz.3.51': attribute type 29 has an invalid length. [ 100.784769][ T6146] netlink: 'syz.3.51': attribute type 29 has an invalid length. [ 100.822331][ T6150] netlink: 'syz.3.51': attribute type 29 has an invalid length. [ 101.029471][ T6159] netlink: 'syz.2.58': attribute type 2 has an invalid length. [ 102.808546][ T6220] warning: `syz.0.79' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.047555][ T6232] netlink: 20 bytes leftover after parsing attributes in process `syz.4.83'. [ 103.350795][ T6241] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 103.358537][ T6241] IPv6: NLM_F_CREATE should be set when creating new route [ 103.366166][ T6241] IPv6: NLM_F_CREATE should be set when creating new route [ 103.963722][ T6268] netlink: 20 bytes leftover after parsing attributes in process `syz.1.98'. [ 104.585017][ T6282] validate_nla: 18 callbacks suppressed [ 104.585035][ T6282] netlink: 'syz.0.101': attribute type 2 has an invalid length. [ 104.639305][ T6282] netlink: 'syz.0.101': attribute type 1 has an invalid length. [ 104.682007][ T6282] netlink: 'syz.0.101': attribute type 1 has an invalid length. [ 104.978500][ T6297] netlink: 'syz.4.108': attribute type 29 has an invalid length. [ 105.003965][ T6298] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 105.030428][ T6299] netlink: 'syz.4.108': attribute type 29 has an invalid length. [ 105.036679][ T6304] netlink: 'syz.3.110': attribute type 7 has an invalid length. [ 105.048669][ T6297] netlink: 'syz.4.108': attribute type 29 has an invalid length. [ 105.066487][ T6304] netlink: 20 bytes leftover after parsing attributes in process `syz.3.110'. [ 105.087322][ T6301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.109'. [ 105.254638][ T6298] netlink: 156 bytes leftover after parsing attributes in process `syz.2.106'. [ 105.346036][ T6313] netlink: 'syz.1.114': attribute type 10 has an invalid length. [ 105.897621][ T6313] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 105.955064][ T6313] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 106.023468][ T6313] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 106.567910][ T6333] netlink: 'syz.1.118': attribute type 2 has an invalid length. [ 106.576201][ T6333] netlink: 'syz.1.118': attribute type 1 has an invalid length. [ 106.658850][ T6337] netlink: 182 bytes leftover after parsing attributes in process `syz.3.120'. [ 106.712585][ T6340] netlink: 182 bytes leftover after parsing attributes in process `syz.3.120'. [ 108.118403][ T6367] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 108.152358][ T6367] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 108.180927][ T6367] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 108.948166][ T6406] netlink: 3 bytes leftover after parsing attributes in process `syz.1.144'. [ 109.127987][ T6412] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 109.144120][ T6410] netlink: 72 bytes leftover after parsing attributes in process `syz.0.145'. [ 109.207960][ T6412] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 109.298030][ T6412] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 109.673920][ T6430] validate_nla: 14 callbacks suppressed [ 109.673940][ T6430] netlink: 'syz.3.152': attribute type 29 has an invalid length. [ 109.726126][ T6430] netlink: 'syz.3.152': attribute type 29 has an invalid length. [ 110.002804][ T6444] netlink: 3 bytes leftover after parsing attributes in process `syz.4.159'. [ 110.099064][ T6448] netlink: 'syz.4.161': attribute type 2 has an invalid length. [ 110.119682][ T6448] netlink: 'syz.4.161': attribute type 1 has an invalid length. [ 110.137163][ T6448] netlink: 'syz.4.161': attribute type 1 has an invalid length. [ 110.272294][ T6455] netlink: 'syz.4.163': attribute type 10 has an invalid length. [ 110.330092][ T6455] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 110.388528][ T6455] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 110.446707][ T6455] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 110.866535][ T6478] netlink: 'syz.4.169': attribute type 29 has an invalid length. [ 110.894179][ T6478] netlink: 'syz.4.169': attribute type 29 has an invalid length. [ 111.215092][ T6485] netlink: 3 bytes leftover after parsing attributes in process `syz.4.172'. [ 111.309978][ T6492] netlink: 'syz.1.173': attribute type 2 has an invalid length. [ 111.317802][ T6492] netlink: 'syz.1.173': attribute type 1 has an invalid length. [ 111.576706][ T6483] netlink: 10 bytes leftover after parsing attributes in process `syz.0.171'. [ 111.926283][ T6507] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 111.981514][ T6507] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 112.019038][ T6507] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 113.025821][ T6538] netlink: 3 bytes leftover after parsing attributes in process `syz.2.189'. [ 113.124176][ T6544] FAULT_INJECTION: forcing a failure. [ 113.124176][ T6544] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 113.200208][ T6544] CPU: 0 UID: 0 PID: 6544 Comm: syz.3.191 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 113.200237][ T6544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.200254][ T6544] Call Trace: [ 113.200269][ T6544] [ 113.200277][ T6544] dump_stack_lvl+0x189/0x250 [ 113.200310][ T6544] ? __pfx____ratelimit+0x10/0x10 [ 113.200349][ T6544] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.200371][ T6544] ? __pfx__printk+0x10/0x10 [ 113.200396][ T6544] ? __might_fault+0xb0/0x130 [ 113.200432][ T6544] should_fail_ex+0x414/0x560 [ 113.200460][ T6544] _copy_from_user+0x2d/0xb0 [ 113.200482][ T6544] ___sys_recvmsg+0x12e/0x510 [ 113.200507][ T6544] ? __pfx____sys_recvmsg+0x10/0x10 [ 113.200550][ T6544] ? __fget_files+0x3a0/0x420 [ 113.200577][ T6544] __x64_sys_recvmsg+0x198/0x260 [ 113.200599][ T6544] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 113.200626][ T6544] ? __pfx_ksys_write+0x10/0x10 [ 113.200648][ T6544] ? rcu_is_watching+0x15/0xb0 [ 113.200671][ T6544] ? do_syscall_64+0xbe/0x3b0 [ 113.200701][ T6544] do_syscall_64+0xfa/0x3b0 [ 113.200747][ T6544] ? lockdep_hardirqs_on+0x9c/0x150 [ 113.200773][ T6544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.200792][ T6544] ? clear_bhb_loop+0x60/0xb0 [ 113.200816][ T6544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.200835][ T6544] RIP: 0033:0x7ff5c778ebe9 [ 113.200857][ T6544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.200874][ T6544] RSP: 002b:00007ff5c8635038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 113.200897][ T6544] RAX: ffffffffffffffda RBX: 00007ff5c79b5fa0 RCX: 00007ff5c778ebe9 [ 113.200916][ T6544] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 113.200928][ T6544] RBP: 00007ff5c8635090 R08: 0000000000000000 R09: 0000000000000000 [ 113.200939][ T6544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.200950][ T6544] R13: 00007ff5c79b6038 R14: 00007ff5c79b5fa0 R15: 00007fffbe5b38f8 [ 113.200980][ T6544] [ 113.657259][ T6561] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 113.670915][ T6561] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 113.688947][ T6561] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 114.032729][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.202'. [ 114.223670][ T6576] netlink: 3 bytes leftover after parsing attributes in process `syz.2.204'. [ 114.831045][ T6601] validate_nla: 21 callbacks suppressed [ 114.831061][ T6601] netlink: 'syz.0.213': attribute type 2 has an invalid length. [ 114.859043][ T6601] netlink: 'syz.0.213': attribute type 1 has an invalid length. [ 114.867293][ T6603] netlink: 'syz.2.214': attribute type 10 has an invalid length. [ 114.889869][ T6603] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 114.898020][ T6601] netlink: 'syz.0.213': attribute type 1 has an invalid length. [ 114.958533][ T6603] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 114.971863][ T6603] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 114.994654][ T6605] netlink: 'syz.4.215': attribute type 29 has an invalid length. [ 115.012833][ T6610] netlink: 'syz.4.215': attribute type 29 has an invalid length. [ 115.040935][ T6605] netlink: 'syz.4.215': attribute type 29 has an invalid length. [ 115.310593][ T6620] netlink: 3 bytes leftover after parsing attributes in process `syz.4.220'. [ 115.593289][ T6634] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.225'. [ 115.631605][ T6634] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.225'. [ 115.693406][ T6642] netlink: 'syz.4.226': attribute type 29 has an invalid length. [ 115.724922][ T6636] netlink: 'syz.4.226': attribute type 29 has an invalid length. [ 115.736551][ T6641] netlink: 'syz.3.227': attribute type 29 has an invalid length. [ 116.128515][ T6655] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 116.193846][ T6655] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 116.281934][ T6655] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 116.360101][ T6666] netlink: 3 bytes leftover after parsing attributes in process `syz.0.235'. [ 116.551368][ T6675] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.240'. [ 116.579976][ T6675] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.240'. [ 116.833407][ T6686] FAULT_INJECTION: forcing a failure. [ 116.833407][ T6686] name failslab, interval 1, probability 0, space 0, times 0 [ 116.877892][ T6686] CPU: 0 UID: 0 PID: 6686 Comm: syz.4.246 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 116.877919][ T6686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.877930][ T6686] Call Trace: [ 116.877937][ T6686] [ 116.877945][ T6686] dump_stack_lvl+0x189/0x250 [ 116.877972][ T6686] ? __pfx____ratelimit+0x10/0x10 [ 116.877999][ T6686] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.878021][ T6686] ? __pfx__printk+0x10/0x10 [ 116.878049][ T6686] ? perf_trace_lock+0xec/0x3b0 [ 116.878080][ T6686] should_fail_ex+0x414/0x560 [ 116.878112][ T6686] should_failslab+0xa8/0x100 [ 116.878142][ T6686] kmem_cache_alloc_noprof+0x73/0x3c0 [ 116.878167][ T6686] ? skb_clone+0x212/0x3a0 [ 116.878212][ T6686] skb_clone+0x212/0x3a0 [ 116.878238][ T6686] __netlink_deliver_tap+0x404/0x850 [ 116.878284][ T6686] ? netlink_deliver_tap+0x2e/0x1b0 [ 116.878314][ T6686] netlink_deliver_tap+0x19c/0x1b0 [ 116.878345][ T6686] netlink_dump+0x92b/0xe90 [ 116.878388][ T6686] ? __pfx_netlink_dump+0x10/0x10 [ 116.878438][ T6686] ? kmem_cache_free+0x18f/0x400 [ 116.878473][ T6686] netlink_recvmsg+0x676/0xa30 [ 116.878514][ T6686] ? __pfx_netlink_recvmsg+0x10/0x10 [ 116.878549][ T6686] ? aa_sock_msg_perm+0xf1/0x1d0 [ 116.878583][ T6686] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 116.878603][ T6686] ? security_socket_recvmsg+0x7e/0x2e0 [ 116.878626][ T6686] ? __pfx_netlink_recvmsg+0x10/0x10 [ 116.878655][ T6686] sock_recvmsg+0x22c/0x270 [ 116.878686][ T6686] ____sys_recvmsg+0x1c9/0x460 [ 116.878718][ T6686] ? __pfx_____sys_recvmsg+0x10/0x10 [ 116.878759][ T6686] ? import_iovec+0x74/0xa0 [ 116.878794][ T6686] ___sys_recvmsg+0x1b5/0x510 [ 116.878822][ T6686] ? __pfx____sys_recvmsg+0x10/0x10 [ 116.878875][ T6686] ? __fget_files+0x3a0/0x420 [ 116.878907][ T6686] __x64_sys_recvmsg+0x198/0x260 [ 116.878932][ T6686] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 116.878966][ T6686] ? __pfx_ksys_write+0x10/0x10 [ 116.878989][ T6686] ? rcu_is_watching+0x15/0xb0 [ 116.879016][ T6686] ? do_syscall_64+0xbe/0x3b0 [ 116.879050][ T6686] do_syscall_64+0xfa/0x3b0 [ 116.879076][ T6686] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.879102][ T6686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.879121][ T6686] ? clear_bhb_loop+0x60/0xb0 [ 116.879146][ T6686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.879164][ T6686] RIP: 0033:0x7fec0158ebe9 [ 116.879182][ T6686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.879198][ T6686] RSP: 002b:00007fec02407038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 116.879217][ T6686] RAX: ffffffffffffffda RBX: 00007fec017b5fa0 RCX: 00007fec0158ebe9 [ 116.879231][ T6686] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 116.879243][ T6686] RBP: 00007fec02407090 R08: 0000000000000000 R09: 0000000000000000 [ 116.879254][ T6686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.879265][ T6686] R13: 00007fec017b6038 R14: 00007fec017b5fa0 R15: 00007ffcfd2e1828 [ 116.879298][ T6686] [ 117.211951][ T6684] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.244'. [ 117.432315][ T6684] netlink: 180 bytes leftover after parsing attributes in process `syz.3.244'. [ 118.143720][ T6706] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 118.165052][ T6708] netlink: 3 bytes leftover after parsing attributes in process `syz.2.250'. [ 118.170274][ T6706] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 118.238738][ T6706] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 118.581380][ T6722] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.257'. [ 118.603235][ T6722] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.257'. [ 118.798006][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.260'. [ 118.945056][ T6746] FAULT_INJECTION: forcing a failure. [ 118.945056][ T6746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.992383][ T6749] netlink: 3 bytes leftover after parsing attributes in process `syz.3.267'. [ 119.011363][ T6746] CPU: 0 UID: 0 PID: 6746 Comm: syz.4.265 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 119.011391][ T6746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 119.011403][ T6746] Call Trace: [ 119.011411][ T6746] [ 119.011420][ T6746] dump_stack_lvl+0x189/0x250 [ 119.011454][ T6746] ? __pfx____ratelimit+0x10/0x10 [ 119.011484][ T6746] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.011509][ T6746] ? __pfx__printk+0x10/0x10 [ 119.011561][ T6746] should_fail_ex+0x414/0x560 [ 119.011607][ T6746] _copy_to_user+0x31/0xb0 [ 119.011633][ T6746] simple_read_from_buffer+0xe1/0x170 [ 119.011665][ T6746] proc_fail_nth_read+0x1b3/0x220 [ 119.011691][ T6746] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.011717][ T6746] ? rw_verify_area+0x2a6/0x4d0 [ 119.011741][ T6746] ? __lock_acquire+0xab9/0xd20 [ 119.011781][ T6746] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.011803][ T6746] vfs_read+0x200/0xa30 [ 119.011826][ T6746] ? fdget_pos+0x247/0x320 [ 119.011846][ T6746] ? __pfx___mutex_lock+0x10/0x10 [ 119.011873][ T6746] ? __pfx_vfs_read+0x10/0x10 [ 119.011898][ T6746] ? __fget_files+0x2a/0x420 [ 119.011918][ T6746] ? __fget_files+0x3a0/0x420 [ 119.011933][ T6746] ? __fget_files+0x2a/0x420 [ 119.011958][ T6746] ksys_read+0x145/0x250 [ 119.011984][ T6746] ? __pfx_ksys_read+0x10/0x10 [ 119.012005][ T6746] ? rcu_is_watching+0x15/0xb0 [ 119.012029][ T6746] ? do_syscall_64+0xbe/0x3b0 [ 119.012058][ T6746] do_syscall_64+0xfa/0x3b0 [ 119.012083][ T6746] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.012107][ T6746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.012124][ T6746] ? clear_bhb_loop+0x60/0xb0 [ 119.012147][ T6746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.012165][ T6746] RIP: 0033:0x7fec0158d5fc [ 119.012181][ T6746] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 119.012196][ T6746] RSP: 002b:00007fec02407030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 119.012216][ T6746] RAX: ffffffffffffffda RBX: 00007fec017b5fa0 RCX: 00007fec0158d5fc [ 119.012229][ T6746] RDX: 000000000000000f RSI: 00007fec024070a0 RDI: 0000000000000004 [ 119.012240][ T6746] RBP: 00007fec02407090 R08: 0000000000000000 R09: 0000000000000000 [ 119.012251][ T6746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.012262][ T6746] R13: 00007fec017b6038 R14: 00007fec017b5fa0 R15: 00007ffcfd2e1828 [ 119.012291][ T6746] [ 119.378802][ T6755] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 119.391072][ T6755] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 119.453042][ T6755] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 120.159091][ T6781] validate_nla: 42 callbacks suppressed [ 120.159110][ T6781] netlink: 'syz.4.279': attribute type 29 has an invalid length. [ 120.277047][ T6786] netlink: 'syz.4.279': attribute type 29 has an invalid length. [ 120.286606][ T6784] netlink: 'syz.2.281': attribute type 1 has an invalid length. [ 120.290071][ T6789] netlink: 'syz.0.282': attribute type 2 has an invalid length. [ 120.325283][ T6790] netlink: 'syz.4.279': attribute type 29 has an invalid length. [ 120.340163][ T6789] netlink: 'syz.0.282': attribute type 1 has an invalid length. [ 120.369229][ T6789] netlink: 'syz.0.282': attribute type 1 has an invalid length. [ 120.604620][ T6803] netlink: 'syz.0.288': attribute type 29 has an invalid length. [ 120.644777][ T6803] netlink: 'syz.0.288': attribute type 29 has an invalid length. [ 120.658771][ T6803] netlink: 'syz.0.288': attribute type 29 has an invalid length. [ 120.708051][ T6808] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 120.765161][ T6808] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 120.809345][ T6808] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 122.699289][ T6841] __nla_validate_parse: 6 callbacks suppressed [ 122.699309][ T6841] netlink: 3 bytes leftover after parsing attributes in process `syz.2.300'. [ 122.828512][ T6844] netlink: 316 bytes leftover after parsing attributes in process `syz.4.301'. [ 123.041498][ T6853] FAULT_INJECTION: forcing a failure. [ 123.041498][ T6853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.085065][ T6855] netlink: 3 bytes leftover after parsing attributes in process `syz.2.305'. [ 123.123368][ T6853] CPU: 1 UID: 0 PID: 6853 Comm: syz.0.304 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 123.123394][ T6853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.123405][ T6853] Call Trace: [ 123.123412][ T6853] [ 123.123419][ T6853] dump_stack_lvl+0x189/0x250 [ 123.123446][ T6853] ? __pfx____ratelimit+0x10/0x10 [ 123.123472][ T6853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.123494][ T6853] ? __pfx__printk+0x10/0x10 [ 123.123520][ T6853] ? __might_fault+0xb0/0x130 [ 123.123548][ T6853] ? __might_fault+0xb0/0x130 [ 123.123578][ T6853] should_fail_ex+0x414/0x560 [ 123.123608][ T6853] _copy_from_user+0x2d/0xb0 [ 123.123629][ T6853] ___sys_sendmsg+0x158/0x2a0 [ 123.123652][ T6853] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.123690][ T6853] ? __fget_files+0x2a/0x420 [ 123.123719][ T6853] ? __fget_files+0x2a/0x420 [ 123.123734][ T6853] ? __fget_files+0x3a0/0x420 [ 123.123760][ T6853] __x64_sys_sendmsg+0x19b/0x260 [ 123.123799][ T6853] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 123.123829][ T6853] ? __pfx_ksys_write+0x10/0x10 [ 123.123853][ T6853] ? rcu_is_watching+0x15/0xb0 [ 123.123878][ T6853] ? do_syscall_64+0xbe/0x3b0 [ 123.123911][ T6853] do_syscall_64+0xfa/0x3b0 [ 123.123937][ T6853] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.123962][ T6853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.123981][ T6853] ? clear_bhb_loop+0x60/0xb0 [ 123.124005][ T6853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.124023][ T6853] RIP: 0033:0x7f0c69b8ebe9 [ 123.124052][ T6853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.124067][ T6853] RSP: 002b:00007f0c6a96d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.124094][ T6853] RAX: ffffffffffffffda RBX: 00007f0c69db5fa0 RCX: 00007f0c69b8ebe9 [ 123.124107][ T6853] RDX: 0000000000000014 RSI: 0000200000000000 RDI: 0000000000000005 [ 123.124118][ T6853] RBP: 00007f0c6a96d090 R08: 0000000000000000 R09: 0000000000000000 [ 123.124129][ T6853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.124139][ T6853] R13: 00007f0c69db6038 R14: 00007f0c69db5fa0 R15: 00007ffdc8545508 [ 123.124168][ T6853] [ 123.618605][ T6863] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.309'. [ 123.637616][ T6863] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.309'. [ 123.712380][ T6869] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 123.749430][ T6869] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 123.834960][ T6869] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 124.301207][ T6891] netlink: 3 bytes leftover after parsing attributes in process `syz.0.320'. [ 124.577266][ T6901] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.322'. [ 124.818068][ T6908] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.324'. [ 124.829680][ T6908] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.324'. [ 125.233519][ T6901] netlink: 3 bytes leftover after parsing attributes in process `syz.2.322'. [ 125.358624][ T6917] FAULT_INJECTION: forcing a failure. [ 125.358624][ T6917] name failslab, interval 1, probability 0, space 0, times 0 [ 125.382840][ T6917] CPU: 0 UID: 0 PID: 6917 Comm: syz.1.327 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 125.382866][ T6917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 125.382877][ T6917] Call Trace: [ 125.382884][ T6917] [ 125.382892][ T6917] dump_stack_lvl+0x189/0x250 [ 125.382918][ T6917] ? __pfx____ratelimit+0x10/0x10 [ 125.382944][ T6917] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.382966][ T6917] ? __pfx__printk+0x10/0x10 [ 125.382998][ T6917] ? __pfx___might_resched+0x10/0x10 [ 125.383020][ T6917] should_fail_ex+0x414/0x560 [ 125.383049][ T6917] should_failslab+0xa8/0x100 [ 125.383078][ T6917] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 125.383104][ T6917] ? __alloc_skb+0x112/0x2d0 [ 125.383135][ T6917] __alloc_skb+0x112/0x2d0 [ 125.383166][ T6917] netlink_sendmsg+0x5c6/0xb30 [ 125.383203][ T6917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.383233][ T6917] ? aa_sock_msg_perm+0xf1/0x1d0 [ 125.383264][ T6917] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 125.383284][ T6917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.383311][ T6917] __sock_sendmsg+0x21c/0x270 [ 125.383338][ T6917] ____sys_sendmsg+0x505/0x830 [ 125.383363][ T6917] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.383391][ T6917] ? import_iovec+0x74/0xa0 [ 125.383416][ T6917] ___sys_sendmsg+0x21f/0x2a0 [ 125.383454][ T6917] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.383511][ T6917] ? __fget_files+0x2a/0x420 [ 125.383527][ T6917] ? __fget_files+0x3a0/0x420 [ 125.383555][ T6917] __x64_sys_sendmsg+0x19b/0x260 [ 125.383578][ T6917] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 125.383608][ T6917] ? __pfx_ksys_write+0x10/0x10 [ 125.383631][ T6917] ? rcu_is_watching+0x15/0xb0 [ 125.383655][ T6917] ? do_syscall_64+0xbe/0x3b0 [ 125.383683][ T6917] do_syscall_64+0xfa/0x3b0 [ 125.383709][ T6917] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.383734][ T6917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.383753][ T6917] ? clear_bhb_loop+0x60/0xb0 [ 125.383778][ T6917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.383797][ T6917] RIP: 0033:0x7f316fb8ebe9 [ 125.383814][ T6917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.383836][ T6917] RSP: 002b:00007f31709c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.383857][ T6917] RAX: ffffffffffffffda RBX: 00007f316fdb5fa0 RCX: 00007f316fb8ebe9 [ 125.383871][ T6917] RDX: 0000000000000014 RSI: 0000200000000000 RDI: 0000000000000005 [ 125.383883][ T6917] RBP: 00007f31709c9090 R08: 0000000000000000 R09: 0000000000000000 [ 125.383895][ T6917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.383906][ T6917] R13: 00007f316fdb6038 R14: 00007f316fdb5fa0 R15: 00007fff3d0fd9f8 [ 125.383951][ T6917] [ 125.744802][ T6923] validate_nla: 12 callbacks suppressed [ 125.744820][ T6923] netlink: 'syz.0.330': attribute type 2 has an invalid length. [ 125.761074][ T6923] netlink: 'syz.0.330': attribute type 1 has an invalid length. [ 125.768799][ T6923] netlink: 'syz.0.330': attribute type 1 has an invalid length. [ 125.799535][ T6925] netlink: 'syz.2.328': attribute type 10 has an invalid length. [ 125.813290][ T6925] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 125.824887][ T6925] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 125.844591][ T6925] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 125.985606][ T6933] netlink: 'syz.1.333': attribute type 29 has an invalid length. [ 125.994554][ T6933] netlink: 'syz.1.333': attribute type 29 has an invalid length. [ 126.003156][ T6933] netlink: 'syz.1.333': attribute type 29 has an invalid length. [ 126.313626][ T6947] netlink: 'syz.4.339': attribute type 29 has an invalid length. [ 126.337542][ T6947] netlink: 'syz.4.339': attribute type 29 has an invalid length. [ 126.365989][ T6947] netlink: 'syz.4.339': attribute type 29 has an invalid length. [ 127.374756][ T6970] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 127.475829][ T6970] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 127.520145][ T6970] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 128.193229][ T7002] __nla_validate_parse: 6 callbacks suppressed [ 128.193245][ T7002] netlink: 3 bytes leftover after parsing attributes in process `syz.2.361'. [ 128.282112][ T7004] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x32 [ 128.418778][ T7007] netlink: 40 bytes leftover after parsing attributes in process `syz.0.362'. [ 128.447731][ T7007] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 128.454470][ T7007] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.494727][ T7007] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 128.766217][ T7011] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 128.787323][ T7011] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 128.839294][ T7011] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 128.941936][ T7015] team0: Device ipvlan1 failed to register rx_handler [ 129.022254][ T7022] FAULT_INJECTION: forcing a failure. [ 129.022254][ T7022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.037292][ T7023] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.368'. [ 129.071032][ T7023] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.368'. [ 129.091776][ T7022] CPU: 0 UID: 0 PID: 7022 Comm: syz.4.369 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 129.091803][ T7022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 129.091815][ T7022] Call Trace: [ 129.091823][ T7022] [ 129.091831][ T7022] dump_stack_lvl+0x189/0x250 [ 129.091861][ T7022] ? __pfx____ratelimit+0x10/0x10 [ 129.091888][ T7022] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.091912][ T7022] ? __pfx__printk+0x10/0x10 [ 129.091941][ T7022] ? __might_fault+0xb0/0x130 [ 129.091980][ T7022] should_fail_ex+0x414/0x560 [ 129.092012][ T7022] _copy_from_iter+0x1db/0x16f0 [ 129.092037][ T7022] ? rcu_is_watching+0x15/0xb0 [ 129.092058][ T7022] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 129.092087][ T7022] ? __pfx__copy_from_iter+0x10/0x10 [ 129.092109][ T7022] ? __build_skb_around+0x257/0x3e0 [ 129.092142][ T7022] ? netlink_sendmsg+0x642/0xb30 [ 129.092177][ T7022] ? skb_put+0x11b/0x210 [ 129.092211][ T7022] netlink_sendmsg+0x6b2/0xb30 [ 129.092250][ T7022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.092283][ T7022] ? aa_sock_msg_perm+0xf1/0x1d0 [ 129.092316][ T7022] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 129.092338][ T7022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.092368][ T7022] __sock_sendmsg+0x21c/0x270 [ 129.092396][ T7022] ____sys_sendmsg+0x505/0x830 [ 129.092423][ T7022] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.092453][ T7022] ? import_iovec+0x74/0xa0 [ 129.092478][ T7022] ___sys_sendmsg+0x21f/0x2a0 [ 129.092502][ T7022] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.092560][ T7022] ? __fget_files+0x2a/0x420 [ 129.092583][ T7022] ? __fget_files+0x3a0/0x420 [ 129.092611][ T7022] __x64_sys_sendmsg+0x19b/0x260 [ 129.092635][ T7022] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 129.092684][ T7022] ? __pfx_ksys_write+0x10/0x10 [ 129.092711][ T7022] ? rcu_is_watching+0x15/0xb0 [ 129.092737][ T7022] ? do_syscall_64+0xbe/0x3b0 [ 129.092772][ T7022] do_syscall_64+0xfa/0x3b0 [ 129.092801][ T7022] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.092829][ T7022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.092850][ T7022] ? clear_bhb_loop+0x60/0xb0 [ 129.092877][ T7022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.092897][ T7022] RIP: 0033:0x7fec0158ebe9 [ 129.092915][ T7022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.092933][ T7022] RSP: 002b:00007fec02407038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.092955][ T7022] RAX: ffffffffffffffda RBX: 00007fec017b5fa0 RCX: 00007fec0158ebe9 [ 129.092970][ T7022] RDX: 0000000000000014 RSI: 0000200000000000 RDI: 0000000000000005 [ 129.092983][ T7022] RBP: 00007fec02407090 R08: 0000000000000000 R09: 0000000000000000 [ 129.092996][ T7022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.093008][ T7022] R13: 00007fec017b6038 R14: 00007fec017b5fa0 R15: 00007ffcfd2e1828 [ 129.093042][ T7022] [ 129.514232][ T7033] netlink: 3 bytes leftover after parsing attributes in process `syz.1.373'. [ 130.074714][ T7053] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 130.098017][ T7053] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 130.155846][ T7053] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 130.366010][ T7064] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.385'. [ 130.420887][ T7064] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.385'. [ 130.810429][ T7085] FAULT_INJECTION: forcing a failure. [ 130.810429][ T7085] name failslab, interval 1, probability 0, space 0, times 0 [ 130.886674][ T7085] CPU: 1 UID: 0 PID: 7085 Comm: syz.3.391 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 130.886708][ T7085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 130.886720][ T7085] Call Trace: [ 130.886731][ T7085] [ 130.886743][ T7085] dump_stack_lvl+0x189/0x250 [ 130.886780][ T7085] ? __pfx____ratelimit+0x10/0x10 [ 130.886817][ T7085] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.886851][ T7085] ? __pfx__printk+0x10/0x10 [ 130.886900][ T7085] ? __lock_acquire+0xab9/0xd20 [ 130.886982][ T7085] should_fail_ex+0x414/0x560 [ 130.887045][ T7085] should_failslab+0xa8/0x100 [ 130.887093][ T7085] kmem_cache_alloc_noprof+0x73/0x3c0 [ 130.887143][ T7085] ? skb_clone+0x212/0x3a0 [ 130.887198][ T7085] skb_clone+0x212/0x3a0 [ 130.887257][ T7085] __netlink_deliver_tap+0x404/0x850 [ 130.887367][ T7085] ? netlink_deliver_tap+0x2e/0x1b0 [ 130.887414][ T7085] netlink_deliver_tap+0x19c/0x1b0 [ 130.887459][ T7085] netlink_unicast+0x7fa/0x9e0 [ 130.887539][ T7085] ? __pfx_netlink_unicast+0x10/0x10 [ 130.887586][ T7085] ? netlink_sendmsg+0x642/0xb30 [ 130.887613][ T7085] ? skb_put+0x11b/0x210 [ 130.887672][ T7085] netlink_sendmsg+0x805/0xb30 [ 130.887756][ T7085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.887811][ T7085] ? aa_sock_msg_perm+0xf1/0x1d0 [ 130.887860][ T7085] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 130.887885][ T7085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.887929][ T7085] __sock_sendmsg+0x21c/0x270 [ 130.887981][ T7085] ____sys_sendmsg+0x505/0x830 [ 130.888040][ T7085] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.888115][ T7085] ? import_iovec+0x74/0xa0 [ 130.888166][ T7085] ___sys_sendmsg+0x21f/0x2a0 [ 130.888208][ T7085] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.888418][ T7085] ? __fget_files+0x2a/0x420 [ 130.888439][ T7085] ? __fget_files+0x3a0/0x420 [ 130.888518][ T7085] __x64_sys_sendmsg+0x19b/0x260 [ 130.888562][ T7085] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 130.888639][ T7085] ? __pfx_ksys_write+0x10/0x10 [ 130.888663][ T7085] ? rcu_is_watching+0x15/0xb0 [ 130.888716][ T7085] ? do_syscall_64+0xbe/0x3b0 [ 130.888761][ T7085] do_syscall_64+0xfa/0x3b0 [ 130.888783][ T7085] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.888809][ T7085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.888826][ T7085] ? clear_bhb_loop+0x60/0xb0 [ 130.888859][ T7085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.888876][ T7085] RIP: 0033:0x7ff5c778ebe9 [ 130.888895][ T7085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.888909][ T7085] RSP: 002b:00007ff5c8635038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.888925][ T7085] RAX: ffffffffffffffda RBX: 00007ff5c79b5fa0 RCX: 00007ff5c778ebe9 [ 130.888937][ T7085] RDX: 0000000000000014 RSI: 0000200000000000 RDI: 0000000000000005 [ 130.888947][ T7085] RBP: 00007ff5c8635090 R08: 0000000000000000 R09: 0000000000000000 [ 130.888956][ T7085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.888965][ T7085] R13: 00007ff5c79b6038 R14: 00007ff5c79b5fa0 R15: 00007fffbe5b38f8 [ 130.889038][ T7085] [ 130.938199][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.392'. [ 130.941205][ T7085] netlink: 3 bytes leftover after parsing attributes in process `syz.3.391'. [ 131.432017][ T7097] netlink: 3 bytes leftover after parsing attributes in process `syz.0.394'. [ 131.444488][ T7098] validate_nla: 31 callbacks suppressed [ 131.444521][ T7098] netlink: 'syz.4.395': attribute type 10 has an invalid length. [ 131.473060][ T7098] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 131.512311][ T7098] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 131.525987][ T7098] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 131.555010][ T7103] sit0: entered allmulticast mode [ 131.586983][ T7103] sit0: entered promiscuous mode [ 131.899629][ T7106] netlink: 'syz.3.397': attribute type 1 has an invalid length. [ 131.995283][ T7115] netlink: 'syz.4.402': attribute type 2 has an invalid length. [ 132.023394][ T7115] netlink: 'syz.4.402': attribute type 1 has an invalid length. [ 132.068772][ T7115] netlink: 'syz.4.402': attribute type 1 has an invalid length. [ 132.665035][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.671578][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.682058][ T7130] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 132.729582][ T7130] syzkaller1: linktype set to 776 [ 132.811746][ T7135] FAULT_INJECTION: forcing a failure. [ 132.811746][ T7135] name failslab, interval 1, probability 0, space 0, times 0 [ 132.850319][ T7136] netlink: 'syz.2.410': attribute type 1 has an invalid length. [ 132.852275][ T7135] CPU: 0 UID: 0 PID: 7135 Comm: syz.3.409 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 132.852304][ T7135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 132.852317][ T7135] Call Trace: [ 132.852327][ T7135] [ 132.852340][ T7135] dump_stack_lvl+0x189/0x250 [ 132.852378][ T7135] ? __pfx____ratelimit+0x10/0x10 [ 132.852416][ T7135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.852450][ T7135] ? __pfx__printk+0x10/0x10 [ 132.852519][ T7135] ? __pfx___might_resched+0x10/0x10 [ 132.852542][ T7135] ? fs_reclaim_acquire+0x7d/0x100 [ 132.852604][ T7135] should_fail_ex+0x414/0x560 [ 132.852665][ T7135] should_failslab+0xa8/0x100 [ 132.852711][ T7135] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 132.852748][ T7135] ? __alloc_skb+0x112/0x2d0 [ 132.852804][ T7135] __alloc_skb+0x112/0x2d0 [ 132.852865][ T7135] netlink_ack+0x146/0xa50 [ 132.852894][ T7135] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 132.852922][ T7135] ? ref_tracker_free+0x63a/0x7d0 [ 132.852961][ T7135] ? __asan_memcpy+0x40/0x70 [ 132.852991][ T7135] ? __pfx_ref_tracker_free+0x10/0x10 [ 132.853023][ T7135] ? __skb_clone+0x63/0x7a0 [ 132.853100][ T7135] netlink_rcv_skb+0x28c/0x470 [ 132.853144][ T7135] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 132.853191][ T7135] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 132.853290][ T7135] ? netlink_deliver_tap+0x2e/0x1b0 [ 132.853370][ T7135] netlink_unicast+0x82c/0x9e0 [ 132.853449][ T7135] ? __pfx_netlink_unicast+0x10/0x10 [ 132.853496][ T7135] ? netlink_sendmsg+0x642/0xb30 [ 132.853524][ T7135] ? skb_put+0x11b/0x210 [ 132.853582][ T7135] netlink_sendmsg+0x805/0xb30 [ 132.853666][ T7135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.853721][ T7135] ? aa_sock_msg_perm+0xf1/0x1d0 [ 132.853771][ T7135] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 132.853797][ T7135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.853840][ T7135] __sock_sendmsg+0x21c/0x270 [ 132.853892][ T7135] ____sys_sendmsg+0x505/0x830 [ 132.853951][ T7135] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.854031][ T7135] ? import_iovec+0x74/0xa0 [ 132.854083][ T7135] ___sys_sendmsg+0x21f/0x2a0 [ 132.854127][ T7135] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.854333][ T7135] ? __fget_files+0x2a/0x420 [ 132.854353][ T7135] ? __fget_files+0x3a0/0x420 [ 132.854432][ T7135] __x64_sys_sendmsg+0x19b/0x260 [ 132.854475][ T7135] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 132.854494][ T7135] ? perf_trace_preemptirq_template+0xa3/0x340 [ 132.854575][ T7135] ? __pfx_ksys_write+0x10/0x10 [ 132.854601][ T7135] ? rcu_is_watching+0x15/0xb0 [ 132.854656][ T7135] ? do_syscall_64+0xbe/0x3b0 [ 132.854714][ T7135] do_syscall_64+0xfa/0x3b0 [ 132.854744][ T7135] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.854776][ T7135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.854799][ T7135] ? clear_bhb_loop+0x60/0xb0 [ 132.854843][ T7135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.854865][ T7135] RIP: 0033:0x7ff5c778ebe9 [ 132.854889][ T7135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.854906][ T7135] RSP: 002b:00007ff5c8635038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.854929][ T7135] RAX: ffffffffffffffda RBX: 00007ff5c79b5fa0 RCX: 00007ff5c778ebe9 [ 132.854944][ T7135] RDX: 0000000000000014 RSI: 0000200000000000 RDI: 0000000000000005 [ 132.854957][ T7135] RBP: 00007ff5c8635090 R08: 0000000000000000 R09: 0000000000000000 [ 132.854969][ T7135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.854981][ T7135] R13: 00007ff5c79b6038 R14: 00007ff5c79b5fa0 R15: 00007fffbe5b38f8 [ 132.855083][ T7135] [ 133.444129][ T7143] netlink: 'syz.3.412': attribute type 10 has an invalid length. [ 133.454449][ T7143] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 133.479787][ T7143] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 133.498790][ T7143] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 133.612724][ T7152] __nla_validate_parse: 3 callbacks suppressed [ 133.612743][ T7152] netlink: 3 bytes leftover after parsing attributes in process `syz.4.414'. [ 133.707031][ T7153] netlink: 'syz.2.416': attribute type 2 has an invalid length. [ 133.738078][ T7153] netlink: 'syz.2.416': attribute type 1 has an invalid length. [ 133.745774][ T7153] netlink: 'syz.2.416': attribute type 1 has an invalid length. [ 133.968204][ T7154] netlink: 1042 bytes leftover after parsing attributes in process `syz.1.415'. [ 133.999369][ T7149] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.415'. [ 134.025422][ T7166] netlink: 340 bytes leftover after parsing attributes in process `syz.0.420'. [ 134.068598][ T7166] netlink: 48 bytes leftover after parsing attributes in process `syz.0.420'. [ 134.251663][ T7166] netlink: 3 bytes leftover after parsing attributes in process `syz.0.420'. [ 134.501005][ T7183] netlink: 3 bytes leftover after parsing attributes in process `syz.3.426'. [ 134.755865][ T7190] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 134.786970][ T7190] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 134.832633][ T7190] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 135.336162][ T7210] netlink: 3 bytes leftover after parsing attributes in process `syz.1.436'. [ 135.506516][ T7217] netlink: 3 bytes leftover after parsing attributes in process `syz.0.439'. [ 135.795363][ T7229] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 135.824956][ T7229] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 135.869649][ T7229] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 135.880155][ T7233] netlink: 3 bytes leftover after parsing attributes in process `syz.3.447'. [ 135.921384][ T7233] FAULT_INJECTION: forcing a failure. [ 135.921384][ T7233] name failslab, interval 1, probability 0, space 0, times 0 [ 135.950634][ T7233] CPU: 0 UID: 0 PID: 7233 Comm: syz.3.447 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 135.950659][ T7233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 135.950679][ T7233] Call Trace: [ 135.950686][ T7233] [ 135.950694][ T7233] dump_stack_lvl+0x189/0x250 [ 135.950720][ T7233] ? __pfx____ratelimit+0x10/0x10 [ 135.950747][ T7233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.950769][ T7233] ? __pfx__printk+0x10/0x10 [ 135.950791][ T7233] ? netlink_unicast+0x82c/0x9e0 [ 135.950815][ T7233] ? ___sys_sendmsg+0x21f/0x2a0 [ 135.950832][ T7233] ? do_syscall_64+0xfa/0x3b0 [ 135.950868][ T7233] should_fail_ex+0x414/0x560 [ 135.950897][ T7233] should_failslab+0xa8/0x100 [ 135.950926][ T7233] kmem_cache_alloc_noprof+0x73/0x3c0 [ 135.950950][ T7233] ? skb_clone+0x212/0x3a0 [ 135.950973][ T7233] skb_clone+0x212/0x3a0 [ 135.950996][ T7233] __netlink_deliver_tap+0x404/0x850 [ 135.951034][ T7233] ? netlink_deliver_tap+0x2e/0x1b0 [ 135.951061][ T7233] netlink_deliver_tap+0x19c/0x1b0 [ 135.951088][ T7233] netlink_sendskb+0x68/0x140 [ 135.951112][ T7233] netlink_unicast+0x397/0x9e0 [ 135.951131][ T7233] ? __asan_memcpy+0x40/0x70 [ 135.951154][ T7233] ? __pfx_netlink_unicast+0x10/0x10 [ 135.951181][ T7233] netlink_rcv_skb+0x28c/0x470 [ 135.951203][ T7233] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 135.951226][ T7233] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 135.951255][ T7233] ? netlink_deliver_tap+0x2e/0x1b0 [ 135.951283][ T7233] netlink_unicast+0x82c/0x9e0 [ 135.951308][ T7233] ? __pfx_netlink_unicast+0x10/0x10 [ 135.951329][ T7233] ? netlink_sendmsg+0x642/0xb30 [ 135.951349][ T7233] ? skb_put+0x11b/0x210 [ 135.951374][ T7233] netlink_sendmsg+0x805/0xb30 [ 135.951403][ T7233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.951447][ T7233] ? aa_sock_msg_perm+0xf1/0x1d0 [ 135.951473][ T7233] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 135.951490][ T7233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.951514][ T7233] __sock_sendmsg+0x21c/0x270 [ 135.951537][ T7233] ____sys_sendmsg+0x505/0x830 [ 135.951557][ T7233] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.951581][ T7233] ? import_iovec+0x74/0xa0 [ 135.951601][ T7233] ___sys_sendmsg+0x21f/0x2a0 [ 135.951619][ T7233] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.951652][ T7233] ? __fget_files+0x2a/0x420 [ 135.951687][ T7233] ? __fget_files+0x2a/0x420 [ 135.951700][ T7233] ? __fget_files+0x3a0/0x420 [ 135.951722][ T7233] __x64_sys_sendmsg+0x19b/0x260 [ 135.951740][ T7233] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 135.951764][ T7233] ? __pfx_ksys_write+0x10/0x10 [ 135.951783][ T7233] ? rcu_is_watching+0x15/0xb0 [ 135.951803][ T7233] ? do_syscall_64+0xbe/0x3b0 [ 135.951828][ T7233] do_syscall_64+0xfa/0x3b0 [ 135.951849][ T7233] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.951870][ T7233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.951886][ T7233] ? clear_bhb_loop+0x60/0xb0 [ 135.951908][ T7233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.951923][ T7233] RIP: 0033:0x7ff5c778ebe9 [ 135.951937][ T7233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.951950][ T7233] RSP: 002b:00007ff5c8635038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.951967][ T7233] RAX: ffffffffffffffda RBX: 00007ff5c79b5fa0 RCX: 00007ff5c778ebe9 [ 135.951978][ T7233] RDX: 0000000000000014 RSI: 0000200000000000 RDI: 0000000000000005 [ 135.951988][ T7233] RBP: 00007ff5c8635090 R08: 0000000000000000 R09: 0000000000000000 [ 135.951997][ T7233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.952017][ T7233] R13: 00007ff5c79b6038 R14: 00007ff5c79b5fa0 R15: 00007fffbe5b38f8 [ 135.952039][ T7233] [ 136.757374][ T7255] validate_nla: 13 callbacks suppressed [ 136.757396][ T7255] netlink: 'syz.0.453': attribute type 29 has an invalid length. [ 136.807330][ T7255] netlink: 'syz.0.453': attribute type 29 has an invalid length. [ 136.835918][ T7255] netlink: 'syz.0.453': attribute type 29 has an invalid length. [ 137.020229][ T7266] netlink: 'syz.3.458': attribute type 2 has an invalid length. [ 137.046982][ T7266] netlink: 'syz.3.458': attribute type 1 has an invalid length. [ 137.054648][ T7266] netlink: 'syz.3.458': attribute type 1 has an invalid length. [ 137.063578][ T7270] netlink: 'syz.4.460': attribute type 10 has an invalid length. [ 137.194583][ T7270] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 137.512194][ T7283] netlink: 'syz.4.462': attribute type 10 has an invalid length. [ 137.546852][ T7283] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 137.590007][ T7283] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 137.637130][ T7283] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 137.991165][ T7295] FAULT_INJECTION: forcing a failure. [ 137.991165][ T7295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.114309][ T7295] CPU: 0 UID: 0 PID: 7295 Comm: syz.2.467 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 138.114336][ T7295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 138.114347][ T7295] Call Trace: [ 138.114355][ T7295] [ 138.114364][ T7295] dump_stack_lvl+0x189/0x250 [ 138.114391][ T7295] ? __pfx____ratelimit+0x10/0x10 [ 138.114418][ T7295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.114440][ T7295] ? __pfx__printk+0x10/0x10 [ 138.114471][ T7295] ? __might_fault+0xb0/0x130 [ 138.114505][ T7295] should_fail_ex+0x414/0x560 [ 138.114536][ T7295] _copy_to_user+0x31/0xb0 [ 138.114560][ T7295] simple_read_from_buffer+0xe1/0x170 [ 138.114594][ T7295] proc_fail_nth_read+0x1b3/0x220 [ 138.114619][ T7295] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.114645][ T7295] ? rw_verify_area+0x2a6/0x4d0 [ 138.114669][ T7295] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.114692][ T7295] vfs_read+0x200/0xa30 [ 138.114715][ T7295] ? fdget_pos+0x247/0x320 [ 138.114737][ T7295] ? __pfx___mutex_lock+0x10/0x10 [ 138.114765][ T7295] ? __pfx_vfs_read+0x10/0x10 [ 138.114791][ T7295] ? __fget_files+0x2a/0x420 [ 138.114813][ T7295] ? __fget_files+0x3a0/0x420 [ 138.114828][ T7295] ? __fget_files+0x2a/0x420 [ 138.114855][ T7295] ksys_read+0x145/0x250 [ 138.114883][ T7295] ? __pfx_ksys_read+0x10/0x10 [ 138.114904][ T7295] ? rcu_is_watching+0x15/0xb0 [ 138.114929][ T7295] ? do_syscall_64+0xbe/0x3b0 [ 138.114961][ T7295] do_syscall_64+0xfa/0x3b0 [ 138.114986][ T7295] ? lockdep_hardirqs_on+0x9c/0x150 [ 138.115010][ T7295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.115028][ T7295] ? clear_bhb_loop+0x60/0xb0 [ 138.115052][ T7295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.115070][ T7295] RIP: 0033:0x7fe60cd8d5fc [ 138.115086][ T7295] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 138.115101][ T7295] RSP: 002b:00007fe60dbb7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 138.115120][ T7295] RAX: ffffffffffffffda RBX: 00007fe60cfb5fa0 RCX: 00007fe60cd8d5fc [ 138.115133][ T7295] RDX: 000000000000000f RSI: 00007fe60dbb70a0 RDI: 0000000000000006 [ 138.115144][ T7295] RBP: 00007fe60dbb7090 R08: 0000000000000000 R09: 0000000000000000 [ 138.115155][ T7295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.115166][ T7295] R13: 00007fe60cfb6038 R14: 00007fe60cfb5fa0 R15: 00007ffdf0626b08 [ 138.115205][ T7295] [ 138.852857][ T7312] netlink: 'syz.4.475': attribute type 2 has an invalid length. [ 138.861567][ T7312] netlink: 'syz.4.475': attribute type 1 has an invalid length. [ 139.171352][ T7320] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 139.197191][ T7320] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 139.247484][ T7320] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 139.645805][ T7334] __nla_validate_parse: 8 callbacks suppressed [ 139.645822][ T7334] netlink: 3 bytes leftover after parsing attributes in process `syz.4.482'. [ 140.301205][ T7352] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 140.340600][ T7352] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 140.366521][ T7350] netlink: 3 bytes leftover after parsing attributes in process `syz.0.489'. [ 140.386486][ T7352] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 141.360233][ T7377] netlink: 10 bytes leftover after parsing attributes in process `syz.3.498'. [ 141.650459][ T7391] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 141.685604][ T7391] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 141.738428][ T7391] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 141.839689][ T7400] FAULT_INJECTION: forcing a failure. [ 141.839689][ T7400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.853718][ T7400] CPU: 1 UID: 0 PID: 7400 Comm: syz.2.505 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 141.853747][ T7400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 141.853759][ T7400] Call Trace: [ 141.853767][ T7400] [ 141.853776][ T7400] dump_stack_lvl+0x189/0x250 [ 141.853817][ T7400] ? __pfx____ratelimit+0x10/0x10 [ 141.853847][ T7400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.853873][ T7400] ? __pfx__printk+0x10/0x10 [ 141.853903][ T7400] ? __might_fault+0xb0/0x130 [ 141.853936][ T7400] ? __might_fault+0xb0/0x130 [ 141.853973][ T7400] should_fail_ex+0x414/0x560 [ 141.854008][ T7400] _copy_from_user+0x2d/0xb0 [ 141.854033][ T7400] ___sys_recvmsg+0x12e/0x510 [ 141.854065][ T7400] ? __pfx____sys_recvmsg+0x10/0x10 [ 141.854120][ T7400] ? __fget_files+0x3a0/0x420 [ 141.854154][ T7400] __x64_sys_recvmsg+0x198/0x260 [ 141.854181][ T7400] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 141.854217][ T7400] ? __pfx_ksys_write+0x10/0x10 [ 141.854242][ T7400] ? rcu_is_watching+0x15/0xb0 [ 141.854270][ T7400] ? do_syscall_64+0xbe/0x3b0 [ 141.854306][ T7400] do_syscall_64+0xfa/0x3b0 [ 141.854334][ T7400] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.854361][ T7400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.854382][ T7400] ? clear_bhb_loop+0x60/0xb0 [ 141.854409][ T7400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.854429][ T7400] RIP: 0033:0x7fe60cd8ebe9 [ 141.854447][ T7400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.854465][ T7400] RSP: 002b:00007fe60db75038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 141.854486][ T7400] RAX: ffffffffffffffda RBX: 00007fe60cfb6180 RCX: 00007fe60cd8ebe9 [ 141.854501][ T7400] RDX: 0000000000000000 RSI: 0000200000000c40 RDI: 0000000000000008 [ 141.854514][ T7400] RBP: 00007fe60db75090 R08: 0000000000000000 R09: 0000000000000000 [ 141.854526][ T7400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.854538][ T7400] R13: 00007fe60cfb6218 R14: 00007fe60cfb6180 R15: 00007ffdf0626b08 [ 141.854576][ T7400] [ 142.594025][ T7419] netlink: 3 bytes leftover after parsing attributes in process `syz.3.513'. [ 142.723139][ T7424] validate_nla: 13 callbacks suppressed [ 142.723159][ T7424] netlink: 'syz.4.515': attribute type 2 has an invalid length. [ 142.803119][ T7424] netlink: 'syz.4.515': attribute type 1 has an invalid length. [ 142.853954][ T7424] netlink: 'syz.4.515': attribute type 1 has an invalid length. [ 142.933079][ T7431] netlink: 'syz.1.517': attribute type 29 has an invalid length. [ 142.954185][ T7431] netlink: 'syz.1.517': attribute type 29 has an invalid length. [ 142.978055][ T7431] netlink: 'syz.1.517': attribute type 29 has an invalid length. [ 143.238911][ T7440] netlink: 'syz.4.520': attribute type 10 has an invalid length. [ 143.302281][ T7440] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 143.377526][ T7440] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 143.420256][ T7440] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 143.749109][ T7461] netlink: 24 bytes leftover after parsing attributes in process `syz.4.529'. [ 143.772491][ T7461] netlink: 16 bytes leftover after parsing attributes in process `syz.4.529'. [ 143.800782][ T7463] FAULT_INJECTION: forcing a failure. [ 143.800782][ T7463] name failslab, interval 1, probability 0, space 0, times 0 [ 143.814272][ T7463] CPU: 1 UID: 0 PID: 7463 Comm: syz.3.528 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 143.814297][ T7463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 143.814307][ T7463] Call Trace: [ 143.814315][ T7463] [ 143.814323][ T7463] dump_stack_lvl+0x189/0x250 [ 143.814350][ T7463] ? __pfx____ratelimit+0x10/0x10 [ 143.814393][ T7463] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.814418][ T7463] ? __pfx__printk+0x10/0x10 [ 143.814453][ T7463] ? __pfx___might_resched+0x10/0x10 [ 143.814478][ T7463] should_fail_ex+0x414/0x560 [ 143.814510][ T7463] should_failslab+0xa8/0x100 [ 143.814542][ T7463] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 143.814570][ T7463] ? __alloc_skb+0x112/0x2d0 [ 143.814614][ T7463] __alloc_skb+0x112/0x2d0 [ 143.814648][ T7463] netlink_dump+0x1b7/0xe90 [ 143.814678][ T7463] ? perf_trace_preemptirq_template+0x280/0x340 [ 143.814707][ T7463] ? kasan_quarantine_put+0x3d/0x220 [ 143.814733][ T7463] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 143.814761][ T7463] ? __pfx_netlink_dump+0x10/0x10 [ 143.814811][ T7463] ? kmem_cache_free+0x18f/0x400 [ 143.814844][ T7463] netlink_recvmsg+0x676/0xa30 [ 143.814885][ T7463] ? __pfx_netlink_recvmsg+0x10/0x10 [ 143.814920][ T7463] ? aa_sock_msg_perm+0xf1/0x1d0 [ 143.814953][ T7463] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 143.814972][ T7463] ? security_socket_recvmsg+0x7e/0x2e0 [ 143.814995][ T7463] ? __pfx_netlink_recvmsg+0x10/0x10 [ 143.815023][ T7463] sock_recvmsg+0x22c/0x270 [ 143.815054][ T7463] ____sys_recvmsg+0x1c9/0x460 [ 143.815087][ T7463] ? __pfx_____sys_recvmsg+0x10/0x10 [ 143.815128][ T7463] ? import_iovec+0x74/0xa0 [ 143.815155][ T7463] ___sys_recvmsg+0x1b5/0x510 [ 143.815182][ T7463] ? __pfx____sys_recvmsg+0x10/0x10 [ 143.815234][ T7463] ? __fget_files+0x3a0/0x420 [ 143.815266][ T7463] __x64_sys_recvmsg+0x198/0x260 [ 143.815291][ T7463] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 143.815324][ T7463] ? __pfx_ksys_write+0x10/0x10 [ 143.815367][ T7463] ? do_syscall_64+0xbe/0x3b0 [ 143.815398][ T7463] do_syscall_64+0xfa/0x3b0 [ 143.815426][ T7463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.815460][ T7463] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 143.815480][ T7463] ? clear_bhb_loop+0x60/0xb0 [ 143.815505][ T7463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.815523][ T7463] RIP: 0033:0x7ff5c778ebe9 [ 143.815540][ T7463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.815556][ T7463] RSP: 002b:00007ff5c8635038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 143.815587][ T7463] RAX: ffffffffffffffda RBX: 00007ff5c79b5fa0 RCX: 00007ff5c778ebe9 [ 143.815601][ T7463] RDX: 0000000000000000 RSI: 0000200000000c40 RDI: 0000000000000008 [ 143.815613][ T7463] RBP: 00007ff5c8635090 R08: 0000000000000000 R09: 0000000000000000 [ 143.815624][ T7463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.815635][ T7463] R13: 00007ff5c79b6038 R14: 00007ff5c79b5fa0 R15: 00007fffbe5b38f8 [ 143.815670][ T7463] [ 144.153034][ T7461] netlink: 'syz.4.529': attribute type 26 has an invalid length. [ 144.253447][ T7467] netlink: 'syz.2.531': attribute type 2 has an invalid length. [ 144.268712][ T7467] netlink: 'syz.2.531': attribute type 1 has an invalid length. [ 144.547396][ T7473] netlink: 3 bytes leftover after parsing attributes in process `syz.3.533'. [ 144.956848][ T7483] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 145.224244][ T7488] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 145.248316][ T7488] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 145.274563][ T7488] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 145.547893][ T7496] netlink: 3 bytes leftover after parsing attributes in process `syz.0.540'. [ 146.081961][ T7521] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 146.128010][ T7521] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 146.175708][ T7521] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 146.283131][ T7530] ip6tnl0 speed is unknown, defaulting to 1000 [ 146.293755][ T7530] ip6tnl0 speed is unknown, defaulting to 1000 [ 146.325188][ T7530] ip6tnl0 speed is unknown, defaulting to 1000 [ 146.533070][ T7536] netlink: 3 bytes leftover after parsing attributes in process `syz.0.557'. [ 146.787719][ T7530] infiniband syz1: set active [ 146.792653][ T7530] infiniband syz1: added ip6tnl0 [ 146.799912][ T5954] ip6tnl0 speed is unknown, defaulting to 1000 [ 147.005192][ T7530] RDS/IB: syz1: added [ 147.028829][ T7530] smc: adding ib device syz1 with port count 1 [ 147.066895][ T7530] smc: ib device syz1 port 1 has pnetid [ 147.150495][ T5954] ip6tnl0 speed is unknown, defaulting to 1000 [ 147.178476][ T7530] ip6tnl0 speed is unknown, defaulting to 1000 [ 147.277966][ T7562] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 147.311774][ T7562] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 147.332676][ T7562] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 147.562107][ T7576] netlink: 3 bytes leftover after parsing attributes in process `syz.3.571'. [ 147.747670][ T7579] FAULT_INJECTION: forcing a failure. [ 147.747670][ T7579] name failslab, interval 1, probability 0, space 0, times 0 [ 147.769214][ T7583] validate_nla: 15 callbacks suppressed [ 147.769232][ T7583] netlink: 'syz.0.574': attribute type 2 has an invalid length. [ 147.788172][ T7583] netlink: 'syz.0.574': attribute type 1 has an invalid length. [ 147.795959][ T7583] netlink: 'syz.0.574': attribute type 1 has an invalid length. [ 147.796008][ T7579] CPU: 1 UID: 0 PID: 7579 Comm: syz.3.573 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 147.796035][ T7579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 147.796048][ T7579] Call Trace: [ 147.796057][ T7579] [ 147.796068][ T7579] dump_stack_lvl+0x189/0x250 [ 147.796101][ T7579] ? __pfx____ratelimit+0x10/0x10 [ 147.796129][ T7579] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.796161][ T7579] ? __pfx__printk+0x10/0x10 [ 147.796211][ T7579] should_fail_ex+0x414/0x560 [ 147.796246][ T7579] should_failslab+0xa8/0x100 [ 147.796279][ T7579] kmem_cache_alloc_noprof+0x73/0x3c0 [ 147.796307][ T7579] ? skb_clone+0x212/0x3a0 [ 147.796353][ T7579] skb_clone+0x212/0x3a0 [ 147.796383][ T7579] __netlink_deliver_tap+0x404/0x850 [ 147.796431][ T7579] ? netlink_deliver_tap+0x2e/0x1b0 [ 147.796466][ T7579] netlink_deliver_tap+0x19c/0x1b0 [ 147.796500][ T7579] netlink_dump+0x92b/0xe90 [ 147.796548][ T7579] ? __pfx_netlink_dump+0x10/0x10 [ 147.796604][ T7579] ? kmem_cache_free+0x18f/0x400 [ 147.796658][ T7579] netlink_recvmsg+0x676/0xa30 [ 147.796733][ T7579] ? __pfx_netlink_recvmsg+0x10/0x10 [ 147.796777][ T7579] ? aa_sock_msg_perm+0xf1/0x1d0 [ 147.796820][ T7579] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 147.796846][ T7579] ? security_socket_recvmsg+0x7e/0x2e0 [ 147.796874][ T7579] ? __pfx_netlink_recvmsg+0x10/0x10 [ 147.796911][ T7579] sock_recvmsg+0x22c/0x270 [ 147.796951][ T7579] ____sys_recvmsg+0x1c9/0x460 [ 147.796991][ T7579] ? __pfx_____sys_recvmsg+0x10/0x10 [ 147.797043][ T7579] ? import_iovec+0x74/0xa0 [ 147.797076][ T7579] ___sys_recvmsg+0x1b5/0x510 [ 147.797111][ T7579] ? __pfx____sys_recvmsg+0x10/0x10 [ 147.797146][ T7579] ? lock_acquire+0x175/0x360 [ 147.797216][ T7579] ? __fget_files+0x3a0/0x420 [ 147.797255][ T7579] __x64_sys_recvmsg+0x198/0x260 [ 147.797286][ T7579] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 147.797328][ T7579] ? __pfx_ksys_write+0x10/0x10 [ 147.797371][ T7579] ? do_syscall_64+0xbe/0x3b0 [ 147.797412][ T7579] do_syscall_64+0xfa/0x3b0 [ 147.797450][ T7579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.797474][ T7579] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 147.797498][ T7579] ? clear_bhb_loop+0x60/0xb0 [ 147.797531][ T7579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.797555][ T7579] RIP: 0033:0x7ff5c778ebe9 [ 147.797576][ T7579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.797597][ T7579] RSP: 002b:00007ff5c8635038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 147.797621][ T7579] RAX: ffffffffffffffda RBX: 00007ff5c79b5fa0 RCX: 00007ff5c778ebe9 [ 147.797639][ T7579] RDX: 0000000000000000 RSI: 0000200000000c40 RDI: 0000000000000008 [ 147.797655][ T7579] RBP: 00007ff5c8635090 R08: 0000000000000000 R09: 0000000000000000 [ 147.797670][ T7579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.797684][ T7579] R13: 00007ff5c79b6038 R14: 00007ff5c79b5fa0 R15: 00007fffbe5b38f8 [ 147.797728][ T7579] [ 147.854035][ T7530] ip6tnl0 speed is unknown, defaulting to 1000 [ 148.568886][ T7592] netlink: 3 bytes leftover after parsing attributes in process `syz.0.578'. [ 148.885145][ T7606] netlink: 'syz.1.583': attribute type 10 has an invalid length. [ 148.889138][ T7530] ip6tnl0 speed is unknown, defaulting to 1000 [ 148.909353][ T7606] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 148.958669][ T7606] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 149.017441][ T7606] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 149.301737][ T7623] netlink: 'syz.1.588': attribute type 2 has an invalid length. [ 149.314791][ T7623] netlink: 'syz.1.588': attribute type 1 has an invalid length. [ 149.316674][ T7619] netlink: 'syz.3.587': attribute type 29 has an invalid length. [ 149.326832][ T7623] netlink: 'syz.1.588': attribute type 1 has an invalid length. [ 149.360026][ T7621] netlink: 'syz.3.587': attribute type 29 has an invalid length. [ 150.334178][ T7625] netlink: 'syz.3.587': attribute type 29 has an invalid length. [ 150.343110][ T7530] ip6tnl0 speed is unknown, defaulting to 1000 [ 150.642349][ T7646] FAULT_INJECTION: forcing a failure. [ 150.642349][ T7646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.671924][ T7646] CPU: 1 UID: 0 PID: 7646 Comm: syz.1.596 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 150.671950][ T7646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 150.671961][ T7646] Call Trace: [ 150.671968][ T7646] [ 150.671976][ T7646] dump_stack_lvl+0x189/0x250 [ 150.672027][ T7646] ? __pfx____ratelimit+0x10/0x10 [ 150.672055][ T7646] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.672079][ T7646] ? __pfx__printk+0x10/0x10 [ 150.672120][ T7646] should_fail_ex+0x414/0x560 [ 150.672161][ T7646] _copy_to_user+0x31/0xb0 [ 150.672196][ T7646] simple_read_from_buffer+0xe1/0x170 [ 150.672228][ T7646] proc_fail_nth_read+0x1b3/0x220 [ 150.672253][ T7646] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.672277][ T7646] ? rw_verify_area+0x2a6/0x4d0 [ 150.672300][ T7646] ? __lock_acquire+0xab9/0xd20 [ 150.672325][ T7646] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.672347][ T7646] vfs_read+0x200/0xa30 [ 150.672370][ T7646] ? fdget_pos+0x247/0x320 [ 150.672390][ T7646] ? __pfx___mutex_lock+0x10/0x10 [ 150.672416][ T7646] ? __pfx_vfs_read+0x10/0x10 [ 150.672441][ T7646] ? __fget_files+0x2a/0x420 [ 150.672461][ T7646] ? __fget_files+0x3a0/0x420 [ 150.672476][ T7646] ? __fget_files+0x2a/0x420 [ 150.672501][ T7646] ksys_read+0x145/0x250 [ 150.672528][ T7646] ? __pfx_ksys_read+0x10/0x10 [ 150.672557][ T7646] ? do_syscall_64+0xbe/0x3b0 [ 150.672587][ T7646] do_syscall_64+0xfa/0x3b0 [ 150.672614][ T7646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.672631][ T7646] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 150.672649][ T7646] ? clear_bhb_loop+0x60/0xb0 [ 150.672671][ T7646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.672689][ T7646] RIP: 0033:0x7f316fb8d5fc [ 150.672705][ T7646] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 150.672720][ T7646] RSP: 002b:00007f31709c9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 150.672738][ T7646] RAX: ffffffffffffffda RBX: 00007f316fdb5fa0 RCX: 00007f316fb8d5fc [ 150.672752][ T7646] RDX: 000000000000000f RSI: 00007f31709c90a0 RDI: 0000000000000009 [ 150.672763][ T7646] RBP: 00007f31709c9090 R08: 0000000000000000 R09: 0000000000000000 [ 150.672773][ T7646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.672784][ T7646] R13: 00007f316fdb6038 R14: 00007f316fdb5fa0 R15: 00007fff3d0fd9f8 [ 150.672814][ T7646] [ 151.158899][ T7654] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 151.204205][ T7654] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 151.249720][ T7654] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 151.418319][ T7666] netlink: 3 bytes leftover after parsing attributes in process `syz.4.602'. [ 151.461602][ T7530] ip6tnl0 speed is unknown, defaulting to 1000 [ 151.526886][ T7671] netlink: 72 bytes leftover after parsing attributes in process `syz.1.603'. [ 151.632611][ T7675] netlink: 124 bytes leftover after parsing attributes in process `syz.1.603'. [ 152.567752][ T7703] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 152.590183][ T7703] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 152.647158][ T7703] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 152.676102][ T7706] netlink: 3 bytes leftover after parsing attributes in process `syz.1.617'. [ 152.923078][ T7724] netlink: 3 bytes leftover after parsing attributes in process `syz.1.621'. [ 153.248902][ T7740] netlink: 60 bytes leftover after parsing attributes in process `syz.2.629'. [ 153.279303][ T7739] validate_nla: 11 callbacks suppressed [ 153.279321][ T7739] netlink: 'syz.3.628': attribute type 2 has an invalid length. [ 153.283167][ T7740] netlink: 60 bytes leftover after parsing attributes in process `syz.2.629'. [ 153.285002][ T7739] netlink: 'syz.3.628': attribute type 1 has an invalid length. [ 153.318701][ T7740] netlink: 60 bytes leftover after parsing attributes in process `syz.2.629'. [ 153.328495][ T7739] netlink: 'syz.3.628': attribute type 1 has an invalid length. [ 153.352284][ T7742] netlink: 'syz.1.630': attribute type 10 has an invalid length. [ 153.360963][ T7742] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 153.372296][ T7742] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 153.389558][ T7742] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 153.504947][ T7748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.633'. [ 153.678129][ T7758] netlink: 3 bytes leftover after parsing attributes in process `syz.2.636'. [ 154.316923][ T7775] netlink: 'syz.0.642': attribute type 2 has an invalid length. [ 154.324775][ T7775] netlink: 'syz.0.642': attribute type 1 has an invalid length. [ 154.355651][ T7775] netlink: 'syz.0.642': attribute type 1 has an invalid length. [ 154.747986][ T7783] netlink: 'syz.3.645': attribute type 10 has an invalid length. [ 154.769170][ T7783] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 154.818966][ T7783] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 154.856721][ T7783] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 155.712921][ T7814] netlink: 'syz.1.657': attribute type 2 has an invalid length. [ 155.729044][ T7814] netlink: 'syz.1.657': attribute type 1 has an invalid length. [ 155.864643][ T7821] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 155.915529][ T7821] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 155.961122][ T7821] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 156.709291][ T7873] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 156.721082][ T7873] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 156.737723][ T7873] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 156.869267][ T7874] can: request_module (can-proto-0) failed. [ 156.932520][ T7879] __nla_validate_parse: 7 callbacks suppressed [ 156.932538][ T7879] netlink: 24 bytes leftover after parsing attributes in process `syz.2.680'. [ 156.990947][ T7879] netlink: 'syz.2.680': attribute type 11 has an invalid length. [ 158.214224][ T7921] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 158.303428][ T7921] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 158.410127][ T7921] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 158.653829][ T7940] validate_nla: 13 callbacks suppressed [ 158.653846][ T7940] netlink: 'syz.3.701': attribute type 2 has an invalid length. [ 158.672835][ T7936] netlink: 3 bytes leftover after parsing attributes in process `syz.2.699'. [ 158.724714][ T7940] netlink: 'syz.3.701': attribute type 1 has an invalid length. [ 158.752226][ T7940] netlink: 'syz.3.701': attribute type 1 has an invalid length. [ 158.762393][ T7944] netlink: 3 bytes leftover after parsing attributes in process `syz.2.703'. [ 158.815744][ T7946] netlink: 16 bytes leftover after parsing attributes in process `syz.0.702'. [ 159.212883][ T7964] netlink: 'syz.2.712': attribute type 10 has an invalid length. [ 159.259633][ T7964] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 159.283900][ T7964] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 159.300244][ T7969] netlink: 'syz.3.715': attribute type 2 has an invalid length. [ 159.300263][ T7969] netlink: 'syz.3.715': attribute type 1 has an invalid length. [ 159.300277][ T7969] netlink: 'syz.3.715': attribute type 1 has an invalid length. [ 159.326055][ T7964] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 159.341839][ T7972] netlink: 3 bytes leftover after parsing attributes in process `syz.0.714'. [ 159.736085][ T7985] netlink: 3 bytes leftover after parsing attributes in process `syz.2.719'. [ 160.678524][ T8007] netlink: 'syz.1.727': attribute type 2 has an invalid length. [ 160.686437][ T8007] netlink: 'syz.1.727': attribute type 1 has an invalid length. [ 160.694087][ T8007] netlink: 'syz.1.727': attribute type 1 has an invalid length. [ 160.751111][ T8014] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 160.792196][ T8014] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 160.877459][ T8014] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 160.915646][ T8025] bpf: Bad value for 'uid' [ 161.049032][ T8027] netlink: 3 bytes leftover after parsing attributes in process `syz.1.734'. [ 161.714627][ T8050] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.743'. [ 161.867203][ T8055] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 161.878387][ T8055] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 161.934022][ T8055] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 162.119411][ T8069] FAULT_INJECTION: forcing a failure. [ 162.119411][ T8069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.206535][ T8069] CPU: 1 UID: 0 PID: 8069 Comm: syz.3.750 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 162.206567][ T8069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 162.206581][ T8069] Call Trace: [ 162.206597][ T8069] [ 162.206607][ T8069] dump_stack_lvl+0x189/0x250 [ 162.206639][ T8069] ? __pfx____ratelimit+0x10/0x10 [ 162.206670][ T8069] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.206697][ T8069] ? __pfx__printk+0x10/0x10 [ 162.206729][ T8069] ? __might_fault+0xb0/0x130 [ 162.206773][ T8069] should_fail_ex+0x414/0x560 [ 162.206808][ T8069] _copy_from_user+0x2d/0xb0 [ 162.206835][ T8069] __sys_bpf+0x1ed/0x870 [ 162.206868][ T8069] ? __pfx___sys_bpf+0x10/0x10 [ 162.206916][ T8069] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 162.206950][ T8069] ? __pfx_ksys_write+0x10/0x10 [ 162.206978][ T8069] ? rcu_is_watching+0x15/0xb0 [ 162.207021][ T8069] __x64_sys_bpf+0x7c/0x90 [ 162.207048][ T8069] do_syscall_64+0xfa/0x3b0 [ 162.207077][ T8069] ? lockdep_hardirqs_on+0x9c/0x150 [ 162.207105][ T8069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.207126][ T8069] ? clear_bhb_loop+0x60/0xb0 [ 162.207152][ T8069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.207173][ T8069] RIP: 0033:0x7ff5c778ebe9 [ 162.207191][ T8069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.207209][ T8069] RSP: 002b:00007ff5c8635038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 162.207231][ T8069] RAX: ffffffffffffffda RBX: 00007ff5c79b5fa0 RCX: 00007ff5c778ebe9 [ 162.207246][ T8069] RDX: 0000000000000010 RSI: 00002000000021c0 RDI: 000000000000000a [ 162.207260][ T8069] RBP: 00007ff5c8635090 R08: 0000000000000000 R09: 0000000000000000 [ 162.207273][ T8069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.207285][ T8069] R13: 00007ff5c79b6038 R14: 00007ff5c79b5fa0 R15: 00007fffbe5b38f8 [ 162.207318][ T8069] [ 162.770831][ T8089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.833486][ T8089] netlink: 3 bytes leftover after parsing attributes in process `syz.0.758'. [ 162.890339][ T8091] netlink: 2 bytes leftover after parsing attributes in process `syz.2.757'. [ 163.089676][ T8101] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 163.102468][ T8101] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 163.115527][ T8101] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 163.660573][ T8116] FAULT_INJECTION: forcing a failure. [ 163.660573][ T8116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.718804][ T8116] CPU: 1 UID: 0 PID: 8116 Comm: syz.3.768 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 163.718831][ T8116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 163.718842][ T8116] Call Trace: [ 163.718849][ T8116] [ 163.718856][ T8116] dump_stack_lvl+0x189/0x250 [ 163.718883][ T8116] ? __pfx____ratelimit+0x10/0x10 [ 163.718909][ T8116] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.718931][ T8116] ? __pfx__printk+0x10/0x10 [ 163.718970][ T8116] should_fail_ex+0x414/0x560 [ 163.718999][ T8116] _copy_to_user+0x31/0xb0 [ 163.719022][ T8116] bpf_prog_test_run_raw_tp+0x503/0x6a0 [ 163.719055][ T8116] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 163.719082][ T8116] ? __fget_files+0x2a/0x420 [ 163.719104][ T8116] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 163.719131][ T8116] bpf_prog_test_run+0x2c7/0x340 [ 163.719177][ T8116] __sys_bpf+0x581/0x870 [ 163.719205][ T8116] ? __pfx___sys_bpf+0x10/0x10 [ 163.719246][ T8116] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 163.719275][ T8116] ? __pfx_ksys_write+0x10/0x10 [ 163.719299][ T8116] ? rcu_is_watching+0x15/0xb0 [ 163.719327][ T8116] __x64_sys_bpf+0x7c/0x90 [ 163.719351][ T8116] do_syscall_64+0xfa/0x3b0 [ 163.719377][ T8116] ? lockdep_hardirqs_on+0x9c/0x150 [ 163.719403][ T8116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.719429][ T8116] ? clear_bhb_loop+0x60/0xb0 [ 163.719460][ T8116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.719479][ T8116] RIP: 0033:0x7ff5c778ebe9 [ 163.719496][ T8116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.719512][ T8116] RSP: 002b:00007ff5c8635038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 163.719532][ T8116] RAX: ffffffffffffffda RBX: 00007ff5c79b5fa0 RCX: 00007ff5c778ebe9 [ 163.719547][ T8116] RDX: 0000000000000010 RSI: 00002000000021c0 RDI: 000000000000000a [ 163.719559][ T8116] RBP: 00007ff5c8635090 R08: 0000000000000000 R09: 0000000000000000 [ 163.719571][ T8116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.719582][ T8116] R13: 00007ff5c79b6038 R14: 00007ff5c79b5fa0 R15: 00007fffbe5b38f8 [ 163.719613][ T8116] [ 164.137339][ T8126] validate_nla: 13 callbacks suppressed [ 164.137355][ T8126] netlink: 'syz.3.772': attribute type 2 has an invalid length. [ 164.151103][ T8126] netlink: 'syz.3.772': attribute type 1 has an invalid length. [ 164.159040][ T8126] netlink: 'syz.3.772': attribute type 1 has an invalid length. [ 164.464899][ T8149] netlink: 'syz.3.779': attribute type 21 has an invalid length. [ 164.481727][ T8149] netlink: 156 bytes leftover after parsing attributes in process `syz.3.779'. [ 164.505581][ T8150] netlink: 'syz.0.780': attribute type 10 has an invalid length. [ 164.515655][ T8150] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 164.546070][ T8150] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 164.577058][ T8149] netlink: 'syz.3.779': attribute type 10 has an invalid length. [ 164.584872][ T8149] netlink: 40 bytes leftover after parsing attributes in process `syz.3.779'. [ 164.586767][ T8152] netlink: 3 bytes leftover after parsing attributes in process `syz.4.781'. [ 164.603349][ T8150] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 164.622780][ T8149] ipvlan1: entered promiscuous mode [ 164.634362][ T8149] ipvlan1: entered allmulticast mode [ 164.646283][ T8149] veth0_vlan: entered allmulticast mode [ 164.669536][ T8149] bridge0: port 3(ipvlan1) entered blocking state [ 164.677074][ T8149] bridge0: port 3(ipvlan1) entered disabled state [ 164.691341][ T8149] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 164.981544][ T8170] FAULT_INJECTION: forcing a failure. [ 164.981544][ T8170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.998194][ T8170] CPU: 1 UID: 0 PID: 8170 Comm: syz.0.788 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 164.998219][ T8170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 164.998230][ T8170] Call Trace: [ 164.998237][ T8170] [ 164.998245][ T8170] dump_stack_lvl+0x189/0x250 [ 164.998271][ T8170] ? __pfx____ratelimit+0x10/0x10 [ 164.998296][ T8170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.998318][ T8170] ? __pfx__printk+0x10/0x10 [ 164.998356][ T8170] should_fail_ex+0x414/0x560 [ 164.998385][ T8170] _copy_to_user+0x31/0xb0 [ 164.998409][ T8170] simple_read_from_buffer+0xe1/0x170 [ 164.998440][ T8170] proc_fail_nth_read+0x1b3/0x220 [ 164.998464][ T8170] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 164.998488][ T8170] ? rw_verify_area+0x2a6/0x4d0 [ 164.998510][ T8170] ? __lock_acquire+0xab9/0xd20 [ 164.998541][ T8170] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 164.998563][ T8170] vfs_read+0x200/0xa30 [ 164.998585][ T8170] ? fdget_pos+0x247/0x320 [ 164.998605][ T8170] ? __pfx___mutex_lock+0x10/0x10 [ 164.998631][ T8170] ? __pfx_vfs_read+0x10/0x10 [ 164.998656][ T8170] ? __fget_files+0x2a/0x420 [ 164.998676][ T8170] ? __fget_files+0x3a0/0x420 [ 164.998691][ T8170] ? __fget_files+0x2a/0x420 [ 164.998716][ T8170] ksys_read+0x145/0x250 [ 164.998742][ T8170] ? __pfx_ksys_read+0x10/0x10 [ 164.998763][ T8170] ? rcu_is_watching+0x15/0xb0 [ 164.998787][ T8170] ? do_syscall_64+0xbe/0x3b0 [ 164.998817][ T8170] do_syscall_64+0xfa/0x3b0 [ 164.998841][ T8170] ? lockdep_hardirqs_on+0x9c/0x150 [ 164.998865][ T8170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.998882][ T8170] ? clear_bhb_loop+0x60/0xb0 [ 164.998905][ T8170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.998922][ T8170] RIP: 0033:0x7f0c69b8d5fc [ 164.998938][ T8170] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 164.998953][ T8170] RSP: 002b:00007f0c6a96d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 164.998972][ T8170] RAX: ffffffffffffffda RBX: 00007f0c69db5fa0 RCX: 00007f0c69b8d5fc [ 164.998985][ T8170] RDX: 000000000000000f RSI: 00007f0c6a96d0a0 RDI: 0000000000000006 [ 164.998996][ T8170] RBP: 00007f0c6a96d090 R08: 0000000000000000 R09: 0000000000000000 [ 164.999007][ T8170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.999017][ T8170] R13: 00007f0c69db6038 R14: 00007f0c69db5fa0 R15: 00007ffdc8545508 [ 164.999046][ T8170] [ 165.375483][ T8176] netlink: 'syz.4.789': attribute type 2 has an invalid length. [ 165.402276][ T8176] netlink: 'syz.4.789': attribute type 1 has an invalid length. [ 165.445882][ T8176] netlink: 'syz.4.789': attribute type 1 has an invalid length. [ 165.482034][ T8181] netlink: 22 bytes leftover after parsing attributes in process `syz.3.791'. [ 165.508939][ T8183] netlink: 14 bytes leftover after parsing attributes in process `syz.0.792'. [ 165.714461][ T8195] netlink: 'syz.3.796': attribute type 10 has an invalid length. [ 165.733942][ T8192] netlink: 40 bytes leftover after parsing attributes in process `syz.4.794'. [ 165.738767][ T8195] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 165.805435][ T8195] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 165.830426][ T8195] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 166.093282][ T8208] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.801'. [ 166.167035][ T8216] netlink: 3 bytes leftover after parsing attributes in process `syz.3.802'. [ 166.893216][ T8246] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 166.915604][ T8246] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 166.932429][ T8246] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 167.189870][ T52] Bluetooth: hci0: SCO packet for unknown connection handle 2559 [ 167.628630][ T8268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.078498][ T8287] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 168.117189][ T8287] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 168.145203][ T8287] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 168.752715][ T8320] __nla_validate_parse: 1 callbacks suppressed [ 168.752733][ T8320] netlink: 182 bytes leftover after parsing attributes in process `syz.3.841'. [ 168.840984][ T8322] team0: Device ipvlan1 failed to register rx_handler [ 169.247506][ T8341] validate_nla: 16 callbacks suppressed [ 169.247539][ T8341] netlink: 'syz.2.847': attribute type 10 has an invalid length. [ 169.293866][ T8341] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 169.345938][ T8341] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 169.392727][ T8341] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 169.464667][ T8356] netlink: 'syz.3.849': attribute type 10 has an invalid length. [ 169.483277][ T8346] netlink: 'syz.3.849': attribute type 10 has an invalid length. [ 169.512344][ T8356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.525387][ T8356] team0: Port device bond0 added [ 169.862898][ T8367] netlink: 'syz.3.856': attribute type 2 has an invalid length. [ 169.875465][ T8370] netlink: 'syz.1.858': attribute type 1 has an invalid length. [ 169.918435][ T8367] netlink: 'syz.3.856': attribute type 1 has an invalid length. [ 169.926147][ T8367] netlink: 'syz.3.856': attribute type 1 has an invalid length. [ 170.052803][ T8377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.069213][ T8377] netlink: 'syz.2.860': attribute type 10 has an invalid length. [ 170.193205][ T8385] FAULT_INJECTION: forcing a failure. [ 170.193205][ T8385] name failslab, interval 1, probability 0, space 0, times 0 [ 170.216120][ T8385] CPU: 0 UID: 0 PID: 8385 Comm: syz.4.864 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 170.216146][ T8385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 170.216158][ T8385] Call Trace: [ 170.216165][ T8385] [ 170.216172][ T8385] dump_stack_lvl+0x189/0x250 [ 170.216198][ T8385] ? __pfx____ratelimit+0x10/0x10 [ 170.216225][ T8385] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.216248][ T8385] ? __pfx__printk+0x10/0x10 [ 170.216279][ T8385] ? __pfx___might_resched+0x10/0x10 [ 170.216296][ T8385] ? fs_reclaim_acquire+0x7d/0x100 [ 170.216331][ T8385] should_fail_ex+0x414/0x560 [ 170.216360][ T8385] should_failslab+0xa8/0x100 [ 170.216390][ T8385] kmem_cache_alloc_noprof+0x73/0x3c0 [ 170.216414][ T8385] ? getname_flags+0xb8/0x540 [ 170.216437][ T8385] getname_flags+0xb8/0x540 [ 170.216459][ T8385] do_sys_openat2+0xbc/0x1c0 [ 170.216482][ T8385] ? __pfx_do_sys_openat2+0x10/0x10 [ 170.216500][ T8385] ? perf_trace_preemptirq_template+0xa3/0x340 [ 170.216530][ T8385] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 170.216558][ T8385] ? __pfx_ksys_write+0x10/0x10 [ 170.216587][ T8385] __x64_sys_openat+0x138/0x170 [ 170.216613][ T8385] do_syscall_64+0xfa/0x3b0 [ 170.216642][ T8385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.216659][ T8385] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 170.216678][ T8385] ? clear_bhb_loop+0x60/0xb0 [ 170.216701][ T8385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.216719][ T8385] RIP: 0033:0x7fec0158d550 [ 170.216736][ T8385] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 170.216752][ T8385] RSP: 002b:00007fec023e5f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 170.216771][ T8385] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fec0158d550 [ 170.216784][ T8385] RDX: 0000000000000002 RSI: 00007fec023e5fa0 RDI: 00000000ffffff9c [ 170.216797][ T8385] RBP: 00007fec023e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 170.216807][ T8385] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 170.216818][ T8385] R13: 00007fec017b6128 R14: 00007fec017b6090 R15: 00007ffcfd2e1828 [ 170.216848][ T8385] [ 170.468352][ T8384] netlink: 324 bytes leftover after parsing attributes in process `syz.0.862'. [ 170.521317][ T8382] ip6tnl0 speed is unknown, defaulting to 1000 [ 170.538154][ T8392] netlink: 'syz.2.865': attribute type 10 has an invalid length. [ 170.546179][ T8392] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 170.567563][ T8392] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 170.620950][ T8392] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 171.097280][ T8402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.868'. [ 171.448650][ T8412] netlink: 'syz.1.873': attribute type 2 has an invalid length. [ 172.019241][ T8430] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 172.041421][ T8430] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 172.054110][ T8430] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 172.230760][ T8440] FAULT_INJECTION: forcing a failure. [ 172.230760][ T8440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.294749][ T8440] CPU: 1 UID: 0 PID: 8440 Comm: syz.3.882 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 172.294774][ T8440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 172.294793][ T8440] Call Trace: [ 172.294799][ T8440] [ 172.294807][ T8440] dump_stack_lvl+0x189/0x250 [ 172.294834][ T8440] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.294859][ T8440] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.294896][ T8440] should_fail_ex+0x414/0x560 [ 172.294925][ T8440] strncpy_from_user+0x36/0x290 [ 172.294951][ T8440] getname_flags+0xf3/0x540 [ 172.294973][ T8440] do_sys_openat2+0xbc/0x1c0 [ 172.294995][ T8440] ? __pfx_do_sys_openat2+0x10/0x10 [ 172.295012][ T8440] ? irqentry_exit+0x74/0x90 [ 172.295046][ T8440] __x64_sys_openat+0x138/0x170 [ 172.295071][ T8440] do_syscall_64+0xfa/0x3b0 [ 172.295097][ T8440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.295114][ T8440] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 172.295132][ T8440] ? clear_bhb_loop+0x60/0xb0 [ 172.295154][ T8440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.295171][ T8440] RIP: 0033:0x7ff5c778d550 [ 172.295186][ T8440] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 172.295202][ T8440] RSP: 002b:00007ff5c8613f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 172.295220][ T8440] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007ff5c778d550 [ 172.295233][ T8440] RDX: 0000000000000002 RSI: 00007ff5c8613fa0 RDI: 00000000ffffff9c [ 172.295244][ T8440] RBP: 00007ff5c8613fa0 R08: 0000000000000000 R09: 0000000000000000 [ 172.295255][ T8440] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 172.295265][ T8440] R13: 00007ff5c79b6128 R14: 00007ff5c79b6090 R15: 00007fffbe5b38f8 [ 172.295293][ T8440] [ 172.893165][ T8457] ip6tnl0 speed is unknown, defaulting to 1000 [ 174.141728][ T8481] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 174.202816][ T8481] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 174.240922][ T8481] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 174.313400][ T8486] validate_nla: 7 callbacks suppressed [ 174.313419][ T8486] netlink: 'syz.2.898': attribute type 2 has an invalid length. [ 174.364879][ T8486] netlink: 'syz.2.898': attribute type 1 has an invalid length. [ 174.406481][ T8486] netlink: 'syz.2.898': attribute type 1 has an invalid length. [ 175.249681][ T8511] FAULT_INJECTION: forcing a failure. [ 175.249681][ T8511] name failslab, interval 1, probability 0, space 0, times 0 [ 175.293135][ T8511] CPU: 0 UID: 0 PID: 8511 Comm: syz.1.905 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 175.293166][ T8511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 175.293179][ T8511] Call Trace: [ 175.293187][ T8511] [ 175.293196][ T8511] dump_stack_lvl+0x189/0x250 [ 175.293225][ T8511] ? __pfx____ratelimit+0x10/0x10 [ 175.293254][ T8511] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.293280][ T8511] ? __pfx__printk+0x10/0x10 [ 175.293314][ T8511] ? __pfx___might_resched+0x10/0x10 [ 175.293339][ T8511] should_fail_ex+0x414/0x560 [ 175.293372][ T8511] should_failslab+0xa8/0x100 [ 175.293416][ T8511] kmem_cache_alloc_noprof+0x73/0x3c0 [ 175.293465][ T8511] ? alloc_empty_file+0x55/0x1d0 [ 175.293491][ T8511] alloc_empty_file+0x55/0x1d0 [ 175.293513][ T8511] path_openat+0x107/0x3830 [ 175.293536][ T8511] ? arch_stack_walk+0xfc/0x150 [ 175.293574][ T8511] ? stack_trace_save+0x9c/0xe0 [ 175.293601][ T8511] ? stack_depot_save_flags+0x40/0x860 [ 175.293629][ T8511] ? __lock_acquire+0xab9/0xd20 [ 175.293675][ T8511] ? kasan_save_track+0x4f/0x80 [ 175.293696][ T8511] ? kasan_save_track+0x3e/0x80 [ 175.293717][ T8511] ? __kasan_slab_alloc+0x6c/0x80 [ 175.293742][ T8511] ? getname_flags+0xb8/0x540 [ 175.293759][ T8511] ? __pfx_path_openat+0x10/0x10 [ 175.293797][ T8511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.293839][ T8511] do_filp_open+0x1fa/0x410 [ 175.293862][ T8511] ? __lock_acquire+0xab9/0xd20 [ 175.293893][ T8511] ? __pfx_do_filp_open+0x10/0x10 [ 175.293940][ T8511] ? _raw_spin_unlock+0x28/0x50 [ 175.293964][ T8511] ? alloc_fd+0x64c/0x6c0 [ 175.294005][ T8511] do_sys_openat2+0x121/0x1c0 [ 175.294030][ T8511] ? __pfx_do_sys_openat2+0x10/0x10 [ 175.294049][ T8511] ? perf_trace_preemptirq_template+0xa3/0x340 [ 175.294081][ T8511] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 175.294110][ T8511] ? __pfx_ksys_write+0x10/0x10 [ 175.294140][ T8511] __x64_sys_openat+0x138/0x170 [ 175.294168][ T8511] do_syscall_64+0xfa/0x3b0 [ 175.294194][ T8511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.294210][ T8511] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 175.294226][ T8511] ? clear_bhb_loop+0x60/0xb0 [ 175.294249][ T8511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.294269][ T8511] RIP: 0033:0x7f316fb8d550 [ 175.294287][ T8511] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 175.294304][ T8511] RSP: 002b:00007f31709a7f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 175.294326][ T8511] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f316fb8d550 [ 175.294340][ T8511] RDX: 0000000000000002 RSI: 00007f31709a7fa0 RDI: 00000000ffffff9c [ 175.294353][ T8511] RBP: 00007f31709a7fa0 R08: 0000000000000000 R09: 0000000000000000 [ 175.294365][ T8511] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 175.294377][ T8511] R13: 00007f316fdb6128 R14: 00007f316fdb6090 R15: 00007fff3d0fd9f8 [ 175.294408][ T8511] [ 175.808304][ T8519] netlink: 'syz.2.910': attribute type 10 has an invalid length. [ 175.816616][ T8519] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 175.853230][ T8521] netlink: 132 bytes leftover after parsing attributes in process `syz.4.911'. [ 175.875476][ T8519] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 175.914493][ T8519] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 176.050991][ T8527] netlink: 'syz.0.912': attribute type 2 has an invalid length. [ 176.059198][ T8527] netlink: 'syz.0.912': attribute type 1 has an invalid length. [ 176.069097][ T8527] netlink: 'syz.0.912': attribute type 1 has an invalid length. [ 176.120904][ T8528] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.913'. [ 176.343375][ T8529] ip6tnl0 speed is unknown, defaulting to 1000 [ 176.713962][ T8549] netlink: 60 bytes leftover after parsing attributes in process `syz.2.922'. [ 176.724221][ T8549] netlink: 60 bytes leftover after parsing attributes in process `syz.2.922'. [ 176.734407][ T8551] netlink: 'syz.2.922': attribute type 2 has an invalid length. [ 176.764188][ T8551] netlink: 'syz.2.922': attribute type 8 has an invalid length. [ 176.792227][ T8551] netlink: 132 bytes leftover after parsing attributes in process `syz.2.922'. [ 176.910507][ T8556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.923'. [ 176.936780][ T8555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.924'. [ 177.195490][ T8566] netlink: 'syz.2.926': attribute type 2 has an invalid length. [ 177.240465][ T8569] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 177.270010][ T8569] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 177.292008][ T8567] FAULT_INJECTION: forcing a failure. [ 177.292008][ T8567] name failslab, interval 1, probability 0, space 0, times 0 [ 177.305027][ T8569] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 177.305054][ T8567] CPU: 0 UID: 0 PID: 8567 Comm: syz.1.927 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 177.305081][ T8567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 177.305095][ T8567] Call Trace: [ 177.305103][ T8567] [ 177.305111][ T8567] dump_stack_lvl+0x189/0x250 [ 177.305139][ T8567] ? __pfx____ratelimit+0x10/0x10 [ 177.305170][ T8567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.305197][ T8567] ? __pfx__printk+0x10/0x10 [ 177.305233][ T8567] ? __pfx___might_resched+0x10/0x10 [ 177.305254][ T8567] ? fs_reclaim_acquire+0x7d/0x100 [ 177.305305][ T8567] should_fail_ex+0x414/0x560 [ 177.305337][ T8567] should_failslab+0xa8/0x100 [ 177.305369][ T8567] kmem_cache_alloc_noprof+0x73/0x3c0 [ 177.305396][ T8567] ? security_file_alloc+0x34/0x330 [ 177.305428][ T8567] security_file_alloc+0x34/0x330 [ 177.305456][ T8567] init_file+0x93/0x2f0 [ 177.305481][ T8567] alloc_empty_file+0x6e/0x1d0 [ 177.305504][ T8567] path_openat+0x107/0x3830 [ 177.305527][ T8567] ? arch_stack_walk+0xfc/0x150 [ 177.305564][ T8567] ? stack_trace_save+0x9c/0xe0 [ 177.305592][ T8567] ? stack_depot_save_flags+0x40/0x860 [ 177.305627][ T8567] ? kasan_save_track+0x4f/0x80 [ 177.305651][ T8567] ? kasan_save_track+0x3e/0x80 [ 177.305675][ T8567] ? __kasan_slab_alloc+0x6c/0x80 [ 177.305701][ T8567] ? getname_flags+0xb8/0x540 [ 177.305737][ T8567] ? __pfx_path_openat+0x10/0x10 [ 177.305762][ T8567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.305805][ T8567] do_filp_open+0x1fa/0x410 [ 177.305830][ T8567] ? __lock_acquire+0xab9/0xd20 [ 177.305864][ T8567] ? __pfx_do_filp_open+0x10/0x10 [ 177.305923][ T8567] ? _raw_spin_unlock+0x28/0x50 [ 177.305989][ T8567] ? alloc_fd+0x64c/0x6c0 [ 177.306031][ T8567] do_sys_openat2+0x121/0x1c0 [ 177.306074][ T8567] ? __pfx_do_sys_openat2+0x10/0x10 [ 177.306095][ T8567] ? perf_trace_preemptirq_template+0xa3/0x340 [ 177.306130][ T8567] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 177.306180][ T8567] __x64_sys_openat+0x138/0x170 [ 177.306208][ T8567] do_syscall_64+0xfa/0x3b0 [ 177.306239][ T8567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.306258][ T8567] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 177.306279][ T8567] ? clear_bhb_loop+0x60/0xb0 [ 177.306320][ T8567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.306340][ T8567] RIP: 0033:0x7f316fb8d550 [ 177.306361][ T8567] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 177.306379][ T8567] RSP: 002b:00007f31709a7f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 177.306403][ T8567] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f316fb8d550 [ 177.306419][ T8567] RDX: 0000000000000002 RSI: 00007f31709a7fa0 RDI: 00000000ffffff9c [ 177.306434][ T8567] RBP: 00007f31709a7fa0 R08: 0000000000000000 R09: 0000000000000000 [ 177.306458][ T8567] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 177.306471][ T8567] R13: 00007f316fdb6128 R14: 00007f316fdb6090 R15: 00007fff3d0fd9f8 [ 177.306503][ T8567] [ 177.765137][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.932'. [ 178.039801][ T8594] netlink: 56 bytes leftover after parsing attributes in process `syz.4.935'. [ 178.186852][ T8600] netlink: 2 bytes leftover after parsing attributes in process `syz.1.939'. [ 178.516961][ T8613] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 178.528758][ T8613] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 178.543715][ T8613] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 178.991495][ T8626] FAULT_INJECTION: forcing a failure. [ 178.991495][ T8626] name failslab, interval 1, probability 0, space 0, times 0 [ 179.005140][ T8626] CPU: 0 UID: 0 PID: 8626 Comm: syz.2.949 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 179.005166][ T8626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 179.005178][ T8626] Call Trace: [ 179.005185][ T8626] [ 179.005193][ T8626] dump_stack_lvl+0x189/0x250 [ 179.005221][ T8626] ? __pfx____ratelimit+0x10/0x10 [ 179.005246][ T8626] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.005269][ T8626] ? __pfx__printk+0x10/0x10 [ 179.005297][ T8626] ? __pfx_proc_self_get_link+0x10/0x10 [ 179.005318][ T8626] ? __task_pid_nr_ns+0x28/0x470 [ 179.005351][ T8626] should_fail_ex+0x414/0x560 [ 179.005380][ T8626] should_failslab+0xa8/0x100 [ 179.005409][ T8626] __kmalloc_cache_noprof+0x70/0x3d0 [ 179.005434][ T8626] ? proc_self_get_link+0xe6/0x180 [ 179.005452][ T8626] ? __task_pid_nr_ns+0x398/0x470 [ 179.005479][ T8626] proc_self_get_link+0xe6/0x180 [ 179.005500][ T8626] ? __pfx_proc_self_get_link+0x10/0x10 [ 179.005522][ T8626] pick_link+0x679/0xe80 [ 179.005549][ T8626] step_into+0xc5d/0xf30 [ 179.005569][ T8626] ? read_word_at_a_time+0x16/0x20 [ 179.005602][ T8626] ? __pfx_step_into+0x10/0x10 [ 179.005620][ T8626] ? lookup_fast+0x168/0x5b0 [ 179.005640][ T8626] ? inode_permission+0x149/0x470 [ 179.005656][ T8626] ? __asan_memcpy+0x40/0x70 [ 179.005680][ T8626] link_path_walk+0x77b/0xea0 [ 179.005715][ T8626] path_openat+0x28c/0x3830 [ 179.005736][ T8626] ? arch_stack_walk+0xfc/0x150 [ 179.005785][ T8626] ? stack_depot_save_flags+0x40/0x860 [ 179.005809][ T8626] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.005846][ T8626] ? __pfx_path_openat+0x10/0x10 [ 179.005869][ T8626] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 179.005913][ T8626] do_filp_open+0x1fa/0x410 [ 179.005939][ T8626] ? __pfx_do_filp_open+0x10/0x10 [ 179.005984][ T8626] ? _raw_spin_unlock+0x28/0x50 [ 179.006006][ T8626] ? alloc_fd+0x64c/0x6c0 [ 179.006045][ T8626] do_sys_openat2+0x121/0x1c0 [ 179.006068][ T8626] ? __pfx_do_sys_openat2+0x10/0x10 [ 179.006103][ T8626] __x64_sys_openat+0x138/0x170 [ 179.006129][ T8626] do_syscall_64+0xfa/0x3b0 [ 179.006154][ T8626] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.006178][ T8626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.006197][ T8626] ? clear_bhb_loop+0x60/0xb0 [ 179.006218][ T8626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.006236][ T8626] RIP: 0033:0x7fe60cd8d550 [ 179.006253][ T8626] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 179.006268][ T8626] RSP: 002b:00007fe60db95f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 179.006288][ T8626] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fe60cd8d550 [ 179.006301][ T8626] RDX: 0000000000000002 RSI: 00007fe60db95fa0 RDI: 00000000ffffff9c [ 179.006312][ T8626] RBP: 00007fe60db95fa0 R08: 0000000000000000 R09: 0000000000000000 [ 179.006324][ T8626] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 179.006335][ T8626] R13: 00007fe60cfb6128 R14: 00007fe60cfb6090 R15: 00007ffdf0626b08 [ 179.006364][ T8626] [ 179.591830][ T8630] : entered promiscuous mode [ 179.613696][ T8640] validate_nla: 7 callbacks suppressed [ 179.613715][ T8640] netlink: 'syz.0.954': attribute type 2 has an invalid length. [ 179.627235][ T8640] netlink: 'syz.0.954': attribute type 1 has an invalid length. [ 179.634888][ T8640] netlink: 'syz.0.954': attribute type 1 has an invalid length. [ 180.024511][ T8662] netlink: 'syz.1.963': attribute type 10 has an invalid length. [ 180.034925][ T8661] netlink: 'syz.2.961': attribute type 3 has an invalid length. [ 180.048605][ T8662] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 180.068138][ T8662] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 180.083822][ T8661] netlink: 'syz.2.961': attribute type 2 has an invalid length. [ 180.094107][ T8662] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 180.323506][ T8679] veth0_to_bond: default FDB implementation only supports local addresses [ 180.387777][ T8683] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 180.397666][ T8688] netlink: 'syz.3.966': attribute type 10 has an invalid length. [ 180.517785][ T8694] netlink: 'syz.3.970': attribute type 2 has an invalid length. [ 180.549039][ T8694] netlink: 'syz.3.970': attribute type 1 has an invalid length. [ 180.574824][ T8694] netlink: 'syz.3.970': attribute type 1 has an invalid length. [ 180.795268][ T8711] FAULT_INJECTION: forcing a failure. [ 180.795268][ T8711] name failslab, interval 1, probability 0, space 0, times 0 [ 180.827708][ T8711] CPU: 1 UID: 0 PID: 8711 Comm: syz.1.973 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 180.827745][ T8711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 180.827759][ T8711] Call Trace: [ 180.827767][ T8711] [ 180.827776][ T8711] dump_stack_lvl+0x189/0x250 [ 180.827830][ T8711] ? irqentry_exit+0x74/0x90 [ 180.827863][ T8711] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.827902][ T8711] ? dump_stack+0x9/0x20 [ 180.827935][ T8711] should_fail_ex+0x414/0x560 [ 180.827970][ T8711] should_failslab+0xa8/0x100 [ 180.828005][ T8711] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 180.828035][ T8711] ? __d_alloc+0x36/0x7a0 [ 180.828064][ T8711] __d_alloc+0x36/0x7a0 [ 180.828098][ T8711] d_alloc_parallel+0xe5/0x15e0 [ 180.828127][ T8711] ? perf_trace_preemptirq_template+0x280/0x340 [ 180.828160][ T8711] ? irqentry_enter+0x3d/0x60 [ 180.828191][ T8711] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 180.828220][ T8711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.828249][ T8711] ? __lock_acquire+0xab9/0xd20 [ 180.828280][ T8711] ? __pfx_d_alloc_parallel+0x10/0x10 [ 180.828310][ T8711] ? __raw_spin_lock_init+0x45/0x100 [ 180.828336][ T8711] ? __init_waitqueue_head+0xa9/0x150 [ 180.828367][ T8711] __lookup_slow+0x116/0x3d0 [ 180.828392][ T8711] ? __pfx___lookup_slow+0x10/0x10 [ 180.828435][ T8711] ? down_read+0x1ad/0x2e0 [ 180.828473][ T8711] lookup_slow+0x53/0x70 [ 180.828500][ T8711] link_path_walk+0x935/0xea0 [ 180.828545][ T8711] path_openat+0x28c/0x3830 [ 180.828570][ T8711] ? arch_stack_walk+0xfc/0x150 [ 180.828619][ T8711] ? stack_depot_save_flags+0x40/0x860 [ 180.828666][ T8711] ? __pfx_path_openat+0x10/0x10 [ 180.828691][ T8711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.828739][ T8711] do_filp_open+0x1fa/0x410 [ 180.828764][ T8711] ? __lock_acquire+0xab9/0xd20 [ 180.828799][ T8711] ? __pfx_do_filp_open+0x10/0x10 [ 180.828848][ T8711] ? __pfx_kfree_link+0x10/0x10 [ 180.828892][ T8711] ? _raw_spin_unlock+0x28/0x50 [ 180.828918][ T8711] ? alloc_fd+0x64c/0x6c0 [ 180.828965][ T8711] do_sys_openat2+0x121/0x1c0 [ 180.828994][ T8711] ? __pfx_do_sys_openat2+0x10/0x10 [ 180.829036][ T8711] __x64_sys_openat+0x138/0x170 [ 180.829068][ T8711] do_syscall_64+0xfa/0x3b0 [ 180.829102][ T8711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.829123][ T8711] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 180.829158][ T8711] ? clear_bhb_loop+0x60/0xb0 [ 180.829184][ T8711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.829205][ T8711] RIP: 0033:0x7f316fb8d550 [ 180.829224][ T8711] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 180.829244][ T8711] RSP: 002b:00007f31709a7f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 180.829265][ T8711] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f316fb8d550 [ 180.829281][ T8711] RDX: 0000000000000002 RSI: 00007f31709a7fa0 RDI: 00000000ffffff9c [ 180.829295][ T8711] RBP: 00007f31709a7fa0 R08: 0000000000000000 R09: 0000000000000000 [ 180.829309][ T8711] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 180.829321][ T8711] R13: 00007f316fdb6128 R14: 00007f316fdb6090 R15: 00007fff3d0fd9f8 [ 180.829353][ T8711] [ 181.690400][ T8729] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 181.743990][ T8729] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 181.759880][ T8729] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 181.909855][ T8739] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.919156][ T8739] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.936012][ T8739] bridge0: entered allmulticast mode [ 184.224319][ T8766] __nla_validate_parse: 5 callbacks suppressed [ 184.224336][ T8766] netlink: 32 bytes leftover after parsing attributes in process `syz.1.994'. [ 184.243983][ T8782] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 184.254637][ T8782] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 184.269017][ T8782] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 184.450147][ T8802] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1002'. [ 184.460292][ T8802] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.1002'. [ 184.471649][ T8802] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1002'. [ 185.074817][ T8825] netlink: 62967 bytes leftover after parsing attributes in process `syz.2.1009'. [ 185.413866][ T8825] delete_channel: no stack [ 185.486112][ T8837] FAULT_INJECTION: forcing a failure. [ 185.486112][ T8837] name failslab, interval 1, probability 0, space 0, times 0 [ 185.520825][ T8835] validate_nla: 9 callbacks suppressed [ 185.520843][ T8835] netlink: 'syz.4.1012': attribute type 2 has an invalid length. [ 185.526634][ T8837] CPU: 1 UID: 0 PID: 8837 Comm: syz.1.1010 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 185.526661][ T8837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 185.526673][ T8837] Call Trace: [ 185.526680][ T8837] [ 185.526688][ T8837] dump_stack_lvl+0x189/0x250 [ 185.526715][ T8837] ? __pfx____ratelimit+0x10/0x10 [ 185.526740][ T8837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.526762][ T8837] ? __pfx__printk+0x10/0x10 [ 185.526796][ T8837] ? __pfx___might_resched+0x10/0x10 [ 185.526815][ T8837] ? fs_reclaim_acquire+0x7d/0x100 [ 185.526855][ T8837] should_fail_ex+0x414/0x560 [ 185.526890][ T8837] should_failslab+0xa8/0x100 [ 185.526922][ T8837] kmem_cache_alloc_noprof+0x73/0x3c0 [ 185.526951][ T8837] ? security_inode_alloc+0x39/0x330 [ 185.526976][ T8837] security_inode_alloc+0x39/0x330 [ 185.526999][ T8837] inode_init_always_gfp+0x9ed/0xdc0 [ 185.527037][ T8837] ? __pfx_proc_alloc_inode+0x10/0x10 [ 185.527063][ T8837] alloc_inode+0x82/0x1b0 [ 185.527094][ T8837] new_inode+0x22/0x170 [ 185.527129][ T8837] proc_pid_make_inode+0x21/0x130 [ 185.527161][ T8837] proc_pident_instantiate+0x6d/0x2b0 [ 185.527198][ T8837] proc_pident_lookup+0x1b7/0x270 [ 185.527237][ T8837] __lookup_slow+0x297/0x3d0 [ 185.527263][ T8837] ? __pfx___lookup_slow+0x10/0x10 [ 185.527304][ T8837] ? down_read+0x1ad/0x2e0 [ 185.527351][ T8837] lookup_slow+0x53/0x70 [ 185.527376][ T8837] link_path_walk+0x935/0xea0 [ 185.527416][ T8837] path_openat+0x28c/0x3830 [ 185.527439][ T8837] ? arch_stack_walk+0xfc/0x150 [ 185.527486][ T8837] ? stack_depot_save_flags+0x40/0x860 [ 185.527530][ T8837] ? __pfx_path_openat+0x10/0x10 [ 185.527552][ T8837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.527595][ T8837] do_filp_open+0x1fa/0x410 [ 185.527618][ T8837] ? __lock_acquire+0xab9/0xd20 [ 185.527651][ T8837] ? __pfx_do_filp_open+0x10/0x10 [ 185.527689][ T8837] ? __pfx_kfree_link+0x10/0x10 [ 185.527729][ T8837] ? _raw_spin_unlock+0x28/0x50 [ 185.527753][ T8837] ? alloc_fd+0x64c/0x6c0 [ 185.527795][ T8837] do_sys_openat2+0x121/0x1c0 [ 185.527821][ T8837] ? __pfx_do_sys_openat2+0x10/0x10 [ 185.527842][ T8837] ? perf_trace_preemptirq_template+0xa3/0x340 [ 185.527875][ T8837] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 185.527905][ T8837] ? __pfx_ksys_write+0x10/0x10 [ 185.527936][ T8837] __x64_sys_openat+0x138/0x170 [ 185.527966][ T8837] do_syscall_64+0xfa/0x3b0 [ 185.527997][ T8837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.528015][ T8837] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 185.528037][ T8837] ? clear_bhb_loop+0x60/0xb0 [ 185.528062][ T8837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.528081][ T8837] RIP: 0033:0x7f316fb8d550 [ 185.528100][ T8837] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 185.528119][ T8837] RSP: 002b:00007f31709a7f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 185.528141][ T8837] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f316fb8d550 [ 185.528156][ T8837] RDX: 0000000000000002 RSI: 00007f31709a7fa0 RDI: 00000000ffffff9c [ 185.528170][ T8837] RBP: 00007f31709a7fa0 R08: 0000000000000000 R09: 0000000000000000 [ 185.528184][ T8837] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 185.528195][ T8837] R13: 00007f316fdb6128 R14: 00007f316fdb6090 R15: 00007fff3d0fd9f8 [ 185.528230][ T8837] [ 185.659648][ T8840] netlink: 'syz.0.1013': attribute type 29 has an invalid length. [ 185.676378][ T8835] netlink: 'syz.4.1012': attribute type 1 has an invalid length. [ 185.690855][ T8840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1013'. [ 185.763393][ T8835] netlink: 'syz.4.1012': attribute type 1 has an invalid length. [ 185.766602][ T8841] netlink: 'syz.0.1013': attribute type 4 has an invalid length. [ 185.914702][ T8841] netlink: 209028 bytes leftover after parsing attributes in process `syz.0.1013'. [ 185.995395][ T8847] netlink: 'syz.2.1015': attribute type 10 has an invalid length. [ 186.075404][ T8847] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 186.090705][ T8847] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 186.103560][ T8847] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 186.558634][ T8870] netlink: 'syz.2.1023': attribute type 29 has an invalid length. [ 186.655054][ T8874] netlink: 'syz.2.1023': attribute type 29 has an invalid length. [ 187.209792][ T8882] netlink: 'syz.0.1027': attribute type 2 has an invalid length. [ 187.232483][ T8882] netlink: 'syz.0.1027': attribute type 1 has an invalid length. [ 187.684546][ T8907] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 187.708303][ T8907] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 187.725227][ T8907] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 188.428410][ T8950] FAULT_INJECTION: forcing a failure. [ 188.428410][ T8950] name failslab, interval 1, probability 0, space 0, times 0 [ 188.456433][ T8950] CPU: 0 UID: 0 PID: 8950 Comm: syz.3.1051 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 188.456461][ T8950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 188.456473][ T8950] Call Trace: [ 188.456480][ T8950] [ 188.456489][ T8950] dump_stack_lvl+0x189/0x250 [ 188.456517][ T8950] ? __pfx____ratelimit+0x10/0x10 [ 188.456543][ T8950] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.456567][ T8950] ? __pfx__printk+0x10/0x10 [ 188.456601][ T8950] ? __pfx___might_resched+0x10/0x10 [ 188.456628][ T8950] should_fail_ex+0x414/0x560 [ 188.456659][ T8950] should_failslab+0xa8/0x100 [ 188.456689][ T8950] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 188.456715][ T8950] ? __d_alloc+0x36/0x7a0 [ 188.456741][ T8950] __d_alloc+0x36/0x7a0 [ 188.456768][ T8950] d_alloc_parallel+0xe5/0x15e0 [ 188.456797][ T8950] ? __d_lookup+0x66/0x780 [ 188.456828][ T8950] ? __d_lookup+0x66/0x780 [ 188.456854][ T8950] ? __pfx_d_alloc_parallel+0x10/0x10 [ 188.456898][ T8950] path_openat+0xa3b/0x3830 [ 188.456919][ T8950] ? arch_stack_walk+0xfc/0x150 [ 188.456985][ T8950] ? __pfx_path_openat+0x10/0x10 [ 188.457012][ T8950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.457058][ T8950] do_filp_open+0x1fa/0x410 [ 188.457084][ T8950] ? __pfx_do_filp_open+0x10/0x10 [ 188.457122][ T8950] ? __pfx_kfree_link+0x10/0x10 [ 188.457160][ T8950] ? _raw_spin_unlock+0x28/0x50 [ 188.457183][ T8950] ? alloc_fd+0x64c/0x6c0 [ 188.457225][ T8950] do_sys_openat2+0x121/0x1c0 [ 188.457250][ T8950] ? __pfx_do_sys_openat2+0x10/0x10 [ 188.457268][ T8950] ? irqentry_exit+0x74/0x90 [ 188.457310][ T8950] __x64_sys_openat+0x138/0x170 [ 188.457338][ T8950] do_syscall_64+0xfa/0x3b0 [ 188.457367][ T8950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.457383][ T8950] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 188.457402][ T8950] ? clear_bhb_loop+0x60/0xb0 [ 188.457427][ T8950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.457444][ T8950] RIP: 0033:0x7ff5c778d550 [ 188.457462][ T8950] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 188.457478][ T8950] RSP: 002b:00007ff5c8613f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 188.457498][ T8950] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007ff5c778d550 [ 188.457511][ T8950] RDX: 0000000000000002 RSI: 00007ff5c8613fa0 RDI: 00000000ffffff9c [ 188.457523][ T8950] RBP: 00007ff5c8613fa0 R08: 0000000000000000 R09: 0000000000000000 [ 188.457535][ T8950] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 188.457545][ T8950] R13: 00007ff5c79b6128 R14: 00007ff5c79b6090 R15: 00007fffbe5b38f8 [ 188.457580][ T8950] [ 188.898296][ T8960] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1056'. [ 189.123593][ T8968] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 189.135578][ T8968] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 189.144005][ T8968] CPU: 1 UID: 0 PID: 8968 Comm: syz.0.1060 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 189.155483][ T8968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 189.165654][ T8968] RIP: 0010:__pcpu_freelist_pop+0x6b7/0x8c0 [ 189.171587][ T8968] Code: 10 48 3b 8c 24 80 00 00 00 0f 85 b4 01 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 89 f8 48 c1 e8 03 <80> 3c 18 00 48 89 7c 24 20 74 0a e8 49 3f 41 00 48 8b 7c 24 20 48 [ 189.191227][ T8968] RSP: 0018:ffffc900032276e0 EFLAGS: 00010046 [ 189.197317][ T8968] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffe8ffffd62ee8 [ 189.205288][ T8968] RDX: ffffc9000bb89000 RSI: 0000000000002277 RDI: 0000000000000002 [ 189.213258][ T8968] RBP: ffffc900032277b0 R08: 0000000000000003 R09: 0000000000000004 [ 189.221227][ T8968] R10: dffffc0000000000 R11: fffff52000644ee8 R12: 1ffffd1ffffac5dc [ 189.229224][ T8968] R13: ffffe8ffffd62ee0 R14: 0000000000000001 R15: 0000000000000000 [ 189.237200][ T8968] FS: 00007f0c6a96d6c0(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 189.246202][ T8968] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.252799][ T8968] CR2: 0000000000000000 CR3: 000000007e4fa000 CR4: 00000000003526f0 [ 189.260788][ T8968] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 189.268757][ T8968] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 189.276728][ T8968] Call Trace: [ 189.280010][ T8968] [ 189.282944][ T8968] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 189.289545][ T8968] ? __pfx___pcpu_freelist_pop+0x10/0x10 [ 189.295189][ T8968] ? rcu_is_watching+0x15/0xb0 [ 189.299959][ T8968] pcpu_freelist_pop+0xca/0x170 [ 189.304815][ T8968] ? __pfx_pcpu_freelist_pop+0x10/0x10 [ 189.310279][ T8968] ? get_perf_callchain+0x42f/0x6b0 [ 189.315490][ T8968] ? preempt_schedule_irq+0xd4/0x150 [ 189.320784][ T8968] ? __pfx_get_perf_callchain+0x10/0x10 [ 189.326356][ T8968] __bpf_get_stackid+0x574/0xcf0 [ 189.331310][ T8968] ? bpf_get_stackid+0x11c/0x1d0 [ 189.336257][ T8968] ? bpf_prog_b724608cae728045+0x27/0x2f [ 189.341883][ T8968] bpf_get_stackid_raw_tp+0x196/0x210 [ 189.347262][ T8968] bpf_prog_b724608cae728045+0x27/0x2f [ 189.352717][ T8968] bpf_trace_run2+0x284/0x4b0 [ 189.357406][ T8968] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 189.363409][ T8968] ? bpf_trace_run2+0x186/0x4b0 [ 189.368263][ T8968] ? __pfx_bpf_trace_run2+0x10/0x10 [ 189.373458][ T8968] ? __free_event+0xc6/0x7e0 [ 189.378072][ T8968] ? __free_event+0xc6/0x7e0 [ 189.382695][ T8968] kfree+0x3a0/0x440 [ 189.386611][ T8968] __free_event+0xc6/0x7e0 [ 189.391062][ T8968] perf_event_alloc+0x242a/0x2be0 [ 189.396083][ T8968] ? __lock_acquire+0xab9/0xd20 [ 189.400981][ T8968] ? perf_event_alloc+0xf61/0x2be0 [ 189.406101][ T8968] ? __pfx_perf_event_alloc+0x10/0x10 [ 189.411474][ T8968] ? find_lively_task_by_vpid+0x19/0x290 [ 189.417102][ T8968] ? find_lively_task_by_vpid+0x19/0x290 [ 189.422741][ T8968] ? find_lively_task_by_vpid+0x19/0x290 [ 189.428387][ T8968] __se_sys_perf_event_open+0x772/0x1d70 [ 189.434027][ T8968] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 189.440095][ T8968] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 189.446707][ T8968] ? rcu_is_watching+0x15/0xb0 [ 189.451466][ T8968] ? do_syscall_64+0xbe/0x3b0 [ 189.456147][ T8968] ? __x64_sys_perf_event_open+0x20/0xc0 [ 189.461786][ T8968] do_syscall_64+0xfa/0x3b0 [ 189.466297][ T8968] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.471497][ T8968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.477566][ T8968] ? clear_bhb_loop+0x60/0xb0 [ 189.482244][ T8968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.488133][ T8968] RIP: 0033:0x7f0c69b8ebe9 [ 189.492546][ T8968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.512160][ T8968] RSP: 002b:00007f0c6a96d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 189.520566][ T8968] RAX: ffffffffffffffda RBX: 00007f0c69db5fa0 RCX: 00007f0c69b8ebe9 [ 189.528537][ T8968] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000180 [ 189.536505][ T8968] RBP: 00007f0c69c11e19 R08: 0000000000000008 R09: 0000000000000000 [ 189.544470][ T8968] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 189.552450][ T8968] R13: 00007f0c69db6038 R14: 00007f0c69db5fa0 R15: 00007ffdc8545508 [ 189.560430][ T8968] [ 189.563459][ T8968] Modules linked in: [ 189.567373][ T8968] ---[ end trace 0000000000000000 ]--- [ 189.572820][ T8968] RIP: 0010:__pcpu_freelist_pop+0x6b7/0x8c0 [ 189.578717][ T8968] Code: 10 48 3b 8c 24 80 00 00 00 0f 85 b4 01 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 89 f8 48 c1 e8 03 <80> 3c 18 00 48 89 7c 24 20 74 0a e8 49 3f 41 00 48 8b 7c 24 20 48 [ 189.598320][ T8968] RSP: 0018:ffffc900032276e0 EFLAGS: 00010046 [ 189.604426][ T8968] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffe8ffffd62ee8 [ 189.612407][ T8968] RDX: ffffc9000bb89000 RSI: 0000000000002277 RDI: 0000000000000002 [ 189.620395][ T8968] RBP: ffffc900032277b0 R08: 0000000000000003 R09: 0000000000000004 [ 189.628360][ T8968] R10: dffffc0000000000 R11: fffff52000644ee8 R12: 1ffffd1ffffac5dc [ 189.636332][ T8968] R13: ffffe8ffffd62ee0 R14: 0000000000000001 R15: 0000000000000000 [ 189.644303][ T8968] FS: 00007f0c6a96d6c0(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 189.653231][ T8968] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.659831][ T8968] CR2: 0000000000000000 CR3: 000000007e4fa000 CR4: 00000000003526f0 [ 189.667807][ T8968] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 189.675776][ T8968] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 189.683761][ T8968] Kernel panic - not syncing: Fatal exception [ 189.896785][ T8968] Kernel Offset: disabled [ 189.901114][ T8968] Rebooting in 86400 seconds..