last executing test programs: 3.672939338s ago: executing program 4 (id=1333): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x10, 0x3, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4010) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x2000, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4010) 3.672456829s ago: executing program 1 (id=1334): socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x101, 0x0, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0xe, 0x0, 0x0, 0x0, 0x0, 0xbda0d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x4, @perf_config_ext={0x3}, 0x1075, 0x6, 0x0, 0x0, 0x1fb, 0x80000000, 0x2, 0x0, 0x0, 0x0, 0x1c0000000000000}, 0x0, 0x10, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xf}, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x20) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000500000000000000000000000000010000000000000008fdff214e5f0956bff78707beccf036fbbf234a4a1daf051706d2454ab65b50658c19dfab821bd5320f4287c8298587f92b497b6fbc9d8f28e658d0"], 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) write$cgroup_int(r4, &(0x7f0000000100), 0x1001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) sendmsg$kcm(r0, 0x0, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x828, 0x3, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.540600261s ago: executing program 0 (id=1336): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x4, 0x6, 0x8, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c0000000400000004000000090000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000"], 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="85020000ea000000a4f90ef4", @ANYBLOB], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0xa, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'wlan0\x00'}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x804) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x487fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x600, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000034000b45d30000000000000001d25a80", 0x14}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x10, &(0x7f0000000000)=r6, 0xc) mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000006c0), 0x400008, 0x0) mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000006c0), 0x0, 0x0) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x7b, &(0x7f0000000000), 0x8) 3.412362702s ago: executing program 2 (id=1337): perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000050000000000000000000000850000002c0000001801000020207325001af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4d, 0x1, 0x0, 0x0, 0x0, 0xff, 0xa2030, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x0, 0x8000001945}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x18) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r5, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240), 0x0, 0xd4, &(0x7f0000000300)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xe4, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@volatile={0x9, 0x0, 0x0, 0x9, 0x4}, @fwd={0x9}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x4}, @ptr={0x0, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x0, 0x5f, 0x2e, 0x61, 0x61, 0x30]}}, &(0x7f0000000900)=""/242, 0x50, 0xf2, 0x1, 0x6}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)={0x1b, 0x0, 0x0, 0x4, 0x0, r9, 0x6, '\x00', r10, r11, 0x2, 0x3}, 0x50) 3.378845199s ago: executing program 4 (id=1339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000001000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114815, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xcc, 0x10, 0x0, 0x0, 0x0, 0x7, 0x301ba, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3d, 0x4}, 0x10a, 0x0, 0x4080001, 0x3, 0x3f8, 0x401}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x1) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x304100, 0x4, 0x40, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000003a000103a5bd7000fcffffff05"], 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x20004800) 2.825176034s ago: executing program 4 (id=1340): close(0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)="35b8bce3", 0x4}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="1000000000000000400000000700000014000099000001000000000001000000ff0f000000000000"], 0x28}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x8, 0x0, 0x5, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x4008, 0x0, 0x202, 0x0, 0x3fe, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa56}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x4, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f00000005c0)}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000024000b94f61013e175b7bd7d7edd7504", 0x14}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @func_proto]}}, 0x0, 0x32}, 0x28) r5 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x7, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000001d0081054e81f783db4cb904021d080006000000e8fc3ca10a0015000600142603600e1208000f0000000401a80001000047880000000000035c0461c1d67f6f94007134cf6efb8000feea60d8a8a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r2}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r2, 0x1c2, 0x8}, 0xc) 2.672343715s ago: executing program 3 (id=1341): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x18, 0x1402, 0x80d, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x50}, 0x40000) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0x0, {0xa, 0x4e23, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}, 0x99}}}, 0x80, 0x0}, 0x2000f765) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x80000001, 0x0, 0x8, 0x0, 0xd844}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b0000"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x21, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4010, r1}, 0x18) r3 = socket$kcm(0x2, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000100000000000000000000ea8500000087000000850000000500000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x2f, &(0x7f0000000140)=r4, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x74, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) 2.385507499s ago: executing program 0 (id=1342): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xe0}, 0x1, 0x0, 0x0, 0x20008000}, 0xc008) 2.3068401s ago: executing program 2 (id=1343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b1600000000000000000200000824000480200001800a00010071756f7461000000100002800c00014000000000000000020900010073797a30000000000900020073797a3200000000140000001100010001000000000000000000000ae48ebb"], 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) 2.275532037s ago: executing program 1 (id=1344): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 2.17004528s ago: executing program 0 (id=1345): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000018", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c"], 0xffdd) (fail_nth: 7) 1.660405497s ago: executing program 1 (id=1346): perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x4, 0x1, 0x0, 0x0, 0x8, 0x8820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc8, 0x9}, 0x0, 0xc8, 0x0, 0x6, 0x2, 0x4388, 0x0, 0x0, 0x0, 0x0, 0x40000000000003ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000040000000400", @ANYRES32, @ANYBLOB="0000f6"], 0x50) (async) close(r1) (async) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="fb6bba8839fe8bc048c0cdafd1efa9918bc4055eadeb6db4ee9bcb5a2ed178fe31f043e4a34557020000b1811dbf40b3a7da5a8a64db04ed6dd26eea2e2756b8e63c46e251574c2a605ba134262559b840e3f6509f61d950d7cdced0bab8f2584a3f6176", 0x64}], 0x1}, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8931, &(0x7f0000000000)={'ip_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}) (async) recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/60, 0x33}], 0x1}, 0x40fd) close(r2) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200002104000000060000000600000000000000", @ANYRES32, @ANYBLOB="00e5ffff0700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00002ebdd450ed9dea48b4cebe00"/39], 0x66) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1c8c00005f00071b189da804000080000000"], 0xfe33) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff}, 0x38) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000150001000000000000000000e0000002000000000000000000000000fe80000000000000000000000000000a00000000000000000a00100000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b56b6e00000000000000000030e0403c7fb80c3a6a274bd7b1e9cfe0368171719b358c39778ef979213353466df022825a9d05be312fdb056fe8b9d802595cb1282512f4821fae"], 0xb8}}, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfaaf, 0x2}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000120000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff00000000000000000000000000004000000000000000000200000000000000000200"/112], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) (async) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="39000000140081ac10003c000500018310001f9f660fcf066505acb612f691f3bd3508abca1be6ee7e1542167066da8cde1761d0b89c44ebb3", 0x39}], 0x1}, 0x2) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 1.611960013s ago: executing program 2 (id=1347): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0xa}}, 0x14}, 0x1, 0x3000000, 0x0, 0x448d3}, 0x0) 1.512669608s ago: executing program 3 (id=1348): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x179b}, 0xc) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) close(r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x0, 0x99, &(0x7f0000000500)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x27, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000900)={0x9, 0x0}, 0x8) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000980)=@o_path={&(0x7f0000000940)='./file0\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x5, 0x1a, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x8, 0xde, &(0x7f0000000380)=""/222, 0x41100, 0x0, '\x00', r2, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x4, 0x1, 0x3}, 0x10, r3, r4, 0x5, 0x0, &(0x7f00000009c0)=[{0x3, 0x5, 0xa, 0xc}, {0x3, 0x5, 0x7, 0x4}, {0x4, 0x2, 0x5, 0x6}, {0x3, 0x1, 0x7, 0x3}, {0x3, 0x1, 0x8, 0x8}], 0x10, 0x6f811ebf}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 1.51176671s ago: executing program 0 (id=1349): socketpair(0x699083bc553420bd, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, 0x0, 0x3000c085) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000006, 0x0, @perf_config_ext={0x0, 0x1946}, 0x100441, 0x0, 0x0, 0x4, 0x40000000003fe, 0x7fffffff, 0xfffc, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(0x0, 0x0, 0xb, r2, 0xa) close(0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000000)='/proc/net/\x01?\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x1cc, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYRES32=r9, @ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) 1.488220297s ago: executing program 4 (id=1350): r0 = socket$kcm(0x11, 0xa, 0x300) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="39000000140081ae10003c0005000183110042702fdf236f1f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582b647d", 0x39}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpid() perf_event_open(0x0, r3, 0x4, r2, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8b34, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r4}, 0x8) perf_event_open(0x0, r3, 0x7, r4, 0x9) write$cgroup_pid(r0, &(0x7f0000000080)=r3, 0x12) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2281], &(0x7f0000000140)='GPL\x00'}, 0x94) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r7, r6}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x810) sendmsg$kcm(r5, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) close(0x3) 1.391482336s ago: executing program 3 (id=1351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 1.388087651s ago: executing program 1 (id=1352): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x15, 0xffffc27c, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x10000000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x1162, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="6c010000170001000000000000000000ffffffff000000000000000000000000000004d600000000fe8000000000000000000000000000bbac1414bb000000000000000000000000ffffffff0000000000000000000000004e21000000008000000000a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000018000000000000000000000000000000000b0c8000000000000000000000000987244bfef08800900000000000000000000020200000000f9ffffff02000000000000000000000044000500fe880000000000000000000000000001000004d23300000002000000000000000000000000000000000000000000000001000500000800000124000000040000"], 0x16c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000180)="1954d21b1992c4", 0x7}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB="2800fcff0a1401002bbd7000fddbdf2563003f000300000008000100000000000800030003000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) socket$kcm(0x2b, 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x0, 0x22, 0x0, &(0x7f0000000880)="e02742e8680d01000010762f080070e9b38c62d9158e36e28b3605bc409d3a677210", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x2d}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a80)={@ifindex, 0xffffffffffffffff, 0x11}, 0x20) r8 = socket$kcm(0x10, 0x2, 0x4) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f93da3c92b", 0x14}], 0x1}, 0x0) recvmsg$kcm(r8, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x2c, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4, 0x6e}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x14, 0x0, 0x0, @uid}]}]}, 0x2c}}, 0x0) sendmsg$inet(r8, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 1.312129437s ago: executing program 2 (id=1353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES16=r0], 0xa8}}, 0x48018) 1.205542564s ago: executing program 2 (id=1354): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xe8e, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={&(0x7f0000000040), 0xc}, 0x11efa, 0x4, 0x4, 0x2, 0x3, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="7a0af8ff7525736cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000f700000000b2595285fa97ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5956fc4a33ca263e2b5d47b2b00000000b1a297cfddd73f30f2382f6c2d3ffdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000010000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc70bb30d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e3841bef895c5a637b0bf2eac3cb07b74a72291a1a2b523dd81b6651b1ee29e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e90000000001000000b6b2f25ddb8c640ab321a402058c92cdfbea882b0b18914781ceb10814cf4ee23ddb79fff5eb156e0a000000000000f2bd164a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8fdf3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0aa390d0da6972ed719d7e0efb2bb713d1890e317c8de105c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b9c66200349e62d4d0ab1a1dc51907c980000cfb215af2c1a3c22243cce23b00000a857d61b0d66c3f6da8aed31027c33204ea0fa0620111920d3f24980e9995a510bd87b06440a0a26130098b901c53a02cfbfd8bcbdec9f34542c3c9652adefde555ecd28ebc88082bab431ee3e1adb5b0ad14c79dd4411ecc96c512f3b72a9b3a0c3e07ec6b427bdc0bf3963e9f802a5feab82a989db62d8d1339f842b3f593d6c24fe015ec63c658ba7c4fae17514f802709ab4fa5caa932d4b65a5ecfc422899513ddde6ec04974f9981a8c155c26e2e3b8f2d0da70e524832ab04dec9ce66a62ceffbb15b1857c93666fe043a266a451f9a1e1f054211b9ae566b58f4f356c7a4"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)='8\x00'/14, &(0x7f0000000380)=""/85, 0xa00, 0x4000000}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000c00)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0xfffffffffffffffe, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x48408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x8}, 0x0, 0xe, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) socket$kcm(0xa, 0x3, 0x3a) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000213a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0xb828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="8f00000015006b05c84e21000ab16d8b230675f802000000440002005805530461bc24eeb556a705251e6182149a36c23d1b48dfd8cd81bf9367b098fa51f60a64c9f4080000000000b6c0504bb9189d9193e9bd1c1b7376dc5214168eab57c736b13ae90298536c3aa6b230606b45823c8f8e9616afbb519374c3e3875b0f3252fc5dfbc28369efcd300a95fcfcda", 0x8f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8094) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRESHEX], 0x7c}, 0x1, 0x0, 0x0, 0x4fbbf7bd394e0846}, 0x240480d4) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r7, &(0x7f0000000540)="8b008805", &(0x7f0000000600)=""/143}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r9, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="6400000000010104000000000000000302000007240001801400018008000100e0000001080002007f0000010c00028005000100000000002400028107fe1bc4620a870594c79e541400018008000100e0000001080002007f0000010c0002"], 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x4000810) 927.195172ms ago: executing program 3 (id=1355): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], &(0x7f0000000000)='syzkaller\x00'}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0x1}) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, r1, 0xa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000700000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x2a, 0x4e23, @broadcast}, 0x10, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0xd, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x50) close(r4) r6 = socket$inet_icmp(0x2, 0x2, 0x1) close(r6) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8922, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup, 0x1, 0x0, 0x6, &(0x7f00000002c0)=[0x0], 0x1, 0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340), &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB, @ANYRES64=r8], 0x20) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001005d790000000000000500000a60000000060a0b0400000000000000000200000234000480300001800b00010074617267657400002000028008000240000000010800030002b511120c0001004e465155455545000900010073797a30000000000900020073797a32"], 0x88}}, 0x0) 541.579939ms ago: executing program 4 (id=1356): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000004, 0x40000002}, 0x0, 0x0, 0x0, 0x8, 0x400, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) (async) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x800141, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x800141, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000003a00070700000000130400000a"], 0x2c}}, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000003a00070700000000130400000a"], 0x2c}}, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4004743b, &(0x7f0000001200)) 448.921412ms ago: executing program 1 (id=1357): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close(r0) 438.737571ms ago: executing program 2 (id=1358): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000007000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x970}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000680)="5f3a2f830ad298b15b9dbcfbf6f1", 0x0, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x3, [@union={0x0, 0x5, 0x0, 0x5, 0x1, 0x3, [{0xd, 0x5, 0x4}, {0xf, 0x0, 0x4}, {0x10, 0x0, 0x3ff}, {0x0, 0x4, 0x1ff}, {0xb, 0x4, 0x6}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x8}}, @var={0x4, 0x0, 0x0, 0xe, 0x3, 0x1}, @typedef={0xa}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x4, 0x2}]}, {0x0, [0x0]}}, &(0x7f00000001c0)=""/43, 0xa7, 0x2b, 0x1, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x14, 0x400, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xcfff, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0xe, 0x0, 0x0, 0x0, 0xc, 0x2, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000100), 0x120) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) close(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4010) 382.439892ms ago: executing program 0 (id=1359): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000480)=@nfc_llcp={0xa, 0x0, 0xe0ffffff, 0x0, 0x0, 0x0, "be467b1f4cfd8c642c13334c199f91732d13b884b4ad52d055d6d5ae3b991ffc48ca221108c4d3aa623010eab68d9504000034ea00000001f000"}, 0x80, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x900}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000500)={&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x1, {0xa, 0x4e21, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000600)="b26f9fa20c1ffd6b5fa0ed75aa24315b94a999f84c356df5cc1668117cfb214ec22d3237f299479921301d6c32c801136be704ffd1dca401921c518e236d61e586273b5eef408288a596b9c61bb707f4d5cc7c9c7b60d6b748f284faa7c83e79a02d7d79ff8bd6b8a1ba3470ac6acc07d1867712c4c104dac8bfa915fed3a1a570201405b5f54dd33d1c8df03b5a406ca0c6add6726bd1f93e37884489cf735a70e848f8d4600fa4", 0xa8}, {&(0x7f0000000100)="3a18eb33cfd9522c1b3e04980c7ad8c64bf4f2af7280760816cd284eac47658688fe59ee7c3eb36a1327c0af5a9aaa96a5d0ccf6a4ffe3", 0x37}, {&(0x7f0000000380)}, {&(0x7f00000006c0)="d24e54b0c5d548f4a36541315d595e8c65ec44f07a62b87691d64a07f09e6e486c1b876db3946e74b486867c1f97bd98f33b1e56f959821f9a6cf789939aecfea3fcd317dce76b39002cd7f211fa823a28d11115749f2dba37348e5c7219099de2aae8092f67d6faa087023f9961cd1b8b3c97e9d6712671c4a9ea4cf1419acbad", 0x81}, {&(0x7f0000000780)="aa7280d370903a3e8f10fa01744463b1804cbf3bb4ab7316c10e1411bdd1313953013f94304b1169978831be7af795f82e60af68551bbd68873c428f571631c825bd5c650113238479ce45e7c71a1ed64071f5b2c27f06acadfd484f81ca412fee622ae0dde1767a482c1fcf63d0c0093875409889ae715417e85710eaaf3c2e77b8c4e8145c7565b4647b64e7f620f00f92232db82f0f7702217a7911d4462306db165c8dfaa5d3c6b4756449c6b8cbebb42bb255f25e3564512f4ad01fb3", 0xbf}, {&(0x7f0000000840)="0f3eaab28d188d3445a8ca24e138d22e642f60014dd09b82a54e1b1fce0ca47e1ec3c1d1bdf2b3db8fc827a2f2f3b6440f896a3f2a0e5e97cd2dbb78b1420e07ccba1b5ea137815e3767e2159aa3bacbc14201a2c82dd7d7a91b3292", 0x5c}, {&(0x7f00000008c0)="82602b23b8aa44f36510a62e0e5f55a7b5e6c6bb6caa01a91a10d75533bdb0b036548535d2b839c95ef38b81dc10d8916337fd927e8c22104f87e6a2fb8bcb400d78c7393991cb6db1d8110e2be040028f079a00f1e62b6f95ff5cecf1c0fb6378e2e05f3684e4c0e8e1964773f4c5feeb1335d05c544ac6c409", 0x7a}], 0x7, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x108}, 0x84) socketpair(0x28, 0x800, 0x28, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r2, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x8000000, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r9], 0x88}, 0x0) close(r7) close(r6) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701feffffff00000000017c000004008e000c00018006000600800a00000c00028000001480040019803a718d990396003010566e69d0d41dcf54c53af4f540343ab0cbb795f6ef0dc115106e2abba3a87d109f556fadd9010001000000000071903e036cf38bdbf05592d33b71a7ba7840e0348cf1a6a23b3c80fae4d768a26d38306b600071315ef680b7885a82af76e6aa0c70beea03c1976190159197d2e7f8f16f5d91a06ffe72766523d19c5ecc4de4c38baa35d0c3211a856f59de1561b3a31668cf88be"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000181401002abd7000fcdbdf250800030001000000e900010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 272.681156ms ago: executing program 1 (id=1360): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x87) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x20305, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, 0x0, 0x81) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000040)=[{&(0x7f0000001400)="2704020001f328000600002fb96d9af706e105000000890600fbff44ee1611d4b8bf4a31accbe16ae77256da82f6184b8a34f9015c749412c35e", 0x3a}, {&(0x7f0000000180)="150b4a0e1ea5301d16", 0x9}], 0x2}, 0x0) sendmsg$inet(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="e9", 0x1}], 0x1}, 0x8054) 169.416269ms ago: executing program 3 (id=1361): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x11001, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000002, 0x6}, 0x105884, 0x0, 0x0, 0x5, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000000}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000}, 0x94) 64.343797ms ago: executing program 3 (id=1362): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200ef00000000850000fd8500000018", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042801800018006000600800a00000c001c000500030000000000040002"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x5452, &(0x7f0000000a00)={'dvmrp0\x00', @random='c\b\x00'}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0xa482}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r3}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xe}}}, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xfb, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000008477fbac141516e000000107080511b180008989040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/251, 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c"], 0xffdd) 586.869µs ago: executing program 4 (id=1363): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000020000000000001100000000000000000200000001000013020000000200000000000000000000000000000e"], 0x0, 0x52}, 0x28) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa56}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r9, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff7, 0xfff, 0x3, 0x0, 0x3}, 0x2, r10}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000500000000000000905d287ed3a5ae5a0c5d05000000310b0d000000711a0c00fac57aad3baee62c90f41fae0fc499d46ce83ceffac56eb9cb1ac57e", @ANYRES32=r7, @ANYBLOB="000000000000000085000000a3000000d9ab18000400000018000000050000000000000001000000c5618000faffffff0512070008000000ad6ba0fffcffffff9500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x1, '\x00', r10, @fallback=0x1a, r5, 0x8, &(0x7f00000005c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x8, 0x2, 0x9}, 0x10, r11, r6, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) (async) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/243, 0xfffffed7}], 0x1}, 0x0) 0s ago: executing program 0 (id=1364): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x12081, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x1946}, 0x400, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872061ce618117c56f0979bd10b97163c953ab1abda4589e9cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346d2014006000000e1ffff8816326d7d35c32aac1c7d5b5be399f6609876b5887437a172751151b633fbc02a74067529194e533583412dff048f0000000000000000b2728a04816cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13ceec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad30000000000170022626165866c156a25148972700000b515a1000000000000000eb2e9c15b6c8f6198282d0000000000c2ccf3f69cfcf1e15ea7a9e57aee78e12a2caebaada42811754e19a7e9b531636794a718b4766d2c7c61c3dba128c7fcd1f97989ccf1d55de496eae46c590c2d0225f9cd07005ac7f76d9d560a08c9fd0caafd9d095cb9db0099014cd0d4df62af52b088b01adeadc4c5225a6cd8486b03f83805dffe90dbf7ad042012b7213a2b03e3b1634ddfc9d6f570c4990fbbc7306871d9a52a157fb1a10fa2868df06faf83a8420e9ce62567043ce7e56d1ebe81"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xe, 0x0, &(0x7f0000000040)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 7) kernel console output (not intermixed with test programs): down_read+0x1ad/0x2e0 [ 107.912528][ T6352] genl_rcv+0x28/0x40 [ 107.912545][ T6352] netlink_unicast+0x82c/0x9e0 [ 107.912581][ T6352] ? __pfx_netlink_unicast+0x10/0x10 [ 107.912601][ T6352] ? security_netlink_send+0x30/0x290 [ 107.912642][ T6352] ? __sanitizer_cov_trace_pc+0x11/0x70 [ 107.912677][ T6352] netlink_sendmsg+0x805/0xb30 [ 107.912717][ T6352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.912748][ T6352] ? aa_sock_msg_perm+0xf1/0x1d0 [ 107.912777][ T6352] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 107.912803][ T6352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.912831][ T6352] __sock_sendmsg+0x219/0x270 [ 107.912859][ T6352] ____sys_sendmsg+0x505/0x830 [ 107.912897][ T6352] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.912940][ T6352] ? import_iovec+0x74/0xa0 [ 107.912977][ T6352] ___sys_sendmsg+0x21f/0x2a0 [ 107.913011][ T6352] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.913092][ T6352] ? __fget_files+0x2a/0x420 [ 107.913113][ T6352] ? __fget_files+0x3a0/0x420 [ 107.913151][ T6352] __x64_sys_sendmsg+0x19b/0x260 [ 107.913185][ T6352] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 107.913250][ T6352] do_syscall_64+0xfa/0x3b0 [ 107.913279][ T6352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.913297][ T6352] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 107.913316][ T6352] ? clear_bhb_loop+0x60/0xb0 [ 107.913342][ T6352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.913361][ T6352] RIP: 0033:0x7fcd3818eec9 [ 107.913382][ T6352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.913398][ T6352] RSP: 002b:00007fcd390d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.913419][ T6352] RAX: ffffffffffffffda RBX: 00007fcd383e6090 RCX: 00007fcd3818eec9 [ 107.913434][ T6352] RDX: 0000000004000080 RSI: 0000200000000000 RDI: 000000000000000d [ 107.913447][ T6352] RBP: 00007fcd390d6090 R08: 0000000000000000 R09: 0000000000000000 [ 107.913459][ T6352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.913470][ T6352] R13: 00007fcd383e6128 R14: 00007fcd383e6090 R15: 00007ffe8d8bf288 [ 107.913509][ T6352] [ 109.071537][ T6364] netlink: 260 bytes leftover after parsing attributes in process `syz.1.111'. [ 109.081825][ T6364] netlink: 260 bytes leftover after parsing attributes in process `syz.1.111'. [ 109.134535][ T6370] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 109.141886][ T6370] IPv6: NLM_F_CREATE should be set when creating new route [ 109.149195][ T6370] IPv6: NLM_F_CREATE should be set when creating new route [ 109.662412][ T6377] netlink: 260 bytes leftover after parsing attributes in process `syz.2.115'. [ 109.702197][ T6377] netlink: 260 bytes leftover after parsing attributes in process `syz.2.115'. [ 109.705602][ T6379] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.338618][ T6392] sit0: entered allmulticast mode [ 110.633541][ T6380] syz.1.116 (6380) used greatest stack depth: 15216 bytes left [ 110.712445][ T6399] netlink: 'syz.0.119': attribute type 10 has an invalid length. [ 110.721845][ T6399] netlink: 55 bytes leftover after parsing attributes in process `syz.0.119'. [ 110.755060][ T6402] FAULT_INJECTION: forcing a failure. [ 110.755060][ T6402] name failslab, interval 1, probability 0, space 0, times 0 [ 110.796438][ T6402] CPU: 1 UID: 0 PID: 6402 Comm: syz.2.122 Not tainted syzkaller #0 PREEMPT(full) [ 110.796463][ T6402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 110.796475][ T6402] Call Trace: [ 110.796482][ T6402] [ 110.796491][ T6402] dump_stack_lvl+0x189/0x250 [ 110.796519][ T6402] ? __pfx____ratelimit+0x10/0x10 [ 110.796544][ T6402] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.796568][ T6402] ? __pfx__printk+0x10/0x10 [ 110.796598][ T6402] ? __pfx___might_resched+0x10/0x10 [ 110.796617][ T6402] ? fs_reclaim_acquire+0x7d/0x100 [ 110.796644][ T6402] should_fail_ex+0x414/0x560 [ 110.796671][ T6402] should_failslab+0xa8/0x100 [ 110.796693][ T6402] __kmalloc_noprof+0xcb/0x4f0 [ 110.796710][ T6402] ? sk_prot_alloc+0xe7/0x220 [ 110.796743][ T6402] sk_prot_alloc+0xe7/0x220 [ 110.796768][ T6402] ? sk_alloc+0x24/0x370 [ 110.796797][ T6402] sk_alloc+0x3a/0x370 [ 110.796822][ T6402] ? bpf_ctx_init+0x171/0x1d0 [ 110.796848][ T6402] bpf_prog_test_run_skb+0x313/0x1550 [ 110.796882][ T6402] ? __fget_files+0x2a/0x420 [ 110.796910][ T6402] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 110.796935][ T6402] bpf_prog_test_run+0x2c7/0x340 [ 110.796967][ T6402] __sys_bpf+0x562/0x860 [ 110.796995][ T6402] ? __pfx___sys_bpf+0x10/0x10 [ 110.797038][ T6402] ? ksys_write+0x22a/0x250 [ 110.797058][ T6402] ? __pfx_ksys_write+0x10/0x10 [ 110.797073][ T6402] ? rcu_is_watching+0x15/0xb0 [ 110.797101][ T6402] __x64_sys_bpf+0x7c/0x90 [ 110.797125][ T6402] do_syscall_64+0xfa/0x3b0 [ 110.797157][ T6402] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.797180][ T6402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.797200][ T6402] ? clear_bhb_loop+0x60/0xb0 [ 110.797224][ T6402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.797241][ T6402] RIP: 0033:0x7fca6338eec9 [ 110.797259][ T6402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.797274][ T6402] RSP: 002b:00007fca64238038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 110.797295][ T6402] RAX: ffffffffffffffda RBX: 00007fca635e5fa0 RCX: 00007fca6338eec9 [ 110.797309][ T6402] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 000000000000000a [ 110.797321][ T6402] RBP: 00007fca64238090 R08: 0000000000000000 R09: 0000000000000000 [ 110.797332][ T6402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.797344][ T6402] R13: 00007fca635e6038 R14: 00007fca635e5fa0 R15: 00007ffe32030828 [ 110.797375][ T6402] [ 111.217117][ T6413] FAULT_INJECTION: forcing a failure. [ 111.217117][ T6413] name failslab, interval 1, probability 0, space 0, times 0 [ 111.308855][ T6413] CPU: 0 UID: 0 PID: 6413 Comm: syz.4.125 Not tainted syzkaller #0 PREEMPT(full) [ 111.308884][ T6413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 111.308896][ T6413] Call Trace: [ 111.308905][ T6413] [ 111.308914][ T6413] dump_stack_lvl+0x189/0x250 [ 111.308945][ T6413] ? __pfx____ratelimit+0x10/0x10 [ 111.308972][ T6413] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.308997][ T6413] ? __pfx__printk+0x10/0x10 [ 111.309033][ T6413] ? __pfx___might_resched+0x10/0x10 [ 111.309052][ T6413] ? fs_reclaim_acquire+0x7d/0x100 [ 111.309082][ T6413] should_fail_ex+0x414/0x560 [ 111.309113][ T6413] should_failslab+0xa8/0x100 [ 111.309140][ T6413] kmem_cache_alloc_noprof+0x73/0x3c0 [ 111.309171][ T6413] ? alloc_empty_file+0x55/0x1d0 [ 111.309204][ T6413] alloc_empty_file+0x55/0x1d0 [ 111.309231][ T6413] alloc_file_pseudo+0x13d/0x210 [ 111.309262][ T6413] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 111.309296][ T6413] ? alloc_fd+0x64c/0x6c0 [ 111.309334][ T6413] anon_inode_getfd+0xca/0x1b0 [ 111.309366][ T6413] map_create+0x11d8/0x1640 [ 111.309398][ T6413] ? security_bpf+0x7e/0x300 [ 111.309424][ T6413] __sys_bpf+0x5f0/0x860 [ 111.309455][ T6413] ? __pfx___sys_bpf+0x10/0x10 [ 111.309504][ T6413] ? do_syscall_64+0xb7/0x3b0 [ 111.309528][ T6413] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 111.309559][ T6413] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 111.309589][ T6413] ? __pfx_ksys_write+0x10/0x10 [ 111.309605][ T6413] ? rcu_is_watching+0x15/0xb0 [ 111.309637][ T6413] __x64_sys_bpf+0x7c/0x90 [ 111.309663][ T6413] do_syscall_64+0xfa/0x3b0 [ 111.309688][ T6413] ? lockdep_hardirqs_on+0x9c/0x150 [ 111.309713][ T6413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.309734][ T6413] ? clear_bhb_loop+0x60/0xb0 [ 111.309760][ T6413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.309779][ T6413] RIP: 0033:0x7f12f0b8eec9 [ 111.309797][ T6413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.309814][ T6413] RSP: 002b:00007f12f1aed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 111.309835][ T6413] RAX: ffffffffffffffda RBX: 00007f12f0de5fa0 RCX: 00007f12f0b8eec9 [ 111.309850][ T6413] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 0000000000000000 [ 111.309862][ T6413] RBP: 00007f12f1aed090 R08: 0000000000000000 R09: 0000000000000000 [ 111.309875][ T6413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.309886][ T6413] R13: 00007f12f0de6038 R14: 00007f12f0de5fa0 R15: 00007ffc140fb128 [ 111.309924][ T6413] [ 112.459406][ T6423] netlink: 10 bytes leftover after parsing attributes in process `syz.4.128'. [ 112.484112][ T6422] netlink: 'syz.4.128': attribute type 29 has an invalid length. [ 112.524419][ T6425] netlink: 'syz.4.128': attribute type 29 has an invalid length. [ 112.537300][ T6436] FAULT_INJECTION: forcing a failure. [ 112.537300][ T6436] name failslab, interval 1, probability 0, space 0, times 0 [ 112.579009][ T6436] CPU: 0 UID: 0 PID: 6436 Comm: syz.3.133 Not tainted syzkaller #0 PREEMPT(full) [ 112.579039][ T6436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 112.579052][ T6436] Call Trace: [ 112.579060][ T6436] [ 112.579069][ T6436] dump_stack_lvl+0x189/0x250 [ 112.579098][ T6436] ? irqentry_exit+0x74/0x90 [ 112.579127][ T6436] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.579164][ T6436] ? dump_stack+0x9/0x20 [ 112.579204][ T6436] should_fail_ex+0x414/0x560 [ 112.579234][ T6436] should_failslab+0xa8/0x100 [ 112.579259][ T6436] kmem_cache_alloc_noprof+0x73/0x3c0 [ 112.579291][ T6436] ? skb_clone+0x212/0x3a0 [ 112.579317][ T6436] skb_clone+0x212/0x3a0 [ 112.579333][ T6436] ? nfnetlink_rcv+0x486/0x2520 [ 112.579360][ T6436] nfnetlink_rcv+0x4b4/0x2520 [ 112.579385][ T6436] ? trace_call_bpf+0xb7/0x850 [ 112.579406][ T6436] ? trace_call_bpf+0xb7/0x850 [ 112.579434][ T6436] ? trace_call_bpf+0xb7/0x850 [ 112.579455][ T6436] ? trace_call_bpf+0xb7/0x850 [ 112.579474][ T6436] ? trace_call_bpf+0x5ba/0x850 [ 112.579493][ T6436] ? trace_call_bpf+0xb7/0x850 [ 112.579511][ T6436] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 112.579536][ T6436] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 112.579588][ T6436] ? perf_trace_preemptirq_template+0x280/0x340 [ 112.579618][ T6436] ? irqentry_enter+0x3d/0x60 [ 112.579645][ T6436] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 112.579693][ T6436] ? irqentry_exit+0x74/0x90 [ 112.579718][ T6436] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.579753][ T6436] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 112.579788][ T6436] netlink_unicast+0x82c/0x9e0 [ 112.579824][ T6436] ? __pfx_netlink_unicast+0x10/0x10 [ 112.579851][ T6436] ? netlink_sendmsg+0x642/0xb30 [ 112.579875][ T6436] ? skb_put+0x11b/0x210 [ 112.579908][ T6436] netlink_sendmsg+0x805/0xb30 [ 112.579948][ T6436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.579980][ T6436] ? aa_sock_msg_perm+0xf1/0x1d0 [ 112.580008][ T6436] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 112.580035][ T6436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.580063][ T6436] __sock_sendmsg+0x219/0x270 [ 112.580091][ T6436] ____sys_sendmsg+0x505/0x830 [ 112.580129][ T6436] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.580178][ T6436] ? import_iovec+0x74/0xa0 [ 112.580215][ T6436] ___sys_sendmsg+0x21f/0x2a0 [ 112.580249][ T6436] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.580308][ T6436] ? __fget_files+0x2a/0x420 [ 112.580348][ T6436] ? __fget_files+0x2a/0x420 [ 112.580369][ T6436] ? __fget_files+0x3a0/0x420 [ 112.580406][ T6436] __x64_sys_sendmsg+0x19b/0x260 [ 112.580441][ T6436] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 112.580505][ T6436] do_syscall_64+0xfa/0x3b0 [ 112.580534][ T6436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.580553][ T6436] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 112.580573][ T6436] ? clear_bhb_loop+0x60/0xb0 [ 112.580598][ T6436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.580618][ T6436] RIP: 0033:0x7f07ce18eec9 [ 112.580636][ T6436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.580652][ T6436] RSP: 002b:00007f07cefe7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.580673][ T6436] RAX: ffffffffffffffda RBX: 00007f07ce3e5fa0 RCX: 00007f07ce18eec9 [ 112.580688][ T6436] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000008 [ 112.580700][ T6436] RBP: 00007f07cefe7090 R08: 0000000000000000 R09: 0000000000000000 [ 112.580712][ T6436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.580724][ T6436] R13: 00007f07ce3e6038 R14: 00007f07ce3e5fa0 R15: 00007ffc8b25d058 [ 112.580761][ T6436] [ 112.584242][ T6434] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 112.891974][ T6442] FAULT_INJECTION: forcing a failure. [ 112.891974][ T6442] name failslab, interval 1, probability 0, space 0, times 0 [ 113.066304][ T6442] CPU: 1 UID: 0 PID: 6442 Comm: syz.4.134 Not tainted syzkaller #0 PREEMPT(full) [ 113.066332][ T6442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 113.066345][ T6442] Call Trace: [ 113.066353][ T6442] [ 113.066362][ T6442] dump_stack_lvl+0x189/0x250 [ 113.066392][ T6442] ? __pfx____ratelimit+0x10/0x10 [ 113.066425][ T6442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.066449][ T6442] ? __pfx__printk+0x10/0x10 [ 113.066485][ T6442] ? __pfx___might_resched+0x10/0x10 [ 113.066514][ T6442] should_fail_ex+0x414/0x560 [ 113.066544][ T6442] should_failslab+0xa8/0x100 [ 113.066575][ T6442] kmem_cache_alloc_noprof+0x73/0x3c0 [ 113.066606][ T6442] ? skb_clone+0x212/0x3a0 [ 113.066631][ T6442] skb_clone+0x212/0x3a0 [ 113.066647][ T6442] ? nfnetlink_rcv+0x486/0x2520 [ 113.066673][ T6442] nfnetlink_rcv+0x4b4/0x2520 [ 113.066701][ T6442] ? __dev_queue_xmit+0x1d79/0x3b50 [ 113.066735][ T6442] ? __dev_queue_xmit+0x27b/0x3b50 [ 113.066771][ T6442] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 113.066817][ T6442] ? ref_tracker_free+0x63a/0x7d0 [ 113.066841][ T6442] ? __asan_memcpy+0x40/0x70 [ 113.066869][ T6442] ? __pfx_ref_tracker_free+0x10/0x10 [ 113.066889][ T6442] ? __skb_clone+0x63/0x7a0 [ 113.066928][ T6442] ? perf_trace_lock+0xec/0x3b0 [ 113.066946][ T6442] ? __skb_clone+0x483/0x7a0 [ 113.066981][ T6442] ? __pfx_perf_trace_lock+0x10/0x10 [ 113.067001][ T6442] ? skb_clone+0x246/0x3a0 [ 113.067024][ T6442] ? __netlink_deliver_tap+0x807/0x850 [ 113.067050][ T6442] ? netlink_deliver_tap+0x2e/0x1b0 [ 113.067100][ T6442] netlink_unicast+0x82c/0x9e0 [ 113.067143][ T6442] ? __pfx_netlink_unicast+0x10/0x10 [ 113.067170][ T6442] ? netlink_sendmsg+0x642/0xb30 [ 113.067194][ T6442] ? skb_put+0x11b/0x210 [ 113.067227][ T6442] netlink_sendmsg+0x805/0xb30 [ 113.067267][ T6442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.067298][ T6442] ? aa_sock_msg_perm+0xf1/0x1d0 [ 113.067326][ T6442] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 113.067352][ T6442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.067380][ T6442] __sock_sendmsg+0x219/0x270 [ 113.067408][ T6442] ____sys_sendmsg+0x505/0x830 [ 113.067446][ T6442] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.067489][ T6442] ? import_iovec+0x74/0xa0 [ 113.067526][ T6442] ___sys_sendmsg+0x21f/0x2a0 [ 113.067560][ T6442] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.067619][ T6442] ? __fget_files+0x2a/0x420 [ 113.067658][ T6442] ? __fget_files+0x2a/0x420 [ 113.067678][ T6442] ? __fget_files+0x3a0/0x420 [ 113.067715][ T6442] __x64_sys_sendmsg+0x19b/0x260 [ 113.067743][ T6442] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 113.067771][ T6442] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 113.067815][ T6442] ? __pfx_ksys_write+0x10/0x10 [ 113.067830][ T6442] ? rcu_is_watching+0x15/0xb0 [ 113.067858][ T6442] ? do_syscall_64+0xbe/0x3b0 [ 113.067889][ T6442] do_syscall_64+0xfa/0x3b0 [ 113.067914][ T6442] ? lockdep_hardirqs_on+0x9c/0x150 [ 113.067939][ T6442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.067958][ T6442] ? clear_bhb_loop+0x60/0xb0 [ 113.067984][ T6442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.068003][ T6442] RIP: 0033:0x7f12f0b8eec9 [ 113.068021][ T6442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.068037][ T6442] RSP: 002b:00007f12f1aed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.068059][ T6442] RAX: ffffffffffffffda RBX: 00007f12f0de5fa0 RCX: 00007f12f0b8eec9 [ 113.068073][ T6442] RDX: 0000000000040040 RSI: 00002000000000c0 RDI: 0000000000000003 [ 113.068086][ T6442] RBP: 00007f12f1aed090 R08: 0000000000000000 R09: 0000000000000000 [ 113.068097][ T6442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.068109][ T6442] R13: 00007f12f0de6038 R14: 00007f12f0de5fa0 R15: 00007ffc140fb128 [ 113.068153][ T6442] [ 114.118165][ T6452] netlink: 260 bytes leftover after parsing attributes in process `syz.4.139'. [ 114.129052][ T6452] netlink: 260 bytes leftover after parsing attributes in process `syz.4.139'. [ 114.157108][ T6458] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 114.878230][ T6478] netlink: 'syz.1.145': attribute type 10 has an invalid length. [ 115.450428][ T6478] syz_tun: entered promiscuous mode [ 115.600100][ T6478] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 115.716937][ T6487] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.146'. [ 115.821814][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.150'. [ 116.597699][ T6505] FAULT_INJECTION: forcing a failure. [ 116.597699][ T6505] name failslab, interval 1, probability 0, space 0, times 0 [ 116.718248][ T6505] CPU: 1 UID: 0 PID: 6505 Comm: syz.4.154 Not tainted syzkaller #0 PREEMPT(full) [ 116.718276][ T6505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 116.718289][ T6505] Call Trace: [ 116.718298][ T6505] [ 116.718307][ T6505] dump_stack_lvl+0x189/0x250 [ 116.718337][ T6505] ? __pfx____ratelimit+0x10/0x10 [ 116.718364][ T6505] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.718389][ T6505] ? __pfx__printk+0x10/0x10 [ 116.718424][ T6505] ? __pfx___might_resched+0x10/0x10 [ 116.718442][ T6505] ? fs_reclaim_acquire+0x7d/0x100 [ 116.718470][ T6505] should_fail_ex+0x414/0x560 [ 116.718499][ T6505] should_failslab+0xa8/0x100 [ 116.718522][ T6505] __kmalloc_cache_noprof+0x70/0x3d0 [ 116.718541][ T6505] ? __inet_diag_dump_start+0x9d/0xa10 [ 116.718576][ T6505] __inet_diag_dump_start+0x9d/0xa10 [ 116.718606][ T6505] ? netlink_lookup+0x30/0x200 [ 116.718628][ T6505] ? netlink_lookup+0x30/0x200 [ 116.718659][ T6505] __netlink_dump_start+0x466/0x7e0 [ 116.718694][ T6505] inet_diag_handler_cmd+0x1bf/0x290 [ 116.718723][ T6505] ? lock_acquire+0x175/0x360 [ 116.718753][ T6505] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 116.718781][ T6505] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 116.718807][ T6505] ? __pfx_inet_diag_dump+0x10/0x10 [ 116.718832][ T6505] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 116.718869][ T6505] ? sock_diag_lock_handler+0x19/0x290 [ 116.718894][ T6505] ? sock_diag_lock_handler+0x19/0x290 [ 116.718925][ T6505] sock_diag_rcv_msg+0x4c9/0x600 [ 116.718955][ T6505] netlink_rcv_skb+0x208/0x470 [ 116.718982][ T6505] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 116.719009][ T6505] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 116.719049][ T6505] ? __pfx_sock_diag_rcv+0x10/0x10 [ 116.719083][ T6505] netlink_unicast+0x82c/0x9e0 [ 116.719117][ T6505] ? __pfx_netlink_unicast+0x10/0x10 [ 116.719141][ T6505] ? netlink_sendmsg+0x6c0/0xb30 [ 116.719176][ T6505] netlink_sendmsg+0x805/0xb30 [ 116.719214][ T6505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.719248][ T6505] ? __sock_sendmsg+0x54/0x270 [ 116.719271][ T6505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.719299][ T6505] __sock_sendmsg+0x219/0x270 [ 116.719325][ T6505] ____sys_sendmsg+0x505/0x830 [ 116.719362][ T6505] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.719403][ T6505] ? import_iovec+0x74/0xa0 [ 116.719438][ T6505] ___sys_sendmsg+0x21f/0x2a0 [ 116.719471][ T6505] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.719498][ T6505] ? irqentry_exit+0x74/0x90 [ 116.719565][ T6505] ? __fget_files+0x2a/0x420 [ 116.719587][ T6505] ? __fget_files+0x3a0/0x420 [ 116.719621][ T6505] __x64_sys_sendmsg+0x19b/0x260 [ 116.719655][ T6505] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 116.719714][ T6505] do_syscall_64+0xfa/0x3b0 [ 116.719742][ T6505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.719761][ T6505] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 116.719781][ T6505] ? clear_bhb_loop+0x60/0xb0 [ 116.719806][ T6505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.719825][ T6505] RIP: 0033:0x7f12f0b8eec9 [ 116.719850][ T6505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.719866][ T6505] RSP: 002b:00007f12f1acc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.719887][ T6505] RAX: ffffffffffffffda RBX: 00007f12f0de6090 RCX: 00007f12f0b8eec9 [ 116.719902][ T6505] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000008 [ 116.719915][ T6505] RBP: 00007f12f1acc090 R08: 0000000000000000 R09: 0000000000000000 [ 116.719927][ T6505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.719938][ T6505] R13: 00007f12f0de6128 R14: 00007f12f0de6090 R15: 00007ffc140fb128 [ 116.719972][ T6505] [ 117.780325][ T6523] netlink: 'syz.0.159': attribute type 2 has an invalid length. [ 117.817307][ T6523] netlink: 'syz.0.159': attribute type 1 has an invalid length. [ 117.825002][ T6523] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.159'. [ 117.906384][ T6523] block nbd5: not configured, cannot reconfigure [ 118.962461][ T6548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.167'. [ 118.981352][ T6548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.167'. [ 119.095946][ T6547] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.166'. [ 119.344179][ T6551] FAULT_INJECTION: forcing a failure. [ 119.344179][ T6551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.366142][ T6551] CPU: 1 UID: 0 PID: 6551 Comm: syz.0.168 Not tainted syzkaller #0 PREEMPT(full) [ 119.366171][ T6551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 119.366183][ T6551] Call Trace: [ 119.366191][ T6551] [ 119.366200][ T6551] dump_stack_lvl+0x189/0x250 [ 119.366231][ T6551] ? __pfx____ratelimit+0x10/0x10 [ 119.366257][ T6551] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.366280][ T6551] ? __pfx__printk+0x10/0x10 [ 119.366309][ T6551] ? __might_fault+0xb0/0x130 [ 119.366345][ T6551] should_fail_ex+0x414/0x560 [ 119.366374][ T6551] _copy_from_user+0x2d/0xb0 [ 119.366393][ T6551] ___sys_sendmsg+0x158/0x2a0 [ 119.366428][ T6551] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.366502][ T6551] ? __fget_files+0x2a/0x420 [ 119.366523][ T6551] ? __fget_files+0x3a0/0x420 [ 119.366560][ T6551] __x64_sys_sendmsg+0x19b/0x260 [ 119.366594][ T6551] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 119.366638][ T6551] ? __pfx_ksys_write+0x10/0x10 [ 119.366668][ T6551] ? rcu_is_watching+0x15/0xb0 [ 119.366696][ T6551] ? do_syscall_64+0xbe/0x3b0 [ 119.366728][ T6551] do_syscall_64+0xfa/0x3b0 [ 119.366753][ T6551] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.366777][ T6551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.366797][ T6551] ? clear_bhb_loop+0x60/0xb0 [ 119.366837][ T6551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.366856][ T6551] RIP: 0033:0x7fcd3818eec9 [ 119.366874][ T6551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.366890][ T6551] RSP: 002b:00007fcd390f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.366919][ T6551] RAX: ffffffffffffffda RBX: 00007fcd383e5fa0 RCX: 00007fcd3818eec9 [ 119.366942][ T6551] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 119.366954][ T6551] RBP: 00007fcd390f7090 R08: 0000000000000000 R09: 0000000000000000 [ 119.366965][ T6551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.366976][ T6551] R13: 00007fcd383e6038 R14: 00007fcd383e5fa0 R15: 00007ffe8d8bf288 [ 119.367012][ T6551] [ 121.129009][ T6586] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.178'. [ 121.465753][ T6588] netlink: 260 bytes leftover after parsing attributes in process `syz.0.179'. [ 121.489549][ T6593] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.511174][ T6588] netlink: 260 bytes leftover after parsing attributes in process `syz.0.179'. [ 122.469614][ T6617] netlink: 'syz.1.191': attribute type 10 has an invalid length. [ 122.499659][ T6617] netlink: 40 bytes leftover after parsing attributes in process `syz.1.191'. [ 122.707448][ T6625] netlink: 92 bytes leftover after parsing attributes in process `syz.3.194'. [ 122.746263][ T6625] netlink: 92 bytes leftover after parsing attributes in process `syz.3.194'. [ 122.856512][ T6617] batman_adv: batadv0: Adding interface: vlan1 [ 122.884906][ T6617] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.933095][ T6617] batman_adv: batadv0: Interface activated: vlan1 [ 123.033165][ T6623] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.193'. [ 123.575990][ T6640] FAULT_INJECTION: forcing a failure. [ 123.575990][ T6640] name failslab, interval 1, probability 0, space 0, times 0 [ 123.598827][ T6640] CPU: 0 UID: 0 PID: 6640 Comm: syz.1.197 Not tainted syzkaller #0 PREEMPT(full) [ 123.598856][ T6640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 123.598868][ T6640] Call Trace: [ 123.598876][ T6640] [ 123.598885][ T6640] dump_stack_lvl+0x189/0x250 [ 123.598915][ T6640] ? __pfx____ratelimit+0x10/0x10 [ 123.598941][ T6640] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.598966][ T6640] ? __pfx__printk+0x10/0x10 [ 123.599001][ T6640] ? __pfx___might_resched+0x10/0x10 [ 123.599027][ T6640] should_fail_ex+0x414/0x560 [ 123.599053][ T6640] ? bpf_test_run_xdp_live+0x18e/0x1b10 [ 123.599078][ T6640] should_failslab+0xa8/0x100 [ 123.599102][ T6640] __kvmalloc_node_noprof+0x161/0x5f0 [ 123.599124][ T6640] ? bpf_test_run_xdp_live+0x18e/0x1b10 [ 123.599156][ T6640] bpf_test_run_xdp_live+0x18e/0x1b10 [ 123.599183][ T6640] ? bpf_dispatcher_change_prog+0xb35/0xc90 [ 123.599212][ T6640] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 123.599248][ T6640] ? synchronize_rcu+0x11a/0x310 [ 123.599266][ T6640] ? __pfx_synchronize_rcu+0x10/0x10 [ 123.599292][ T6640] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 123.599328][ T6640] ? 0xffffffffa0205540 [ 123.599366][ T6640] ? 0xffffffffa020168c [ 123.599414][ T6640] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 123.599453][ T6640] ? _copy_from_user+0x94/0xb0 [ 123.599473][ T6640] ? bpf_test_init+0x113/0x150 [ 123.599495][ T6640] ? xdp_convert_md_to_buff+0x5b/0x330 [ 123.599524][ T6640] bpf_prog_test_run_xdp+0x75b/0x10e0 [ 123.599573][ T6640] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 123.599604][ T6640] ? __fget_files+0x2a/0x420 [ 123.599632][ T6640] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 123.599659][ T6640] bpf_prog_test_run+0x2c7/0x340 [ 123.599692][ T6640] __sys_bpf+0x562/0x860 [ 123.599720][ T6640] ? __pfx___sys_bpf+0x10/0x10 [ 123.599761][ T6640] ? do_syscall_64+0xb7/0x3b0 [ 123.599789][ T6640] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 123.599818][ T6640] ? __pfx_ksys_write+0x10/0x10 [ 123.599834][ T6640] ? rcu_is_watching+0x15/0xb0 [ 123.599862][ T6640] __x64_sys_bpf+0x7c/0x90 [ 123.599887][ T6640] do_syscall_64+0xfa/0x3b0 [ 123.599911][ T6640] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.599934][ T6640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.599953][ T6640] ? clear_bhb_loop+0x60/0xb0 [ 123.599977][ T6640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.599995][ T6640] RIP: 0033:0x7f2d7c38eec9 [ 123.600012][ T6640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.600027][ T6640] RSP: 002b:00007f2d7d195038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 123.600048][ T6640] RAX: ffffffffffffffda RBX: 00007f2d7c5e6090 RCX: 00007f2d7c38eec9 [ 123.600062][ T6640] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 123.600074][ T6640] RBP: 00007f2d7d195090 R08: 0000000000000000 R09: 0000000000000000 [ 123.600085][ T6640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.600096][ T6640] R13: 00007f2d7c5e6128 R14: 00007f2d7c5e6090 R15: 00007ffcab2a6e88 [ 123.600126][ T6640] [ 123.918551][ T6641] netlink: 260 bytes leftover after parsing attributes in process `syz.4.196'. [ 124.067919][ T6632] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.160595][ T6641] netlink: 260 bytes leftover after parsing attributes in process `syz.4.196'. [ 125.008022][ T6665] netlink: 92 bytes leftover after parsing attributes in process `syz.2.206'. [ 125.346904][ T6668] FAULT_INJECTION: forcing a failure. [ 125.346904][ T6668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.365486][ T6675] ======================================================= [ 125.365486][ T6675] WARNING: The mand mount option has been deprecated and [ 125.365486][ T6675] and is ignored by this kernel. Remove the mand [ 125.365486][ T6675] option from the mount to silence this warning. [ 125.365486][ T6675] ======================================================= [ 125.411025][ T6668] CPU: 1 UID: 0 PID: 6668 Comm: syz.3.207 Not tainted syzkaller #0 PREEMPT(full) [ 125.411054][ T6668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 125.411066][ T6668] Call Trace: [ 125.411075][ T6668] [ 125.411083][ T6668] dump_stack_lvl+0x189/0x250 [ 125.411236][ T6668] ? __pfx____ratelimit+0x10/0x10 [ 125.411263][ T6668] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.411288][ T6668] ? __pfx__printk+0x10/0x10 [ 125.411317][ T6668] ? __might_fault+0xb0/0x130 [ 125.411349][ T6668] should_fail_ex+0x414/0x560 [ 125.411377][ T6668] _copy_from_user+0x2d/0xb0 [ 125.411397][ T6668] __sys_bpf+0x1e3/0x860 [ 125.411427][ T6668] ? __pfx___sys_bpf+0x10/0x10 [ 125.411470][ T6668] ? do_syscall_64+0xb7/0x3b0 [ 125.411499][ T6668] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 125.411529][ T6668] ? __pfx_ksys_write+0x10/0x10 [ 125.411545][ T6668] ? rcu_is_watching+0x15/0xb0 [ 125.411575][ T6668] __x64_sys_bpf+0x7c/0x90 [ 125.411600][ T6668] do_syscall_64+0xfa/0x3b0 [ 125.411625][ T6668] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.411649][ T6668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.411669][ T6668] ? clear_bhb_loop+0x60/0xb0 [ 125.411694][ T6668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.411714][ T6668] RIP: 0033:0x7f07ce18eec9 [ 125.411733][ T6668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.411749][ T6668] RSP: 002b:00007f07cefe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 125.411771][ T6668] RAX: ffffffffffffffda RBX: 00007f07ce3e5fa0 RCX: 00007f07ce18eec9 [ 125.411786][ T6668] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 125.411798][ T6668] RBP: 00007f07cefe7090 R08: 0000000000000000 R09: 0000000000000000 [ 125.411810][ T6668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.411821][ T6668] R13: 00007f07ce3e6038 R14: 00007f07ce3e5fa0 R15: 00007ffc8b25d058 [ 125.411853][ T6668] [ 125.470701][ T6675] tmpfs: Bad value for 'uid' [ 125.620922][ T6675] tmpfs: Bad value for 'uid' [ 126.239836][ T6688] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 127.139860][ T6700] __nla_validate_parse: 4 callbacks suppressed [ 127.139880][ T6700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.216'. [ 128.643148][ T6713] netlink: 260 bytes leftover after parsing attributes in process `syz.0.218'. [ 128.665647][ T6713] netlink: 260 bytes leftover after parsing attributes in process `syz.0.218'. [ 128.684017][ T6718] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.716952][ T6711] FAULT_INJECTION: forcing a failure. [ 128.716952][ T6711] name failslab, interval 1, probability 0, space 0, times 0 [ 129.041990][ T6711] CPU: 0 UID: 0 PID: 6711 Comm: syz.4.220 Not tainted syzkaller #0 PREEMPT(full) [ 129.042018][ T6711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 129.042030][ T6711] Call Trace: [ 129.042038][ T6711] [ 129.042048][ T6711] dump_stack_lvl+0x189/0x250 [ 129.042077][ T6711] ? __pfx____ratelimit+0x10/0x10 [ 129.042104][ T6711] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.042129][ T6711] ? __pfx__printk+0x10/0x10 [ 129.042167][ T6711] ? __pfx___might_resched+0x10/0x10 [ 129.042185][ T6711] ? fs_reclaim_acquire+0x7d/0x100 [ 129.042216][ T6711] should_fail_ex+0x414/0x560 [ 129.042247][ T6711] should_failslab+0xa8/0x100 [ 129.042271][ T6711] kmem_cache_alloc_noprof+0x73/0x3c0 [ 129.042302][ T6711] ? skb_clone+0x212/0x3a0 [ 129.042328][ T6711] skb_clone+0x212/0x3a0 [ 129.042344][ T6711] ? nfnetlink_rcv+0x486/0x2520 [ 129.042371][ T6711] nfnetlink_rcv+0x4b4/0x2520 [ 129.042399][ T6711] ? __dev_queue_xmit+0x1d79/0x3b50 [ 129.042433][ T6711] ? __dev_queue_xmit+0x27b/0x3b50 [ 129.042462][ T6711] ? perf_trace_run_bpf_submit+0xee/0x170 [ 129.042494][ T6711] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 129.042549][ T6711] ? irqentry_exit+0x74/0x90 [ 129.042582][ T6711] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.042629][ T6711] ? __netlink_deliver_tap+0x17f/0x850 [ 129.042659][ T6711] ? __netlink_deliver_tap+0x807/0x850 [ 129.042685][ T6711] ? netlink_deliver_tap+0x2e/0x1b0 [ 129.042736][ T6711] netlink_unicast+0x82c/0x9e0 [ 129.042773][ T6711] ? __pfx_netlink_unicast+0x10/0x10 [ 129.042800][ T6711] ? netlink_sendmsg+0x6c0/0xb30 [ 129.042834][ T6711] netlink_sendmsg+0x805/0xb30 [ 129.042859][ T6711] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.042896][ T6711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.042930][ T6711] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 129.042960][ T6711] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 129.042986][ T6711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.043015][ T6711] __sock_sendmsg+0x219/0x270 [ 129.043043][ T6711] ____sys_sendmsg+0x505/0x830 [ 129.043082][ T6711] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.043126][ T6711] ? import_iovec+0x74/0xa0 [ 129.043164][ T6711] ___sys_sendmsg+0x21f/0x2a0 [ 129.043198][ T6711] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.043281][ T6711] ? __fget_files+0x2a/0x420 [ 129.043302][ T6711] ? __fget_files+0x3a0/0x420 [ 129.043340][ T6711] __x64_sys_sendmsg+0x19b/0x260 [ 129.043375][ T6711] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 129.043441][ T6711] do_syscall_64+0xfa/0x3b0 [ 129.043470][ T6711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.043489][ T6711] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 129.043509][ T6711] ? clear_bhb_loop+0x60/0xb0 [ 129.043535][ T6711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.043555][ T6711] RIP: 0033:0x7f12f0b8eec9 [ 129.043573][ T6711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.043596][ T6711] RSP: 002b:00007f12f1aed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.043617][ T6711] RAX: ffffffffffffffda RBX: 00007f12f0de5fa0 RCX: 00007f12f0b8eec9 [ 129.043632][ T6711] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000007 [ 129.043644][ T6711] RBP: 00007f12f1aed090 R08: 0000000000000000 R09: 0000000000000000 [ 129.043656][ T6711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.043668][ T6711] R13: 00007f12f0de6038 R14: 00007f12f0de5fa0 R15: 00007ffc140fb128 [ 129.043705][ T6711] [ 130.191278][ T6731] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.225'. [ 130.515113][ T6736] netlink: 'syz.3.228': attribute type 21 has an invalid length. [ 130.529422][ T6736] netlink: 128 bytes leftover after parsing attributes in process `syz.3.228'. [ 130.570283][ T6743] netlink: 'syz.3.228': attribute type 39 has an invalid length. [ 130.722326][ T6741] netlink: 260 bytes leftover after parsing attributes in process `syz.1.229'. [ 130.732453][ T6741] netlink: 260 bytes leftover after parsing attributes in process `syz.1.229'. [ 130.777531][ T6749] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 130.827392][ T6736] netlink: 'syz.3.228': attribute type 4 has an invalid length. [ 130.936514][ T6736] netlink: 'syz.3.228': attribute type 5 has an invalid length. [ 130.960948][ T6736] netlink: 3 bytes leftover after parsing attributes in process `syz.3.228'. [ 131.488324][ T6753] netlink: 'syz.0.233': attribute type 3 has an invalid length. [ 131.540082][ T6753] netlink: 'syz.0.233': attribute type 1 has an invalid length. [ 131.622412][ T6761] netlink: 132 bytes leftover after parsing attributes in process `syz.0.233'. [ 131.631792][ T6755] netlink: 260 bytes leftover after parsing attributes in process `syz.4.234'. [ 131.735365][ T6764] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 132.429128][ T6768] netlink: 'syz.4.237': attribute type 2 has an invalid length. [ 132.509021][ T6768] __nla_validate_parse: 2 callbacks suppressed [ 132.509041][ T6768] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.237'. [ 132.645629][ T6768] nbd: must specify at least one socket [ 132.750592][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.757521][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.908645][ T6801] netlink: 260 bytes leftover after parsing attributes in process `syz.3.247'. [ 134.961314][ T6801] netlink: 260 bytes leftover after parsing attributes in process `syz.3.247'. [ 135.025109][ T6804] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 135.032529][ T6804] IPv6: NLM_F_CREATE should be set when creating new route [ 135.039951][ T6804] IPv6: NLM_F_CREATE should be set when creating new route [ 135.047237][ T6804] IPv6: NLM_F_CREATE should be set when creating new route [ 135.924167][ T6822] FAULT_INJECTION: forcing a failure. [ 135.924167][ T6822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.987126][ T6822] CPU: 0 UID: 0 PID: 6822 Comm: syz.0.254 Not tainted syzkaller #0 PREEMPT(full) [ 135.987154][ T6822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 135.987167][ T6822] Call Trace: [ 135.987175][ T6822] [ 135.987184][ T6822] dump_stack_lvl+0x189/0x250 [ 135.987213][ T6822] ? __pfx____ratelimit+0x10/0x10 [ 135.987246][ T6822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.987271][ T6822] ? __pfx__printk+0x10/0x10 [ 135.987300][ T6822] ? __might_fault+0xb0/0x130 [ 135.987332][ T6822] should_fail_ex+0x414/0x560 [ 135.987359][ T6822] _copy_from_iter+0x1de/0x1790 [ 135.987392][ T6822] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.987424][ T6822] ? __pfx__copy_from_iter+0x10/0x10 [ 135.987451][ T6822] ? netlink_sendmsg+0x642/0xb30 [ 135.987480][ T6822] ? kasan_check_range+0x1d3/0x2c0 [ 135.987504][ T6822] ? netlink_sendmsg+0x642/0xb30 [ 135.987528][ T6822] ? skb_put+0x11b/0x210 [ 135.987559][ T6822] netlink_sendmsg+0x6b2/0xb30 [ 135.987596][ T6822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.987626][ T6822] ? irqentry_exit+0x74/0x90 [ 135.987648][ T6822] ? aa_sock_msg_perm+0xf1/0x1d0 [ 135.987674][ T6822] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 135.987700][ T6822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.987727][ T6822] __sock_sendmsg+0x219/0x270 [ 135.987754][ T6822] ____sys_sendmsg+0x505/0x830 [ 135.987790][ T6822] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.987830][ T6822] ? import_iovec+0x74/0xa0 [ 135.987865][ T6822] ___sys_sendmsg+0x21f/0x2a0 [ 135.987898][ T6822] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.987967][ T6822] ? __fget_files+0x2a/0x420 [ 135.987988][ T6822] ? __fget_files+0x3a0/0x420 [ 135.988022][ T6822] __x64_sys_sendmsg+0x19b/0x260 [ 135.988055][ T6822] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 135.988112][ T6822] do_syscall_64+0xfa/0x3b0 [ 135.988140][ T6822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.988159][ T6822] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 135.988179][ T6822] ? clear_bhb_loop+0x60/0xb0 [ 135.988203][ T6822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.988222][ T6822] RIP: 0033:0x7fcd3818eec9 [ 135.988248][ T6822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.988265][ T6822] RSP: 002b:00007fcd390f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.988287][ T6822] RAX: ffffffffffffffda RBX: 00007fcd383e5fa0 RCX: 00007fcd3818eec9 [ 135.988301][ T6822] RDX: 0000000004000080 RSI: 0000200000000240 RDI: 0000000000000004 [ 135.988314][ T6822] RBP: 00007fcd390f7090 R08: 0000000000000000 R09: 0000000000000000 [ 135.988326][ T6822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.988338][ T6822] R13: 00007fcd383e6038 R14: 00007fcd383e5fa0 R15: 00007ffe8d8bf288 [ 135.988370][ T6822] [ 136.773669][ T6838] netlink: 48 bytes leftover after parsing attributes in process `syz.0.260'. [ 136.849216][ T6838] tc_dump_action: action bad kind [ 136.939277][ T6838] netlink: 'syz.0.260': attribute type 10 has an invalid length. [ 136.981806][ T6842] netlink: 24 bytes leftover after parsing attributes in process `syz.1.256'. [ 137.009769][ T6838] team0: Port device dummy0 added [ 137.035290][ T6846] netlink: 'syz.0.260': attribute type 10 has an invalid length. [ 137.087576][ T6845] netlink: 260 bytes leftover after parsing attributes in process `syz.3.261'. [ 137.105094][ T6845] netlink: 260 bytes leftover after parsing attributes in process `syz.3.261'. [ 137.474164][ T6851] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 137.740002][ T6846] team0: Port device dummy0 removed [ 137.770185][ T6846] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 140.811528][ T6882] syzkaller0: entered promiscuous mode [ 140.817468][ T6882] syzkaller0: entered allmulticast mode [ 141.853423][ T6896] netlink: 260 bytes leftover after parsing attributes in process `syz.4.274'. [ 141.887622][ T6896] netlink: 260 bytes leftover after parsing attributes in process `syz.4.274'. [ 141.939845][ T6899] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.993220][ T6902] netlink: 'syz.2.275': attribute type 10 has an invalid length. [ 145.452770][ T6902] team0: Device hsr_slave_0 failed to register rx_handler [ 145.828260][ T6938] FAULT_INJECTION: forcing a failure. [ 145.828260][ T6938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.898177][ T6938] CPU: 1 UID: 0 PID: 6938 Comm: syz.1.283 Not tainted syzkaller #0 PREEMPT(full) [ 145.898206][ T6938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 145.898218][ T6938] Call Trace: [ 145.898226][ T6938] [ 145.898235][ T6938] dump_stack_lvl+0x189/0x250 [ 145.898265][ T6938] ? __pfx____ratelimit+0x10/0x10 [ 145.898291][ T6938] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.898315][ T6938] ? __pfx__printk+0x10/0x10 [ 145.898343][ T6938] ? __might_fault+0xb0/0x130 [ 145.898376][ T6938] should_fail_ex+0x414/0x560 [ 145.898404][ T6938] _copy_from_iter+0x1de/0x1790 [ 145.898430][ T6938] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.898464][ T6938] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 145.898490][ T6938] ? kmalloc_reserve+0x1ea/0x290 [ 145.898518][ T6938] ? __pfx__copy_from_iter+0x10/0x10 [ 145.898549][ T6938] ? __build_skb_around+0x257/0x3e0 [ 145.898579][ T6938] ? netlink_sendmsg+0x642/0xb30 [ 145.898604][ T6938] ? skb_put+0x11b/0x210 [ 145.898634][ T6938] netlink_sendmsg+0x6b2/0xb30 [ 145.898661][ T6938] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.898692][ T6938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.898725][ T6938] ? security_socket_sendmsg+0x39/0x2b0 [ 145.898755][ T6938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.898782][ T6938] __sock_sendmsg+0x219/0x270 [ 145.898809][ T6938] ____sys_sendmsg+0x505/0x830 [ 145.898845][ T6938] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.898885][ T6938] ? import_iovec+0x74/0xa0 [ 145.898919][ T6938] ___sys_sendmsg+0x21f/0x2a0 [ 145.898952][ T6938] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.899022][ T6938] ? __fget_files+0x2a/0x420 [ 145.899043][ T6938] ? __fget_files+0x3a0/0x420 [ 145.899076][ T6938] __x64_sys_sendmsg+0x19b/0x260 [ 145.899104][ T6938] ? clockevents_program_event+0x24d/0x360 [ 145.899141][ T6938] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 145.899192][ T6938] ? do_syscall_64+0xbe/0x3b0 [ 145.899223][ T6938] do_syscall_64+0xfa/0x3b0 [ 145.899251][ T6938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.899270][ T6938] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 145.899290][ T6938] ? clear_bhb_loop+0x60/0xb0 [ 145.899314][ T6938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.899334][ T6938] RIP: 0033:0x7f2d7c38eec9 [ 145.899352][ T6938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.899368][ T6938] RSP: 002b:00007f2d7d174038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.899390][ T6938] RAX: ffffffffffffffda RBX: 00007f2d7c5e6180 RCX: 00007f2d7c38eec9 [ 145.899404][ T6938] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000011 [ 145.899416][ T6938] RBP: 00007f2d7d174090 R08: 0000000000000000 R09: 0000000000000000 [ 145.899428][ T6938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.899440][ T6938] R13: 00007f2d7c5e6218 R14: 00007f2d7c5e6180 R15: 00007ffcab2a6e88 [ 145.899473][ T6938] [ 146.285471][ T6934] @: port 1(vlan0) entered blocking state [ 146.300202][ T6934] @: port 1(vlan0) entered disabled state [ 146.325586][ T6934] vlan0: entered allmulticast mode [ 146.331206][ T6934] veth0_vlan: entered allmulticast mode [ 146.339445][ T6934] vlan0: entered promiscuous mode [ 147.433848][ T6956] netlink: 260 bytes leftover after parsing attributes in process `syz.4.288'. [ 147.476006][ T6956] netlink: 260 bytes leftover after parsing attributes in process `syz.4.288'. [ 147.514328][ T6960] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 147.637451][ T6963] netlink: 196 bytes leftover after parsing attributes in process `syz.1.291'. [ 148.928211][ T6979] netlink: 'syz.0.295': attribute type 4 has an invalid length. [ 152.066752][ T7006] FAULT_INJECTION: forcing a failure. [ 152.066752][ T7006] name failslab, interval 1, probability 0, space 0, times 0 [ 152.086271][ T7006] CPU: 1 UID: 0 PID: 7006 Comm: syz.0.303 Not tainted syzkaller #0 PREEMPT(full) [ 152.086300][ T7006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 152.086312][ T7006] Call Trace: [ 152.086324][ T7006] [ 152.086337][ T7006] dump_stack_lvl+0x189/0x250 [ 152.086375][ T7006] ? __pfx____ratelimit+0x10/0x10 [ 152.086412][ T7006] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.086447][ T7006] ? __pfx__printk+0x10/0x10 [ 152.086520][ T7006] ? __pfx___might_resched+0x10/0x10 [ 152.086537][ T7006] ? fs_reclaim_acquire+0x7d/0x100 [ 152.086599][ T7006] should_fail_ex+0x414/0x560 [ 152.086648][ T7006] should_failslab+0xa8/0x100 [ 152.086677][ T7006] __kmalloc_cache_noprof+0x70/0x3d0 [ 152.086696][ T7006] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 152.086738][ T7006] tcp_sendmsg_fastopen+0x1de/0x5e0 [ 152.086791][ T7006] mptcp_sendmsg_fastopen+0x17d/0x580 [ 152.086855][ T7006] mptcp_sendmsg+0x176c/0x1970 [ 152.086883][ T7006] ? __pfx___might_resched+0x10/0x10 [ 152.086897][ T7006] ? trace_call_bpf+0x5ba/0x850 [ 152.086916][ T7006] ? trace_call_bpf+0xb7/0x850 [ 152.086928][ T7006] ? trace_call_bpf+0xb7/0x850 [ 152.086972][ T7006] ? __pfx_trace_call_bpf+0x10/0x10 [ 152.086984][ T7006] ? trace_call_bpf+0xb7/0x850 [ 152.087018][ T7006] ? aa_sk_perm+0x81e/0x950 [ 152.087066][ T7006] ? __pfx_aa_sk_perm+0x10/0x10 [ 152.087092][ T7006] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 152.087117][ T7006] ? perf_trace_lock+0x2f8/0x3b0 [ 152.087137][ T7006] ? sock_rps_record_flow+0x19/0x410 [ 152.087171][ T7006] ? inet_sendmsg+0x2f4/0x370 [ 152.087213][ T7006] __sock_sendmsg+0x19c/0x270 [ 152.087256][ T7006] ____sys_sendmsg+0x505/0x830 [ 152.087325][ T7006] ? __pfx_____sys_sendmsg+0x10/0x10 [ 152.087417][ T7006] ? import_iovec+0x74/0xa0 [ 152.087480][ T7006] ___sys_sendmsg+0x21f/0x2a0 [ 152.087535][ T7006] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.087696][ T7006] ? __fget_files+0x2a/0x420 [ 152.087795][ T7006] ? __fget_files+0x2a/0x420 [ 152.087820][ T7006] ? __fget_files+0x3a0/0x420 [ 152.087908][ T7006] __x64_sys_sendmsg+0x19b/0x260 [ 152.087965][ T7006] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 152.088057][ T7006] ? __pfx_ksys_write+0x10/0x10 [ 152.088073][ T7006] ? rcu_is_watching+0x15/0xb0 [ 152.088132][ T7006] ? do_syscall_64+0xbe/0x3b0 [ 152.088189][ T7006] do_syscall_64+0xfa/0x3b0 [ 152.088216][ T7006] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.088247][ T7006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.088271][ T7006] ? clear_bhb_loop+0x60/0xb0 [ 152.088316][ T7006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.088338][ T7006] RIP: 0033:0x7fcd3818eec9 [ 152.088365][ T7006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.088382][ T7006] RSP: 002b:00007fcd390f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.088403][ T7006] RAX: ffffffffffffffda RBX: 00007fcd383e5fa0 RCX: 00007fcd3818eec9 [ 152.088418][ T7006] RDX: 0000000030004001 RSI: 0000200000000080 RDI: 0000000000000005 [ 152.088431][ T7006] RBP: 00007fcd390f7090 R08: 0000000000000000 R09: 0000000000000000 [ 152.088443][ T7006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.088455][ T7006] R13: 00007fcd383e6038 R14: 00007fcd383e5fa0 R15: 00007ffe8d8bf288 [ 152.088568][ T7006] [ 152.597365][ T7014] netlink: 92 bytes leftover after parsing attributes in process `syz.2.304'. [ 152.638357][ T7014] netlink: 92 bytes leftover after parsing attributes in process `syz.2.304'. [ 153.956491][ T7035] netlink: 92 bytes leftover after parsing attributes in process `syz.4.312'. [ 154.074642][ T7035] netlink: 92 bytes leftover after parsing attributes in process `syz.4.312'. [ 154.398347][ T7036] netlink: 260 bytes leftover after parsing attributes in process `syz.3.313'. [ 154.411601][ T7036] netlink: 260 bytes leftover after parsing attributes in process `syz.3.313'. [ 154.457683][ T7040] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 154.937767][ T7050] netlink: 20 bytes leftover after parsing attributes in process `syz.1.317'. [ 155.291680][ T7056] netlink: 260 bytes leftover after parsing attributes in process `syz.4.319'. [ 155.359575][ T7056] netlink: 260 bytes leftover after parsing attributes in process `syz.4.319'. [ 155.387272][ T7063] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 156.718033][ T7088] netlink: 260 bytes leftover after parsing attributes in process `syz.2.327'. [ 156.798553][ T7088] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 157.772468][ T7113] __nla_validate_parse: 2 callbacks suppressed [ 157.772516][ T7113] netlink: 260 bytes leftover after parsing attributes in process `syz.1.334'. [ 157.789035][ T7113] netlink: 260 bytes leftover after parsing attributes in process `syz.1.334'. [ 157.810340][ T7116] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.486869][ T7144] netlink: 260 bytes leftover after parsing attributes in process `syz.2.342'. [ 159.539322][ T7149] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.598364][ T7144] netlink: 260 bytes leftover after parsing attributes in process `syz.2.342'. [ 160.670067][ T7167] netlink: 260 bytes leftover after parsing attributes in process `syz.3.348'. [ 160.696945][ T7167] netlink: 260 bytes leftover after parsing attributes in process `syz.3.348'. [ 160.723372][ T7172] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 161.093786][ T7179] netlink: 20 bytes leftover after parsing attributes in process `syz.0.351'. [ 161.729884][ T7187] netlink: 260 bytes leftover after parsing attributes in process `syz.0.355'. [ 161.739666][ T7187] netlink: 260 bytes leftover after parsing attributes in process `syz.0.355'. [ 161.771871][ T7196] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.743029][ T7211] netlink: 260 bytes leftover after parsing attributes in process `syz.0.362'. [ 162.788764][ T7219] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 163.715621][ T7234] __nla_validate_parse: 1 callbacks suppressed [ 163.715644][ T7234] netlink: 20 bytes leftover after parsing attributes in process `syz.4.368'. [ 164.037508][ T7239] netlink: 260 bytes leftover after parsing attributes in process `syz.0.370'. [ 164.068756][ T7239] netlink: 260 bytes leftover after parsing attributes in process `syz.0.370'. [ 164.087191][ T7242] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 165.549150][ T7263] netlink: 260 bytes leftover after parsing attributes in process `syz.2.377'. [ 165.564387][ T7263] netlink: 260 bytes leftover after parsing attributes in process `syz.2.377'. [ 165.650952][ T7269] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 166.628692][ T7289] netlink: 20 bytes leftover after parsing attributes in process `syz.0.383'. [ 166.861254][ T7291] netlink: 260 bytes leftover after parsing attributes in process `syz.3.384'. [ 166.876517][ T7291] netlink: 260 bytes leftover after parsing attributes in process `syz.3.384'. [ 166.941518][ T7293] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 168.578790][ T7316] netlink: 260 bytes leftover after parsing attributes in process `syz.0.392'. [ 168.589081][ T7316] netlink: 260 bytes leftover after parsing attributes in process `syz.0.392'. [ 168.617994][ T7321] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 169.765114][ T7338] netlink: 260 bytes leftover after parsing attributes in process `syz.3.398'. [ 169.929364][ T7341] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.021297][ T7338] netlink: 260 bytes leftover after parsing attributes in process `syz.3.398'. [ 171.596225][ T7363] netlink: 92 bytes leftover after parsing attributes in process `syz.1.405'. [ 171.638174][ T7363] netlink: 92 bytes leftover after parsing attributes in process `syz.1.405'. [ 171.987533][ T7370] netlink: 260 bytes leftover after parsing attributes in process `syz.2.406'. [ 172.035695][ T7370] netlink: 260 bytes leftover after parsing attributes in process `syz.2.406'. [ 172.090022][ T7366] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 172.602173][ T7382] netlink: 260 bytes leftover after parsing attributes in process `syz.2.411'. [ 172.616478][ T7382] netlink: 260 bytes leftover after parsing attributes in process `syz.2.411'. [ 172.688534][ T7386] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 174.258906][ T7406] netlink: 92 bytes leftover after parsing attributes in process `syz.4.418'. [ 174.288364][ T7406] netlink: 92 bytes leftover after parsing attributes in process `syz.4.418'. [ 174.861877][ T7418] netlink: 'syz.1.421': attribute type 10 has an invalid length. [ 174.870787][ T7418] netlink: 40 bytes leftover after parsing attributes in process `syz.1.421'. [ 174.885510][ T7418] team0: entered promiscuous mode [ 174.891882][ T7418] team_slave_0: entered promiscuous mode [ 174.903447][ T7418] team_slave_1: entered promiscuous mode [ 174.957089][ T7418] team0: entered allmulticast mode [ 174.970074][ T7421] netlink: 260 bytes leftover after parsing attributes in process `syz.2.422'. [ 174.976730][ T7418] team_slave_0: entered allmulticast mode [ 174.984899][ T7418] team_slave_1: entered allmulticast mode [ 174.992262][ T7421] netlink: 260 bytes leftover after parsing attributes in process `syz.2.422'. [ 175.033383][ T7424] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 175.043269][ T7418] bridge0: port 3(team0) entered blocking state [ 175.050209][ T7418] bridge0: port 3(team0) entered disabled state [ 175.096533][ T7418] bridge0: port 3(team0) entered blocking state [ 175.103325][ T7418] bridge0: port 3(team0) entered forwarding state [ 175.530734][ T7430] netlink: 260 bytes leftover after parsing attributes in process `syz.0.424'. [ 175.573792][ T7430] netlink: 260 bytes leftover after parsing attributes in process `syz.0.424'. [ 175.607087][ T7439] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 177.378405][ T7472] netlink: 92 bytes leftover after parsing attributes in process `syz.4.436'. [ 177.432395][ T7472] netlink: 92 bytes leftover after parsing attributes in process `syz.4.436'. [ 177.878474][ T7480] netlink: 260 bytes leftover after parsing attributes in process `syz.3.440'. [ 177.928792][ T7480] netlink: 260 bytes leftover after parsing attributes in process `syz.3.440'. [ 177.940079][ T7485] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 179.678250][ T7516] netlink: 92 bytes leftover after parsing attributes in process `syz.3.451'. [ 180.152131][ T7534] __nla_validate_parse: 1 callbacks suppressed [ 180.152179][ T7534] netlink: 260 bytes leftover after parsing attributes in process `syz.2.454'. [ 180.188943][ T7534] netlink: 260 bytes leftover after parsing attributes in process `syz.2.454'. [ 180.304509][ T7537] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.231570][ T7567] netlink: 92 bytes leftover after parsing attributes in process `syz.4.466'. [ 181.303213][ T7567] netlink: 92 bytes leftover after parsing attributes in process `syz.4.466'. [ 181.844343][ T7584] netlink: 763 bytes leftover after parsing attributes in process `syz.1.470'. [ 182.140958][ T7595] FAULT_INJECTION: forcing a failure. [ 182.140958][ T7595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.154711][ T7595] CPU: 1 UID: 0 PID: 7595 Comm: syz.0.474 Not tainted syzkaller #0 PREEMPT(full) [ 182.154737][ T7595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 182.154749][ T7595] Call Trace: [ 182.154765][ T7595] [ 182.154773][ T7595] dump_stack_lvl+0x189/0x250 [ 182.154803][ T7595] ? __pfx____ratelimit+0x10/0x10 [ 182.154828][ T7595] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.154851][ T7595] ? __pfx__printk+0x10/0x10 [ 182.154879][ T7595] ? __might_fault+0xb0/0x130 [ 182.154917][ T7595] should_fail_ex+0x414/0x560 [ 182.154944][ T7595] _copy_from_iter+0x1de/0x1790 [ 182.154980][ T7595] ? rcu_is_watching+0x15/0xb0 [ 182.155002][ T7595] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 182.155035][ T7595] ? __pfx__copy_from_iter+0x10/0x10 [ 182.155064][ T7595] ? __build_skb_around+0x257/0x3e0 [ 182.155094][ T7595] ? netlink_sendmsg+0x642/0xb30 [ 182.155118][ T7595] ? skb_put+0x11b/0x210 [ 182.155149][ T7595] netlink_sendmsg+0x6b2/0xb30 [ 182.155185][ T7595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.155215][ T7595] ? aa_sock_msg_perm+0xf1/0x1d0 [ 182.155241][ T7595] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 182.155266][ T7595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.155293][ T7595] __sock_sendmsg+0x219/0x270 [ 182.155318][ T7595] ____sys_sendmsg+0x505/0x830 [ 182.155353][ T7595] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.155392][ T7595] ? import_iovec+0x74/0xa0 [ 182.155426][ T7595] ___sys_sendmsg+0x21f/0x2a0 [ 182.155458][ T7595] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.155526][ T7595] ? __fget_files+0x2a/0x420 [ 182.155546][ T7595] ? __fget_files+0x3a0/0x420 [ 182.155579][ T7595] __x64_sys_sendmsg+0x19b/0x260 [ 182.155611][ T7595] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 182.155650][ T7595] ? __pfx_ksys_write+0x10/0x10 [ 182.155666][ T7595] ? rcu_is_watching+0x15/0xb0 [ 182.155690][ T7595] ? do_syscall_64+0xbe/0x3b0 [ 182.155720][ T7595] do_syscall_64+0xfa/0x3b0 [ 182.155744][ T7595] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.155767][ T7595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.155786][ T7595] ? clear_bhb_loop+0x60/0xb0 [ 182.155810][ T7595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.155828][ T7595] RIP: 0033:0x7fcd3818eec9 [ 182.155846][ T7595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.155861][ T7595] RSP: 002b:00007fcd390f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.155922][ T7595] RAX: ffffffffffffffda RBX: 00007fcd383e5fa0 RCX: 00007fcd3818eec9 [ 182.155937][ T7595] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 182.155947][ T7595] RBP: 00007fcd390f7090 R08: 0000000000000000 R09: 0000000000000000 [ 182.155959][ T7595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.155970][ T7595] R13: 00007fcd383e6038 R14: 00007fcd383e5fa0 R15: 00007ffe8d8bf288 [ 182.156002][ T7595] [ 182.508105][ T7599] sit0: entered allmulticast mode [ 183.008211][ T7609] netlink: 260 bytes leftover after parsing attributes in process `syz.4.478'. [ 183.021910][ T7609] netlink: 260 bytes leftover after parsing attributes in process `syz.4.478'. [ 183.050577][ T7611] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.436443][ T7653] netlink: 92 bytes leftover after parsing attributes in process `syz.0.490'. [ 185.496677][ T7653] netlink: 92 bytes leftover after parsing attributes in process `syz.0.490'. [ 185.528588][ T7656] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.985498][ T7668] netlink: 260 bytes leftover after parsing attributes in process `syz.0.494'. [ 186.000220][ T7669] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.008882][ T7668] netlink: 260 bytes leftover after parsing attributes in process `syz.0.494'. [ 186.751613][ T7695] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.863386][ T7697] netlink: 92 bytes leftover after parsing attributes in process `syz.0.505'. [ 186.932205][ T7697] netlink: 92 bytes leftover after parsing attributes in process `syz.0.505'. [ 187.189887][ T7708] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.508'. [ 187.442925][ T7710] netlink: 260 bytes leftover after parsing attributes in process `syz.4.509'. [ 187.466711][ T7710] netlink: 260 bytes leftover after parsing attributes in process `syz.4.509'. [ 187.528535][ T7716] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 187.568350][ T7714] netlink: 260 bytes leftover after parsing attributes in process `syz.0.511'. [ 187.610864][ T7717] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 187.891208][ T7731] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.694981][ T7755] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.988569][ T7757] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 189.323824][ T7775] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.315767][ T7797] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 190.644680][ T7813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.337888][ T7829] __nla_validate_parse: 13 callbacks suppressed [ 191.337919][ T7829] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.552'. [ 191.642180][ T7840] netlink: 92 bytes leftover after parsing attributes in process `syz.1.557'. [ 191.654405][ T7840] netlink: 92 bytes leftover after parsing attributes in process `syz.1.557'. [ 191.711352][ T7836] netlink: 260 bytes leftover after parsing attributes in process `syz.3.554'. [ 191.741324][ T7836] netlink: 260 bytes leftover after parsing attributes in process `syz.3.554'. [ 191.755611][ T7843] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 192.077079][ T7856] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.285445][ T7881] netlink: 260 bytes leftover after parsing attributes in process `syz.4.571'. [ 193.295377][ T7881] netlink: 260 bytes leftover after parsing attributes in process `syz.4.571'. [ 193.353422][ T7881] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 193.572918][ T7883] netlink: 260 bytes leftover after parsing attributes in process `syz.1.572'. [ 193.597569][ T7883] netlink: 260 bytes leftover after parsing attributes in process `syz.1.572'. [ 193.675340][ T7883] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 194.068127][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.074578][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.969851][ T7916] netlink: 260 bytes leftover after parsing attributes in process `syz.0.584'. [ 195.030824][ T7916] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 195.603475][ T7928] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 196.051766][ T7935] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.241913][ T7967] __nla_validate_parse: 5 callbacks suppressed [ 197.241995][ T7967] netlink: 260 bytes leftover after parsing attributes in process `syz.0.600'. [ 197.298904][ T7967] netlink: 260 bytes leftover after parsing attributes in process `syz.0.600'. [ 197.304632][ T7972] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.732219][ T7979] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.522124][ T8009] netlink: 92 bytes leftover after parsing attributes in process `syz.0.612'. [ 199.533126][ T8009] netlink: 92 bytes leftover after parsing attributes in process `syz.0.612'. [ 201.854305][ T8045] netlink: 92 bytes leftover after parsing attributes in process `syz.2.628'. [ 201.870068][ T8045] netlink: 92 bytes leftover after parsing attributes in process `syz.2.628'. [ 203.040188][ T8078] netlink: 260 bytes leftover after parsing attributes in process `syz.0.637'. [ 203.134498][ T8078] netlink: 260 bytes leftover after parsing attributes in process `syz.0.637'. [ 203.214347][ T8072] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 205.991957][ T8131] netlink: 260 bytes leftover after parsing attributes in process `syz.4.658'. [ 206.046613][ T8131] netlink: 260 bytes leftover after parsing attributes in process `syz.4.658'. [ 206.091886][ T8136] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 206.376322][ T5874] Bluetooth: hci0: command 0x0406 tx timeout [ 206.382840][ T5874] Bluetooth: hci1: command 0x0406 tx timeout [ 206.389560][ T5874] Bluetooth: hci4: command 0x0406 tx timeout [ 206.395615][ T5874] Bluetooth: hci3: command 0x0406 tx timeout [ 206.402462][ T8144] Bluetooth: hci2: command 0x0406 tx timeout [ 207.176978][ T8159] netlink: 260 bytes leftover after parsing attributes in process `syz.4.666'. [ 207.201798][ T8159] netlink: 260 bytes leftover after parsing attributes in process `syz.4.666'. [ 207.245022][ T8166] sit0: entered allmulticast mode [ 207.249470][ T8159] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 209.557995][ T8207] netlink: 260 bytes leftover after parsing attributes in process `syz.3.681'. [ 209.567787][ T8207] netlink: 260 bytes leftover after parsing attributes in process `syz.3.681'. [ 209.613353][ T8212] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.140754][ T8226] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.687'. [ 211.826598][ T8249] netlink: 260 bytes leftover after parsing attributes in process `syz.2.694'. [ 211.850574][ T8249] netlink: 260 bytes leftover after parsing attributes in process `syz.2.694'. [ 211.893257][ T8254] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 212.927948][ T8273] netlink: 260 bytes leftover after parsing attributes in process `syz.2.701'. [ 212.947453][ T8273] netlink: 260 bytes leftover after parsing attributes in process `syz.2.701'. [ 212.979762][ T8279] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.125705][ T8290] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.706'. [ 214.396208][ T8292] netlink: 260 bytes leftover after parsing attributes in process `syz.0.707'. [ 214.430105][ T8292] netlink: 260 bytes leftover after parsing attributes in process `syz.0.707'. [ 214.516852][ T8301] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.075155][ T8333] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.721'. [ 217.170795][ T8342] netlink: 260 bytes leftover after parsing attributes in process `syz.3.724'. [ 217.207055][ T8342] netlink: 260 bytes leftover after parsing attributes in process `syz.3.724'. [ 217.227281][ T8345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 218.034452][ T8365] netlink: 260 bytes leftover after parsing attributes in process `syz.2.732'. [ 218.044451][ T8365] netlink: 260 bytes leftover after parsing attributes in process `syz.2.732'. [ 218.099085][ T8365] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 219.147593][ T8384] netlink: 260 bytes leftover after parsing attributes in process `syz.0.738'. [ 219.166614][ T8384] netlink: 260 bytes leftover after parsing attributes in process `syz.0.738'. [ 219.196508][ T8390] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 220.357588][ T8409] netlink: 260 bytes leftover after parsing attributes in process `syz.2.744'. [ 220.383451][ T8409] netlink: 260 bytes leftover after parsing attributes in process `syz.2.744'. [ 220.454654][ T8409] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 221.667075][ T8434] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 221.669435][ T8433] netlink: 260 bytes leftover after parsing attributes in process `syz.3.750'. [ 222.431668][ T8460] __nla_validate_parse: 1 callbacks suppressed [ 222.431689][ T8460] netlink: 260 bytes leftover after parsing attributes in process `syz.1.758'. [ 222.473696][ T8460] netlink: 260 bytes leftover after parsing attributes in process `syz.1.758'. [ 222.564886][ T8455] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 223.477600][ T8483] netlink: 260 bytes leftover after parsing attributes in process `syz.0.766'. [ 223.499457][ T8483] netlink: 260 bytes leftover after parsing attributes in process `syz.0.766'. [ 223.561280][ T8483] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 224.376259][ T8494] netlink: 260 bytes leftover after parsing attributes in process `syz.0.770'. [ 224.385748][ T8494] netlink: 260 bytes leftover after parsing attributes in process `syz.0.770'. [ 224.413971][ T8500] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 225.354407][ T8520] netlink: 260 bytes leftover after parsing attributes in process `syz.1.777'. [ 225.396456][ T8520] netlink: 260 bytes leftover after parsing attributes in process `syz.1.777'. [ 225.406876][ T8524] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 225.734133][ T8540] netlink: 260 bytes leftover after parsing attributes in process `syz.1.785'. [ 225.744942][ T8540] netlink: 260 bytes leftover after parsing attributes in process `syz.1.785'. [ 225.791187][ T8540] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 226.783171][ T8560] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 227.100511][ T8573] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 227.157867][ T8576] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 228.026997][ T8605] __nla_validate_parse: 7 callbacks suppressed [ 228.027020][ T8605] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.808'. [ 231.999862][ T8686] netlink: 260 bytes leftover after parsing attributes in process `syz.3.832'. [ 232.009854][ T8686] netlink: 260 bytes leftover after parsing attributes in process `syz.3.832'. [ 232.088022][ T8689] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.157594][ T8690] netlink: 260 bytes leftover after parsing attributes in process `syz.1.833'. [ 232.257530][ T8690] netlink: 260 bytes leftover after parsing attributes in process `syz.1.833'. [ 232.271057][ T8688] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 236.160422][ T8778] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 236.191131][ T8775] netlink: 260 bytes leftover after parsing attributes in process `syz.4.859'. [ 236.200878][ T8775] netlink: 260 bytes leftover after parsing attributes in process `syz.4.859'. [ 240.544420][ T8850] netlink: 260 bytes leftover after parsing attributes in process `syz.1.883'. [ 240.554296][ T8850] netlink: 260 bytes leftover after parsing attributes in process `syz.1.883'. [ 240.620916][ T8850] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 244.748464][ T8914] netlink: 260 bytes leftover after parsing attributes in process `syz.3.904'. [ 244.779475][ T8914] netlink: 260 bytes leftover after parsing attributes in process `syz.3.904'. [ 244.822055][ T8918] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 245.508997][ T8936] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 246.723622][ T8949] netlink: 260 bytes leftover after parsing attributes in process `syz.0.916'. [ 246.742448][ T8949] netlink: 260 bytes leftover after parsing attributes in process `syz.0.916'. [ 246.764152][ T8950] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 247.729335][ T8974] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 248.000125][ T8980] netlink: 260 bytes leftover after parsing attributes in process `syz.1.926'. [ 248.037965][ T8980] netlink: 260 bytes leftover after parsing attributes in process `syz.1.926'. [ 248.042136][ T8981] netlink: 260 bytes leftover after parsing attributes in process `syz.3.927'. [ 248.052573][ T8982] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 248.081279][ T8983] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 248.114686][ T8981] netlink: 260 bytes leftover after parsing attributes in process `syz.3.927'. [ 249.264654][ T9006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 249.998515][ T9031] netlink: 260 bytes leftover after parsing attributes in process `syz.0.945'. [ 250.017204][ T9031] netlink: 260 bytes leftover after parsing attributes in process `syz.0.945'. [ 250.084138][ T9031] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 250.729108][ T9052] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 251.850536][ T9075] netlink: 16 bytes leftover after parsing attributes in process `syz.2.959'. [ 252.699269][ T9095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 253.493142][ T9117] netlink: 16 bytes leftover after parsing attributes in process `syz.0.973'. [ 255.508434][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.514986][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.676647][ T9140] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 258.151870][ T9188] netlink: 260 bytes leftover after parsing attributes in process `syz.1.995'. [ 258.164813][ T9188] netlink: 260 bytes leftover after parsing attributes in process `syz.1.995'. [ 258.238293][ T9188] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 260.170407][ T9223] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1006'. [ 260.188095][ T9223] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1006'. [ 260.253232][ T9226] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 260.735012][ T9244] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1013'. [ 260.889549][ T9250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 262.020906][ T9267] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1020'. [ 262.031239][ T9267] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1020'. [ 262.064132][ T9274] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 262.376996][ T9279] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1023'. [ 262.387814][ T9279] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1023'. [ 262.427189][ T9283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 263.558484][ T9303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1031'. [ 264.022844][ T9312] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1032'. [ 265.323745][ T9330] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1038'. [ 265.439119][ T9333] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 265.495422][ T9330] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1038'. [ 266.347503][ T9345] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1044'. [ 266.366662][ T9345] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1044'. [ 266.388163][ T9351] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 266.425056][ T9350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1045'. [ 267.673808][ T9374] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.645006][ T9402] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1057'. [ 269.705870][ T9405] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 269.724298][ T9402] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1057'. [ 269.988639][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1061'. [ 271.827919][ T9447] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1073'. [ 275.399820][ T9494] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1086'. [ 275.429498][ T9498] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 275.454869][ T9494] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1086'. [ 275.882565][ T9503] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1089'. [ 277.995652][ T9550] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1102'. [ 278.005476][ T9550] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1102'. [ 278.065901][ T9550] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 278.477316][ T9558] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1104'. [ 278.496456][ T9558] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1104'. [ 278.519800][ T9561] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 280.115555][ T9599] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1119'. [ 282.672138][ T9649] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1136'. [ 282.693185][ T9649] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1136'. [ 282.741720][ T9649] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.237394][ T9672] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1143'. [ 286.878810][ T9742] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 289.458587][ T9781] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1179'. [ 289.511600][ T9781] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1179'. [ 289.670885][ T9788] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 290.686449][ T9797] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1181'. [ 290.696526][ T9797] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1181'. [ 290.751245][ T9798] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 291.561435][ T9814] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1189'. [ 291.571306][ T9814] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1189'. [ 291.651736][ T9814] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 294.787236][ T9861] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1204'. [ 294.829570][ T9862] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 294.876669][ T9861] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1204'. [ 295.847952][ T9877] FAULT_INJECTION: forcing a failure. [ 295.847952][ T9877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.943516][ T9877] CPU: 0 UID: 0 PID: 9877 Comm: syz.4.1207 Not tainted syzkaller #0 PREEMPT(full) [ 295.943545][ T9877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 295.943569][ T9877] Call Trace: [ 295.943578][ T9877] [ 295.943588][ T9877] dump_stack_lvl+0x189/0x250 [ 295.943619][ T9877] ? __pfx____ratelimit+0x10/0x10 [ 295.943646][ T9877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.943670][ T9877] ? __pfx__printk+0x10/0x10 [ 295.943699][ T9877] ? __might_fault+0xb0/0x130 [ 295.943732][ T9877] should_fail_ex+0x414/0x560 [ 295.943760][ T9877] _copy_from_user+0x2d/0xb0 [ 295.943780][ T9877] __sys_bpf+0x1e3/0x860 [ 295.943810][ T9877] ? __pfx___sys_bpf+0x10/0x10 [ 295.943853][ T9877] ? do_syscall_64+0xb7/0x3b0 [ 295.943878][ T9877] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 295.943908][ T9877] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 295.943937][ T9877] ? __pfx_ksys_write+0x10/0x10 [ 295.943965][ T9877] __x64_sys_bpf+0x7c/0x90 [ 295.943990][ T9877] do_syscall_64+0xfa/0x3b0 [ 295.944015][ T9877] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.944040][ T9877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.944059][ T9877] ? clear_bhb_loop+0x60/0xb0 [ 295.944090][ T9877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.944109][ T9877] RIP: 0033:0x7f12f0b8eec9 [ 295.944128][ T9877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.944144][ T9877] RSP: 002b:00007f12f1aab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 295.944166][ T9877] RAX: ffffffffffffffda RBX: 00007f12f0de6180 RCX: 00007f12f0b8eec9 [ 295.944181][ T9877] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 295.944194][ T9877] RBP: 00007f12f1aab090 R08: 0000000000000000 R09: 0000000000000000 [ 295.944205][ T9877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.944217][ T9877] R13: 00007f12f0de6218 R14: 00007f12f0de6180 R15: 00007ffc140fb128 [ 295.944249][ T9877] [ 298.106156][ C1] sched: DL replenish lagged too much [ 299.169172][ T9896] netlink: 'syz.2.1213': attribute type 29 has an invalid length. [ 299.209613][ T9898] netlink: 'syz.2.1213': attribute type 29 has an invalid length. [ 299.390817][ T9905] netlink: 'syz.1.1215': attribute type 274 has an invalid length. [ 300.097153][ T9907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1212'. [ 300.122810][ T9909] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1217'. [ 300.142014][ T9907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1212'. [ 300.204836][ T9914] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 300.241220][ T9915] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 300.303297][ T9909] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1217'. [ 301.001321][ T9928] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1222'. [ 301.073714][ T9928] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 301.185678][ T9936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1224'. [ 301.488023][ T9950] syz.2.1230 uses obsolete (PF_INET,SOCK_PACKET) [ 301.691064][ T9953] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1230'. [ 302.150481][ T9969] FAULT_INJECTION: forcing a failure. [ 302.150481][ T9969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.174284][ T9969] CPU: 0 UID: 0 PID: 9969 Comm: syz.4.1236 Not tainted syzkaller #0 PREEMPT(full) [ 302.174314][ T9969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 302.174327][ T9969] Call Trace: [ 302.174336][ T9969] [ 302.174345][ T9969] dump_stack_lvl+0x189/0x250 [ 302.174375][ T9969] ? __pfx____ratelimit+0x10/0x10 [ 302.174401][ T9969] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.174427][ T9969] ? __pfx__printk+0x10/0x10 [ 302.174470][ T9969] should_fail_ex+0x414/0x560 [ 302.174497][ T9969] _copy_to_user+0x31/0xb0 [ 302.174519][ T9969] simple_read_from_buffer+0xe1/0x170 [ 302.174547][ T9969] proc_fail_nth_read+0x1b3/0x220 [ 302.174578][ T9969] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 302.174610][ T9969] ? rw_verify_area+0x2a6/0x4d0 [ 302.174639][ T9969] ? __lock_acquire+0xab9/0xd20 [ 302.174666][ T9969] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 302.174695][ T9969] vfs_read+0x200/0xa30 [ 302.174725][ T9969] ? fdget_pos+0x247/0x320 [ 302.174752][ T9969] ? __pfx___mutex_lock+0x10/0x10 [ 302.174788][ T9969] ? __pfx_vfs_read+0x10/0x10 [ 302.174821][ T9969] ? __fget_files+0x2a/0x420 [ 302.174847][ T9969] ? __fget_files+0x3a0/0x420 [ 302.174869][ T9969] ? __fget_files+0x2a/0x420 [ 302.174901][ T9969] ksys_read+0x145/0x250 [ 302.174922][ T9969] ? __pfx_ksys_read+0x10/0x10 [ 302.174937][ T9969] ? rcu_is_watching+0x15/0xb0 [ 302.174965][ T9969] ? do_syscall_64+0xbe/0x3b0 [ 302.174995][ T9969] do_syscall_64+0xfa/0x3b0 [ 302.175021][ T9969] ? lockdep_hardirqs_on+0x9c/0x150 [ 302.175046][ T9969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.175066][ T9969] ? clear_bhb_loop+0x60/0xb0 [ 302.175091][ T9969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.175110][ T9969] RIP: 0033:0x7f12f0b8d8dc [ 302.175128][ T9969] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 302.175147][ T9969] RSP: 002b:00007f12f1aed030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 302.175169][ T9969] RAX: ffffffffffffffda RBX: 00007f12f0de5fa0 RCX: 00007f12f0b8d8dc [ 302.175184][ T9969] RDX: 000000000000000f RSI: 00007f12f1aed0a0 RDI: 0000000000000004 [ 302.175197][ T9969] RBP: 00007f12f1aed090 R08: 0000000000000000 R09: 0000000000000000 [ 302.175210][ T9969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.175222][ T9969] R13: 00007f12f0de6038 R14: 00007f12f0de5fa0 R15: 00007ffc140fb128 [ 302.175256][ T9969] [ 302.430704][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1237'. [ 302.992596][ T9991] netlink: 'syz.1.1239': attribute type 16 has an invalid length. [ 303.014027][ T9991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1239'. [ 304.238419][T10007] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1249'. [ 304.320074][T10007] unsupported nlmsg_type 40 [ 304.710034][T10000] delete_channel: no stack [ 305.517934][T10028] FAULT_INJECTION: forcing a failure. [ 305.517934][T10028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.544958][T10028] CPU: 1 UID: 0 PID: 10028 Comm: syz.3.1252 Not tainted syzkaller #0 PREEMPT(full) [ 305.544987][T10028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 305.545001][T10028] Call Trace: [ 305.545010][T10028] [ 305.545019][T10028] dump_stack_lvl+0x189/0x250 [ 305.545050][T10028] ? __pfx____ratelimit+0x10/0x10 [ 305.545077][T10028] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.545103][T10028] ? __pfx__printk+0x10/0x10 [ 305.545132][T10028] ? __might_fault+0xb0/0x130 [ 305.545157][T10028] ? __might_fault+0xb0/0x130 [ 305.545185][T10028] should_fail_ex+0x414/0x560 [ 305.545216][T10028] _copy_from_user+0x2d/0xb0 [ 305.545236][T10028] kstrtouint_from_user+0xc4/0x170 [ 305.545268][T10028] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 305.545320][T10028] proc_fail_nth_write+0x88/0x200 [ 305.545349][T10028] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 305.545386][T10028] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 305.545426][T10028] vfs_write+0x27b/0xb30 [ 305.545473][T10028] ? __pfx_vfs_write+0x10/0x10 [ 305.545508][T10028] ? __fget_files+0x2a/0x420 [ 305.545537][T10028] ? __fget_files+0x3a0/0x420 [ 305.545558][T10028] ? __fget_files+0x2a/0x420 [ 305.545593][T10028] ksys_write+0x145/0x250 [ 305.545617][T10028] ? __pfx_ksys_write+0x10/0x10 [ 305.545633][T10028] ? rcu_is_watching+0x15/0xb0 [ 305.545661][T10028] ? do_syscall_64+0xbe/0x3b0 [ 305.545694][T10028] do_syscall_64+0xfa/0x3b0 [ 305.545722][T10028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.545742][T10028] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 305.545761][T10028] ? clear_bhb_loop+0x60/0xb0 [ 305.545791][T10028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.545811][T10028] RIP: 0033:0x7f07ce18d97f [ 305.545829][T10028] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 305.545846][T10028] RSP: 002b:00007f07cefc6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 305.545867][T10028] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f07ce18d97f [ 305.545882][T10028] RDX: 0000000000000001 RSI: 00007f07cefc60a0 RDI: 0000000000000009 [ 305.545894][T10028] RBP: 00007f07cefc6090 R08: 0000000000000000 R09: 0000000000000000 [ 305.545906][T10028] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 305.545917][T10028] R13: 00007f07ce3e6128 R14: 00007f07ce3e6090 R15: 00007ffc8b25d058 [ 305.545956][T10028] [ 308.289063][T10052] netlink: 'syz.2.1259': attribute type 16 has an invalid length. [ 308.331059][T10052] __nla_validate_parse: 2 callbacks suppressed [ 308.331081][T10052] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1259'. [ 308.876536][T10061] netlink: 'syz.1.1261': attribute type 1 has an invalid length. [ 308.898620][T10061] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1261'. [ 309.032980][T10066] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 309.194362][T10071] FAULT_INJECTION: forcing a failure. [ 309.194362][T10071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.243250][T10071] CPU: 0 UID: 0 PID: 10071 Comm: syz.2.1264 Not tainted syzkaller #0 PREEMPT(full) [ 309.243279][T10071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 309.243292][T10071] Call Trace: [ 309.243301][T10071] [ 309.243310][T10071] dump_stack_lvl+0x189/0x250 [ 309.243341][T10071] ? __pfx____ratelimit+0x10/0x10 [ 309.243367][T10071] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.243392][T10071] ? __pfx__printk+0x10/0x10 [ 309.243425][T10071] ? __might_fault+0xb0/0x130 [ 309.243453][T10071] should_fail_ex+0x414/0x560 [ 309.243484][T10071] _copy_to_user+0x31/0xb0 [ 309.243508][T10071] simple_read_from_buffer+0xe1/0x170 [ 309.243542][T10071] proc_fail_nth_read+0x1b3/0x220 [ 309.243575][T10071] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 309.243608][T10071] ? rw_verify_area+0x2a6/0x4d0 [ 309.243640][T10071] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 309.243670][T10071] vfs_read+0x200/0xa30 [ 309.243700][T10071] ? fdget_pos+0x247/0x320 [ 309.243728][T10071] ? __pfx___mutex_lock+0x10/0x10 [ 309.243756][T10071] ? __pfx_vfs_read+0x10/0x10 [ 309.243790][T10071] ? __fget_files+0x2a/0x420 [ 309.243819][T10071] ? __fget_files+0x3a0/0x420 [ 309.243840][T10071] ? __fget_files+0x2a/0x420 [ 309.243876][T10071] ksys_read+0x145/0x250 [ 309.243906][T10071] ? __pfx_ksys_read+0x10/0x10 [ 309.243922][T10071] ? rcu_is_watching+0x15/0xb0 [ 309.243951][T10071] ? do_syscall_64+0xbe/0x3b0 [ 309.243984][T10071] do_syscall_64+0xfa/0x3b0 [ 309.244009][T10071] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.244035][T10071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.244055][T10071] ? clear_bhb_loop+0x60/0xb0 [ 309.244082][T10071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.244102][T10071] RIP: 0033:0x7fca6338d8dc [ 309.244122][T10071] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 309.244140][T10071] RSP: 002b:00007fca64238030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 309.244162][T10071] RAX: ffffffffffffffda RBX: 00007fca635e5fa0 RCX: 00007fca6338d8dc [ 309.244177][T10071] RDX: 000000000000000f RSI: 00007fca642380a0 RDI: 0000000000000006 [ 309.244190][T10071] RBP: 00007fca64238090 R08: 0000000000000000 R09: 0000000000000000 [ 309.244202][T10071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.244214][T10071] R13: 00007fca635e6038 R14: 00007fca635e5fa0 R15: 00007ffe32030828 [ 309.244253][T10071] [ 309.523209][T10074] openvswitch: netlink: Flow actions attr not present in new flow. [ 309.669287][T10083] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1267'. [ 310.160802][T10094] netlink: 'syz.2.1269': attribute type 2 has an invalid length. [ 310.181051][T10094] netlink: 'syz.2.1269': attribute type 8 has an invalid length. [ 310.230986][T10094] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1269'. [ 310.462466][T10099] FAULT_INJECTION: forcing a failure. [ 310.462466][T10099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.495662][T10101] FAULT_INJECTION: forcing a failure. [ 310.495662][T10101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.594808][T10099] CPU: 1 UID: 0 PID: 10099 Comm: syz.1.1272 Not tainted syzkaller #0 PREEMPT(full) [ 310.594837][T10099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 310.594849][T10099] Call Trace: [ 310.594861][T10099] [ 310.594873][T10099] dump_stack_lvl+0x189/0x250 [ 310.594913][T10099] ? __pfx____ratelimit+0x10/0x10 [ 310.594949][T10099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.594984][T10099] ? __pfx__printk+0x10/0x10 [ 310.595100][T10099] should_fail_ex+0x414/0x560 [ 310.595160][T10099] _copy_to_user+0x31/0xb0 [ 310.595200][T10099] bpf_test_finish+0x1ab/0x700 [ 310.595289][T10099] ? __pfx_bpf_test_finish+0x10/0x10 [ 310.595403][T10099] bpf_prog_test_run_skb+0xef8/0x1550 [ 310.595529][T10099] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 310.595578][T10099] bpf_prog_test_run+0x2c7/0x340 [ 310.595638][T10099] __sys_bpf+0x562/0x860 [ 310.595689][T10099] ? __pfx___sys_bpf+0x10/0x10 [ 310.595812][T10099] ? ksys_write+0x22a/0x250 [ 310.595854][T10099] ? __pfx_ksys_write+0x10/0x10 [ 310.595870][T10099] ? rcu_is_watching+0x15/0xb0 [ 310.595940][T10099] __x64_sys_bpf+0x7c/0x90 [ 310.595978][T10099] do_syscall_64+0xfa/0x3b0 [ 310.596010][T10099] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.596043][T10099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.596067][T10099] ? clear_bhb_loop+0x60/0xb0 [ 310.596113][T10099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.596134][T10099] RIP: 0033:0x7f2d7c38eec9 [ 310.596160][T10099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.596177][T10099] RSP: 002b:00007f2d7d1b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 310.596199][T10099] RAX: ffffffffffffffda RBX: 00007f2d7c5e5fa0 RCX: 00007f2d7c38eec9 [ 310.596214][T10099] RDX: 0000000000000050 RSI: 0000200000000680 RDI: 000000000000000a [ 310.596227][T10099] RBP: 00007f2d7d1b6090 R08: 0000000000000000 R09: 0000000000000000 [ 310.596240][T10099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.596252][T10099] R13: 00007f2d7c5e6038 R14: 00007f2d7c5e5fa0 R15: 00007ffcab2a6e88 [ 310.596354][T10099] [ 310.840977][T10101] CPU: 0 UID: 0 PID: 10101 Comm: syz.2.1273 Not tainted syzkaller #0 PREEMPT(full) [ 310.841009][T10101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 310.841022][T10101] Call Trace: [ 310.841034][T10101] [ 310.841047][T10101] dump_stack_lvl+0x189/0x250 [ 310.841088][T10101] ? __pfx____ratelimit+0x10/0x10 [ 310.841125][T10101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.841160][T10101] ? __pfx__printk+0x10/0x10 [ 310.841221][T10101] ? __might_fault+0xb0/0x130 [ 310.841282][T10101] should_fail_ex+0x414/0x560 [ 310.841344][T10101] _copy_to_user+0x31/0xb0 [ 310.841384][T10101] simple_read_from_buffer+0xe1/0x170 [ 310.841441][T10101] proc_fail_nth_read+0x1b3/0x220 [ 310.841495][T10101] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 310.841550][T10101] ? rw_verify_area+0x2a6/0x4d0 [ 310.841588][T10101] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 310.841635][T10101] vfs_read+0x200/0xa30 [ 310.841673][T10101] ? fdget_pos+0x247/0x320 [ 310.841731][T10101] ? __pfx___mutex_lock+0x10/0x10 [ 310.841771][T10101] ? __pfx_vfs_read+0x10/0x10 [ 310.841825][T10101] ? __fget_files+0x2a/0x420 [ 310.841879][T10101] ? __fget_files+0x3a0/0x420 [ 310.841904][T10101] ? __fget_files+0x2a/0x420 [ 310.841989][T10101] ksys_read+0x145/0x250 [ 310.842033][T10101] ? __pfx_ksys_read+0x10/0x10 [ 310.842050][T10101] ? rcu_is_watching+0x15/0xb0 [ 310.842108][T10101] ? do_syscall_64+0xbe/0x3b0 [ 310.842164][T10101] do_syscall_64+0xfa/0x3b0 [ 310.842191][T10101] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.842224][T10101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.842248][T10101] ? clear_bhb_loop+0x60/0xb0 [ 310.842295][T10101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.842316][T10101] RIP: 0033:0x7fca6338d8dc [ 310.842342][T10101] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 310.842360][T10101] RSP: 002b:00007fca64238030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 310.842383][T10101] RAX: ffffffffffffffda RBX: 00007fca635e5fa0 RCX: 00007fca6338d8dc [ 310.842398][T10101] RDX: 000000000000000f RSI: 00007fca642380a0 RDI: 0000000000000006 [ 310.842410][T10101] RBP: 00007fca64238090 R08: 0000000000000000 R09: 0000000000000000 [ 310.842422][T10101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.842433][T10101] R13: 00007fca635e6038 R14: 00007fca635e5fa0 R15: 00007ffe32030828 [ 310.842535][T10101] [ 311.887242][T10121] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1278'. [ 311.956024][T10121] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1278'. [ 312.004806][T10124] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 312.346903][T10123] netlink: 'syz.0.1279': attribute type 10 has an invalid length. [ 312.402768][T10123] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.423702][T10123] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.681627][T10123] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.692811][T10123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.708584][T10123] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.719708][T10123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.737707][T10123] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 312.781974][T10131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1282'. [ 312.834930][T10141] FAULT_INJECTION: forcing a failure. [ 312.834930][T10141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.891955][T10141] CPU: 1 UID: 0 PID: 10141 Comm: syz.3.1284 Not tainted syzkaller #0 PREEMPT(full) [ 312.891987][T10141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 312.892001][T10141] Call Trace: [ 312.892014][T10141] [ 312.892027][T10141] dump_stack_lvl+0x189/0x250 [ 312.892067][T10141] ? __pfx____ratelimit+0x10/0x10 [ 312.892104][T10141] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.892140][T10141] ? __pfx__printk+0x10/0x10 [ 312.892200][T10141] ? __might_fault+0xb0/0x130 [ 312.892262][T10141] should_fail_ex+0x414/0x560 [ 312.892323][T10141] _copy_to_user+0x31/0xb0 [ 312.892364][T10141] simple_read_from_buffer+0xe1/0x170 [ 312.892421][T10141] proc_fail_nth_read+0x1b3/0x220 [ 312.892476][T10141] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 312.892531][T10141] ? rw_verify_area+0x2a6/0x4d0 [ 312.892569][T10141] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 312.892609][T10141] vfs_read+0x200/0xa30 [ 312.892647][T10141] ? fdget_pos+0x247/0x320 [ 312.892705][T10141] ? __pfx___mutex_lock+0x10/0x10 [ 312.892744][T10141] ? __pfx_vfs_read+0x10/0x10 [ 312.892802][T10141] ? __fget_files+0x2a/0x420 [ 312.892866][T10141] ? __fget_files+0x3a0/0x420 [ 312.892892][T10141] ? __fget_files+0x2a/0x420 [ 312.892976][T10141] ksys_read+0x145/0x250 [ 312.893020][T10141] ? __pfx_ksys_read+0x10/0x10 [ 312.893036][T10141] ? rcu_is_watching+0x15/0xb0 [ 312.893094][T10141] ? do_syscall_64+0xbe/0x3b0 [ 312.893150][T10141] do_syscall_64+0xfa/0x3b0 [ 312.893178][T10141] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.893210][T10141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.893234][T10141] ? clear_bhb_loop+0x60/0xb0 [ 312.893280][T10141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.893302][T10141] RIP: 0033:0x7f07ce18d8dc [ 312.893328][T10141] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 312.893347][T10141] RSP: 002b:00007f07cefe7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 312.893369][T10141] RAX: ffffffffffffffda RBX: 00007f07ce3e5fa0 RCX: 00007f07ce18d8dc [ 312.893384][T10141] RDX: 000000000000000f RSI: 00007f07cefe70a0 RDI: 0000000000000006 [ 312.893397][T10141] RBP: 00007f07cefe7090 R08: 0000000000000000 R09: 0000000000000000 [ 312.893409][T10141] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 312.893422][T10141] R13: 00007f07ce3e6038 R14: 00007f07ce3e5fa0 R15: 00007ffc8b25d058 [ 312.893528][T10141] [ 313.389003][T10152] FAULT_INJECTION: forcing a failure. [ 313.389003][T10152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.402491][T10152] CPU: 1 UID: 0 PID: 10152 Comm: syz.3.1289 Not tainted syzkaller #0 PREEMPT(full) [ 313.402520][T10152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 313.402533][T10152] Call Trace: [ 313.402542][T10152] [ 313.402550][T10152] dump_stack_lvl+0x189/0x250 [ 313.402580][T10152] ? __pfx____ratelimit+0x10/0x10 [ 313.402606][T10152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.402631][T10152] ? __pfx__printk+0x10/0x10 [ 313.402674][T10152] should_fail_ex+0x414/0x560 [ 313.402702][T10152] _copy_to_user+0x31/0xb0 [ 313.402723][T10152] bpf_test_finish+0x1ab/0x700 [ 313.402768][T10152] ? __pfx_bpf_test_finish+0x10/0x10 [ 313.402808][T10152] bpf_prog_test_run_skb+0xef8/0x1550 [ 313.402853][T10152] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 313.402881][T10152] bpf_prog_test_run+0x2c7/0x340 [ 313.402915][T10152] __sys_bpf+0x562/0x860 [ 313.402944][T10152] ? __pfx___sys_bpf+0x10/0x10 [ 313.402987][T10152] ? do_syscall_64+0xb7/0x3b0 [ 313.403014][T10152] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 313.403044][T10152] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 313.403074][T10152] ? __pfx_ksys_write+0x10/0x10 [ 313.403091][T10152] ? rcu_is_watching+0x15/0xb0 [ 313.403121][T10152] __x64_sys_bpf+0x7c/0x90 [ 313.403146][T10152] do_syscall_64+0xfa/0x3b0 [ 313.403172][T10152] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.403197][T10152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.403217][T10152] ? clear_bhb_loop+0x60/0xb0 [ 313.403242][T10152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.403262][T10152] RIP: 0033:0x7f07ce18eec9 [ 313.403281][T10152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.403299][T10152] RSP: 002b:00007f07cefe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 313.403321][T10152] RAX: ffffffffffffffda RBX: 00007f07ce3e5fa0 RCX: 00007f07ce18eec9 [ 313.403336][T10152] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 313.403349][T10152] RBP: 00007f07cefe7090 R08: 0000000000000000 R09: 0000000000000000 [ 313.403361][T10152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.403372][T10152] R13: 00007f07ce3e6038 R14: 00007f07ce3e5fa0 R15: 00007ffc8b25d058 [ 313.403407][T10152] [ 313.780021][T10157] FAULT_INJECTION: forcing a failure. [ 313.780021][T10157] name failslab, interval 1, probability 0, space 0, times 0 [ 313.793264][T10157] CPU: 1 UID: 0 PID: 10157 Comm: syz.0.1291 Not tainted syzkaller #0 PREEMPT(full) [ 313.793293][T10157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 313.793305][T10157] Call Trace: [ 313.793319][T10157] [ 313.793333][T10157] dump_stack_lvl+0x189/0x250 [ 313.793375][T10157] ? __pfx____ratelimit+0x10/0x10 [ 313.793415][T10157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.793454][T10157] ? __pfx__printk+0x10/0x10 [ 313.793542][T10157] ? __pfx___might_resched+0x10/0x10 [ 313.793602][T10157] should_fail_ex+0x414/0x560 [ 313.793671][T10157] should_failslab+0xa8/0x100 [ 313.793715][T10157] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 313.793769][T10157] ? __alloc_skb+0x112/0x2d0 [ 313.793836][T10157] __alloc_skb+0x112/0x2d0 [ 313.793907][T10157] netlink_dump+0x1b7/0xe90 [ 313.794037][T10157] ? __pfx_netlink_dump+0x10/0x10 [ 313.794191][T10157] ? genl_start+0x499/0x6c0 [ 313.794276][T10157] __netlink_dump_start+0x5cb/0x7e0 [ 313.794371][T10157] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 313.794424][T10157] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 313.794444][T10157] ? genl_get_cmd+0x7d9/0x910 [ 313.794524][T10157] ? __pfx_genl_start+0x10/0x10 [ 313.794541][T10157] ? __pfx_genl_dumpit+0x10/0x10 [ 313.794558][T10157] ? __pfx_genl_done+0x10/0x10 [ 313.794677][T10157] genl_rcv_msg+0x5da/0x790 [ 313.794734][T10157] ? __pfx_genl_rcv_msg+0x10/0x10 [ 313.794754][T10157] ? __pfx_batadv_netlink_dump_hardif+0x10/0x10 [ 313.794790][T10157] ? perf_trace_lock_acquire+0x335/0x410 [ 313.794868][T10157] netlink_rcv_skb+0x208/0x470 [ 313.794888][T10157] ? __lock_acquire+0xab9/0xd20 [ 313.794922][T10157] ? __pfx_genl_rcv_msg+0x10/0x10 [ 313.794954][T10157] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 313.795070][T10157] ? down_read+0x1ad/0x2e0 [ 313.795114][T10157] genl_rcv+0x28/0x40 [ 313.795132][T10157] netlink_unicast+0x82c/0x9e0 [ 313.795202][T10157] ? __pfx_netlink_unicast+0x10/0x10 [ 313.795240][T10157] ? netlink_sendmsg+0x642/0xb30 [ 313.795260][T10157] ? skb_put+0x11b/0x210 [ 313.795308][T10157] netlink_sendmsg+0x805/0xb30 [ 313.795381][T10157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.795427][T10157] ? aa_sock_msg_perm+0xf1/0x1d0 [ 313.795463][T10157] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 313.795488][T10157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.795525][T10157] __sock_sendmsg+0x219/0x270 [ 313.795568][T10157] ____sys_sendmsg+0x505/0x830 [ 313.795629][T10157] ? __pfx_____sys_sendmsg+0x10/0x10 [ 313.795706][T10157] ? import_iovec+0x74/0xa0 [ 313.795758][T10157] ___sys_sendmsg+0x21f/0x2a0 [ 313.795809][T10157] ? __pfx____sys_sendmsg+0x10/0x10 [ 313.796030][T10157] ? __fget_files+0x2a/0x420 [ 313.796057][T10157] ? __fget_files+0x3a0/0x420 [ 313.796167][T10157] __x64_sys_sendmsg+0x19b/0x260 [ 313.796231][T10157] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 313.796339][T10157] ? __pfx_ksys_write+0x10/0x10 [ 313.796356][T10157] ? rcu_is_watching+0x15/0xb0 [ 313.796423][T10157] ? do_syscall_64+0xbe/0x3b0 [ 313.796485][T10157] do_syscall_64+0xfa/0x3b0 [ 313.796513][T10157] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.796558][T10157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.796583][T10157] ? clear_bhb_loop+0x60/0xb0 [ 313.796635][T10157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.796658][T10157] RIP: 0033:0x7fcd3818eec9 [ 313.796686][T10157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.796704][T10157] RSP: 002b:00007fcd390f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.796726][T10157] RAX: ffffffffffffffda RBX: 00007fcd383e5fa0 RCX: 00007fcd3818eec9 [ 313.796742][T10157] RDX: 0000000020004800 RSI: 0000200000000180 RDI: 0000000000000003 [ 313.796755][T10157] RBP: 00007fcd390f7090 R08: 0000000000000000 R09: 0000000000000000 [ 313.796773][T10157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.796786][T10157] R13: 00007fcd383e6038 R14: 00007fcd383e5fa0 R15: 00007ffe8d8bf288 [ 313.796912][T10157] [ 314.461656][T10163] netlink: zone id is out of range [ 314.476594][T10163] netlink: zone id is out of range [ 314.481898][T10163] netlink: zone id is out of range [ 314.584561][T10169] netlink: 'syz.0.1296': attribute type 25 has an invalid length. [ 314.585695][T10163] netlink: set zone limit has 4 unknown bytes [ 314.599198][T10169] netlink: 'syz.0.1296': attribute type 28 has an invalid length. [ 314.607277][T10169] FAULT_INJECTION: forcing a failure. [ 314.607277][T10169] name failslab, interval 1, probability 0, space 0, times 0 [ 314.620036][T10169] CPU: 1 UID: 0 PID: 10169 Comm: syz.0.1296 Not tainted syzkaller #0 PREEMPT(full) [ 314.620064][T10169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 314.620077][T10169] Call Trace: [ 314.620085][T10169] [ 314.620094][T10169] dump_stack_lvl+0x189/0x250 [ 314.620125][T10169] ? __pfx____ratelimit+0x10/0x10 [ 314.620151][T10169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.620177][T10169] ? __pfx__printk+0x10/0x10 [ 314.620202][T10169] ? __switchdev_handle_port_attr_set+0x257/0x2d0 [ 314.620233][T10169] ? __pfx_dsa_user_dev_check+0x10/0x10 [ 314.620265][T10169] ? __pfx___switchdev_handle_port_attr_set+0x10/0x10 [ 314.620303][T10169] should_fail_ex+0x414/0x560 [ 314.620331][T10169] should_failslab+0xa8/0x100 [ 314.620355][T10169] __kmalloc_noprof+0xcb/0x4f0 [ 314.620381][T10169] ? switchdev_deferred_enqueue+0x2d/0x240 [ 314.620407][T10169] ? atomic_notifier_call_chain+0x26/0x180 [ 314.620433][T10169] ? __pfx_switchdev_port_attr_set_deferred+0x10/0x10 [ 314.620461][T10169] switchdev_deferred_enqueue+0x2d/0x240 [ 314.620494][T10169] br_switchdev_set_port_flag+0x244/0x360 [ 314.620520][T10169] ? __pfx_br_switchdev_set_port_flag+0x10/0x10 [ 314.620545][T10169] ? trace_bpf_trace_printk+0x7a/0x1d0 [ 314.620587][T10169] ? __lock_acquire+0xab9/0xd20 [ 314.620622][T10169] br_setport+0xab3/0x1670 [ 314.620654][T10169] ? __pfx_br_setport+0x10/0x10 [ 314.620677][T10169] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 314.620708][T10169] ? br_setlink+0x4c5/0x800 [ 314.620733][T10169] br_setlink+0x4d5/0x800 [ 314.620763][T10169] ? __pfx_br_setlink+0x10/0x10 [ 314.620827][T10169] ? __dev_queue_xmit+0x1d79/0x3b50 [ 314.620856][T10169] ? mutex_is_locked+0x17/0x50 [ 314.620882][T10169] rtnl_bridge_setlink+0x5b2/0x7d0 [ 314.620919][T10169] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 314.620957][T10169] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 314.620984][T10169] rtnetlink_rcv_msg+0x779/0xb70 [ 314.621015][T10169] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 314.621039][T10169] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 314.621063][T10169] ? ref_tracker_free+0x63a/0x7d0 [ 314.621089][T10169] ? __asan_memcpy+0x40/0x70 [ 314.621116][T10169] ? __pfx_ref_tracker_free+0x10/0x10 [ 314.621138][T10169] ? __skb_clone+0x63/0x7a0 [ 314.621180][T10169] netlink_rcv_skb+0x208/0x470 [ 314.621208][T10169] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 314.621236][T10169] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 314.621277][T10169] ? netlink_deliver_tap+0x2e/0x1b0 [ 314.621313][T10169] netlink_unicast+0x82c/0x9e0 [ 314.621347][T10169] ? __pfx_netlink_unicast+0x10/0x10 [ 314.621379][T10169] ? netlink_sendmsg+0x642/0xb30 [ 314.621404][T10169] ? skb_put+0x11b/0x210 [ 314.621436][T10169] netlink_sendmsg+0x805/0xb30 [ 314.621474][T10169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.621505][T10169] ? aa_sock_msg_perm+0xf1/0x1d0 [ 314.621532][T10169] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 314.621559][T10169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.621586][T10169] __sock_sendmsg+0x219/0x270 [ 314.621614][T10169] ____sys_sendmsg+0x505/0x830 [ 314.621650][T10169] ? __pfx_____sys_sendmsg+0x10/0x10 [ 314.621691][T10169] ? import_iovec+0x74/0xa0 [ 314.621727][T10169] ___sys_sendmsg+0x21f/0x2a0 [ 314.621760][T10169] ? __pfx____sys_sendmsg+0x10/0x10 [ 314.621833][T10169] ? __fget_files+0x2a/0x420 [ 314.621854][T10169] ? __fget_files+0x3a0/0x420 [ 314.621889][T10169] __x64_sys_sendmsg+0x19b/0x260 [ 314.621922][T10169] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 314.621963][T10169] ? __pfx_ksys_write+0x10/0x10 [ 314.621979][T10169] ? rcu_is_watching+0x15/0xb0 [ 314.622007][T10169] ? do_syscall_64+0xbe/0x3b0 [ 314.622038][T10169] do_syscall_64+0xfa/0x3b0 [ 314.622063][T10169] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.622087][T10169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.622107][T10169] ? clear_bhb_loop+0x60/0xb0 [ 314.622132][T10169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.622151][T10169] RIP: 0033:0x7fcd3818eec9 [ 314.622171][T10169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.622190][T10169] RSP: 002b:00007fcd390f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.622212][T10169] RAX: ffffffffffffffda RBX: 00007fcd383e5fa0 RCX: 00007fcd3818eec9 [ 314.622227][T10169] RDX: 0000000004004004 RSI: 0000200000000040 RDI: 0000000000000004 [ 314.622240][T10169] RBP: 00007fcd390f7090 R08: 0000000000000000 R09: 0000000000000000 [ 314.622253][T10169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.622265][T10169] R13: 00007fcd383e6038 R14: 00007fcd383e5fa0 R15: 00007ffe8d8bf288 [ 314.622299][T10169] [ 315.293646][T10165] netlink: del zone limit has 4 unknown bytes [ 316.866539][T10204] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1309'. [ 316.957686][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.964052][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.012840][T10209] raw_sendmsg: syz.4.1310 forgot to set AF_INET. Fix it! [ 317.186246][T10212] netlink: 'syz.0.1303': attribute type 9 has an invalid length. [ 317.220005][T10212] netlink: 'syz.0.1303': attribute type 6 has an invalid length. [ 317.257198][T10214] netlink: 'syz.4.1312': attribute type 21 has an invalid length. [ 317.275846][T10212] netlink: 'syz.0.1303': attribute type 7 has an invalid length. [ 317.298548][T10214] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1312'. [ 317.355503][T10212] netlink: 'syz.0.1303': attribute type 8 has an invalid length. [ 317.473810][T10217] netlink: 'syz.1.1311': attribute type 2 has an invalid length. [ 317.667263][T10222] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 317.681188][T10222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.110858][T10233] netlink: 488 bytes leftover after parsing attributes in process `syz.3.1316'. [ 318.138442][T10233] netlink: 488 bytes leftover after parsing attributes in process `syz.3.1316'. [ 318.496189][T10238] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1320'. [ 318.603855][T10238] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1320'. [ 318.623871][T10247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1322'. [ 318.669073][T10244] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 319.292908][T10263] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1326'. [ 319.329346][T10263] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1326'. [ 319.408051][T10262] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 319.419196][T10251] netlink: zone id is out of range [ 319.445520][T10251] netlink: zone id is out of range [ 319.511283][T10251] netlink: zone id is out of range [ 319.571281][T10251] netlink: zone id is out of range [ 319.717919][T10274] FAULT_INJECTION: forcing a failure. [ 319.717919][T10274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.733141][T10274] CPU: 1 UID: 0 PID: 10274 Comm: syz.4.1330 Not tainted syzkaller #0 PREEMPT(full) [ 319.733170][T10274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 319.733184][T10274] Call Trace: [ 319.733193][T10274] [ 319.733208][T10274] dump_stack_lvl+0x189/0x250 [ 319.733241][T10274] ? __pfx____ratelimit+0x10/0x10 [ 319.733268][T10274] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.733295][T10274] ? __pfx__printk+0x10/0x10 [ 319.733352][T10274] should_fail_ex+0x414/0x560 [ 319.733384][T10274] strncpy_from_user+0x36/0x290 [ 319.733414][T10274] strncpy_from_user_nofault+0x72/0x150 [ 319.733450][T10274] bpf_bprintf_prepare+0xb91/0x13a0 [ 319.733480][T10274] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 319.733530][T10274] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 319.733570][T10274] ? bpf_trace_printk+0xc1/0x190 [ 319.733601][T10274] bpf_trace_printk+0xdb/0x190 [ 319.733628][T10274] ? __pfx_bpf_trace_printk+0x10/0x10 [ 319.733645][T10274] ? __cant_migrate+0x134/0x2e0 [ 319.733671][T10274] ? bpf_trace_run2+0x186/0x4b0 [ 319.733727][T10274] bpf_prog_930ede9872f2967c+0x3e/0x44 [ 319.733749][T10274] bpf_trace_run2+0x281/0x4b0 [ 319.733776][T10274] ? bpf_trace_run2+0x186/0x4b0 [ 319.733808][T10274] ? __pfx_bpf_trace_run2+0x10/0x10 [ 319.733845][T10274] ? __bpf_trace_contention_begin+0xcd/0x130 [ 319.733879][T10274] __bpf_trace_contention_begin+0xdc/0x130 [ 319.733902][T10274] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 319.733925][T10274] ? __static_call_update+0x9b/0x5d0 [ 319.733957][T10274] ? __static_call_update+0x9b/0x5d0 [ 319.734005][T10274] trace_contention_begin+0xf4/0x120 [ 319.734031][T10274] __mutex_lock+0x198/0x1350 [ 319.734078][T10274] ? __lock_acquire+0xab9/0xd20 [ 319.734108][T10274] ? __static_call_update+0x9b/0x5d0 [ 319.734144][T10274] ? __pfx___mutex_lock+0x10/0x10 [ 319.734183][T10274] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 319.734216][T10274] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 319.734257][T10274] __static_call_update+0x9b/0x5d0 [ 319.734290][T10274] ? 0xffffffffa0205540 [ 319.734309][T10274] ? 0xffffffffa0205540 [ 319.734325][T10274] ? __SCT__tp_func_azx_runtime_resume+0x8/0x8 [ 319.734355][T10274] ? __pfx___static_call_update+0x10/0x10 [ 319.734383][T10274] ? 0xffffffffa0205540 [ 319.734400][T10274] ? core_kernel_text+0x6/0xa0 [ 319.734427][T10274] ? 0xffffffffa0205540 [ 319.734456][T10274] ? 0xffffffffa0205540 [ 319.734477][T10274] ? 0xffffffffa0205540 [ 319.734497][T10274] bpf_dispatcher_change_prog+0xacd/0xc90 [ 319.734532][T10274] ? 0xffffffffa0205540 [ 319.734555][T10274] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 319.734580][T10274] ? 0xffffffffa02016c8 [ 319.734673][T10274] ? bpf_prog_change_xdp+0x12/0x30 [ 319.734716][T10274] bpf_prog_test_run_xdp+0x6ef/0x10e0 [ 319.734755][T10274] ? __fget_files+0x2a/0x420 [ 319.734792][T10274] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 319.734830][T10274] ? __fget_files+0x2a/0x420 [ 319.734862][T10274] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 319.734892][T10274] bpf_prog_test_run+0x2c7/0x340 [ 319.734930][T10274] __sys_bpf+0x562/0x860 [ 319.734962][T10274] ? __pfx___sys_bpf+0x10/0x10 [ 319.735019][T10274] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.735072][T10274] __x64_sys_bpf+0x7c/0x90 [ 319.735100][T10274] do_syscall_64+0xfa/0x3b0 [ 319.735130][T10274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.735149][T10274] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 319.735169][T10274] ? clear_bhb_loop+0x60/0xb0 [ 319.735205][T10274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.735226][T10274] RIP: 0033:0x7f12f0b8eec9 [ 319.735244][T10274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.735262][T10274] RSP: 002b:00007f12f1aed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 319.735285][T10274] RAX: ffffffffffffffda RBX: 00007f12f0de5fa0 RCX: 00007f12f0b8eec9 [ 319.735300][T10274] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 319.735312][T10274] RBP: 00007f12f1aed090 R08: 0000000000000000 R09: 0000000000000000 [ 319.735325][T10274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.735337][T10274] R13: 00007f12f0de6038 R14: 00007f12f0de5fa0 R15: 00007ffc140fb128 [ 319.735382][T10274] [ 319.776776][T10254] netlink: del zone limit has 4 unknown bytes [ 320.289445][T10273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1328'. [ 320.741994][T10251] netlink: set zone limit has 4 unknown bytes [ 323.158821][T10285] netlink: 'syz.1.1334': attribute type 10 has an invalid length. [ 323.186178][T10285] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1334'. [ 323.209675][T10282] netlink: del zone limit has 4 unknown bytes [ 323.221922][T10285] batman_adv: batadv0: Interface deactivated: vlan1 [ 323.518690][T10285] vlan0 (unregistering): left allmulticast mode [ 323.528964][T10285] veth0_vlan (unregistering): left allmulticast mode [ 323.546132][T10285] vlan0 (unregistering): left promiscuous mode [ 323.552757][T10285] @: port 1(vlan0) entered disabled state [ 323.770638][T10285] batman_adv: batadv0: Removing interface: vlan1 [ 324.569051][T10320] FAULT_INJECTION: forcing a failure. [ 324.569051][T10320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.596170][T10320] CPU: 0 UID: 0 PID: 10320 Comm: syz.0.1345 Not tainted syzkaller #0 PREEMPT(full) [ 324.596202][T10320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 324.596215][T10320] Call Trace: [ 324.596224][T10320] [ 324.596234][T10320] dump_stack_lvl+0x189/0x250 [ 324.596265][T10320] ? __pfx____ratelimit+0x10/0x10 [ 324.596292][T10320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 324.596318][T10320] ? __pfx__printk+0x10/0x10 [ 324.596349][T10320] ? __might_fault+0xb0/0x130 [ 324.596373][T10320] ? __might_fault+0xb0/0x130 [ 324.596400][T10320] should_fail_ex+0x414/0x560 [ 324.596431][T10320] _copy_from_iter+0x1de/0x1790 [ 324.596471][T10320] ? _copy_from_iter+0x24f/0x1790 [ 324.596508][T10320] ? __pfx__copy_from_iter+0x10/0x10 [ 324.596533][T10320] ? sock_alloc_send_pskb+0x875/0x990 [ 324.596563][T10320] ? __pfx__copy_from_iter+0x10/0x10 [ 324.596596][T10320] ? page_copy_sane+0x16a/0x280 [ 324.596629][T10320] copy_page_from_iter+0xdd/0x170 [ 324.596665][T10320] skb_copy_datagram_from_iter+0x306/0x720 [ 324.596704][T10320] tun_get_user+0x1691/0x3e20 [ 324.596760][T10320] ? aa_file_perm+0x44d/0x1550 [ 324.596796][T10320] ? __pfx_tun_get_user+0x10/0x10 [ 324.596824][T10320] ? _parse_integer_limit+0x1ae/0x1f0 [ 324.596866][T10320] ? perf_trace_lock+0xec/0x3b0 [ 324.596896][T10320] ? __pfx_perf_trace_lock+0x10/0x10 [ 324.596917][T10320] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 324.596950][T10320] ? tun_get+0x1c/0x2f0 [ 324.596986][T10320] ? tun_get+0x1c/0x2f0 [ 324.597013][T10320] ? tun_get+0x1c/0x2f0 [ 324.597048][T10320] tun_chr_write_iter+0x113/0x200 [ 324.597081][T10320] vfs_write+0x5c9/0xb30 [ 324.597130][T10320] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 324.597161][T10320] ? __pfx_vfs_write+0x10/0x10 [ 324.597215][T10320] ? __fget_files+0x2a/0x420 [ 324.597252][T10320] ksys_write+0x145/0x250 [ 324.597276][T10320] ? __pfx_ksys_write+0x10/0x10 [ 324.597292][T10320] ? rcu_is_watching+0x15/0xb0 [ 324.597321][T10320] ? do_syscall_64+0xbe/0x3b0 [ 324.597355][T10320] do_syscall_64+0xfa/0x3b0 [ 324.597381][T10320] ? lockdep_hardirqs_on+0x9c/0x150 [ 324.597406][T10320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.597426][T10320] ? clear_bhb_loop+0x60/0xb0 [ 324.597454][T10320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.597473][T10320] RIP: 0033:0x7fcd3818eec9 [ 324.597493][T10320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.597511][T10320] RSP: 002b:00007fcd390f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 324.597534][T10320] RAX: ffffffffffffffda RBX: 00007fcd383e5fa0 RCX: 00007fcd3818eec9 [ 324.597549][T10320] RDX: 000000000000ffdd RSI: 0000200000000280 RDI: 0000000000000003 [ 324.597563][T10320] RBP: 00007fcd390f7090 R08: 0000000000000000 R09: 0000000000000000 [ 324.597575][T10320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.597587][T10320] R13: 00007fcd383e6038 R14: 00007fcd383e5fa0 R15: 00007ffe8d8bf288 [ 324.597626][T10320] [ 325.195036][T10325] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1346'. [ 325.491031][T10335] netlink: 'syz.0.1349': attribute type 21 has an invalid length. [ 325.501139][T10335] netlink: 'syz.0.1349': attribute type 6 has an invalid length. [ 325.511533][T10335] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1349'. [ 325.665375][T10348] netlink: 'syz.2.1354': attribute type 2 has an invalid length. [ 325.687295][T10348] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1354'. [ 325.879643][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1354'. [ 326.535527][T10365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.564094][T10361] netlink: zone id is out of range [ 326.623308][T10361] netlink: zone id is out of range [ 326.646642][T10361] netlink: zone id is out of range [ 326.686617][T10361] netlink: zone id is out of range [ 326.692557][T10361] netlink: zone id is out of range [ 326.811011][T10368] netlink: del zone limit has 4 unknown bytes [ 326.835696][T10375] FAULT_INJECTION: forcing a failure. [ 326.835696][T10375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.836709][T10375] [ 326.836718][T10375] ====================================================== [ 326.836727][T10375] WARNING: possible circular locking dependency detected [ 326.836741][T10375] syzkaller #0 Not tainted [ 326.836750][T10375] ------------------------------------------------------ [ 326.836758][T10375] syz.0.1364/10375 is trying to acquire lock: [ 326.836769][T10375] ffffffff8e12e3a0 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 326.836823][T10375] [ 326.836823][T10375] but task is already holding lock: [ 326.836830][T10375] ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 326.836884][T10375] [ 326.836884][T10375] which lock already depends on the new lock. [ 326.836884][T10375] [ 326.836892][T10375] [ 326.836892][T10375] the existing dependency chain (in reverse order) is: [ 326.836899][T10375] [ 326.836899][T10375] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 326.836925][T10375] lock_acquire+0x120/0x360 [ 326.836952][T10375] _raw_spin_lock_nested+0x32/0x50 [ 326.836975][T10375] raw_spin_rq_lock_nested+0x2a/0x140 [ 326.837004][T10375] task_rq_lock+0xbc/0x470 [ 326.837018][T10375] cgroup_move_task+0x92/0x2a0 [ 326.837037][T10375] css_set_move_task+0x658/0x9e0 [ 326.837058][T10375] cgroup_post_fork+0x1ef/0x790 [ 326.837079][T10375] copy_process+0x3862/0x3c00 [ 326.837097][T10375] kernel_clone+0x21e/0x840 [ 326.837117][T10375] user_mode_thread+0xdd/0x140 [ 326.837137][T10375] rest_init+0x23/0x300 [ 326.837151][T10375] start_kernel+0x3a9/0x410 [ 326.837176][T10375] x86_64_start_reservations+0x24/0x30 [ 326.837194][T10375] x86_64_start_kernel+0x143/0x1c0 [ 326.837211][T10375] common_startup_64+0x13e/0x147 [ 326.837236][T10375] [ 326.837236][T10375] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 326.837262][T10375] lock_acquire+0x120/0x360 [ 326.837288][T10375] _raw_spin_lock_irqsave+0xa7/0xf0 [ 326.837308][T10375] try_to_wake_up+0x67/0x12b0 [ 326.837338][T10375] __wake_up_common_lock+0x137/0x1f0 [ 326.837362][T10375] tty_port_default_wakeup+0xa2/0xf0 [ 326.837389][T10375] serial8250_tx_chars+0x72e/0x970 [ 326.837412][T10375] serial8250_handle_irq+0x633/0xbb0 [ 326.837436][T10375] serial8250_default_handle_irq+0xbf/0x1e0 [ 326.837464][T10375] serial8250_interrupt+0x8a/0x160 [ 326.837483][T10375] __handle_irq_event_percpu+0x28c/0x980 [ 326.837505][T10375] handle_irq_event+0x8b/0x1e0 [ 326.837526][T10375] handle_edge_irq+0x23b/0xa10 [ 326.837546][T10375] __common_interrupt+0x141/0x1f0 [ 326.837573][T10375] common_interrupt+0xb6/0xe0 [ 326.837588][T10375] asm_common_interrupt+0x26/0x40 [ 326.837607][T10375] pv_native_safe_halt+0x13/0x20 [ 326.837628][T10375] default_idle+0x13/0x20 [ 326.837653][T10375] default_idle_call+0x74/0xb0 [ 326.837678][T10375] do_idle+0x1e8/0x510 [ 326.837694][T10375] cpu_startup_entry+0x44/0x60 [ 326.837711][T10375] rest_init+0x2de/0x300 [ 326.837724][T10375] start_kernel+0x3a9/0x410 [ 326.837748][T10375] x86_64_start_reservations+0x24/0x30 [ 326.837766][T10375] x86_64_start_kernel+0x143/0x1c0 [ 326.837783][T10375] common_startup_64+0x13e/0x147 [ 326.837808][T10375] [ 326.837808][T10375] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 326.837835][T10375] lock_acquire+0x120/0x360 [ 326.837861][T10375] _raw_spin_lock_irqsave+0xa7/0xf0 [ 326.837881][T10375] __wake_up_common_lock+0x2f/0x1f0 [ 326.837904][T10375] tty_port_default_wakeup+0xa2/0xf0 [ 326.837930][T10375] serial8250_tx_chars+0x72e/0x970 [ 326.837952][T10375] serial8250_handle_irq+0x633/0xbb0 [ 326.837976][T10375] serial8250_default_handle_irq+0xbf/0x1e0 [ 326.838004][T10375] serial8250_interrupt+0x8a/0x160 [ 326.838023][T10375] __handle_irq_event_percpu+0x28c/0x980 [ 326.838045][T10375] handle_irq_event+0x8b/0x1e0 [ 326.838067][T10375] handle_edge_irq+0x23b/0xa10 [ 326.838085][T10375] __common_interrupt+0x141/0x1f0 [ 326.838113][T10375] common_interrupt+0xb6/0xe0 [ 326.838128][T10375] asm_common_interrupt+0x26/0x40 [ 326.838145][T10375] pv_native_safe_halt+0x13/0x20 [ 326.838166][T10375] default_idle+0x13/0x20 [ 326.838191][T10375] default_idle_call+0x74/0xb0 [ 326.838216][T10375] do_idle+0x1e8/0x510 [ 326.838231][T10375] cpu_startup_entry+0x44/0x60 [ 326.838248][T10375] rest_init+0x2de/0x300 [ 326.838262][T10375] start_kernel+0x3a9/0x410 [ 326.838284][T10375] x86_64_start_reservations+0x24/0x30 [ 326.838303][T10375] x86_64_start_kernel+0x143/0x1c0 [ 326.838320][T10375] common_startup_64+0x13e/0x147 [ 326.838393][T10375] [ 326.838393][T10375] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 326.838420][T10375] lock_acquire+0x120/0x360 [ 326.838446][T10375] _raw_spin_lock_irqsave+0xa7/0xf0 [ 326.838465][T10375] serial8250_console_write+0x17e/0x1ba0 [ 326.838491][T10375] console_flush_all+0x728/0xc40 [ 326.838512][T10375] console_unlock+0xc4/0x270 [ 326.838530][T10375] vprintk_emit+0x5b7/0x7a0 [ 326.838548][T10375] _printk+0xcf/0x120 [ 326.838572][T10375] register_console+0xa8b/0xf90 [ 326.838593][T10375] univ8250_console_init+0x3a/0x70 [ 326.838611][T10375] console_init+0x10e/0x430 [ 326.838627][T10375] start_kernel+0x254/0x410 [ 326.838650][T10375] x86_64_start_reservations+0x24/0x30 [ 326.838668][T10375] x86_64_start_kernel+0x143/0x1c0 [ 326.838685][T10375] common_startup_64+0x13e/0x147 [ 326.838710][T10375] [ 326.838710][T10375] -> #0 (console_owner){-.-.}-{0:0}: [ 326.838736][T10375] validate_chain+0xb9b/0x2140 [ 326.838754][T10375] __lock_acquire+0xab9/0xd20 [ 326.838780][T10375] lock_acquire+0x120/0x360 [ 326.838806][T10375] console_flush_all+0x6d2/0xc40 [ 326.838826][T10375] console_unlock+0xc4/0x270 [ 326.838844][T10375] vprintk_emit+0x5b7/0x7a0 [ 326.838862][T10375] _printk+0xcf/0x120 [ 326.838886][T10375] should_fail_ex+0x3f5/0x560 [ 326.838903][T10375] strncpy_from_user+0x36/0x290 [ 326.838920][T10375] strncpy_from_user_nofault+0x72/0x150 [ 326.838946][T10375] bpf_bprintf_prepare+0xb91/0x13a0 [ 326.838971][T10375] bpf_trace_printk+0xdb/0x190 [ 326.838987][T10375] bpf_prog_930ede9872f2967c+0x3e/0x44 [ 326.839003][T10375] bpf_trace_run2+0x281/0x4b0 [ 326.839024][T10375] __bpf_trace_contention_begin+0xdc/0x130 [ 326.839043][T10375] trace_contention_begin+0x114/0x140 [ 326.839064][T10375] __pv_queued_spin_lock_slowpath+0xf0/0xb60 [ 326.839088][T10375] queued_spin_lock_slowpath+0x43/0x50 [ 326.839111][T10375] do_raw_spin_lock+0x21f/0x290 [ 326.839132][T10375] raw_spin_rq_lock_nested+0x2a/0x140 [ 326.839160][T10375] __schedule+0x36b/0x4cc0 [ 326.839179][T10375] preempt_schedule_irq+0xb5/0x150 [ 326.839200][T10375] irqentry_exit+0x6f/0x90 [ 326.839221][T10375] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 326.839240][T10375] migrate_enable+0x4/0x3c0 [ 326.839257][T10375] bpf_test_timer_leave+0x61/0x150 [ 326.839281][T10375] bpf_test_timer_continue+0x278/0x350 [ 326.839305][T10375] bpf_test_run+0x39c/0x7b0 [ 326.839326][T10375] bpf_prog_test_run_skb+0xb4e/0x1550 [ 326.839357][T10375] bpf_prog_test_run+0x2c7/0x340 [ 326.839382][T10375] __sys_bpf+0x562/0x860 [ 326.839404][T10375] __x64_sys_bpf+0x7c/0x90 [ 326.839423][T10375] do_syscall_64+0xfa/0x3b0 [ 326.839447][T10375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.839465][T10375] [ 326.839465][T10375] other info that might help us debug this: [ 326.839465][T10375] [ 326.839471][T10375] Chain exists of: [ 326.839471][T10375] console_owner --> &p->pi_lock --> &rq->__lock [ 326.839471][T10375] [ 326.839502][T10375] Possible unsafe locking scenario: [ 326.839502][T10375] [ 326.839508][T10375] CPU0 CPU1 [ 326.839514][T10375] ---- ---- [ 326.839520][T10375] lock(&rq->__lock); [ 326.839532][T10375] lock(&p->pi_lock); [ 326.839546][T10375] lock(&rq->__lock); [ 326.839560][T10375] lock(console_owner); [ 326.839572][T10375] [ 326.839572][T10375] *** DEADLOCK *** [ 326.839572][T10375] [ 326.839578][T10375] 5 locks held by syz.0.1364/10375: [ 326.839590][T10375] #0: ffffffff8e13a160 (rcu_read_lock){....}-{1:3}, at: bpf_test_timer_enter+0x1a/0x140 [ 326.839642][T10375] #1: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 326.839698][T10375] #2: ffffffff8e13a160 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x186/0x4b0 [ 326.839748][T10375] #3: ffffffff8e12e400 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 326.839799][T10375] #4: ffffffff8e015cd0 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 326.839848][T10375] [ 326.839848][T10375] stack backtrace: [ 326.839859][T10375] CPU: 0 UID: 0 PID: 10375 Comm: syz.0.1364 Not tainted syzkaller #0 PREEMPT(full) [ 326.839881][T10375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 326.839894][T10375] Call Trace: [ 326.839902][T10375] [ 326.839910][T10375] dump_stack_lvl+0x189/0x250 [ 326.839938][T10375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.839962][T10375] ? __pfx__printk+0x10/0x10 [ 326.839992][T10375] ? print_lock_name+0xde/0x100 [ 326.840023][T10375] print_circular_bug+0x2ee/0x310 [ 326.840048][T10375] check_noncircular+0x134/0x160 [ 326.840076][T10375] validate_chain+0xb9b/0x2140 [ 326.840116][T10375] __lock_acquire+0xab9/0xd20 [ 326.840150][T10375] ? console_flush_all+0x13a/0xc40 [ 326.840173][T10375] lock_acquire+0x120/0x360 [ 326.840201][T10375] ? console_flush_all+0x13a/0xc40 [ 326.840230][T10375] ? do_raw_spin_unlock+0x122/0x240 [ 326.840255][T10375] ? console_flush_all+0x13a/0xc40 [ 326.840279][T10375] console_flush_all+0x6d2/0xc40 [ 326.840302][T10375] ? console_flush_all+0x13a/0xc40 [ 326.840336][T10375] ? console_flush_all+0x13a/0xc40 [ 326.840365][T10375] ? __pfx_console_flush_all+0x10/0x10 [ 326.840398][T10375] ? is_printk_cpu_sync_owner+0x32/0x40 [ 326.840428][T10375] console_unlock+0xc4/0x270 [ 326.840451][T10375] ? __pfx_console_unlock+0x10/0x10 [ 326.840475][T10375] ? is_printk_cpu_sync_owner+0x32/0x40 [ 326.840505][T10375] vprintk_emit+0x5b7/0x7a0 [ 326.840529][T10375] ? __pfx_vprintk_emit+0x10/0x10 [ 326.840551][T10375] ? tracing_gen_ctx_irq_test+0xc6/0x160 [ 326.840573][T10375] ? perf_swevent_event+0x113/0x5e0 [ 326.840607][T10375] _printk+0xcf/0x120 [ 326.840634][T10375] ? __pfx____ratelimit+0x10/0x10 [ 326.840660][T10375] ? __pfx__printk+0x10/0x10 [ 326.840685][T10375] ? cmp_ex_search+0x1e/0x80 [ 326.840710][T10375] ? bsearch+0x95/0xc0 [ 326.840727][T10375] ? __pfx_cmp_ex_search+0x10/0x10 [ 326.840751][T10375] ? strncpy_from_user+0x1bc/0x290 [ 326.840772][T10375] ? search_extable+0x8f/0xd0 [ 326.840797][T10375] ? __pfx_search_extable+0x10/0x10 [ 326.840825][T10375] should_fail_ex+0x3f5/0x560 [ 326.840849][T10375] strncpy_from_user+0x36/0x290 [ 326.840872][T10375] strncpy_from_user_nofault+0x72/0x150 [ 326.840902][T10375] bpf_bprintf_prepare+0xb91/0x13a0 [ 326.840939][T10375] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 326.840971][T10375] ? bpf_trace_printk+0xc1/0x190 [ 326.840994][T10375] bpf_trace_printk+0xdb/0x190 [ 326.841012][T10375] ? __lock_acquire+0xab9/0xd20 [ 326.841042][T10375] ? __pfx_bpf_trace_printk+0x10/0x10 [ 326.841063][T10375] ? bpf_trace_run2+0x186/0x4b0 [ 326.841091][T10375] ? perf_swevent_event+0x113/0x5e0 [ 326.841122][T10375] bpf_prog_930ede9872f2967c+0x3e/0x44 [ 326.841140][T10375] bpf_trace_run2+0x281/0x4b0 [ 326.841165][T10375] ? bpf_trace_run2+0x186/0x4b0 [ 326.841191][T10375] ? __pfx_bpf_trace_run2+0x10/0x10 [ 326.841215][T10375] ? perf_tp_event+0x664/0x1380 [ 326.841242][T10375] ? __bpf_trace_contention_begin+0xcd/0x130 [ 326.841267][T10375] __bpf_trace_contention_begin+0xdc/0x130 [ 326.841289][T10375] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 326.841323][T10375] trace_contention_begin+0x114/0x140 [ 326.841355][T10375] __pv_queued_spin_lock_slowpath+0xf0/0xb60 [ 326.841382][T10375] ? rcu_qs+0xc4/0x170 [ 326.841399][T10375] ? __pfx_rcu_qs+0x10/0x10 [ 326.841420][T10375] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 326.841457][T10375] queued_spin_lock_slowpath+0x43/0x50 [ 326.841484][T10375] do_raw_spin_lock+0x21f/0x290 [ 326.841511][T10375] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 326.841536][T10375] ? perf_tp_event+0x664/0x1380 [ 326.841565][T10375] raw_spin_rq_lock_nested+0x2a/0x140 [ 326.841599][T10375] __schedule+0x36b/0x4cc0 [ 326.841637][T10375] ? perf_trace_preemptirq_template+0x280/0x340 [ 326.841666][T10375] ? __pfx___schedule+0x10/0x10 [ 326.841691][T10375] ? perf_trace_run_bpf_submit+0xee/0x170 [ 326.841721][T10375] ? perf_trace_preemptirq_template+0x280/0x340 [ 326.841750][T10375] ? preempt_schedule_irq+0xaa/0x150 [ 326.841776][T10375] preempt_schedule_irq+0xb5/0x150 [ 326.841800][T10375] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 326.841831][T10375] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 326.841853][T10375] irqentry_exit+0x6f/0x90 [ 326.841877][T10375] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 326.841898][T10375] RIP: 0010:migrate_enable+0x4/0x3c0 [ 326.841920][T10375] Code: df e8 50 7b 93 00 e9 41 ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <55> 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec c0 00 [ 326.841937][T10375] RSP: 0018:ffffc90005677938 EFLAGS: 00000293 [ 326.841955][T10375] RAX: ffffffff89a4629c RBX: 0000000000000001 RCX: ffff88802e759e00 [ 326.841969][T10375] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 326.841981][T10375] RBP: 0000000000000000 R08: ffffffff8fa3b537 R09: 1ffffffff1f476a6 [ 326.841995][T10375] R10: dffffc0000000000 R11: ffffffff8167bab0 R12: ffff88802e759e00 [ 326.842010][T10375] R13: 1ffff11005ceb3c0 R14: dffffc0000000000 R15: dffffc0000000000 [ 326.842029][T10375] ? __pfx_read_tsc+0x10/0x10 [ 326.842059][T10375] ? bpf_test_timer_leave+0x5c/0x150 [ 326.842092][T10375] bpf_test_timer_leave+0x61/0x150 [ 326.842118][T10375] bpf_test_timer_continue+0x278/0x350 [ 326.842146][T10375] ? bpf_test_run+0x197/0x7b0 [ 326.842169][T10375] bpf_test_run+0x39c/0x7b0 [ 326.842210][T10375] ? __pfx_bpf_test_run+0x10/0x10 [ 326.842253][T10375] ? convert___skb_to_skb+0x3d/0x590 [ 326.842280][T10375] bpf_prog_test_run_skb+0xb4e/0x1550 [ 326.842311][T10375] ? __fget_files+0x2a/0x420 [ 326.842344][T10375] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 326.842370][T10375] bpf_prog_test_run+0x2c7/0x340 [ 326.842401][T10375] __sys_bpf+0x562/0x860 [ 326.842428][T10375] ? __pfx___sys_bpf+0x10/0x10 [ 326.842465][T10375] ? do_syscall_64+0xb7/0x3b0 [ 326.842493][T10375] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 326.842522][T10375] ? __pfx_ksys_write+0x10/0x10 [ 326.842538][T10375] ? rcu_is_watching+0x15/0xb0 [ 326.842563][T10375] __x64_sys_bpf+0x7c/0x90 [ 326.842587][T10375] do_syscall_64+0xfa/0x3b0 [ 326.842612][T10375] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.842635][T10375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.842655][T10375] ? clear_bhb_loop+0x60/0xb0 [ 326.842679][T10375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.842697][T10375] RIP: 0033:0x7fcd3818eec9 [ 326.842714][T10375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.842731][T10375] RSP: 002b:00007fcd390f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 326.842751][T10375] RAX: ffffffffffffffda RBX: 00007fcd383e5fa0 RCX: 00007fcd3818eec9 [ 326.842765][T10375] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 326.842778][T10375] RBP: 00007fcd390f7090 R08: 0000000000000000 R09: 0000000000000000 [ 326.842790][T10375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.842802][T10375] R13: 00007fcd383e6038 R14: 00007fcd383e5fa0 R15: 00007ffe8d8bf288 [ 326.842829][T10375] [ 326.869912][T10361] netlink: zone id is out of range [ 326.872279][T10375] CPU: 0 UID: 0 PID: 10375 Comm: syz.0.1364 Not tainted syzkaller #0 PREEMPT(full) [ 326.872303][T10375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 326.872317][T10375] Call Trace: [ 326.872332][T10375] [ 326.872340][T10375] dump_stack_lvl+0x189/0x250 [ 326.872371][T10375] ? __pfx____ratelimit+0x10/0x10 [ 326.872395][T10375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.872420][T10375] ? __pfx__printk+0x10/0x10 [ 326.872450][T10375] ? cmp_ex_search+0x1e/0x80 [ 326.872480][T10375] ? bsearch+0x95/0xc0 [ 326.872500][T10375] ? strncpy_from_user+0x1bc/0x290 [ 326.872525][T10375] ? search_extable+0x8f/0xd0 [ 326.872552][T10375] ? __pfx_search_extable+0x10/0x10 [ 326.872582][T10375] should_fail_ex+0x414/0x560 [ 326.872610][T10375] strncpy_from_user+0x36/0x290 [ 326.872635][T10375] strncpy_from_user_nofault+0x72/0x150 [ 326.872670][T10375] bpf_bprintf_prepare+0xb91/0x13a0 [ 326.872712][T10375] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 326.872745][T10375] ? bpf_trace_printk+0xc1/0x190 [ 326.872772][T10375] bpf_trace_printk+0xdb/0x190 [ 326.872792][T10375] ? __lock_acquire+0xab9/0xd20 [ 326.872826][T10375] ? __pfx_bpf_trace_printk+0x10/0x10 [ 326.872849][T10375] ? bpf_trace_run2+0x186/0x4b0 [ 326.872880][T10375] ? perf_swevent_event+0x113/0x5e0 [ 326.872915][T10375] bpf_prog_930ede9872f2967c+0x3e/0x44 [ 326.872935][T10375] bpf_trace_run2+0x281/0x4b0 [ 326.872964][T10375] ? bpf_trace_run2+0x186/0x4b0 [ 326.872993][T10375] ? __pfx_bpf_trace_run2+0x10/0x10 [ 326.873017][T10375] ? perf_tp_event+0x664/0x1380 [ 326.873048][T10375] ? __bpf_trace_contention_begin+0xcd/0x130 [ 326.873076][T10375] __bpf_trace_contention_begin+0xdc/0x130 [ 326.873098][T10375] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 326.873137][T10375] trace_contention_begin+0x114/0x140 [ 326.873164][T10375] __pv_queued_spin_lock_slowpath+0xf0/0xb60 [ 326.873195][T10375] ? rcu_qs+0xc4/0x170 [ 326.873214][T10375] ? __pfx_rcu_qs+0x10/0x10 [ 326.873237][T10375] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 326.873278][T10375] queued_spin_lock_slowpath+0x43/0x50 [ 326.873306][T10375] do_raw_spin_lock+0x21f/0x290 [ 326.873347][T10375] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 326.873375][T10375] ? perf_tp_event+0x664/0x1380 [ 326.873407][T10375] raw_spin_rq_lock_nested+0x2a/0x140 [ 326.873445][T10375] __schedule+0x36b/0x4cc0 [ 326.873487][T10375] ? perf_trace_preemptirq_template+0x280/0x340 [ 326.873520][T10375] ? __pfx___schedule+0x10/0x10 [ 326.873547][T10375] ? perf_trace_run_bpf_submit+0xee/0x170 [ 326.873579][T10375] ? perf_trace_preemptirq_template+0x280/0x340 [ 326.873612][T10375] ? preempt_schedule_irq+0xaa/0x150 [ 326.873641][T10375] preempt_schedule_irq+0xb5/0x150 [ 326.873667][T10375] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 326.873702][T10375] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 326.873725][T10375] irqentry_exit+0x6f/0x90 [ 326.873751][T10375] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 326.873775][T10375] RIP: 0010:migrate_enable+0x4/0x3c0 [ 326.873798][T10375] Code: df e8 50 7b 93 00 e9 41 ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <55> 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec c0 00 [ 326.873818][T10375] RSP: 0018:ffffc90005677938 EFLAGS: 00000293 [ 326.873840][T10375] RAX: ffffffff89a4629c RBX: 0000000000000001 RCX: ffff88802e759e00 [ 326.873857][T10375] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 326.873871][T10375] RBP: 0000000000000000 R08: ffffffff8fa3b537 R09: 1ffffffff1f476a6 [ 326.873886][T10375] R10: dffffc0000000000 R11: ffffffff8167bab0 R12: ffff88802e759e00 [ 326.873903][T10375] R13: 1ffff11005ceb3c0 R14: dffffc0000000000 R15: dffffc0000000000 [ 326.873926][T10375] ? __pfx_read_tsc+0x10/0x10 [ 326.873959][T10375] ? bpf_test_timer_leave+0x5c/0x150 [ 326.873996][T10375] bpf_test_timer_leave+0x61/0x150 [ 326.874026][T10375] bpf_test_timer_continue+0x278/0x350 [ 326.874056][T10375] ? bpf_test_run+0x197/0x7b0 [ 326.874082][T10375] bpf_test_run+0x39c/0x7b0 [ 326.874126][T10375] ? __pfx_bpf_test_run+0x10/0x10 [ 326.874174][T10375] ? convert___skb_to_skb+0x3d/0x590 [ 326.874203][T10375] bpf_prog_test_run_skb+0xb4e/0x1550 [ 326.874238][T10375] ? __fget_files+0x2a/0x420 [ 326.874266][T10375] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 326.874295][T10375] bpf_prog_test_run+0x2c7/0x340 [ 326.874336][T10375] __sys_bpf+0x562/0x860 [ 326.874368][T10375] ? __pfx___sys_bpf+0x10/0x10 [ 326.874408][T10375] ? do_syscall_64+0xb7/0x3b0 [ 326.874439][T10375] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 326.874470][T10375] ? __pfx_ksys_write+0x10/0x10 [ 326.874488][T10375] ? rcu_is_watching+0x15/0xb0 [ 326.874516][T10375] __x64_sys_bpf+0x7c/0x90 [ 326.874542][T10375] do_syscall_64+0xfa/0x3b0 [ 326.874569][T10375] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.874596][T10375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.874617][T10375] ? clear_bhb_loop+0x60/0xb0 [ 326.874643][T10375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.874663][T10375] RIP: 0033:0x7fcd3818eec9 [ 326.874682][T10375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.874700][T10375] RSP: 002b:00007fcd390f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 326.874723][T10375] RAX: ffffffffffffffda RBX: 00007fcd383e5fa0 RCX: 00007fcd3818eec9 [ 326.874738][T10375] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 326.874753][T10375] RBP: 00007fcd390f7090 R08: 0000000000000000 R09: 0000000000000000 [ 326.874767][T10375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.874780][T10375] R13: 00007fcd383e6038 R14: 00007fcd383e5fa0 R15: 00007ffe8d8bf288 [ 326.874810][T10375] [ 329.023440][T10361] netlink: zone id is out of range [ 329.035648][T10361] netlink: zone id is out of range