last executing test programs: 2m28.341542241s ago: executing program 2 (id=4114): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 2m27.973395675s ago: executing program 2 (id=4116): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x78, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f0000000180)}, 0xffffffffffffff6e) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00'], 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x101200, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40047451, &(0x7f0000000180)) (fail_nth: 1) 2m26.283605391s ago: executing program 2 (id=4123): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x7e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40084}, 0x10000102) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x20, 0x2, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_SEQ_ADJ_ORIG={0x4}, @CTA_ZONE={0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0xc001}, 0x40000) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x114905, 0x6, 0x9, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000080811098000000000095"], &(0x7f0000000080)='GPL\x00', 0x5}, 0x94) r5 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000140)={r5}) r6 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1efa}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x1}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x10d, &(0x7f0000000240)=""/269, 0xb6df4c32c1d5c814, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet={0x23, 0x9, 0xfc}, 0x80, 0x0}, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x6, &(0x7f0000000740)=r1, 0x4) r9 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x22, &(0x7f0000000a40), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 2m25.483100815s ago: executing program 2 (id=4128): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) (fail_nth: 1) 2m25.091830476s ago: executing program 2 (id=4130): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x10, 0x0, &(0x7f00000005c0)="20040000000000f10e586bda5eb7aa00", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, 0x18, 0x421, 0x70bd28, 0x25dfdbff, {0x1}, [@generic="21cc16bd2ed94979e66ba38fe44cf8bc3764dc027c4efeb2ee58d6"]}, 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000700000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xcc0, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2381, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x886d, 0x0, 0x0, 0x8, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x50}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x28, 0x1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9", 0x0, 0x0, 0x0}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0, 0x7, 0x0, 0x0, 0x1e00}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40003c22) r3 = socket$kcm(0x23, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x4) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000340)=@phonet={0x23, 0x1, 0x8}, 0x80, 0x0}, 0x0) 2m20.608227589s ago: executing program 2 (id=4137): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="98040000160001000000000000000000ff01000000000000000000000000000100000000000000000000ffff000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000000000000000000000000000000300000000000000000000000000000000000000000000ffff000000000000000000000000000000000000f1ffffffffffffff0300000000000000000013aa13000000000000000000000000000000000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000000000000000100000000000000000000000b1a001000c"], 0x498}}, 0x0) (fail_nth: 1) 2m19.909847517s ago: executing program 32 (id=4137): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="98040000160001000000000000000000ff01000000000000000000000000000100000000000000000000ffff000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000000000000000000000000000000300000000000000000000000000000000000000000000ffff000000000000000000000000000000000000f1ffffffffffffff0300000000000000000013aa13000000000000000000000000000000000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000000000000000100000000000000000000000b1a001000c"], 0x498}}, 0x0) (fail_nth: 1) 6.370399995s ago: executing program 3 (id=4632): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000500)={0x2, 0x4e22, @private=0xa010100}, 0xfc45, 0x0, 0x5d}, 0x200408d1) socket$kcm(0x29, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, 0x4, 0x8, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008081}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x80, 0x24, 0xf0b, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x12, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0x2, 0x5}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x16, 0x1, {0x3, 0xd8a6, 0xff, 0x401, 0x1, 0x3, 0x8, 0x29d7, 0x7}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x14, 0x7, 0xfffffffb, 0x1, 0x7ff, 0x2, 0x2}}, {0x8, 0x2, [0x2, 0x5]}}, {{0x0, 0x1, {0x81, 0x8, 0x6, 0x200, 0x2, 0x7, 0xffff}}, {0x0, 0x2, [0x7]}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x14000}, 0x4044010) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) r7 = socket$kcm(0x2, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) recvmsg(r7, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000002c0)=""/34, 0x56}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x5450, r5) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000140)="c3737a0322f2e11a1cac3de523377ed06c33f00d8292a2ecba85a4cd3beb08ce970b2e520a81531f20b9af488997f264d64772691394fd0209f2315e87c0aab53e1399df24ef772328827fbc14a39460df30a2dc6980a3343cb70344a2ee3501e0302fd5f76175dc701a0ca5b33e4538a11fbe60b3b94cb186920722459f86a213c5ac5519b831ee2c619645870e3bc0614659876b1c904d277b1223c9f6f12657ec9b2b7add115b10d9", &(0x7f0000000240)=""/32, 0x4}, 0x20) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018", @ANYRES32=r9, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r10, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x94200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f0000000000)='cpu&\t\t') 6.159413916s ago: executing program 1 (id=4635): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x7e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40084}, 0x10000102) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x20, 0x2, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_SEQ_ADJ_ORIG={0x4}, @CTA_ZONE={0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0xc001}, 0x40000) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x114905, 0x6, 0x9, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000140)={r5}) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1efa}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x1}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x10d, &(0x7f0000000240)=""/269, 0xb6df4c32c1d5c814, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet={0x23, 0x9, 0xfc}, 0x80, 0x0}, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x6, &(0x7f0000000740)=r1, 0x4) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x22, &(0x7f0000000a40), 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x50, 0x1, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x38}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 5.633182387s ago: executing program 0 (id=4643): socket$kcm(0x10, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = getpid() r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000000c0)={r0}) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454ce, 0x11) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xd}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff, 0x55}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000280)=@nfc, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000440)=""/91, 0x5b}, {0x0}, {&(0x7f00000006c0)=""/123, 0x7b}, {&(0x7f0000000740)}, {&(0x7f0000000780)=""/197, 0xc5}, {&(0x7f0000000880)=""/130, 0x82}, {&(0x7f0000000940)=""/131, 0x83}], 0x7, &(0x7f0000000b00)=""/66, 0x42}, 0x40002023) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x1, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0xfe, &(0x7f00000001c0)=[{&(0x7f0000002f40)=ANY=[@ANYBLOB="240600001a0001002abd7000000000000200fc003a2a5e247b00000008"], 0x624}], 0x1, 0x0, 0x0, 0x20400}, 0x0) 5.55818185s ago: executing program 1 (id=4644): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200, 0x2, @perf_bp={0x0, 0xb}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb4}}, 0x0) 5.556443909s ago: executing program 5 (id=4645): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000850000005000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0xa00, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 5.331231251s ago: executing program 3 (id=4646): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8000}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r0, r1}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000300)="2000000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf6", 0x20}], 0x1}, 0x0) 5.130837901s ago: executing program 0 (id=4648): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5.067788377s ago: executing program 1 (id=4649): r0 = syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x2, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x81ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xa1, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f921240685", 0x14}], 0x1}, 0x0) 4.953106763s ago: executing program 5 (id=4650): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) perf_event_open(&(0x7f0000000e00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffef6, 0x4, @perf_bp={0x0, 0x1}, 0xc8a0, 0x6, 0xfffffffe, 0x8, 0xc, 0x475}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000100), 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20000090) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10162) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a1c010000060a010400000000000000000a0000030900010073797a310000000028000480240001800a000100717565756500000014000280060001400008000006000240000000000900020073797a3200000000ba0007"], 0x144}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xba, 0x4}, 0x10fde5, 0x0, 0x0, 0x8, 0x1000007, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRESHEX=r2], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d080420000000020002a1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 4.952047156s ago: executing program 0 (id=4651): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0xa000a, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef4}, 0x11efa, 0x4, 0x98, 0x0, 0x0, 0xbfffe277, 0x5, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8054}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r2) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r7}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x200, 0x70bd27, 0x0, {{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x5, 0x0, 0x3, 0xa, 0x20}, {0x0, 0xae, 0xfff, 0xffffffffffffffff, 0x400, 0x2, 0x7fffffff, 0x10000}, {0x0, 0x6, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@loopback, 0x4d4, 0x3c}, 0x0, @in6=@empty, 0x0, 0x1, 0x2, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r8) r9 = getpid() fstat(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)="e60d", 0x2}], 0x1, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {r9, r10, 0xee00}}}], 0x20, 0x10}, 0x10044001) sendmsg$nl_xfrm(r0, &(0x7f0000000f80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000c80)=@acquire={0x2ac, 0x17, 0x4, 0x70bd2b, 0x25dfdbfd, {{@in6=@dev={0xfe, 0x80, '\x00', 0x43}, 0x4d6, 0x3c}, @in=@multicast2, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@rand_addr=0x64010100, 0x4e24, 0x0, 0x4e23, 0xfff, 0x2, 0x0, 0x0, 0x1d}, {{@in=@dev={0xac, 0x14, 0x14, 0x13}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e20, 0x4, 0x4e24, 0x7ff, 0xa, 0x90, 0x80, 0x1d, 0x0, r10}, {0x2, 0x4e40, 0x6c, 0x4, 0x4, 0x1, 0x3059b362}, {0x94, 0x432, 0x8000000000000000, 0x8025}, 0x3, 0x6e6bba, 0x0, 0x0, 0x2, 0x3}, 0x7, 0x8, 0x0, 0x70bd27}, [@tmpl={0x184, 0x5, [{{@in6=@loopback, 0x4d5, 0x2b}, 0x2, @in=@remote, 0x3507, 0x0, 0x2, 0xf, 0x2e8, 0x0, 0x4}, {{@in6=@remote, 0x4d3, 0x3c}, 0x2, @in=@multicast2, 0x34ff, 0x0, 0x0, 0x16, 0x6, 0x858f}, {{@in=@multicast1, 0x4d4, 0x32}, 0x2, @in=@remote, 0x3504, 0x2, 0x1, 0xd4, 0x5, 0x4, 0x101}, {{@in6=@loopback, 0x4d6, 0x6c}, 0xa, @in=@private=0xa010102, 0x3506, 0x1, 0x0, 0xa9, 0x400, 0x40000000, 0xe937}, {{@in=@loopback, 0x4d3, 0x33}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3505, 0x1, 0x0, 0xd, 0x46cf888b, 0x0, 0x5}, {{@in6=@private0, 0x4d3, 0x93}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x26}, 0x34ff, 0x1, 0x1, 0xda, 0x9, 0xffff8000, 0x5}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x24004004}, 0x4001) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r7}, &(0x7f00000000c0), &(0x7f0000000200)='%+9llu \x00'}, 0x20) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xfffffffffffffffe}, 0x10828, 0x0, 0x0, 0x2, 0x8, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x3f, 0x9, 0x0, 0x0, {0x3}, [@typed={0x4, 0x3ffd}]}, 0x18}}, 0x4004080) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 4.950851266s ago: executing program 3 (id=4652): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000b40)={0x2, 0x0, @private=0xa010102}, 0x10, 0x0}, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0xa) close(r1) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r2}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907003675f37538e486dd6317ce623900fe800000002000e0865a6596aff57b00000000000000000000000000ac"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850020000000000018100000", @ANYRES32, @ANYBLOB="1700000000000000950000000000000045"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000760004000000000027000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 4.819968764s ago: executing program 4 (id=4653): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0xa000a, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x9a, 0x0, 0x2, 0xbfffe277, 0xfffc, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x1, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, 0x0, 0x0, 0xf, 0x0, 0x0, 0x41100, 0x4c}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x0, 0x4e24, 0xfffc, 0x2, 0x0, 0x0, 0x5c}, {0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffd}, {0x800000000000, 0x3, 0x1ffffffffffd, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) 4.796861967s ago: executing program 5 (id=4654): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x7e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40084}, 0x10000102) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x20, 0x2, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_SEQ_ADJ_ORIG={0x4}, @CTA_ZONE={0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0xc001}, 0x40000) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x114905, 0x6, 0x9, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000140)={r5}) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1efa}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x1}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x10d, &(0x7f0000000240)=""/269, 0xb6df4c32c1d5c814, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet={0x23, 0x9, 0xfc}, 0x80, 0x0}, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x6, &(0x7f0000000740)=r1, 0x4) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x22, &(0x7f0000000a40), 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x50, 0x1, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x38}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 4.781466345s ago: executing program 1 (id=4655): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x100000, &(0x7f0000000080)="72306bb6924e89f2edfde5f37e2e0a3dfc1f1ff35a4db6b73d466f6dd1", 0x1d, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000600)="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") sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r1 = socket$key(0xf, 0x3, 0x2) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f00"/151], 0xb4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4c, 0x0, 0x0, 0x0}, 0xfffffe95) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001940)={r5, &(0x7f0000001880), 0x0}, 0x20) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d1d2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a580900000000000000b4f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdfc6ea55887dfa18d0aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b2999600000000f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac23c3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa17bc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b447b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab84213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808f109b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124ba263e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3010975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf3010100007e206a758a3f02816b4e097cfa3d46e45e7949c5b10691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37df95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ef70c8a0121e7e8322cb8bc0f50ad33a17143a29c14ecadd1b6244e31b888d8f3fa03208d3e9a4826a98f31995509015ebdc89f2f3106e54d5898d3758b9bfc9e4924e9cedf7f8fd584e7185703cc5f23741ffb480b5a87cd7efcceb409d354bdab211ebd50ab12b13c1b8ce93093a59a0f952153c2efd10e72ec9ee5fa2a00f9637851ddb81d059f9a363c4ada68dd25f19ee9e4841acee7c1b35ad6f9d54cf4939ce78a55a04e655d7746a3989c6f33b02f8497aacb6bfca7456111900000000000000000048d35af24acb66fdd4d1fb150138f0ee6abfc7049c94346868ed76d3a5df7335184386a5c532d425f1a098ff93efd05e5dd8b765121fbdfe5ef44f6472b939c31883f45889142e82086c2448da60d7a40774d71c2da2e7f6d4fe5d36923213cc7b7d71a1c90006e8f8d84953f284b0eb4366beff5df5595827dcd736e8cfab28cfa416e83c06213ca7fd21af56e3de1d80e77060447e20a8b317a4c06e24e99239824d08abf670a685bc46c8168bee4cfc30cc6d0dc030a592925bad3e0f805f0d4b2b600dc3f0c4c6f75bb4e49982f4198ac90ab77c5572c956d415858bad5ee117b3e5f1507bbd0d7a30388865deb11106a93225a81feb08f5"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r7, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r6, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000ff8400132001000000000000", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.696386746s ago: executing program 3 (id=4656): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x80}]}, &(0x7f0000000080)='GPL\x00', 0x5}, 0x90) r0 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x60, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$kcm(0x2a, 0x2, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0xd, &(0x7f0000000000), 0x8) sendmsg$kcm(r1, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0x4, 0xfffffffe}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000680)={0x1, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001980)={&(0x7f0000000340)="7b427923fa4544a8762c8fd61734385966b67c9406bc408f9be0a866f13fb89b59fe4a1dfe19ef92bbd9208066f45257041ee4121bc243209f78a322344aab9db0ebef0e45f9c67aa38e1ac0d7b3786253ec17bd3631294334f0d91accc7cd01e2031502c0f19fe41d805fecc1b9f85afbd1a67b919d6521da04282d7f52df5e78cc8c50e27f2ce68f4c22e95619dfb5356c3306f029d67827827b03d13c19c214b262dd7b1118f04c754d44fd5bdebd21ecc4e2cade4a55313f941d01a12a554ee54f712c6c55081b3dfbcad6118c3b6fb5c1304aa6928beb40c7aac639942cbd9d90d2", &(0x7f0000000700)=""/4096, &(0x7f0000001700)="b523afb3d131d9d6ec57b20607c895e51120e7c8f5afbef5b471c826b42a1b277a0e16ff23ce26924e5eebe2e8bbf923a6e37fd66ba8e02875c54948d90c12f19bfaa6a79a66cdb2a7e2dbe2ef72aff471817367906f5a64ef4ecb154c89e493f8ce54c5c8c5eed47679f5ba99c0ad3ed7b61c6330755ac0b77452132f8bdf67d5", &(0x7f00000017c0)="da2854beb44f3b818d683918c873b39135b99fd21f9f492b9f197b8c106487418a6cca86570e63a488fedc1912685421b56c8c49c5b47a2127172d8cdcb35dc3b5817a418bc638946f501895e107f6f2c8d667f505fe5a96bd4f5d11f8bfe671ebd3017491055f285e41ab69970ecf113ca93d11cd366ee51b672d171e68f7f2b824e1c5996740ed4fa8397471ed1ca5ca8ea6090d7949512efe06d2b3dc6816979f72e46babb64804a9490358968eace98a98fc31764ba5feea3a66c93bb50349130ff7b871047001", 0x80000000, r0, 0x4}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x20, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x9, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) 4.20799545s ago: executing program 4 (id=4657): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000018c0)=ANY=[@ANYBLOB="1c0000001900e5090008000d8001fed980"], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x10) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x18, 0x3f9, 0x10, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e64000000080002400000000070000000160a0101000b000000000000010000000900020073797a31000000000900010073797a30000000004400038040000380140001007663616e3000000000000000000000001400010076657468315f746f5f626f6e64000000140001"], 0x110}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4.207110098s ago: executing program 0 (id=4658): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x4, 0x1946}, 0x0, 0x10000, 0x4, 0x8, 0x58, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000004800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x50) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket$kcm(0x2, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4040010) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket$kcm(0x2, 0x200000000000003, 0x106) setsockopt$sock_attach_bpf(r1, 0x0, 0xb, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x2e, &(0x7f0000000000)=r2, 0x4) recvmsg$unix(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x10000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x100}) 4.028145543s ago: executing program 5 (id=4659): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200, 0x2, @perf_bp={0x0, 0xb}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb4}}, 0x0) 1.640271624s ago: executing program 4 (id=4660): r0 = syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x2, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x81ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f921240685", 0x14}], 0x1}, 0x0) (fail_nth: 4) 1.595721893s ago: executing program 5 (id=4661): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230007) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) close(r2) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000030a03000000000000001700030000000900030073797a30000000000900010073797a3000000000140004800800024000000000080001400000"], 0xa4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180), 0x4) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="30010000130a01020000000000000000010000060c000640000000000000000408000340000000010900010073797a3000000000080003400000000108000340000000050800034000000003dc000800eb072c7e0efa37aea64153690ad3795160f41e02e53cfc2aafe550af792dbf23e73349104f4d3d594872901b6339bcac4452eaf2c8e403a47f3e761baedcf1f39fe51aabf99e7edb4dfadfba8852dac06839c731c2f04dbf81fe677fd15249d982523333daa710bd77c2dde8db9f63379dd64ecd8ca96901a522c565a07241c834671be728d4df76af6a17bd6adb3bc5be669021dcad52088ba8a4ec428c3e9eda3c26d42cb3fffb5bde552bf583066c481bc0939b13fbf7d11d1ff57dc843ddcb181c01acea2cd0"], 0x130}, 0x1, 0x0, 0x0, 0x44}, 0x44) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x14, &(0x7f0000000180)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="100300000014000825bd7000fddbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4040800) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0x24, 0x0, 0xffff, &(0x7f0000000200)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 1.546323858s ago: executing program 3 (id=4662): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r2, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000ff8400132001000000000000", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 2) 1.492009281s ago: executing program 1 (id=4663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 537.919608ms ago: executing program 0 (id=4664): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) perf_event_open(&(0x7f0000000e00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffef6, 0x4, @perf_bp={0x0, 0x1}, 0xc8a0, 0x6, 0xfffffffe, 0x8, 0xc, 0x475}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000100), 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20000090) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10162) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a1c010000060a010400000000000000000a0000030900010073797a310000000028000480240001800a000100717565756500000014000280060001400008000006000240000000000900020073797a3200000000ba0007"], 0x144}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xba, 0x4}, 0x10fde5, 0x0, 0x0, 0x8, 0x1000007, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRESHEX=r2], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d080420000000020002a1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 424.407518ms ago: executing program 4 (id=4665): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002600010125bd700007ffffff100000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x409d6}, 0x2000000) 275.325247ms ago: executing program 4 (id=4666): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000b40)={0x2, 0x0, @private=0xa010102}, 0x10, 0x0}, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0xa) close(r1) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r2}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907003675f37538e486dd6317ce623900fe800000002000e0865a6596aff57b00000000000000000000000000ac"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850020000000000018100000", @ANYRES32, @ANYBLOB="1700000000000000950000000000000045"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000800000076000400000000002700000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 158.717216ms ago: executing program 3 (id=4667): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x75}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="4c00000014006b03000000d86e6c1d00100025d34460bc24feb556a705251e6100009a36c12dcc64308119eff5a54e3efb9f3d3b48dfd8cdbf9367c5fa51f60a64c9f4d4938037e786a6d0bd", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x850) (fail_nth: 6) 146.914511ms ago: executing program 1 (id=4668): r0 = getpid() mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xb89046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x40000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000021c00850000001b000000b700000000000000180100002120732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) r4 = perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x15, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r6, 0x0, 0x0}, 0x10) r7 = socket$kcm(0xa, 0x5, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007fc5f603ff"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10, 0x1}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYRES16=r3], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb88, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_attach_bpf(r7, 0x29, 0x16, 0x0, 0x0) 88.286079ms ago: executing program 4 (id=4669): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x7e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40084}, 0x10000102) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x20, 0x2, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_SEQ_ADJ_ORIG={0x4}, @CTA_ZONE={0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0xc001}, 0x40000) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000080811098000000000095"], &(0x7f0000000080)='GPL\x00', 0x5}, 0x94) r5 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000140)={r5}) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1efa}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x1}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x10d, &(0x7f0000000240)=""/269, 0xb6df4c32c1d5c814, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet={0x23, 0x9, 0xfc}, 0x80, 0x0}, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x6, &(0x7f0000000740)=r1, 0x4) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x22, &(0x7f0000000a40), 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x50, 0x1, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x38}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 32.14453ms ago: executing program 5 (id=4670): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x76, 0x9}, 0x10af8, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xd}, {0x2}, {0xa}, {0x2, 0x1}, {0x1}, {}]}, @fwd={0xf}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @volatile, @const={0xb, 0x0, 0x0, 0xa, 0x4}]}}, 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, 0x39, 0x301, 0x70bd2d, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x448c3}, 0x4c084) 0s ago: executing program 0 (id=4671): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200, 0x2, @perf_bp={0x0, 0xb}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0xb4}}, 0x0) kernel console output (not intermixed with test programs): 24012][T18505] dump_stack_lvl+0xe8/0x150 [ 768.024052][T18505] should_fail_ex+0x40c/0x560 [ 768.024089][T18505] _copy_from_user+0x2d/0xb0 [ 768.024113][T18505] ___sys_recvmsg+0x173/0x5a0 [ 768.024149][T18505] ? __pfx____sys_recvmsg+0x10/0x10 [ 768.024211][T18505] ? __fget_files+0x3a2/0x420 [ 768.024257][T18505] __x64_sys_recvmsg+0x1ae/0x290 [ 768.024287][T18505] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 768.024337][T18505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.024367][T18505] do_syscall_64+0x174/0x580 [ 768.024391][T18505] ? trace_irq_disable+0x3b/0x140 [ 768.024421][T18505] ? clear_bhb_loop+0x40/0x90 [ 768.024450][T18505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.024472][T18505] RIP: 0033:0x7f5a6739e019 [ 768.024492][T18505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.024511][T18505] RSP: 002b:00007f5a681aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 768.024535][T18505] RAX: ffffffffffffffda RBX: 00007f5a67625fa0 RCX: 00007f5a6739e019 [ 768.024551][T18505] RDX: 0000000000000102 RSI: 0000200000001ac0 RDI: 0000000000000003 [ 768.024564][T18505] RBP: 00007f5a681aa090 R08: 0000000000000000 R09: 0000000000000000 [ 768.024577][T18505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.024590][T18505] R13: 00007f5a67626038 R14: 00007f5a67625fa0 R15: 00007ffefdc7a078 [ 768.024631][T18505] [ 768.382688][T18515] __nla_validate_parse: 8 callbacks suppressed [ 768.382712][T18515] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4025'. [ 768.403359][T18515] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4025'. [ 768.505692][T18519] netlink: 694 bytes leftover after parsing attributes in process `syz.4.4026'. [ 768.836434][T18531] FAULT_INJECTION: forcing a failure. [ 768.836434][T18531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 768.852231][T18531] CPU: 1 UID: 0 PID: 18531 Comm: syz.1.4031 Not tainted syzkaller #0 PREEMPT(full) [ 768.852261][T18531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 768.852274][T18531] Call Trace: [ 768.852283][T18531] [ 768.852291][T18531] dump_stack_lvl+0xe8/0x150 [ 768.852330][T18531] should_fail_ex+0x40c/0x560 [ 768.852364][T18531] _copy_from_user+0x2d/0xb0 [ 768.852386][T18531] __sys_bpf+0x2e7/0xd90 [ 768.852426][T18531] ? __pfx___sys_bpf+0x10/0x10 [ 768.852468][T18531] ? __fget_files+0x2a/0x420 [ 768.852518][T18531] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 768.852548][T18531] ? ksys_write+0x242/0x270 [ 768.852574][T18531] ? __pfx_ksys_write+0x10/0x10 [ 768.852601][T18531] __x64_sys_bpf+0xba/0xd0 [ 768.852629][T18531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.852652][T18531] do_syscall_64+0x174/0x580 [ 768.852677][T18531] ? trace_irq_disable+0x3b/0x140 [ 768.852704][T18531] ? clear_bhb_loop+0x40/0x90 [ 768.852732][T18531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.852754][T18531] RIP: 0033:0x7f5a6739e019 [ 768.852774][T18531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.852793][T18531] RSP: 002b:00007f5a681aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 768.852816][T18531] RAX: ffffffffffffffda RBX: 00007f5a67625fa0 RCX: 00007f5a6739e019 [ 768.852831][T18531] RDX: 0000000000000020 RSI: 00002000000004c0 RDI: 0000000000000009 [ 768.852845][T18531] RBP: 00007f5a681aa090 R08: 0000000000000000 R09: 0000000000000000 [ 768.852858][T18531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.852881][T18531] R13: 00007f5a67626038 R14: 00007f5a67625fa0 R15: 00007ffefdc7a078 [ 768.852917][T18531] [ 769.559419][T18557] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4039'. [ 772.369151][T18572] netlink: 694 bytes leftover after parsing attributes in process `syz.4.4043'. [ 772.485724][T18575] FAULT_INJECTION: forcing a failure. [ 772.485724][T18575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 772.517277][T18575] CPU: 0 UID: 0 PID: 18575 Comm: syz.3.4045 Not tainted syzkaller #0 PREEMPT(full) [ 772.517308][T18575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 772.517321][T18575] Call Trace: [ 772.517333][T18575] [ 772.517346][T18575] dump_stack_lvl+0xe8/0x150 [ 772.517404][T18575] should_fail_ex+0x40c/0x560 [ 772.517473][T18575] _copy_from_user+0x2d/0xb0 [ 772.517512][T18575] ___sys_sendmsg+0x1c6/0x360 [ 772.517544][T18575] ? __lock_acquire+0x683/0x2cf0 [ 772.517612][T18575] ? __pfx____sys_sendmsg+0x10/0x10 [ 772.517845][T18575] ? __fget_files+0x2a/0x420 [ 772.517883][T18575] ? __fget_files+0x3a2/0x420 [ 772.517994][T18575] __x64_sys_sendmsg+0x1b1/0x290 [ 772.518049][T18575] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 772.518187][T18575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.518226][T18575] do_syscall_64+0x174/0x580 [ 772.518255][T18575] ? trace_irq_disable+0x3b/0x140 [ 772.518294][T18575] ? clear_bhb_loop+0x40/0x90 [ 772.518350][T18575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.518377][T18575] RIP: 0033:0x7ff9fed9e019 [ 772.518413][T18575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.518433][T18575] RSP: 002b:00007ff9fcff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 772.518456][T18575] RAX: ffffffffffffffda RBX: 00007ff9ff025fa0 RCX: 00007ff9fed9e019 [ 772.518473][T18575] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 772.518486][T18575] RBP: 00007ff9fcff6090 R08: 0000000000000000 R09: 0000000000000000 [ 772.518499][T18575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.518512][T18575] R13: 00007ff9ff026038 R14: 00007ff9ff025fa0 R15: 00007fffd728aa18 [ 772.518625][T18575] [ 772.751839][T18580] netlink: 808 bytes leftover after parsing attributes in process `syz.4.4047'. [ 772.775564][T18581] netlink: 808 bytes leftover after parsing attributes in process `syz.4.4047'. [ 773.055596][T18593] netlink: 300 bytes leftover after parsing attributes in process `syz.3.4051'. [ 773.507712][T18601] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4053'. [ 773.819030][T18609] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4054'. [ 773.961061][T18611] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4054'. [ 774.204998][T18618] netlink: 694 bytes leftover after parsing attributes in process `syz.4.4057'. [ 774.327716][T18622] FAULT_INJECTION: forcing a failure. [ 774.327716][T18622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 774.380315][T18622] CPU: 0 UID: 0 PID: 18622 Comm: syz.4.4058 Not tainted syzkaller #0 PREEMPT(full) [ 774.380345][T18622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 774.380358][T18622] Call Trace: [ 774.380367][T18622] [ 774.380376][T18622] dump_stack_lvl+0xe8/0x150 [ 774.380417][T18622] should_fail_ex+0x40c/0x560 [ 774.380452][T18622] _copy_from_user+0x2d/0xb0 [ 774.380485][T18622] __sys_bpf+0x2e7/0xd90 [ 774.380525][T18622] ? __pfx___sys_bpf+0x10/0x10 [ 774.380568][T18622] ? __fget_files+0x2a/0x420 [ 774.380617][T18622] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 774.380647][T18622] ? ksys_write+0x242/0x270 [ 774.380672][T18622] ? __pfx_ksys_write+0x10/0x10 [ 774.380701][T18622] __x64_sys_bpf+0xba/0xd0 [ 774.380728][T18622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.380753][T18622] do_syscall_64+0x174/0x580 [ 774.380778][T18622] ? trace_irq_disable+0x3b/0x140 [ 774.380806][T18622] ? clear_bhb_loop+0x40/0x90 [ 774.380837][T18622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.380860][T18622] RIP: 0033:0x7f0392b9e019 [ 774.380881][T18622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.380901][T18622] RSP: 002b:00007f03939aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 774.380925][T18622] RAX: ffffffffffffffda RBX: 00007f0392e25fa0 RCX: 00007f0392b9e019 [ 774.380941][T18622] RDX: 0000000000000050 RSI: 0000200000002200 RDI: 000000000000000a [ 774.380956][T18622] RBP: 00007f03939aa090 R08: 0000000000000000 R09: 0000000000000000 [ 774.380969][T18622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 774.380982][T18622] R13: 00007f0392e26038 R14: 00007f0392e25fa0 R15: 00007ffde358f768 [ 774.381018][T18622] [ 774.604920][T18626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4059'. [ 774.634058][T18628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4060'. [ 775.166844][ T5634] Bluetooth: hci0: command 0x0406 tx timeout [ 775.245260][T18647] netlink: 694 bytes leftover after parsing attributes in process `syz.1.4068'. [ 775.316589][T18652] FAULT_INJECTION: forcing a failure. [ 775.316589][T18652] name failslab, interval 1, probability 0, space 0, times 0 [ 775.387166][T18652] CPU: 0 UID: 0 PID: 18652 Comm: syz.0.4070 Not tainted syzkaller #0 PREEMPT(full) [ 775.387196][T18652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 775.387211][T18652] Call Trace: [ 775.387219][T18652] [ 775.387237][T18652] dump_stack_lvl+0xe8/0x150 [ 775.387275][T18652] should_fail_ex+0x40c/0x560 [ 775.387309][T18652] should_failslab+0xa8/0x100 [ 775.387345][T18652] __kmalloc_noprof+0xfe/0x720 [ 775.387407][T18652] ? rcu_is_watching+0x15/0xb0 [ 775.387429][T18652] ? tomoyo_realpath_from_path+0xef/0x640 [ 775.387533][T18652] ? tomoyo_realpath_from_path+0xef/0x640 [ 775.387567][T18652] tomoyo_realpath_from_path+0xef/0x640 [ 775.387604][T18652] ? tomoyo_path_number_perm+0x219/0x5f0 [ 775.387666][T18652] tomoyo_path_number_perm+0x246/0x5f0 [ 775.387703][T18652] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 775.387756][T18652] ? hook_file_ioctl+0x1f0/0x5f0 [ 775.387831][T18652] ? __fget_files+0x2a/0x420 [ 775.387864][T18652] ? __fget_files+0x2a/0x420 [ 775.387892][T18652] ? __fget_files+0x3a2/0x420 [ 775.387920][T18652] ? __fget_files+0x2a/0x420 [ 775.387954][T18652] security_file_ioctl+0xc3/0x2a0 [ 775.388040][T18652] __se_sys_ioctl+0x47/0x170 [ 775.388062][T18652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.388086][T18652] do_syscall_64+0x174/0x580 [ 775.388113][T18652] ? clear_bhb_loop+0x40/0x90 [ 775.388140][T18652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.388162][T18652] RIP: 0033:0x7f51aad9e019 [ 775.388182][T18652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.388200][T18652] RSP: 002b:00007f51abd42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 775.388222][T18652] RAX: ffffffffffffffda RBX: 00007f51ab025fa0 RCX: 00007f51aad9e019 [ 775.388288][T18652] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000003d [ 775.388301][T18652] RBP: 00007f51abd42090 R08: 0000000000000000 R09: 0000000000000000 [ 775.388315][T18652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.388328][T18652] R13: 00007f51ab026038 R14: 00007f51ab025fa0 R15: 00007ffc45ca7868 [ 775.388364][T18652] [ 775.390480][T18652] ERROR: Out of memory at tomoyo_realpath_from_path. [ 776.013104][T18667] FAULT_INJECTION: forcing a failure. [ 776.013104][T18667] name failslab, interval 1, probability 0, space 0, times 0 [ 776.037193][T18667] CPU: 1 UID: 0 PID: 18667 Comm: syz.2.4077 Not tainted syzkaller #0 PREEMPT(full) [ 776.037224][T18667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 776.037237][T18667] Call Trace: [ 776.037246][T18667] [ 776.037255][T18667] dump_stack_lvl+0xe8/0x150 [ 776.037293][T18667] should_fail_ex+0x40c/0x560 [ 776.037328][T18667] should_failslab+0xa8/0x100 [ 776.037363][T18667] __kmalloc_noprof+0xfe/0x720 [ 776.037391][T18667] ? rcu_is_watching+0x15/0xb0 [ 776.037412][T18667] ? tomoyo_realpath_from_path+0xef/0x640 [ 776.037438][T18667] ? tomoyo_realpath_from_path+0xef/0x640 [ 776.037473][T18667] tomoyo_realpath_from_path+0xef/0x640 [ 776.037511][T18667] ? tomoyo_path_number_perm+0x219/0x5f0 [ 776.037546][T18667] tomoyo_path_number_perm+0x246/0x5f0 [ 776.037585][T18667] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 776.037618][T18667] ? __lock_acquire+0x683/0x2cf0 [ 776.037666][T18667] ? hook_file_ioctl+0x1f0/0x5f0 [ 776.037711][T18667] ? __fget_files+0x2a/0x420 [ 776.037745][T18667] ? __fget_files+0x2a/0x420 [ 776.037774][T18667] ? __fget_files+0x3a2/0x420 [ 776.037802][T18667] ? __fget_files+0x2a/0x420 [ 776.037838][T18667] security_file_ioctl+0xc3/0x2a0 [ 776.037874][T18667] __se_sys_ioctl+0x47/0x170 [ 776.037897][T18667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.037922][T18667] do_syscall_64+0x174/0x580 [ 776.037947][T18667] ? trace_irq_disable+0x3b/0x140 [ 776.037976][T18667] ? clear_bhb_loop+0x40/0x90 [ 776.038003][T18667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.038025][T18667] RIP: 0033:0x7fa2b599e019 [ 776.038045][T18667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.038065][T18667] RSP: 002b:00007fa2b67d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 776.038088][T18667] RAX: ffffffffffffffda RBX: 00007fa2b5c25fa0 RCX: 00007fa2b599e019 [ 776.038105][T18667] RDX: 0000200000000000 RSI: 0000000000008b14 RDI: 0000000000000003 [ 776.038123][T18667] RBP: 00007fa2b67d1090 R08: 0000000000000000 R09: 0000000000000000 [ 776.038137][T18667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 776.038157][T18667] R13: 00007fa2b5c26038 R14: 00007fa2b5c25fa0 R15: 00007ffc69037f28 [ 776.038194][T18667] [ 776.039403][T18667] ERROR: Out of memory at tomoyo_realpath_from_path. [ 776.299553][T18669] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 776.609434][T18679] FAULT_INJECTION: forcing a failure. [ 776.609434][T18679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 776.627258][T18679] CPU: 1 UID: 0 PID: 18679 Comm: syz.2.4081 Not tainted syzkaller #0 PREEMPT(full) [ 776.627288][T18679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 776.627302][T18679] Call Trace: [ 776.627310][T18679] [ 776.627319][T18679] dump_stack_lvl+0xe8/0x150 [ 776.627357][T18679] should_fail_ex+0x40c/0x560 [ 776.627390][T18679] _copy_from_user+0x2d/0xb0 [ 776.627418][T18679] __sys_bpf+0x2e7/0xd90 [ 776.627457][T18679] ? __pfx___sys_bpf+0x10/0x10 [ 776.627491][T18679] ? __pfx_trace_call_bpf+0x10/0x10 [ 776.627540][T18679] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 776.627569][T18679] ? ksys_write+0x242/0x270 [ 776.627594][T18679] ? __pfx_ksys_write+0x10/0x10 [ 776.627621][T18679] __x64_sys_bpf+0xba/0xd0 [ 776.627648][T18679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.627673][T18679] do_syscall_64+0x174/0x580 [ 776.627700][T18679] ? clear_bhb_loop+0x40/0x90 [ 776.627728][T18679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.627750][T18679] RIP: 0033:0x7fa2b599e019 [ 776.627770][T18679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.627789][T18679] RSP: 002b:00007fa2b67d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 776.627812][T18679] RAX: ffffffffffffffda RBX: 00007fa2b5c25fa0 RCX: 00007fa2b599e019 [ 776.627828][T18679] RDX: 000000000000000c RSI: 00002000000003c0 RDI: 000000000000000a [ 776.627841][T18679] RBP: 00007fa2b67d1090 R08: 0000000000000000 R09: 0000000000000000 [ 776.627855][T18679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 776.627868][T18679] R13: 00007fa2b5c26038 R14: 00007fa2b5c25fa0 R15: 00007ffc69037f28 [ 776.627903][T18679] [ 777.094872][T18695] FAULT_INJECTION: forcing a failure. [ 777.094872][T18695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 777.122819][T18695] CPU: 1 UID: 0 PID: 18695 Comm: syz.3.4086 Not tainted syzkaller #0 PREEMPT(full) [ 777.122850][T18695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 777.122863][T18695] Call Trace: [ 777.122872][T18695] [ 777.122882][T18695] dump_stack_lvl+0xe8/0x150 [ 777.122919][T18695] should_fail_ex+0x40c/0x560 [ 777.122953][T18695] strncpy_from_user+0x36/0x2c0 [ 777.122985][T18695] do_tcp_setsockopt+0x2eb/0x1f80 [ 777.123163][T18695] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 777.123203][T18695] ? __fget_files+0x2a/0x420 [ 777.123239][T18695] ? aa_sock_opt_perm+0xff/0x1a0 [ 777.123319][T18695] ? sock_common_setsockopt+0x36/0xc0 [ 777.123398][T18695] ? tcp_setsockopt+0x3d/0xe0 [ 777.123425][T18695] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 777.123458][T18695] do_sock_setsockopt+0x17c/0x1b0 [ 777.123487][T18695] __x64_sys_setsockopt+0x13d/0x1b0 [ 777.123514][T18695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.123538][T18695] do_syscall_64+0x174/0x580 [ 777.123565][T18695] ? clear_bhb_loop+0x40/0x90 [ 777.123591][T18695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.123613][T18695] RIP: 0033:0x7ff9fed9e019 [ 777.123633][T18695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.123652][T18695] RSP: 002b:00007ff9fcff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 777.123675][T18695] RAX: ffffffffffffffda RBX: 00007ff9ff025fa0 RCX: 00007ff9fed9e019 [ 777.123691][T18695] RDX: 000000000000001f RSI: 0000000000000006 RDI: 0000000000000005 [ 777.123704][T18695] RBP: 00007ff9fcff6090 R08: 00000000000000d8 R09: 0000000000000000 [ 777.123717][T18695] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 777.123731][T18695] R13: 00007ff9ff026038 R14: 00007ff9ff025fa0 R15: 00007fffd728aa18 [ 777.123765][T18695] [ 777.350791][T18700] netlink: 'syz.2.4089': attribute type 10 has an invalid length. [ 777.367865][T18700] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4089'. [ 777.399473][T18700] geneve1: left promiscuous mode [ 777.554797][T18700] geneve1: entered promiscuous mode [ 777.561724][T18700] team0: Port device geneve1 added [ 777.647560][T18707] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4091'. [ 777.659463][T18707] veth1_to_bond: entered allmulticast mode [ 777.931541][T18714] syzkaller0: entered promiscuous mode [ 777.937093][T18714] syzkaller0: entered allmulticast mode [ 778.588670][T18723] FAULT_INJECTION: forcing a failure. [ 778.588670][T18723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 778.601856][T18723] CPU: 0 UID: 0 PID: 18723 Comm: syz.1.4096 Not tainted syzkaller #0 PREEMPT(full) [ 778.601886][T18723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 778.601900][T18723] Call Trace: [ 778.601914][T18723] [ 778.601928][T18723] dump_stack_lvl+0xe8/0x150 [ 778.602025][T18723] should_fail_ex+0x40c/0x560 [ 778.602110][T18723] _copy_from_user+0x2d/0xb0 [ 778.602154][T18723] ___sys_sendmsg+0x1c6/0x360 [ 778.602249][T18723] ? __pfx____sys_sendmsg+0x10/0x10 [ 778.602461][T18723] ? __fget_files+0x2a/0x420 [ 778.602584][T18723] ? __fget_files+0x2a/0x420 [ 778.602623][T18723] ? __fget_files+0x3a2/0x420 [ 778.602745][T18723] __x64_sys_sendmsg+0x1b1/0x290 [ 778.602781][T18723] ? perf_trace_preemptirq_template+0x26f/0x350 [ 778.602838][T18723] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 778.603018][T18723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.603062][T18723] do_syscall_64+0x174/0x580 [ 778.603094][T18723] ? trace_irq_disable+0x3b/0x140 [ 778.603148][T18723] ? clear_bhb_loop+0x40/0x90 [ 778.603208][T18723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.603237][T18723] RIP: 0033:0x7f5a6739e019 [ 778.603273][T18723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.603293][T18723] RSP: 002b:00007f5a681aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 778.603315][T18723] RAX: ffffffffffffffda RBX: 00007f5a67625fa0 RCX: 00007f5a6739e019 [ 778.603331][T18723] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000008 [ 778.603346][T18723] RBP: 00007f5a681aa090 R08: 0000000000000000 R09: 0000000000000000 [ 778.603359][T18723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.603377][T18723] R13: 00007f5a67626038 R14: 00007f5a67625fa0 R15: 00007ffefdc7a078 [ 778.603520][T18723] [ 780.866150][T18735] Set syz0 is full, maxelem 65536 reached [ 784.203341][T18792] netlink: 'syz.1.4112': attribute type 10 has an invalid length. [ 784.224676][T18792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4112'. [ 784.371256][T18795] FAULT_INJECTION: forcing a failure. [ 784.371256][T18795] name failslab, interval 1, probability 0, space 0, times 0 [ 784.384032][T18795] CPU: 1 UID: 0 PID: 18795 Comm: syz.3.4113 Not tainted syzkaller #0 PREEMPT(full) [ 784.384059][T18795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 784.384071][T18795] Call Trace: [ 784.384081][T18795] [ 784.384090][T18795] dump_stack_lvl+0xe8/0x150 [ 784.384130][T18795] should_fail_ex+0x40c/0x560 [ 784.384162][T18795] should_failslab+0xa8/0x100 [ 784.384218][T18795] __kmalloc_noprof+0xfe/0x720 [ 784.384246][T18795] ? rcu_is_watching+0x15/0xb0 [ 784.384273][T18795] ? tomoyo_realpath_from_path+0xef/0x640 [ 784.384298][T18795] ? tomoyo_realpath_from_path+0xef/0x640 [ 784.384330][T18795] tomoyo_realpath_from_path+0xef/0x640 [ 784.384366][T18795] ? tomoyo_path_number_perm+0x219/0x5f0 [ 784.384400][T18795] tomoyo_path_number_perm+0x246/0x5f0 [ 784.384437][T18795] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 784.384469][T18795] ? __lock_acquire+0x683/0x2cf0 [ 784.384517][T18795] ? hook_file_ioctl+0x1f0/0x5f0 [ 784.384562][T18795] ? __fget_files+0x2a/0x420 [ 784.384596][T18795] ? __fget_files+0x2a/0x420 [ 784.384628][T18795] ? __fget_files+0x3a2/0x420 [ 784.384657][T18795] ? __fget_files+0x2a/0x420 [ 784.384691][T18795] security_file_ioctl+0xc3/0x2a0 [ 784.384727][T18795] __se_sys_ioctl+0x47/0x170 [ 784.384750][T18795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.384773][T18795] do_syscall_64+0x174/0x580 [ 784.384798][T18795] ? trace_irq_disable+0x3b/0x140 [ 784.384827][T18795] ? clear_bhb_loop+0x40/0x90 [ 784.384853][T18795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.384875][T18795] RIP: 0033:0x7ff9fed9e019 [ 784.384895][T18795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.384914][T18795] RSP: 002b:00007ff9fcff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 784.384937][T18795] RAX: ffffffffffffffda RBX: 00007ff9ff025fa0 RCX: 00007ff9fed9e019 [ 784.384953][T18795] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000003 [ 784.384967][T18795] RBP: 00007ff9fcff6090 R08: 0000000000000000 R09: 0000000000000000 [ 784.384980][T18795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 784.384993][T18795] R13: 00007ff9ff026038 R14: 00007ff9ff025fa0 R15: 00007fffd728aa18 [ 784.385037][T18795] [ 784.385046][T18795] ERROR: Out of memory at tomoyo_realpath_from_path. [ 784.945380][T18816] FAULT_INJECTION: forcing a failure. [ 784.945380][T18816] name failslab, interval 1, probability 0, space 0, times 0 [ 784.971494][T18816] CPU: 1 UID: 0 PID: 18816 Comm: syz.2.4116 Not tainted syzkaller #0 PREEMPT(full) [ 784.971528][T18816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 784.971543][T18816] Call Trace: [ 784.971552][T18816] [ 784.971562][T18816] dump_stack_lvl+0xe8/0x150 [ 784.971604][T18816] should_fail_ex+0x40c/0x560 [ 784.971644][T18816] should_failslab+0xa8/0x100 [ 784.971685][T18816] __kmalloc_noprof+0xfe/0x720 [ 784.971721][T18816] ? rcu_is_watching+0x15/0xb0 [ 784.971746][T18816] ? tomoyo_realpath_from_path+0xef/0x640 [ 784.971775][T18816] ? tomoyo_realpath_from_path+0xef/0x640 [ 784.971816][T18816] tomoyo_realpath_from_path+0xef/0x640 [ 784.971862][T18816] ? tomoyo_path_number_perm+0x219/0x5f0 [ 784.971902][T18816] tomoyo_path_number_perm+0x246/0x5f0 [ 784.971946][T18816] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 784.971984][T18816] ? __lock_acquire+0x683/0x2cf0 [ 784.972025][T18816] ? ksys_write+0x1e6/0x270 [ 784.972064][T18816] ? hook_file_ioctl+0x1f0/0x5f0 [ 784.972123][T18816] ? __fget_files+0x2a/0x420 [ 784.972163][T18816] ? __fget_files+0x2a/0x420 [ 784.972195][T18816] ? __fget_files+0x3a2/0x420 [ 784.972228][T18816] ? __fget_files+0x2a/0x420 [ 784.972269][T18816] security_file_ioctl+0xc3/0x2a0 [ 784.972310][T18816] __se_sys_ioctl+0x47/0x170 [ 784.972337][T18816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.972366][T18816] do_syscall_64+0x174/0x580 [ 784.972393][T18816] ? trace_irq_disable+0x3b/0x140 [ 784.972426][T18816] ? clear_bhb_loop+0x40/0x90 [ 784.972458][T18816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.972518][T18816] RIP: 0033:0x7fa2b599e019 [ 784.972541][T18816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.972562][T18816] RSP: 002b:00007fa2b67b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 784.972588][T18816] RAX: ffffffffffffffda RBX: 00007fa2b5c26090 RCX: 00007fa2b599e019 [ 784.972605][T18816] RDX: 0000200000000180 RSI: 0000000040047451 RDI: 0000000000000004 [ 784.972621][T18816] RBP: 00007fa2b67b0090 R08: 0000000000000000 R09: 0000000000000000 [ 784.972635][T18816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 784.972649][T18816] R13: 00007fa2b5c26128 R14: 00007fa2b5c26090 R15: 00007ffc69037f28 [ 784.972695][T18816] [ 784.972720][T18816] ERROR: Out of memory at tomoyo_realpath_from_path. [ 786.337153][T18837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4121'. [ 787.298628][T18862] FAULT_INJECTION: forcing a failure. [ 787.298628][T18862] name failslab, interval 1, probability 0, space 0, times 0 [ 787.312602][T18862] CPU: 1 UID: 0 PID: 18862 Comm: syz.2.4128 Not tainted syzkaller #0 PREEMPT(full) [ 787.312632][T18862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 787.312646][T18862] Call Trace: [ 787.312654][T18862] [ 787.312663][T18862] dump_stack_lvl+0xe8/0x150 [ 787.312703][T18862] should_fail_ex+0x40c/0x560 [ 787.312739][T18862] should_failslab+0xa8/0x100 [ 787.312775][T18862] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 787.312807][T18862] ? do_getname+0x2e/0x250 [ 787.312832][T18862] ? do_getname+0x2e/0x250 [ 787.312868][T18862] do_getname+0x2e/0x250 [ 787.312899][T18862] ? user_path_at+0x1e/0x160 [ 787.312935][T18862] user_path_at+0x2a/0x160 [ 787.312973][T18862] __se_sys_mount+0x2dc/0x420 [ 787.313013][T18862] ? __pfx___se_sys_mount+0x10/0x10 [ 787.313053][T18862] ? __x64_sys_mount+0x20/0xc0 [ 787.313083][T18862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.313115][T18862] do_syscall_64+0x174/0x580 [ 787.313144][T18862] ? clear_bhb_loop+0x40/0x90 [ 787.313173][T18862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.313196][T18862] RIP: 0033:0x7fa2b599e019 [ 787.313218][T18862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.313237][T18862] RSP: 002b:00007fa2b67d1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 787.313260][T18862] RAX: ffffffffffffffda RBX: 00007fa2b5c25fa0 RCX: 00007fa2b599e019 [ 787.313276][T18862] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 787.313289][T18862] RBP: 00007fa2b67d1090 R08: 0000000000000000 R09: 0000000000000000 [ 787.313303][T18862] R10: 0000000000084000 R11: 0000000000000246 R12: 0000000000000001 [ 787.313316][T18862] R13: 00007fa2b5c26038 R14: 00007fa2b5c25fa0 R15: 00007ffc69037f28 [ 787.313363][T18862] [ 787.629056][T18864] FAULT_INJECTION: forcing a failure. [ 787.629056][T18864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 787.651207][T18864] CPU: 1 UID: 0 PID: 18864 Comm: syz.0.4127 Not tainted syzkaller #0 PREEMPT(full) [ 787.651238][T18864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 787.651252][T18864] Call Trace: [ 787.651260][T18864] [ 787.651270][T18864] dump_stack_lvl+0xe8/0x150 [ 787.651309][T18864] should_fail_ex+0x40c/0x560 [ 787.651345][T18864] _copy_from_user+0x2d/0xb0 [ 787.651368][T18864] ___sys_sendmsg+0x1c6/0x360 [ 787.651393][T18864] ? __lock_acquire+0x683/0x2cf0 [ 787.651431][T18864] ? __pfx____sys_sendmsg+0x10/0x10 [ 787.651487][T18864] ? __fget_files+0x2a/0x420 [ 787.651533][T18864] ? __fget_files+0x2a/0x420 [ 787.651561][T18864] ? __fget_files+0x3a2/0x420 [ 787.651607][T18864] __x64_sys_sendmsg+0x1b1/0x290 [ 787.651637][T18864] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 787.651686][T18864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.651711][T18864] do_syscall_64+0x174/0x580 [ 787.651736][T18864] ? trace_irq_disable+0x3b/0x140 [ 787.651774][T18864] ? clear_bhb_loop+0x40/0x90 [ 787.651802][T18864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.651824][T18864] RIP: 0033:0x7f51aad9e019 [ 787.651845][T18864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.651864][T18864] RSP: 002b:00007f51abd21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 787.651887][T18864] RAX: ffffffffffffffda RBX: 00007f51ab026090 RCX: 00007f51aad9e019 [ 787.651903][T18864] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 787.651916][T18864] RBP: 00007f51abd21090 R08: 0000000000000000 R09: 0000000000000000 [ 787.651930][T18864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.651942][T18864] R13: 00007f51ab026128 R14: 00007f51ab026090 R15: 00007ffc45ca7868 [ 787.651983][T18864] [ 787.963859][T18872] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4129'. [ 788.254454][T18880] FAULT_INJECTION: forcing a failure. [ 788.254454][T18880] name failslab, interval 1, probability 0, space 0, times 0 [ 788.295847][T18880] CPU: 0 UID: 0 PID: 18880 Comm: syz.3.4135 Not tainted syzkaller #0 PREEMPT(full) [ 788.295878][T18880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 788.295892][T18880] Call Trace: [ 788.295902][T18880] [ 788.295911][T18880] dump_stack_lvl+0xe8/0x150 [ 788.295951][T18880] should_fail_ex+0x40c/0x560 [ 788.295988][T18880] should_failslab+0xa8/0x100 [ 788.296026][T18880] __kmalloc_noprof+0xfe/0x720 [ 788.296055][T18880] ? vfs_write+0x22b/0xba0 [ 788.296077][T18880] ? kernfs_fop_write_iter+0x157/0x540 [ 788.296146][T18880] ? kernfs_fop_write_iter+0x157/0x540 [ 788.296183][T18880] kernfs_fop_write_iter+0x157/0x540 [ 788.296218][T18880] vfs_write+0x612/0xba0 [ 788.296262][T18880] ? __pfx_vfs_write+0x10/0x10 [ 788.296302][T18880] ? __fget_files+0x2a/0x420 [ 788.296348][T18880] ksys_write+0x150/0x270 [ 788.296376][T18880] ? __pfx_ksys_write+0x10/0x10 [ 788.296413][T18880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.296439][T18880] do_syscall_64+0x174/0x580 [ 788.296464][T18880] ? trace_irq_disable+0x3b/0x140 [ 788.296494][T18880] ? clear_bhb_loop+0x40/0x90 [ 788.296524][T18880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.296547][T18880] RIP: 0033:0x7ff9fed9e019 [ 788.296570][T18880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 788.296589][T18880] RSP: 002b:00007ff9fcff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 788.296613][T18880] RAX: ffffffffffffffda RBX: 00007ff9ff025fa0 RCX: 00007ff9fed9e019 [ 788.296629][T18880] RDX: 000000000000000c RSI: 00002000000002c0 RDI: 0000000000000006 [ 788.296643][T18880] RBP: 00007ff9fcff6090 R08: 0000000000000000 R09: 0000000000000000 [ 788.296657][T18880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 788.296670][T18880] R13: 00007ff9ff026038 R14: 00007ff9ff025fa0 R15: 00007fffd728aa18 [ 788.296713][T18880] [ 792.585856][T18917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4136'. [ 793.158746][T18928] netlink: 'syz.4.4143': attribute type 3 has an invalid length. [ 793.299825][ T5634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 793.313550][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 793.322872][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 793.338394][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 793.348339][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 794.228843][T18933] virt_wifi0 speed is unknown, defaulting to 1000 [ 795.015562][T18973] FAULT_INJECTION: forcing a failure. [ 795.015562][T18973] name failslab, interval 1, probability 0, space 0, times 0 [ 795.064945][T18973] CPU: 0 UID: 0 PID: 18973 Comm: syz.3.4153 Not tainted syzkaller #0 PREEMPT(full) [ 795.064976][T18973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 795.064993][T18973] Call Trace: [ 795.065002][T18973] [ 795.065011][T18973] dump_stack_lvl+0xe8/0x150 [ 795.065049][T18973] should_fail_ex+0x40c/0x560 [ 795.065083][T18973] should_failslab+0xa8/0x100 [ 795.065129][T18973] __kmalloc_noprof+0xfe/0x720 [ 795.065157][T18973] ? rcu_is_watching+0x15/0xb0 [ 795.065180][T18973] ? tomoyo_realpath_from_path+0xef/0x640 [ 795.065205][T18973] ? tomoyo_realpath_from_path+0xef/0x640 [ 795.065240][T18973] tomoyo_realpath_from_path+0xef/0x640 [ 795.065278][T18973] ? tomoyo_path_number_perm+0x219/0x5f0 [ 795.065313][T18973] tomoyo_path_number_perm+0x246/0x5f0 [ 795.065350][T18973] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 795.065383][T18973] ? __lock_acquire+0x683/0x2cf0 [ 795.065431][T18973] ? hook_file_ioctl+0x1f0/0x5f0 [ 795.065476][T18973] ? __fget_files+0x2a/0x420 [ 795.065508][T18973] ? __fget_files+0x2a/0x420 [ 795.065537][T18973] ? __fget_files+0x3a2/0x420 [ 795.065566][T18973] ? __fget_files+0x2a/0x420 [ 795.065601][T18973] security_file_ioctl+0xc3/0x2a0 [ 795.065638][T18973] __se_sys_ioctl+0x47/0x170 [ 795.065661][T18973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.065685][T18973] do_syscall_64+0x174/0x580 [ 795.065710][T18973] ? trace_irq_disable+0x3b/0x140 [ 795.065739][T18973] ? clear_bhb_loop+0x40/0x90 [ 795.065766][T18973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.065789][T18973] RIP: 0033:0x7ff9fed9e019 [ 795.065809][T18973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.065828][T18973] RSP: 002b:00007ff9fcff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 795.065851][T18973] RAX: ffffffffffffffda RBX: 00007ff9ff025fa0 RCX: 00007ff9fed9e019 [ 795.065867][T18973] RDX: 0000200000000180 RSI: 0000000040047459 RDI: 0000000000000004 [ 795.065882][T18973] RBP: 00007ff9fcff6090 R08: 0000000000000000 R09: 0000000000000000 [ 795.065896][T18973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 795.065908][T18973] R13: 00007ff9ff026038 R14: 00007ff9ff025fa0 R15: 00007fffd728aa18 [ 795.065944][T18973] [ 795.292238][T18973] ERROR: Out of memory at tomoyo_realpath_from_path. [ 795.411440][ T5634] Bluetooth: hci1: command tx timeout [ 795.452234][T18982] FAULT_INJECTION: forcing a failure. [ 795.452234][T18982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 795.465768][T18982] CPU: 1 UID: 0 PID: 18982 Comm: syz.1.4155 Not tainted syzkaller #0 PREEMPT(full) [ 795.465798][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 795.465812][T18982] Call Trace: [ 795.465821][T18982] [ 795.465830][T18982] dump_stack_lvl+0xe8/0x150 [ 795.465869][T18982] should_fail_ex+0x40c/0x560 [ 795.465902][T18982] _copy_from_user+0x2d/0xb0 [ 795.465925][T18982] ___sys_sendmsg+0x1c6/0x360 [ 795.465949][T18982] ? __lock_acquire+0x683/0x2cf0 [ 795.465984][T18982] ? __pfx____sys_sendmsg+0x10/0x10 [ 795.466047][T18982] ? __fget_files+0x2a/0x420 [ 795.466075][T18982] ? __fget_files+0x3a2/0x420 [ 795.466123][T18982] __x64_sys_sendmsg+0x1b1/0x290 [ 795.466152][T18982] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 795.466196][T18982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.466220][T18982] do_syscall_64+0x174/0x580 [ 795.466243][T18982] ? trace_irq_disable+0x3b/0x140 [ 795.466273][T18982] ? clear_bhb_loop+0x40/0x90 [ 795.466300][T18982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.466321][T18982] RIP: 0033:0x7f5a6739e019 [ 795.466342][T18982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.466360][T18982] RSP: 002b:00007f5a681aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 795.466383][T18982] RAX: ffffffffffffffda RBX: 00007f5a67625fa0 RCX: 00007f5a6739e019 [ 795.466399][T18982] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 795.466413][T18982] RBP: 00007f5a681aa090 R08: 0000000000000000 R09: 0000000000000000 [ 795.466427][T18982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 795.466440][T18982] R13: 00007f5a67626038 R14: 00007f5a67625fa0 R15: 00007ffefdc7a078 [ 795.466474][T18982] [ 795.902331][T18933] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.009201][T18933] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.033770][T18933] bridge_slave_0: entered allmulticast mode [ 796.065550][T18933] bridge_slave_0: entered promiscuous mode [ 796.107041][T18933] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.122011][T18933] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.134710][T18933] bridge_slave_1: entered allmulticast mode [ 796.143462][T18933] bridge_slave_1: entered promiscuous mode [ 796.224243][T18933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 796.280791][T18933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 796.416544][T18933] team0: Port device team_slave_0 added [ 796.425525][T18933] team0: Port device team_slave_1 added [ 796.459688][T18933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 796.466687][T18933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 796.496201][T18933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 796.511908][T18933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 796.519181][T18933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 796.546430][T18933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 796.654444][T18933] hsr_slave_0: entered promiscuous mode [ 796.677211][T18933] hsr_slave_1: entered promiscuous mode [ 796.685554][T18933] debugfs: 'hsr0' already exists in 'hsr' [ 796.700134][T18933] Cannot create hsr debugfs directory [ 796.984775][T19020] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4167'. [ 797.036393][T19022] FAULT_INJECTION: forcing a failure. [ 797.036393][T19022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 797.049853][T19022] CPU: 1 UID: 0 PID: 19022 Comm: syz.3.4169 Not tainted syzkaller #0 PREEMPT(full) [ 797.049883][T19022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 797.049896][T19022] Call Trace: [ 797.049905][T19022] [ 797.049928][T19022] dump_stack_lvl+0xe8/0x150 [ 797.049968][T19022] should_fail_ex+0x40c/0x560 [ 797.050013][T19022] _copy_from_user+0x2d/0xb0 [ 797.050038][T19022] sk_setsockopt+0x2b5/0x2f10 [ 797.050071][T19022] ? __pfx_sk_setsockopt+0x10/0x10 [ 797.050091][T19022] ? perf_trace_lock+0xff/0x410 [ 797.050133][T19022] ? __pfx_perf_trace_lock+0x10/0x10 [ 797.050172][T19022] ? release_sock+0x2f/0x260 [ 797.050209][T19022] ? vsock_connectible_setsockopt+0x210/0x7e0 [ 797.050330][T19022] ? vsock_connectible_setsockopt+0x210/0x7e0 [ 797.050356][T19022] ? vsock_connectible_setsockopt+0x210/0x7e0 [ 797.050381][T19022] ? __local_bh_enable_ip+0xd0/0x130 [ 797.050429][T19022] vsock_connectible_setsockopt+0x232/0x7e0 [ 797.050454][T19022] ? __fget_files+0x2a/0x420 [ 797.050490][T19022] ? __pfx_vsock_connectible_setsockopt+0x10/0x10 [ 797.050521][T19022] ? __fget_files+0x2a/0x420 [ 797.050549][T19022] ? aa_sock_opt_perm+0xff/0x1a0 [ 797.050581][T19022] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 797.050616][T19022] ? __pfx_vsock_connectible_setsockopt+0x10/0x10 [ 797.050645][T19022] do_sock_setsockopt+0x17c/0x1b0 [ 797.050677][T19022] __x64_sys_setsockopt+0x13d/0x1b0 [ 797.050706][T19022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.050731][T19022] do_syscall_64+0x174/0x580 [ 797.050756][T19022] ? trace_irq_disable+0x3b/0x140 [ 797.050786][T19022] ? clear_bhb_loop+0x40/0x90 [ 797.050816][T19022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.050838][T19022] RIP: 0033:0x7ff9fed9e019 [ 797.050859][T19022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.050878][T19022] RSP: 002b:00007ff9fcff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 797.050902][T19022] RAX: ffffffffffffffda RBX: 00007ff9ff025fa0 RCX: 00007ff9fed9e019 [ 797.050938][T19022] RDX: 0000000000000012 RSI: 0000000000000001 RDI: 0000000000000008 [ 797.050952][T19022] RBP: 00007ff9fcff6090 R08: 0000000000000004 R09: 0000000000000000 [ 797.050965][T19022] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.050979][T19022] R13: 00007ff9ff026038 R14: 00007ff9ff025fa0 R15: 00007fffd728aa18 [ 797.051020][T19022] [ 797.486939][ T5628] Bluetooth: hci1: command tx timeout [ 797.619012][T18933] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 799.566903][ T5628] Bluetooth: hci1: command tx timeout [ 800.364798][T18933] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 800.392252][T18933] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 800.425019][T18933] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 800.444581][T18933] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 800.478859][T18933] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 800.503504][T18933] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 800.547700][T18933] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 800.778848][T19042] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4178'. [ 800.801561][T19043] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4175'. [ 800.844540][T18933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.920567][T18933] 8021q: adding VLAN 0 to HW filter on device team0 [ 800.940363][ T7261] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.947629][ T7261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 800.985807][ T7261] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.993378][ T7261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 801.212381][T19059] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4180'. [ 801.316555][T19065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4181'. [ 801.647828][ T5628] Bluetooth: hci1: command tx timeout [ 801.847680][T18933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 802.076616][T19093] FAULT_INJECTION: forcing a failure. [ 802.076616][T19093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 802.121769][T19093] CPU: 1 UID: 0 PID: 19093 Comm: syz.0.4187 Not tainted syzkaller #0 PREEMPT(full) [ 802.121800][T19093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 802.121813][T19093] Call Trace: [ 802.121822][T19093] [ 802.121831][T19093] dump_stack_lvl+0xe8/0x150 [ 802.121872][T19093] should_fail_ex+0x40c/0x560 [ 802.121907][T19093] _copy_from_user+0x2d/0xb0 [ 802.121929][T19093] __sys_bpf+0x2e7/0xd90 [ 802.121970][T19093] ? __pfx___sys_bpf+0x10/0x10 [ 802.122014][T19093] ? __fget_files+0x2a/0x420 [ 802.122078][T19093] ? ksys_write+0x242/0x270 [ 802.122104][T19093] ? __pfx_ksys_write+0x10/0x10 [ 802.122133][T19093] __x64_sys_bpf+0xba/0xd0 [ 802.122161][T19093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.122186][T19093] do_syscall_64+0x174/0x580 [ 802.122211][T19093] ? trace_irq_disable+0x3b/0x140 [ 802.122239][T19093] ? clear_bhb_loop+0x40/0x90 [ 802.122268][T19093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.122289][T19093] RIP: 0033:0x7f51aad9e019 [ 802.122311][T19093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 802.122329][T19093] RSP: 002b:00007f51abd42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 802.122351][T19093] RAX: ffffffffffffffda RBX: 00007f51ab025fa0 RCX: 00007f51aad9e019 [ 802.122366][T19093] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000001 [ 802.122379][T19093] RBP: 00007f51abd42090 R08: 0000000000000000 R09: 0000000000000000 [ 802.122393][T19093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 802.122405][T19093] R13: 00007f51ab026038 R14: 00007f51ab025fa0 R15: 00007ffc45ca7868 [ 802.122445][T19093] [ 802.346448][T19101] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4190'. [ 802.363766][T19097] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4188'. [ 802.700414][T19098] netlink: 'syz.3.4189': attribute type 75 has an invalid length. [ 802.961572][T19109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4191'. [ 803.091805][T18933] veth0_vlan: entered promiscuous mode [ 803.149333][T19116] FAULT_INJECTION: forcing a failure. [ 803.149333][T19116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 803.166275][T19116] CPU: 0 UID: 0 PID: 19116 Comm: syz.3.4194 Not tainted syzkaller #0 PREEMPT(full) [ 803.166305][T19116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 803.166317][T19116] Call Trace: [ 803.166326][T19116] [ 803.166336][T19116] dump_stack_lvl+0xe8/0x150 [ 803.166375][T19116] should_fail_ex+0x40c/0x560 [ 803.166411][T19116] _copy_from_user+0x2d/0xb0 [ 803.166440][T19116] __sys_bpf+0x2e7/0xd90 [ 803.166484][T19116] ? __pfx___sys_bpf+0x10/0x10 [ 803.166530][T19116] ? __fget_files+0x2a/0x420 [ 803.166585][T19116] ? ksys_write+0x242/0x270 [ 803.166610][T19116] ? __pfx_ksys_write+0x10/0x10 [ 803.166640][T19116] __x64_sys_bpf+0xba/0xd0 [ 803.166666][T19116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.166691][T19116] do_syscall_64+0x174/0x580 [ 803.166715][T19116] ? trace_irq_disable+0x3b/0x140 [ 803.166744][T19116] ? clear_bhb_loop+0x40/0x90 [ 803.166771][T19116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.166793][T19116] RIP: 0033:0x7ff9fed9e019 [ 803.166814][T19116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.166832][T19116] RSP: 002b:00007ff9fcff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 803.166852][T19116] RAX: ffffffffffffffda RBX: 00007ff9ff025fa0 RCX: 00007ff9fed9e019 [ 803.166867][T19116] RDX: 000000000000000c RSI: 0000200000000080 RDI: 000000000000000a [ 803.166881][T19116] RBP: 00007ff9fcff6090 R08: 0000000000000000 R09: 0000000000000000 [ 803.166893][T19116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 803.166905][T19116] R13: 00007ff9ff026038 R14: 00007ff9ff025fa0 R15: 00007fffd728aa18 [ 803.166943][T19116] [ 803.198195][T18933] veth1_vlan: entered promiscuous mode [ 803.455832][T19120] syzkaller0: entered promiscuous mode [ 803.463290][T19120] syzkaller0: entered allmulticast mode [ 803.542682][T18933] veth0_macvtap: entered promiscuous mode [ 803.820889][T19133] FAULT_INJECTION: forcing a failure. [ 803.820889][T19133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 803.847970][T19133] CPU: 0 UID: 0 PID: 19133 Comm: syz.4.4199 Not tainted syzkaller #0 PREEMPT(full) [ 803.847999][T19133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 803.848012][T19133] Call Trace: [ 803.848021][T19133] [ 803.848031][T19133] dump_stack_lvl+0xe8/0x150 [ 803.848069][T19133] should_fail_ex+0x40c/0x560 [ 803.848102][T19133] _copy_from_user+0x2d/0xb0 [ 803.848125][T19133] __sys_bpf+0x2e7/0xd90 [ 803.848164][T19133] ? __pfx___sys_bpf+0x10/0x10 [ 803.848190][T19133] ? lock_acquire+0x106/0x350 [ 803.848231][T19133] ? ktime_get+0x45/0x220 [ 803.848281][T19133] ? __pfx_clockevents_program_event+0x10/0x10 [ 803.848317][T19133] __x64_sys_bpf+0xba/0xd0 [ 803.848345][T19133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.848368][T19133] do_syscall_64+0x174/0x580 [ 803.848395][T19133] ? clear_bhb_loop+0x40/0x90 [ 803.848422][T19133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.848444][T19133] RIP: 0033:0x7f0392b9e019 [ 803.848464][T19133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.848482][T19133] RSP: 002b:00007f0393989028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 803.848505][T19133] RAX: ffffffffffffffda RBX: 00007f0392e26090 RCX: 00007f0392b9e019 [ 803.848520][T19133] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 803.848534][T19133] RBP: 00007f0393989090 R08: 0000000000000000 R09: 0000000000000000 [ 803.848547][T19133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 803.848559][T19133] R13: 00007f0392e26128 R14: 00007f0392e26090 R15: 00007ffde358f768 [ 803.848591][T19133] [ 804.820173][T19143] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4202'. [ 808.646686][T19158] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4207'. [ 808.882755][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.896551][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.908160][T18933] veth1_macvtap: entered promiscuous mode [ 810.122523][ T47] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.225530][T19167] nbd: must specify an index to disconnect [ 810.239480][T18933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 810.842148][ T47] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.918632][T18933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 810.961331][ T148] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.984454][ T148] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.033994][ T148] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.054181][ T148] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.138293][ T47] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.303900][T19192] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4217'. [ 811.334334][ T47] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.524127][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.533166][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.651042][ T7260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.685076][ T7260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.713237][T19201] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4218'. [ 811.940127][T19207] syzkaller0: entered promiscuous mode [ 811.945903][T19207] syzkaller0: entered allmulticast mode [ 812.452933][T19222] FAULT_INJECTION: forcing a failure. [ 812.452933][T19222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 812.533205][T19222] CPU: 1 UID: 0 PID: 19222 Comm: syz.3.4223 Not tainted syzkaller #0 PREEMPT(full) [ 812.533244][T19222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 812.533257][T19222] Call Trace: [ 812.533266][T19222] [ 812.533275][T19222] dump_stack_lvl+0xe8/0x150 [ 812.533313][T19222] should_fail_ex+0x40c/0x560 [ 812.533346][T19222] _copy_from_user+0x2d/0xb0 [ 812.533367][T19222] __sys_bpf+0x2e7/0xd90 [ 812.533398][T19222] ? ktime_get+0x45/0x220 [ 812.533429][T19222] ? __pfx___sys_bpf+0x10/0x10 [ 812.533454][T19222] ? perf_trace_preemptirq_template+0xb2/0x350 [ 812.533487][T19222] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 812.533549][T19222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.533580][T19222] __x64_sys_bpf+0xba/0xd0 [ 812.533606][T19222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.533630][T19222] do_syscall_64+0x174/0x580 [ 812.533658][T19222] ? clear_bhb_loop+0x40/0x90 [ 812.533686][T19222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.533708][T19222] RIP: 0033:0x7ff9fed9e019 [ 812.533728][T19222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.533747][T19222] RSP: 002b:00007ff9fcff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 812.533770][T19222] RAX: ffffffffffffffda RBX: 00007ff9ff025fa0 RCX: 00007ff9fed9e019 [ 812.533786][T19222] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 812.533800][T19222] RBP: 00007ff9fcff6090 R08: 0000000000000000 R09: 0000000000000000 [ 812.533814][T19222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.533826][T19222] R13: 00007ff9ff026038 R14: 00007ff9ff025fa0 R15: 00007fffd728aa18 [ 812.533861][T19222] [ 812.650993][T19226] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 812.844360][T19232] FAULT_INJECTION: forcing a failure. [ 812.844360][T19232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 812.858319][T19232] CPU: 1 UID: 0 PID: 19232 Comm: syz.3.4225 Not tainted syzkaller #0 PREEMPT(full) [ 812.858348][T19232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 812.858361][T19232] Call Trace: [ 812.858370][T19232] [ 812.858384][T19232] dump_stack_lvl+0xe8/0x150 [ 812.858422][T19232] should_fail_ex+0x40c/0x560 [ 812.858461][T19232] _copy_from_user+0x2d/0xb0 [ 812.858480][T19232] ___sys_recvmsg+0x173/0x5a0 [ 812.858509][T19232] ? __pfx____sys_recvmsg+0x10/0x10 [ 812.858535][T19232] ? __fget_files+0x2a/0x420 [ 812.858577][T19232] ? __fget_files+0x3a2/0x420 [ 812.858613][T19232] __x64_sys_recvmsg+0x1ae/0x290 [ 812.858644][T19232] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 812.858683][T19232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.858704][T19232] do_syscall_64+0x174/0x580 [ 812.858726][T19232] ? clear_bhb_loop+0x40/0x90 [ 812.858749][T19232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.858769][T19232] RIP: 0033:0x7ff9fed9e019 [ 812.858788][T19232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.858805][T19232] RSP: 002b:00007ff9fcff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 812.858827][T19232] RAX: ffffffffffffffda RBX: 00007ff9ff025fa0 RCX: 00007ff9fed9e019 [ 812.858841][T19232] RDX: 0000000000010021 RSI: 0000200000000300 RDI: 0000000000000005 [ 812.858853][T19232] RBP: 00007ff9fcff6090 R08: 0000000000000000 R09: 0000000000000000 [ 812.858865][T19232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.858876][T19232] R13: 00007ff9ff026038 R14: 00007ff9ff025fa0 R15: 00007fffd728aa18 [ 812.858906][T19232] [ 813.723722][T19251] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4229'. [ 816.539728][T19226] syz.5.4224 (19226) used obsolete PPPIOCDETACH ioctl [ 816.557044][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 816.766680][T19259] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4230'. [ 816.792948][ T47] bridge_slave_1: left allmulticast mode [ 816.817903][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.922787][ T47] bridge_slave_0: left allmulticast mode [ 816.956657][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.279433][T19285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4236'. [ 817.476914][T19289] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4236'. [ 818.499815][ T47] geneve1 (unregistering): left promiscuous mode [ 818.519433][ T47] team0: Port device geneve1 removed [ 818.664004][T19303] netlink: 199808 bytes leftover after parsing attributes in process `syz.5.4237'. [ 818.705284][T19303] netlink: 'syz.5.4237': attribute type 1 has an invalid length. [ 818.815904][T19306] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4237'. [ 819.590010][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 819.611191][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 819.622717][ T47] bond0 (unregistering): Released all slaves [ 819.659952][T19310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4239'. [ 819.676600][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 819.684608][T19285] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 819.702881][T19285] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 819.703245][T19305] netlink: 'syz.5.4237': attribute type 11 has an invalid length. [ 819.746832][T19285] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 820.031212][T19317] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4242'. [ 820.351614][T19328] netlink: 'syz.3.4243': attribute type 10 has an invalid length. [ 820.528919][T19329] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4243'. [ 820.548795][T19318] syzkaller0: entered promiscuous mode [ 820.554355][T19318] syzkaller0: entered allmulticast mode [ 820.563153][T19337] netlink: 'syz.4.4245': attribute type 15 has an invalid length. [ 820.571089][T19337] netlink: 11870 bytes leftover after parsing attributes in process `syz.4.4245'. [ 820.863559][T19328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 820.907175][T19335] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4246'. [ 821.347376][T19361] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4249'. [ 826.669246][T19420] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4258'. [ 826.679875][T19420] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4258'. [ 826.821578][T19423] netlink: 'syz.3.4259': attribute type 4 has an invalid length. [ 826.829436][T19423] netlink: 'syz.3.4259': attribute type 17 has an invalid length. [ 826.973603][T19429] FAULT_INJECTION: forcing a failure. [ 826.973603][T19429] name failslab, interval 1, probability 0, space 0, times 0 [ 826.986646][T19429] CPU: 1 UID: 0 PID: 19429 Comm: syz.0.4260 Not tainted syzkaller #0 PREEMPT(full) [ 826.986684][T19429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 826.986702][T19429] Call Trace: [ 826.986714][T19429] [ 826.986727][T19429] dump_stack_lvl+0xe8/0x150 [ 826.986767][T19429] should_fail_ex+0x40c/0x560 [ 826.986801][T19429] should_failslab+0xa8/0x100 [ 826.986837][T19429] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 826.986867][T19429] ? do_getname+0x2e/0x250 [ 826.986891][T19429] ? do_getname+0x2e/0x250 [ 826.986924][T19429] do_getname+0x2e/0x250 [ 826.986949][T19429] ? user_path_at+0x1e/0x160 [ 826.986984][T19429] user_path_at+0x2a/0x160 [ 826.987019][T19429] __se_sys_mount+0x2dc/0x420 [ 826.987066][T19429] ? __pfx___se_sys_mount+0x10/0x10 [ 826.987102][T19429] ? __x64_sys_mount+0x20/0xc0 [ 826.987130][T19429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.987153][T19429] do_syscall_64+0x174/0x580 [ 826.987177][T19429] ? clear_bhb_loop+0x40/0x90 [ 826.987204][T19429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.987222][T19429] RIP: 0033:0x7f51aad9e019 [ 826.987240][T19429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.987256][T19429] RSP: 002b:00007f51abd21028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 826.987277][T19429] RAX: ffffffffffffffda RBX: 00007f51ab026090 RCX: 00007f51aad9e019 [ 826.987292][T19429] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000000 [ 826.987305][T19429] RBP: 00007f51abd21090 R08: 0000000000000000 R09: 0000000000000000 [ 826.987318][T19429] R10: 000000000008c022 R11: 0000000000000246 R12: 0000000000000001 [ 826.987330][T19429] R13: 00007f51ab026128 R14: 00007f51ab026090 R15: 00007ffc45ca7868 [ 826.987365][T19429] [ 827.179318][T19429] netlink: 'syz.0.4260': attribute type 16 has an invalid length. [ 827.187522][T19429] netlink: 'syz.0.4260': attribute type 17 has an invalid length. [ 829.200240][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3 [ 829.226910][T19429] lo: entered promiscuous mode [ 829.256676][T19429] tunl0: entered promiscuous mode [ 829.263874][T19429] gre0: entered promiscuous mode [ 829.273083][T19429] gretap0: entered promiscuous mode [ 829.302932][T19429] erspan0: entered promiscuous mode [ 829.334695][T19429] ip_vti0: entered promiscuous mode [ 829.350911][T19437] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4261'. [ 829.360957][T19429] ip6_vti0: entered promiscuous mode [ 829.390344][T19429] sit0: entered promiscuous mode [ 829.404608][T19429] ip6tnl0: entered promiscuous mode [ 829.412326][T19429] ip6gre0: entered promiscuous mode [ 829.421198][T19429] syz_tun: entered promiscuous mode [ 829.427980][T19429] ip6gretap0: entered promiscuous mode [ 829.435230][T19429] bridge0: entered promiscuous mode [ 829.442149][T19429] vcan0: entered promiscuous mode [ 829.448614][T19429] bond0: entered promiscuous mode [ 829.453883][T19429] bond_slave_0: entered promiscuous mode [ 829.473076][T19429] bond_slave_1: entered promiscuous mode [ 829.498932][T19429] team0: entered promiscuous mode [ 829.517561][T19429] team_slave_0: entered promiscuous mode [ 829.523505][T19429] team_slave_1: entered promiscuous mode [ 829.530891][T19429] dummy0: entered promiscuous mode [ 829.537161][T19429] nlmon0: entered promiscuous mode [ 829.543321][T19429] batadv0: entered promiscuous mode [ 829.554951][T19429] vxcan0: entered promiscuous mode [ 829.561048][T19429] vxcan1: entered promiscuous mode [ 829.567100][T19429] veth0: entered promiscuous mode [ 829.573103][T19429] veth1: entered promiscuous mode [ 829.579073][T19429] wg0: entered promiscuous mode [ 829.585061][T19429] wg1: entered promiscuous mode [ 829.590973][T19429] wg2: entered promiscuous mode [ 829.596879][T19429] veth0_to_bridge: entered promiscuous mode [ 829.604986][T19429] veth1_to_bridge: entered promiscuous mode [ 829.608139][T19439] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4263'. [ 829.616767][T19429] veth0_to_bond: entered promiscuous mode [ 829.719280][T19429] veth1_to_bond: entered promiscuous mode [ 829.728999][T19429] veth0_to_team: entered promiscuous mode [ 829.753284][T19429] veth1_to_team: entered promiscuous mode [ 829.772179][T19429] veth0_to_batadv: entered promiscuous mode [ 829.796615][T19429] batadv_slave_0: entered promiscuous mode [ 829.809929][T19429] veth1_to_batadv: entered promiscuous mode [ 829.827431][T19429] batadv_slave_1: entered promiscuous mode [ 829.842032][T19429] xfrm0: entered promiscuous mode [ 829.857980][T19429] veth0_to_hsr: entered promiscuous mode [ 829.873691][T19429] veth1_to_hsr: entered promiscuous mode [ 829.883542][T19429] hsr0: entered promiscuous mode [ 829.890407][T19429] veth1_virt_wifi: entered promiscuous mode [ 829.898157][T19429] veth0_virt_wifi: entered promiscuous mode [ 829.907566][T19429] virt_wifi0: entered promiscuous mode [ 829.920239][T19429] vlan0: entered promiscuous mode [ 829.944645][T19429] vlan1: entered promiscuous mode [ 829.951823][T19429] macvlan0: entered promiscuous mode [ 829.959762][T19429] macvlan1: entered promiscuous mode [ 829.968256][T19429] ipvlan0: entered promiscuous mode [ 830.002682][T19429] ipvlan1: entered promiscuous mode [ 830.038455][T19429] veth0_macvtap: left allmulticast mode [ 830.057924][T19429] macvtap0: entered promiscuous mode [ 830.094180][T19429] macsec0: entered promiscuous mode [ 830.102058][T19429] geneve0: entered promiscuous mode [ 830.109567][T19429] geneve1: entered promiscuous mode [ 830.117634][T19429] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 830.128427][T19429] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 830.139105][T19429] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 830.148550][T19429] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 830.163359][T19429] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode [ 830.178236][T19429] mac80211_hwsim hwsim28 wlan1: entered promiscuous mode [ 830.200066][T19429] mac80211_hwsim hwsim31 wlan2: entered promiscuous mode [ 830.307067][T19429] syzkaller0: entered promiscuous mode [ 830.314706][T19429] …: entered promiscuous mode [ 830.418107][T19429] mac80211_hwsim hwsim33 wlan3: entered promiscuous mode [ 830.449103][T19429] ÷ÿÿÿÿÿÿÿ: entered promiscuous mode [ 832.671632][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 832.681764][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 832.692309][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 832.704591][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 834.138740][T19493] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4271'. [ 834.197695][T15121] smbdirect: ib_dev[syz2] removed [ 834.429671][ T47] team0 (unregistering): Port device team_slave_1 removed [ 834.437608][T19500] FAULT_INJECTION: forcing a failure. [ 834.437608][T19500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 834.450881][T19500] CPU: 1 UID: 0 PID: 19500 Comm: syz.5.4273 Not tainted syzkaller #0 PREEMPT(full) [ 834.450908][T19500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 834.450921][T19500] Call Trace: [ 834.450928][T19500] [ 834.450936][T19500] dump_stack_lvl+0xe8/0x150 [ 834.450973][T19500] should_fail_ex+0x40c/0x560 [ 834.451006][T19500] _copy_from_user+0x2d/0xb0 [ 834.451028][T19500] ___sys_sendmsg+0x1c6/0x360 [ 834.451052][T19500] ? __lock_acquire+0x683/0x2cf0 [ 834.451087][T19500] ? __pfx____sys_sendmsg+0x10/0x10 [ 834.451149][T19500] ? __fget_files+0x2a/0x420 [ 834.451178][T19500] ? __fget_files+0x3a2/0x420 [ 834.451219][T19500] __x64_sys_sendmsg+0x1b1/0x290 [ 834.451246][T19500] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 834.451291][T19500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.451315][T19500] do_syscall_64+0x174/0x580 [ 834.451350][T19500] ? clear_bhb_loop+0x40/0x90 [ 834.451377][T19500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.451399][T19500] RIP: 0033:0x7ff73839e019 [ 834.451420][T19500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.451439][T19500] RSP: 002b:00007ff739351028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 834.451462][T19500] RAX: ffffffffffffffda RBX: 00007ff738625fa0 RCX: 00007ff73839e019 [ 834.451477][T19500] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 834.451491][T19500] RBP: 00007ff739351090 R08: 0000000000000000 R09: 0000000000000000 [ 834.451505][T19500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 834.451517][T19500] R13: 00007ff738626038 R14: 00007ff738625fa0 R15: 00007ffe3f20ca98 [ 834.451551][T19500] [ 834.464890][ T47] team0 (unregistering): Port device team_slave_0 removed [ 834.866118][T19513] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 834.961892][ T5765] virt_wifi0 speed is unknown, defaulting to 1000 [ 834.974367][ T5765] infiniband syz2: ib_query_port failed (-19) [ 835.180624][T19501] syzkaller0: entered promiscuous mode [ 835.186273][T19501] syzkaller0: entered allmulticast mode [ 835.243982][T19522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4276'. [ 835.284547][T19521] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4277'. [ 835.384919][T19521] lo speed is unknown, defaulting to 1000 [ 835.628886][T19527] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4280'. [ 835.913699][T19525] netlink: 16046 bytes leftover after parsing attributes in process `syz.0.4279'. [ 836.533985][T19539] FAULT_INJECTION: forcing a failure. [ 836.533985][T19539] name failslab, interval 1, probability 0, space 0, times 0 [ 836.632638][T19539] CPU: 0 UID: 0 PID: 19539 Comm: syz.0.4283 Not tainted syzkaller #0 PREEMPT(full) [ 836.632667][T19539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 836.632681][T19539] Call Trace: [ 836.632690][T19539] [ 836.632699][T19539] dump_stack_lvl+0xe8/0x150 [ 836.632738][T19539] should_fail_ex+0x40c/0x560 [ 836.632771][T19539] should_failslab+0xa8/0x100 [ 836.632806][T19539] __kmalloc_noprof+0xfe/0x720 [ 836.632846][T19539] ? kernfs_fop_write_iter+0x157/0x540 [ 836.632869][T19539] ? kernfs_fop_write_iter+0x157/0x540 [ 836.632901][T19539] kernfs_fop_write_iter+0x157/0x540 [ 836.632933][T19539] vfs_write+0x612/0xba0 [ 836.632965][T19539] ? __pfx_vfs_write+0x10/0x10 [ 836.632999][T19539] ? __fget_files+0x2a/0x420 [ 836.633041][T19539] ksys_write+0x150/0x270 [ 836.633066][T19539] ? __pfx_ksys_write+0x10/0x10 [ 836.633085][T19539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.633119][T19539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.633143][T19539] do_syscall_64+0x174/0x580 [ 836.633170][T19539] ? clear_bhb_loop+0x40/0x90 [ 836.633197][T19539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.633219][T19539] RIP: 0033:0x7f51aad9e019 [ 836.633239][T19539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 836.633258][T19539] RSP: 002b:00007f51abd42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 836.633280][T19539] RAX: ffffffffffffffda RBX: 00007f51ab025fa0 RCX: 00007f51aad9e019 [ 836.633296][T19539] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000009 [ 836.633310][T19539] RBP: 00007f51abd42090 R08: 0000000000000000 R09: 0000000000000000 [ 836.633323][T19539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.633336][T19539] R13: 00007f51ab026038 R14: 00007f51ab025fa0 R15: 00007ffc45ca7868 [ 836.633372][T19539] [ 836.650104][T19541] netlink: 'syz.3.4284': attribute type 39 has an invalid length. [ 838.812010][T19521] lo speed is unknown, defaulting to 1000 [ 838.821419][T19527] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4280'. [ 838.949176][T19521] lo speed is unknown, defaulting to 1000 [ 838.999799][T19521] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 839.071622][T19521] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 839.133786][T19521] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 839.212977][T19553] netlink: 694 bytes leftover after parsing attributes in process `syz.0.4288'. [ 839.232780][T19550] netlink: 277 bytes leftover after parsing attributes in process `syz.4.4287'. [ 839.299474][T19521] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 839.497450][T19521] lo speed is unknown, defaulting to 1000 [ 839.510753][T19559] FAULT_INJECTION: forcing a failure. [ 839.510753][T19559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 839.529690][T19521] lo speed is unknown, defaulting to 1000 [ 839.562287][T19559] CPU: 0 UID: 0 PID: 19559 Comm: syz.3.4289 Not tainted syzkaller #0 PREEMPT(full) [ 839.562317][T19559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 839.562331][T19559] Call Trace: [ 839.562343][T19559] [ 839.562355][T19559] dump_stack_lvl+0xe8/0x150 [ 839.562413][T19559] should_fail_ex+0x40c/0x560 [ 839.562484][T19559] _copy_from_user+0x2d/0xb0 [ 839.562523][T19559] ___sys_sendmsg+0x1c6/0x360 [ 839.562597][T19559] ? __pfx____sys_sendmsg+0x10/0x10 [ 839.562771][T19559] ? __fget_files+0x2a/0x420 [ 839.562870][T19559] ? __fget_files+0x2a/0x420 [ 839.562907][T19559] ? __fget_files+0x3a2/0x420 [ 839.563015][T19559] __x64_sys_sendmsg+0x1b1/0x290 [ 839.563071][T19559] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 839.563205][T19559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.563244][T19559] do_syscall_64+0x174/0x580 [ 839.563288][T19559] ? clear_bhb_loop+0x40/0x90 [ 839.563340][T19559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.563369][T19559] RIP: 0033:0x7ff9fed9e019 [ 839.563401][T19559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.563420][T19559] RSP: 002b:00007ff9fcfd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 839.563444][T19559] RAX: ffffffffffffffda RBX: 00007ff9ff026090 RCX: 00007ff9fed9e019 [ 839.563460][T19559] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000a [ 839.563474][T19559] RBP: 00007ff9fcfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 839.563487][T19559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 839.563500][T19559] R13: 00007ff9ff026128 R14: 00007ff9ff026090 R15: 00007fffd728aa18 [ 839.563615][T19559] [ 839.570341][T19521] lo speed is unknown, defaulting to 1000 [ 839.943002][T19521] lo speed is unknown, defaulting to 1000 [ 839.961252][T19521] lo speed is unknown, defaulting to 1000 [ 840.410452][T19579] netlink: 694 bytes leftover after parsing attributes in process `syz.1.4294'. [ 840.617230][T19589] syzkaller0: entered allmulticast mode [ 840.765855][T19593] netlink: 'syz.1.4298': attribute type 21 has an invalid length. [ 840.801371][T19593] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4298'. [ 840.810649][T19593] netlink: 'syz.1.4298': attribute type 4 has an invalid length. [ 840.818438][T19593] netlink: 'syz.1.4298': attribute type 5 has an invalid length. [ 840.834565][T19593] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4298'. [ 841.367739][T19598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4299'. [ 841.542341][T19600] netlink: 694 bytes leftover after parsing attributes in process `syz.1.4300'. [ 842.074504][ T5286] 8021q: adding VLAN 0 to HW filter on device eth4 [ 842.426704][T19616] FAULT_INJECTION: forcing a failure. [ 842.426704][T19616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 842.459354][T19616] CPU: 0 UID: 0 PID: 19616 Comm: syz.5.4304 Not tainted syzkaller #0 PREEMPT(full) [ 842.459385][T19616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 842.459421][T19616] Call Trace: [ 842.459429][T19616] [ 842.459438][T19616] dump_stack_lvl+0xe8/0x150 [ 842.459475][T19616] should_fail_ex+0x40c/0x560 [ 842.459508][T19616] _copy_from_user+0x2d/0xb0 [ 842.459530][T19616] ___sys_sendmsg+0x1c6/0x360 [ 842.459555][T19616] ? __lock_acquire+0x683/0x2cf0 [ 842.459591][T19616] ? __pfx____sys_sendmsg+0x10/0x10 [ 842.459654][T19616] ? __fget_files+0x2a/0x420 [ 842.459682][T19616] ? __fget_files+0x3a2/0x420 [ 842.459723][T19616] __x64_sys_sendmsg+0x1b1/0x290 [ 842.459751][T19616] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 842.459795][T19616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.459827][T19616] do_syscall_64+0x174/0x580 [ 842.459851][T19616] ? trace_irq_disable+0x3b/0x140 [ 842.459879][T19616] ? clear_bhb_loop+0x40/0x90 [ 842.459906][T19616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.459928][T19616] RIP: 0033:0x7ff73839e019 [ 842.459950][T19616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.459971][T19616] RSP: 002b:00007ff739351028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 842.459994][T19616] RAX: ffffffffffffffda RBX: 00007ff738625fa0 RCX: 00007ff73839e019 [ 842.460010][T19616] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 842.460023][T19616] RBP: 00007ff739351090 R08: 0000000000000000 R09: 0000000000000000 [ 842.460036][T19616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 842.460048][T19616] R13: 00007ff738626038 R14: 00007ff738625fa0 R15: 00007ffe3f20ca98 [ 842.460082][T19616] [ 842.755232][T19623] IPv6: Can't replace route, no match found [ 842.764708][T19623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 842.832122][T19625] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4308'. [ 843.186238][T19632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4310'. [ 843.464796][T19650] netlink: 694 bytes leftover after parsing attributes in process `syz.5.4313'. [ 844.119700][T19667] unsupported nla_type 3072 [ 844.290960][T19672] FAULT_INJECTION: forcing a failure. [ 844.290960][T19672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 844.310140][T19672] CPU: 0 UID: 0 PID: 19672 Comm: syz.4.4316 Not tainted syzkaller #0 PREEMPT(full) [ 844.310167][T19672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 844.310179][T19672] Call Trace: [ 844.310188][T19672] [ 844.310197][T19672] dump_stack_lvl+0xe8/0x150 [ 844.310235][T19672] should_fail_ex+0x40c/0x560 [ 844.310271][T19672] _copy_from_user+0x2d/0xb0 [ 844.310294][T19672] do_ipv6_setsockopt+0x249/0x3180 [ 844.310433][T19672] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 844.310458][T19672] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 844.310493][T19672] ? perf_trace_lock+0xff/0x410 [ 844.310537][T19672] ? __lock_acquire+0x683/0x2cf0 [ 844.310592][T19672] ? aa_sk_perm+0x6d5/0x900 [ 844.310616][T19672] ? __fget_files+0x2a/0x420 [ 844.310651][T19672] ? __pfx_aa_sk_perm+0x10/0x10 [ 844.310679][T19672] ? __fget_files+0x2a/0x420 [ 844.310706][T19672] ? aa_sock_opt_perm+0xff/0x1a0 [ 844.310734][T19672] ipv6_setsockopt+0x59/0x170 [ 844.310753][T19672] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 844.310790][T19672] do_sock_setsockopt+0x17c/0x1b0 [ 844.310821][T19672] __x64_sys_setsockopt+0x13d/0x1b0 [ 844.310849][T19672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.310874][T19672] do_syscall_64+0x174/0x580 [ 844.310896][T19672] ? trace_irq_disable+0x3b/0x140 [ 844.310925][T19672] ? clear_bhb_loop+0x40/0x90 [ 844.310951][T19672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.310974][T19672] RIP: 0033:0x7f0392b9e019 [ 844.310994][T19672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.311013][T19672] RSP: 002b:00007f0393989028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 844.311044][T19672] RAX: ffffffffffffffda RBX: 00007f0392e26090 RCX: 00007f0392b9e019 [ 844.311060][T19672] RDX: 000000000000004c RSI: 0000000000000029 RDI: 0000000000000004 [ 844.311073][T19672] RBP: 00007f0393989090 R08: 0000000000000004 R09: 0000000000000000 [ 844.311085][T19672] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 844.311099][T19672] R13: 00007f0392e26128 R14: 00007f0392e26090 R15: 00007ffde358f768 [ 844.311140][T19672] [ 846.888592][T19731] __nla_validate_parse: 2 callbacks suppressed [ 846.888612][T19731] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4322'. [ 846.952015][T19730] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4323'. [ 846.986455][T19729] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.180969][T19734] netlink: 694 bytes leftover after parsing attributes in process `syz.0.4324'. [ 847.522516][T19757] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4328'. [ 848.286315][T19775] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4333'. [ 849.234909][T19795] ipvlan0: left promiscuous mode [ 849.308666][T19801] FAULT_INJECTION: forcing a failure. [ 849.308666][T19801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 849.330684][T19801] CPU: 1 UID: 0 PID: 19801 Comm: syz.1.4338 Not tainted syzkaller #0 PREEMPT(full) [ 849.330714][T19801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 849.330728][T19801] Call Trace: [ 849.330736][T19801] [ 849.330745][T19801] dump_stack_lvl+0xe8/0x150 [ 849.330783][T19801] should_fail_ex+0x40c/0x560 [ 849.330816][T19801] _copy_from_user+0x2d/0xb0 [ 849.330839][T19801] ___sys_sendmsg+0x1c6/0x360 [ 849.330863][T19801] ? __lock_acquire+0x683/0x2cf0 [ 849.330898][T19801] ? __pfx____sys_sendmsg+0x10/0x10 [ 849.330959][T19801] ? __fget_files+0x2a/0x420 [ 849.330988][T19801] ? __fget_files+0x3a2/0x420 [ 849.331027][T19801] __x64_sys_sendmsg+0x1b1/0x290 [ 849.331050][T19801] ? lockdep_hardirqs_on+0x7a/0x110 [ 849.331076][T19801] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 849.331119][T19801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.331142][T19801] do_syscall_64+0x174/0x580 [ 849.331168][T19801] ? clear_bhb_loop+0x40/0x90 [ 849.331195][T19801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.331216][T19801] RIP: 0033:0x7f5a6739e019 [ 849.331236][T19801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.331255][T19801] RSP: 002b:00007f5a681aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 849.331277][T19801] RAX: ffffffffffffffda RBX: 00007f5a67625fa0 RCX: 00007f5a6739e019 [ 849.331293][T19801] RDX: 000000000000ff4c RSI: 0000200000000000 RDI: 0000000000000005 [ 849.331306][T19801] RBP: 00007f5a681aa090 R08: 0000000000000000 R09: 0000000000000000 [ 849.331319][T19801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 849.331331][T19801] R13: 00007f5a67626038 R14: 00007f5a67625fa0 R15: 00007ffefdc7a078 [ 849.331365][T19801] [ 849.587053][T19803] netlink: 694 bytes leftover after parsing attributes in process `syz.3.4339'. [ 850.496352][T19833] syzkaller0: entered promiscuous mode [ 850.501922][T19833] syzkaller0: entered allmulticast mode [ 851.871720][T19868] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4354'. [ 851.920536][T19870] netlink: 'syz.0.4355': attribute type 10 has an invalid length. [ 851.978199][T19870] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4355'. [ 852.143556][T19815] Set syz0 is full, maxelem 65536 reached [ 854.602328][T19852] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4352'. [ 854.615065][ T5286] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 854.643832][T19870] batadv0: entered allmulticast mode [ 854.653599][T19870] bridge0: port 3(batadv0) entered blocking state [ 854.682526][T19870] bridge0: port 3(batadv0) entered disabled state [ 854.712295][T19870] bridge0: port 3(batadv0) entered blocking state [ 854.720504][T19870] bridge0: port 3(batadv0) entered forwarding state [ 854.796911][ T47] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 854.807823][ T47] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 854.886867][T19883] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4359'. [ 854.999460][T19883] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4359'. [ 855.081159][T19890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4360'. [ 855.090180][T19890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4360'. [ 855.119091][T19896] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4362'. [ 858.720866][T19945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4368'. [ 858.837502][T19945] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4368'. [ 858.899642][T19957] FAULT_INJECTION: forcing a failure. [ 858.899642][T19957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 858.912799][T19957] CPU: 0 UID: 0 PID: 19957 Comm: syz.0.4371 Not tainted syzkaller #0 PREEMPT(full) [ 858.912828][T19957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 858.912841][T19957] Call Trace: [ 858.912867][T19957] [ 858.912878][T19957] dump_stack_lvl+0xe8/0x150 [ 858.912918][T19957] should_fail_ex+0x40c/0x560 [ 858.912955][T19957] _copy_from_user+0x2d/0xb0 [ 858.912979][T19957] ___sys_sendmsg+0x1c6/0x360 [ 858.913005][T19957] ? __lock_acquire+0x683/0x2cf0 [ 858.913044][T19957] ? __pfx____sys_sendmsg+0x10/0x10 [ 858.913101][T19957] ? __fget_files+0x2a/0x420 [ 858.913148][T19957] ? __fget_files+0x2a/0x420 [ 858.913176][T19957] ? __fget_files+0x3a2/0x420 [ 858.913223][T19957] __x64_sys_sendmsg+0x1b1/0x290 [ 858.913286][T19957] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 858.913338][T19957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.913362][T19957] do_syscall_64+0x174/0x580 [ 858.913388][T19957] ? clear_bhb_loop+0x40/0x90 [ 858.913418][T19957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.913440][T19957] RIP: 0033:0x7f51aad9e019 [ 858.913462][T19957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.913480][T19957] RSP: 002b:00007f51abd21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 858.913503][T19957] RAX: ffffffffffffffda RBX: 00007f51ab026090 RCX: 00007f51aad9e019 [ 858.913519][T19957] RDX: 0000000024000840 RSI: 0000200000000100 RDI: 000000000000000b [ 858.913533][T19957] RBP: 00007f51abd21090 R08: 0000000000000000 R09: 0000000000000000 [ 858.913546][T19957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.913559][T19957] R13: 00007f51ab026128 R14: 00007f51ab026090 R15: 00007ffc45ca7868 [ 858.913600][T19957] [ 859.167164][T19961] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4375'. [ 859.269750][T19961] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4375'. [ 859.424513][T19971] nbd: must specify an index to disconnect [ 859.454373][T19965] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4378'. [ 859.703027][T19976] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4380'. [ 859.894121][T19981] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4381'. [ 859.959955][T19986] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4382'. [ 860.574437][T19999] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4386'. [ 860.717472][T20006] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4386'. [ 863.565176][T20047] FAULT_INJECTION: forcing a failure. [ 863.565176][T20047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 863.617164][T20047] CPU: 1 UID: 0 PID: 20047 Comm: syz.5.4389 Not tainted syzkaller #0 PREEMPT(full) [ 863.617192][T20047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 863.617204][T20047] Call Trace: [ 863.617212][T20047] [ 863.617220][T20047] dump_stack_lvl+0xe8/0x150 [ 863.617258][T20047] should_fail_ex+0x40c/0x560 [ 863.617290][T20047] _copy_from_user+0x2d/0xb0 [ 863.617312][T20047] ___sys_sendmsg+0x1c6/0x360 [ 863.617336][T20047] ? __lock_acquire+0x683/0x2cf0 [ 863.617371][T20047] ? __pfx____sys_sendmsg+0x10/0x10 [ 863.617434][T20047] ? __fget_files+0x2a/0x420 [ 863.617463][T20047] ? __fget_files+0x3a2/0x420 [ 863.617503][T20047] __x64_sys_sendmsg+0x1b1/0x290 [ 863.617542][T20047] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 863.617587][T20047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.617611][T20047] do_syscall_64+0x174/0x580 [ 863.617635][T20047] ? trace_irq_disable+0x3b/0x140 [ 863.617689][T20047] ? clear_bhb_loop+0x40/0x90 [ 863.617716][T20047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.617738][T20047] RIP: 0033:0x7ff73839e019 [ 863.617757][T20047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 863.617776][T20047] RSP: 002b:00007ff739330028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 863.617799][T20047] RAX: ffffffffffffffda RBX: 00007ff738626090 RCX: 00007ff73839e019 [ 863.617815][T20047] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 863.617829][T20047] RBP: 00007ff739330090 R08: 0000000000000000 R09: 0000000000000000 [ 863.617842][T20047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.617855][T20047] R13: 00007ff738626128 R14: 00007ff738626090 R15: 00007ffe3f20ca98 [ 863.617889][T20047] [ 863.939928][T20052] FAULT_INJECTION: forcing a failure. [ 863.939928][T20052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 863.953172][T20052] CPU: 0 UID: 0 PID: 20052 Comm: syz.0.4391 Not tainted syzkaller #0 PREEMPT(full) [ 863.953201][T20052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 863.953215][T20052] Call Trace: [ 863.953223][T20052] [ 863.953232][T20052] dump_stack_lvl+0xe8/0x150 [ 863.953274][T20052] should_fail_ex+0x40c/0x560 [ 863.953310][T20052] _copy_from_user+0x2d/0xb0 [ 863.953335][T20052] ___sys_sendmsg+0x1c6/0x360 [ 863.953361][T20052] ? __lock_acquire+0x683/0x2cf0 [ 863.953400][T20052] ? __pfx____sys_sendmsg+0x10/0x10 [ 863.953476][T20052] ? __fget_files+0x2a/0x420 [ 863.953506][T20052] ? __fget_files+0x3a2/0x420 [ 863.953551][T20052] __x64_sys_sendmsg+0x1b1/0x290 [ 863.953575][T20052] ? perf_trace_preemptirq_template+0x26f/0x350 [ 863.953609][T20052] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 863.953660][T20052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.953685][T20052] do_syscall_64+0x174/0x580 [ 863.953713][T20052] ? clear_bhb_loop+0x40/0x90 [ 863.953744][T20052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.953765][T20052] RIP: 0033:0x7f51aad9e019 [ 863.953788][T20052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 863.953806][T20052] RSP: 002b:00007f51abd42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 863.953830][T20052] RAX: ffffffffffffffda RBX: 00007f51ab025fa0 RCX: 00007f51aad9e019 [ 863.953844][T20052] RDX: 000000000000ff4c RSI: 0000200000000000 RDI: 0000000000000006 [ 863.953868][T20052] RBP: 00007f51abd42090 R08: 0000000000000000 R09: 0000000000000000 [ 863.953881][T20052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.953893][T20052] R13: 00007f51ab026038 R14: 00007f51ab025fa0 R15: 00007ffc45ca7868 [ 863.953933][T20052] [ 864.483500][T20059] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4395'. [ 864.886131][T20067] netlink: 694 bytes leftover after parsing attributes in process `syz.0.4398'. [ 865.040593][T20072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4399'. [ 865.057553][T20072] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4399'. [ 865.358854][T20080] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4402'. [ 869.057717][T20157] nbd: must specify an index to disconnect [ 869.133081][T20161] syzkaller0: entered promiscuous mode [ 869.140264][T20161] syzkaller0: entered allmulticast mode [ 870.292201][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.298687][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.512829][T20048] Set syz0 is full, maxelem 65536 reached [ 873.651518][T20042] Set syz0 is full, maxelem 65536 reached [ 874.380467][T20182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4412'. [ 874.410259][T20173] syzkaller0: entered promiscuous mode [ 874.427117][T20173] syzkaller0: entered allmulticast mode [ 874.436601][T20182] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4412'. [ 874.446018][T20178] netlink: 694 bytes leftover after parsing attributes in process `syz.3.4411'. [ 874.654048][T20188] FAULT_INJECTION: forcing a failure. [ 874.654048][T20188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 874.686948][T20188] CPU: 0 UID: 0 PID: 20188 Comm: syz.0.4414 Not tainted syzkaller #0 PREEMPT(full) [ 874.686977][T20188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 874.686990][T20188] Call Trace: [ 874.686998][T20188] [ 874.687007][T20188] dump_stack_lvl+0xe8/0x150 [ 874.687046][T20188] should_fail_ex+0x40c/0x560 [ 874.687082][T20188] _copy_from_user+0x2d/0xb0 [ 874.687105][T20188] __sys_bpf+0x2e7/0xd90 [ 874.687147][T20188] ? __pfx___sys_bpf+0x10/0x10 [ 874.687193][T20188] ? __fget_files+0x2a/0x420 [ 874.687247][T20188] ? ksys_write+0x242/0x270 [ 874.687271][T20188] ? __pfx_ksys_write+0x10/0x10 [ 874.687300][T20188] __x64_sys_bpf+0xba/0xd0 [ 874.687327][T20188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.687353][T20188] do_syscall_64+0x174/0x580 [ 874.687378][T20188] ? trace_irq_disable+0x3b/0x140 [ 874.687408][T20188] ? clear_bhb_loop+0x40/0x90 [ 874.687435][T20188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.687456][T20188] RIP: 0033:0x7f51aad9e019 [ 874.687477][T20188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 874.687495][T20188] RSP: 002b:00007f51abd42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 874.687518][T20188] RAX: ffffffffffffffda RBX: 00007f51ab025fa0 RCX: 00007f51aad9e019 [ 874.687534][T20188] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 0000000000000000 [ 874.687547][T20188] RBP: 00007f51abd42090 R08: 0000000000000000 R09: 0000000000000000 [ 874.687560][T20188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 874.687572][T20188] R13: 00007f51ab026038 R14: 00007f51ab025fa0 R15: 00007ffc45ca7868 [ 874.687620][T20188] [ 875.200058][T20199] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4417'. [ 878.379971][T20235] FAULT_INJECTION: forcing a failure. [ 878.379971][T20235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 878.393608][T20235] CPU: 0 UID: 0 PID: 20235 Comm: syz.3.4420 Not tainted syzkaller #0 PREEMPT(full) [ 878.393637][T20235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 878.393649][T20235] Call Trace: [ 878.393657][T20235] [ 878.393667][T20235] dump_stack_lvl+0xe8/0x150 [ 878.393708][T20235] should_fail_ex+0x40c/0x560 [ 878.393746][T20235] _copy_from_user+0x2d/0xb0 [ 878.393770][T20235] __sys_bpf+0x2e7/0xd90 [ 878.393814][T20235] ? __pfx___sys_bpf+0x10/0x10 [ 878.393871][T20235] ? __fget_files+0x2a/0x420 [ 878.393927][T20235] ? ksys_write+0x242/0x270 [ 878.393954][T20235] ? __pfx_ksys_write+0x10/0x10 [ 878.393985][T20235] __x64_sys_bpf+0xba/0xd0 [ 878.394013][T20235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.394039][T20235] do_syscall_64+0x174/0x580 [ 878.394065][T20235] ? trace_irq_disable+0x3b/0x140 [ 878.394095][T20235] ? clear_bhb_loop+0x40/0x90 [ 878.394123][T20235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.394146][T20235] RIP: 0033:0x7ff9fed9e019 [ 878.394167][T20235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.394186][T20235] RSP: 002b:00007ff9fcff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 878.394209][T20235] RAX: ffffffffffffffda RBX: 00007ff9ff025fa0 RCX: 00007ff9fed9e019 [ 878.394225][T20235] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 878.394239][T20235] RBP: 00007ff9fcff6090 R08: 0000000000000000 R09: 0000000000000000 [ 878.394252][T20235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.394265][T20235] R13: 00007ff9ff026038 R14: 00007ff9ff025fa0 R15: 00007fffd728aa18 [ 878.394306][T20235] [ 879.192602][T20248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4424'. [ 881.548239][T20248] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4424'. [ 881.812542][T20260] netlink: 694 bytes leftover after parsing attributes in process `syz.4.4426'. [ 882.102896][T20268] FAULT_INJECTION: forcing a failure. [ 882.102896][T20268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 882.140255][T20268] CPU: 1 UID: 0 PID: 20268 Comm: syz.1.4432 Not tainted syzkaller #0 PREEMPT(full) [ 882.140286][T20268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 882.140299][T20268] Call Trace: [ 882.140308][T20268] [ 882.140319][T20268] dump_stack_lvl+0xe8/0x150 [ 882.140364][T20268] should_fail_ex+0x40c/0x560 [ 882.140413][T20268] _copy_from_user+0x2d/0xb0 [ 882.140440][T20268] ____sys_sendmsg+0x303/0x850 [ 882.140480][T20268] ? __pfx_____sys_sendmsg+0x10/0x10 [ 882.140524][T20268] ? import_iovec+0x73/0xa0 [ 882.140635][T20268] ___sys_sendmsg+0x2a5/0x360 [ 882.140660][T20268] ? __lock_acquire+0x683/0x2cf0 [ 882.140702][T20268] ? __pfx____sys_sendmsg+0x10/0x10 [ 882.140770][T20268] ? __fget_files+0x2a/0x420 [ 882.140822][T20268] ? __fget_files+0x2a/0x420 [ 882.140852][T20268] ? __fget_files+0x3a2/0x420 [ 882.140902][T20268] __x64_sys_sendmsg+0x1b1/0x290 [ 882.140935][T20268] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 882.140993][T20268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.141020][T20268] do_syscall_64+0x174/0x580 [ 882.141046][T20268] ? trace_irq_disable+0x3b/0x140 [ 882.141078][T20268] ? clear_bhb_loop+0x40/0x90 [ 882.141109][T20268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.141131][T20268] RIP: 0033:0x7f5a6739e019 [ 882.141154][T20268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 882.141172][T20268] RSP: 002b:00007f5a681aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 882.141196][T20268] RAX: ffffffffffffffda RBX: 00007f5a67625fa0 RCX: 00007f5a6739e019 [ 882.141212][T20268] RDX: 000000000000ff00 RSI: 0000200000001180 RDI: 0000000000000003 [ 882.141226][T20268] RBP: 00007f5a681aa090 R08: 0000000000000000 R09: 0000000000000000 [ 882.141240][T20268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 882.141252][T20268] R13: 00007f5a67626038 R14: 00007f5a67625fa0 R15: 00007ffefdc7a078 [ 882.141299][T20268] [ 882.440209][T20272] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4433'. [ 882.775608][T20280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4437'. [ 885.715567][T20283] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4437'. [ 886.104184][T20319] netlink: 694 bytes leftover after parsing attributes in process `syz.4.4440'. [ 886.918132][T20326] nft_compat: unsupported protocol 0 [ 889.324485][T20357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4450'. [ 889.369924][T20358] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4451'. [ 889.451477][T20362] netlink: 694 bytes leftover after parsing attributes in process `syz.5.4453'. [ 889.550128][T20357] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4450'. [ 893.043057][T20422] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4465'. [ 893.052084][T20422] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4465'. [ 893.297521][T20427] netlink: 694 bytes leftover after parsing attributes in process `syz.4.4467'. [ 893.820088][T20448] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4475'. [ 893.855900][T20450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4476'. [ 894.298318][T20460] FAULT_INJECTION: forcing a failure. [ 894.298318][T20460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 894.329884][T20460] CPU: 0 UID: 0 PID: 20460 Comm: syz.4.4477 Not tainted syzkaller #0 PREEMPT(full) [ 894.329915][T20460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 894.329934][T20460] Call Trace: [ 894.329942][T20460] [ 894.329952][T20460] dump_stack_lvl+0xe8/0x150 [ 894.329991][T20460] should_fail_ex+0x40c/0x560 [ 894.330025][T20460] _copy_from_user+0x2d/0xb0 [ 894.330047][T20460] ipv6_set_opt_hdr+0x3d3/0x760 [ 894.330087][T20460] do_ipv6_setsockopt+0x1444/0x3180 [ 894.330131][T20460] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 894.330164][T20460] ? get_pid_task+0x20/0x1f0 [ 894.330241][T20460] ? __lock_acquire+0x683/0x2cf0 [ 894.330295][T20460] ? aa_sk_perm+0x6d5/0x900 [ 894.330319][T20460] ? __fget_files+0x2a/0x420 [ 894.330353][T20460] ? __pfx_aa_sk_perm+0x10/0x10 [ 894.330377][T20460] ? __fget_files+0x2a/0x420 [ 894.330405][T20460] ? aa_sock_opt_perm+0xff/0x1a0 [ 894.330441][T20460] ipv6_setsockopt+0x59/0x170 [ 894.330460][T20460] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 894.330495][T20460] do_sock_setsockopt+0x17c/0x1b0 [ 894.330524][T20460] __x64_sys_setsockopt+0x13d/0x1b0 [ 894.330550][T20460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.330574][T20460] do_syscall_64+0x174/0x580 [ 894.330598][T20460] ? trace_irq_disable+0x3b/0x140 [ 894.330627][T20460] ? clear_bhb_loop+0x40/0x90 [ 894.330654][T20460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.330676][T20460] RIP: 0033:0x7f0392b9e019 [ 894.330696][T20460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 894.330714][T20460] RSP: 002b:00007f03939aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 894.330737][T20460] RAX: ffffffffffffffda RBX: 00007f0392e25fa0 RCX: 00007f0392b9e019 [ 894.330752][T20460] RDX: 0000000000000039 RSI: 0000000000000029 RDI: 0000000000000004 [ 894.330765][T20460] RBP: 00007f03939aa090 R08: 0000000000000120 R09: 0000000000000000 [ 894.330779][T20460] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 894.330792][T20460] R13: 00007f0392e26038 R14: 00007f0392e25fa0 R15: 00007ffde358f768 [ 894.330828][T20460] [ 895.564051][T20500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4479'. [ 895.990924][T20493] netlink: 694 bytes leftover after parsing attributes in process `syz.5.4481'. [ 896.271235][T20509] proc: Unknown parameter '_ù¤ Ì' [ 896.335669][T20517] netlink: 'syz.4.4489': attribute type 2 has an invalid length. [ 896.479954][T20510] tap0: tun_chr_ioctl cmd 2147767507 [ 896.644036][T20520] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4490'. [ 896.690811][T20520] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4490'. [ 896.784442][T20532] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4492'. [ 896.813803][T20530] nbd: must specify an index to disconnect [ 897.050902][T20542] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4496'. [ 899.741935][T20537] netlink: 694 bytes leftover after parsing attributes in process `syz.1.4495'. [ 899.754055][T20555] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4496'. [ 900.196696][T20573] netlink: 'syz.3.4497': attribute type 16 has an invalid length. [ 900.220502][T20573] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4497'. [ 900.393212][T20581] netlink: 'syz.4.4500': attribute type 4 has an invalid length. [ 900.439725][T20581] netlink: 'syz.4.4500': attribute type 33 has an invalid length. [ 900.510797][T20581] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4500'. [ 900.593663][T20582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4500'. [ 900.656111][T20582] netlink: 65035 bytes leftover after parsing attributes in process `syz.4.4500'. [ 900.757808][T20581] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 901.387322][T20607] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4510'. [ 904.990063][T20641] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4522'. [ 906.485889][T20680] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4530'. [ 909.625459][T20691] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4532'. [ 910.314219][T20706] netlink: 8096 bytes leftover after parsing attributes in process `syz.4.4538'. [ 910.911770][T20727] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4546'. [ 910.962631][T20722] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4544'. [ 913.994400][T20746] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4551'. [ 914.444719][T20754] netlink: 'syz.3.4553': attribute type 2 has an invalid length. [ 914.488461][T20754] netlink: 'syz.3.4553': attribute type 2 has an invalid length. [ 914.967481][T20769] FAULT_INJECTION: forcing a failure. [ 914.967481][T20769] name failslab, interval 1, probability 0, space 0, times 0 [ 914.994068][T20769] CPU: 1 UID: 0 PID: 20769 Comm: syz.0.4558 Not tainted syzkaller #0 PREEMPT(full) [ 914.994100][T20769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 914.994113][T20769] Call Trace: [ 914.994122][T20769] [ 914.994132][T20769] dump_stack_lvl+0xe8/0x150 [ 914.994170][T20769] should_fail_ex+0x40c/0x560 [ 914.994203][T20769] should_failslab+0xa8/0x100 [ 914.994239][T20769] __kmalloc_noprof+0xfe/0x720 [ 914.994270][T20769] ? sk_prot_alloc+0xe7/0x210 [ 914.994291][T20769] ? sk_prot_alloc+0xe7/0x210 [ 914.994320][T20769] sk_prot_alloc+0xe7/0x210 [ 914.994340][T20769] ? sk_alloc+0x27/0x390 [ 914.994391][T20769] sk_alloc+0x3a/0x390 [ 914.994418][T20769] bpf_prog_test_run_skb+0x3a6/0x2230 [ 914.994558][T20769] ? __fget_files+0x3a2/0x420 [ 914.994587][T20769] ? __fget_files+0x2a/0x420 [ 914.994622][T20769] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 914.994647][T20769] bpf_prog_test_run+0x2c5/0x340 [ 914.994684][T20769] __sys_bpf+0xa22/0xd90 [ 914.994722][T20769] ? __pfx___sys_bpf+0x10/0x10 [ 914.994749][T20769] ? lock_acquire+0x106/0x350 [ 914.994790][T20769] ? ktime_get+0x45/0x220 [ 914.994839][T20769] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 914.994883][T20769] __x64_sys_bpf+0xba/0xd0 [ 914.994911][T20769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.994934][T20769] do_syscall_64+0x174/0x580 [ 914.994961][T20769] ? clear_bhb_loop+0x40/0x90 [ 914.994988][T20769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.995010][T20769] RIP: 0033:0x7f51aad9e019 [ 914.995030][T20769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 914.995050][T20769] RSP: 002b:00007f51abd42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 914.995073][T20769] RAX: ffffffffffffffda RBX: 00007f51ab025fa0 RCX: 00007f51aad9e019 [ 914.995089][T20769] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 914.995102][T20769] RBP: 00007f51abd42090 R08: 0000000000000000 R09: 0000000000000000 [ 914.995116][T20769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 914.995128][T20769] R13: 00007f51ab026038 R14: 00007f51ab025fa0 R15: 00007ffc45ca7868 [ 914.995162][T20769] [ 915.755254][T20787] FAULT_INJECTION: forcing a failure. [ 915.755254][T20787] name failslab, interval 1, probability 0, space 0, times 0 [ 915.768346][T20787] CPU: 1 UID: 0 PID: 20787 Comm: syz.3.4566 Not tainted syzkaller #0 PREEMPT(full) [ 915.768373][T20787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 915.768386][T20787] Call Trace: [ 915.768396][T20787] [ 915.768404][T20787] dump_stack_lvl+0xe8/0x150 [ 915.768440][T20787] should_fail_ex+0x40c/0x560 [ 915.768479][T20787] should_failslab+0xa8/0x100 [ 915.768514][T20787] __kmalloc_noprof+0xfe/0x720 [ 915.768541][T20787] ? perf_trace_preemptirq_template+0xb2/0x350 [ 915.768571][T20787] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 915.768671][T20787] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 915.768711][T20787] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 915.768752][T20787] genl_family_rcv_msg_doit+0xda/0x340 [ 915.768791][T20787] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 915.768841][T20787] ? apparmor_capable+0x126/0x170 [ 915.768906][T20787] ? bpf_lsm_capable+0x9/0x20 [ 915.768935][T20787] ? security_capable+0x7e/0x2c0 [ 915.768963][T20787] genl_rcv_msg+0x614/0x7a0 [ 915.769001][T20787] ? __pfx_genl_rcv_msg+0x10/0x10 [ 915.769031][T20787] ? __pfx_ip_vs_genl_set_cmd+0x10/0x10 [ 915.769084][T20787] ? __pfx_ref_tracker_free+0x10/0x10 [ 915.769138][T20787] ? __asan_memcpy+0x40/0x70 [ 915.769163][T20787] ? __skb_clone+0x5c/0x6c0 [ 915.769193][T20787] netlink_rcv_skb+0x226/0x4a0 [ 915.769221][T20787] ? __pfx_genl_rcv_msg+0x10/0x10 [ 915.769257][T20787] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 915.769299][T20787] ? down_read+0x2be/0x330 [ 915.769361][T20787] genl_rcv+0x28/0x40 [ 915.769390][T20787] netlink_unicast+0x7bb/0x940 [ 915.769424][T20787] netlink_sendmsg+0x813/0xb40 [ 915.769461][T20787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 915.769491][T20787] ? aa_sock_msg_perm+0xf1/0x1b0 [ 915.769522][T20787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 915.769545][T20787] sock_sendmsg_nosec+0x13a/0x180 [ 915.769580][T20787] ____sys_sendmsg+0x54e/0x850 [ 915.769611][T20787] ? __pfx_____sys_sendmsg+0x10/0x10 [ 915.769643][T20787] ? import_iovec+0x73/0xa0 [ 915.769667][T20787] ___sys_sendmsg+0x2a5/0x360 [ 915.769690][T20787] ? __lock_acquire+0x683/0x2cf0 [ 915.769725][T20787] ? __pfx____sys_sendmsg+0x10/0x10 [ 915.769791][T20787] ? __fget_files+0x2a/0x420 [ 915.769828][T20787] ? __fget_files+0x3a2/0x420 [ 915.769870][T20787] __x64_sys_sendmsg+0x1b1/0x290 [ 915.769899][T20787] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 915.769944][T20787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.769970][T20787] do_syscall_64+0x174/0x580 [ 915.769995][T20787] ? clear_bhb_loop+0x40/0x90 [ 915.770023][T20787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.770044][T20787] RIP: 0033:0x7ff9fed9e019 [ 915.770066][T20787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 915.770085][T20787] RSP: 002b:00007ff9fcff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 915.770108][T20787] RAX: ffffffffffffffda RBX: 00007ff9ff025fa0 RCX: 00007ff9fed9e019 [ 915.770124][T20787] RDX: 0000000000008010 RSI: 0000200000000000 RDI: 0000000000000006 [ 915.770138][T20787] RBP: 00007ff9fcff6090 R08: 0000000000000000 R09: 0000000000000000 [ 915.770152][T20787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 915.770165][T20787] R13: 00007ff9ff026038 R14: 00007ff9ff025fa0 R15: 00007fffd728aa18 [ 915.770197][T20787] [ 916.255635][T20796] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4568'. [ 918.446840][ T5634] Bluetooth: hci1: command 0x0406 tx timeout [ 919.941810][T20818] netlink: 65035 bytes leftover after parsing attributes in process `syz.3.4576'. [ 920.522020][T20828] netlink: 'syz.0.4579': attribute type 41 has an invalid length. [ 920.643656][T20834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4582'. [ 920.887524][T20834] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4582'. [ 921.254171][T20853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4589'. [ 921.561264][T20863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4593'. [ 921.601260][T20863] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4593'. [ 922.019193][T20877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4598'. [ 922.191146][T20884] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4599'. [ 922.346154][T20890] FAULT_INJECTION: forcing a failure. [ 922.346154][T20890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 922.376522][T20890] CPU: 1 UID: 0 PID: 20890 Comm: syz.3.4601 Not tainted syzkaller #0 PREEMPT(full) [ 922.376551][T20890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 922.376564][T20890] Call Trace: [ 922.376573][T20890] [ 922.376582][T20890] dump_stack_lvl+0xe8/0x150 [ 922.376621][T20890] should_fail_ex+0x40c/0x560 [ 922.376656][T20890] _copy_to_user+0x31/0xb0 [ 922.376681][T20890] simple_read_from_buffer+0xe1/0x170 [ 922.376736][T20890] proc_fail_nth_read+0x1bb/0x230 [ 922.376774][T20890] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 922.376812][T20890] ? rw_verify_area+0x24a/0x4c0 [ 922.376849][T20890] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 922.376878][T20890] vfs_read+0x213/0xa80 [ 922.376909][T20890] ? __pfx___mutex_lock+0x10/0x10 [ 922.376936][T20890] ? __pfx_vfs_read+0x10/0x10 [ 922.376961][T20890] ? __fget_files+0x2a/0x420 [ 922.376997][T20890] ? __fget_files+0x3a2/0x420 [ 922.377025][T20890] ? __fget_files+0x2a/0x420 [ 922.377067][T20890] ksys_read+0x150/0x270 [ 922.377094][T20890] ? __pfx_ksys_read+0x10/0x10 [ 922.377128][T20890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.377154][T20890] do_syscall_64+0x174/0x580 [ 922.377176][T20890] ? trace_irq_disable+0x3b/0x140 [ 922.377205][T20890] ? clear_bhb_loop+0x40/0x90 [ 922.377233][T20890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.377255][T20890] RIP: 0033:0x7ff9fed5e84e [ 922.377276][T20890] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 922.377295][T20890] RSP: 002b:00007ff9fcff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 922.377319][T20890] RAX: ffffffffffffffda RBX: 00007ff9fcff66c0 RCX: 00007ff9fed5e84e [ 922.377335][T20890] RDX: 000000000000000f RSI: 00007ff9fcff60a0 RDI: 0000000000000004 [ 922.377348][T20890] RBP: 00007ff9fcff6090 R08: 0000000000000000 R09: 0000000000000000 [ 922.377361][T20890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 922.377373][T20890] R13: 00007ff9ff026038 R14: 00007ff9ff025fa0 R15: 00007fffd728aa18 [ 922.377413][T20890] [ 922.447778][T20891] FAULT_INJECTION: forcing a failure. [ 922.447778][T20891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 922.532831][T20892] netlink: 'syz.5.4600': attribute type 1 has an invalid length. [ 922.640319][T20891] CPU: 1 UID: 0 PID: 20891 Comm: syz.0.4603 Not tainted syzkaller #0 PREEMPT(full) [ 922.640350][T20891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 922.640363][T20891] Call Trace: [ 922.640372][T20891] [ 922.640381][T20891] dump_stack_lvl+0xe8/0x150 [ 922.640421][T20891] should_fail_ex+0x40c/0x560 [ 922.640458][T20891] _copy_to_user+0x31/0xb0 [ 922.640484][T20891] bpf_vlog_reverse_ubuf+0x289/0x3e0 [ 922.640520][T20891] bpf_vlog_finalize+0x154/0x3f0 [ 922.640552][T20891] bpf_log_attr_finalize+0x80/0x1e0 [ 922.640580][T20891] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 922.640611][T20891] ? btf_parse_hdr+0x5f2/0x810 [ 922.640672][T20891] ? btf_parse_str_sec+0x244/0x2f0 [ 922.640725][T20891] btf_new_fd+0x35e/0xbb0 [ 922.640757][T20891] __sys_bpf+0xd2e/0xd90 [ 922.640799][T20891] ? __pfx___sys_bpf+0x10/0x10 [ 922.640846][T20891] ? __fget_files+0x2a/0x420 [ 922.640901][T20891] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 922.640930][T20891] ? ksys_write+0x242/0x270 [ 922.640954][T20891] ? __pfx_ksys_write+0x10/0x10 [ 922.640983][T20891] __x64_sys_bpf+0xba/0xd0 [ 922.641012][T20891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.641037][T20891] do_syscall_64+0x174/0x580 [ 922.641062][T20891] ? trace_irq_disable+0x3b/0x140 [ 922.641091][T20891] ? clear_bhb_loop+0x40/0x90 [ 922.641120][T20891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.641142][T20891] RIP: 0033:0x7f51aad9e019 [ 922.641163][T20891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 922.641181][T20891] RSP: 002b:00007f51abd42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 922.641205][T20891] RAX: ffffffffffffffda RBX: 00007f51ab025fa0 RCX: 00007f51aad9e019 [ 922.641220][T20891] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012 [ 922.641233][T20891] RBP: 00007f51abd42090 R08: 0000000000000000 R09: 0000000000000000 [ 922.641246][T20891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 922.641258][T20891] R13: 00007f51ab026038 R14: 00007f51ab025fa0 R15: 00007ffc45ca7868 [ 922.641300][T20891] [ 922.990499][T20892] : renamed from bond_slave_0 (while UP) [ 923.380219][T20919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4608'. [ 923.439911][T20919] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4608'. [ 925.133282][T20966] __nla_validate_parse: 5 callbacks suppressed [ 925.133303][T20966] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4626'. [ 925.224625][T20969] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4627'. [ 925.233834][T20969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4627'. [ 925.310674][T20975] raw_sendmsg: syz.0.4629 forgot to set AF_INET. Fix it! [ 925.832465][T20980] netlink: 'syz.5.4630': attribute type 11 has an invalid length. [ 926.217444][T20969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4627'. [ 926.606614][T20996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4636'. [ 926.946894][T21011] netlink: 694 bytes leftover after parsing attributes in process `syz.0.4640'. [ 927.167637][T21017] netlink: 1536 bytes leftover after parsing attributes in process `syz.0.4643'. [ 927.729560][T21039] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4650'. [ 928.334613][T21049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4655'. [ 931.135130][T21096] FAULT_INJECTION: forcing a failure. [ 931.135130][T21096] name failslab, interval 1, probability 0, space 0, times 0 [ 931.148472][T21096] CPU: 1 UID: 0 PID: 21096 Comm: syz.4.4660 Not tainted syzkaller #0 PREEMPT(full) [ 931.148501][T21096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 931.148514][T21096] Call Trace: [ 931.148523][T21096] [ 931.148532][T21096] dump_stack_lvl+0xe8/0x150 [ 931.148572][T21096] should_fail_ex+0x40c/0x560 [ 931.148607][T21096] should_failslab+0xa8/0x100 [ 931.148644][T21096] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 931.148675][T21096] ? skb_clone+0x212/0x3a0 [ 931.148699][T21096] ? skb_clone+0x212/0x3a0 [ 931.148733][T21096] skb_clone+0x212/0x3a0 [ 931.148764][T21096] __netlink_deliver_tap+0x413/0x860 [ 931.148808][T21096] ? netlink_deliver_tap+0x2e/0x1b0 [ 931.148837][T21096] netlink_deliver_tap+0x19c/0x1b0 [ 931.148865][T21096] netlink_unicast+0x77f/0x940 [ 931.148904][T21096] netlink_sendmsg+0x813/0xb40 [ 931.148944][T21096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 931.148985][T21096] ? aa_sock_msg_perm+0xf1/0x1b0 [ 931.149020][T21096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 931.149045][T21096] sock_sendmsg_nosec+0x13a/0x180 [ 931.149080][T21096] ____sys_sendmsg+0x54e/0x850 [ 931.149113][T21096] ? __pfx_____sys_sendmsg+0x10/0x10 [ 931.149150][T21096] ? import_iovec+0x73/0xa0 [ 931.149177][T21096] ___sys_sendmsg+0x2a5/0x360 [ 931.149202][T21096] ? __lock_acquire+0x683/0x2cf0 [ 931.149240][T21096] ? __pfx____sys_sendmsg+0x10/0x10 [ 931.149299][T21096] ? __fget_files+0x2a/0x420 [ 931.149345][T21096] ? __fget_files+0x2a/0x420 [ 931.149373][T21096] ? __fget_files+0x3a2/0x420 [ 931.149417][T21096] __x64_sys_sendmsg+0x1b1/0x290 [ 931.149451][T21096] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 931.149502][T21096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.149528][T21096] do_syscall_64+0x174/0x580 [ 931.149552][T21096] ? trace_irq_disable+0x3b/0x140 [ 931.149582][T21096] ? clear_bhb_loop+0x40/0x90 [ 931.149611][T21096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.149633][T21096] RIP: 0033:0x7f0392b9e019 [ 931.149655][T21096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 931.149673][T21096] RSP: 002b:00007f03939aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 931.149697][T21096] RAX: ffffffffffffffda RBX: 00007f0392e25fa0 RCX: 00007f0392b9e019 [ 931.149713][T21096] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 931.149726][T21096] RBP: 00007f03939aa090 R08: 0000000000000000 R09: 0000000000000000 [ 931.149740][T21096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 931.149752][T21096] R13: 00007f0392e26038 R14: 00007f0392e25fa0 R15: 00007ffde358f768 [ 931.149794][T21096] [ 931.559383][T21104] FAULT_INJECTION: forcing a failure. [ 931.559383][T21104] name failslab, interval 1, probability 0, space 0, times 0 [ 931.598636][T21104] CPU: 0 UID: 0 PID: 21104 Comm: syz.3.4662 Not tainted syzkaller #0 PREEMPT(full) [ 931.598667][T21104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 931.598681][T21104] Call Trace: [ 931.598690][T21104] [ 931.598699][T21104] dump_stack_lvl+0xe8/0x150 [ 931.598740][T21104] should_fail_ex+0x40c/0x560 [ 931.598778][T21104] should_failslab+0xa8/0x100 [ 931.598815][T21104] __kmalloc_noprof+0xfe/0x720 [ 931.598846][T21104] ? bpf_test_init+0x9f/0x150 [ 931.598869][T21104] ? bpf_test_init+0x9f/0x150 [ 931.598901][T21104] bpf_test_init+0x9f/0x150 [ 931.598933][T21104] bpf_prog_test_run_skb+0x31e/0x2230 [ 931.598966][T21104] ? __fget_files+0x2a/0x420 [ 931.599024][T21104] ? __fget_files+0x3a2/0x420 [ 931.599054][T21104] ? __fget_files+0x2a/0x420 [ 931.599090][T21104] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 931.599117][T21104] bpf_prog_test_run+0x2c5/0x340 [ 931.599154][T21104] __sys_bpf+0xa22/0xd90 [ 931.599195][T21104] ? __pfx___sys_bpf+0x10/0x10 [ 931.599241][T21104] ? __fget_files+0x2a/0x420 [ 931.599296][T21104] ? ksys_write+0x242/0x270 [ 931.599322][T21104] ? __pfx_ksys_write+0x10/0x10 [ 931.599352][T21104] __x64_sys_bpf+0xba/0xd0 [ 931.599380][T21104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.599406][T21104] do_syscall_64+0x174/0x580 [ 931.599431][T21104] ? trace_irq_disable+0x3b/0x140 [ 931.599460][T21104] ? clear_bhb_loop+0x40/0x90 [ 931.599489][T21104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.599512][T21104] RIP: 0033:0x7ff9fed9e019 [ 931.599535][T21104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 931.599554][T21104] RSP: 002b:00007ff9fcfd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 931.599577][T21104] RAX: ffffffffffffffda RBX: 00007ff9ff026090 RCX: 00007ff9fed9e019 [ 931.599593][T21104] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a [ 931.599606][T21104] RBP: 00007ff9fcfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 931.599620][T21104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 931.599632][T21104] R13: 00007ff9ff026128 R14: 00007ff9ff026090 R15: 00007fffd728aa18 [ 931.599673][T21104] [ 931.934089][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.940587][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.040246][T21109] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4661'. [ 932.060520][T21109] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4661'. [ 932.199736][T21113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4664'. [ 932.717121][T21134] FAULT_INJECTION: forcing a failure. [ 932.717121][T21134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 932.718540][T21134] [ 932.718549][T21134] ====================================================== [ 932.718557][T21134] WARNING: possible circular locking dependency detected [ 932.718572][T21134] syzkaller #0 Not tainted [ 932.718583][T21134] ------------------------------------------------------ [ 932.718590][T21134] syz.3.4667/21134 is trying to acquire lock: [ 932.718602][T21134] ffffffff8eb4bf40 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x123/0xaf0 [ 932.718658][T21134] [ 932.718658][T21134] but task is already holding lock: [ 932.718665][T21134] ffff8880b8624440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 932.718708][T21134] [ 932.718708][T21134] which lock already depends on the new lock. [ 932.718708][T21134] [ 932.718715][T21134] [ 932.718715][T21134] the existing dependency chain (in reverse order) is: [ 932.718723][T21134] [ 932.718723][T21134] -> #5 (psi_seq){-.-.}-{0:0}: [ 932.718750][T21134] psi_write_begin+0xab/0x160 [ 932.718780][T21134] psi_task_change+0xc9/0x320 [ 932.718809][T21134] enqueue_task+0x33f/0x410 [ 932.718836][T21134] wake_up_new_task+0x6c5/0xc60 [ 932.718855][T21134] kernel_clone+0x56c/0x940 [ 932.718908][T21134] user_mode_thread+0x110/0x180 [ 932.718932][T21134] rest_init+0x23/0x300 [ 932.718957][T21134] start_kernel+0x392/0x3e0 [ 932.719091][T21134] x86_64_start_reservations+0x24/0x30 [ 932.719133][T21134] x86_64_start_kernel+0x137/0x1b0 [ 932.719152][T21134] common_startup_64+0x13e/0x157 [ 932.719185][T21134] [ 932.719185][T21134] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 932.719213][T21134] _raw_spin_lock_nested+0x32/0x50 [ 932.719233][T21134] raw_spin_rq_lock_nested+0x2d/0x160 [ 932.719258][T21134] _task_rq_lock+0xc0/0x440 [ 932.719282][T21134] cgroup_move_task+0x9a/0x350 [ 932.719309][T21134] css_set_move_task+0x62d/0x820 [ 932.719350][T21134] cgroup_post_fork+0x209/0x9b0 [ 932.719379][T21134] copy_process+0x402b/0x4390 [ 932.719401][T21134] kernel_clone+0x2d7/0x940 [ 932.719425][T21134] user_mode_thread+0x110/0x180 [ 932.719449][T21134] rest_init+0x23/0x300 [ 932.719473][T21134] start_kernel+0x392/0x3e0 [ 932.719495][T21134] x86_64_start_reservations+0x24/0x30 [ 932.719513][T21134] x86_64_start_kernel+0x137/0x1b0 [ 932.719531][T21134] common_startup_64+0x13e/0x157 [ 932.719553][T21134] [ 932.719553][T21134] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 932.719580][T21134] _raw_spin_lock_irqsave+0x40/0x60 [ 932.719610][T21134] try_to_wake_up+0x67/0x14d0 [ 932.719628][T21134] __wake_up_common_lock+0x13a/0x1f0 [ 932.719650][T21134] tty_port_default_wakeup+0xc8/0x100 [ 932.719727][T21134] serial8250_tx_chars+0x70e/0x950 [ 932.719774][T21134] serial8250_handle_irq+0x166/0x550 [ 932.719794][T21134] serial8250_default_handle_irq+0xbf/0x1e0 [ 932.719819][T21134] serial8250_interrupt+0x8d/0x160 [ 932.719871][T21134] __handle_irq_event_percpu+0x216/0x9a0 [ 932.719895][T21134] handle_irq_event+0x8b/0x1e0 [ 932.719918][T21134] handle_edge_irq+0x1f4/0x8a0 [ 932.719938][T21134] __common_interrupt+0x141/0x1f0 [ 932.719964][T21134] common_interrupt+0xb6/0xe0 [ 932.719990][T21134] asm_common_interrupt+0x26/0x40 [ 932.720010][T21134] finish_task_switch+0x417/0xc60 [ 932.720030][T21134] __schedule+0x17e1/0x56c0 [ 932.720048][T21134] preempt_schedule_common+0x82/0xd0 [ 932.720067][T21134] preempt_schedule_thunk+0x16/0x40 [ 932.720089][T21134] smpboot_thread_fn+0x63a/0xa80 [ 932.720114][T21134] kthread+0x388/0x470 [ 932.720141][T21134] ret_from_fork+0x514/0xb70 [ 932.720169][T21134] ret_from_fork_asm+0x1a/0x30 [ 932.720186][T21134] [ 932.720186][T21134] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 932.720214][T21134] _raw_spin_lock_irqsave+0x40/0x60 [ 932.720243][T21134] __wake_up_common_lock+0x30/0x1f0 [ 932.720264][T21134] tty_port_default_wakeup+0xc8/0x100 [ 932.720286][T21134] serial8250_tx_chars+0x70e/0x950 [ 932.720313][T21134] serial8250_handle_irq+0x166/0x550 [ 932.720332][T21134] serial8250_default_handle_irq+0xbf/0x1e0 [ 932.720357][T21134] serial8250_interrupt+0x8d/0x160 [ 932.720385][T21134] __handle_irq_event_percpu+0x216/0x9a0 [ 932.720407][T21134] handle_irq_event+0x8b/0x1e0 [ 932.720429][T21134] handle_edge_irq+0x1f4/0x8a0 [ 932.720449][T21134] __common_interrupt+0x141/0x1f0 [ 932.720475][T21134] common_interrupt+0xb6/0xe0 [ 932.720501][T21134] asm_common_interrupt+0x26/0x40 [ 932.720520][T21134] pv_native_safe_halt+0xf/0x20 [ 932.720539][T21134] default_idle+0x9/0x20 [ 932.720562][T21134] default_idle_call+0x72/0xb0 [ 932.720585][T21134] do_idle+0x2e0/0x540 [ 932.720610][T21134] cpu_startup_entry+0x43/0x60 [ 932.720636][T21134] rest_init+0x2de/0x300 [ 932.720661][T21134] start_kernel+0x392/0x3e0 [ 932.720683][T21134] x86_64_start_reservations+0x24/0x30 [ 932.720702][T21134] x86_64_start_kernel+0x137/0x1b0 [ 932.720720][T21134] common_startup_64+0x13e/0x157 [ 932.720741][T21134] [ 932.720741][T21134] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 932.720768][T21134] _raw_spin_lock_irqsave+0x40/0x60 [ 932.720798][T21134] serial8250_console_write+0x153/0x1ba0 [ 932.720820][T21134] console_flush_all+0x6ea/0xaf0 [ 932.720841][T21134] console_unlock+0xd1/0x1c0 [ 932.720861][T21134] vprintk_emit+0x485/0x560 [ 932.720879][T21134] _printk+0xdd/0x130 [ 932.720905][T21134] register_console+0xbc3/0xfc0 [ 932.720927][T21134] univ8250_console_init+0x3a/0x70 [ 932.720987][T21134] console_init+0x10b/0x4a0 [ 932.721040][T21134] start_kernel+0x238/0x3e0 [ 932.721063][T21134] x86_64_start_reservations+0x24/0x30 [ 932.721081][T21134] x86_64_start_kernel+0x137/0x1b0 [ 932.721099][T21134] common_startup_64+0x13e/0x157 [ 932.721120][T21134] [ 932.721120][T21134] -> #0 (console_owner){-.-.}-{0:0}: [ 932.721148][T21134] __lock_acquire+0x1520/0x2cf0 [ 932.721175][T21134] lock_acquire+0x106/0x350 [ 932.721200][T21134] console_flush_all+0x693/0xaf0 [ 932.721222][T21134] console_unlock+0xd1/0x1c0 [ 932.721240][T21134] vprintk_emit+0x485/0x560 [ 932.721258][T21134] _printk+0xdd/0x130 [ 932.721277][T21134] should_fail_ex+0x3ed/0x560 [ 932.721308][T21134] strncpy_from_user+0x36/0x2c0 [ 932.721331][T21134] strncpy_from_user_nofault+0x71/0x150 [ 932.721367][T21134] bpf_probe_read_user_str+0x2a/0x70 [ 932.721386][T21134] bpf_prog_1fe773e8d8a61bb0+0x46/0x4c [ 932.721404][T21134] trace_call_bpf+0x3f0/0xb80 [ 932.721420][T21134] perf_trace_run_bpf_submit+0x78/0x170 [ 932.721440][T21134] perf_trace_lock+0x32d/0x410 [ 932.721470][T21134] lock_release+0x38e/0x3c0 [ 932.721495][T21134] psi_task_switch+0x476/0x7d0 [ 932.721512][T21134] __schedule+0x2a3e/0x56c0 [ 932.721530][T21134] preempt_schedule_notrace+0x57/0x90 [ 932.721549][T21134] preempt_schedule_notrace_thunk+0x16/0x30 [ 932.721572][T21134] perf_trace_lock+0x38b/0x410 [ 932.721600][T21134] lock_release+0x38e/0x3c0 [ 932.721626][T21134] __fget_files+0x39d/0x420 [ 932.721653][T21134] fdget+0x16b/0x1e0 [ 932.721679][T21134] __x64_sys_sendmsg+0x10a/0x290 [ 932.721701][T21134] do_syscall_64+0x174/0x580 [ 932.721722][T21134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.721741][T21134] [ 932.721741][T21134] other info that might help us debug this: [ 932.721741][T21134] [ 932.721748][T21134] Chain exists of: [ 932.721748][T21134] console_owner --> &rq->__lock --> psi_seq [ 932.721748][T21134] [ 932.721779][T21134] Possible unsafe locking scenario: [ 932.721779][T21134] [ 932.721786][T21134] CPU0 CPU1 [ 932.721792][T21134] ---- ---- [ 932.721798][T21134] lock(psi_seq); [ 932.721811][T21134] lock(&rq->__lock); [ 932.721825][T21134] lock(psi_seq); [ 932.721839][T21134] lock(console_owner); [ 932.721852][T21134] [ 932.721852][T21134] *** DEADLOCK *** [ 932.721852][T21134] [ 932.721857][T21134] 6 locks held by syz.3.4667/21134: [ 932.721870][T21134] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: __fget_files+0x2a/0x420 [ 932.721925][T21134] #1: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 932.721986][T21134] #2: ffff8880b8624440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 932.722031][T21134] #3: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: trace_call_bpf+0xb6/0xb80 [ 932.722086][T21134] #4: ffffffff8eb4bfa0 (console_lock){+.+.}-{0:0}, at: _printk+0xdd/0x130 [ 932.722134][T21134] #5: ffffffff8ea33838 (console_srcu){....}-{0:0}, at: console_flush_all+0x123/0xaf0 [ 932.722185][T21134] [ 932.722185][T21134] stack backtrace: [ 932.722196][T21134] CPU: 0 UID: 0 PID: 21134 Comm: syz.3.4667 Not tainted syzkaller #0 PREEMPT(full) [ 932.722219][T21134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 932.722231][T21134] Call Trace: [ 932.722240][T21134] [ 932.722249][T21134] dump_stack_lvl+0xe8/0x150 [ 932.722282][T21134] print_circular_bug+0x2e1/0x300 [ 932.722317][T21134] check_noncircular+0x12e/0x150 [ 932.722348][T21134] __lock_acquire+0x1520/0x2cf0 [ 932.722406][T21134] ? console_flush_all+0x123/0xaf0 [ 932.722429][T21134] lock_acquire+0x106/0x350 [ 932.722457][T21134] ? console_flush_all+0x123/0xaf0 [ 932.722490][T21134] ? do_raw_spin_unlock+0xf5/0x210 [ 932.722517][T21134] ? console_flush_all+0x123/0xaf0 [ 932.722541][T21134] console_flush_all+0x693/0xaf0 [ 932.722564][T21134] ? console_flush_all+0x123/0xaf0 [ 932.722593][T21134] ? console_flush_all+0x123/0xaf0 [ 932.722623][T21134] ? __pfx_console_flush_all+0x10/0x10 [ 932.722652][T21134] ? is_printk_cpu_sync_owner+0x32/0x40 [ 932.722684][T21134] console_unlock+0xd1/0x1c0 [ 932.722709][T21134] ? __pfx_console_unlock+0x10/0x10 [ 932.722729][T21134] ? _raw_spin_unlock+0x30/0x50 [ 932.722761][T21134] ? _printk+0xdd/0x130 [ 932.722791][T21134] vprintk_emit+0x485/0x560 [ 932.722817][T21134] ? __pfx_vprintk_emit+0x10/0x10 [ 932.722850][T21134] _printk+0xdd/0x130 [ 932.722880][T21134] ? __pfx__printk+0x10/0x10 [ 932.722907][T21134] ? perf_trace_buf_alloc+0x11b/0x280 [ 932.722930][T21134] ? ___ratelimit+0x584/0x8e0 [ 932.722997][T21134] ? nmi_uaccess_okay+0x74/0xb0 [ 932.723030][T21134] should_fail_ex+0x3ed/0x560 [ 932.723062][T21134] strncpy_from_user+0x36/0x2c0 [ 932.723101][T21134] strncpy_from_user_nofault+0x71/0x150 [ 932.723132][T21134] bpf_probe_read_user_str+0x2a/0x70 [ 932.723156][T21134] bpf_prog_1fe773e8d8a61bb0+0x46/0x4c [ 932.723177][T21134] trace_call_bpf+0x3f0/0xb80 [ 932.723198][T21134] ? trace_call_bpf+0xb6/0xb80 [ 932.723224][T21134] ? __pfx_trace_call_bpf+0x10/0x10 [ 932.723250][T21134] ? __lock_acquire+0x683/0x2cf0 [ 932.723285][T21134] perf_trace_run_bpf_submit+0x78/0x170 [ 932.723321][T21134] perf_trace_lock+0x32d/0x410 [ 932.723354][T21134] ? perf_trace_lock+0x32d/0x410 [ 932.723390][T21134] ? __pfx_perf_trace_lock+0x10/0x10 [ 932.723434][T21134] ? __schedule+0x2a3e/0x56c0 [ 932.723454][T21134] ? __schedule+0x2a3e/0x56c0 [ 932.723472][T21134] lock_release+0x38e/0x3c0 [ 932.723503][T21134] ? rcu_read_lock_sched_held+0x33/0x70 [ 932.723532][T21134] psi_task_switch+0x476/0x7d0 [ 932.723563][T21134] __schedule+0x2a3e/0x56c0 [ 932.723584][T21134] ? __pfx_perf_trace_lock+0x10/0x10 [ 932.723621][T21134] ? strncpy_from_user+0x280/0x2c0 [ 932.723655][T21134] ? trace_call_bpf+0xb6/0xb80 [ 932.723680][T21134] ? trace_call_bpf+0x7d1/0xb80 [ 932.723699][T21134] ? __pfx___schedule+0x10/0x10 [ 932.723722][T21134] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 932.723746][T21134] ? __pfx_trace_call_bpf+0x10/0x10 [ 932.723776][T21134] preempt_schedule_notrace+0x57/0x90 [ 932.723799][T21134] preempt_schedule_notrace_thunk+0x16/0x30 [ 932.723832][T21134] perf_trace_lock+0x38b/0x410 [ 932.723871][T21134] ? __pfx_perf_trace_lock+0x10/0x10 [ 932.723913][T21134] ? __fget_files+0x2a/0x420 [ 932.723942][T21134] ? __fget_files+0x2a/0x420 [ 932.723970][T21134] ? __fget_files+0x2a/0x420 [ 932.723999][T21134] lock_release+0x38e/0x3c0 [ 932.724026][T21134] ? ksys_write+0x1e6/0x270 [ 932.724052][T21134] ? __fget_files+0x2a/0x420 [ 932.724081][T21134] __fget_files+0x39d/0x420 [ 932.724109][T21134] ? __fget_files+0x2a/0x420 [ 932.724142][T21134] fdget+0x16b/0x1e0 [ 932.724173][T21134] __x64_sys_sendmsg+0x10a/0x290 [ 932.724202][T21134] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 932.724228][T21134] ? ksys_write+0x242/0x270 [ 932.724251][T21134] ? __pfx_ksys_write+0x10/0x10 [ 932.724282][T21134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.724312][T21134] do_syscall_64+0x174/0x580 [ 932.724335][T21134] ? trace_irq_disable+0x3b/0x140 [ 932.724363][T21134] ? clear_bhb_loop+0x40/0x90 [ 932.724390][T21134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.724411][T21134] RIP: 0033:0x7ff9fed9e019 [ 932.724431][T21134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 932.724450][T21134] RSP: 002b:00007ff9fcff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 932.724472][T21134] RAX: ffffffffffffffda RBX: 00007ff9ff025fa0 RCX: 00007ff9fed9e019 [ 932.724487][T21134] RDX: 0000000000000850 RSI: 0000200000000040 RDI: 0000000000000005 [ 932.724501][T21134] RBP: 00007ff9fcff6090 R08: 0000000000000000 R09: 0000000000000000 [ 932.724514][T21134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.724526][T21134] R13: 00007ff9ff026038 R14: 00007ff9ff025fa0 R15: 00007fffd728aa18 [ 932.724561][T21134] [ 934.048195][T21134] CPU: 0 UID: 0 PID: 21134 Comm: syz.3.4667 Not tainted syzkaller #0 PREEMPT(full) [ 934.048215][T21134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 934.048225][T21134] Call Trace: [ 934.048234][T21134] [ 934.048242][T21134] dump_stack_lvl+0xe8/0x150 [ 934.048271][T21134] should_fail_ex+0x40c/0x560 [ 934.048295][T21134] strncpy_from_user+0x36/0x2c0 [ 934.048319][T21134] strncpy_from_user_nofault+0x71/0x150 [ 934.048342][T21134] bpf_probe_read_user_str+0x2a/0x70 [ 934.048360][T21134] bpf_prog_1fe773e8d8a61bb0+0x46/0x4c [ 934.048376][T21134] trace_call_bpf+0x3f0/0xb80 [ 934.048391][T21134] ? trace_call_bpf+0xb6/0xb80 [ 934.048411][T21134] ? __pfx_trace_call_bpf+0x10/0x10 [ 934.048428][T21134] ? __lock_acquire+0x683/0x2cf0 [ 934.048455][T21134] perf_trace_run_bpf_submit+0x78/0x170 [ 934.048476][T21134] perf_trace_lock+0x32d/0x410 [ 934.048504][T21134] ? perf_trace_lock+0x32d/0x410 [ 934.048530][T21134] ? __pfx_perf_trace_lock+0x10/0x10 [ 934.048562][T21134] ? __schedule+0x2a3e/0x56c0 [ 934.048577][T21134] ? __schedule+0x2a3e/0x56c0 [ 934.048590][T21134] lock_release+0x38e/0x3c0 [ 934.048613][T21134] ? rcu_read_lock_sched_held+0x33/0x70 [ 934.048634][T21134] psi_task_switch+0x476/0x7d0 [ 934.048656][T21134] __schedule+0x2a3e/0x56c0 [ 934.048671][T21134] ? __pfx_perf_trace_lock+0x10/0x10 [ 934.048698][T21134] ? strncpy_from_user+0x280/0x2c0 [ 934.048723][T21134] ? trace_call_bpf+0xb6/0xb80 [ 934.048740][T21134] ? trace_call_bpf+0x7d1/0xb80 [ 934.048753][T21134] ? __pfx___schedule+0x10/0x10 [ 934.048770][T21134] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 934.048787][T21134] ? __pfx_trace_call_bpf+0x10/0x10 [ 934.048809][T21134] preempt_schedule_notrace+0x57/0x90 [ 934.048825][T21134] preempt_schedule_notrace_thunk+0x16/0x30 [ 934.048850][T21134] perf_trace_lock+0x38b/0x410 [ 934.048878][T21134] ? __pfx_perf_trace_lock+0x10/0x10 [ 934.048909][T21134] ? __fget_files+0x2a/0x420 [ 934.048931][T21134] ? __fget_files+0x2a/0x420 [ 934.048951][T21134] ? __fget_files+0x2a/0x420 [ 934.048971][T21134] lock_release+0x38e/0x3c0 [ 934.048992][T21134] ? ksys_write+0x1e6/0x270 [ 934.049010][T21134] ? __fget_files+0x2a/0x420 [ 934.049031][T21134] __fget_files+0x39d/0x420 [ 934.049052][T21134] ? __fget_files+0x2a/0x420 [ 934.049076][T21134] fdget+0x16b/0x1e0 [ 934.049099][T21134] __x64_sys_sendmsg+0x10a/0x290 [ 934.049127][T21134] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 934.049146][T21134] ? ksys_write+0x242/0x270 [ 934.049162][T21134] ? __pfx_ksys_write+0x10/0x10 [ 934.049184][T21134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.049201][T21134] do_syscall_64+0x174/0x580 [ 934.049217][T21134] ? trace_irq_disable+0x3b/0x140 [ 934.049238][T21134] ? clear_bhb_loop+0x40/0x90 [ 934.049257][T21134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.049272][T21134] RIP: 0033:0x7ff9fed9e019 [ 934.049287][T21134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 934.049300][T21134] RSP: 002b:00007ff9fcff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 934.049316][T21134] RAX: ffffffffffffffda RBX: 00007ff9ff025fa0 RCX: 00007ff9fed9e019 [ 934.049328][T21134] RDX: 0000000000000850 RSI: 0000200000000040 RDI: 0000000000000005 [ 934.049337][T21134] RBP: 00007ff9fcff6090 R08: 0000000000000000 R09: 0000000000000000 [ 934.049347][T21134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 934.049355][T21134] R13: 00007ff9ff026038 R14: 00007ff9ff025fa0 R15: 00007fffd728aa18 [ 934.049380][T21134]