last executing test programs: 17.507887925s ago: executing program 3 (id=2839): r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000040)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 17.234493615s ago: executing program 3 (id=2842): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) syz_open_procfs$namespace(0x0, &(0x7f0000000a40)='ns/time_for_children\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNGETVNETLE(r2, 0x400454de, &(0x7f0000001140)) 16.833432835s ago: executing program 3 (id=2849): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x24, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00) 16.663283348s ago: executing program 3 (id=2852): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x5, 0x3fe, 0x20271f}, 0x0, 0xffffffffbfffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000fe094b74845f6836a2fb330030000000160a01000000000000000000010000000900010073797a30000000000900020073797a310000000004000380140000001000010000"], 0x78}}, 0x0) 16.499772353s ago: executing program 3 (id=2856): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000023429e4adc96b5ae32d11555aae60500"/28], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa0000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9, 0x1947}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)="cdeb", 0x2}], 0x1}, 0x1) recvmsg(r2, &(0x7f0000000140)={0x0, 0x45, 0x0}, 0x102) recvmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x60000021) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x10000, &(0x7f0000000040)="e0e6e6dc238bdd8b7296", 0xa, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000800)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) recvmsg(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) recvmsg(r7, &(0x7f0000000540)={&(0x7f0000000240)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000300)=""/193, 0xc1}], 0x1, &(0x7f0000000500)=""/38, 0x26}, 0x40012040) 2.599188174s ago: executing program 2 (id=2965): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0x64, 0x30, 0xb, 0x5, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x8000000, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x39}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 2.432181647s ago: executing program 2 (id=2968): r0 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@map_fd]}, &(0x7f0000000200)='syzkaller\x00', 0xffff9223, 0x2a, &(0x7f0000000240)=""/42, 0x40f00, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000280)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x0, 0x4, 0x9, 0xc}], 0x10, 0x6b9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000003040)=ANY=[@ANYBLOB="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", @ANYRESOCT=r0], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0xfffffffc}, 0x10, 0x0, r1}, 0x94) r3 = socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r5, 0x0, 0x4000000) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) recvmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/84, 0x54}], 0x1, &(0x7f0000000540)=""/153, 0x99}, 0x40000100) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r2, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd26, 0x0, 0x0, 0x0, 0x0}}, 0x10) r8 = socket$kcm(0x1e, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="1c000000180081034e81f783db4cb9040a1d870006007c09e8fc55a10a00", 0x1e}], 0x1}, 0x0) sendmsg$kcm(r8, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x2, {{0x2, 0x2}, 0x2}}, 0x80, 0x0}, 0x4040041) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/110, 0x6e}], 0x1}, 0x2737cfa6da4ae731) 2.248307341s ago: executing program 2 (id=2971): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5, 0x83501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x940, 0x1, 0x0, 0x0, 0x6d1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000580)=""/116, 0x74}, {&(0x7f00000047c0)=""/4057, 0xfd9}, {&(0x7f00000037c0)=""/4073, 0xfe9}, {&(0x7f0000000700)=""/237, 0xed}, {&(0x7f00000002c0)=""/123, 0x7b}, {&(0x7f0000000080)=""/160, 0xa0}, {&(0x7f0000000600)=""/126, 0x7e}], 0x7}, 0x100) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x20, 0xfffff028}, {0x6, 0x4, 0x0, 0x4000}]}) socketpair(0x27, 0x3, 0xe24, &(0x7f0000000140)) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/222, 0xde}], 0x1, 0x0, 0x0, 0x51}, 0x0) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r3, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x0, 0x0, @local, 0x5}, 0x80, 0x0}, 0x4c810) 2.023721587s ago: executing program 4 (id=2972): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000717c33ba830a6fda79cabe8eb53e6e00"/43], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="07000000040000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000080000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x4}, 0x6000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/mnt\x00') perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x21, 0x800, 0x6, &(0x7f0000000000)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r4}, 0xc) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) 1.734239339s ago: executing program 4 (id=2975): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x8, [@union={0xa, 0x7, 0x0, 0x5, 0x0, 0x7, [{0xc, 0x2, 0x6}, {0x4, 0x2, 0x7}, {0xb, 0x1, 0x1}, {0x6, 0x1, 0x400}, {0xe, 0x5, 0x2bd}, {0x5, 0x5, 0x8}, {0x3, 0x0, 0xa}]}, @volatile={0x5}]}, {0x0, [0x61, 0x0, 0x30, 0x5f, 0x5f, 0x5f]}}, &(0x7f0000001380), 0x8c, 0x0, 0x0, 0x7a}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001480)=@generic={&(0x7f0000001440)='./file0\x00', 0x0, 0x10}, 0x18) bpf$ITER_CREATE(0x21, &(0x7f00000014c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x13, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4841}, 0x4844) 1.564881748s ago: executing program 2 (id=2977): r0 = socket$kcm(0xa, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e00073fe6"], 0xfe33) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) socketpair(0x28, 0x1, 0x28, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x73) socket$kcm(0x10, 0x2, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800) close(r5) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r6, @ANYBLOB="680c00001500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000100"/28], 0x50) r7 = openat$cgroup_ro(r1, &(0x7f0000000100)='memory.stat\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r7, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0xe07e872420dfef8a) 1.562418873s ago: executing program 1 (id=2978): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b800000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200044e2400000a00006000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000010feffffffffffffff000000400000000000000000000000001a000010000000000100000000000000feffffffffffffff770000000000000005000000000000000000000000000000ff7f00000000000008000000000000000101"], 0xb8}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f}, 0x0) 1.551626799s ago: executing program 4 (id=2979): r0 = socket$kcm(0x2, 0x922000000001, 0x106) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e0000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000040)=r2, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230007) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r5) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c230040) close(0x3) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xad00, 0x219}, 0x12280, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r8, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x8, 0x0, 0x0}}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r11, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa3a"], 0xfdef) 1.486021547s ago: executing program 0 (id=2980): r0 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@map_fd]}, &(0x7f0000000200)='syzkaller\x00', 0xffff9223, 0x2a, &(0x7f0000000240)=""/42, 0x40f00, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000280)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x0, 0x4, 0x9, 0xc}], 0x10, 0x6b9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000003040)=ANY=[@ANYBLOB="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", @ANYRESOCT=r0], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0xfffffffc}, 0x10, 0x0, r1}, 0x94) r3 = socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r5, 0x0, 0x4000000) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) recvmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/84, 0x54}], 0x1, &(0x7f0000000540)=""/153, 0x99}, 0x40000100) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r2, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd26, 0x0, 0x0, 0x0, 0x0}}, 0x10) r8 = socket$kcm(0x1e, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="1c000000180081034e81f783db4cb9040a1d870006007c09e8fc55a10a00", 0x1e}], 0x1}, 0x0) sendmsg$kcm(r8, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x2, {{0x2, 0x2}, 0x2}}, 0x80, 0x0}, 0x4040041) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/110, 0x6e}], 0x1}, 0x2737cfa6da4ae731) 1.384462332s ago: executing program 1 (id=2981): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/16], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) syz_open_procfs$namespace(0x0, &(0x7f0000000a40)='ns/time_for_children\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNGETVNETLE(r2, 0x400454de, &(0x7f0000001140)) 1.323631868s ago: executing program 0 (id=2982): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="180000ca0caf5d22000000181100"/28, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x4, @remote, 'veth0\x00'}}, 0x80, 0x0}, 0x8014) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000250091"], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], 0x48) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) 1.186364376s ago: executing program 1 (id=2983): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="40000000000000042bbd7000fcdbdf250800010002000000080003000000020008000100010000000800030002000000080001000033ccbda358f3c4c744f852e9087a93a8239624286dee1cac2b592481139ed51318ba3dfcaf4e98d654a9f61c6e7fa93b2228e94e0dc5bf13524b422864"], 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x801) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f61640024000280080004400000310108000340000000b9080001400000000a08000240000000010900010073797a30000000000900020073797a32"], 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x40) 1.092356729s ago: executing program 0 (id=2984): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000717c33ba830a6fda79cabe8eb53e6e00"/43], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="07000000040000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000080000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x4}, 0x6000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/mnt\x00') perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x21, 0x800, 0x6, &(0x7f0000000000)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r4}, 0xc) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) 1.048824169s ago: executing program 1 (id=2985): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180100000000001e0000000001080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000040000000800000001"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1}, 0x20) 660.963518ms ago: executing program 1 (id=2986): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x130) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f00000004c0)=0x1, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000ffffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008b19200b703000000000000850000008c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020066cc8fd848b179c713751c0709fb842e23000b", 0x17}], 0x1, 0x0, 0x0, 0x400300}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x9, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}]}, @IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x29e145e4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x21}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x4000010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r5, 0xe0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), ""/16, 0x0, 0x0, 0x0, 0x0, 0x20000000000002c8, 0x5, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb1, &(0x7f0000001280), 0x0, 0x10, &(0x7f0000001300), &(0x7f00000013c0), 0x8, 0xc, 0x8, 0x8, &(0x7f0000001400)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x1e, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x13, &(0x7f0000000000)=ANY=[@ANYRESHEX=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 574.524411ms ago: executing program 2 (id=2987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0015"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x7, 0x6}, 0x828, 0x800, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9c10, 0x830d}, 0x9008, 0x2, 0xff7ffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="010000be3f000500000002000000ffff00000500", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x48) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x3000c085) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x2, 0x200, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, 0x0, 0x9cdc2384056b48b8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5}, 0x94) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x703, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000010000b0fd25a806c8c6f94f90a24fc60", 0x33fe0}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) close(0x3) r7 = openat$cgroup_procs(r3, &(0x7f0000000500)='cgroup.threads\x00', 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, r7}, 0x18) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000030303000000000000000000000000100600000001000000280961dbd987750b794e9fa966b80d4fb98e99aafc853aae59c30e176bad7a715761fcd9300ec60f981c9e01693296dcb45eb9cb00d3ccaaa14d581b38493c71c130b3bdb2e901f7b2d160560f6ca641241945bbf18a19deebc9233d65e391120665816a7b565b40050b3f0b62febc2c72c260064243108e9d9ee981b86d4e641b641b1222fade5868630a4130bea0e8ed7ce6cf4ffd38118e05e9453840254a0269bb"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="20000000010301"], 0x20}}, 0x0) socketpair(0x1, 0x1, 0x1, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x82048}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x40004}, 0x4008000) 573.670361ms ago: executing program 0 (id=2988): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x8, [@union={0xa, 0x7, 0x0, 0x5, 0x0, 0x7, [{0xc, 0x2, 0x6}, {0x4, 0x2, 0x7}, {0xb, 0x1, 0x1}, {0x6, 0x1, 0x400}, {0xe, 0x5, 0x2bd}, {0x5, 0x5, 0x8}, {0x3, 0x0, 0xa}]}, @volatile={0x5}]}, {0x0, [0x61, 0x0, 0x30, 0x5f, 0x5f, 0x5f]}}, &(0x7f0000001380), 0x8c, 0x0, 0x0, 0x7a}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001480)=@generic={&(0x7f0000001440)='./file0\x00', 0x0, 0x10}, 0x18) bpf$ITER_CREATE(0x21, &(0x7f00000014c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x13, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4841}, 0x4844) 480.493555ms ago: executing program 1 (id=2989): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000004000000000000000001801000020786c3500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f00000024c0)={&(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x24000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='tlb_flush\x00', r2}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c309000040000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1003, &(0x7f0000003e80)=""/4099, 0x41100, 0xd}, 0x94) 365.548117ms ago: executing program 0 (id=2990): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xcfa4) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, 0x0, 0x0, 0x226d, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000040140100", @ANYRES32, @ANYBLOB="000000000000000000000000000dbb0000050000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/24, @ANYRES32=r3, @ANYBLOB], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:'], 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="82af18020000fcffffff000000000000000085000000360400000312a06400080000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000005000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r9}, 0x10) gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x52}, 0x28) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x40000) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r10, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000e14000017bd7000fddbdf2508003c00050000000080030002000000"], 0x20}, 0x1, 0x0, 0x0, 0x4890}, 0x24004000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000037000100feffffff00000000017c00000c008e0006"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0x4c080) 336.32145ms ago: executing program 4 (id=2991): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1, 0x20}, 0x20a0, 0x58, 0x5, 0x4, 0x2, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x6e8}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, 0x0}, 0x94) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x110, 0x1}], 0x10}, 0x0) 180.425914ms ago: executing program 0 (id=2992): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/16], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) syz_open_procfs$namespace(0x0, &(0x7f0000000a40)='ns/time_for_children\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNGETVNETLE(r2, 0x400454de, &(0x7f0000001140)) 120.880726ms ago: executing program 3 (id=2866): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313", 0x3d4}], 0x1}, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)='%ps \x00'}, 0x20) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0x23, &(0x7f0000000e40)=ANY=[@ANYBLOB="18000000008000000000000021d8000085200000020000009500000000000000186400000a000000000000000b000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000085000000a600000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018140000", @ANYRES32, @ANYBLOB="0000000000000000851000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018510000050000000000000000000000950000000000000086a4b99e53eb6a20398f17d744e9d0cf6923ffd0ef8115424c01b5548635e1b413d48ed5078649f05530fb401307040a8d8be76296d7f2cec93ca9c19513d95f862f5f72abab6b85d88c38cbc09fa7a35212a809a83b344bdb57b37802494273250dfd042f22f3defe3912da91988a82c71c05bf6868427da4e97ee6cd75159a195230b129acc4545156a0d52e63a3572845d7a7cabe875f611ec39bba1c27b76d3c4d703ed5"], &(0x7f00000005c0)='GPL\x00', 0x5, 0xc3, &(0x7f0000000600)=""/195, 0x40f00, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x2cf35, 0xffffffffffffffff, 0x0, &(0x7f0000000d00)=[0x1, r1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x94) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000840)=r2, 0xffffffffffffffaa) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0xfffffffa}, 0x8) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) close(r5) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0)={0x0, r3}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r7}, 0x20) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03000000040f51de3d0000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='d\r\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000020000000400"/28], 0x50) r10 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r10, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xd7ffffff}, 0x3000c085) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x3e, &(0x7f0000000100)=r11, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x0, 0x1d, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000600000000000000191e00001800000003000000000000000004000018110000", @ANYRES32=r8, @ANYBLOB="0000008a8600b70240004000000085000000860000001855000010000000004000000000000018520000", @ANYRES32=r8, @ANYBLOB="0000000000000000186300000400000000000000000000008520000001000000184b000008000000000000000000000085000000a400000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095000000000000009500000000000000"], &(0x7f0000000540)='GPL\x00', 0x4, 0x90, &(0x7f0000000580)=""/144, 0x40f00, 0x58, '\x00', 0x0, 0x0, r11, 0x8, &(0x7f0000000640)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000006c0)=[{0x4, 0x3, 0xc, 0x4}, {0x0, 0x1, 0x2, 0x6}, {0x2, 0x2}], 0x10, 0x1}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000001000)='./file0/file0\x00'}, 0x18) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00'}, 0x10) r13 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r12}, 0x8) write$cgroup_int(r13, &(0x7f00000001c0), 0xfffffdef) recvmsg$kcm(r11, &(0x7f0000000500)={&(0x7f0000000440)=@qipcrtr, 0x80, &(0x7f0000000c80)=[{&(0x7f00000004c0)=""/48, 0x30}, {&(0x7f00000008c0)=""/136, 0x88}, {&(0x7f00000009c0)=""/174, 0xae}, {&(0x7f0000000a80)=""/200, 0xc8}, {&(0x7f0000000b80)=""/233, 0xe9}], 0x5}, 0x0) 112.50195ms ago: executing program 4 (id=2993): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x8, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000140)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000880)=ANY=[], 0xed}, 0x20000040) 373.906µs ago: executing program 4 (id=2994): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001480)={0x200c, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x2006, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x1fe8, 0x2, 0x0, 0x1, [@nested={0x1fe4, 0x115, 0x0, 0x1, [@nested={0x1fdd, 0x10e, 0x0, 0x1, [@typed={0xc, 0x115, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0x6c, 0x0, 0x0, @u32=0x1}, @nested={0x1119, 0xe2, 0x0, 0x1, [@typed={0x8, 0xb8, 0x0, 0x0, @fd=r0}, @generic="acf44b554d9b4946631486311e7cf55903dc4342ecc48c6e536faf0b233b86386dab4aba9b6c2722b464136d272253011e629a65890de367b9be618e046aa004d3335ec0858487ffdb92", @generic="4c2d861129f1728ae2b70961013a62b71d72e8788ee9886f32fb227d6e06a595141687f1d405213c1f149a2d2c4e0b83d1be08d95a240150429ed96e8618b7aab279dfb101e343fc95", @generic="dbbfd1d0e04335f9c7f5da8093ee588dab2553115d88160f1220d84eb55b51ad8cdeb863a459e0fba04a31b1fffafd1806a8a8e770a1cd5ea6e381ce3134c477af74718ea659c7be463902a7da720d3a23f847e1c268ee1c3fd593b7fbc35936e758363348d4c8702afb99147d04e391e8", @typed={0xc, 0xdf, 0x0, 0x0, @u64=0xec9}, @generic="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"]}, @nested={0x4, 0xb1}, @generic="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"]}]}]}]}, 0x200c}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) (fail_nth: 18) 0s ago: executing program 2 (id=2995): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180100000000001e0000000001080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000040000000800000001"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1}, 0x20) kernel console output (not intermixed with test programs): o match found [ 379.098810][T12328] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2084'. [ 379.641436][T12343] netlink: 'syz.1.2090': attribute type 1 has an invalid length. [ 380.058482][T12357] netlink: 'syz.0.2094': attribute type 10 has an invalid length. [ 380.203864][T12357] macvlan0: entered promiscuous mode [ 380.214787][T12357] macvlan0: entered allmulticast mode [ 380.247463][T12358] FAULT_INJECTION: forcing a failure. [ 380.247463][T12358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.282917][T12357] veth1_vlan: entered allmulticast mode [ 380.299780][T12357] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 380.331418][T12358] CPU: 1 UID: 0 PID: 12358 Comm: syz.4.2091 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 380.331446][T12358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 380.331456][T12358] Call Trace: [ 380.331465][T12358] [ 380.331473][T12358] dump_stack_lvl+0x189/0x250 [ 380.331501][T12358] ? __pfx____ratelimit+0x10/0x10 [ 380.331526][T12358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.331547][T12358] ? __pfx__printk+0x10/0x10 [ 380.331577][T12358] ? __might_fault+0xb0/0x130 [ 380.331610][T12358] should_fail_ex+0x414/0x560 [ 380.331641][T12358] _copy_to_user+0x31/0xb0 [ 380.331665][T12358] simple_read_from_buffer+0xe1/0x170 [ 380.331696][T12358] proc_fail_nth_read+0x1b3/0x220 [ 380.331722][T12358] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 380.331747][T12358] ? rw_verify_area+0x2a6/0x4d0 [ 380.331769][T12358] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 380.331792][T12358] vfs_read+0x200/0xa30 [ 380.331813][T12358] ? fdget_pos+0x247/0x320 [ 380.331836][T12358] ? __pfx___mutex_lock+0x10/0x10 [ 380.331861][T12358] ? __pfx_vfs_read+0x10/0x10 [ 380.331886][T12358] ? __fget_files+0x2a/0x420 [ 380.331908][T12358] ? __fget_files+0x3a0/0x420 [ 380.331923][T12358] ? __fget_files+0x2a/0x420 [ 380.331951][T12358] ksys_read+0x145/0x250 [ 380.331978][T12358] ? __pfx_ksys_read+0x10/0x10 [ 380.332008][T12358] ? do_syscall_64+0xbe/0x3b0 [ 380.332038][T12358] do_syscall_64+0xfa/0x3b0 [ 380.332061][T12358] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.332093][T12358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.332112][T12358] ? clear_bhb_loop+0x60/0xb0 [ 380.332135][T12358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.332153][T12358] RIP: 0033:0x7f37f298d5fc [ 380.332170][T12358] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 380.332186][T12358] RSP: 002b:00007f37f3747030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 380.332206][T12358] RAX: ffffffffffffffda RBX: 00007f37f2bb6090 RCX: 00007f37f298d5fc [ 380.332219][T12358] RDX: 000000000000000f RSI: 00007f37f37470a0 RDI: 000000000000000f [ 380.332231][T12358] RBP: 00007f37f3747090 R08: 0000000000000000 R09: 0000000000000000 [ 380.332241][T12358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.332251][T12358] R13: 00007f37f2bb6128 R14: 00007f37f2bb6090 R15: 00007ffd9bf9f148 [ 380.332285][T12358] [ 381.041400][T12374] netlink: 'syz.0.2100': attribute type 1 has an invalid length. [ 381.049960][T12368] delete_channel: no stack [ 382.011608][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 382.443478][T12410] delete_channel: no stack [ 382.518503][T12418] FAULT_INJECTION: forcing a failure. [ 382.518503][T12418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.533071][T12418] CPU: 1 UID: 0 PID: 12418 Comm: syz.1.2116 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 382.533100][T12418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 382.533111][T12418] Call Trace: [ 382.533119][T12418] [ 382.533127][T12418] dump_stack_lvl+0x189/0x250 [ 382.533153][T12418] ? __pfx____ratelimit+0x10/0x10 [ 382.533230][T12418] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.533251][T12418] ? __pfx__printk+0x10/0x10 [ 382.533288][T12418] should_fail_ex+0x414/0x560 [ 382.533317][T12418] _copy_to_user+0x31/0xb0 [ 382.533339][T12418] simple_read_from_buffer+0xe1/0x170 [ 382.533370][T12418] proc_fail_nth_read+0x1b3/0x220 [ 382.533394][T12418] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 382.533417][T12418] ? rw_verify_area+0x2a6/0x4d0 [ 382.533438][T12418] ? __lock_acquire+0xab9/0xd20 [ 382.533461][T12418] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 382.533483][T12418] vfs_read+0x200/0xa30 [ 382.533504][T12418] ? fdget_pos+0x247/0x320 [ 382.533524][T12418] ? __pfx___mutex_lock+0x10/0x10 [ 382.533549][T12418] ? __pfx_vfs_read+0x10/0x10 [ 382.533573][T12418] ? __fget_files+0x2a/0x420 [ 382.533594][T12418] ? __fget_files+0x3a0/0x420 [ 382.533609][T12418] ? __fget_files+0x2a/0x420 [ 382.533634][T12418] ksys_read+0x145/0x250 [ 382.533660][T12418] ? __pfx_ksys_read+0x10/0x10 [ 382.533679][T12418] ? rcu_is_watching+0x15/0xb0 [ 382.533704][T12418] ? do_syscall_64+0xbe/0x3b0 [ 382.533731][T12418] do_syscall_64+0xfa/0x3b0 [ 382.533753][T12418] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.533775][T12418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.533792][T12418] ? clear_bhb_loop+0x60/0xb0 [ 382.533814][T12418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.533831][T12418] RIP: 0033:0x7f574a38d5fc [ 382.533848][T12418] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 382.533863][T12418] RSP: 002b:00007f574b2ad030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 382.533883][T12418] RAX: ffffffffffffffda RBX: 00007f574a5b5fa0 RCX: 00007f574a38d5fc [ 382.533896][T12418] RDX: 000000000000000f RSI: 00007f574b2ad0a0 RDI: 0000000000000004 [ 382.533907][T12418] RBP: 00007f574b2ad090 R08: 0000000000000000 R09: 0000000000000000 [ 382.533917][T12418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 382.533978][T12418] R13: 00007f574a5b6038 R14: 00007f574a5b5fa0 R15: 00007fff8195bc68 [ 382.534016][T12418] [ 382.922805][T12426] tun0: tun_chr_ioctl cmd 2147767507 [ 383.198404][T12440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2124'. [ 383.223181][T12439] delete_channel: no stack [ 383.380793][T12448] netlink: 'syz.2.2128': attribute type 16 has an invalid length. [ 383.395598][T12448] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2128'. [ 383.485550][T12453] FAULT_INJECTION: forcing a failure. [ 383.485550][T12453] name failslab, interval 1, probability 0, space 0, times 0 [ 383.518455][T12453] CPU: 1 UID: 0 PID: 12453 Comm: syz.0.2129 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 383.518484][T12453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 383.518494][T12453] Call Trace: [ 383.518502][T12453] [ 383.518511][T12453] dump_stack_lvl+0x189/0x250 [ 383.518537][T12453] ? __pfx____ratelimit+0x10/0x10 [ 383.518561][T12453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.518583][T12453] ? __pfx__printk+0x10/0x10 [ 383.518626][T12453] should_fail_ex+0x414/0x560 [ 383.518656][T12453] should_failslab+0xa8/0x100 [ 383.518684][T12453] kmem_cache_alloc_noprof+0x73/0x3c0 [ 383.518706][T12453] ? skb_clone+0x212/0x3a0 [ 383.518732][T12453] skb_clone+0x212/0x3a0 [ 383.518754][T12453] __netlink_deliver_tap+0x404/0x850 [ 383.518792][T12453] ? netlink_deliver_tap+0x2e/0x1b0 [ 383.518816][T12453] netlink_deliver_tap+0x19c/0x1b0 [ 383.518840][T12453] netlink_unicast+0x7fa/0x9e0 [ 383.518883][T12453] ? __pfx_netlink_unicast+0x10/0x10 [ 383.518909][T12453] ? netlink_sendmsg+0x642/0xb30 [ 383.518930][T12453] ? skb_put+0x11b/0x210 [ 383.518961][T12453] netlink_sendmsg+0x805/0xb30 [ 383.518999][T12453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.519028][T12453] ? aa_sock_msg_perm+0xf1/0x1d0 [ 383.519060][T12453] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 383.519078][T12453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.519101][T12453] __sock_sendmsg+0x21c/0x270 [ 383.519127][T12453] ____sys_sendmsg+0x505/0x830 [ 383.519155][T12453] ? __pfx_____sys_sendmsg+0x10/0x10 [ 383.519188][T12453] ? import_iovec+0x74/0xa0 [ 383.519214][T12453] ___sys_sendmsg+0x21f/0x2a0 [ 383.519237][T12453] ? __pfx____sys_sendmsg+0x10/0x10 [ 383.519307][T12453] ? __fget_files+0x2a/0x420 [ 383.519323][T12453] ? __fget_files+0x3a0/0x420 [ 383.519354][T12453] __x64_sys_sendmsg+0x19b/0x260 [ 383.519378][T12453] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 383.519411][T12453] ? __pfx_ksys_write+0x10/0x10 [ 383.519431][T12453] ? rcu_is_watching+0x15/0xb0 [ 383.519457][T12453] ? do_syscall_64+0xbe/0x3b0 [ 383.519486][T12453] do_syscall_64+0xfa/0x3b0 [ 383.519508][T12453] ? lockdep_hardirqs_on+0x9c/0x150 [ 383.519531][T12453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.519549][T12453] ? clear_bhb_loop+0x60/0xb0 [ 383.519573][T12453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.519589][T12453] RIP: 0033:0x7f2c91f8ebe9 [ 383.519605][T12453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.519620][T12453] RSP: 002b:00007f2c901f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.519640][T12453] RAX: ffffffffffffffda RBX: 00007f2c921b5fa0 RCX: 00007f2c91f8ebe9 [ 383.519653][T12453] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 383.519665][T12453] RBP: 00007f2c901f6090 R08: 0000000000000000 R09: 0000000000000000 [ 383.519674][T12453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.519684][T12453] R13: 00007f2c921b6038 R14: 00007f2c921b5fa0 R15: 00007ffd76694008 [ 383.519719][T12453] [ 383.905286][T12460] netlink: 272 bytes leftover after parsing attributes in process `syz.0.2132'. [ 383.999363][T12467] FAULT_INJECTION: forcing a failure. [ 383.999363][T12467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.012949][T12467] CPU: 1 UID: 0 PID: 12467 Comm: syz.3.2135 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 384.012976][T12467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 384.012986][T12467] Call Trace: [ 384.012994][T12467] [ 384.013002][T12467] dump_stack_lvl+0x189/0x250 [ 384.013026][T12467] ? __pfx____ratelimit+0x10/0x10 [ 384.013048][T12467] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.013068][T12467] ? __pfx__printk+0x10/0x10 [ 384.013091][T12467] ? __might_fault+0xb0/0x130 [ 384.013124][T12467] should_fail_ex+0x414/0x560 [ 384.013152][T12467] _copy_from_user+0x2d/0xb0 [ 384.013172][T12467] bpf_prog_test_run_xdp+0xd05/0x1000 [ 384.013212][T12467] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 384.013239][T12467] ? __fget_files+0x2a/0x420 [ 384.013258][T12467] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 384.013277][T12467] bpf_prog_test_run+0x2c7/0x340 [ 384.013300][T12467] __sys_bpf+0x581/0x870 [ 384.013319][T12467] ? __pfx___sys_bpf+0x10/0x10 [ 384.013345][T12467] ? ksys_write+0x22a/0x250 [ 384.013365][T12467] ? __pfx_ksys_write+0x10/0x10 [ 384.013380][T12467] ? rcu_is_watching+0x15/0xb0 [ 384.013399][T12467] __x64_sys_bpf+0x7c/0x90 [ 384.013416][T12467] do_syscall_64+0xfa/0x3b0 [ 384.013434][T12467] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.013450][T12467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.013464][T12467] ? clear_bhb_loop+0x60/0xb0 [ 384.013480][T12467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.013492][T12467] RIP: 0033:0x7f3fe178ebe9 [ 384.013506][T12467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.013518][T12467] RSP: 002b:00007f3fe2646038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 384.013534][T12467] RAX: ffffffffffffffda RBX: 00007f3fe19b5fa0 RCX: 00007f3fe178ebe9 [ 384.013544][T12467] RDX: 0000000000000050 RSI: 0000200000000c40 RDI: 000000000000000a [ 384.013553][T12467] RBP: 00007f3fe2646090 R08: 0000000000000000 R09: 0000000000000000 [ 384.013562][T12467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 384.013570][T12467] R13: 00007f3fe19b6038 R14: 00007f3fe19b5fa0 R15: 00007ffd876362c8 [ 384.013592][T12467] [ 384.420166][T12471] delete_channel: no stack [ 384.533217][T12482] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 384.586844][T12488] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 384.769766][T12492] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2147'. [ 384.789486][T12492] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2147'. [ 384.918162][T12492] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2147'. [ 385.021322][T12499] netlink: 'syz.0.2145': attribute type 2 has an invalid length. [ 385.063472][T12499] netlink: 112660 bytes leftover after parsing attributes in process `syz.0.2145'. [ 385.120049][T12499] nbd: must specify at least one socket [ 385.213811][T12505] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2149'. [ 385.225766][T12505] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2149'. [ 385.263905][T12505] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2149'. [ 385.949513][T12515] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2152'. [ 386.038999][T12521] FAULT_INJECTION: forcing a failure. [ 386.038999][T12521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.056419][T12521] CPU: 1 UID: 0 PID: 12521 Comm: syz.1.2155 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 386.056447][T12521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 386.056457][T12521] Call Trace: [ 386.056465][T12521] [ 386.056473][T12521] dump_stack_lvl+0x189/0x250 [ 386.056499][T12521] ? __pfx____ratelimit+0x10/0x10 [ 386.056522][T12521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 386.056543][T12521] ? __pfx__printk+0x10/0x10 [ 386.056566][T12521] ? __might_fault+0xb0/0x130 [ 386.056598][T12521] should_fail_ex+0x414/0x560 [ 386.056624][T12521] _copy_from_user+0x2d/0xb0 [ 386.056644][T12521] ___sys_sendmsg+0x158/0x2a0 [ 386.056665][T12521] ? __pfx____sys_sendmsg+0x10/0x10 [ 386.056727][T12521] ? __fget_files+0x2a/0x420 [ 386.056742][T12521] ? __fget_files+0x3a0/0x420 [ 386.056768][T12521] __x64_sys_sendmsg+0x19b/0x260 [ 386.056790][T12521] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 386.056818][T12521] ? __pfx_ksys_write+0x10/0x10 [ 386.056838][T12521] ? rcu_is_watching+0x15/0xb0 [ 386.056861][T12521] ? do_syscall_64+0xbe/0x3b0 [ 386.056888][T12521] do_syscall_64+0xfa/0x3b0 [ 386.056915][T12521] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.056937][T12521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.056955][T12521] ? clear_bhb_loop+0x60/0xb0 [ 386.056976][T12521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.056994][T12521] RIP: 0033:0x7f574a38ebe9 [ 386.057011][T12521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.057026][T12521] RSP: 002b:00007f574b2ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.057046][T12521] RAX: ffffffffffffffda RBX: 00007f574a5b5fa0 RCX: 00007f574a38ebe9 [ 386.057059][T12521] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 386.057070][T12521] RBP: 00007f574b2ad090 R08: 0000000000000000 R09: 0000000000000000 [ 386.057082][T12521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.057093][T12521] R13: 00007f574a5b6038 R14: 00007f574a5b5fa0 R15: 00007fff8195bc68 [ 386.057122][T12521] [ 386.284337][T12516] delete_channel: no stack [ 386.432431][T12527] netlink: 182 bytes leftover after parsing attributes in process `syz.2.2156'. [ 386.508514][T12541] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2160'. [ 387.165291][T12549] wg0 speed is unknown, defaulting to 1000 [ 387.911857][T12563] delete_channel: no stack [ 388.168726][T12575] wg0 speed is unknown, defaulting to 1000 [ 388.203628][T12582] wg2: entered promiscuous mode [ 388.219779][T12582] wg2: entered allmulticast mode [ 388.384746][T12587] netlink: 'syz.2.2175': attribute type 1 has an invalid length. [ 388.439279][T12587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.567910][T12594] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.703585][T12594] bridge_slave_0 (unregistering): left allmulticast mode [ 388.742440][T12594] bridge_slave_0 (unregistering): left promiscuous mode [ 388.759446][T12594] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.963354][T12609] lo: entered allmulticast mode [ 390.069926][T12609] lo: entered promiscuous mode [ 390.074873][T12609] lo: left allmulticast mode [ 390.527442][T12626] FAULT_INJECTION: forcing a failure. [ 390.527442][T12626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.579165][T12626] CPU: 1 UID: 0 PID: 12626 Comm: syz.0.2188 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 390.579192][T12626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 390.579203][T12626] Call Trace: [ 390.579211][T12626] [ 390.579219][T12626] dump_stack_lvl+0x189/0x250 [ 390.579245][T12626] ? __pfx____ratelimit+0x10/0x10 [ 390.579268][T12626] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.579289][T12626] ? __pfx__printk+0x10/0x10 [ 390.579317][T12626] ? __might_fault+0xb0/0x130 [ 390.579348][T12626] should_fail_ex+0x414/0x560 [ 390.579378][T12626] _copy_to_user+0x31/0xb0 [ 390.579401][T12626] simple_read_from_buffer+0xe1/0x170 [ 390.579434][T12626] proc_fail_nth_read+0x1b3/0x220 [ 390.579457][T12626] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 390.579481][T12626] ? rw_verify_area+0x2a6/0x4d0 [ 390.579502][T12626] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 390.579525][T12626] vfs_read+0x200/0xa30 [ 390.579546][T12626] ? fdget_pos+0x247/0x320 [ 390.579568][T12626] ? __pfx___mutex_lock+0x10/0x10 [ 390.579593][T12626] ? __pfx_vfs_read+0x10/0x10 [ 390.579625][T12626] ? __fget_files+0x2a/0x420 [ 390.579648][T12626] ? __fget_files+0x3a0/0x420 [ 390.579662][T12626] ? __fget_files+0x2a/0x420 [ 390.579691][T12626] ksys_read+0x145/0x250 [ 390.579717][T12626] ? __pfx_ksys_read+0x10/0x10 [ 390.579736][T12626] ? rcu_is_watching+0x15/0xb0 [ 390.579762][T12626] ? do_syscall_64+0xbe/0x3b0 [ 390.579792][T12626] do_syscall_64+0xfa/0x3b0 [ 390.579813][T12626] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.579835][T12626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.579853][T12626] ? clear_bhb_loop+0x60/0xb0 [ 390.579876][T12626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.579893][T12626] RIP: 0033:0x7f2c91f8d5fc [ 390.579910][T12626] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 390.579926][T12626] RSP: 002b:00007f2c901f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 390.579945][T12626] RAX: ffffffffffffffda RBX: 00007f2c921b5fa0 RCX: 00007f2c91f8d5fc [ 390.579958][T12626] RDX: 000000000000000f RSI: 00007f2c901f60a0 RDI: 0000000000000004 [ 390.579970][T12626] RBP: 00007f2c901f6090 R08: 0000000000000000 R09: 0000000000000000 [ 390.579980][T12626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.579990][T12626] R13: 00007f2c921b6038 R14: 00007f2c921b5fa0 R15: 00007ffd76694008 [ 390.580025][T12626] [ 391.318730][T12640] __nla_validate_parse: 3 callbacks suppressed [ 391.318766][T12640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2193'. [ 391.838116][T12645] netlink: 'syz.1.2196': attribute type 1 has an invalid length. [ 391.847737][T12645] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.2196'. [ 391.889927][T12646] FAULT_INJECTION: forcing a failure. [ 391.889927][T12646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.981587][T12646] CPU: 0 UID: 0 PID: 12646 Comm: syz.4.2195 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 391.981616][T12646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 391.981626][T12646] Call Trace: [ 391.981634][T12646] [ 391.981642][T12646] dump_stack_lvl+0x189/0x250 [ 391.981667][T12646] ? __pfx____ratelimit+0x10/0x10 [ 391.981692][T12646] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.981713][T12646] ? __pfx__printk+0x10/0x10 [ 391.981738][T12646] ? __might_fault+0xb0/0x130 [ 391.981764][T12646] ? __might_fault+0xb0/0x130 [ 391.981794][T12646] should_fail_ex+0x414/0x560 [ 391.981824][T12646] _copy_from_user+0x2d/0xb0 [ 391.981846][T12646] ___sys_sendmsg+0x158/0x2a0 [ 391.981869][T12646] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.981915][T12646] ? __fget_files+0x2a/0x420 [ 391.981948][T12646] ? __fget_files+0x2a/0x420 [ 391.981963][T12646] ? __fget_files+0x3a0/0x420 [ 391.981994][T12646] __x64_sys_sendmsg+0x19b/0x260 [ 391.982016][T12646] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 391.982067][T12646] do_syscall_64+0xfa/0x3b0 [ 391.982093][T12646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.982109][T12646] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 391.982127][T12646] ? clear_bhb_loop+0x60/0xb0 [ 391.982150][T12646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.982167][T12646] RIP: 0033:0x7f37f298ebe9 [ 391.982184][T12646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.982199][T12646] RSP: 002b:00007f37f3768038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.982218][T12646] RAX: ffffffffffffffda RBX: 00007f37f2bb5fa0 RCX: 00007f37f298ebe9 [ 391.982232][T12646] RDX: 0000000004040000 RSI: 0000200000000240 RDI: 0000000000000006 [ 391.982243][T12646] RBP: 00007f37f3768090 R08: 0000000000000000 R09: 0000000000000000 [ 391.982254][T12646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.982266][T12646] R13: 00007f37f2bb6038 R14: 00007f37f2bb5fa0 R15: 00007ffd9bf9f148 [ 391.982299][T12646] [ 392.298705][T12659] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2201'. [ 392.335461][T12656] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2199'. [ 393.983061][T12689] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.2211'. [ 394.701281][T12704] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2215'. [ 394.906703][T12716] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2220'. [ 395.091570][T12726] FAULT_INJECTION: forcing a failure. [ 395.091570][T12726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.149175][T12726] CPU: 1 UID: 0 PID: 12726 Comm: syz.1.2224 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 395.149202][T12726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 395.149212][T12726] Call Trace: [ 395.149220][T12726] [ 395.149230][T12726] dump_stack_lvl+0x189/0x250 [ 395.149258][T12726] ? __pfx____ratelimit+0x10/0x10 [ 395.149284][T12726] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.149305][T12726] ? __pfx__printk+0x10/0x10 [ 395.149331][T12726] ? __might_fault+0xb0/0x130 [ 395.149363][T12726] ? __might_fault+0xb0/0x130 [ 395.149404][T12726] should_fail_ex+0x414/0x560 [ 395.149442][T12726] _copy_from_user+0x2d/0xb0 [ 395.149466][T12726] ___sys_sendmsg+0x158/0x2a0 [ 395.149496][T12726] ? __pfx____sys_sendmsg+0x10/0x10 [ 395.149574][T12726] ? __fget_files+0x2a/0x420 [ 395.149626][T12726] ? __fget_files+0x2a/0x420 [ 395.149642][T12726] ? __fget_files+0x3a0/0x420 [ 395.149689][T12726] __x64_sys_sendmsg+0x19b/0x260 [ 395.149718][T12726] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 395.149767][T12726] ? __pfx_ksys_write+0x10/0x10 [ 395.149786][T12726] ? rcu_is_watching+0x15/0xb0 [ 395.149823][T12726] ? do_syscall_64+0xbe/0x3b0 [ 395.149859][T12726] do_syscall_64+0xfa/0x3b0 [ 395.149882][T12726] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.149907][T12726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.149925][T12726] ? clear_bhb_loop+0x60/0xb0 [ 395.149954][T12726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.149972][T12726] RIP: 0033:0x7f574a38ebe9 [ 395.149992][T12726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.150008][T12726] RSP: 002b:00007f574b2ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.150028][T12726] RAX: ffffffffffffffda RBX: 00007f574a5b5fa0 RCX: 00007f574a38ebe9 [ 395.150041][T12726] RDX: 0000000000040000 RSI: 0000200000000140 RDI: 0000000000000008 [ 395.150053][T12726] RBP: 00007f574b2ad090 R08: 0000000000000000 R09: 0000000000000000 [ 395.150064][T12726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.150073][T12726] R13: 00007f574a5b6038 R14: 00007f574a5b5fa0 R15: 00007fff8195bc68 [ 395.150138][T12726] [ 395.425393][T12733] FAULT_INJECTION: forcing a failure. [ 395.425393][T12733] name failslab, interval 1, probability 0, space 0, times 0 [ 395.440135][T12733] CPU: 0 UID: 0 PID: 12733 Comm: syz.0.2227 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 395.440164][T12733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 395.440174][T12733] Call Trace: [ 395.440182][T12733] [ 395.440190][T12733] dump_stack_lvl+0x189/0x250 [ 395.440218][T12733] ? __pfx____ratelimit+0x10/0x10 [ 395.440241][T12733] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.440263][T12733] ? __pfx__printk+0x10/0x10 [ 395.440294][T12733] ? __pfx___might_resched+0x10/0x10 [ 395.440322][T12733] should_fail_ex+0x414/0x560 [ 395.440351][T12733] should_failslab+0xa8/0x100 [ 395.440379][T12733] __kmalloc_noprof+0xcb/0x4f0 [ 395.440401][T12733] ? kfree+0x4d/0x440 [ 395.440418][T12733] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 395.440444][T12733] tomoyo_realpath_from_path+0xe3/0x5d0 [ 395.440465][T12733] ? tomoyo_domain+0xd9/0x130 [ 395.440501][T12733] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 395.440525][T12733] tomoyo_path_number_perm+0x1e8/0x5a0 [ 395.440552][T12733] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 395.440577][T12733] ? ksys_write+0x1cb/0x250 [ 395.440648][T12733] ? __fget_files+0x2a/0x420 [ 395.440668][T12733] ? __fget_files+0x2a/0x420 [ 395.440683][T12733] ? __fget_files+0x3a0/0x420 [ 395.440697][T12733] ? __fget_files+0x2a/0x420 [ 395.440719][T12733] security_file_ioctl+0xcb/0x2d0 [ 395.440745][T12733] __se_sys_ioctl+0x47/0x170 [ 395.440772][T12733] do_syscall_64+0xfa/0x3b0 [ 395.440793][T12733] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.440816][T12733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.440833][T12733] ? clear_bhb_loop+0x60/0xb0 [ 395.440855][T12733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.440872][T12733] RIP: 0033:0x7f2c91f8ebe9 [ 395.440889][T12733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.440904][T12733] RSP: 002b:00007f2c901f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 395.440923][T12733] RAX: ffffffffffffffda RBX: 00007f2c921b5fa0 RCX: 00007f2c91f8ebe9 [ 395.440937][T12733] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000009 [ 395.440948][T12733] RBP: 00007f2c901f6090 R08: 0000000000000000 R09: 0000000000000000 [ 395.440958][T12733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.440968][T12733] R13: 00007f2c921b6038 R14: 00007f2c921b5fa0 R15: 00007ffd76694008 [ 395.441000][T12733] [ 395.441007][T12733] ERROR: Out of memory at tomoyo_realpath_from_path. [ 395.978758][T12751] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.2232'. [ 396.021587][T12751] FAULT_INJECTION: forcing a failure. [ 396.021587][T12751] name failslab, interval 1, probability 0, space 0, times 0 [ 396.036568][T12751] CPU: 1 UID: 0 PID: 12751 Comm: syz.1.2232 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 396.036597][T12751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 396.036612][T12751] Call Trace: [ 396.036635][T12751] [ 396.036653][T12751] dump_stack_lvl+0x189/0x250 [ 396.036706][T12751] ? __pfx____ratelimit+0x10/0x10 [ 396.036761][T12751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 396.036812][T12751] ? __pfx__printk+0x10/0x10 [ 396.037090][T12751] should_fail_ex+0x414/0x560 [ 396.037218][T12751] should_failslab+0xa8/0x100 [ 396.037292][T12751] kmem_cache_alloc_noprof+0x73/0x3c0 [ 396.037329][T12751] ? skb_clone+0x212/0x3a0 [ 396.037437][T12751] skb_clone+0x212/0x3a0 [ 396.037539][T12751] __netlink_deliver_tap+0x404/0x850 [ 396.037760][T12751] ? netlink_deliver_tap+0x2e/0x1b0 [ 396.037838][T12751] netlink_deliver_tap+0x19c/0x1b0 [ 396.037912][T12751] netlink_unicast+0x7fa/0x9e0 [ 396.038101][T12751] ? __pfx_netlink_unicast+0x10/0x10 [ 396.038185][T12751] ? netlink_sendmsg+0x642/0xb30 [ 396.038206][T12751] ? skb_put+0x11b/0x210 [ 396.038318][T12751] netlink_sendmsg+0x805/0xb30 [ 396.038491][T12751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.038594][T12751] ? aa_sock_msg_perm+0xf1/0x1d0 [ 396.038673][T12751] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 396.038704][T12751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.038770][T12751] __sock_sendmsg+0x21c/0x270 [ 396.038872][T12751] ____sys_sendmsg+0x505/0x830 [ 396.039008][T12751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 396.039224][T12751] ? import_iovec+0x74/0xa0 [ 396.039327][T12751] ___sys_sendmsg+0x21f/0x2a0 [ 396.039410][T12751] ? __pfx____sys_sendmsg+0x10/0x10 [ 396.039747][T12751] ? __fget_files+0x2a/0x420 [ 396.039968][T12751] ? __fget_files+0x2a/0x420 [ 396.039994][T12751] ? __fget_files+0x3a0/0x420 [ 396.040197][T12751] __x64_sys_sendmsg+0x19b/0x260 [ 396.040290][T12751] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 396.040477][T12751] ? __pfx_ksys_write+0x10/0x10 [ 396.040498][T12751] ? rcu_is_watching+0x15/0xb0 [ 396.040614][T12751] ? do_syscall_64+0xbe/0x3b0 [ 396.040717][T12751] do_syscall_64+0xfa/0x3b0 [ 396.040745][T12751] ? lockdep_hardirqs_on+0x9c/0x150 [ 396.040789][T12751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.040818][T12751] ? clear_bhb_loop+0x60/0xb0 [ 396.040903][T12751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.040927][T12751] RIP: 0033:0x7f574a38ebe9 [ 396.040967][T12751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.040983][T12751] RSP: 002b:00007f574b2ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.041001][T12751] RAX: ffffffffffffffda RBX: 00007f574a5b5fa0 RCX: 00007f574a38ebe9 [ 396.041014][T12751] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000006 [ 396.041025][T12751] RBP: 00007f574b2ad090 R08: 0000000000000000 R09: 0000000000000000 [ 396.041036][T12751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.041046][T12751] R13: 00007f574a5b6038 R14: 00007f574a5b5fa0 R15: 00007fff8195bc68 [ 396.041300][T12751] [ 396.732625][T12762] wg0 speed is unknown, defaulting to 1000 [ 396.759893][T12764] netlink: 'syz.0.2233': attribute type 39 has an invalid length. [ 396.768763][T12768] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2238'. [ 397.547813][T12764] hsr_slave_0 (unregistering): left promiscuous mode [ 398.010776][T12795] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 398.199160][T12795] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2244'. [ 398.593173][T12820] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2252'. [ 398.745735][T12822] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2254'. [ 398.760687][T12822] netlink: 71 bytes leftover after parsing attributes in process `syz.0.2254'. [ 399.450338][T12839] delete_channel: no stack [ 399.495841][T12841] netlink: 'syz.1.2260': attribute type 21 has an invalid length. [ 399.589848][T12841] netlink: 'syz.1.2260': attribute type 6 has an invalid length. [ 399.635273][T12841] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2260'. [ 400.006503][T12853] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2264'. [ 400.188741][T12862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2267'. [ 400.399482][T12876] FAULT_INJECTION: forcing a failure. [ 400.399482][T12876] name failslab, interval 1, probability 0, space 0, times 0 [ 400.429191][T12876] CPU: 1 UID: 0 PID: 12876 Comm: syz.1.2273 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 400.429220][T12876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 400.429231][T12876] Call Trace: [ 400.429239][T12876] [ 400.429247][T12876] dump_stack_lvl+0x189/0x250 [ 400.429271][T12876] ? __pfx____ratelimit+0x10/0x10 [ 400.429293][T12876] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.429312][T12876] ? __pfx__printk+0x10/0x10 [ 400.429335][T12876] ? perf_trace_lock+0xec/0x3b0 [ 400.429368][T12876] should_fail_ex+0x414/0x560 [ 400.429398][T12876] should_failslab+0xa8/0x100 [ 400.429426][T12876] kmem_cache_alloc_noprof+0x73/0x3c0 [ 400.429449][T12876] ? skb_clone+0x212/0x3a0 [ 400.429474][T12876] skb_clone+0x212/0x3a0 [ 400.429499][T12876] __netlink_deliver_tap+0x404/0x850 [ 400.429541][T12876] ? netlink_deliver_tap+0x2e/0x1b0 [ 400.429567][T12876] netlink_deliver_tap+0x19c/0x1b0 [ 400.429593][T12876] netlink_unicast+0x7fa/0x9e0 [ 400.429626][T12876] ? __pfx_netlink_unicast+0x10/0x10 [ 400.429650][T12876] ? netlink_sendmsg+0x642/0xb30 [ 400.429670][T12876] ? skb_put+0x11b/0x210 [ 400.429700][T12876] netlink_sendmsg+0x805/0xb30 [ 400.429736][T12876] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.429763][T12876] ? aa_sock_msg_perm+0xf1/0x1d0 [ 400.429801][T12876] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 400.429820][T12876] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.429846][T12876] __sock_sendmsg+0x21c/0x270 [ 400.429873][T12876] ____sys_sendmsg+0x505/0x830 [ 400.429901][T12876] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.429932][T12876] ? import_iovec+0x74/0xa0 [ 400.429958][T12876] ___sys_sendmsg+0x21f/0x2a0 [ 400.429981][T12876] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.430028][T12876] ? __fget_files+0x2a/0x420 [ 400.430061][T12876] ? __fget_files+0x2a/0x420 [ 400.430076][T12876] ? __fget_files+0x3a0/0x420 [ 400.430107][T12876] __x64_sys_sendmsg+0x19b/0x260 [ 400.430131][T12876] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 400.430163][T12876] ? __pfx_ksys_write+0x10/0x10 [ 400.430183][T12876] ? rcu_is_watching+0x15/0xb0 [ 400.430208][T12876] ? do_syscall_64+0xbe/0x3b0 [ 400.430237][T12876] do_syscall_64+0xfa/0x3b0 [ 400.430258][T12876] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.430280][T12876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.430298][T12876] ? clear_bhb_loop+0x60/0xb0 [ 400.430326][T12876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.430344][T12876] RIP: 0033:0x7f574a38ebe9 [ 400.430361][T12876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.430376][T12876] RSP: 002b:00007f574b2ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.430395][T12876] RAX: ffffffffffffffda RBX: 00007f574a5b5fa0 RCX: 00007f574a38ebe9 [ 400.430409][T12876] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 400.430421][T12876] RBP: 00007f574b2ad090 R08: 0000000000000000 R09: 0000000000000000 [ 400.430432][T12876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.430443][T12876] R13: 00007f574a5b6038 R14: 00007f574a5b5fa0 R15: 00007fff8195bc68 [ 400.430478][T12876] [ 400.980762][T12873] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2272'. [ 401.324972][T12887] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2276'. [ 402.045946][T12900] netlink: 'syz.0.2281': attribute type 3 has an invalid length. [ 402.110909][T12900] __nla_validate_parse: 1 callbacks suppressed [ 402.110925][T12900] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2281'. [ 402.393567][T12904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2282'. [ 402.406820][T12904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2282'. [ 402.422542][T12904] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2282'. [ 402.601990][T12915] FAULT_INJECTION: forcing a failure. [ 402.601990][T12915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.615307][T12915] CPU: 1 UID: 0 PID: 12915 Comm: syz.4.2288 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 402.615332][T12915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 402.615343][T12915] Call Trace: [ 402.615352][T12915] [ 402.615359][T12915] dump_stack_lvl+0x189/0x250 [ 402.615385][T12915] ? __pfx____ratelimit+0x10/0x10 [ 402.615409][T12915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.615429][T12915] ? __pfx__printk+0x10/0x10 [ 402.615453][T12915] ? __might_fault+0xb0/0x130 [ 402.615488][T12915] should_fail_ex+0x414/0x560 [ 402.615517][T12915] _copy_from_iter+0x1db/0x16f0 [ 402.615540][T12915] ? rcu_is_watching+0x15/0xb0 [ 402.615566][T12915] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 402.615593][T12915] ? __pfx__copy_from_iter+0x10/0x10 [ 402.615612][T12915] ? __build_skb_around+0x257/0x3e0 [ 402.615641][T12915] ? netlink_sendmsg+0x642/0xb30 [ 402.615664][T12915] ? skb_put+0x11b/0x210 [ 402.615692][T12915] netlink_sendmsg+0x6b2/0xb30 [ 402.615726][T12915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.615753][T12915] ? aa_sock_msg_perm+0xf1/0x1d0 [ 402.615782][T12915] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 402.615801][T12915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.615825][T12915] __sock_sendmsg+0x21c/0x270 [ 402.615850][T12915] ____sys_sendmsg+0x505/0x830 [ 402.615874][T12915] ? __pfx_____sys_sendmsg+0x10/0x10 [ 402.615903][T12915] ? import_iovec+0x74/0xa0 [ 402.615926][T12915] ___sys_sendmsg+0x21f/0x2a0 [ 402.615947][T12915] ? __pfx____sys_sendmsg+0x10/0x10 [ 402.616001][T12915] ? __fget_files+0x2a/0x420 [ 402.616017][T12915] ? __fget_files+0x3a0/0x420 [ 402.616043][T12915] __x64_sys_sendmsg+0x19b/0x260 [ 402.616065][T12915] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 402.616081][T12915] ? perf_trace_preemptirq_template+0xa3/0x340 [ 402.616114][T12915] ? __pfx_ksys_write+0x10/0x10 [ 402.616134][T12915] ? rcu_is_watching+0x15/0xb0 [ 402.616157][T12915] ? do_syscall_64+0xbe/0x3b0 [ 402.616185][T12915] do_syscall_64+0xfa/0x3b0 [ 402.616207][T12915] ? lockdep_hardirqs_on+0x9c/0x150 [ 402.616232][T12915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.616250][T12915] ? clear_bhb_loop+0x60/0xb0 [ 402.616271][T12915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.616288][T12915] RIP: 0033:0x7f37f298ebe9 [ 402.616305][T12915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.616320][T12915] RSP: 002b:00007f37f3768038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.616339][T12915] RAX: ffffffffffffffda RBX: 00007f37f2bb5fa0 RCX: 00007f37f298ebe9 [ 402.616352][T12915] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 402.616364][T12915] RBP: 00007f37f3768090 R08: 0000000000000000 R09: 0000000000000000 [ 402.616375][T12915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.616385][T12915] R13: 00007f37f2bb6038 R14: 00007f37f2bb5fa0 R15: 00007ffd9bf9f148 [ 402.616432][T12915] [ 403.045549][T12919] netlink: 'syz.2.2289': attribute type 13 has an invalid length. [ 403.096012][T12919] netlink: 'syz.2.2289': attribute type 58 has an invalid length. [ 403.104959][T12919] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2289'. [ 403.117476][T12919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2289'. [ 403.152153][T12924] delete_channel: no stack [ 403.281360][T12929] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2292'. [ 403.315086][T12922] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2290'. [ 403.962951][T12955] netlink: 'syz.2.2300': attribute type 21 has an invalid length. [ 404.019164][T12955] IPv6: NLM_F_CREATE should be specified when creating new route [ 404.027955][T12955] IPv6: Can't replace route, no match found [ 404.399950][T12976] netlink: 'syz.2.2303': attribute type 10 has an invalid length. [ 404.407809][T12976] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2303'. [ 404.559849][T12987] netlink: 'syz.0.2305': attribute type 7 has an invalid length. [ 404.579226][T12987] netlink: 781 bytes leftover after parsing attributes in process `syz.0.2305'. [ 404.588300][T12987] netlink: 'syz.0.2305': attribute type 7 has an invalid length. [ 404.631176][T12986] netlink: 'syz.1.2307': attribute type 39 has an invalid length. [ 405.073821][T12971] delete_channel: no stack [ 405.226688][T12998] FAULT_INJECTION: forcing a failure. [ 405.226688][T12998] name failslab, interval 1, probability 0, space 0, times 0 [ 405.266445][T12998] CPU: 0 UID: 0 PID: 12998 Comm: syz.4.2310 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 405.266475][T12998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 405.266486][T12998] Call Trace: [ 405.266493][T12998] [ 405.266501][T12998] dump_stack_lvl+0x189/0x250 [ 405.266528][T12998] ? __pfx____ratelimit+0x10/0x10 [ 405.266552][T12998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.266573][T12998] ? __pfx__printk+0x10/0x10 [ 405.266593][T12998] ? perf_trace_lock+0xec/0x3b0 [ 405.266626][T12998] should_fail_ex+0x414/0x560 [ 405.266662][T12998] should_failslab+0xa8/0x100 [ 405.266688][T12998] kmem_cache_alloc_noprof+0x73/0x3c0 [ 405.266711][T12998] ? skb_clone+0x212/0x3a0 [ 405.266735][T12998] skb_clone+0x212/0x3a0 [ 405.266758][T12998] __netlink_deliver_tap+0x404/0x850 [ 405.266796][T12998] ? netlink_deliver_tap+0x2e/0x1b0 [ 405.266821][T12998] netlink_deliver_tap+0x19c/0x1b0 [ 405.266846][T12998] netlink_unicast+0x7fa/0x9e0 [ 405.266878][T12998] ? __pfx_netlink_unicast+0x10/0x10 [ 405.266902][T12998] ? netlink_sendmsg+0x642/0xb30 [ 405.266924][T12998] ? skb_put+0x11b/0x210 [ 405.266953][T12998] netlink_sendmsg+0x805/0xb30 [ 405.266987][T12998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.267015][T12998] ? aa_sock_msg_perm+0xf1/0x1d0 [ 405.267042][T12998] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 405.267061][T12998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.267086][T12998] __sock_sendmsg+0x21c/0x270 [ 405.267111][T12998] ____sys_sendmsg+0x505/0x830 [ 405.267135][T12998] ? __pfx_____sys_sendmsg+0x10/0x10 [ 405.267164][T12998] ? import_iovec+0x74/0xa0 [ 405.267188][T12998] ___sys_sendmsg+0x21f/0x2a0 [ 405.267209][T12998] ? __pfx____sys_sendmsg+0x10/0x10 [ 405.267250][T12998] ? __fget_files+0x2a/0x420 [ 405.267278][T12998] ? __fget_files+0x2a/0x420 [ 405.267293][T12998] ? __fget_files+0x3a0/0x420 [ 405.267320][T12998] __x64_sys_sendmsg+0x19b/0x260 [ 405.267342][T12998] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 405.267371][T12998] ? __pfx_ksys_write+0x10/0x10 [ 405.267391][T12998] ? rcu_is_watching+0x15/0xb0 [ 405.267417][T12998] ? do_syscall_64+0xbe/0x3b0 [ 405.267445][T12998] do_syscall_64+0xfa/0x3b0 [ 405.267466][T12998] ? lockdep_hardirqs_on+0x9c/0x150 [ 405.267488][T12998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.267505][T12998] ? clear_bhb_loop+0x60/0xb0 [ 405.267527][T12998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.267545][T12998] RIP: 0033:0x7f37f298ebe9 [ 405.267562][T12998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.267578][T12998] RSP: 002b:00007f37f3768038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.267598][T12998] RAX: ffffffffffffffda RBX: 00007f37f2bb5fa0 RCX: 00007f37f298ebe9 [ 405.267611][T12998] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 405.267623][T12998] RBP: 00007f37f3768090 R08: 0000000000000000 R09: 0000000000000000 [ 405.267640][T12998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.267651][T12998] R13: 00007f37f2bb6038 R14: 00007f37f2bb5fa0 R15: 00007ffd9bf9f148 [ 405.267681][T12998] [ 407.330279][ T5880] Bluetooth: hci4: Malformed Event: 0x13 [ 407.446255][T13048] IPv6: NLM_F_CREATE should be specified when creating new route [ 407.564636][T13051] __nla_validate_parse: 5 callbacks suppressed [ 407.564654][T13051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2324'. [ 407.965216][T13059] netlink: 11318 bytes leftover after parsing attributes in process `syz.0.2327'. [ 408.563830][T13101] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2345'. [ 411.740116][T13241] wg0 speed is unknown, defaulting to 1000 [ 411.863601][T13252] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.2415'. [ 413.055160][T13256] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2416'. [ 413.122608][T13256] FAULT_INJECTION: forcing a failure. [ 413.122608][T13256] name failslab, interval 1, probability 0, space 0, times 0 [ 413.184807][T13256] CPU: 0 UID: 0 PID: 13256 Comm: syz.3.2416 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 413.184836][T13256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 413.184846][T13256] Call Trace: [ 413.184858][T13256] [ 413.184870][T13256] dump_stack_lvl+0x189/0x250 [ 413.184905][T13256] ? __pfx____ratelimit+0x10/0x10 [ 413.184941][T13256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 413.184973][T13256] ? __pfx__printk+0x10/0x10 [ 413.185025][T13256] ? __pfx___might_resched+0x10/0x10 [ 413.185050][T13256] ? fs_reclaim_acquire+0x7d/0x100 [ 413.185110][T13256] should_fail_ex+0x414/0x560 [ 413.185180][T13256] should_failslab+0xa8/0x100 [ 413.185224][T13256] __kmalloc_cache_noprof+0x70/0x3d0 [ 413.185253][T13256] ? nft_setelem_insert+0x22c/0x3f0 [ 413.185276][T13256] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 413.185328][T13256] nft_setelem_insert+0x22c/0x3f0 [ 413.185397][T13256] nf_tables_newsetelem+0x2585/0x4340 [ 413.185642][T13256] ? __pfx_perf_trace_lock+0x10/0x10 [ 413.185659][T13256] ? migrate_enable+0x29c/0x3c0 [ 413.185685][T13256] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 413.185846][T13256] ? nla_validate_array+0xfc/0x260 [ 413.186034][T13256] ? __pfx___nla_validate_parse+0x10/0x10 [ 413.186116][T13256] ? __pfx_perf_trace_lock+0x10/0x10 [ 413.186196][T13256] ? nfnl_pernet+0x23/0x240 [ 413.186290][T13256] ? __nla_parse+0x40/0x60 [ 413.186351][T13256] nfnetlink_rcv+0x1132/0x2520 [ 413.186559][T13256] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 413.186578][T13256] ? trace_call_bpf+0xb7/0x850 [ 413.186867][T13256] ? __netlink_deliver_tap+0x807/0x850 [ 413.186902][T13256] ? netlink_deliver_tap+0x2e/0x1b0 [ 413.187034][T13256] netlink_unicast+0x82c/0x9e0 [ 413.187117][T13256] ? __pfx_netlink_unicast+0x10/0x10 [ 413.187168][T13256] ? netlink_sendmsg+0x642/0xb30 [ 413.187190][T13256] ? skb_put+0x11b/0x210 [ 413.187248][T13256] netlink_sendmsg+0x805/0xb30 [ 413.187334][T13256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.187388][T13256] ? aa_sock_msg_perm+0xf1/0x1d0 [ 413.187434][T13256] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 413.187458][T13256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.187497][T13256] __sock_sendmsg+0x21c/0x270 [ 413.187555][T13256] ____sys_sendmsg+0x505/0x830 [ 413.187622][T13256] ? __pfx_____sys_sendmsg+0x10/0x10 [ 413.187705][T13256] ? import_iovec+0x74/0xa0 [ 413.187758][T13256] ___sys_sendmsg+0x21f/0x2a0 [ 413.187803][T13256] ? __pfx____sys_sendmsg+0x10/0x10 [ 413.187950][T13256] ? __fget_files+0x2a/0x420 [ 413.188039][T13256] ? __fget_files+0x2a/0x420 [ 413.188058][T13256] ? __fget_files+0x3a0/0x420 [ 413.188142][T13256] __x64_sys_sendmsg+0x19b/0x260 [ 413.188194][T13256] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 413.188276][T13256] ? __pfx_ksys_write+0x10/0x10 [ 413.188298][T13256] ? rcu_is_watching+0x15/0xb0 [ 413.188353][T13256] ? do_syscall_64+0xbe/0x3b0 [ 413.188407][T13256] do_syscall_64+0xfa/0x3b0 [ 413.188431][T13256] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.188461][T13256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.188483][T13256] ? clear_bhb_loop+0x60/0xb0 [ 413.188527][T13256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.188547][T13256] RIP: 0033:0x7f3fe178ebe9 [ 413.188570][T13256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.188586][T13256] RSP: 002b:00007f3fe2646038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.188606][T13256] RAX: ffffffffffffffda RBX: 00007f3fe19b5fa0 RCX: 00007f3fe178ebe9 [ 413.188619][T13256] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 413.188630][T13256] RBP: 00007f3fe2646090 R08: 0000000000000000 R09: 0000000000000000 [ 413.188642][T13256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 413.188652][T13256] R13: 00007f3fe19b6038 R14: 00007f3fe19b5fa0 R15: 00007ffd876362c8 [ 413.188757][T13256] [ 413.951435][T13252] wg0 speed is unknown, defaulting to 1000 [ 414.570819][T13285] FAULT_INJECTION: forcing a failure. [ 414.570819][T13285] name failslab, interval 1, probability 0, space 0, times 0 [ 414.587949][T13285] CPU: 0 UID: 0 PID: 13285 Comm: syz.3.2428 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 414.587977][T13285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 414.587988][T13285] Call Trace: [ 414.587996][T13285] [ 414.588004][T13285] dump_stack_lvl+0x189/0x250 [ 414.588032][T13285] ? __pfx____ratelimit+0x10/0x10 [ 414.588055][T13285] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.588075][T13285] ? __pfx__printk+0x10/0x10 [ 414.588101][T13285] ? __lock_acquire+0xab9/0xd20 [ 414.588135][T13285] should_fail_ex+0x414/0x560 [ 414.588163][T13285] should_failslab+0xa8/0x100 [ 414.588189][T13285] kmem_cache_alloc_noprof+0x73/0x3c0 [ 414.588211][T13285] ? skb_clone+0x212/0x3a0 [ 414.588232][T13285] skb_clone+0x212/0x3a0 [ 414.588253][T13285] __netlink_deliver_tap+0x404/0x850 [ 414.588289][T13285] ? netlink_deliver_tap+0x2e/0x1b0 [ 414.588314][T13285] netlink_deliver_tap+0x19c/0x1b0 [ 414.588339][T13285] netlink_unicast+0x7fa/0x9e0 [ 414.588370][T13285] ? __pfx_netlink_unicast+0x10/0x10 [ 414.588392][T13285] ? netlink_sendmsg+0x642/0xb30 [ 414.588411][T13285] ? skb_put+0x11b/0x210 [ 414.588437][T13285] netlink_sendmsg+0x805/0xb30 [ 414.588468][T13285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.588495][T13285] ? aa_sock_msg_perm+0xf1/0x1d0 [ 414.588523][T13285] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 414.588542][T13285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.588566][T13285] __sock_sendmsg+0x21c/0x270 [ 414.588591][T13285] ____sys_sendmsg+0x505/0x830 [ 414.588615][T13285] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.588643][T13285] ? import_iovec+0x74/0xa0 [ 414.588667][T13285] ___sys_sendmsg+0x21f/0x2a0 [ 414.588688][T13285] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.588746][T13285] ? __fget_files+0x2a/0x420 [ 414.588761][T13285] ? __fget_files+0x3a0/0x420 [ 414.588795][T13285] __x64_sys_sendmsg+0x19b/0x260 [ 414.588816][T13285] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 414.588845][T13285] ? __pfx_ksys_write+0x10/0x10 [ 414.588865][T13285] ? rcu_is_watching+0x15/0xb0 [ 414.588889][T13285] ? do_syscall_64+0xbe/0x3b0 [ 414.588917][T13285] do_syscall_64+0xfa/0x3b0 [ 414.588938][T13285] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.588961][T13285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.588978][T13285] ? clear_bhb_loop+0x60/0xb0 [ 414.589000][T13285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.589017][T13285] RIP: 0033:0x7f3fe178ebe9 [ 414.589033][T13285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.589052][T13285] RSP: 002b:00007f3fe2646038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.589069][T13285] RAX: ffffffffffffffda RBX: 00007f3fe19b5fa0 RCX: 00007f3fe178ebe9 [ 414.589081][T13285] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 414.589091][T13285] RBP: 00007f3fe2646090 R08: 0000000000000000 R09: 0000000000000000 [ 414.589100][T13285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.589109][T13285] R13: 00007f3fe19b6038 R14: 00007f3fe19b5fa0 R15: 00007ffd876362c8 [ 414.589139][T13285] [ 415.087219][T13291] FAULT_INJECTION: forcing a failure. [ 415.087219][T13291] name failslab, interval 1, probability 0, space 0, times 0 [ 415.131518][T13291] CPU: 0 UID: 0 PID: 13291 Comm: syz.4.2431 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 415.131545][T13291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 415.131555][T13291] Call Trace: [ 415.131570][T13291] [ 415.131584][T13291] dump_stack_lvl+0x189/0x250 [ 415.131626][T13291] ? __pfx____ratelimit+0x10/0x10 [ 415.131668][T13291] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.131714][T13291] ? __pfx__printk+0x10/0x10 [ 415.131875][T13291] should_fail_ex+0x414/0x560 [ 415.131967][T13291] should_failslab+0xa8/0x100 [ 415.132023][T13291] kmem_cache_alloc_noprof+0x73/0x3c0 [ 415.132055][T13291] ? skb_clone+0x212/0x3a0 [ 415.132129][T13291] skb_clone+0x212/0x3a0 [ 415.132196][T13291] __netlink_deliver_tap+0x404/0x850 [ 415.132335][T13291] ? netlink_deliver_tap+0x2e/0x1b0 [ 415.132391][T13291] netlink_deliver_tap+0x19c/0x1b0 [ 415.132446][T13291] netlink_unicast+0x7fa/0x9e0 [ 415.132566][T13291] ? __pfx_netlink_unicast+0x10/0x10 [ 415.132628][T13291] ? netlink_sendmsg+0x642/0xb30 [ 415.132649][T13291] ? skb_put+0x11b/0x210 [ 415.132734][T13291] netlink_sendmsg+0x805/0xb30 [ 415.132857][T13291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.132923][T13291] ? aa_sock_msg_perm+0xf1/0x1d0 [ 415.132978][T13291] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 415.133003][T13291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.133052][T13291] __sock_sendmsg+0x21c/0x270 [ 415.133124][T13291] ____sys_sendmsg+0x505/0x830 [ 415.133215][T13291] ? __pfx_____sys_sendmsg+0x10/0x10 [ 415.133332][T13291] ? import_iovec+0x74/0xa0 [ 415.133400][T13291] ___sys_sendmsg+0x21f/0x2a0 [ 415.133454][T13291] ? __pfx____sys_sendmsg+0x10/0x10 [ 415.133661][T13291] ? __fget_files+0x2a/0x420 [ 415.133807][T13291] ? __fget_files+0x2a/0x420 [ 415.133829][T13291] ? __fget_files+0x3a0/0x420 [ 415.133956][T13291] __x64_sys_sendmsg+0x19b/0x260 [ 415.134019][T13291] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 415.134140][T13291] ? __pfx_ksys_write+0x10/0x10 [ 415.134160][T13291] ? rcu_is_watching+0x15/0xb0 [ 415.134238][T13291] ? do_syscall_64+0xbe/0x3b0 [ 415.134309][T13291] do_syscall_64+0xfa/0x3b0 [ 415.134334][T13291] ? lockdep_hardirqs_on+0x9c/0x150 [ 415.134369][T13291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.134393][T13291] ? clear_bhb_loop+0x60/0xb0 [ 415.134451][T13291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.134480][T13291] RIP: 0033:0x7f37f298ebe9 [ 415.134511][T13291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.134526][T13291] RSP: 002b:00007f37f3768038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.134545][T13291] RAX: ffffffffffffffda RBX: 00007f37f2bb5fa0 RCX: 00007f37f298ebe9 [ 415.134557][T13291] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 415.134569][T13291] RBP: 00007f37f3768090 R08: 0000000000000000 R09: 0000000000000000 [ 415.134579][T13291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.134589][T13291] R13: 00007f37f2bb6038 R14: 00007f37f2bb5fa0 R15: 00007ffd9bf9f148 [ 415.134747][T13291] [ 415.520558][T13306] FAULT_INJECTION: forcing a failure. [ 415.520558][T13306] name failslab, interval 1, probability 0, space 0, times 0 [ 415.533789][T13306] CPU: 1 UID: 0 PID: 13306 Comm: syz.1.2437 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 415.533815][T13306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 415.533826][T13306] Call Trace: [ 415.533833][T13306] [ 415.533841][T13306] dump_stack_lvl+0x189/0x250 [ 415.533866][T13306] ? __pfx____ratelimit+0x10/0x10 [ 415.533891][T13306] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.533911][T13306] ? __pfx__printk+0x10/0x10 [ 415.533937][T13306] ? __lock_acquire+0xab9/0xd20 [ 415.533979][T13306] should_fail_ex+0x414/0x560 [ 415.534007][T13306] should_failslab+0xa8/0x100 [ 415.534034][T13306] kmem_cache_alloc_noprof+0x73/0x3c0 [ 415.534057][T13306] ? skb_clone+0x212/0x3a0 [ 415.534081][T13306] skb_clone+0x212/0x3a0 [ 415.534105][T13306] __netlink_deliver_tap+0x404/0x850 [ 415.534142][T13306] ? netlink_deliver_tap+0x2e/0x1b0 [ 415.534168][T13306] netlink_deliver_tap+0x19c/0x1b0 [ 415.534193][T13306] netlink_unicast+0x7fa/0x9e0 [ 415.534226][T13306] ? __pfx_netlink_unicast+0x10/0x10 [ 415.534251][T13306] ? netlink_sendmsg+0x642/0xb30 [ 415.534274][T13306] ? skb_put+0x11b/0x210 [ 415.534304][T13306] netlink_sendmsg+0x805/0xb30 [ 415.534339][T13306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.534367][T13306] ? aa_sock_msg_perm+0xf1/0x1d0 [ 415.534395][T13306] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 415.534414][T13306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.534440][T13306] __sock_sendmsg+0x21c/0x270 [ 415.534465][T13306] ____sys_sendmsg+0x505/0x830 [ 415.534490][T13306] ? __pfx_____sys_sendmsg+0x10/0x10 [ 415.534516][T13306] ? import_iovec+0x74/0xa0 [ 415.534538][T13306] ___sys_sendmsg+0x21f/0x2a0 [ 415.534558][T13306] ? __pfx____sys_sendmsg+0x10/0x10 [ 415.534614][T13306] ? __fget_files+0x2a/0x420 [ 415.534630][T13306] ? __fget_files+0x3a0/0x420 [ 415.534657][T13306] __x64_sys_sendmsg+0x19b/0x260 [ 415.534679][T13306] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 415.534707][T13306] ? __pfx_ksys_write+0x10/0x10 [ 415.534728][T13306] ? rcu_is_watching+0x15/0xb0 [ 415.534751][T13306] ? do_syscall_64+0xbe/0x3b0 [ 415.534779][T13306] do_syscall_64+0xfa/0x3b0 [ 415.534801][T13306] ? lockdep_hardirqs_on+0x9c/0x150 [ 415.534822][T13306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.534841][T13306] ? clear_bhb_loop+0x60/0xb0 [ 415.534863][T13306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.534881][T13306] RIP: 0033:0x7f574a38ebe9 [ 415.534898][T13306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.534913][T13306] RSP: 002b:00007f574b2ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.534933][T13306] RAX: ffffffffffffffda RBX: 00007f574a5b5fa0 RCX: 00007f574a38ebe9 [ 415.534947][T13306] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 415.534966][T13306] RBP: 00007f574b2ad090 R08: 0000000000000000 R09: 0000000000000000 [ 415.534977][T13306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.534989][T13306] R13: 00007f574a5b6038 R14: 00007f574a5b5fa0 R15: 00007fff8195bc68 [ 415.535020][T13306] [ 416.344901][T13337] netlink: 'syz.0.2446': attribute type 10 has an invalid length. [ 416.358755][T13337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.398302][T13337] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 416.552064][T13343] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2447'. [ 416.703549][T13347] !€ÿ: renamed from bond_slave_0 (while UP) [ 416.976942][T13369] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2462'. [ 417.158410][T13379] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2466'. [ 417.485922][T13406] netlink: 22 bytes leftover after parsing attributes in process `syz.2.2476'. [ 417.614546][T13411] FAULT_INJECTION: forcing a failure. [ 417.614546][T13411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.642022][T13411] CPU: 1 UID: 0 PID: 13411 Comm: syz.0.2479 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 417.642050][T13411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 417.642061][T13411] Call Trace: [ 417.642069][T13411] [ 417.642077][T13411] dump_stack_lvl+0x189/0x250 [ 417.642104][T13411] ? __pfx____ratelimit+0x10/0x10 [ 417.642128][T13411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 417.642150][T13411] ? __pfx__printk+0x10/0x10 [ 417.642187][T13411] should_fail_ex+0x414/0x560 [ 417.642217][T13411] _copy_to_user+0x31/0xb0 [ 417.642240][T13411] simple_read_from_buffer+0xe1/0x170 [ 417.642271][T13411] proc_fail_nth_read+0x1b3/0x220 [ 417.642296][T13411] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 417.642320][T13411] ? rw_verify_area+0x2a6/0x4d0 [ 417.642341][T13411] ? __lock_acquire+0xab9/0xd20 [ 417.642364][T13411] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 417.642386][T13411] vfs_read+0x200/0xa30 [ 417.642408][T13411] ? fdget_pos+0x247/0x320 [ 417.642429][T13411] ? __pfx___mutex_lock+0x10/0x10 [ 417.642454][T13411] ? __pfx_vfs_read+0x10/0x10 [ 417.642478][T13411] ? __fget_files+0x2a/0x420 [ 417.642500][T13411] ? __fget_files+0x3a0/0x420 [ 417.642515][T13411] ? __fget_files+0x2a/0x420 [ 417.642543][T13411] ksys_read+0x145/0x250 [ 417.642577][T13411] ? __pfx_ksys_read+0x10/0x10 [ 417.642596][T13411] ? rcu_is_watching+0x15/0xb0 [ 417.642622][T13411] ? do_syscall_64+0xbe/0x3b0 [ 417.642650][T13411] do_syscall_64+0xfa/0x3b0 [ 417.642673][T13411] ? lockdep_hardirqs_on+0x9c/0x150 [ 417.642695][T13411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.642714][T13411] ? clear_bhb_loop+0x60/0xb0 [ 417.642737][T13411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.642755][T13411] RIP: 0033:0x7f2c91f8d5fc [ 417.642772][T13411] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 417.642789][T13411] RSP: 002b:00007f2c901f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 417.642810][T13411] RAX: ffffffffffffffda RBX: 00007f2c921b5fa0 RCX: 00007f2c91f8d5fc [ 417.642824][T13411] RDX: 000000000000000f RSI: 00007f2c901f60a0 RDI: 0000000000000004 [ 417.642836][T13411] RBP: 00007f2c901f6090 R08: 0000000000000000 R09: 0000000000000000 [ 417.642848][T13411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.642860][T13411] R13: 00007f2c921b6038 R14: 00007f2c921b5fa0 R15: 00007ffd76694008 [ 417.642893][T13411] [ 418.937949][T13447] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2493'. [ 419.084116][T13454] FAULT_INJECTION: forcing a failure. [ 419.084116][T13454] name failslab, interval 1, probability 0, space 0, times 0 [ 419.097068][T13454] CPU: 1 UID: 0 PID: 13454 Comm: syz.3.2496 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 419.097095][T13454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 419.097107][T13454] Call Trace: [ 419.097116][T13454] [ 419.097124][T13454] dump_stack_lvl+0x189/0x250 [ 419.097153][T13454] ? __pfx____ratelimit+0x10/0x10 [ 419.097177][T13454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.097198][T13454] ? __pfx__printk+0x10/0x10 [ 419.097229][T13454] ? __pfx___might_resched+0x10/0x10 [ 419.097247][T13454] ? fs_reclaim_acquire+0x7d/0x100 [ 419.097279][T13454] should_fail_ex+0x414/0x560 [ 419.097306][T13454] should_failslab+0xa8/0x100 [ 419.097329][T13454] __kmalloc_cache_noprof+0x70/0x3d0 [ 419.097352][T13454] ? nfnetlink_rcv+0xeff/0x2520 [ 419.097379][T13454] nfnetlink_rcv+0xeff/0x2520 [ 419.097436][T13454] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 419.097476][T13454] ? ref_tracker_free+0x63a/0x7d0 [ 419.097531][T13454] ? __netlink_deliver_tap+0x807/0x850 [ 419.097563][T13454] ? netlink_deliver_tap+0x2e/0x1b0 [ 419.097608][T13454] netlink_unicast+0x82c/0x9e0 [ 419.097640][T13454] ? __pfx_netlink_unicast+0x10/0x10 [ 419.097665][T13454] ? netlink_sendmsg+0x642/0xb30 [ 419.097687][T13454] ? skb_put+0x11b/0x210 [ 419.097717][T13454] netlink_sendmsg+0x805/0xb30 [ 419.097752][T13454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.097780][T13454] ? aa_sock_msg_perm+0xf1/0x1d0 [ 419.097808][T13454] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 419.097828][T13454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.097854][T13454] __sock_sendmsg+0x21c/0x270 [ 419.097880][T13454] ____sys_sendmsg+0x505/0x830 [ 419.097905][T13454] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.097935][T13454] ? import_iovec+0x74/0xa0 [ 419.097960][T13454] ___sys_sendmsg+0x21f/0x2a0 [ 419.097982][T13454] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.098041][T13454] ? __fget_files+0x2a/0x420 [ 419.098056][T13454] ? __fget_files+0x3a0/0x420 [ 419.098084][T13454] __x64_sys_sendmsg+0x19b/0x260 [ 419.098106][T13454] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 419.098136][T13454] ? __pfx_ksys_write+0x10/0x10 [ 419.098155][T13454] ? rcu_is_watching+0x15/0xb0 [ 419.098179][T13454] ? do_syscall_64+0xbe/0x3b0 [ 419.098208][T13454] do_syscall_64+0xfa/0x3b0 [ 419.098230][T13454] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.098252][T13454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.098270][T13454] ? clear_bhb_loop+0x60/0xb0 [ 419.098293][T13454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.098311][T13454] RIP: 0033:0x7f3fe178ebe9 [ 419.098328][T13454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.098344][T13454] RSP: 002b:00007f3fe2646038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.098364][T13454] RAX: ffffffffffffffda RBX: 00007f3fe19b5fa0 RCX: 00007f3fe178ebe9 [ 419.098378][T13454] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 419.098390][T13454] RBP: 00007f3fe2646090 R08: 0000000000000000 R09: 0000000000000000 [ 419.098402][T13454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 419.098413][T13454] R13: 00007f3fe19b6038 R14: 00007f3fe19b5fa0 R15: 00007ffd876362c8 [ 419.098445][T13454] [ 419.507584][T13462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2498'. [ 419.549032][T13464] FAULT_INJECTION: forcing a failure. [ 419.549032][T13464] name failslab, interval 1, probability 0, space 0, times 0 [ 419.551206][T13465] netlink: 'syz.4.2497': attribute type 21 has an invalid length. [ 419.563568][T13464] CPU: 1 UID: 0 PID: 13464 Comm: syz.3.2499 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 419.563592][T13464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 419.563603][T13464] Call Trace: [ 419.563613][T13464] [ 419.563622][T13464] dump_stack_lvl+0x189/0x250 [ 419.563653][T13464] ? __pfx____ratelimit+0x10/0x10 [ 419.563681][T13464] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.563715][T13464] ? __pfx__printk+0x10/0x10 [ 419.563781][T13464] should_fail_ex+0x414/0x560 [ 419.563821][T13464] should_failslab+0xa8/0x100 [ 419.563853][T13464] kmem_cache_alloc_noprof+0x73/0x3c0 [ 419.563878][T13464] ? skb_clone+0x212/0x3a0 [ 419.563912][T13464] skb_clone+0x212/0x3a0 [ 419.563944][T13464] __netlink_deliver_tap+0x404/0x850 [ 419.564004][T13464] ? netlink_deliver_tap+0x2e/0x1b0 [ 419.564036][T13464] netlink_deliver_tap+0x19c/0x1b0 [ 419.564066][T13464] netlink_unicast+0x7fa/0x9e0 [ 419.564118][T13464] ? __pfx_netlink_unicast+0x10/0x10 [ 419.564149][T13464] ? netlink_sendmsg+0x642/0xb30 [ 419.564171][T13464] ? skb_put+0x11b/0x210 [ 419.564210][T13464] netlink_sendmsg+0x805/0xb30 [ 419.564262][T13464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.564299][T13464] ? aa_sock_msg_perm+0xf1/0x1d0 [ 419.564333][T13464] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 419.564354][T13464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.564384][T13464] __sock_sendmsg+0x21c/0x270 [ 419.564419][T13464] ____sys_sendmsg+0x505/0x830 [ 419.564457][T13464] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.564503][T13464] ? import_iovec+0x74/0xa0 [ 419.564538][T13464] ___sys_sendmsg+0x21f/0x2a0 [ 419.564567][T13464] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.564645][T13464] ? __fget_files+0x2a/0x420 [ 419.564698][T13464] ? __fget_files+0x2a/0x420 [ 419.564720][T13464] ? __fget_files+0x3a0/0x420 [ 419.564766][T13464] __x64_sys_sendmsg+0x19b/0x260 [ 419.564796][T13464] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 419.564844][T13464] ? __pfx_ksys_write+0x10/0x10 [ 419.564865][T13464] ? rcu_is_watching+0x15/0xb0 [ 419.564900][T13464] ? do_syscall_64+0xbe/0x3b0 [ 419.564936][T13464] do_syscall_64+0xfa/0x3b0 [ 419.564958][T13464] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.564983][T13464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.565002][T13464] ? clear_bhb_loop+0x60/0xb0 [ 419.565031][T13464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.565049][T13464] RIP: 0033:0x7f3fe178ebe9 [ 419.565068][T13464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.565084][T13464] RSP: 002b:00007f3fe2646038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.565104][T13464] RAX: ffffffffffffffda RBX: 00007f3fe19b5fa0 RCX: 00007f3fe178ebe9 [ 419.565117][T13464] RDX: 0000000000000884 RSI: 0000200000000140 RDI: 0000000000000004 [ 419.565128][T13464] RBP: 00007f3fe2646090 R08: 0000000000000000 R09: 0000000000000000 [ 419.565140][T13464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.565151][T13464] R13: 00007f3fe19b6038 R14: 00007f3fe19b5fa0 R15: 00007ffd876362c8 [ 419.565209][T13464] [ 419.642293][T13469] netlink: 'syz.4.2497': attribute type 39 has an invalid length. [ 420.012748][T13470] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2501'. [ 420.333920][T13491] netlink: 'syz.4.2509': attribute type 3 has an invalid length. [ 420.341893][T13491] netlink: 'syz.4.2509': attribute type 1 has an invalid length. [ 420.351934][T13491] netlink: 193404 bytes leftover after parsing attributes in process `syz.4.2509'. [ 420.531324][T13506] netlink: 'syz.2.2513': attribute type 27 has an invalid length. [ 420.544714][T13506] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2513'. [ 421.751758][T13563] FAULT_INJECTION: forcing a failure. [ 421.751758][T13563] name failslab, interval 1, probability 0, space 0, times 0 [ 421.785490][T13563] CPU: 0 UID: 0 PID: 13563 Comm: syz.4.2533 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 421.785526][T13563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 421.785539][T13563] Call Trace: [ 421.785549][T13563] [ 421.785559][T13563] dump_stack_lvl+0x189/0x250 [ 421.785589][T13563] ? __pfx____ratelimit+0x10/0x10 [ 421.785618][T13563] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.785644][T13563] ? __pfx__printk+0x10/0x10 [ 421.785681][T13563] ? __pfx___might_resched+0x10/0x10 [ 421.785702][T13563] ? fs_reclaim_acquire+0x7d/0x100 [ 421.785751][T13563] should_fail_ex+0x414/0x560 [ 421.785792][T13563] ? nf_hook_entries_grow+0x27c/0x710 [ 421.785817][T13563] should_failslab+0xa8/0x100 [ 421.785850][T13563] __kvmalloc_node_noprof+0x161/0x5f0 [ 421.785879][T13563] ? nf_hook_entries_grow+0x27c/0x710 [ 421.785904][T13563] ? __pfx___mutex_lock+0x10/0x10 [ 421.785944][T13563] nf_hook_entries_grow+0x27c/0x710 [ 421.786020][T13563] __nf_register_net_hook+0x2c9/0x930 [ 421.786080][T13563] nf_register_net_hook+0xb2/0x190 [ 421.786116][T13563] nf_register_net_hooks+0x44/0x1b0 [ 421.786158][T13563] nf_defrag_ipv6_enable+0x87/0x120 [ 421.786193][T13563] nf_ct_netns_do_get+0x1e7/0x5a0 [ 421.786231][T13563] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 421.786264][T13563] ? synproxy_pernet+0x45/0x270 [ 421.786287][T13563] ? synproxy_pernet+0x45/0x270 [ 421.786303][T13563] ? synproxy_pernet+0x45/0x270 [ 421.786343][T13563] nft_synproxy_do_init+0x1d1/0x4c0 [ 421.786381][T13563] nf_tables_newrule+0x178c/0x2890 [ 421.786446][T13563] ? __pfx_nf_tables_newrule+0x10/0x10 [ 421.786474][T13563] ? nfnl_pernet+0x23/0x240 [ 421.786534][T13563] ? __nla_parse+0x40/0x60 [ 421.786575][T13563] nfnetlink_rcv+0x1132/0x2520 [ 421.786696][T13563] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 421.786865][T13563] ? __netlink_deliver_tap+0x807/0x850 [ 421.786893][T13563] ? netlink_deliver_tap+0x2e/0x1b0 [ 421.786974][T13563] netlink_unicast+0x82c/0x9e0 [ 421.787029][T13563] ? __pfx_netlink_unicast+0x10/0x10 [ 421.787063][T13563] ? netlink_sendmsg+0x642/0xb30 [ 421.787085][T13563] ? skb_put+0x11b/0x210 [ 421.787128][T13563] netlink_sendmsg+0x805/0xb30 [ 421.787185][T13563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.787224][T13563] ? aa_sock_msg_perm+0xf1/0x1d0 [ 421.787260][T13563] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 421.787281][T13563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.787313][T13563] __sock_sendmsg+0x21c/0x270 [ 421.787351][T13563] ____sys_sendmsg+0x505/0x830 [ 421.787393][T13563] ? __pfx_____sys_sendmsg+0x10/0x10 [ 421.787444][T13563] ? import_iovec+0x74/0xa0 [ 421.787482][T13563] ___sys_sendmsg+0x21f/0x2a0 [ 421.787513][T13563] ? __pfx____sys_sendmsg+0x10/0x10 [ 421.787608][T13563] ? __fget_files+0x2a/0x420 [ 421.787666][T13563] ? __fget_files+0x2a/0x420 [ 421.787683][T13563] ? __fget_files+0x3a0/0x420 [ 421.787736][T13563] __x64_sys_sendmsg+0x19b/0x260 [ 421.787773][T13563] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 421.787826][T13563] ? __pfx_ksys_write+0x10/0x10 [ 421.787847][T13563] ? rcu_is_watching+0x15/0xb0 [ 421.787886][T13563] ? do_syscall_64+0xbe/0x3b0 [ 421.787926][T13563] do_syscall_64+0xfa/0x3b0 [ 421.787955][T13563] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.787981][T13563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.788001][T13563] ? clear_bhb_loop+0x60/0xb0 [ 421.788031][T13563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.788050][T13563] RIP: 0033:0x7f37f298ebe9 [ 421.788070][T13563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.788086][T13563] RSP: 002b:00007f37f3768038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.788106][T13563] RAX: ffffffffffffffda RBX: 00007f37f2bb5fa0 RCX: 00007f37f298ebe9 [ 421.788120][T13563] RDX: 0000000024044010 RSI: 0000200000000100 RDI: 0000000000000004 [ 421.788132][T13563] RBP: 00007f37f3768090 R08: 0000000000000000 R09: 0000000000000000 [ 421.788144][T13563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.788156][T13563] R13: 00007f37f2bb6038 R14: 00007f37f2bb5fa0 R15: 00007ffd9bf9f148 [ 421.788220][T13563] [ 422.623339][T13583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2541'. [ 422.730700][T13589] delete_channel: no stack [ 423.624978][T13627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2557'. [ 423.791330][T13631] netlink: 'syz.2.2560': attribute type 21 has an invalid length. [ 423.875376][T13629] delete_channel: no stack [ 424.859859][T13652] netlink: 'syz.3.2566': attribute type 7 has an invalid length. [ 426.159566][T13689] siw: device registration error -23 [ 426.390378][T13702] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2582'. [ 426.410672][T13702] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2582'. [ 426.438277][T13699] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2582'. [ 426.578366][T13716] FAULT_INJECTION: forcing a failure. [ 426.578366][T13716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.591692][T13716] CPU: 0 UID: 0 PID: 13716 Comm: syz.1.2591 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 426.591718][T13716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 426.591729][T13716] Call Trace: [ 426.591737][T13716] [ 426.591745][T13716] dump_stack_lvl+0x189/0x250 [ 426.591772][T13716] ? __pfx____ratelimit+0x10/0x10 [ 426.591796][T13716] ? __pfx_dump_stack_lvl+0x10/0x10 [ 426.591817][T13716] ? __pfx__printk+0x10/0x10 [ 426.591854][T13716] should_fail_ex+0x414/0x560 [ 426.591883][T13716] _copy_to_user+0x31/0xb0 [ 426.591906][T13716] simple_read_from_buffer+0xe1/0x170 [ 426.591936][T13716] proc_fail_nth_read+0x1b3/0x220 [ 426.591960][T13716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 426.591984][T13716] ? rw_verify_area+0x2a6/0x4d0 [ 426.592005][T13716] ? __lock_acquire+0xab9/0xd20 [ 426.592035][T13716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 426.592058][T13716] vfs_read+0x200/0xa30 [ 426.592079][T13716] ? fdget_pos+0x247/0x320 [ 426.592100][T13716] ? __pfx___mutex_lock+0x10/0x10 [ 426.592125][T13716] ? __pfx_vfs_read+0x10/0x10 [ 426.592150][T13716] ? __fget_files+0x2a/0x420 [ 426.592171][T13716] ? __fget_files+0x3a0/0x420 [ 426.592186][T13716] ? __fget_files+0x2a/0x420 [ 426.592213][T13716] ksys_read+0x145/0x250 [ 426.592238][T13716] ? __pfx_ksys_read+0x10/0x10 [ 426.592257][T13716] ? rcu_is_watching+0x15/0xb0 [ 426.592281][T13716] ? do_syscall_64+0xbe/0x3b0 [ 426.592310][T13716] do_syscall_64+0xfa/0x3b0 [ 426.592332][T13716] ? lockdep_hardirqs_on+0x9c/0x150 [ 426.592354][T13716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.592372][T13716] ? clear_bhb_loop+0x60/0xb0 [ 426.592395][T13716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.592413][T13716] RIP: 0033:0x7f574a38d5fc [ 426.592429][T13716] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 426.592445][T13716] RSP: 002b:00007f574b2ad030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 426.592465][T13716] RAX: ffffffffffffffda RBX: 00007f574a5b5fa0 RCX: 00007f574a38d5fc [ 426.592478][T13716] RDX: 000000000000000f RSI: 00007f574b2ad0a0 RDI: 000000000000000d [ 426.592490][T13716] RBP: 00007f574b2ad090 R08: 0000000000000000 R09: 0000000000000000 [ 426.592502][T13716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 426.592513][T13716] R13: 00007f574a5b6038 R14: 00007f574a5b5fa0 R15: 00007fff8195bc68 [ 426.592545][T13716] [ 426.955975][T13725] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2594'. [ 426.984682][T13730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.104154][T13724] FAULT_INJECTION: forcing a failure. [ 427.104154][T13724] name failslab, interval 1, probability 0, space 0, times 0 [ 427.117307][T13724] CPU: 1 UID: 0 PID: 13724 Comm: syz.4.2595 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 427.117333][T13724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 427.117344][T13724] Call Trace: [ 427.117353][T13724] [ 427.117361][T13724] dump_stack_lvl+0x189/0x250 [ 427.117388][T13724] ? __pfx____ratelimit+0x10/0x10 [ 427.117412][T13724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 427.117434][T13724] ? __pfx__printk+0x10/0x10 [ 427.117461][T13724] ? perf_trace_run_bpf_submit+0xee/0x170 [ 427.117491][T13724] should_fail_ex+0x414/0x560 [ 427.117520][T13724] should_failslab+0xa8/0x100 [ 427.117547][T13724] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 427.117572][T13724] ? __alloc_skb+0x112/0x2d0 [ 427.117594][T13724] ? tipc_own_addr+0x45/0x2a0 [ 427.117622][T13724] __alloc_skb+0x112/0x2d0 [ 427.117652][T13724] tipc_msg_create+0x51/0x4d0 [ 427.117682][T13724] tipc_group_create_event+0x1d8/0x640 [ 427.117715][T13724] ? __pfx_tipc_group_create_event+0x10/0x10 [ 427.117753][T13724] tipc_sk_proto_rcv+0x235/0x1730 [ 427.117786][T13724] ? do_raw_spin_lock+0x121/0x290 [ 427.117811][T13724] ? __pfx_tipc_sk_proto_rcv+0x10/0x10 [ 427.117839][T13724] ? tipc_sk_filtering+0x13c/0x510 [ 427.117864][T13724] tipc_sk_filter_rcv+0x2e7b/0x30b0 [ 427.117913][T13724] ? perf_trace_run_bpf_submit+0xee/0x170 [ 427.117939][T13724] ? perf_trace_preemptirq_template+0x280/0x340 [ 427.117964][T13724] ? __local_bh_enable_ip+0xce/0x1c0 [ 427.117985][T13724] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 427.118010][T13724] ? __lock_acquire+0xab9/0xd20 [ 427.118035][T13724] ? __pfx_tipc_sk_filter_rcv+0x10/0x10 [ 427.118060][T13724] ? __local_bh_enable_ip+0x12d/0x1c0 [ 427.118100][T13724] tipc_sk_rcv+0x8a5/0x2ba0 [ 427.118130][T13724] ? __lock_acquire+0xab9/0xd20 [ 427.118172][T13724] ? __pfx_perf_swevent_event+0x10/0x10 [ 427.118202][T13724] ? __pfx_tipc_sk_rcv+0x10/0x10 [ 427.118252][T13724] ? __raw_spin_lock_init+0x45/0x100 [ 427.118277][T13724] tipc_node_xmit+0x1c9/0xe90 [ 427.118312][T13724] ? __pfx_tipc_node_xmit+0x10/0x10 [ 427.118337][T13724] ? __kasan_slab_free+0x5b/0x80 [ 427.118358][T13724] ? kfree+0x18e/0x440 [ 427.118376][T13724] ? tipc_group_delete+0x3ac/0x480 [ 427.118403][T13724] ? tipc_sk_leave+0x138/0x4e0 [ 427.118423][T13724] ? sock_close+0xc0/0x240 [ 427.118442][T13724] ? __fput+0x449/0xa70 [ 427.118459][T13724] ? task_work_run+0x1d4/0x260 [ 427.118479][T13724] ? exit_to_user_mode_loop+0xec/0x110 [ 427.118502][T13724] ? do_syscall_64+0x2bd/0x3b0 [ 427.118525][T13724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.118567][T13724] tipc_node_distr_xmit+0x2a0/0x3b0 [ 427.118602][T13724] ? __pfx_tipc_node_distr_xmit+0x10/0x10 [ 427.118639][T13724] ? tipc_group_delete+0x3ac/0x480 [ 427.118663][T13724] ? kfree+0x18e/0x440 [ 427.118682][T13724] ? tipc_group_proto_xmit+0x278/0x790 [ 427.118712][T13724] tipc_group_delete+0x3e4/0x480 [ 427.118737][T13724] ? lockdep_hardirqs_on+0x9c/0x150 [ 427.118768][T13724] ? __pfx_tipc_group_delete+0x10/0x10 [ 427.118810][T13724] ? tipc_group_self+0x26/0x1c0 [ 427.118838][T13724] tipc_sk_leave+0x138/0x4e0 [ 427.118866][T13724] ? __pfx_tipc_sk_leave+0x10/0x10 [ 427.118888][T13724] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 427.118920][T13724] tipc_release+0x5fc/0x2160 [ 427.118955][T13724] ? __pfx_tipc_release+0x10/0x10 [ 427.118973][T13724] ? down_write+0x162/0x1f0 [ 427.118997][T13724] ? __pfx_down_write+0x10/0x10 [ 427.119020][T13724] ? do_raw_spin_lock+0x121/0x290 [ 427.119047][T13724] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 427.119070][T13724] sock_close+0xc0/0x240 [ 427.119090][T13724] ? __pfx_sock_close+0x10/0x10 [ 427.119110][T13724] __fput+0x449/0xa70 [ 427.119137][T13724] task_work_run+0x1d4/0x260 [ 427.119161][T13724] ? __pfx_task_work_run+0x10/0x10 [ 427.119187][T13724] ? exit_to_user_mode_loop+0x40/0x110 [ 427.119212][T13724] exit_to_user_mode_loop+0xec/0x110 [ 427.119234][T13724] do_syscall_64+0x2bd/0x3b0 [ 427.119263][T13724] ? lockdep_hardirqs_on+0x9c/0x150 [ 427.119286][T13724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.119305][T13724] ? clear_bhb_loop+0x60/0xb0 [ 427.119327][T13724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.119345][T13724] RIP: 0033:0x7f37f298ebe9 [ 427.119362][T13724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.119378][T13724] RSP: 002b:00007f37f3768038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 427.119398][T13724] RAX: 000000000000002b RBX: 00007f37f2bb5fa0 RCX: 00007f37f298ebe9 [ 427.119412][T13724] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000003 [ 427.119424][T13724] RBP: 00007f37f3768090 R08: 0000000000000000 R09: 0000000000000000 [ 427.119436][T13724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.119448][T13724] R13: 00007f37f2bb6038 R14: 00007f37f2bb5fa0 R15: 00007ffd9bf9f148 [ 427.119480][T13724] [ 428.677216][ T5880] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 429.197635][T13790] : entered promiscuous mode [ 429.343791][T13796] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 430.257941][T13829] FAULT_INJECTION: forcing a failure. [ 430.257941][T13829] name failslab, interval 1, probability 0, space 0, times 0 [ 430.444181][T13829] CPU: 1 UID: 0 PID: 13829 Comm: syz.3.2635 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 430.444210][T13829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 430.444221][T13829] Call Trace: [ 430.444230][T13829] [ 430.444239][T13829] dump_stack_lvl+0x189/0x250 [ 430.444266][T13829] ? __pfx____ratelimit+0x10/0x10 [ 430.444291][T13829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.444314][T13829] ? __pfx__printk+0x10/0x10 [ 430.444342][T13829] ? __lock_acquire+0xab9/0xd20 [ 430.444381][T13829] should_fail_ex+0x414/0x560 [ 430.444413][T13829] should_failslab+0xa8/0x100 [ 430.444441][T13829] kmem_cache_alloc_noprof+0x73/0x3c0 [ 430.444465][T13829] ? skb_clone+0x212/0x3a0 [ 430.444491][T13829] skb_clone+0x212/0x3a0 [ 430.444517][T13829] __netlink_deliver_tap+0x404/0x850 [ 430.444558][T13829] ? netlink_deliver_tap+0x2e/0x1b0 [ 430.444586][T13829] netlink_deliver_tap+0x19c/0x1b0 [ 430.444612][T13829] netlink_unicast+0x7fa/0x9e0 [ 430.444647][T13829] ? __pfx_netlink_unicast+0x10/0x10 [ 430.444674][T13829] ? netlink_sendmsg+0x642/0xb30 [ 430.444697][T13829] ? skb_put+0x11b/0x210 [ 430.444728][T13829] netlink_sendmsg+0x805/0xb30 [ 430.444767][T13829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.444797][T13829] ? aa_sock_msg_perm+0xf1/0x1d0 [ 430.444828][T13829] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 430.444849][T13829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.444876][T13829] __sock_sendmsg+0x21c/0x270 [ 430.444903][T13829] ____sys_sendmsg+0x505/0x830 [ 430.444931][T13829] ? __pfx_____sys_sendmsg+0x10/0x10 [ 430.444964][T13829] ? import_iovec+0x74/0xa0 [ 430.444992][T13829] ___sys_sendmsg+0x21f/0x2a0 [ 430.445015][T13829] ? __pfx____sys_sendmsg+0x10/0x10 [ 430.445126][T13829] ? __fget_files+0x2a/0x420 [ 430.445143][T13829] ? __fget_files+0x3a0/0x420 [ 430.445175][T13829] __x64_sys_sendmsg+0x19b/0x260 [ 430.445199][T13829] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 430.445233][T13829] ? __pfx_ksys_write+0x10/0x10 [ 430.445253][T13829] ? rcu_is_watching+0x15/0xb0 [ 430.445280][T13829] ? do_syscall_64+0xbe/0x3b0 [ 430.445309][T13829] do_syscall_64+0xfa/0x3b0 [ 430.445332][T13829] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.445355][T13829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.445373][T13829] ? clear_bhb_loop+0x60/0xb0 [ 430.445397][T13829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.445414][T13829] RIP: 0033:0x7f3fe178ebe9 [ 430.445432][T13829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.445448][T13829] RSP: 002b:00007f3fe2646038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 430.445468][T13829] RAX: ffffffffffffffda RBX: 00007f3fe19b5fa0 RCX: 00007f3fe178ebe9 [ 430.445482][T13829] RDX: 0000000000008000 RSI: 0000200000000780 RDI: 0000000000000005 [ 430.445494][T13829] RBP: 00007f3fe2646090 R08: 0000000000000000 R09: 0000000000000000 [ 430.445506][T13829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.445518][T13829] R13: 00007f3fe19b6038 R14: 00007f3fe19b5fa0 R15: 00007ffd876362c8 [ 430.445554][T13829] [ 430.996583][ T5880] Bluetooth: hci1: ISO packet for unknown connection handle 19 [ 431.588269][T13858] lo speed is unknown, defaulting to 1000 [ 431.598790][T13858] lo speed is unknown, defaulting to 1000 [ 431.610319][T13858] lo speed is unknown, defaulting to 1000 [ 431.639952][T13858] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 431.845800][T13858] lo speed is unknown, defaulting to 1000 [ 431.884223][T13858] lo speed is unknown, defaulting to 1000 [ 431.893401][T13858] lo speed is unknown, defaulting to 1000 [ 431.909574][T13858] lo speed is unknown, defaulting to 1000 [ 431.923752][T13858] lo speed is unknown, defaulting to 1000 [ 432.224614][T13879] netlink: 'syz.3.2654': attribute type 39 has an invalid length. [ 432.281383][T13878] netlink: 'syz.3.2654': attribute type 39 has an invalid length. [ 433.039721][T13886] delete_channel: no stack [ 434.353102][T13947] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2675'. [ 434.878894][T13959] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2678'. [ 434.907341][T13959] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2678'. [ 434.918050][T13959] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2678'. [ 434.989547][T13961] FAULT_INJECTION: forcing a failure. [ 434.989547][T13961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.020684][T13961] CPU: 1 UID: 0 PID: 13961 Comm: syz.2.2680 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 435.020713][T13961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 435.020725][T13961] Call Trace: [ 435.020733][T13961] [ 435.020742][T13961] dump_stack_lvl+0x189/0x250 [ 435.020770][T13961] ? __pfx____ratelimit+0x10/0x10 [ 435.020795][T13961] ? __pfx_dump_stack_lvl+0x10/0x10 [ 435.020818][T13961] ? __pfx__printk+0x10/0x10 [ 435.020847][T13961] ? __might_fault+0xb0/0x130 [ 435.020881][T13961] should_fail_ex+0x414/0x560 [ 435.020912][T13961] _copy_to_user+0x31/0xb0 [ 435.020937][T13961] simple_read_from_buffer+0xe1/0x170 [ 435.020968][T13961] proc_fail_nth_read+0x1b3/0x220 [ 435.020995][T13961] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 435.021021][T13961] ? rw_verify_area+0x2a6/0x4d0 [ 435.021043][T13961] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 435.021066][T13961] vfs_read+0x200/0xa30 [ 435.021088][T13961] ? fdget_pos+0x247/0x320 [ 435.021111][T13961] ? __pfx___mutex_lock+0x10/0x10 [ 435.021136][T13961] ? __pfx_vfs_read+0x10/0x10 [ 435.021163][T13961] ? __fget_files+0x2a/0x420 [ 435.021186][T13961] ? __fget_files+0x3a0/0x420 [ 435.021201][T13961] ? __fget_files+0x2a/0x420 [ 435.021231][T13961] ksys_read+0x145/0x250 [ 435.021258][T13961] ? __pfx_ksys_read+0x10/0x10 [ 435.021277][T13961] ? rcu_is_watching+0x15/0xb0 [ 435.021301][T13961] ? do_syscall_64+0xbe/0x3b0 [ 435.021332][T13961] do_syscall_64+0xfa/0x3b0 [ 435.021354][T13961] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.021377][T13961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.021396][T13961] ? clear_bhb_loop+0x60/0xb0 [ 435.021420][T13961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.021438][T13961] RIP: 0033:0x7f318098d5fc [ 435.021456][T13961] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 435.021472][T13961] RSP: 002b:00007f318188b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 435.021492][T13961] RAX: ffffffffffffffda RBX: 00007f3180bb5fa0 RCX: 00007f318098d5fc [ 435.021506][T13961] RDX: 000000000000000f RSI: 00007f318188b0a0 RDI: 0000000000000006 [ 435.021518][T13961] RBP: 00007f318188b090 R08: 0000000000000000 R09: 0000000000000000 [ 435.021530][T13961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 435.021542][T13961] R13: 00007f3180bb6038 R14: 00007f3180bb5fa0 R15: 00007fff08c857c8 [ 435.021579][T13961] [ 435.336772][T13970] netlink: 'syz.4.2683': attribute type 10 has an invalid length. [ 436.945298][T14001] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2693'. [ 437.561543][T14023] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2703'. [ 437.886811][T14032] netlink: 56429 bytes leftover after parsing attributes in process `syz.4.2707'. [ 438.004587][T14041] FAULT_INJECTION: forcing a failure. [ 438.004587][T14041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.044560][T14041] CPU: 0 UID: 0 PID: 14041 Comm: syz.2.2711 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 438.044589][T14041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 438.044601][T14041] Call Trace: [ 438.044609][T14041] [ 438.044617][T14041] dump_stack_lvl+0x189/0x250 [ 438.044645][T14041] ? __pfx____ratelimit+0x10/0x10 [ 438.044670][T14041] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.044690][T14041] ? __pfx__printk+0x10/0x10 [ 438.044719][T14041] ? __might_fault+0xb0/0x130 [ 438.044755][T14041] should_fail_ex+0x414/0x560 [ 438.044783][T14041] _copy_from_user+0x2d/0xb0 [ 438.044805][T14041] ___sys_sendmsg+0x158/0x2a0 [ 438.044828][T14041] ? __pfx____sys_sendmsg+0x10/0x10 [ 438.044877][T14041] ? __fget_files+0x2a/0x420 [ 438.044892][T14041] ? __fget_files+0x3a0/0x420 [ 438.044916][T14041] __x64_sys_sendmsg+0x19b/0x260 [ 438.044933][T14041] ? perf_trace_run_bpf_submit+0x100/0x170 [ 438.044956][T14041] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 438.044973][T14041] ? perf_trace_preemptirq_template+0xa3/0x340 [ 438.045006][T14041] ? __pfx_ksys_write+0x10/0x10 [ 438.045026][T14041] ? rcu_is_watching+0x15/0xb0 [ 438.045050][T14041] ? do_syscall_64+0xbe/0x3b0 [ 438.045077][T14041] do_syscall_64+0xfa/0x3b0 [ 438.045099][T14041] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.045121][T14041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.045139][T14041] ? clear_bhb_loop+0x60/0xb0 [ 438.045162][T14041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.045180][T14041] RIP: 0033:0x7f318098ebe9 [ 438.045196][T14041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.045212][T14041] RSP: 002b:00007f318188b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.045240][T14041] RAX: ffffffffffffffda RBX: 00007f3180bb5fa0 RCX: 00007f318098ebe9 [ 438.045254][T14041] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000003 [ 438.045266][T14041] RBP: 00007f318188b090 R08: 0000000000000000 R09: 0000000000000000 [ 438.045278][T14041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.045289][T14041] R13: 00007f3180bb6038 R14: 00007f3180bb5fa0 R15: 00007fff08c857c8 [ 438.045320][T14041] [ 438.175824][T14047] wg0 speed is unknown, defaulting to 1000 [ 438.285424][T14047] lo speed is unknown, defaulting to 1000 [ 438.343770][T14051] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2715'. [ 438.475647][T14057] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2715'. [ 438.526118][T14062] delete_channel: no stack [ 438.753148][T14067] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2720'. [ 438.858707][T14077] netlink: 'syz.1.2725': attribute type 21 has an invalid length. [ 439.156482][T14089] delete_channel: no stack [ 439.431932][T14101] netlink: 'syz.0.2734': attribute type 4 has an invalid length. [ 439.469264][T14101] __nla_validate_parse: 2 callbacks suppressed [ 439.469284][T14101] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2734'. [ 439.528505][T14103] netlink: 'syz.4.2735': attribute type 49 has an invalid length. [ 439.741988][T14109] FAULT_INJECTION: forcing a failure. [ 439.741988][T14109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.786664][T14109] CPU: 1 UID: 0 PID: 14109 Comm: syz.0.2737 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 439.786692][T14109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 439.786703][T14109] Call Trace: [ 439.786711][T14109] [ 439.786720][T14109] dump_stack_lvl+0x189/0x250 [ 439.786746][T14109] ? __pfx____ratelimit+0x10/0x10 [ 439.786771][T14109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.786793][T14109] ? __pfx__printk+0x10/0x10 [ 439.786835][T14109] should_fail_ex+0x414/0x560 [ 439.786866][T14109] _copy_to_user+0x31/0xb0 [ 439.786891][T14109] simple_read_from_buffer+0xe1/0x170 [ 439.786923][T14109] proc_fail_nth_read+0x1b3/0x220 [ 439.786950][T14109] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 439.786975][T14109] ? rw_verify_area+0x2a6/0x4d0 [ 439.786996][T14109] ? __lock_acquire+0xab9/0xd20 [ 439.787019][T14109] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 439.787043][T14109] vfs_read+0x200/0xa30 [ 439.787065][T14109] ? fdget_pos+0x247/0x320 [ 439.787088][T14109] ? __pfx___mutex_lock+0x10/0x10 [ 439.787113][T14109] ? __pfx_vfs_read+0x10/0x10 [ 439.787146][T14109] ? __fget_files+0x2a/0x420 [ 439.787169][T14109] ? __fget_files+0x3a0/0x420 [ 439.787185][T14109] ? __fget_files+0x2a/0x420 [ 439.787214][T14109] ksys_read+0x145/0x250 [ 439.787241][T14109] ? __pfx_ksys_read+0x10/0x10 [ 439.787260][T14109] ? rcu_is_watching+0x15/0xb0 [ 439.787286][T14109] ? do_syscall_64+0xbe/0x3b0 [ 439.787315][T14109] do_syscall_64+0xfa/0x3b0 [ 439.787337][T14109] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.787360][T14109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.787379][T14109] ? clear_bhb_loop+0x60/0xb0 [ 439.787402][T14109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.787421][T14109] RIP: 0033:0x7f2c91f8d5fc [ 439.787439][T14109] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 439.787455][T14109] RSP: 002b:00007f2c901f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 439.787476][T14109] RAX: ffffffffffffffda RBX: 00007f2c921b5fa0 RCX: 00007f2c91f8d5fc [ 439.787490][T14109] RDX: 000000000000000f RSI: 00007f2c901f60a0 RDI: 0000000000000004 [ 439.787503][T14109] RBP: 00007f2c901f6090 R08: 0000000000000000 R09: 0000000000000000 [ 439.787515][T14109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 439.787526][T14109] R13: 00007f2c921b6038 R14: 00007f2c921b5fa0 R15: 00007ffd76694008 [ 439.787563][T14109] [ 440.103057][T14115] netlink: 'syz.0.2740': attribute type 21 has an invalid length. [ 440.114578][T14115] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2740'. [ 440.156019][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.165594][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.727397][T14137] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2747'. [ 440.783987][T14124] delete_channel: no stack [ 440.925803][T14146] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 442.348372][T14173] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2761'. [ 442.376476][T14173] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2761'. [ 442.399691][T14175] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2763'. [ 442.539909][T14183] netlink: 146936 bytes leftover after parsing attributes in process `syz.1.2763'. [ 442.550175][T14183] openvswitch: netlink: Message has 6 unknown bytes. [ 443.089631][T14200] openvswitch: netlink: Message has 16 unknown bytes. [ 443.096595][T14200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.180747][T14203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2771'. [ 445.049665][T14244] netlink: 'syz.4.2784': attribute type 19 has an invalid length. [ 445.138176][T14247] netlink: 'syz.1.2787': attribute type 10 has an invalid length. [ 445.194182][T14251] FAULT_INJECTION: forcing a failure. [ 445.194182][T14251] name failslab, interval 1, probability 0, space 0, times 0 [ 445.241705][T14251] CPU: 1 UID: 0 PID: 14251 Comm: syz.0.2788 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 445.241733][T14251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 445.241744][T14251] Call Trace: [ 445.241754][T14251] [ 445.241765][T14251] dump_stack_lvl+0x189/0x250 [ 445.241797][T14251] ? __pfx____ratelimit+0x10/0x10 [ 445.241825][T14251] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.241852][T14251] ? __pfx__printk+0x10/0x10 [ 445.241899][T14251] ? __pfx___might_resched+0x10/0x10 [ 445.241935][T14251] should_fail_ex+0x414/0x560 [ 445.241978][T14251] should_failslab+0xa8/0x100 [ 445.242013][T14251] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 445.242043][T14251] ? __alloc_skb+0x112/0x2d0 [ 445.242091][T14251] __alloc_skb+0x112/0x2d0 [ 445.242134][T14251] netlink_sendmsg+0x5c6/0xb30 [ 445.242192][T14251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.242232][T14251] ? aa_sock_msg_perm+0xf1/0x1d0 [ 445.242268][T14251] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 445.242290][T14251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.242322][T14251] __sock_sendmsg+0x21c/0x270 [ 445.242360][T14251] ____sys_sendmsg+0x505/0x830 [ 445.242402][T14251] ? __pfx_____sys_sendmsg+0x10/0x10 [ 445.242454][T14251] ? import_iovec+0x74/0xa0 [ 445.242491][T14251] ___sys_sendmsg+0x21f/0x2a0 [ 445.242523][T14251] ? __pfx____sys_sendmsg+0x10/0x10 [ 445.242611][T14251] ? __fget_files+0x2a/0x420 [ 445.242669][T14251] ? __fget_files+0x2a/0x420 [ 445.242686][T14251] ? __fget_files+0x3a0/0x420 [ 445.242739][T14251] __x64_sys_sendmsg+0x19b/0x260 [ 445.242772][T14251] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 445.242824][T14251] ? __pfx_ksys_write+0x10/0x10 [ 445.242845][T14251] ? rcu_is_watching+0x15/0xb0 [ 445.242883][T14251] ? do_syscall_64+0xbe/0x3b0 [ 445.242922][T14251] do_syscall_64+0xfa/0x3b0 [ 445.242946][T14251] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.242972][T14251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.242992][T14251] ? clear_bhb_loop+0x60/0xb0 [ 445.243024][T14251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.243042][T14251] RIP: 0033:0x7f2c91f8ebe9 [ 445.243070][T14251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.243087][T14251] RSP: 002b:00007f2c901f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.243107][T14251] RAX: ffffffffffffffda RBX: 00007f2c921b5fa0 RCX: 00007f2c91f8ebe9 [ 445.243122][T14251] RDX: 0000000000008004 RSI: 0000200000000240 RDI: 0000000000000004 [ 445.243134][T14251] RBP: 00007f2c901f6090 R08: 0000000000000000 R09: 0000000000000000 [ 445.243146][T14251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.243158][T14251] R13: 00007f2c921b6038 R14: 00007f2c921b5fa0 R15: 00007ffd76694008 [ 445.243222][T14251] [ 445.250030][T14247] team0: Device ipvlan1 failed to register rx_handler [ 445.425292][T14244] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.2784'. [ 445.994117][T14245] wg0 speed is unknown, defaulting to 1000 [ 446.031077][T14245] lo speed is unknown, defaulting to 1000 [ 447.406485][T14288] FAULT_INJECTION: forcing a failure. [ 447.406485][T14288] name failslab, interval 1, probability 0, space 0, times 0 [ 447.459694][T14288] CPU: 0 UID: 0 PID: 14288 Comm: syz.1.2800 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 447.459723][T14288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 447.459734][T14288] Call Trace: [ 447.459743][T14288] [ 447.459751][T14288] dump_stack_lvl+0x189/0x250 [ 447.459779][T14288] ? __pfx____ratelimit+0x10/0x10 [ 447.459806][T14288] ? __pfx_dump_stack_lvl+0x10/0x10 [ 447.459835][T14288] ? __pfx__printk+0x10/0x10 [ 447.459867][T14288] ? __pfx___might_resched+0x10/0x10 [ 447.459885][T14288] ? fs_reclaim_acquire+0x7d/0x100 [ 447.459918][T14288] should_fail_ex+0x414/0x560 [ 447.459948][T14288] should_failslab+0xa8/0x100 [ 447.459976][T14288] __kmalloc_cache_noprof+0x70/0x3d0 [ 447.459998][T14288] ? nf_tables_newflowtable+0x90e/0x20d0 [ 447.460024][T14288] nf_tables_newflowtable+0x90e/0x20d0 [ 447.460059][T14288] ? __lock_acquire+0xa41/0xd20 [ 447.460089][T14288] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 447.460135][T14288] ? __nla_parse+0x40/0x60 [ 447.460167][T14288] nfnetlink_rcv+0x1132/0x2520 [ 447.460232][T14288] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 447.460277][T14288] ? ref_tracker_free+0x63a/0x7d0 [ 447.460338][T14288] ? __netlink_deliver_tap+0x807/0x850 [ 447.460363][T14288] ? netlink_deliver_tap+0x2e/0x1b0 [ 447.460421][T14288] netlink_unicast+0x82c/0x9e0 [ 447.460455][T14288] ? __pfx_netlink_unicast+0x10/0x10 [ 447.460482][T14288] ? netlink_sendmsg+0x642/0xb30 [ 447.460503][T14288] ? skb_put+0x11b/0x210 [ 447.460535][T14288] netlink_sendmsg+0x805/0xb30 [ 447.460578][T14288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.460607][T14288] ? aa_sock_msg_perm+0xf1/0x1d0 [ 447.460637][T14288] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 447.460657][T14288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.460682][T14288] __sock_sendmsg+0x21c/0x270 [ 447.460710][T14288] ____sys_sendmsg+0x505/0x830 [ 447.460738][T14288] ? __pfx_____sys_sendmsg+0x10/0x10 [ 447.460770][T14288] ? import_iovec+0x74/0xa0 [ 447.460796][T14288] ___sys_sendmsg+0x21f/0x2a0 [ 447.460826][T14288] ? __pfx____sys_sendmsg+0x10/0x10 [ 447.460887][T14288] ? __fget_files+0x2a/0x420 [ 447.460903][T14288] ? __fget_files+0x3a0/0x420 [ 447.460931][T14288] __x64_sys_sendmsg+0x19b/0x260 [ 447.460952][T14288] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 447.460982][T14288] ? __pfx_ksys_write+0x10/0x10 [ 447.461002][T14288] ? rcu_is_watching+0x15/0xb0 [ 447.461027][T14288] ? do_syscall_64+0xbe/0x3b0 [ 447.461055][T14288] do_syscall_64+0xfa/0x3b0 [ 447.461075][T14288] ? lockdep_hardirqs_on+0x9c/0x150 [ 447.461097][T14288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.461115][T14288] ? clear_bhb_loop+0x60/0xb0 [ 447.461136][T14288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.461153][T14288] RIP: 0033:0x7f574a38ebe9 [ 447.461171][T14288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.461187][T14288] RSP: 002b:00007f574b2ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 447.461207][T14288] RAX: ffffffffffffffda RBX: 00007f574a5b5fa0 RCX: 00007f574a38ebe9 [ 447.461221][T14288] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 447.461233][T14288] RBP: 00007f574b2ad090 R08: 0000000000000000 R09: 0000000000000000 [ 447.461244][T14288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 447.461256][T14288] R13: 00007f574a5b6038 R14: 00007f574a5b5fa0 R15: 00007fff8195bc68 [ 447.461289][T14288] [ 447.857585][T14300] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2805'. [ 447.938785][T14302] netlink: 'syz.0.2806': attribute type 3 has an invalid length. [ 447.958413][T14302] netlink: 'syz.0.2806': attribute type 4 has an invalid length. [ 447.967042][T14302] netlink: 'syz.0.2806': attribute type 5 has an invalid length. [ 447.976505][T14302] netlink: 'syz.0.2806': attribute type 6 has an invalid length. [ 447.984543][T14302] netlink: 'syz.0.2806': attribute type 7 has an invalid length. [ 447.994554][T14302] netlink: 'syz.0.2806': attribute type 7 has an invalid length. [ 448.002673][T14302] netlink: 13014 bytes leftover after parsing attributes in process `syz.0.2806'. [ 448.018612][T14302] siw: device registration error -23 [ 448.282669][T14316] netlink: 'syz.1.2810': attribute type 10 has an invalid length. [ 448.355721][T14316] team0: Device ipvlan1 failed to register rx_handler [ 449.022415][T14339] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2820'. [ 449.489064][T14348] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2824'. [ 449.539566][T14348] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2824'. [ 450.105392][T14364] netlink: 'syz.3.2830': attribute type 1 has an invalid length. [ 450.456191][T14394] netlink: 'syz.0.2840': attribute type 10 has an invalid length. [ 450.480617][T14394] bridge0: port 1(macsec0) entered blocking state [ 450.497995][T14394] bridge0: port 1(macsec0) entered disabled state [ 450.528669][T14394] macsec0: entered allmulticast mode [ 450.553317][T14394] veth1_macvtap: entered allmulticast mode [ 450.592055][T14394] macsec0: entered promiscuous mode [ 450.610203][T14394] bridge0: port 1(macsec0) entered blocking state [ 450.617140][T14394] bridge0: port 1(macsec0) entered forwarding state [ 452.793201][T14456] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2869'. [ 453.519794][T14475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2874'. [ 453.605111][ T5882] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 453.615424][ T5882] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 453.624575][ T5882] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 453.633580][ T5882] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 453.647445][ T5882] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 454.436536][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.681448][T14479] wg0 speed is unknown, defaulting to 1000 [ 454.833413][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.921226][T14479] lo speed is unknown, defaulting to 1000 [ 455.163461][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.786350][ T5880] Bluetooth: hci5: command tx timeout [ 456.897876][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.903724][T14530] FAULT_INJECTION: forcing a failure. [ 456.903724][T14530] name failslab, interval 1, probability 0, space 0, times 0 [ 456.921638][T14530] CPU: 1 UID: 0 PID: 14530 Comm: syz.0.2893 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 456.921665][T14530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 456.921677][T14530] Call Trace: [ 456.921686][T14530] [ 456.921694][T14530] dump_stack_lvl+0x189/0x250 [ 456.921723][T14530] ? __pfx____ratelimit+0x10/0x10 [ 456.921748][T14530] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.921771][T14530] ? __pfx__printk+0x10/0x10 [ 456.921806][T14530] ? ref_tracker_alloc+0x318/0x460 [ 456.921837][T14530] should_fail_ex+0x414/0x560 [ 456.921867][T14530] should_failslab+0xa8/0x100 [ 456.921907][T14530] kmem_cache_alloc_noprof+0x73/0x3c0 [ 456.921936][T14530] ? skb_clone+0x212/0x3a0 [ 456.921964][T14530] skb_clone+0x212/0x3a0 [ 456.921989][T14530] __netlink_deliver_tap+0x404/0x850 [ 456.922031][T14530] ? netlink_deliver_tap+0x2e/0x1b0 [ 456.922058][T14530] netlink_deliver_tap+0x19c/0x1b0 [ 456.922085][T14530] __netlink_sendskb+0x47/0x90 [ 456.922110][T14530] netlink_dump+0xa84/0xe90 [ 456.922152][T14530] ? __pfx_netlink_dump+0x10/0x10 [ 456.922177][T14530] ? ctnetlink_alloc_filter+0x79f/0xb20 [ 456.922218][T14530] ? netlink_lookup+0x30/0x200 [ 456.922247][T14530] ? ctnetlink_start+0x152/0x1b0 [ 456.922271][T14530] __netlink_dump_start+0x5cb/0x7e0 [ 456.922307][T14530] ctnetlink_get_conntrack+0x1e5/0x770 [ 456.922337][T14530] ? __pfx_ctnetlink_get_conntrack+0x10/0x10 [ 456.922363][T14530] ? __pfx___mutex_lock+0x10/0x10 [ 456.922391][T14530] ? __pfx_ctnetlink_start+0x10/0x10 [ 456.922408][T14530] ? __pfx_ctnetlink_dump_table+0x10/0x10 [ 456.922426][T14530] ? __pfx_ctnetlink_done+0x10/0x10 [ 456.922465][T14530] nfnetlink_rcv_msg+0xb4d/0x1130 [ 456.922489][T14530] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 456.922537][T14530] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 456.922557][T14530] ? kasan_save_free_info+0x46/0x50 [ 456.922640][T14530] netlink_rcv_skb+0x208/0x470 [ 456.922667][T14530] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 456.922692][T14530] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 456.922734][T14530] ? bpf_lsm_capable+0x9/0x20 [ 456.922756][T14530] ? security_capable+0x7e/0x2e0 [ 456.922792][T14530] nfnetlink_rcv+0x26a/0x2520 [ 456.922821][T14530] ? __dev_queue_xmit+0x1d79/0x3b50 [ 456.922856][T14530] ? __dev_queue_xmit+0x27b/0x3b50 [ 456.922895][T14530] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 456.922923][T14530] ? __pfx___dev_queue_xmit+0x10/0x10 [ 456.922964][T14530] ? ref_tracker_free+0x63a/0x7d0 [ 456.922989][T14530] ? __asan_memcpy+0x40/0x70 [ 456.923010][T14530] ? __pfx_ref_tracker_free+0x10/0x10 [ 456.923032][T14530] ? __skb_clone+0x63/0x7a0 [ 456.923059][T14530] ? __skb_clone+0x483/0x7a0 [ 456.923089][T14530] ? skb_clone+0x246/0x3a0 [ 456.923113][T14530] ? __netlink_deliver_tap+0x807/0x850 [ 456.923139][T14530] ? netlink_deliver_tap+0x2e/0x1b0 [ 456.923173][T14530] ? netlink_deliver_tap+0x2e/0x1b0 [ 456.923210][T14530] netlink_unicast+0x82c/0x9e0 [ 456.923247][T14530] ? __pfx_netlink_unicast+0x10/0x10 [ 456.923274][T14530] ? netlink_sendmsg+0x642/0xb30 [ 456.923300][T14530] ? skb_put+0x11b/0x210 [ 456.923332][T14530] netlink_sendmsg+0x805/0xb30 [ 456.923371][T14530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.923401][T14530] ? aa_sock_msg_perm+0xf1/0x1d0 [ 456.923432][T14530] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 456.923451][T14530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.923478][T14530] __sock_sendmsg+0x21c/0x270 [ 456.923507][T14530] ____sys_sendmsg+0x505/0x830 [ 456.923535][T14530] ? __pfx_____sys_sendmsg+0x10/0x10 [ 456.923569][T14530] ? import_iovec+0x74/0xa0 [ 456.923596][T14530] ___sys_sendmsg+0x21f/0x2a0 [ 456.923620][T14530] ? __pfx____sys_sendmsg+0x10/0x10 [ 456.923690][T14530] ? __fget_files+0x2a/0x420 [ 456.923706][T14530] ? __fget_files+0x3a0/0x420 [ 456.923736][T14530] __x64_sys_sendmsg+0x19b/0x260 [ 456.923759][T14530] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 456.923804][T14530] ? __pfx_ksys_write+0x10/0x10 [ 456.923824][T14530] ? rcu_is_watching+0x15/0xb0 [ 456.923851][T14530] ? do_syscall_64+0xbe/0x3b0 [ 456.923882][T14530] do_syscall_64+0xfa/0x3b0 [ 456.923902][T14530] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.923929][T14530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.923946][T14530] ? clear_bhb_loop+0x60/0xb0 [ 456.923969][T14530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.923984][T14530] RIP: 0033:0x7f2c91f8ebe9 [ 456.924002][T14530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.924017][T14530] RSP: 002b:00007f2c901f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.924037][T14530] RAX: ffffffffffffffda RBX: 00007f2c921b5fa0 RCX: 00007f2c91f8ebe9 [ 456.924051][T14530] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 456.924063][T14530] RBP: 00007f2c901f6090 R08: 0000000000000000 R09: 0000000000000000 [ 456.924075][T14530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.924086][T14530] R13: 00007f2c921b6038 R14: 00007f2c921b5fa0 R15: 00007ffd76694008 [ 456.924125][T14530] [ 457.696115][T14479] chnl_net:caif_netlink_parms(): no params data found [ 457.833126][ T5882] Bluetooth: hci5: command tx timeout [ 457.903318][T14547] netlink: 'syz.0.2900': attribute type 21 has an invalid length. [ 457.911269][T14547] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2900'. [ 458.207938][T14570] netlink: 'syz.2.2907': attribute type 10 has an invalid length. [ 458.235001][T14479] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.235290][T14565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2905'. [ 458.251346][T14479] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.251829][T14479] bridge_slave_0: entered allmulticast mode [ 458.271198][T14479] bridge_slave_0: entered promiscuous mode [ 458.299507][T14565] netlink: 496 bytes leftover after parsing attributes in process `syz.1.2905'. [ 458.340774][T14565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2905'. [ 458.356327][T14565] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2905'. [ 458.520782][ T13] ip6gretap0: left allmulticast mode [ 458.546763][ T13] ip6gretap0: left promiscuous mode [ 458.568215][ T13] bridge0: port 3(ip6gretap0) entered disabled state [ 458.581166][ T13] bridge_slave_1: left allmulticast mode [ 458.591168][ T13] bridge_slave_1: left promiscuous mode [ 458.597868][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.623762][ T13] gretap0: left allmulticast mode [ 458.630127][ T13] gretap0: left promiscuous mode [ 458.636187][ T13] GPL: port 1(gretap0) entered disabled state [ 458.849003][T14583] netlink: 'syz.1.2910': attribute type 1 has an invalid length. [ 458.891555][T14583] netlink: 'syz.1.2910': attribute type 2 has an invalid length. [ 459.105269][T14596] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2915'. [ 459.113014][T14595] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2915'. [ 459.149615][T14600] netlink: 'syz.1.2916': attribute type 1 has an invalid length. [ 459.157872][T14600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2916'. [ 459.168834][ T13] team0: Port device geneve1 removed [ 459.201134][ T13] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 459.427419][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.447514][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.458250][ T13] bond0 (unregistering): Released all slaves [ 459.475507][T14479] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.483906][T14479] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.491518][T14479] bridge_slave_1: entered allmulticast mode [ 459.498868][T14479] bridge_slave_1: entered promiscuous mode [ 459.616767][ T13] : left promiscuous mode [ 459.752032][T14479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.808207][T14602] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2917'. [ 459.823325][T14611] netlink: 'syz.2.2920': attribute type 1 has an invalid length. [ 459.864428][T14479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.909252][ T5882] Bluetooth: hci5: command tx timeout [ 460.060584][T14479] team0: Port device team_slave_0 added [ 460.080650][T14479] team0: Port device team_slave_1 added [ 460.186310][T14623] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2925'. [ 460.217862][T14627] FAULT_INJECTION: forcing a failure. [ 460.217862][T14627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.240487][T14627] CPU: 0 UID: 0 PID: 14627 Comm: syz.4.2926 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 460.240517][T14627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 460.240529][T14627] Call Trace: [ 460.240538][T14627] [ 460.240547][T14627] dump_stack_lvl+0x189/0x250 [ 460.240574][T14627] ? __pfx____ratelimit+0x10/0x10 [ 460.240600][T14627] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.240622][T14627] ? __pfx__printk+0x10/0x10 [ 460.240646][T14627] ? __might_fault+0xb0/0x130 [ 460.240674][T14627] ? __might_fault+0xb0/0x130 [ 460.240706][T14627] should_fail_ex+0x414/0x560 [ 460.240744][T14627] _copy_from_user+0x2d/0xb0 [ 460.240767][T14627] ___sys_sendmsg+0x158/0x2a0 [ 460.240792][T14627] ? __pfx____sys_sendmsg+0x10/0x10 [ 460.240838][T14627] ? __fget_files+0x2a/0x420 [ 460.240879][T14627] ? __fget_files+0x2a/0x420 [ 460.240893][T14627] ? __fget_files+0x3a0/0x420 [ 460.240919][T14627] __x64_sys_sendmsg+0x19b/0x260 [ 460.240941][T14627] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 460.240972][T14627] ? __pfx_ksys_write+0x10/0x10 [ 460.240991][T14627] ? rcu_is_watching+0x15/0xb0 [ 460.241016][T14627] ? do_syscall_64+0xbe/0x3b0 [ 460.241045][T14627] do_syscall_64+0xfa/0x3b0 [ 460.241078][T14627] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.241101][T14627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.241120][T14627] ? clear_bhb_loop+0x60/0xb0 [ 460.241144][T14627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.241162][T14627] RIP: 0033:0x7f37f298ebe9 [ 460.241180][T14627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.241196][T14627] RSP: 002b:00007f37f3747038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.241215][T14627] RAX: ffffffffffffffda RBX: 00007f37f2bb6090 RCX: 00007f37f298ebe9 [ 460.241230][T14627] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 460.241242][T14627] RBP: 00007f37f3747090 R08: 0000000000000000 R09: 0000000000000000 [ 460.241254][T14627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.241265][T14627] R13: 00007f37f2bb6128 R14: 00007f37f2bb6090 R15: 00007ffd9bf9f148 [ 460.241300][T14627] [ 460.512200][T14479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.527708][T14479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.557799][T14479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.570470][T14633] IPv6: Can't replace route, no match found [ 460.617324][T14479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.624811][T14479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.656036][T14479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.811764][T14479] hsr_slave_0: entered promiscuous mode [ 460.824542][T14479] hsr_slave_1: entered promiscuous mode [ 460.835189][T14479] debugfs: 'hsr0' already exists in 'hsr' [ 460.842680][T14479] Cannot create hsr debugfs directory [ 460.933835][ T13] hsr_slave_0: left promiscuous mode [ 460.945796][ T13] hsr_slave_1: left promiscuous mode [ 460.953285][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.974210][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.010847][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.023901][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.113214][ T13] veth1_macvtap: left promiscuous mode [ 461.127341][ T13] veth0_macvtap: left promiscuous mode [ 461.149338][ T13] veth1_vlan: left promiscuous mode [ 461.165111][ T13] veth0_vlan: left promiscuous mode [ 461.638978][T14665] netlink: 'syz.4.2939': attribute type 10 has an invalid length. [ 461.990676][ T5882] Bluetooth: hci5: command tx timeout [ 462.424106][ T13] team0 (unregistering): Port device team_slave_1 removed [ 462.468146][ T13] team0 (unregistering): Port device C removed [ 463.163488][T14683] netlink: 'syz.0.2944': attribute type 1 has an invalid length. [ 463.817200][T14676] wg0 speed is unknown, defaulting to 1000 [ 463.892710][T14676] lo speed is unknown, defaulting to 1000 [ 464.178965][T14713] __nla_validate_parse: 6 callbacks suppressed [ 464.178987][T14713] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2953'. [ 464.202105][T14713] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2953'. [ 464.405871][T14479] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 464.427711][T14479] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 464.496994][T14479] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 464.540702][T14479] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 464.745737][T14724] netlink: 'syz.1.2959': attribute type 39 has an invalid length. [ 465.371117][T14479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.475380][T14479] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.519905][T14754] netlink: 'syz.0.2969': attribute type 21 has an invalid length. [ 465.533149][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.540381][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.559859][T14754] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2969'. [ 465.660173][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.668446][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.855879][T14767] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2971'. [ 465.999375][T14766] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2971'. [ 466.008982][T14767] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2971'. [ 466.414886][T14479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.544357][T14799] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2982'. [ 466.665979][T14479] veth0_vlan: entered promiscuous mode [ 466.688978][T14479] veth1_vlan: entered promiscuous mode [ 466.758765][T14479] veth0_macvtap: entered promiscuous mode [ 466.777219][T14479] veth1_macvtap: entered promiscuous mode [ 466.828898][T14479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.855635][T14479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.935047][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.009521][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.051979][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.096192][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.315561][T14813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2987'. [ 467.326240][T14813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.437198][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.507028][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.519134][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.537267][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.778547][T14832] sit0: entered allmulticast mode [ 467.798824][T14832] sit0: entered promiscuous mode [ 467.900914][T14836] netlink: 'syz.4.2994': attribute type 2 has an invalid length. [ 467.932460][T14836] FAULT_INJECTION: forcing a failure. [ 467.932460][T14836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.932967][T14836] [ 467.932976][T14836] ====================================================== [ 467.932983][T14836] WARNING: possible circular locking dependency detected [ 467.933004][T14836] 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 Not tainted [ 467.933015][T14836] ------------------------------------------------------ [ 467.933022][T14836] syz.4.2994/14836 is trying to acquire lock: [ 467.933032][T14836] ffffffff8e12e120 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 467.933080][T14836] [ 467.933080][T14836] but task is already holding lock: [ 467.933086][T14836] ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 467.933131][T14836] [ 467.933131][T14836] which lock already depends on the new lock. [ 467.933131][T14836] [ 467.933138][T14836] [ 467.933138][T14836] the existing dependency chain (in reverse order) is: [ 467.933145][T14836] [ 467.933145][T14836] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 467.933168][T14836] lock_acquire+0x120/0x360 [ 467.933190][T14836] _raw_spin_lock_nested+0x32/0x50 [ 467.933211][T14836] raw_spin_rq_lock_nested+0x2a/0x140 [ 467.933234][T14836] task_rq_lock+0xbc/0x470 [ 467.933256][T14836] cgroup_move_task+0x92/0x2a0 [ 467.933272][T14836] css_set_move_task+0x658/0x9e0 [ 467.933290][T14836] cgroup_post_fork+0x1ef/0x790 [ 467.933307][T14836] copy_process+0x3862/0x3c00 [ 467.933324][T14836] kernel_clone+0x21e/0x840 [ 467.933341][T14836] user_mode_thread+0xdd/0x140 [ 467.933359][T14836] rest_init+0x23/0x300 [ 467.933373][T14836] start_kernel+0x3a9/0x410 [ 467.933389][T14836] x86_64_start_reservations+0x24/0x30 [ 467.933409][T14836] x86_64_start_kernel+0x143/0x1c0 [ 467.933429][T14836] common_startup_64+0x13e/0x147 [ 467.933450][T14836] [ 467.933450][T14836] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 467.933474][T14836] lock_acquire+0x120/0x360 [ 467.933495][T14836] _raw_spin_lock_irqsave+0xa7/0xf0 [ 467.933514][T14836] try_to_wake_up+0x67/0x12b0 [ 467.933538][T14836] __wake_up_common_lock+0x134/0x1f0 [ 467.933558][T14836] tty_port_default_wakeup+0xa2/0xf0 [ 467.933576][T14836] serial8250_tx_chars+0x72e/0x970 [ 467.933598][T14836] serial8250_handle_irq+0x633/0xbb0 [ 467.933621][T14836] serial8250_default_handle_irq+0xbf/0x1e0 [ 467.933640][T14836] serial8250_interrupt+0x8a/0x160 [ 467.933659][T14836] __handle_irq_event_percpu+0x28c/0x980 [ 467.933680][T14836] handle_irq_event+0x8b/0x1e0 [ 467.933698][T14836] handle_edge_irq+0x23b/0xa10 [ 467.933715][T14836] __common_interrupt+0x141/0x1f0 [ 467.933738][T14836] common_interrupt+0xb6/0xe0 [ 467.933754][T14836] asm_common_interrupt+0x26/0x40 [ 467.933771][T14836] pv_native_safe_halt+0x13/0x20 [ 467.933790][T14836] default_idle+0x13/0x20 [ 467.933812][T14836] default_idle_call+0x74/0xb0 [ 467.933827][T14836] do_idle+0x1e8/0x510 [ 467.933841][T14836] cpu_startup_entry+0x44/0x60 [ 467.933856][T14836] rest_init+0x2de/0x300 [ 467.933871][T14836] start_kernel+0x3a9/0x410 [ 467.933886][T14836] x86_64_start_reservations+0x24/0x30 [ 467.933906][T14836] x86_64_start_kernel+0x143/0x1c0 [ 467.933926][T14836] common_startup_64+0x13e/0x147 [ 467.933946][T14836] [ 467.933946][T14836] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 467.933970][T14836] lock_acquire+0x120/0x360 [ 467.933991][T14836] _raw_spin_lock_irqsave+0xa7/0xf0 [ 467.934010][T14836] __wake_up_common_lock+0x2f/0x1f0 [ 467.934029][T14836] tty_port_default_wakeup+0xa2/0xf0 [ 467.934045][T14836] serial8250_tx_chars+0x72e/0x970 [ 467.934068][T14836] serial8250_handle_irq+0x633/0xbb0 [ 467.934091][T14836] serial8250_default_handle_irq+0xbf/0x1e0 [ 467.934108][T14836] serial8250_interrupt+0x8a/0x160 [ 467.934128][T14836] __handle_irq_event_percpu+0x28c/0x980 [ 467.934147][T14836] handle_irq_event+0x8b/0x1e0 [ 467.934165][T14836] handle_edge_irq+0x23b/0xa10 [ 467.934181][T14836] __common_interrupt+0x141/0x1f0 [ 467.934203][T14836] common_interrupt+0xb6/0xe0 [ 467.934219][T14836] asm_common_interrupt+0x26/0x40 [ 467.934234][T14836] pv_native_safe_halt+0x13/0x20 [ 467.934253][T14836] default_idle+0x13/0x20 [ 467.934275][T14836] default_idle_call+0x74/0xb0 [ 467.934289][T14836] do_idle+0x1e8/0x510 [ 467.934303][T14836] cpu_startup_entry+0x44/0x60 [ 467.934318][T14836] rest_init+0x2de/0x300 [ 467.934333][T14836] start_kernel+0x3a9/0x410 [ 467.934347][T14836] x86_64_start_reservations+0x24/0x30 [ 467.934367][T14836] x86_64_start_kernel+0x143/0x1c0 [ 467.934387][T14836] common_startup_64+0x13e/0x147 [ 467.934407][T14836] [ 467.934407][T14836] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 467.934430][T14836] lock_acquire+0x120/0x360 [ 467.934451][T14836] _raw_spin_lock_irqsave+0xa7/0xf0 [ 467.934470][T14836] serial8250_console_write+0x17e/0x1ba0 [ 467.934486][T14836] console_flush_all+0x728/0xc40 [ 467.934504][T14836] console_unlock+0xc4/0x270 [ 467.934520][T14836] vprintk_emit+0x5b7/0x7a0 [ 467.934544][T14836] _printk+0xcf/0x120 [ 467.934564][T14836] register_console+0xa8b/0xf90 [ 467.934582][T14836] univ8250_console_init+0x3a/0x70 [ 467.934602][T14836] console_init+0x10e/0x430 [ 467.934620][T14836] start_kernel+0x254/0x410 [ 467.934635][T14836] x86_64_start_reservations+0x24/0x30 [ 467.934655][T14836] x86_64_start_kernel+0x143/0x1c0 [ 467.934674][T14836] common_startup_64+0x13e/0x147 [ 467.934695][T14836] [ 467.934695][T14836] -> #0 (console_owner){-.-.}-{0:0}: [ 467.934717][T14836] validate_chain+0xb9b/0x2140 [ 467.934733][T14836] __lock_acquire+0xab9/0xd20 [ 467.934754][T14836] lock_acquire+0x120/0x360 [ 467.934775][T14836] console_flush_all+0x6d2/0xc40 [ 467.934793][T14836] console_unlock+0xc4/0x270 [ 467.934809][T14836] vprintk_emit+0x5b7/0x7a0 [ 467.934825][T14836] _printk+0xcf/0x120 [ 467.934844][T14836] should_fail_ex+0x3f5/0x560 [ 467.934864][T14836] strncpy_from_user+0x36/0x290 [ 467.934882][T14836] strncpy_from_user_nofault+0x72/0x150 [ 467.934902][T14836] bpf_probe_read_compat_str+0xe2/0x180 [ 467.934918][T14836] bpf_prog_07ce70d87944ebe7+0x44/0x4f [ 467.934932][T14836] bpf_trace_run2+0x284/0x4b0 [ 467.934951][T14836] __bpf_trace_tlb_flush+0xf5/0x150 [ 467.934972][T14836] __traceiter_tlb_flush+0x79/0xd0 [ 467.934992][T14836] trace_tlb_flush+0x115/0x140 [ 467.935012][T14836] switch_mm_irqs_off+0x53e/0x7a0 [ 467.935032][T14836] __schedule+0x110e/0x4cc0 [ 467.935050][T14836] preempt_schedule_common+0x83/0xd0 [ 467.935070][T14836] preempt_schedule+0xae/0xc0 [ 467.935088][T14836] preempt_schedule_thunk+0x16/0x30 [ 467.935112][T14836] __mutex_lock+0x349/0x1360 [ 467.935132][T14836] pcpu_alloc_noprof+0x286/0x16b0 [ 467.935155][T14836] ovs_dp_cmd_new+0x2c1/0xaf0 [ 467.935175][T14836] genl_family_rcv_msg_doit+0x215/0x300 [ 467.935194][T14836] genl_rcv_msg+0x60e/0x790 [ 467.935210][T14836] netlink_rcv_skb+0x208/0x470 [ 467.935231][T14836] genl_rcv+0x28/0x40 [ 467.935246][T14836] netlink_unicast+0x82c/0x9e0 [ 467.935265][T14836] netlink_sendmsg+0x805/0xb30 [ 467.935286][T14836] __sock_sendmsg+0x21c/0x270 [ 467.935304][T14836] ____sys_sendmsg+0x505/0x830 [ 467.935319][T14836] ___sys_sendmsg+0x21f/0x2a0 [ 467.935334][T14836] __x64_sys_sendmsg+0x19b/0x260 [ 467.935349][T14836] do_syscall_64+0xfa/0x3b0 [ 467.935371][T14836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.935387][T14836] [ 467.935387][T14836] other info that might help us debug this: [ 467.935387][T14836] [ 467.935394][T14836] Chain exists of: [ 467.935394][T14836] console_owner --> &p->pi_lock --> &rq->__lock [ 467.935394][T14836] [ 467.935421][T14836] Possible unsafe locking scenario: [ 467.935421][T14836] [ 467.935428][T14836] CPU0 CPU1 [ 467.935434][T14836] ---- ---- [ 467.935440][T14836] lock(&rq->__lock); [ 467.935452][T14836] lock(&p->pi_lock); [ 467.935464][T14836] lock(&rq->__lock); [ 467.935478][T14836] lock(console_owner); [ 467.935489][T14836] [ 467.935489][T14836] *** DEADLOCK *** [ 467.935489][T14836] [ 467.935495][T14836] 6 locks held by syz.4.2994/14836: [ 467.935505][T14836] #0: ffffffff8f59d2f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 467.935552][T14836] #1: ffffffff8e21e5e8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x16b0 [ 467.935599][T14836] #2: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 467.935645][T14836] #3: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x186/0x4b0 [ 467.935688][T14836] #4: ffffffff8e12e180 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 467.935732][T14836] #5: ffffffff8e015a50 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 467.935775][T14836] [ 467.935775][T14836] stack backtrace: [ 467.935785][T14836] CPU: 1 UID: 0 PID: 14836 Comm: syz.4.2994 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 467.935806][T14836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 467.935817][T14836] Call Trace: [ 467.935825][T14836] [ 467.935833][T14836] dump_stack_lvl+0x189/0x250 [ 467.935854][T14836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 467.935874][T14836] ? __pfx__printk+0x10/0x10 [ 467.935897][T14836] ? print_lock_name+0xde/0x100 [ 467.935920][T14836] print_circular_bug+0x2ee/0x310 [ 467.935941][T14836] check_noncircular+0x134/0x160 [ 467.935962][T14836] validate_chain+0xb9b/0x2140 [ 467.935990][T14836] __lock_acquire+0xab9/0xd20 [ 467.936016][T14836] ? console_flush_all+0x13a/0xc40 [ 467.936035][T14836] lock_acquire+0x120/0x360 [ 467.936057][T14836] ? console_flush_all+0x13a/0xc40 [ 467.936080][T14836] ? do_raw_spin_unlock+0x122/0x240 [ 467.936100][T14836] ? console_flush_all+0x13a/0xc40 [ 467.936121][T14836] console_flush_all+0x6d2/0xc40 [ 467.936140][T14836] ? console_flush_all+0x13a/0xc40 [ 467.936161][T14836] ? console_flush_all+0x13a/0xc40 [ 467.936183][T14836] ? __pfx_console_flush_all+0x10/0x10 [ 467.936208][T14836] ? is_printk_cpu_sync_owner+0x32/0x40 [ 467.936231][T14836] console_unlock+0xc4/0x270 [ 467.936250][T14836] ? __pfx_console_unlock+0x10/0x10 [ 467.936269][T14836] ? is_printk_cpu_sync_owner+0x32/0x40 [ 467.936292][T14836] vprintk_emit+0x5b7/0x7a0 [ 467.936312][T14836] ? __pfx_vprintk_emit+0x10/0x10 [ 467.936329][T14836] ? trace_page_fault_kernel+0x84/0x1e0 [ 467.936353][T14836] ? __bfs+0x154/0x2a0 [ 467.936368][T14836] ? __pfx_hlock_conflict+0x10/0x10 [ 467.936388][T14836] ? check_path+0x21/0x40 [ 467.936408][T14836] _printk+0xcf/0x120 [ 467.936429][T14836] ? __pfx____ratelimit+0x10/0x10 [ 467.936452][T14836] ? __pfx__printk+0x10/0x10 [ 467.936479][T14836] should_fail_ex+0x3f5/0x560 [ 467.936502][T14836] strncpy_from_user+0x36/0x290 [ 467.936524][T14836] strncpy_from_user_nofault+0x72/0x150 [ 467.936552][T14836] bpf_probe_read_compat_str+0xe2/0x180 [ 467.936571][T14836] bpf_prog_07ce70d87944ebe7+0x44/0x4f [ 467.936587][T14836] bpf_trace_run2+0x284/0x4b0 [ 467.936607][T14836] ? __bfs+0x154/0x2a0 [ 467.936622][T14836] ? bpf_trace_run2+0x186/0x4b0 [ 467.936642][T14836] ? __pfx_bpf_trace_run2+0x10/0x10 [ 467.936666][T14836] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 467.936690][T14836] __bpf_trace_tlb_flush+0xf5/0x150 [ 467.936714][T14836] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 467.936737][T14836] ? __lock_acquire+0xab9/0xd20 [ 467.936763][T14836] ? perf_cgroup_switch+0xe6/0x910 [ 467.936784][T14836] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 467.936806][T14836] __traceiter_tlb_flush+0x79/0xd0 [ 467.936830][T14836] trace_tlb_flush+0x115/0x140 [ 467.936852][T14836] switch_mm_irqs_off+0x53e/0x7a0 [ 467.936876][T14836] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 467.936897][T14836] ? psi_task_switch+0x4e3/0x880 [ 467.936918][T14836] __schedule+0x110e/0x4cc0 [ 467.936949][T14836] ? __pfx___schedule+0x10/0x10 [ 467.936973][T14836] ? irqentry_exit+0x74/0x90 [ 467.936994][T14836] ? lockdep_hardirqs_on+0x9c/0x150 [ 467.937018][T14836] ? preempt_schedule+0xae/0xc0 [ 467.937039][T14836] preempt_schedule_common+0x83/0xd0 [ 467.937060][T14836] preempt_schedule+0xae/0xc0 [ 467.937081][T14836] ? __pfx_preempt_schedule+0x10/0x10 [ 467.937101][T14836] ? __mutex_trylock_common+0x153/0x260 [ 467.937120][T14836] ? __pfx___mutex_trylock_common+0x10/0x10 [ 467.937140][T14836] preempt_schedule_thunk+0x16/0x30 [ 467.937167][T14836] __mutex_lock+0x349/0x1360 [ 467.937190][T14836] ? __pfx_crng_make_state+0x10/0x10 [ 467.937213][T14836] ? pcpu_alloc_noprof+0x286/0x16b0 [ 467.937236][T14836] ? __asan_memset+0x22/0x50 [ 467.937257][T14836] ? __pfx___mutex_lock+0x10/0x10 [ 467.937284][T14836] ? ovs_flow_tbl_init+0x3f8/0x800 [ 467.937304][T14836] pcpu_alloc_noprof+0x286/0x16b0 [ 467.937330][T14836] ? ovs_flow_tbl_init+0x55b/0x800 [ 467.937352][T14836] ovs_dp_cmd_new+0x2c1/0xaf0 [ 467.937377][T14836] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 467.937402][T14836] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 467.937426][T14836] genl_family_rcv_msg_doit+0x215/0x300 [ 467.937448][T14836] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 467.937473][T14836] ? bpf_lsm_capable+0x9/0x20 [ 467.937495][T14836] ? security_capable+0x7e/0x2e0 [ 467.937521][T14836] genl_rcv_msg+0x60e/0x790 [ 467.937548][T14836] ? __pfx_genl_rcv_msg+0x10/0x10 [ 467.937566][T14836] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 467.937588][T14836] ? __asan_memcpy+0x40/0x70 [ 467.937607][T14836] ? __pfx_ref_tracker_free+0x10/0x10 [ 467.937632][T14836] netlink_rcv_skb+0x208/0x470 [ 467.937654][T14836] ? __lock_acquire+0xab9/0xd20 [ 467.937677][T14836] ? __pfx_genl_rcv_msg+0x10/0x10 [ 467.937696][T14836] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 467.937726][T14836] ? down_read+0x1ad/0x2e0 [ 467.937750][T14836] genl_rcv+0x28/0x40 [ 467.937766][T14836] netlink_unicast+0x82c/0x9e0 [ 467.937791][T14836] ? __pfx_netlink_unicast+0x10/0x10 [ 467.937812][T14836] ? netlink_sendmsg+0x642/0xb30 [ 467.937835][T14836] ? skb_put+0x11b/0x210 [ 467.937860][T14836] netlink_sendmsg+0x805/0xb30 [ 467.937887][T14836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.937911][T14836] ? aa_sock_msg_perm+0xf1/0x1d0 [ 467.937938][T14836] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 467.937957][T14836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.937980][T14836] __sock_sendmsg+0x21c/0x270 [ 467.938002][T14836] ____sys_sendmsg+0x505/0x830 [ 467.938021][T14836] ? __pfx_____sys_sendmsg+0x10/0x10 [ 467.938042][T14836] ? import_iovec+0x74/0xa0 [ 467.938063][T14836] ___sys_sendmsg+0x21f/0x2a0 [ 467.938081][T14836] ? __pfx____sys_sendmsg+0x10/0x10 [ 467.938112][T14836] ? __fget_files+0x2a/0x420 [ 467.938127][T14836] ? __fget_files+0x3a0/0x420 [ 467.938146][T14836] __x64_sys_sendmsg+0x19b/0x260 [ 467.938165][T14836] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 467.938186][T14836] ? __pfx_ksys_write+0x10/0x10 [ 467.938207][T14836] ? rcu_is_watching+0x15/0xb0 [ 467.938226][T14836] ? do_syscall_64+0xbe/0x3b0 [ 467.938250][T14836] do_syscall_64+0xfa/0x3b0 [ 467.938272][T14836] ? lockdep_hardirqs_on+0x9c/0x150 [ 467.938293][T14836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.938310][T14836] ? clear_bhb_loop+0x60/0xb0 [ 467.938330][T14836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.938347][T14836] RIP: 0033:0x7f37f298ebe9 [ 467.938361][T14836] Code: Unable to access opcode bytes at 0x7f37f298ebbf. [ 467.938370][T14836] RSP: 002b:00007f37f3768038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.938388][T14836] RAX: ffffffffffffffda RBX: 00007f37f2bb5fa0 RCX: 00007f37f298ebe9 [ 467.938402][T14836] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003 [ 467.938414][T14836] RBP: 00007f37f3768090 R08: 0000000000000000 R09: 0000000000000000 [ 467.938426][T14836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 467.938437][T14836] R13: 00007f37f2bb6038 R14: 00007f37f2bb5fa0 R15: 00007ffd9bf9f148 [ 467.938458][T14836] [ 469.495942][T14836] CPU: 1 UID: 0 PID: 14836 Comm: syz.4.2994 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 469.495960][T14836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 469.495967][T14836] Call Trace: [ 469.495974][T14836] [ 469.495981][T14836] dump_stack_lvl+0x189/0x250 [ 469.495997][T14836] ? __pfx____ratelimit+0x10/0x10 [ 469.496011][T14836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.496022][T14836] ? __pfx__printk+0x10/0x10 [ 469.496038][T14836] should_fail_ex+0x414/0x560 [ 469.496052][T14836] strncpy_from_user+0x36/0x290 [ 469.496065][T14836] strncpy_from_user_nofault+0x72/0x150 [ 469.496078][T14836] bpf_probe_read_compat_str+0xe2/0x180 [ 469.496090][T14836] bpf_prog_07ce70d87944ebe7+0x44/0x4f [ 469.496099][T14836] bpf_trace_run2+0x284/0x4b0 [ 469.496112][T14836] ? __bfs+0x154/0x2a0 [ 469.496120][T14836] ? bpf_trace_run2+0x186/0x4b0 [ 469.496132][T14836] ? __pfx_bpf_trace_run2+0x10/0x10 [ 469.496145][T14836] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 469.496159][T14836] __bpf_trace_tlb_flush+0xf5/0x150 [ 469.496179][T14836] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 469.496192][T14836] ? __lock_acquire+0xab9/0xd20 [ 469.496206][T14836] ? perf_cgroup_switch+0xe6/0x910 [ 469.496219][T14836] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 469.496232][T14836] __traceiter_tlb_flush+0x79/0xd0 [ 469.496245][T14836] trace_tlb_flush+0x115/0x140 [ 469.496259][T14836] switch_mm_irqs_off+0x53e/0x7a0 [ 469.496272][T14836] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 469.496284][T14836] ? psi_task_switch+0x4e3/0x880 [ 469.496296][T14836] __schedule+0x110e/0x4cc0 [ 469.496314][T14836] ? __pfx___schedule+0x10/0x10 [ 469.496327][T14836] ? irqentry_exit+0x74/0x90 [ 469.496340][T14836] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.496358][T14836] ? preempt_schedule+0xae/0xc0 [ 469.496370][T14836] preempt_schedule_common+0x83/0xd0 [ 469.496383][T14836] preempt_schedule+0xae/0xc0 [ 469.496394][T14836] ? __pfx_preempt_schedule+0x10/0x10 [ 469.496405][T14836] ? __mutex_trylock_common+0x153/0x260 [ 469.496416][T14836] ? __pfx___mutex_trylock_common+0x10/0x10 [ 469.496427][T14836] preempt_schedule_thunk+0x16/0x30 [ 469.496446][T14836] __mutex_lock+0x349/0x1360 [ 469.496460][T14836] ? __pfx_crng_make_state+0x10/0x10 [ 469.496476][T14836] ? pcpu_alloc_noprof+0x286/0x16b0 [ 469.496490][T14836] ? __asan_memset+0x22/0x50 [ 469.496502][T14836] ? __pfx___mutex_lock+0x10/0x10 [ 469.496518][T14836] ? ovs_flow_tbl_init+0x3f8/0x800 [ 469.496530][T14836] pcpu_alloc_noprof+0x286/0x16b0 [ 469.496547][T14836] ? ovs_flow_tbl_init+0x55b/0x800 [ 469.496560][T14836] ovs_dp_cmd_new+0x2c1/0xaf0 [ 469.496575][T14836] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 469.496589][T14836] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 469.496603][T14836] genl_family_rcv_msg_doit+0x215/0x300 [ 469.496615][T14836] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 469.496629][T14836] ? bpf_lsm_capable+0x9/0x20 [ 469.496642][T14836] ? security_capable+0x7e/0x2e0 [ 469.496657][T14836] genl_rcv_msg+0x60e/0x790 [ 469.496669][T14836] ? __pfx_genl_rcv_msg+0x10/0x10 [ 469.496679][T14836] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 469.496691][T14836] ? __asan_memcpy+0x40/0x70 [ 469.496701][T14836] ? __pfx_ref_tracker_free+0x10/0x10 [ 469.496716][T14836] netlink_rcv_skb+0x208/0x470 [ 469.496729][T14836] ? __lock_acquire+0xab9/0xd20 [ 469.496742][T14836] ? __pfx_genl_rcv_msg+0x10/0x10 [ 469.496752][T14836] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 469.496769][T14836] ? down_read+0x1ad/0x2e0 [ 469.496783][T14836] genl_rcv+0x28/0x40 [ 469.496793][T14836] netlink_unicast+0x82c/0x9e0 [ 469.496807][T14836] ? __pfx_netlink_unicast+0x10/0x10 [ 469.496818][T14836] ? netlink_sendmsg+0x642/0xb30 [ 469.496831][T14836] ? skb_put+0x11b/0x210 [ 469.496846][T14836] netlink_sendmsg+0x805/0xb30 [ 469.496861][T14836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.496875][T14836] ? aa_sock_msg_perm+0xf1/0x1d0 [ 469.496890][T14836] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 469.496901][T14836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.496914][T14836] __sock_sendmsg+0x21c/0x270 [ 469.496927][T14836] ____sys_sendmsg+0x505/0x830 [ 469.496937][T14836] ? __pfx_____sys_sendmsg+0x10/0x10 [ 469.496949][T14836] ? import_iovec+0x74/0xa0 [ 469.496960][T14836] ___sys_sendmsg+0x21f/0x2a0 [ 469.496970][T14836] ? __pfx____sys_sendmsg+0x10/0x10 [ 469.496986][T14836] ? __fget_files+0x2a/0x420 [ 469.496995][T14836] ? __fget_files+0x3a0/0x420 [ 469.497005][T14836] __x64_sys_sendmsg+0x19b/0x260 [ 469.497015][T14836] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 469.497027][T14836] ? __pfx_ksys_write+0x10/0x10 [ 469.497039][T14836] ? rcu_is_watching+0x15/0xb0 [ 469.497050][T14836] ? do_syscall_64+0xbe/0x3b0 [ 469.497064][T14836] do_syscall_64+0xfa/0x3b0 [ 469.497077][T14836] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.497089][T14836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.497099][T14836] ? clear_bhb_loop+0x60/0xb0 [ 469.497109][T14836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.497119][T14836] RIP: 0033:0x7f37f298ebe9 [ 469.497128][T14836] Code: Unable to access opcode bytes at 0x7f37f298ebbf. [ 469.497134][T14836] RSP: 002b:00007f37f3768038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.497145][T14836] RAX: ffffffffffffffda RBX: 00007f37f2bb5fa0 RCX: 00007f37f298ebe9 [ 469.497153][T14836] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003 [ 469.497160][T14836] RBP: 00007f37f3768090 R08: 0000000000000000 R09: 0000000000000000 [ 469.497167][T14836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 469.497178][T14836] R13: 00007f37f2bb6038 R14: 00007f37f2bb5fa0 R15: 00007ffd9bf9f148 [ 469.497189][T14836] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 470.804678][T11569] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.855792][T11569] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.934188][T11569] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.990224][T11569] bond0: (slave netdevsim0): Releasing backup interface [ 470.999419][T11569] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.074874][T11569] macsec0: left allmulticast mode [ 471.080354][T11569] veth1_macvtap: left allmulticast mode [ 471.085963][T11569] macsec0: left promiscuous mode [ 471.091647][T11569] bridge0: port 1(macsec0) entered disabled state [ 471.099718][T11569] bridge_slave_1: left allmulticast mode [ 471.105356][T11569] bridge_slave_1: left promiscuous mode [ 471.112441][T11569] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.123381][T11569] vlan0: left allmulticast mode [ 471.128284][T11569] veth0_vlan: left allmulticast mode [ 471.133941][T11569] vlan0: left promiscuous mode [ 471.138923][T11569] À: port 1(vlan0) entered disabled state [ 471.313985][T11569] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.323976][T11569] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.334109][T11569] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 471.343049][T11569] veth1_vlan: left allmulticast mode [ 471.349940][T11569] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 471.359562][T11569] bond0 (unregistering): Released all slaves [ 471.655272][T11569] hsr_slave_1: left promiscuous mode [ 471.661039][T11569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.668761][T11569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.677056][T11569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.684746][T11569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.695411][T11569] veth1_macvtap: left promiscuous mode [ 471.701968][T11569] veth0_macvtap: left promiscuous mode [ 471.707954][T11569] veth1_vlan: left promiscuous mode [ 471.714263][T11569] veth0_vlan: left promiscuous mode [ 472.204208][T11569] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.263399][T11569] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.303342][T11569] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.352683][T11569] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.416581][T11569] bridge_slave_1: left allmulticast mode [ 472.422347][T11569] bridge_slave_1: left promiscuous mode [ 472.428525][T11569] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.439450][T11569] bridge_slave_0: left allmulticast mode [ 472.445306][T11569] bridge_slave_0: left promiscuous mode [ 472.451080][T11569] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.461866][T11569] bond_slave_0: left promiscuous mode [ 472.467370][T11569] bond_slave_1: left promiscuous mode [ 472.643793][T11569] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.654186][T11569] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.664346][T11569] bond0 (unregistering): Released all slaves [ 472.725790][T11569] : left promiscuous mode [ 472.975433][T11569] hsr_slave_0: left promiscuous mode [ 472.981258][T11569] hsr_slave_1: left promiscuous mode [ 472.986864][T11569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.994707][T11569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.002764][T11569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.010350][T11569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.019783][T11569] veth1_vlan: left promiscuous mode [ 473.025103][T11569] veth0_vlan: left promiscuous mode [ 473.229396][ T9] infiniband s\z0: ib_query_port failed (-19) [ 473.442008][T11569] ------------[ cut here ]------------ [ 473.447582][T11569] WARNING: CPU: 0 PID: 11569 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x270/0x2f0 [ 473.457570][T11569] Modules linked in: [ 473.461720][T11569] CPU: 0 UID: 0 PID: 11569 Comm: kworker/u8:10 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 473.473715][T11569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 473.483923][T11569] Workqueue: netns cleanup_net [ 473.488708][T11569] RIP: 0010:xfrm_state_fini+0x270/0x2f0 [ 473.494441][T11569] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 78 41 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 56 fe e1 f7 e8 31 d4 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 23 d4 9d f7 90 0f 0b 90 e9 60 fe ff ff [ 473.514505][T11569] RSP: 0018:ffffc9001c957898 EFLAGS: 00010293 [ 473.520718][T11569] RAX: ffffffff8a21d77f RBX: ffff888030850000 RCX: ffff88806d7a1e00 [ 473.528703][T11569] RDX: 0000000000000000 RSI: ffffffff8be33360 RDI: ffff88806d7a1e00 [ 473.537100][T11569] RBP: ffffc9001c9579b0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6 [ 473.545217][T11569] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffffffff8f630aa0 [ 473.553351][T11569] R13: 1ffff9200392af40 R14: ffff888030851480 R15: dffffc0000000000 [ 473.561572][T11569] FS: 0000000000000000(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 473.570828][T11569] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 473.577510][T11569] CR2: 000055c0fb146000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 473.585553][T11569] DR0: 0000000000000000 DR1: 0000000000000082 DR2: 0000000000000000 [ 473.593592][T11569] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 473.601719][T11569] Call Trace: [ 473.605009][T11569] [ 473.608143][T11569] xfrm_net_exit+0x2d/0x70 [ 473.612763][T11569] ops_undo_list+0x497/0x990 [ 473.617478][T11569] ? __pfx_ops_undo_list+0x10/0x10 [ 473.622692][T11569] ? do_raw_spin_unlock+0x122/0x240 [ 473.628002][T11569] cleanup_net+0x4c5/0x800 [ 473.632485][T11569] ? __pfx_cleanup_net+0x10/0x10 [ 473.637453][T11569] ? rcu_is_watching+0x15/0xb0 [ 473.642257][T11569] ? process_scheduled_works+0x9ef/0x17b0 [ 473.648008][T11569] ? process_scheduled_works+0x9ef/0x17b0 [ 473.653793][T11569] process_scheduled_works+0xade/0x17b0 [ 473.659552][T11569] ? __pfx_process_scheduled_works+0x10/0x10 [ 473.665622][T11569] worker_thread+0x8a0/0xda0 [ 473.670401][T11569] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 473.676751][T11569] ? __kthread_parkme+0x7b/0x200 [ 473.681757][T11569] kthread+0x70e/0x8a0 [ 473.686020][T11569] ? __pfx_worker_thread+0x10/0x10 [ 473.691198][T11569] ? __pfx_kthread+0x10/0x10 [ 473.695808][T11569] ? _raw_spin_unlock_irq+0x23/0x50 [ 473.701069][T11569] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.706458][T11569] ? __pfx_kthread+0x10/0x10 [ 473.711100][T11569] ret_from_fork+0x3f9/0x770 [ 473.715698][T11569] ? __pfx_ret_from_fork+0x10/0x10 [ 473.720885][T11569] ? __switch_to_asm+0x39/0x70 [ 473.726038][T11569] ? __switch_to_asm+0x33/0x70 [ 473.730960][T11569] ? __pfx_kthread+0x10/0x10 [ 473.735657][T11569] ret_from_fork_asm+0x1a/0x30 [ 473.740467][T11569] [ 473.743493][T11569] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 473.750941][T11569] CPU: 0 UID: 0 PID: 11569 Comm: kworker/u8:10 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT(full) [ 473.762927][T11569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 473.773092][T11569] Workqueue: netns cleanup_net [ 473.777942][T11569] Call Trace: [ 473.781320][T11569] [ 473.784252][T11569] dump_stack_lvl+0x99/0x250 [ 473.788884][T11569] ? __asan_memcpy+0x40/0x70 [ 473.793474][T11569] ? __pfx_dump_stack_lvl+0x10/0x10 [ 473.798673][T11569] ? __pfx__printk+0x10/0x10 [ 473.803304][T11569] vpanic+0x281/0x750 [ 473.807299][T11569] ? __pfx__printk+0x10/0x10 [ 473.812173][T11569] ? __pfx_vpanic+0x10/0x10 [ 473.816948][T11569] ? is_bpf_text_address+0x292/0x2b0 [ 473.822351][T11569] panic+0xb9/0xc0 [ 473.826188][T11569] ? __pfx_panic+0x10/0x10 [ 473.830609][T11569] __warn+0x31b/0x4b0 [ 473.834583][T11569] ? xfrm_state_fini+0x270/0x2f0 [ 473.839512][T11569] ? xfrm_state_fini+0x270/0x2f0 [ 473.844457][T11569] report_bug+0x2be/0x4f0 [ 473.848781][T11569] ? xfrm_state_fini+0x270/0x2f0 [ 473.853776][T11569] ? xfrm_state_fini+0x270/0x2f0 [ 473.858899][T11569] ? xfrm_state_fini+0x272/0x2f0 [ 473.863826][T11569] handle_bug+0x84/0x160 [ 473.868090][T11569] exc_invalid_op+0x1a/0x50 [ 473.872586][T11569] asm_exc_invalid_op+0x1a/0x20 [ 473.877836][T11569] RIP: 0010:xfrm_state_fini+0x270/0x2f0 [ 473.883633][T11569] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 78 41 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 56 fe e1 f7 e8 31 d4 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 23 d4 9d f7 90 0f 0b 90 e9 60 fe ff ff [ 473.903843][T11569] RSP: 0018:ffffc9001c957898 EFLAGS: 00010293 [ 473.909908][T11569] RAX: ffffffff8a21d77f RBX: ffff888030850000 RCX: ffff88806d7a1e00 [ 473.918141][T11569] RDX: 0000000000000000 RSI: ffffffff8be33360 RDI: ffff88806d7a1e00 [ 473.926125][T11569] RBP: ffffc9001c9579b0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6 [ 473.934088][T11569] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffffffff8f630aa0 [ 473.942053][T11569] R13: 1ffff9200392af40 R14: ffff888030851480 R15: dffffc0000000000 [ 473.950018][T11569] ? xfrm_state_fini+0x26f/0x2f0 [ 473.954950][T11569] ? xfrm_state_fini+0x26f/0x2f0 [ 473.959904][T11569] xfrm_net_exit+0x2d/0x70 [ 473.964401][T11569] ops_undo_list+0x497/0x990 [ 473.968989][T11569] ? __pfx_ops_undo_list+0x10/0x10 [ 473.974096][T11569] ? do_raw_spin_unlock+0x122/0x240 [ 473.979723][T11569] cleanup_net+0x4c5/0x800 [ 473.984137][T11569] ? __pfx_cleanup_net+0x10/0x10 [ 473.989068][T11569] ? rcu_is_watching+0x15/0xb0 [ 473.993822][T11569] ? process_scheduled_works+0x9ef/0x17b0 [ 473.999528][T11569] ? process_scheduled_works+0x9ef/0x17b0 [ 474.005281][T11569] process_scheduled_works+0xade/0x17b0 [ 474.010909][T11569] ? __pfx_process_scheduled_works+0x10/0x10 [ 474.016883][T11569] worker_thread+0x8a0/0xda0 [ 474.021492][T11569] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 474.027899][T11569] ? __kthread_parkme+0x7b/0x200 [ 474.032853][T11569] kthread+0x70e/0x8a0 [ 474.036917][T11569] ? __pfx_worker_thread+0x10/0x10 [ 474.042074][T11569] ? __pfx_kthread+0x10/0x10 [ 474.046747][T11569] ? _raw_spin_unlock_irq+0x23/0x50 [ 474.051941][T11569] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.057228][T11569] ? __pfx_kthread+0x10/0x10 [ 474.062010][T11569] ret_from_fork+0x3f9/0x770 [ 474.066622][T11569] ? __pfx_ret_from_fork+0x10/0x10 [ 474.071732][T11569] ? __switch_to_asm+0x39/0x70 [ 474.076580][T11569] ? __switch_to_asm+0x33/0x70 [ 474.081807][T11569] ? __pfx_kthread+0x10/0x10 [ 474.086473][T11569] ret_from_fork_asm+0x1a/0x30 [ 474.091231][T11569] [ 474.094674][T11569] Kernel Offset: disabled [ 474.099075][T11569] Rebooting in 86400 seconds..