last executing test programs: 37.829002914s ago: executing program 2 (id=806): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x3f8, 0x400, 0x70bd2c, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/uts\x00') (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/uts\x00') ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000001040101000000000000000002000002080005400000008008000440000000400500010000000000080004400000000805000100010000000500010003000000259a650546680d64951f"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000800) ioctl$TUNGETVNETHDRSZ(r1, 0x8008b705, 0x0) 37.726149438s ago: executing program 2 (id=808): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="e000000010000b0500000000070000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d"], 0xe0}], 0x1}, 0x0) 36.257878627s ago: executing program 2 (id=815): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010002000000000064000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c00018008000140000000032400018008000140000000070800014000000008080001400000000908000140000000080c000180080001400000000a240001800800014000000006"], 0x140}}, 0x0) 35.881355305s ago: executing program 2 (id=820): bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x58412, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7bffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x5) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="b4e9ffffffffffff72113f0000000000950008120000000019218b4dae970fd0513f827a03e5296232542a0da76630b78112affbd4c86adf01c33614a24954e987a4a841fc600ce843ffcf70339065bef4f9a5a2cd4b6773a73c59aa6a1238141b73b1006634a0f936efe2ec48cfa7ce1f8dc73e1442d50a7db9924261d96a8889782adc4ca322954cc201b5b78ff7f5afe1"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmsg$unix(0xffffffffffffffff, 0x0, 0x1c0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xc8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8112032900fc08000000000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000004080001400000000514000300626174616476300000000000000000000900010073797a31000000000900010073797a3100000000340008800c00024000000000000080010c00024000000000000000040c"], 0x25c}}, 0x0) 35.104401541s ago: executing program 2 (id=827): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = gettid() syz_open_procfs$namespace(r1, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000011c0)='ns/user\x00') sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'u'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x44, 0x0, 0xb, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_COMPAT_NAME={0xd, 0x1, '*&((-.^$\x00'}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_NAME={0x6, 0x1, '-\x00'}]}, 0x44}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8992, &(0x7f00000002c0)={'ipvlan1\x00', @random='2\x00\x00#\x00'}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0xffffffffffffffff, 0x1fc}, 0x0, 0xc7d, 0x7, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="c20000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x1f, &(0x7f0000000ac0), 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001340), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000001400)=[0x0, 0x0], &(0x7f0000001900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa6, &(0x7f0000001480)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000014c0), &(0x7f0000001500), 0x8, 0xcb, 0x8, 0x8, &(0x7f0000001540)}}, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000016c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x14, &(0x7f0000001280)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES64=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001780)=@generic={&(0x7f0000001740)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x13, 0x6, &(0x7f0000001200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x550, 0x0, 0x0, 0x0, 0x2}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffff8}]}, &(0x7f0000001240)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001380)={0x4, 0x5, 0x7ff, 0xffff0001}, 0x10, r7, r5, 0x3, &(0x7f00000017c0)=[r8, r9, r11, r12], &(0x7f0000001800)=[{0x0, 0x4, 0x1, 0x4}, {0x3, 0x3, 0xc, 0x2}, {0x1, 0x1, 0x0, 0x6}], 0x10, 0x7}, 0x94) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001000)=ANY=[@ANYBLOB="5c0000000306010400000000000000000a000003050001000700000005000100070000000900020073797a32000000000900020073797a30000000000900020073797a30000000000900020073797a310000000005000100070000000c35c8d9ade46064cded4fc48f472d9e9d62c1c6cab620e9c28afc4d585c76fcc53f6d466b9c30784ff9a8f2f538dd26d712f17527fc8b718b5660d34c89aec9ec70b7dba059dc76f82fb74f657cf9a35fd8c1e23bcf4d61083c36fe83146b4a9c4dddadda39587a1f4640e538a6370d1cf2b2827208e587b8eb048b6d8fc5a99befeb44458603bf8fe4670ed8c0552ebbbe112aa1623b8b0300000000000000589038ab0436ea697ba8335767fa79fb021dbd20bef483c61e3b099b89c138269285a274051b0474ed548f6f54cf28a0f9fb12b36d1ed107362e9a9a7c194577ef1d19a3ea0d882a45d997782d046c0ae295d640b3b468c665dea1e43c78b56edbdd1b1ae96f122b835588a0bbd19bee9d0dcaa3718b73ca74fcb5e10193b9fc459ac862fedbcd5b0031c3db09d730c30862d62026c390db44cb107e803849f43281bab887313f4dd884"], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) 24.839513308s ago: executing program 2 (id=846): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x40000000000000, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 9.728104557s ago: executing program 32 (id=846): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x40000000000000, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 5.064697974s ago: executing program 4 (id=940): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={0x0}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@fallback, 0xffffffffffffffff, 0x32, 0x4}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value=0x80000}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) 4.537145508s ago: executing program 4 (id=945): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x23, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) socket(0x840000000002, 0x3, 0xff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000300)='syzkaller\x00'}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040221080211000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000760091"], 0xfe33) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000036000b63861538e186a697fc12b5fc60", 0x14}], 0x1}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 3.619075711s ago: executing program 1 (id=948): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f3, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000000102010100000000000000000a00000906000740000300003c0001802c00018014000300ff02000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010021000000bf86f1a42aacbcce0a76a5a8fa5715b6d5d14f8ca6c0bd792977df85284ff1d02eec6ca78cb6bc2f145d315fbd9783468ee9c941e1d2065fed6682159be793c2cebed064b6fb04af44bb9449741cb2d3fc3f52c1b8e8f72853beb9088248b7"], 0x58}, 0x1, 0x0, 0x0, 0x4008840}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000cfed91abcfac4f562700000000000000001021a9cfb2f876e393e7753e00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000000), 0xcff5}, 0x38) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r6, 0x58}, 0x10) close(r5) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) r9 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x6, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000700)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 3.358286503s ago: executing program 3 (id=950): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000007000)={&(0x7f0000000d80)={{0x14, 0x10, 0x1, 0x0, 0x900}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x78}}, 0x0) 3.280696273s ago: executing program 3 (id=951): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x84, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xffe4}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x8000) 2.813473739s ago: executing program 4 (id=952): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000100)={r0}) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x8, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008840}, 0x804) socket$key(0xf, 0x3, 0x2) socket$kcm(0x29, 0x7, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000240)={0x5, 0x80, 0x1, 0xe8, 0x6, 0x6, 0x0, 0x80000001, 0x80, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x4}, 0x2, 0xae8, 0xb8e1, 0x7, 0x1, 0x0, 0x81, 0x0, 0x2}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x2, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x8000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x3, '\x00', 0x0, r3, 0x5, 0x3}, 0x50) r5 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r3, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$xdp(r5, &(0x7f0000000780)={&(0x7f0000000540)={0x2c, 0x5, r6, 0x4}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000580)="9c051d35f5bbb29aab63cdda8e6ce73fc21deeb2699f76460a4248159dd12873e50d54426e91a4a1a0bb877a746467cc57ddb2e78223797465878c7195064f08721acf21f81cced20badd047c97cfcb193fe87026611cecae51fede08b1764af59b95196d0fdab02467a2339f7e410a9733cc6c2b962a4c95fc0e743917a21638964c091bf8da7a1fe6c6148a80a66f1", 0x90}, {&(0x7f0000000640)="750dc32acdf85f8d2a65d8fa2333476901d759a7dae22865775f18037f7a3e582b4f933b41f9e8f291589a6e22ab0255ada5d2e1263232e248a699d5425ea059bc6d573eae5088ae64b33b70e4d7fc3bb6dbfb3ffc06a706655f538bd464655998da7e6122d8132b18f5b80b3e27829b0d7e60c4ef3d23141cc87d05ce0c011484c2926fada20b2a479ca62ed2de72a1b087059c88e075345a1141a1ce7796b374ba9ec3cde682a04df56494f9c0ab911915a04bb280617d8d0578071088b320a7b840ffe42dbfc714e1af929e92d3f164f761c5b2dc3df5cef80f5c70e693caccd6b60ef974cc44363312b3579459e43b38d5081a", 0xf5}], 0x2, 0x0, 0x0, 0x20000810}, 0x4000) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@cgroup=r7, 0x26, 0x0, 0x3, &(0x7f00000007c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000009c0)={r3, 0x58, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000a00)=r8) recvmsg$can_j1939(r3, &(0x7f00000020c0)={&(0x7f0000000a40)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000ac0)=""/96, 0x60}, {&(0x7f0000000b40)=""/191, 0xbf}, {&(0x7f0000000c00)=""/91, 0x5b}, {&(0x7f0000000c80)=""/107, 0x6b}, {&(0x7f0000000d00)=""/137, 0x89}, {&(0x7f0000000dc0)}, {&(0x7f0000000e00)=""/138, 0x8a}, {&(0x7f0000000ec0)=""/246, 0xf6}, {&(0x7f0000000fc0)=""/4096, 0x1000}], 0x9, &(0x7f0000002080)=""/7, 0x7}, 0x1) close(r5) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000022c0)={0x80000000, 0x0}, 0x8) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002300)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x0, '\x00', r6, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000002480)={0x1f, 0x2, &(0x7f0000002100)=@raw=[@map_idx={0x18, 0x1, 0x5, 0x0, 0x6}], &(0x7f0000002140)='syzkaller\x00', 0x38, 0x87, &(0x7f0000002180)=""/135, 0x41100, 0x10, '\x00', r8, @fallback=0xd, r3, 0x8, &(0x7f0000002240)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000002280)={0x3, 0xd, 0xead, 0xffffffff}, 0x10, r9, r3, 0x9, &(0x7f0000002380)=[r10, r4, r4, r4, r4], &(0x7f00000023c0)=[{0x3, 0x2, 0x6, 0xd}, {0x1, 0x3, 0x4, 0x5}, {0x0, 0x4, 0x7, 0xa}, {0x5, 0x2, 0x8, 0x3}, {0x4, 0x2, 0x7, 0x5}, {0x1, 0x1, 0xa}, {0x0, 0x4, 0x8}, {0x3, 0x1, 0xa, 0xa}, {0x4, 0x2, 0x5}], 0x10, 0xa6b}, 0x94) socket$kcm(0x29, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000025c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002800)={&(0x7f00000026c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb9, 0xb9, 0x3, [@float={0xf, 0x0, 0x0, 0x10, 0xc}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x6, [{0x2, 0x0, 0x5}, {0x8, 0x3, 0x80}]}, @func={0x3, 0x0, 0x0, 0xc, 0x2}, @datasec={0xd, 0x3, 0x0, 0xf, 0x1, [{0x1, 0x1, 0x4}, {0x2, 0x80, 0x2}, {0x1, 0x2, 0x80000000}], "19"}, @typedef={0xc}, @enum={0xe, 0x2, 0x0, 0x6, 0x4, [{0x6, 0x6d8}, {0x10, 0xc}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x6}}]}, {0x0, [0x61]}}, &(0x7f00000027c0)=""/10, 0xd7, 0xa, 0x1, 0x7f}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002b40)={r11, 0xe0, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002880)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f00000028c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002900)=[0x0], 0x0, 0xdc, &(0x7f0000002940)=[{}], 0x8, 0x10, &(0x7f0000002980), &(0x7f00000029c0), 0x8, 0xf6, 0x8, 0x8, &(0x7f0000002a00)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002600), &(0x7f0000002640)='syzkaller\x00', 0x9, 0x1c, &(0x7f0000002680)=""/28, 0x41000, 0x10, '\x00', r8, @fallback=0x2a, r12, 0x8, &(0x7f0000002840)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, r13, r3, 0x2, &(0x7f0000002b80)=[r4, 0x1], &(0x7f0000002bc0)=[{0x4, 0x2, 0x8, 0x6}, {0x1, 0x3, 0xe, 0xb}], 0x10, 0xfffffffa}, 0x94) 2.763657671s ago: executing program 3 (id=953): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x800}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf535}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.72878834s ago: executing program 0 (id=954): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x4110, 0x0, 0x0, 0x8, 0x37e, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = gettid() perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, r1, 0x0, r0, 0x0) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4004) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0x2c, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0xfff5}, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20005010}, 0x890) 2.598944392s ago: executing program 4 (id=955): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x7, 0x6, 0x8c}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.597708628s ago: executing program 3 (id=956): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001940)=ANY=[@ANYBLOB="440000000714010029bd7000fbdbdf250900020073", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x800) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000140)="76ea010000004000009ba56a88caaa77ce829af2b823ba69a20ee0ee225e5585ccc7a7b4058be46f6938c6b0f0853d9fcceca94c1f806dbc39cf43a5cd944cb91845ca160cf0428c0100000067e2154363ba7bd0983882e0cf99c13570513e1aa8c50c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.251637391s ago: executing program 0 (id=957): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x2, 0x0, 0x800000, 0x2, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0xa, 0x0, 0x0, 0x0, 0xb, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x1946}, 0x4100, 0x0, 0x0, 0x2, 0x7efe9c32, 0xfffff6f4, 0x0, 0x66, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r0, 0xa) 2.237342877s ago: executing program 1 (id=958): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r0, 0x0, 0x5d) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8000000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100001, 0x0, 0x9}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014001000020036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 2.133839344s ago: executing program 4 (id=959): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x50) socket$kcm(0x11, 0xa, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e06bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23870140cde10e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b27663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3800000000000000009c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fba6f421145c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488a0200000000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e4a59414329a7c7f2fad6bc871f5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561fe589e0d12969bc982ff3f0000006c0c6c747d9a1cc500bb89283a16ff10feea20bdac0000000000000000ca06f256a55591019465f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ee40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a3dc4e97f7fda840bcdd3afaa0d7c3c229de4f0f4ac4d04f1a4e52e38325ca2e5f1f9caaa7234053eca09ec3c8c16940bc3edfb2e016f355391c0e7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071113d00000000008510000002000000850000002b00000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r3}, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002540)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c230000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) ioctl$TUNSETOFFLOAD(r4, 0x80047456, 0xf0ff1f00000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0xfffffffffffffc9e, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x19, 0x10, 0x8, 0x2, 0x0}}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000480)=0x1) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000200000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a0101000000000000000001000000090003001e007a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001400000000028000000000a05000000000000000000010000080900010073797a310000000008000240000000011400000011000100"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.927356092s ago: executing program 0 (id=960): socket$isdn(0x22, 0x3, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}}], {0x14}}, 0x78}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f00000001c0)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa1, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xbb, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000002ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111630000000000851000000200000085ea00000000000095000000000000009500a50500"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x336) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) socket$kcm(0x2b, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @dev}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000840)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='xprtrdma_post_recvs_err\x00', r8, 0x0, 0x80000000000}, 0x18) sendmsg$tipc(r5, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c81be3110a36a27aeffe0ad5a8a7385a1913a64fb2db630e8fc8017828cea60f327c3a510b441d94d32584e55f7c2320d89b2ba3d44d832b8e7c5f45442de9ef37d057e", 0xd90}], 0x1}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000250001002cbd7000fbdbdf2509000000c38376eb4985591c41badbc955d3c9c675c9"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xffffff, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x79b}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 1.028818574s ago: executing program 1 (id=961): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x11}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c0d3}, 0x0) 1.010649079s ago: executing program 3 (id=962): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc00ffffff8000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32, @ANYBLOB="04"], 0xc4}}, 0x20004804) 847.366422ms ago: executing program 0 (id=963): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b71d5decf66cc00"/35, 0x23}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000080)}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600c3ff69bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 766.015617ms ago: executing program 1 (id=964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000100)={r0}) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x8, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008840}, 0x804) socket$key(0xf, 0x3, 0x2) socket$kcm(0x29, 0x7, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000240)={0x5, 0x80, 0x1, 0xe8, 0x6, 0x6, 0x0, 0x80000001, 0x80, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x4}, 0x2, 0xae8, 0xb8e1, 0x7, 0x1, 0x0, 0x81, 0x0, 0x2}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x2, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x8000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x3, '\x00', 0x0, r3, 0x5, 0x3}, 0x50) r5 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r3, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$xdp(r5, &(0x7f0000000780)={&(0x7f0000000540)={0x2c, 0x5, r6, 0x4}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000580)="9c051d35f5bbb29aab63cdda8e6ce73fc21deeb2699f76460a4248159dd12873e50d54426e91a4a1a0bb877a746467cc57ddb2e78223797465878c7195064f08721acf21f81cced20badd047c97cfcb193fe87026611cecae51fede08b1764af59b95196d0fdab02467a2339f7e410a9733cc6c2b962a4c95fc0e743917a21638964c091bf8da7a1fe6c6148a80a66f1", 0x90}, {&(0x7f0000000640)="750dc32acdf85f8d2a65d8fa2333476901d759a7dae22865775f18037f7a3e582b4f933b41f9e8f291589a6e22ab0255ada5d2e1263232e248a699d5425ea059bc6d573eae5088ae64b33b70e4d7fc3bb6dbfb3ffc06a706655f538bd464655998da7e6122d8132b18f5b80b3e27829b0d7e60c4ef3d23141cc87d05ce0c011484c2926fada20b2a479ca62ed2de72a1b087059c88e075345a1141a1ce7796b374ba9ec3cde682a04df56494f9c0ab911915a04bb280617d8d0578071088b320a7b840ffe42dbfc714e1af929e92d3f164f761c5b2dc3df5cef80f5c70e693caccd6b60ef974cc44363312b3579459e43b38d5081a", 0xf5}], 0x2, 0x0, 0x0, 0x20000810}, 0x4000) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@cgroup=r7, 0x26, 0x0, 0x3, &(0x7f00000007c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000009c0)={r3, 0x58, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000a00)=r8) recvmsg$can_j1939(r3, &(0x7f00000020c0)={&(0x7f0000000a40)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000ac0)=""/96, 0x60}, {&(0x7f0000000b40)=""/191, 0xbf}, {&(0x7f0000000c00)=""/91, 0x5b}, {&(0x7f0000000c80)=""/107, 0x6b}, {&(0x7f0000000d00)=""/137, 0x89}, {&(0x7f0000000dc0)}, {&(0x7f0000000e00)=""/138, 0x8a}, {&(0x7f0000000ec0)=""/246, 0xf6}, {&(0x7f0000000fc0)=""/4096, 0x1000}], 0x9, &(0x7f0000002080)=""/7, 0x7}, 0x1) close(r5) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000022c0)={0x80000000, 0x0}, 0x8) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002300)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x0, '\x00', r6, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000002480)={0x1f, 0x2, &(0x7f0000002100)=@raw=[@map_idx={0x18, 0x1, 0x5, 0x0, 0x6}], &(0x7f0000002140)='syzkaller\x00', 0x38, 0x87, &(0x7f0000002180)=""/135, 0x41100, 0x10, '\x00', r8, @fallback=0xd, r3, 0x8, &(0x7f0000002240)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000002280)={0x3, 0xd, 0xead, 0xffffffff}, 0x10, r9, r3, 0x9, &(0x7f0000002380)=[r10, r4, r4, r4, r4], &(0x7f00000023c0)=[{0x3, 0x2, 0x6, 0xd}, {0x1, 0x3, 0x4, 0x5}, {0x0, 0x4, 0x7, 0xa}, {0x5, 0x2, 0x8, 0x3}, {0x4, 0x2, 0x7, 0x5}, {0x1, 0x1, 0xa}, {0x0, 0x4, 0x8}, {0x3, 0x1, 0xa, 0xa}, {0x4, 0x2, 0x5}], 0x10, 0xa6b}, 0x94) socket$kcm(0x29, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000025c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002800)={&(0x7f00000026c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb9, 0xb9, 0x3, [@float={0xf, 0x0, 0x0, 0x10, 0xc}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x6, [{0x2, 0x0, 0x5}, {0x8, 0x3, 0x80}]}, @func={0x3, 0x0, 0x0, 0xc, 0x2}, @datasec={0xd, 0x3, 0x0, 0xf, 0x1, [{0x1, 0x1, 0x4}, {0x2, 0x80, 0x2}, {0x1, 0x2, 0x80000000}], "19"}, @typedef={0xc}, @enum={0xe, 0x2, 0x0, 0x6, 0x4, [{0x6, 0x6d8}, {0x10, 0xc}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x6}}]}, {0x0, [0x61]}}, &(0x7f00000027c0)=""/10, 0xd7, 0xa, 0x1, 0x7f}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002b40)={r11, 0xe0, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002880)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f00000028c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002900)=[0x0], 0x0, 0xdc, &(0x7f0000002940)=[{}], 0x8, 0x10, &(0x7f0000002980), &(0x7f00000029c0), 0x8, 0xf6, 0x8, 0x8, &(0x7f0000002a00)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002600), &(0x7f0000002640)='syzkaller\x00', 0x9, 0x1c, &(0x7f0000002680)=""/28, 0x41000, 0x10, '\x00', r8, @fallback=0x2a, r12, 0x8, &(0x7f0000002840)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, r13, r3, 0x2, &(0x7f0000002b80)=[r4, 0x1], &(0x7f0000002bc0)=[{0x4, 0x2, 0x8, 0x6}, {0x1, 0x3, 0xe, 0xb}], 0x10, 0xfffffffa}, 0x94) 742.587626ms ago: executing program 3 (id=965): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x28, 0x0, 0x0, 0x3, 0x0, 0x800000, 0x0, 0x0, 0xfffffffc, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'P'}]}], {0x14}}, 0x70}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00140000000280", 0x2a}, {&(0x7f0000000400)="6a718e5e", 0x4}], 0x2}, 0x0) 741.937464ms ago: executing program 4 (id=966): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab070004000523"], 0xfe33) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x7ffff000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x25, 0x29, 0x32, 0xc0fe}}, @ip_tos_u8={{0x11, 0x4410, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x64}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'virt_wifi0\x00', @multicast}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7968dd986c6a6700020006aa"], 0xfdef) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x8) r3 = syz_clone(0x1020000, &(0x7f00000011c0)="7f105b849659670ae7b6777a5bbe6fa0b53546e69693a296a8e8db72517b0840aeb4e2b5e9dd2e9d4071ae5ef72145923ae831ccc05fa7cd49de618c7b520b7206da73b94b7d03c274648125e20dc56a6f01a8e294aeb3bb91cf096909a68fedcc28eea0a454b134be335a9cd5f5fc1f222e80bf1ca881fdc30f5fa0f20fbc9ebe62335f55be798472779551d6e5bd441f0bce31391da7651b6a68665dc812c9e1910acf6aae37dade017666", 0xac, &(0x7f0000001140), &(0x7f0000001280), &(0x7f00000012c0)="2af28a020d9f95f33f3a0a8699ba9416d2fd21872d229f412df0cfbb12a186865cfa40f53aac588a08e2a8c9eaf68b605593de303492a91e4d3c7880300339d6aa831758e38d1aacb3508603ee3e6623ea0f2d5a13255c90fc8e057abefa5077c409313389871077f3d94426b24a2b1fec86a80fb8d5f82e3c331ec97c1bbff3701c428d011c428d4a08643327bc9c4bd29fee1201a4c2fad49a1fc4a79051c8d82e67984ce8865e000f9768409285245cafc8088a4ad36dc8f146ed3d77e3f8a60ae545753297dc56") perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3, 0x1ef7}, 0x10efa, 0x4, 0x98, 0x0, 0x6, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fstat(r4, &(0x7f0000000540)) close(r2) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000040000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 466.481471ms ago: executing program 1 (id=967): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000640)='-.%\x00') bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x600, 0x0, 0x0, 0x0, 0x75}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0xa00, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b04200000000000000002000000540004803c0001800a0001006c696d69740000002c0002800c000240000000000000000008000540000000000c00014000000000000000010800044000000001140001800b0001007470726f78790000040002800900010073797a30000000000900020073797a32"], 0xa8}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') socket$kcm(0xa, 0x5, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x1042, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000013fc0)={0x0, 0x0, &(0x7f0000013f80)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000000706010200000000000000000500000505000100070000000800064009"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) 98.226932ms ago: executing program 0 (id=968): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000001c0)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0x3}, 0xe}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@vsock={0x28, 0x0, 0x2711, @hyper}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0xfffffe2b, 0x115, 0x1, "dc"}], 0x18}, 0x4044041) 88.263338ms ago: executing program 1 (id=969): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x91000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x830d}, 0x10000, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000340)}, 0x40000040) socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x6, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$inet(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x38}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x40050) 0s ago: executing program 0 (id=970): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82030, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2, 0x0, 0x5}]}, 0x94) sendmsg$inet(r2, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)="97", 0x1}, {&(0x7f0000001080)="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", 0x4e4}], 0x2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x7b, &(0x7f0000000000)=r5, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.218' (ED25519) to the list of known hosts. [ 84.190186][ T5849] cgroup: Unknown subsys name 'net' [ 84.362728][ T5849] cgroup: Unknown subsys name 'cpuset' [ 84.371884][ T5849] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.044555][ T5849] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.170801][ T5866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.181044][ T5876] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.189831][ T5876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.197455][ T5876] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.205963][ T5876] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.213648][ T5876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.221447][ T5876] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.230267][ T5876] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.238776][ T5876] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.247899][ T5876] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.256723][ T5876] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.269289][ T5878] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.277574][ T5876] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.297091][ T5876] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.307782][ T5879] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.316247][ T5876] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.318029][ T5879] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.331756][ T5879] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.341759][ T5879] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.349364][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.350175][ T5879] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.365577][ T5871] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.375414][ T5871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.383708][ T5879] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.407224][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.041120][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 91.247710][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 91.279040][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 91.379254][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 91.392747][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.400785][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.408284][ T5864] bridge_slave_0: entered allmulticast mode [ 91.416119][ T5864] bridge_slave_0: entered promiscuous mode [ 91.473282][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.481634][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.489099][ T5864] bridge_slave_1: entered allmulticast mode [ 91.496432][ T5864] bridge_slave_1: entered promiscuous mode [ 91.523567][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 91.660193][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.671085][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.679470][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.687227][ T5868] bridge_slave_0: entered allmulticast mode [ 91.694442][ T5868] bridge_slave_0: entered promiscuous mode [ 91.755523][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.765103][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.772690][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.780620][ T5868] bridge_slave_1: entered allmulticast mode [ 91.789440][ T5868] bridge_slave_1: entered promiscuous mode [ 91.826360][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.833621][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.841162][ T5860] bridge_slave_0: entered allmulticast mode [ 91.850013][ T5860] bridge_slave_0: entered promiscuous mode [ 91.919393][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.927518][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.934922][ T5873] bridge_slave_0: entered allmulticast mode [ 91.942456][ T5873] bridge_slave_0: entered promiscuous mode [ 91.950551][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.958308][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.965479][ T5873] bridge_slave_1: entered allmulticast mode [ 91.972720][ T5873] bridge_slave_1: entered promiscuous mode [ 91.979563][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.986834][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.993992][ T5860] bridge_slave_1: entered allmulticast mode [ 92.001401][ T5860] bridge_slave_1: entered promiscuous mode [ 92.010321][ T5864] team0: Port device team_slave_0 added [ 92.035992][ T1210] cfg80211: failed to load regulatory.db [ 92.084020][ T5864] team0: Port device team_slave_1 added [ 92.107258][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.175112][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.191401][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.200855][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.208423][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.215786][ T5861] bridge_slave_0: entered allmulticast mode [ 92.223640][ T5861] bridge_slave_0: entered promiscuous mode [ 92.233726][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.240976][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.248476][ T5861] bridge_slave_1: entered allmulticast mode [ 92.255690][ T5861] bridge_slave_1: entered promiscuous mode [ 92.265369][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.283014][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.293770][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.300779][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.327448][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.342715][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.405046][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.412827][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.427835][ T5869] Bluetooth: hci4: command tx timeout [ 92.439288][ T5879] Bluetooth: hci0: command tx timeout [ 92.444999][ T51] Bluetooth: hci2: command tx timeout [ 92.450557][ T5866] Bluetooth: hci3: command tx timeout [ 92.456150][ T5869] Bluetooth: hci1: command tx timeout [ 92.462575][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.559411][ T5860] team0: Port device team_slave_0 added [ 92.571137][ T5868] team0: Port device team_slave_0 added [ 92.579871][ T5868] team0: Port device team_slave_1 added [ 92.591406][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.602879][ T5873] team0: Port device team_slave_0 added [ 92.612219][ T5873] team0: Port device team_slave_1 added [ 92.619907][ T5860] team0: Port device team_slave_1 added [ 92.643781][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.782911][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.791537][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.819596][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.831831][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.839324][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.865299][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.879432][ T5861] team0: Port device team_slave_0 added [ 92.886515][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.893628][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.919907][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.932241][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.939906][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.965997][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.979220][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.986375][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.012516][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.032272][ T5864] hsr_slave_0: entered promiscuous mode [ 93.038906][ T5864] hsr_slave_1: entered promiscuous mode [ 93.056170][ T5861] team0: Port device team_slave_1 added [ 93.062888][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.070135][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.096350][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.192000][ T5860] hsr_slave_0: entered promiscuous mode [ 93.199107][ T5860] hsr_slave_1: entered promiscuous mode [ 93.205399][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 93.211905][ T5860] Cannot create hsr debugfs directory [ 93.288872][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.295878][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.322439][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.335526][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.342634][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.369439][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.423046][ T5868] hsr_slave_0: entered promiscuous mode [ 93.430780][ T5868] hsr_slave_1: entered promiscuous mode [ 93.437819][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 93.443756][ T5868] Cannot create hsr debugfs directory [ 93.463925][ T5873] hsr_slave_0: entered promiscuous mode [ 93.471379][ T5873] hsr_slave_1: entered promiscuous mode [ 93.477701][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 93.483456][ T5873] Cannot create hsr debugfs directory [ 93.678157][ T5861] hsr_slave_0: entered promiscuous mode [ 93.684586][ T5861] hsr_slave_1: entered promiscuous mode [ 93.691622][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 93.697519][ T5861] Cannot create hsr debugfs directory [ 94.158183][ T5864] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.173276][ T5864] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.195488][ T5864] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.213172][ T5864] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.264526][ T5868] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.289289][ T5868] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.311694][ T5868] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.323856][ T5868] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.405596][ T5873] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.428017][ T5873] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.442490][ T5873] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.478302][ T5873] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.507902][ T5871] Bluetooth: hci0: command tx timeout [ 94.513351][ T5871] Bluetooth: hci1: command tx timeout [ 94.516792][ T5869] Bluetooth: hci3: command tx timeout [ 94.519582][ T51] Bluetooth: hci2: command tx timeout [ 94.524851][ T5879] Bluetooth: hci4: command tx timeout [ 94.599031][ T5860] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.631700][ T5860] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.642903][ T5860] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.680068][ T5860] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.768415][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.782955][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.795449][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.823533][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.872890][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.916316][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.981287][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.003629][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.032792][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.040170][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.052816][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.060071][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.095465][ T3477] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.102942][ T3477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.115035][ T3477] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.122232][ T3477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.186082][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.223571][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.274032][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.294721][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.333002][ T5868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.355468][ T3572] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.363090][ T3572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.372667][ T3572] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.379944][ T3572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.418765][ T5864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.444052][ T3572] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.451409][ T3572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.483052][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.490270][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.702231][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.764349][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.801766][ T5860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.845709][ T3572] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.852985][ T3572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.891329][ T3572] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.898636][ T3572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.985084][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.039711][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.359752][ T5864] veth0_vlan: entered promiscuous mode [ 96.399207][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.415473][ T5868] veth0_vlan: entered promiscuous mode [ 96.455428][ T5864] veth1_vlan: entered promiscuous mode [ 96.472710][ T5868] veth1_vlan: entered promiscuous mode [ 96.495629][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.587145][ T5869] Bluetooth: hci3: command tx timeout [ 96.592981][ T5869] Bluetooth: hci4: command tx timeout [ 96.598962][ T5879] Bluetooth: hci0: command tx timeout [ 96.601205][ T5871] Bluetooth: hci1: command tx timeout [ 96.604393][ T5879] Bluetooth: hci2: command tx timeout [ 96.633215][ T5864] veth0_macvtap: entered promiscuous mode [ 96.665934][ T5864] veth1_macvtap: entered promiscuous mode [ 96.732267][ T5868] veth0_macvtap: entered promiscuous mode [ 96.791845][ T5873] veth0_vlan: entered promiscuous mode [ 96.817400][ T5868] veth1_macvtap: entered promiscuous mode [ 96.830605][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.841138][ T5873] veth1_vlan: entered promiscuous mode [ 96.858595][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.885757][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.909651][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.929384][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.972073][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.983363][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.016547][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.026007][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.053502][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.078214][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.087095][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.101313][ T5873] veth0_macvtap: entered promiscuous mode [ 97.126347][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.146534][ T5873] veth1_macvtap: entered promiscuous mode [ 97.263306][ T5861] veth0_vlan: entered promiscuous mode [ 97.295353][ T5860] veth0_vlan: entered promiscuous mode [ 97.304018][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.320422][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.335830][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.354219][ T5860] veth1_vlan: entered promiscuous mode [ 97.377329][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.386600][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.398070][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.437402][ T5861] veth1_vlan: entered promiscuous mode [ 97.444830][ T3477] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.454446][ T3477] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.483051][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.494365][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.498012][ T3477] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.514380][ T3477] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.627124][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.642054][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.648072][ T5864] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.662129][ T5861] veth0_macvtap: entered promiscuous mode [ 97.709479][ T5861] veth1_macvtap: entered promiscuous mode [ 97.795826][ T5860] veth0_macvtap: entered promiscuous mode [ 97.821501][ T5860] veth1_macvtap: entered promiscuous mode [ 97.919801][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.955959][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.979111][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.006007][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.051692][ C0] hrtimer: interrupt took 71470 ns [ 98.264888][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.281713][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.319536][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.357145][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.375793][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.390513][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.397648][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.416094][ T5989] netlink: 'syz.2.7': attribute type 10 has an invalid length. [ 98.417739][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.470433][ T5987] netlink: 'syz.3.6': attribute type 10 has an invalid length. [ 98.485791][ T5974] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.575648][ T5987] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 98.595038][ T5974] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.619369][ T5974] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.668960][ T5869] Bluetooth: hci1: command tx timeout [ 98.674574][ T5879] Bluetooth: hci0: command tx timeout [ 98.676252][ T5974] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.680171][ T5866] Bluetooth: hci3: command tx timeout [ 98.689635][ T5871] Bluetooth: hci4: command tx timeout [ 98.694352][ T5879] Bluetooth: hci2: command tx timeout [ 98.936773][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.944654][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.833535][ T5974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.852580][ T5974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.909611][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.920949][ T6012] netlink: 'syz.3.11': attribute type 2 has an invalid length. [ 99.924560][ T6011] netlink: 'syz.3.11': attribute type 23 has an invalid length. [ 99.963128][ T6012] netlink: 'syz.3.11': attribute type 8 has an invalid length. [ 99.973375][ T6012] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11'. [ 99.977859][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.075875][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.120775][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.895081][ T6025] netlink: 340 bytes leftover after parsing attributes in process `syz.1.13'. [ 100.913789][ T6025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13'. [ 101.138765][ T6022] netlink: 'syz.2.12': attribute type 1 has an invalid length. [ 101.151200][ T6022] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.12'. [ 103.594420][ T6049] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19'. [ 104.185105][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23'. [ 104.394878][ T6066] Zero length message leads to an empty skb [ 105.003157][ T6077] netlink: 20 bytes leftover after parsing attributes in process `syz.0.29'. [ 105.063959][ T6062] netlink: 60 bytes leftover after parsing attributes in process `syz.4.23'. [ 105.435943][ T6089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.473321][ T6090] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.574664][ T6081] netlink: 48 bytes leftover after parsing attributes in process `syz.0.30'. [ 105.744617][ T6098] netlink: 830 bytes leftover after parsing attributes in process `syz.2.34'. [ 106.881058][ T6108] netlink: 340 bytes leftover after parsing attributes in process `syz.1.36'. [ 106.915201][ T6108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.36'. [ 108.466437][ T6117] netlink: 220 bytes leftover after parsing attributes in process `syz.1.41'. [ 108.901291][ T6126] netlink: zone id is out of range [ 108.933233][ T6126] netlink: zone id is out of range [ 108.985604][ T6126] netlink: zone id is out of range [ 109.025999][ T6126] netlink: zone id is out of range [ 109.031988][ T6126] netlink: zone id is out of range [ 109.037664][ T6126] netlink: zone id is out of range [ 109.042816][ T6126] netlink: zone id is out of range [ 109.048134][ T6126] netlink: zone id is out of range [ 109.055167][ T6126] netlink: zone id is out of range [ 109.215982][ T6137] netlink: 68 bytes leftover after parsing attributes in process `syz.2.47'. [ 109.607533][ T6147] FAULT_INJECTION: forcing a failure. [ 109.607533][ T6147] name failslab, interval 1, probability 0, space 0, times 1 [ 110.158409][ T6147] CPU: 1 UID: 0 PID: 6147 Comm: syz.2.51 Not tainted syzkaller #0 PREEMPT(full) [ 110.158436][ T6147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 110.158447][ T6147] Call Trace: [ 110.158454][ T6147] [ 110.158462][ T6147] dump_stack_lvl+0x189/0x250 [ 110.158489][ T6147] ? __pfx____ratelimit+0x10/0x10 [ 110.158513][ T6147] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.158535][ T6147] ? __pfx__printk+0x10/0x10 [ 110.158588][ T6147] should_fail_ex+0x414/0x560 [ 110.158620][ T6147] should_failslab+0xa8/0x100 [ 110.158648][ T6147] __kmalloc_cache_noprof+0x70/0x3d0 [ 110.158672][ T6147] ? sctp_add_bind_addr+0x8c/0x370 [ 110.158700][ T6147] sctp_add_bind_addr+0x8c/0x370 [ 110.158727][ T6147] sctp_copy_local_addr_list+0x30b/0x4e0 [ 110.158754][ T6147] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 110.158777][ T6147] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 110.158804][ T6147] ? sctp_v4_is_any+0x35/0x60 [ 110.158826][ T6147] ? sctp_copy_one_addr+0x93/0x360 [ 110.158853][ T6147] sctp_bind_addr_copy+0xb3/0x3c0 [ 110.158877][ T6147] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 110.158901][ T6147] sctp_connect_new_asoc+0x2e0/0x690 [ 110.158922][ T6147] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 110.158937][ T6147] ? __local_bh_enable_ip+0x12d/0x1c0 [ 110.158963][ T6147] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 110.158990][ T6147] ? security_sctp_bind_connect+0x7e/0x2e0 [ 110.159016][ T6147] sctp_sendmsg+0x155c/0x2810 [ 110.159055][ T6147] ? __pfx_sctp_sendmsg+0x10/0x10 [ 110.159085][ T6147] ? aa_sk_perm+0x81e/0x950 [ 110.159116][ T6147] ? __pfx_aa_sk_perm+0x10/0x10 [ 110.159145][ T6147] ? sock_rps_record_flow+0x19/0x410 [ 110.159171][ T6147] ? inet_sendmsg+0x2f4/0x370 [ 110.159196][ T6147] __sock_sendmsg+0x19c/0x270 [ 110.159223][ T6147] ____sys_sendmsg+0x505/0x830 [ 110.159248][ T6147] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.159277][ T6147] ? import_iovec+0x74/0xa0 [ 110.159302][ T6147] ___sys_sendmsg+0x21f/0x2a0 [ 110.159323][ T6147] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.159384][ T6147] ? __fget_files+0x2a/0x420 [ 110.159399][ T6147] ? __fget_files+0x3a0/0x420 [ 110.159428][ T6147] __x64_sys_sendmsg+0x19b/0x260 [ 110.159450][ T6147] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 110.159479][ T6147] ? __pfx_ksys_write+0x10/0x10 [ 110.159500][ T6147] ? rcu_is_watching+0x15/0xb0 [ 110.159524][ T6147] ? do_syscall_64+0xbe/0x3b0 [ 110.159553][ T6147] do_syscall_64+0xfa/0x3b0 [ 110.159583][ T6147] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.159606][ T6147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.159623][ T6147] ? clear_bhb_loop+0x60/0xb0 [ 110.159646][ T6147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.159662][ T6147] RIP: 0033:0x7f09ec98ebe9 [ 110.159678][ T6147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.159692][ T6147] RSP: 002b:00007f09ed8ec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.159712][ T6147] RAX: ffffffffffffffda RBX: 00007f09ecbc5fa0 RCX: 00007f09ec98ebe9 [ 110.159725][ T6147] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000003 [ 110.159736][ T6147] RBP: 00007f09ed8ec090 R08: 0000000000000000 R09: 0000000000000000 [ 110.159747][ T6147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 110.159757][ T6147] R13: 00007f09ecbc6038 R14: 00007f09ecbc5fa0 R15: 00007fff8fdf2418 [ 110.159789][ T6147] [ 110.707398][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.53'. [ 110.716163][ T6152] netlink: 200 bytes leftover after parsing attributes in process `syz.3.53'. [ 111.453707][ T6166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.58'. [ 114.823189][ T6149] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.831816][ T6149] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.168025][ T6149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.187158][ T6149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.852156][ T6212] netlink: 60 bytes leftover after parsing attributes in process `syz.4.68'. [ 115.895729][ T5974] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.930991][ T6220] netlink: 'syz.0.72': attribute type 10 has an invalid length. [ 115.937501][ T5974] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.951069][ T6220] netlink: 156 bytes leftover after parsing attributes in process `syz.0.72'. [ 115.969157][ T6208] netlink: 60 bytes leftover after parsing attributes in process `syz.4.68'. [ 115.986287][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.72'. [ 116.626507][ T5974] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.671432][ T6213] netlink: 60 bytes leftover after parsing attributes in process `syz.4.68'. [ 116.686800][ T5974] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.084140][ T6227] netlink: 24 bytes leftover after parsing attributes in process `syz.3.73'. [ 117.279163][ T6235] net_ratelimit: 7 callbacks suppressed [ 117.279213][ T6235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.342268][ T6235] veth1_macvtap: left promiscuous mode [ 117.388355][ T6235] macsec0: entered promiscuous mode [ 117.394027][ T6235] macsec0: entered allmulticast mode [ 117.618906][ T6248] Illegal XDP return value 4294967274 on prog (id 44) dev N/A, expect packet loss! [ 117.915322][ T6250] netlink: 'syz.1.82': attribute type 21 has an invalid length. [ 118.038898][ T6250] IPv6: NLM_F_CREATE should be specified when creating new route [ 118.104054][ T6250] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 118.111603][ T6250] IPv6: NLM_F_CREATE should be set when creating new route [ 118.119110][ T6250] IPv6: NLM_F_CREATE should be set when creating new route [ 118.306127][ T6241] veth1_macvtap: entered promiscuous mode [ 118.356449][ T6241] veth1_macvtap: entered allmulticast mode [ 118.703048][ T6266] netlink: 34 bytes leftover after parsing attributes in process `syz.4.86'. [ 118.958317][ T6266] syzkaller1: tun_chr_ioctl cmd 1074025681 [ 119.024633][ T6277] netlink: zone id is out of range [ 119.044937][ T6270] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.86'. [ 119.064158][ T6277] netlink: zone id is out of range [ 119.070816][ T6277] netlink: zone id is out of range [ 119.076038][ T6277] netlink: zone id is out of range [ 119.081374][ T6277] netlink: zone id is out of range [ 119.090882][ T6270] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.86'. [ 119.100237][ T6277] netlink: zone id is out of range [ 119.105475][ T6277] netlink: zone id is out of range [ 119.112514][ T6277] netlink: zone id is out of range [ 119.142537][ T6277] netlink: zone id is out of range [ 119.538590][ T6287] netlink: 'syz.4.95': attribute type 23 has an invalid length. [ 119.732513][ T6291] netlink: 'syz.4.95': attribute type 2 has an invalid length. [ 119.740486][ T6291] netlink: 'syz.4.95': attribute type 8 has an invalid length. [ 119.748558][ T6291] netlink: 132 bytes leftover after parsing attributes in process `syz.4.95'. [ 120.914824][ T6319] __nla_validate_parse: 1 callbacks suppressed [ 120.914852][ T6319] netlink: 16 bytes leftover after parsing attributes in process `syz.1.106'. [ 121.090392][ T6324] netlink: 20 bytes leftover after parsing attributes in process `syz.3.108'. [ 121.224965][ T6327] netlink: 20 bytes leftover after parsing attributes in process `syz.1.109'. [ 121.272987][ T6327] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 121.428967][ T6328] @: renamed from bond_slave_0 (while UP) [ 125.689711][ T6362] netlink: 'syz.3.118': attribute type 10 has an invalid length. [ 125.801048][ T6362] netlink: 55 bytes leftover after parsing attributes in process `syz.3.118'. [ 126.170054][ T6366] netlink: 830 bytes leftover after parsing attributes in process `syz.1.119'. [ 127.835977][ T6397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.126'. [ 127.929536][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.128'. [ 128.734663][ T6411] can: request_module (can-proto-4) failed. [ 129.334616][ T6434] netlink: 68 bytes leftover after parsing attributes in process `syz.1.140'. [ 129.593078][ T6430] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.139'. [ 130.077466][ T6456] FAULT_INJECTION: forcing a failure. [ 130.077466][ T6456] name failslab, interval 1, probability 0, space 0, times 0 [ 130.126996][ T6456] CPU: 1 UID: 0 PID: 6456 Comm: syz.1.149 Not tainted syzkaller #0 PREEMPT(full) [ 130.127023][ T6456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 130.127034][ T6456] Call Trace: [ 130.127041][ T6456] [ 130.127050][ T6456] dump_stack_lvl+0x189/0x250 [ 130.127079][ T6456] ? __pfx____ratelimit+0x10/0x10 [ 130.127106][ T6456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.127128][ T6456] ? __pfx__printk+0x10/0x10 [ 130.127172][ T6456] should_fail_ex+0x414/0x560 [ 130.127204][ T6456] should_failslab+0xa8/0x100 [ 130.127234][ T6456] __kmalloc_cache_noprof+0x70/0x3d0 [ 130.127260][ T6456] ? sctp_add_bind_addr+0x8c/0x370 [ 130.127292][ T6456] sctp_add_bind_addr+0x8c/0x370 [ 130.127331][ T6456] sctp_copy_local_addr_list+0x30b/0x4e0 [ 130.127362][ T6456] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 130.127395][ T6456] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 130.127424][ T6456] ? sctp_v4_is_any+0x35/0x60 [ 130.127448][ T6456] ? sctp_copy_one_addr+0x93/0x360 [ 130.127477][ T6456] sctp_bind_addr_copy+0xb3/0x3c0 [ 130.127499][ T6456] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 130.127525][ T6456] sctp_connect_new_asoc+0x2e0/0x690 [ 130.127549][ T6456] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 130.127565][ T6456] ? __local_bh_enable_ip+0x12d/0x1c0 [ 130.127592][ T6456] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 130.127614][ T6456] ? security_sctp_bind_connect+0x7e/0x2e0 [ 130.127639][ T6456] sctp_sendmsg+0x155c/0x2810 [ 130.127679][ T6456] ? __pfx_sctp_sendmsg+0x10/0x10 [ 130.127712][ T6456] ? aa_sk_perm+0x81e/0x950 [ 130.127746][ T6456] ? __pfx_aa_sk_perm+0x10/0x10 [ 130.127776][ T6456] ? sock_rps_record_flow+0x19/0x410 [ 130.127804][ T6456] ? inet_sendmsg+0x2f4/0x370 [ 130.127833][ T6456] __sock_sendmsg+0x19c/0x270 [ 130.127860][ T6456] ____sys_sendmsg+0x505/0x830 [ 130.127886][ T6456] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.127916][ T6456] ? import_iovec+0x74/0xa0 [ 130.127942][ T6456] ___sys_sendmsg+0x21f/0x2a0 [ 130.127963][ T6456] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.128029][ T6456] ? __fget_files+0x2a/0x420 [ 130.128046][ T6456] ? __fget_files+0x3a0/0x420 [ 130.128074][ T6456] __x64_sys_sendmsg+0x19b/0x260 [ 130.128096][ T6456] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 130.128126][ T6456] ? __pfx_ksys_write+0x10/0x10 [ 130.128148][ T6456] ? rcu_is_watching+0x15/0xb0 [ 130.128172][ T6456] ? do_syscall_64+0xbe/0x3b0 [ 130.128202][ T6456] do_syscall_64+0xfa/0x3b0 [ 130.128225][ T6456] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.128248][ T6456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.128267][ T6456] ? clear_bhb_loop+0x60/0xb0 [ 130.128289][ T6456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.128305][ T6456] RIP: 0033:0x7f8ef3b8ebe9 [ 130.128323][ T6456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.128339][ T6456] RSP: 002b:00007f8ef4944038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.128359][ T6456] RAX: ffffffffffffffda RBX: 00007f8ef3dc5fa0 RCX: 00007f8ef3b8ebe9 [ 130.128372][ T6456] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000003 [ 130.128393][ T6456] RBP: 00007f8ef4944090 R08: 0000000000000000 R09: 0000000000000000 [ 130.128403][ T6456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 130.128411][ T6456] R13: 00007f8ef3dc6038 R14: 00007f8ef3dc5fa0 R15: 00007fff3b0614e8 [ 130.128436][ T6456] [ 130.285564][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'. [ 130.632634][ T6474] net_ratelimit: 7 callbacks suppressed [ 130.632655][ T6474] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 131.019802][ T6484] C: renamed from team_slave_0 (while UP) [ 132.995487][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.002188][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.311227][ T6484] netlink: 164 bytes leftover after parsing attributes in process `syz.4.156'. [ 138.704821][ T6569] netlink: 36 bytes leftover after parsing attributes in process `syz.0.181'. [ 138.712211][ T6570] netlink: 'syz.1.182': attribute type 1 has an invalid length. [ 138.728531][ T6570] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.182'. [ 139.028797][ T6586] netlink: 192 bytes leftover after parsing attributes in process `syz.4.187'. [ 139.038853][ T6586] syz.4.187 uses obsolete (PF_INET,SOCK_PACKET) [ 139.230101][ T6589] netlink: 'syz.4.187': attribute type 10 has an invalid length. [ 139.365905][ T6593] netlink: zone id is out of range [ 139.456975][ T6593] netlink: zone id is out of range [ 139.491427][ T6593] netlink: zone id is out of range [ 139.512511][ T6593] netlink: zone id is out of range [ 139.544768][ T6593] netlink: zone id is out of range [ 139.550618][ T6593] netlink: zone id is out of range [ 139.555882][ T6593] netlink: zone id is out of range [ 139.561563][ T6593] netlink: zone id is out of range [ 139.568630][ T6593] netlink: zone id is out of range [ 139.574163][ T6593] netlink: zone id is out of range [ 139.615545][ T6589] team0: Port device geneve1 added [ 139.750501][ T6599] netlink: 'syz.1.190': attribute type 23 has an invalid length. [ 139.965071][ T6601] netlink: 'syz.1.190': attribute type 2 has an invalid length. [ 140.005038][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.191'. [ 140.046993][ T6601] netlink: 'syz.1.190': attribute type 8 has an invalid length. [ 140.079790][ T6601] netlink: 132 bytes leftover after parsing attributes in process `syz.1.190'. [ 141.127899][ T6639] nftables ruleset with unbound chain [ 141.454887][ T6648] netlink: 104 bytes leftover after parsing attributes in process `syz.1.208'. [ 141.478898][ T6649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.206'. [ 141.488140][ T6649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.206'. [ 141.652201][ T6649] ======================================================= [ 141.652201][ T6649] WARNING: The mand mount option has been deprecated and [ 141.652201][ T6649] and is ignored by this kernel. Remove the mand [ 141.652201][ T6649] option from the mount to silence this warning. [ 141.652201][ T6649] ======================================================= [ 141.778550][ T6655] netlink: 40 bytes leftover after parsing attributes in process `syz.4.207'. [ 141.805949][ T6660] proc: Unknown parameter 'fsc' [ 142.034649][ T6655] netlink: 40 bytes leftover after parsing attributes in process `syz.4.207'. [ 142.306811][ T6655] netlink: 40 bytes leftover after parsing attributes in process `syz.4.207'. [ 142.373706][ T6670] netlink: 60 bytes leftover after parsing attributes in process `syz.1.214'. [ 142.527628][ T6670] unsupported nlmsg_type 40 [ 142.724711][ T6670] netlink: 'syz.1.214': attribute type 3 has an invalid length. [ 142.740521][ T6670] netlink: 14 bytes leftover after parsing attributes in process `syz.1.214'. [ 142.788330][ T6670] veth0_macvtap: left promiscuous mode [ 142.872663][ T6689] netlink: 'syz.4.217': attribute type 39 has an invalid length. [ 145.450558][ T6734] __nla_validate_parse: 3 callbacks suppressed [ 145.450587][ T6734] netlink: 68 bytes leftover after parsing attributes in process `syz.3.231'. [ 145.858234][ T6738] netlink: 'syz.0.233': attribute type 21 has an invalid length. [ 145.969899][ T6738] netlink: 152 bytes leftover after parsing attributes in process `syz.0.233'. [ 149.437987][ T6788] bridge_slave_1: left allmulticast mode [ 149.444165][ T6788] bridge_slave_1: left promiscuous mode [ 149.476239][ T6788] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.577420][ T6788] bridge_slave_0: left allmulticast mode [ 149.593821][ T6788] bridge_slave_0: left promiscuous mode [ 149.644879][ T6788] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.521958][ T6833] netlink: 40 bytes leftover after parsing attributes in process `syz.4.257'. [ 151.570694][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'. [ 151.658074][ T6836] netlink: 14 bytes leftover after parsing attributes in process `syz.0.259'. [ 151.948706][ T6836] hsr_slave_0: left promiscuous mode [ 152.117160][ T6836] hsr_slave_1: left promiscuous mode [ 152.872242][ T6856] netlink: 'syz.1.266': attribute type 10 has an invalid length. [ 153.027160][ T6861] netlink: 'syz.4.268': attribute type 2 has an invalid length. [ 153.078085][ T6861] netlink: 132 bytes leftover after parsing attributes in process `syz.4.268'. [ 153.123918][ T6861] netlink: 'syz.4.268': attribute type 2 has an invalid length. [ 153.170773][ T6868] netlink: 'syz.3.269': attribute type 10 has an invalid length. [ 153.201566][ T6868] netlink: 40 bytes leftover after parsing attributes in process `syz.3.269'. [ 153.217646][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.268'. [ 153.231265][ T6868] ipvlan1: entered promiscuous mode [ 153.252669][ T6868] ipvlan1: entered allmulticast mode [ 153.303422][ T6868] veth0_vlan: entered allmulticast mode [ 153.337140][ T6868] net_ratelimit: 6 callbacks suppressed [ 153.337161][ T6868] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 154.331558][ T6885] netlink: 60 bytes leftover after parsing attributes in process `syz.3.277'. [ 155.318587][ T6909] netlink: 20 bytes leftover after parsing attributes in process `syz.4.285'. [ 155.840848][ T6924] warning: `syz.0.287' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 155.915895][ T6928] netlink: 'syz.1.289': attribute type 2 has an invalid length. [ 155.956302][ T6928] netlink: 'syz.1.289': attribute type 1 has an invalid length. [ 156.228862][ T6934] netlink: 56 bytes leftover after parsing attributes in process `syz.2.291'. [ 156.314908][ T6934] netlink: 24 bytes leftover after parsing attributes in process `syz.2.291'. [ 158.214200][ T6980] __nla_validate_parse: 2 callbacks suppressed [ 158.214223][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.307'. [ 158.668545][ T6991] netlink: 'syz.4.309': attribute type 1 has an invalid length. [ 158.707303][ T6991] netlink: 'syz.4.309': attribute type 4 has an invalid length. [ 158.745599][ T6991] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.309'. [ 158.817114][ T6991] netlink: 'syz.4.309': attribute type 1 has an invalid length. [ 158.907661][ T6991] netlink: 'syz.4.309': attribute type 4 has an invalid length. [ 158.936325][ T6991] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.309'. [ 159.347358][ T7011] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.314'. [ 159.466428][ T7013] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 159.473229][ T7013] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 159.573796][ T7006] FAULT_INJECTION: forcing a failure. [ 159.573796][ T7006] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 159.592353][ T7006] CPU: 0 UID: 0 PID: 7006 Comm: syz.2.311 Not tainted syzkaller #0 PREEMPT(full) [ 159.592381][ T7006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 159.592391][ T7006] Call Trace: [ 159.592399][ T7006] [ 159.592408][ T7006] dump_stack_lvl+0x189/0x250 [ 159.592438][ T7006] ? __pfx____ratelimit+0x10/0x10 [ 159.592463][ T7006] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.592486][ T7006] ? __pfx__printk+0x10/0x10 [ 159.592528][ T7006] should_fail_ex+0x414/0x560 [ 159.592570][ T7006] _copy_to_user+0x31/0xb0 [ 159.592596][ T7006] simple_read_from_buffer+0xe1/0x170 [ 159.592630][ T7006] proc_fail_nth_read+0x1b3/0x220 [ 159.592662][ T7006] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 159.592688][ T7006] ? rw_verify_area+0x2a6/0x4d0 [ 159.592710][ T7006] ? __lock_acquire+0xab9/0xd20 [ 159.592736][ T7006] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 159.592760][ T7006] vfs_read+0x200/0xa30 [ 159.592783][ T7006] ? fdget_pos+0x247/0x320 [ 159.592806][ T7006] ? __pfx___mutex_lock+0x10/0x10 [ 159.592833][ T7006] ? __pfx_vfs_read+0x10/0x10 [ 159.592860][ T7006] ? __fget_files+0x2a/0x420 [ 159.592882][ T7006] ? __fget_files+0x3a0/0x420 [ 159.592898][ T7006] ? __fget_files+0x2a/0x420 [ 159.592927][ T7006] ksys_read+0x145/0x250 [ 159.592955][ T7006] ? __pfx_ksys_read+0x10/0x10 [ 159.592976][ T7006] ? rcu_is_watching+0x15/0xb0 [ 159.593003][ T7006] ? do_syscall_64+0xbe/0x3b0 [ 159.593034][ T7006] do_syscall_64+0xfa/0x3b0 [ 159.593058][ T7006] ? lockdep_hardirqs_on+0x9c/0x150 [ 159.593089][ T7006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.593108][ T7006] ? clear_bhb_loop+0x60/0xb0 [ 159.593132][ T7006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.593150][ T7006] RIP: 0033:0x7f09ec98d5fc [ 159.593167][ T7006] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 159.593181][ T7006] RSP: 002b:00007f09ed8cb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 159.593202][ T7006] RAX: ffffffffffffffda RBX: 00007f09ecbc6090 RCX: 00007f09ec98d5fc [ 159.593215][ T7006] RDX: 000000000000000f RSI: 00007f09ed8cb0a0 RDI: 0000000000000005 [ 159.593227][ T7006] RBP: 00007f09ed8cb090 R08: 0000000000000000 R09: 0000000000000000 [ 159.593237][ T7006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.593247][ T7006] R13: 00007f09ecbc6128 R14: 00007f09ecbc6090 R15: 00007fff8fdf2418 [ 159.593278][ T7006] [ 159.973047][ T7020] FAULT_INJECTION: forcing a failure. [ 159.973047][ T7020] name failslab, interval 1, probability 0, space 0, times 0 [ 159.986467][ T7020] CPU: 0 UID: 0 PID: 7020 Comm: syz.2.317 Not tainted syzkaller #0 PREEMPT(full) [ 159.986493][ T7020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 159.986504][ T7020] Call Trace: [ 159.986515][ T7020] [ 159.986525][ T7020] dump_stack_lvl+0x189/0x250 [ 159.986559][ T7020] ? __pfx____ratelimit+0x10/0x10 [ 159.986592][ T7020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.986624][ T7020] ? __pfx__printk+0x10/0x10 [ 159.986676][ T7020] ? __pfx___might_resched+0x10/0x10 [ 159.986718][ T7020] should_fail_ex+0x414/0x560 [ 159.986762][ T7020] should_failslab+0xa8/0x100 [ 159.986799][ T7020] __kmalloc_noprof+0xcb/0x4f0 [ 159.986823][ T7020] ? kfree+0x4d/0x440 [ 159.986841][ T7020] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 159.986878][ T7020] tomoyo_realpath_from_path+0xe3/0x5d0 [ 159.986934][ T7020] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 159.986966][ T7020] tomoyo_path_number_perm+0x1e8/0x5a0 [ 159.987007][ T7020] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 159.987048][ T7020] ? perf_trace_lock_acquire+0x335/0x410 [ 159.987195][ T7020] ? __fget_files+0x2a/0x420 [ 159.987228][ T7020] ? __fget_files+0x2a/0x420 [ 159.987245][ T7020] ? __fget_files+0x3a0/0x420 [ 159.987262][ T7020] ? __fget_files+0x2a/0x420 [ 159.987300][ T7020] security_file_ioctl+0xcb/0x2d0 [ 159.987337][ T7020] __se_sys_ioctl+0x47/0x170 [ 159.987376][ T7020] do_syscall_64+0xfa/0x3b0 [ 159.987411][ T7020] ? lockdep_hardirqs_on+0x9c/0x150 [ 159.987439][ T7020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.987460][ T7020] ? clear_bhb_loop+0x60/0xb0 [ 159.987495][ T7020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.987514][ T7020] RIP: 0033:0x7f09ec98ebe9 [ 159.987536][ T7020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.987552][ T7020] RSP: 002b:00007f09ed8ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.987572][ T7020] RAX: ffffffffffffffda RBX: 00007f09ecbc5fa0 RCX: 00007f09ec98ebe9 [ 159.987586][ T7020] RDX: 0000200000000340 RSI: 000000000000541b RDI: 0000000000000004 [ 159.987598][ T7020] RBP: 00007f09ed8ec090 R08: 0000000000000000 R09: 0000000000000000 [ 159.987609][ T7020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.987619][ T7020] R13: 00007f09ecbc6038 R14: 00007f09ecbc5fa0 R15: 00007fff8fdf2418 [ 159.987693][ T7020] [ 160.318268][ T7020] ERROR: Out of memory at tomoyo_realpath_from_path. [ 160.794941][ T7029] syzkaller0: entered promiscuous mode [ 161.368279][ T7029] syzkaller0: entered allmulticast mode [ 161.502398][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.323'. [ 165.197855][ C1] sched: DL replenish lagged too much [ 165.752906][ T7054] netlink: 'syz.4.327': attribute type 13 has an invalid length. [ 166.871825][ T30] audit: type=1800 audit(1756970521.248:2): pid=7054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.327" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 166.893468][ T7054] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 166.903501][ T7054] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 166.933772][ T7054] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 167.299953][ T7068] netlink: 40 bytes leftover after parsing attributes in process `syz.2.330'. [ 167.512777][ T7070] netlink: 830 bytes leftover after parsing attributes in process `syz.3.332'. [ 167.603507][ T7068] netlink: 40 bytes leftover after parsing attributes in process `syz.2.330'. [ 168.077434][ T7090] raw_sendmsg: syz.1.338 forgot to set AF_INET. Fix it! [ 168.380532][ T7099] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 168.397391][ T7099] syzkaller1: linktype set to 768 [ 170.989062][ T7126] netlink: 'syz.3.350': attribute type 10 has an invalid length. [ 171.027113][ T7126] netlink: 55 bytes leftover after parsing attributes in process `syz.3.350'. [ 171.096156][ T7088] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 171.122245][ T7088] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 172.138308][ T7154] blkio.reset_stats is deprecated [ 172.498371][ T7159] netlink: 'syz.3.362': attribute type 10 has an invalid length. [ 172.506226][ T7159] netlink: 40 bytes leftover after parsing attributes in process `syz.3.362'. [ 172.567738][ T7159] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 173.090103][ T7174] netlink: 56 bytes leftover after parsing attributes in process `syz.2.367'. [ 174.307281][ T7201] netlink: 56 bytes leftover after parsing attributes in process `syz.1.379'. [ 174.400631][ T7201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.379'. [ 174.542556][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.375'. [ 176.195936][ T7221] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.385'. [ 177.154501][ T7235] netlink: 192 bytes leftover after parsing attributes in process `syz.4.388'. [ 177.852454][ T7254] netlink: 24 bytes leftover after parsing attributes in process `syz.3.395'. [ 177.857853][ T7252] tap0: tun_chr_ioctl cmd 1074025673 [ 177.932298][ T7254] netlink: 24 bytes leftover after parsing attributes in process `syz.3.395'. [ 178.600521][ T7296] FAULT_INJECTION: forcing a failure. [ 178.600521][ T7296] name failslab, interval 1, probability 0, space 0, times 0 [ 178.679045][ T7296] CPU: 0 UID: 0 PID: 7296 Comm: syz.1.398 Not tainted syzkaller #0 PREEMPT(full) [ 178.679073][ T7296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 178.679083][ T7296] Call Trace: [ 178.679093][ T7296] [ 178.679104][ T7296] dump_stack_lvl+0x189/0x250 [ 178.679135][ T7296] ? __pfx____ratelimit+0x10/0x10 [ 178.679177][ T7296] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.679203][ T7296] ? __pfx__printk+0x10/0x10 [ 178.679243][ T7296] ? __pfx___might_resched+0x10/0x10 [ 178.679264][ T7296] ? fs_reclaim_acquire+0x7d/0x100 [ 178.679299][ T7296] should_fail_ex+0x414/0x560 [ 178.679343][ T7296] should_failslab+0xa8/0x100 [ 178.679378][ T7296] __kmalloc_noprof+0xcb/0x4f0 [ 178.679404][ T7296] ? tomoyo_encode+0x28b/0x550 [ 178.679439][ T7296] tomoyo_encode+0x28b/0x550 [ 178.679481][ T7296] tomoyo_realpath_from_path+0x58d/0x5d0 [ 178.679535][ T7296] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 178.679564][ T7296] tomoyo_path_number_perm+0x1e8/0x5a0 [ 178.679601][ T7296] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 178.679642][ T7296] ? perf_trace_lock_acquire+0xf5/0x410 [ 178.679695][ T7296] ? __lock_acquire+0xab9/0xd20 [ 178.679787][ T7296] ? __fget_files+0x2a/0x420 [ 178.679816][ T7296] ? __fget_files+0x2a/0x420 [ 178.679833][ T7296] ? __fget_files+0x3a0/0x420 [ 178.679848][ T7296] ? __fget_files+0x2a/0x420 [ 178.679881][ T7296] security_file_ioctl+0xcb/0x2d0 [ 178.679915][ T7296] __se_sys_ioctl+0x47/0x170 [ 178.679952][ T7296] do_syscall_64+0xfa/0x3b0 [ 178.679976][ T7296] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.680003][ T7296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.680022][ T7296] ? clear_bhb_loop+0x60/0xb0 [ 178.680061][ T7296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.680079][ T7296] RIP: 0033:0x7f8ef3b8ebe9 [ 178.680100][ T7296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.680114][ T7296] RSP: 002b:00007f8ef4944038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.680133][ T7296] RAX: ffffffffffffffda RBX: 00007f8ef3dc5fa0 RCX: 00007f8ef3b8ebe9 [ 178.680146][ T7296] RDX: 0000200000000340 RSI: 000000000000541b RDI: 0000000000000004 [ 178.680166][ T7296] RBP: 00007f8ef4944090 R08: 0000000000000000 R09: 0000000000000000 [ 178.680177][ T7296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.680187][ T7296] R13: 00007f8ef3dc6038 R14: 00007f8ef3dc5fa0 R15: 00007fff3b0614e8 [ 178.680253][ T7296] [ 178.680387][ T7296] ERROR: Out of memory at tomoyo_realpath_from_path. [ 179.105481][ T7297] netlink: 10 bytes leftover after parsing attributes in process `syz.3.397'. [ 180.154103][ T7328] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.408'. [ 180.514866][ T7336] netlink: 340 bytes leftover after parsing attributes in process `syz.2.411'. [ 181.084181][ T7348] netlink: 44 bytes leftover after parsing attributes in process `syz.4.416'. [ 181.367378][ T7357] netlink: 36 bytes leftover after parsing attributes in process `syz.1.419'. [ 181.381324][ T7357] netlink: 35 bytes leftover after parsing attributes in process `syz.1.419'. [ 181.404201][ T7359] netlink: 68 bytes leftover after parsing attributes in process `syz.4.420'. [ 181.414257][ T7357] netlink: 35 bytes leftover after parsing attributes in process `syz.1.419'. [ 182.008890][ T7376] FAULT_INJECTION: forcing a failure. [ 182.008890][ T7376] name failslab, interval 1, probability 0, space 0, times 0 [ 182.060645][ T7376] CPU: 1 UID: 0 PID: 7376 Comm: syz.3.427 Not tainted syzkaller #0 PREEMPT(full) [ 182.060673][ T7376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 182.060685][ T7376] Call Trace: [ 182.060693][ T7376] [ 182.060702][ T7376] dump_stack_lvl+0x189/0x250 [ 182.060731][ T7376] ? __pfx____ratelimit+0x10/0x10 [ 182.060758][ T7376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.060781][ T7376] ? __pfx__printk+0x10/0x10 [ 182.060826][ T7376] should_fail_ex+0x414/0x560 [ 182.060858][ T7376] should_failslab+0xa8/0x100 [ 182.060888][ T7376] __kmalloc_cache_noprof+0x70/0x3d0 [ 182.060913][ T7376] ? sctp_add_bind_addr+0x8c/0x370 [ 182.060944][ T7376] sctp_add_bind_addr+0x8c/0x370 [ 182.060974][ T7376] sctp_copy_local_addr_list+0x30b/0x4e0 [ 182.061004][ T7376] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 182.061028][ T7376] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 182.061059][ T7376] ? sctp_v4_is_any+0x35/0x60 [ 182.061082][ T7376] ? sctp_copy_one_addr+0x93/0x360 [ 182.061120][ T7376] sctp_bind_addr_copy+0xb3/0x3c0 [ 182.061146][ T7376] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 182.061173][ T7376] sctp_connect_new_asoc+0x2e0/0x690 [ 182.061196][ T7376] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 182.061212][ T7376] ? __local_bh_enable_ip+0x12d/0x1c0 [ 182.061242][ T7376] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 182.061264][ T7376] ? security_sctp_bind_connect+0x7e/0x2e0 [ 182.061294][ T7376] sctp_sendmsg+0x155c/0x2810 [ 182.061337][ T7376] ? __pfx_sctp_sendmsg+0x10/0x10 [ 182.061370][ T7376] ? aa_sk_perm+0x81e/0x950 [ 182.061405][ T7376] ? __pfx_aa_sk_perm+0x10/0x10 [ 182.061436][ T7376] ? sock_rps_record_flow+0x19/0x410 [ 182.061463][ T7376] ? inet_sendmsg+0x2f4/0x370 [ 182.061491][ T7376] __sock_sendmsg+0x19c/0x270 [ 182.061521][ T7376] ____sys_sendmsg+0x505/0x830 [ 182.061549][ T7376] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.061579][ T7376] ? import_iovec+0x74/0xa0 [ 182.061604][ T7376] ___sys_sendmsg+0x21f/0x2a0 [ 182.061627][ T7376] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.061694][ T7376] ? __fget_files+0x2a/0x420 [ 182.061709][ T7376] ? __fget_files+0x3a0/0x420 [ 182.061738][ T7376] __x64_sys_sendmsg+0x19b/0x260 [ 182.061759][ T7376] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 182.061791][ T7376] ? __pfx_ksys_write+0x10/0x10 [ 182.061813][ T7376] ? rcu_is_watching+0x15/0xb0 [ 182.061838][ T7376] ? do_syscall_64+0xbe/0x3b0 [ 182.061867][ T7376] do_syscall_64+0xfa/0x3b0 [ 182.061891][ T7376] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.061915][ T7376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.061933][ T7376] ? clear_bhb_loop+0x60/0xb0 [ 182.061954][ T7376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.061970][ T7376] RIP: 0033:0x7f1697f8ebe9 [ 182.061986][ T7376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.062001][ T7376] RSP: 002b:00007f1698ea2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.062021][ T7376] RAX: ffffffffffffffda RBX: 00007f16981c5fa0 RCX: 00007f1697f8ebe9 [ 182.062034][ T7376] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000003 [ 182.062045][ T7376] RBP: 00007f1698ea2090 R08: 0000000000000000 R09: 0000000000000000 [ 182.062056][ T7376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.062067][ T7376] R13: 00007f16981c6038 R14: 00007f16981c5fa0 R15: 00007fff1b884208 [ 182.062100][ T7376] [ 184.178396][ T7400] netlink: 'syz.3.432': attribute type 7 has an invalid length. [ 184.967148][ T7402] netlink: 'syz.2.434': attribute type 10 has an invalid length. [ 185.070437][ T7406] __nla_validate_parse: 4 callbacks suppressed [ 185.070483][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.433'. [ 185.447803][ T7402] netlink: 55 bytes leftover after parsing attributes in process `syz.2.434'. [ 188.288169][ T7446] netlink: 48 bytes leftover after parsing attributes in process `syz.2.443'. [ 188.351537][ T7446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.443'. [ 188.425175][ T7455] netlink: 'syz.1.448': attribute type 1 has an invalid length. [ 188.851036][ T7462] netlink: 40 bytes leftover after parsing attributes in process `syz.0.450'. [ 188.946870][ T7471] netlink: 'syz.1.452': attribute type 1 has an invalid length. [ 189.455936][ T7477] netlink: 24 bytes leftover after parsing attributes in process `syz.3.455'. [ 189.486287][ T7477] netlink: 'syz.3.455': attribute type 2 has an invalid length. [ 189.551148][ T7481] openvswitch: netlink: Missing valid actions attribute. [ 189.563848][ T7477] netlink: 444 bytes leftover after parsing attributes in process `syz.3.455'. [ 189.627978][ T7481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.780258][ T7488] netlink: 20 bytes leftover after parsing attributes in process `syz.2.458'. [ 190.339050][ T7501] netlink: 'syz.2.463': attribute type 31 has an invalid length. [ 190.418891][ T7503] netlink: 48 bytes leftover after parsing attributes in process `syz.1.464'. [ 190.468349][ T7503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.464'. [ 191.061895][ T7531] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.472'. [ 191.743014][ T7553] netlink: 24 bytes leftover after parsing attributes in process `syz.2.480'. [ 191.758563][ T7553] netlink: 24 bytes leftover after parsing attributes in process `syz.2.480'. [ 192.297700][ T7554] netlink: 48 bytes leftover after parsing attributes in process `syz.3.479'. [ 192.333634][ T7564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.482'. [ 192.377262][ T7554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.479'. [ 192.780515][ T7572] FAULT_INJECTION: forcing a failure. [ 192.780515][ T7572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.853638][ T7572] CPU: 1 UID: 0 PID: 7572 Comm: syz.3.484 Not tainted syzkaller #0 PREEMPT(full) [ 192.853663][ T7572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 192.853673][ T7572] Call Trace: [ 192.853680][ T7572] [ 192.853688][ T7572] dump_stack_lvl+0x189/0x250 [ 192.853715][ T7572] ? __pfx____ratelimit+0x10/0x10 [ 192.853740][ T7572] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.853761][ T7572] ? __pfx__printk+0x10/0x10 [ 192.853807][ T7572] should_fail_ex+0x414/0x560 [ 192.853837][ T7572] _copy_to_user+0x31/0xb0 [ 192.853860][ T7572] simple_read_from_buffer+0xe1/0x170 [ 192.853891][ T7572] proc_fail_nth_read+0x1b3/0x220 [ 192.853915][ T7572] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 192.853939][ T7572] ? rw_verify_area+0x2a6/0x4d0 [ 192.853960][ T7572] ? __lock_acquire+0xab9/0xd20 [ 192.853982][ T7572] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 192.854004][ T7572] vfs_read+0x200/0xa30 [ 192.854025][ T7572] ? fdget_pos+0x247/0x320 [ 192.854047][ T7572] ? __pfx___mutex_lock+0x10/0x10 [ 192.854073][ T7572] ? __pfx_vfs_read+0x10/0x10 [ 192.854097][ T7572] ? __fget_files+0x2a/0x420 [ 192.854118][ T7572] ? __fget_files+0x3a0/0x420 [ 192.854133][ T7572] ? __fget_files+0x2a/0x420 [ 192.854158][ T7572] ksys_read+0x145/0x250 [ 192.854184][ T7572] ? __pfx_ksys_read+0x10/0x10 [ 192.854213][ T7572] ? do_syscall_64+0xbe/0x3b0 [ 192.854242][ T7572] do_syscall_64+0xfa/0x3b0 [ 192.854264][ T7572] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.854287][ T7572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.854304][ T7572] ? clear_bhb_loop+0x60/0xb0 [ 192.854326][ T7572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.854342][ T7572] RIP: 0033:0x7f1697f8d5fc [ 192.854359][ T7572] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 192.854372][ T7572] RSP: 002b:00007f1698e81030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 192.854392][ T7572] RAX: ffffffffffffffda RBX: 00007f16981c6090 RCX: 00007f1697f8d5fc [ 192.854405][ T7572] RDX: 000000000000000f RSI: 00007f1698e810a0 RDI: 0000000000000006 [ 192.854415][ T7572] RBP: 00007f1698e81090 R08: 0000000000000000 R09: 0000000000000000 [ 192.854426][ T7572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.854436][ T7572] R13: 00007f16981c6128 R14: 00007f16981c6090 R15: 00007fff1b884208 [ 192.854467][ T7572] [ 192.936249][ T7541] : entered promiscuous mode [ 193.645272][ T7588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.488'. [ 194.399071][ T7604] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 194.937499][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.943939][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.465818][ T7627] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.499'. [ 195.623855][ T7638] FAULT_INJECTION: forcing a failure. [ 195.623855][ T7638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.697137][ T7638] CPU: 0 UID: 0 PID: 7638 Comm: syz.1.504 Not tainted syzkaller #0 PREEMPT(full) [ 195.697164][ T7638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 195.697174][ T7638] Call Trace: [ 195.697182][ T7638] [ 195.697190][ T7638] dump_stack_lvl+0x189/0x250 [ 195.697217][ T7638] ? __pfx____ratelimit+0x10/0x10 [ 195.697244][ T7638] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.697266][ T7638] ? __pfx__printk+0x10/0x10 [ 195.697291][ T7638] ? __might_fault+0xb0/0x130 [ 195.697319][ T7638] ? __might_fault+0xb0/0x130 [ 195.697350][ T7638] should_fail_ex+0x414/0x560 [ 195.697381][ T7638] _copy_from_user+0x2d/0xb0 [ 195.697404][ T7638] __sys_bpf+0x1ed/0x870 [ 195.697431][ T7638] ? __pfx___sys_bpf+0x10/0x10 [ 195.697473][ T7638] ? ksys_write+0x22a/0x250 [ 195.697502][ T7638] ? __pfx_ksys_write+0x10/0x10 [ 195.697522][ T7638] ? rcu_is_watching+0x15/0xb0 [ 195.697550][ T7638] __x64_sys_bpf+0x7c/0x90 [ 195.697572][ T7638] do_syscall_64+0xfa/0x3b0 [ 195.697595][ T7638] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.697619][ T7638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.697635][ T7638] ? clear_bhb_loop+0x60/0xb0 [ 195.697659][ T7638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.697675][ T7638] RIP: 0033:0x7f8ef3b8ebe9 [ 195.697692][ T7638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.697706][ T7638] RSP: 002b:00007f8ef4944038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 195.697726][ T7638] RAX: ffffffffffffffda RBX: 00007f8ef3dc5fa0 RCX: 00007f8ef3b8ebe9 [ 195.697738][ T7638] RDX: 0000000000000020 RSI: 00002000000002c0 RDI: 0000000000000008 [ 195.697750][ T7638] RBP: 00007f8ef4944090 R08: 0000000000000000 R09: 0000000000000000 [ 195.697760][ T7638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.697770][ T7638] R13: 00007f8ef3dc6038 R14: 00007f8ef3dc5fa0 R15: 00007fff3b0614e8 [ 195.697805][ T7638] [ 197.246853][ T7662] netlink: 16 bytes leftover after parsing attributes in process `syz.2.510'. [ 197.370952][ T7669] netlink: 20 bytes leftover after parsing attributes in process `syz.4.513'. [ 197.410610][ T7669] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 197.450298][ T7664] netlink: 48 bytes leftover after parsing attributes in process `syz.1.511'. [ 197.459965][ T7667] C: renamed from team_slave_0 (while UP) [ 197.467696][ T7664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.511'. [ 197.529354][ T7673] netlink: 13951 bytes leftover after parsing attributes in process `syz.0.512'. [ 197.995397][ T7667] netlink: 'syz.0.512': attribute type 2 has an invalid length. [ 198.004585][ T7667] netlink: 116 bytes leftover after parsing attributes in process `syz.0.512'. [ 198.025214][ T7667] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 200.979198][ T7686] netlink: 'syz.2.518': attribute type 23 has an invalid length. [ 201.883651][ T7703] netlink: 40 bytes leftover after parsing attributes in process `syz.0.521'. [ 201.974087][ T7703] netlink: 104 bytes leftover after parsing attributes in process `syz.0.521'. [ 202.206589][ T7703] netlink: 40 bytes leftover after parsing attributes in process `syz.0.521'. [ 203.088405][ T7715] netlink: 48 bytes leftover after parsing attributes in process `syz.3.527'. [ 203.124494][ T7715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.527'. [ 203.222769][ T7731] netlink: 'syz.1.528': attribute type 10 has an invalid length. [ 203.262734][ T7731] netlink: 40 bytes leftover after parsing attributes in process `syz.1.528'. [ 203.343594][ T7731] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 203.377834][ T7731] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.410318][ T7731] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 203.807452][ T7748] netlink: 'syz.2.532': attribute type 1 has an invalid length. [ 203.835361][ T7748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.532'. [ 204.127230][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'. [ 204.214919][ T7755] netlink: 3 bytes leftover after parsing attributes in process `syz.3.534'. [ 204.323265][ T7757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.535'. [ 204.620678][ T7766] netlink: zone id is out of range [ 204.737316][ T7766] netlink: zone id is out of range [ 204.742961][ T7766] netlink: zone id is out of range [ 204.800602][ T7766] netlink: zone id is out of range [ 204.805995][ T7766] netlink: zone id is out of range [ 204.817436][ T7766] netlink: zone id is out of range [ 204.822618][ T7766] netlink: zone id is out of range [ 204.853970][ T7766] netlink: zone id is out of range [ 204.952898][ T7766] netlink: zone id is out of range [ 204.960356][ T7771] netlink: 'syz.3.541': attribute type 2 has an invalid length. [ 204.971289][ T7766] netlink: zone id is out of range [ 204.981920][ T7771] netlink: 'syz.3.541': attribute type 8 has an invalid length. [ 205.816966][ T7782] netlink: 'syz.3.543': attribute type 17 has an invalid length. [ 206.003708][ T7748] infiniband syz1: set active [ 206.029504][ T7748] infiniband syz1: added team_slave_0 [ 206.056551][ T7748] syz1: rxe_create_cq: returned err = -12 [ 206.066487][ T7748] infiniband syz1: Couldn't create ib_mad CQ [ 206.076259][ T7748] infiniband syz1: Couldn't open port 1 [ 206.457174][ T7789] netlink: 'syz.4.544': attribute type 10 has an invalid length. [ 206.478978][ T7748] RDS/IB: syz1: added [ 206.493132][ T7748] smc: adding ib device syz1 with port count 1 [ 206.539727][ T7748] smc: ib device syz1 port 1 has pnetid [ 208.281238][ T7820] netlink: 'syz.1.552': attribute type 3 has an invalid length. [ 208.427969][ T7820] __nla_validate_parse: 3 callbacks suppressed [ 208.427991][ T7820] netlink: 132 bytes leftover after parsing attributes in process `syz.1.552'. [ 208.741927][ T7814] netlink: 56 bytes leftover after parsing attributes in process `syz.1.552'. [ 209.434421][ T7843] netlink: 32 bytes leftover after parsing attributes in process `syz.0.559'. [ 210.035787][ T7851] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.562'. [ 210.076462][ T7849] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.562'. [ 210.138952][ T7851] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.562'. [ 211.590132][ T7877] netlink: 24 bytes leftover after parsing attributes in process `syz.3.568'. [ 211.637156][ T7877] netlink: 24 bytes leftover after parsing attributes in process `syz.3.568'. [ 213.725520][ T7894] net_ratelimit: 6 callbacks suppressed [ 213.725541][ T7894] openvswitch: netlink: IP tunnel dst address not specified [ 213.925529][ T7897] netlink: zone id is out of range [ 213.930975][ T7897] netlink: zone id is out of range [ 213.936968][ T7897] netlink: zone id is out of range [ 213.942255][ T7897] netlink: zone id is out of range [ 213.947583][ T7897] netlink: zone id is out of range [ 213.952721][ T7897] netlink: zone id is out of range [ 213.958481][ T7897] netlink: zone id is out of range [ 213.963638][ T7897] netlink: zone id is out of range [ 213.969574][ T7897] netlink: zone id is out of range [ 214.382451][ T7903] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.390345][ T7903] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.368649][ T7911] netlink: 788 bytes leftover after parsing attributes in process `syz.2.579'. [ 215.585052][ T7913] netlink: 'syz.2.579': attribute type 2 has an invalid length. [ 215.610038][ T7913] netlink: 'syz.2.579': attribute type 8 has an invalid length. [ 215.656202][ T7913] netlink: 132 bytes leftover after parsing attributes in process `syz.2.579'. [ 215.692373][ T7916] netlink: 'syz.4.580': attribute type 2 has an invalid length. [ 215.742402][ T7916] netlink: 'syz.4.580': attribute type 8 has an invalid length. [ 215.786317][ T7916] netlink: 132 bytes leftover after parsing attributes in process `syz.4.580'. [ 216.206876][ T7914] netlink: 788 bytes leftover after parsing attributes in process `syz.4.580'. [ 216.941212][ T7937] tun0: tun_chr_ioctl cmd 1074025677 [ 216.955517][ T7937] tun0: linktype set to 774 [ 216.999069][ T7934] tun0: tun_chr_ioctl cmd 1074025680 [ 217.148562][ T5876] Bluetooth: hci1: command 0x0406 tx timeout [ 217.154826][ T5876] Bluetooth: hci3: command 0x0406 tx timeout [ 217.161529][ T5869] Bluetooth: hci2: command 0x0406 tx timeout [ 217.167817][ T5869] Bluetooth: hci4: command 0x0406 tx timeout [ 217.175203][ T5869] Bluetooth: hci0: command 0x0406 tx timeout [ 217.683578][ T7948] netlink: 20 bytes leftover after parsing attributes in process `syz.1.589'. [ 217.789547][ T7948] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 218.652770][ T7957] netlink: 768 bytes leftover after parsing attributes in process `syz.2.593'. [ 218.774553][ T7961] netlink: 'syz.2.593': attribute type 2 has an invalid length. [ 218.814059][ T7961] netlink: 'syz.2.593': attribute type 8 has an invalid length. [ 218.901683][ T7961] netlink: 132 bytes leftover after parsing attributes in process `syz.2.593'. [ 219.698039][ T7988] netlink: 104 bytes leftover after parsing attributes in process `syz.2.601'. [ 219.760451][ T7980] netlink: 28 bytes leftover after parsing attributes in process `syz.3.602'. [ 219.775264][ T7980] netlink: 380 bytes leftover after parsing attributes in process `syz.3.602'. [ 220.242681][ T8004] netlink: 'syz.1.608': attribute type 2 has an invalid length. [ 220.271598][ T8004] netlink: 'syz.1.608': attribute type 8 has an invalid length. [ 220.405524][ T8016] netlink: 'syz.0.611': attribute type 2 has an invalid length. [ 220.433979][ T8016] netlink: 'syz.0.611': attribute type 8 has an invalid length. [ 220.450694][ T8016] __nla_validate_parse: 2 callbacks suppressed [ 220.450714][ T8016] netlink: 132 bytes leftover after parsing attributes in process `syz.0.611'. [ 221.055188][ T8012] netlink: 768 bytes leftover after parsing attributes in process `syz.0.611'. [ 221.086072][ T8027] validate_nla: 1 callbacks suppressed [ 221.086097][ T8027] netlink: 'syz.4.615': attribute type 21 has an invalid length. [ 221.088616][ T8024] netlink: 'syz.3.614': attribute type 10 has an invalid length. [ 221.093066][ T8027] netlink: 132 bytes leftover after parsing attributes in process `syz.4.615'. [ 221.137553][ T8024] netlink: 'syz.3.614': attribute type 16 has an invalid length. [ 221.151808][ T8029] netlink: 40 bytes leftover after parsing attributes in process `syz.2.616'. [ 221.166020][ T8024] netlink: 156 bytes leftover after parsing attributes in process `syz.3.614'. [ 221.181872][ T8029] net_ratelimit: 8 callbacks suppressed [ 221.181890][ T8029] openvswitch: netlink: Flow key attr not present in new flow. [ 222.561930][ T8058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.626'. [ 223.273440][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.627'. [ 224.276815][ T8086] netlink: 'syz.3.636': attribute type 10 has an invalid length. [ 224.311799][ T8086] netlink: 55 bytes leftover after parsing attributes in process `syz.3.636'. [ 225.107617][ T8093] syzkaller0: entered promiscuous mode [ 225.113359][ T8093] syzkaller0: entered allmulticast mode [ 225.375681][ T8103] netlink: 32 bytes leftover after parsing attributes in process `syz.4.641'. [ 225.671093][ T7288] tipc: Subscription rejected, illegal request [ 225.698760][ T8106] netlink: 'syz.3.642': attribute type 10 has an invalid length. [ 225.904992][ T8109] netlink: 56 bytes leftover after parsing attributes in process `syz.4.643'. [ 225.931714][ T8109] netlink: 24 bytes leftover after parsing attributes in process `syz.4.643'. [ 227.823621][ T8106] team0: Device wlan1 is of different type [ 227.837789][ T8088] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 227.845134][ T8088] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 228.049905][ T8119] netlink: 16 bytes leftover after parsing attributes in process `syz.4.647'. [ 228.160539][ T8119] netlink: 104 bytes leftover after parsing attributes in process `syz.4.647'. [ 228.475771][ T8130] netlink: 'syz.0.649': attribute type 2 has an invalid length. [ 228.566799][ T8130] netlink: 'syz.0.649': attribute type 8 has an invalid length. [ 228.618721][ T8130] netlink: 132 bytes leftover after parsing attributes in process `syz.0.649'. [ 228.815169][ T8138] netlink: 'syz.3.653': attribute type 29 has an invalid length. [ 228.834795][ T8141] netlink: 'syz.3.653': attribute type 29 has an invalid length. [ 228.927395][ T30] audit: type=1107 audit(1756970583.298:3): pid=8136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 229.009928][ T8141] netlink: 'syz.3.653': attribute type 29 has an invalid length. [ 229.100959][ T8138] netlink: 'syz.3.653': attribute type 29 has an invalid length. [ 229.402735][ T8143] netlink: 'syz.4.655': attribute type 30 has an invalid length. [ 229.422353][ T8149] netlink: 768 bytes leftover after parsing attributes in process `syz.1.656'. [ 230.679469][ T8149] netlink: 'syz.1.656': attribute type 2 has an invalid length. [ 230.745217][ T8149] netlink: 'syz.1.656': attribute type 8 has an invalid length. [ 230.803508][ T8149] netlink: 132 bytes leftover after parsing attributes in process `syz.1.656'. [ 231.197423][ T8178] netlink: 830 bytes leftover after parsing attributes in process `syz.1.665'. [ 231.217311][ T8178] netlink: 'syz.1.665': attribute type 4 has an invalid length. [ 231.225041][ T8178] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.665'. [ 232.723268][ T8188] netlink: 132 bytes leftover after parsing attributes in process `syz.1.668'. [ 234.029496][ T8221] netlink: 830 bytes leftover after parsing attributes in process `syz.4.678'. [ 234.790149][ T8235] wg2: entered promiscuous mode [ 234.810359][ T8235] wg2: entered allmulticast mode [ 234.833068][ T8239] netlink: 20 bytes leftover after parsing attributes in process `syz.1.682'. [ 234.843753][ T8239] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 235.317145][ T8244] validate_nla: 3 callbacks suppressed [ 235.317166][ T8244] netlink: 'syz.2.683': attribute type 2 has an invalid length. [ 235.377044][ T8244] netlink: 'syz.2.683': attribute type 8 has an invalid length. [ 235.384757][ T8244] netlink: 132 bytes leftover after parsing attributes in process `syz.2.683'. [ 237.702072][ T8274] syzkaller0: entered promiscuous mode [ 237.707777][ T8274] syzkaller0: entered allmulticast mode [ 240.618841][ T8298] netlink: 14 bytes leftover after parsing attributes in process `syz.4.698'. [ 240.705850][ T8298] hsr_slave_0: left promiscuous mode [ 240.752835][ T8298] hsr_slave_1: left promiscuous mode [ 242.402420][ T8330] netlink: 32 bytes leftover after parsing attributes in process `syz.0.710'. [ 243.413853][ T8348] netlink: 'syz.4.715': attribute type 1 has an invalid length. [ 245.609001][ T8383] netlink: 24 bytes leftover after parsing attributes in process `syz.1.726'. [ 246.174593][ T8392] netlink: 'syz.4.728': attribute type 39 has an invalid length. [ 246.489921][ T8389] netlink: 10 bytes leftover after parsing attributes in process `syz.4.728'. [ 246.739725][ T8402] openvswitch: netlink: IP tunnel dst address not specified [ 246.803695][ T8407] dummy0: mtu less than device minimum [ 246.989871][ T30] audit: type=1107 audit(1756970601.358:4): pid=8410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ug' [ 247.082541][ T8412] netlink: 48 bytes leftover after parsing attributes in process `syz.4.738'. [ 247.416285][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.742'. [ 247.514953][ T8428] netlink: 24 bytes leftover after parsing attributes in process `syz.0.742'. [ 247.537870][ T8428] netlink: 24 bytes leftover after parsing attributes in process `syz.0.742'. [ 248.413705][ T8448] netlink: 'syz.0.748': attribute type 37 has an invalid length. [ 248.825710][ T8451] netlink: 'syz.0.748': attribute type 21 has an invalid length. [ 248.872236][ T8449] netlink: 'syz.2.750': attribute type 23 has an invalid length. [ 248.883748][ T8451] netlink: 176 bytes leftover after parsing attributes in process `syz.0.748'. [ 248.975999][ T8452] netlink: 'syz.2.750': attribute type 2 has an invalid length. [ 248.984126][ T8452] netlink: 'syz.2.750': attribute type 8 has an invalid length. [ 248.996118][ T8452] netlink: 132 bytes leftover after parsing attributes in process `syz.2.750'. [ 249.322821][ T8457] netlink: 52 bytes leftover after parsing attributes in process `syz.1.751'. [ 249.807854][ T8470] can: request_module (can-proto-5) failed. [ 250.790198][ T8510] netlink: 'syz.4.769': attribute type 23 has an invalid length. [ 251.273916][ T8515] netlink: 'syz.4.769': attribute type 2 has an invalid length. [ 251.281871][ T8515] netlink: 'syz.4.769': attribute type 8 has an invalid length. [ 251.362222][ T8515] netlink: 132 bytes leftover after parsing attributes in process `syz.4.769'. [ 252.122394][ T8534] netlink: 68 bytes leftover after parsing attributes in process `syz.2.775'. [ 253.945200][ T8547] netlink: 'syz.0.778': attribute type 7 has an invalid length. [ 254.196203][ T8550] FAULT_INJECTION: forcing a failure. [ 254.196203][ T8550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.244308][ T8550] CPU: 1 UID: 0 PID: 8550 Comm: syz.2.779 Not tainted syzkaller #0 PREEMPT(full) [ 254.244336][ T8550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 254.244346][ T8550] Call Trace: [ 254.244353][ T8550] [ 254.244362][ T8550] dump_stack_lvl+0x189/0x250 [ 254.244401][ T8550] ? __pfx____ratelimit+0x10/0x10 [ 254.244449][ T8550] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.244471][ T8550] ? __pfx__printk+0x10/0x10 [ 254.244515][ T8550] should_fail_ex+0x414/0x560 [ 254.244548][ T8550] _copy_from_user+0x2d/0xb0 [ 254.244570][ T8550] __copy_msghdr+0x3c5/0x5b0 [ 254.244597][ T8550] ___sys_sendmsg+0x1a5/0x2a0 [ 254.244620][ T8550] ? __pfx____sys_sendmsg+0x10/0x10 [ 254.244689][ T8550] ? __fget_files+0x2a/0x420 [ 254.244707][ T8550] ? __fget_files+0x3a0/0x420 [ 254.244739][ T8550] __x64_sys_sendmsg+0x19b/0x260 [ 254.244763][ T8550] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 254.244797][ T8550] ? __pfx_ksys_write+0x10/0x10 [ 254.244818][ T8550] ? rcu_is_watching+0x15/0xb0 [ 254.244843][ T8550] ? do_syscall_64+0xbe/0x3b0 [ 254.244875][ T8550] do_syscall_64+0xfa/0x3b0 [ 254.244898][ T8550] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.244921][ T8550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.244940][ T8550] ? clear_bhb_loop+0x60/0xb0 [ 254.244963][ T8550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.244981][ T8550] RIP: 0033:0x7f09ec98ebe9 [ 254.244998][ T8550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.245013][ T8550] RSP: 002b:00007f09ed8ec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.245033][ T8550] RAX: ffffffffffffffda RBX: 00007f09ecbc5fa0 RCX: 00007f09ec98ebe9 [ 254.245046][ T8550] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 254.245057][ T8550] RBP: 00007f09ed8ec090 R08: 0000000000000000 R09: 0000000000000000 [ 254.245068][ T8550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.245079][ T8550] R13: 00007f09ecbc6038 R14: 00007f09ecbc5fa0 R15: 00007fff8fdf2418 [ 254.245115][ T8550] [ 255.544867][ T8566] netlink: 'syz.0.784': attribute type 23 has an invalid length. [ 255.604921][ T8567] netlink: 'syz.0.784': attribute type 2 has an invalid length. [ 255.690062][ T8567] netlink: 'syz.0.784': attribute type 8 has an invalid length. [ 255.794961][ T8567] netlink: 132 bytes leftover after parsing attributes in process `syz.0.784'. [ 255.880426][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.886916][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.984219][ T8594] netlink: 'syz.0.793': attribute type 23 has an invalid length. [ 258.077950][ T8595] netlink: 'syz.0.793': attribute type 2 has an invalid length. [ 258.159290][ T8595] netlink: 'syz.0.793': attribute type 8 has an invalid length. [ 258.217755][ T8595] netlink: 132 bytes leftover after parsing attributes in process `syz.0.793'. [ 258.242173][ T8600] netlink: 56 bytes leftover after parsing attributes in process `syz.1.795'. [ 259.032309][ T8615] netlink: 3 bytes leftover after parsing attributes in process `syz.4.799'. [ 259.081265][ T8616] netlink: 'syz.2.800': attribute type 13 has an invalid length. [ 259.185064][ T8616] netlink: 164 bytes leftover after parsing attributes in process `syz.2.800'. [ 259.471173][ T8624] netlink: 40 bytes leftover after parsing attributes in process `syz.1.802'. [ 259.743408][ T8616] syz_tun: refused to change device tx_queue_len [ 259.948027][ T8629] netlink: 60 bytes leftover after parsing attributes in process `syz.4.804'. [ 259.973081][ T8629] netlink: 60 bytes leftover after parsing attributes in process `syz.4.804'. [ 259.996637][ T8629] netlink: 60 bytes leftover after parsing attributes in process `syz.4.804'. [ 260.014592][ T8629] netlink: 'syz.4.804': attribute type 39 has an invalid length. [ 261.602308][ T8659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.815'. [ 261.616749][ T8659] netlink: 24 bytes leftover after parsing attributes in process `syz.2.815'. [ 262.228933][ T8678] veth1_macvtap: left allmulticast mode [ 262.235390][ T8678] veth1_macvtap: left promiscuous mode [ 262.281609][ T8678] macsec0: left promiscuous mode [ 262.338096][ T8681] veth1_macvtap: entered promiscuous mode [ 262.345660][ T8681] veth1_macvtap: entered allmulticast mode [ 262.362897][ T8681] macsec0: entered promiscuous mode [ 264.500016][ T8721] __nla_validate_parse: 5 callbacks suppressed [ 264.500044][ T8721] netlink: 68 bytes leftover after parsing attributes in process `syz.4.833'. [ 265.000636][ T8732] netlink: 830 bytes leftover after parsing attributes in process `syz.3.838'. [ 265.178457][ T8737] netlink: 'syz.4.839': attribute type 10 has an invalid length. [ 265.385473][ T8732] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.838'. [ 272.191373][ T8761] FAULT_INJECTION: forcing a failure. [ 272.191373][ T8761] name failslab, interval 1, probability 0, space 0, times 0 [ 272.256800][ T8761] CPU: 1 UID: 0 PID: 8761 Comm: syz.0.844 Not tainted syzkaller #0 PREEMPT(full) [ 272.256829][ T8761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 272.256840][ T8761] Call Trace: [ 272.256848][ T8761] [ 272.256858][ T8761] dump_stack_lvl+0x189/0x250 [ 272.256887][ T8761] ? __pfx____ratelimit+0x10/0x10 [ 272.256915][ T8761] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.256946][ T8761] ? __pfx__printk+0x10/0x10 [ 272.256979][ T8761] ? __pfx___might_resched+0x10/0x10 [ 272.257004][ T8761] should_fail_ex+0x414/0x560 [ 272.257034][ T8761] should_failslab+0xa8/0x100 [ 272.257064][ T8761] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 272.257090][ T8761] ? __alloc_skb+0x112/0x2d0 [ 272.257124][ T8761] __alloc_skb+0x112/0x2d0 [ 272.257156][ T8761] netlink_sendmsg+0x5c6/0xb30 [ 272.257195][ T8761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.257226][ T8761] ? aa_sock_msg_perm+0xf1/0x1d0 [ 272.257246][ T8761] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 272.257266][ T8761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.257295][ T8761] __sock_sendmsg+0x21c/0x270 [ 272.257322][ T8761] ____sys_sendmsg+0x505/0x830 [ 272.257349][ T8761] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.257379][ T8761] ? import_iovec+0x74/0xa0 [ 272.257406][ T8761] ___sys_sendmsg+0x21f/0x2a0 [ 272.257427][ T8761] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.257490][ T8761] ? __fget_files+0x2a/0x420 [ 272.257506][ T8761] ? __fget_files+0x3a0/0x420 [ 272.257535][ T8761] __x64_sys_sendmsg+0x19b/0x260 [ 272.257553][ T8761] ? clockevents_program_event+0x24d/0x360 [ 272.257581][ T8761] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 272.257622][ T8761] ? do_syscall_64+0xbe/0x3b0 [ 272.257653][ T8761] do_syscall_64+0xfa/0x3b0 [ 272.257681][ T8761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.257698][ T8761] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 272.257716][ T8761] ? clear_bhb_loop+0x60/0xb0 [ 272.257739][ T8761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.257757][ T8761] RIP: 0033:0x7f041598ebe9 [ 272.257775][ T8761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.257790][ T8761] RSP: 002b:00007f04167ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.257811][ T8761] RAX: ffffffffffffffda RBX: 00007f0415bc6090 RCX: 00007f041598ebe9 [ 272.257825][ T8761] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 272.257836][ T8761] RBP: 00007f04167ee090 R08: 0000000000000000 R09: 0000000000000000 [ 272.257847][ T8761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.257858][ T8761] R13: 00007f0415bc6128 R14: 00007f0415bc6090 R15: 00007ffcecc49658 [ 272.257891][ T8761] [ 272.579677][ T8763] netlink: 'syz.3.845': attribute type 23 has an invalid length. [ 272.657437][ T8764] netlink: 'syz.3.845': attribute type 2 has an invalid length. [ 272.665935][ T8764] netlink: 'syz.3.845': attribute type 8 has an invalid length. [ 272.709145][ T8764] netlink: 132 bytes leftover after parsing attributes in process `syz.3.845'. [ 273.257136][ T8775] netlink: 'syz.3.849': attribute type 10 has an invalid length. [ 273.277889][ T8775] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.376540][ T8775] bond0: (slave team0): Enslaving as an active interface with an up link [ 274.431897][ T8788] openvswitch: netlink: IP tunnel dst address not specified [ 274.524537][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.856'. [ 274.566769][ T8792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.856'. [ 274.606195][ T8792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.856'. [ 275.135337][ T8801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.337566][ T8815] netlink: 88 bytes leftover after parsing attributes in process `syz.4.864'. [ 276.498570][ T8819] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.866'. [ 276.940475][ T8827] netlink: 10 bytes leftover after parsing attributes in process `syz.4.864'. [ 277.304422][ T8834] netlink: 'syz.3.869': attribute type 1 has an invalid length. [ 277.551578][ T8841] netlink: 'syz.4.872': attribute type 23 has an invalid length. [ 277.644475][ T8844] netlink: 'syz.4.872': attribute type 2 has an invalid length. [ 277.652844][ T8844] netlink: 'syz.4.872': attribute type 8 has an invalid length. [ 277.662853][ T8844] netlink: 132 bytes leftover after parsing attributes in process `syz.4.872'. [ 277.690914][ T8845] netlink: 'syz.1.873': attribute type 10 has an invalid length. [ 277.698877][ T8845] netlink: 40 bytes leftover after parsing attributes in process `syz.1.873'. [ 277.709875][ T8845] dummy0: entered promiscuous mode [ 277.715041][ T8845] dummy0: entered allmulticast mode [ 277.723836][ T8845] bridge0: port 3(dummy0) entered blocking state [ 277.745725][ T8845] bridge0: port 3(dummy0) entered disabled state [ 278.343151][ T8860] netlink: 'syz.0.879': attribute type 10 has an invalid length. [ 279.453818][ T8880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.883'. [ 279.555232][ T8875] netlink: 1112 bytes leftover after parsing attributes in process `syz.4.883'. [ 279.677995][ T8885] netlink: 'syz.3.885': attribute type 1 has an invalid length. [ 280.562378][ T8888] netlink: 32 bytes leftover after parsing attributes in process `syz.0.886'. [ 280.752307][ T8893] netlink: 'syz.1.887': attribute type 23 has an invalid length. [ 280.825343][ T8894] netlink: 'syz.1.887': attribute type 2 has an invalid length. [ 280.846023][ T8894] netlink: 'syz.1.887': attribute type 8 has an invalid length. [ 280.912486][ T8896] netlink: 'syz.0.888': attribute type 39 has an invalid length. [ 280.915769][ T8894] netlink: 132 bytes leftover after parsing attributes in process `syz.1.887'. [ 286.465312][ T8925] netlink: 'syz.4.897': attribute type 1 has an invalid length. [ 286.880039][ T8930] netlink: 'syz.3.898': attribute type 4 has an invalid length. [ 287.271898][ T8946] netlink: 'syz.4.902': attribute type 1 has an invalid length. [ 288.634361][ T8964] netlink: 48 bytes leftover after parsing attributes in process `syz.0.909'. [ 289.180915][ T8977] netlink: 40 bytes leftover after parsing attributes in process `syz.0.913'. [ 289.285797][ T8977] netlink: 40 bytes leftover after parsing attributes in process `syz.0.913'. [ 289.396931][ T8980] netlink: 40 bytes leftover after parsing attributes in process `syz.0.913'. [ 289.673481][ T8994] netlink: 68 bytes leftover after parsing attributes in process `syz.3.918'. [ 289.781226][ T5871] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 289.797291][ T7273] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.838618][ T5871] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 289.847995][ T5871] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 289.900319][ T8997] netlink: 164 bytes leftover after parsing attributes in process `syz.1.917'. [ 289.958317][ T9000] netlink: 164 bytes leftover after parsing attributes in process `syz.1.917'. [ 289.972053][ T5871] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 289.984892][ T5871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 290.177252][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.920'. [ 290.208601][ T9007] openvswitch: netlink: Unknown nsh attribute 0 [ 290.214958][ T9007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.692856][ T7273] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.397642][ T9022] netlink: 340 bytes leftover after parsing attributes in process `syz.1.925'. [ 291.420157][ T7273] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.607087][ T7273] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.651421][ T9032] netlink: 'syz.4.930': attribute type 10 has an invalid length. [ 291.763089][ T9040] netlink: 'syz.3.932': attribute type 1 has an invalid length. [ 291.930258][ T9046] FAULT_INJECTION: forcing a failure. [ 291.930258][ T9046] name failslab, interval 1, probability 0, space 0, times 0 [ 291.977382][ T9046] CPU: 0 UID: 0 PID: 9046 Comm: syz.0.933 Not tainted syzkaller #0 PREEMPT(full) [ 291.977410][ T9046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 291.977422][ T9046] Call Trace: [ 291.977430][ T9046] [ 291.977438][ T9046] dump_stack_lvl+0x189/0x250 [ 291.977467][ T9046] ? __pfx____ratelimit+0x10/0x10 [ 291.977493][ T9046] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.977516][ T9046] ? __pfx__printk+0x10/0x10 [ 291.977561][ T9046] should_fail_ex+0x414/0x560 [ 291.977593][ T9046] should_failslab+0xa8/0x100 [ 291.977622][ T9046] __kmalloc_cache_noprof+0x70/0x3d0 [ 291.977649][ T9046] ? sctp_add_bind_addr+0x8c/0x370 [ 291.977679][ T9046] sctp_add_bind_addr+0x8c/0x370 [ 291.977710][ T9046] sctp_copy_local_addr_list+0x30b/0x4e0 [ 291.977739][ T9046] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 291.977763][ T9046] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 291.977794][ T9046] ? sctp_v4_is_any+0x35/0x60 [ 291.977817][ T9046] ? sctp_copy_one_addr+0x93/0x360 [ 291.977847][ T9046] sctp_bind_addr_copy+0xb3/0x3c0 [ 291.977873][ T9046] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 291.977900][ T9046] sctp_connect_new_asoc+0x2e0/0x690 [ 291.977923][ T9046] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 291.977939][ T9046] ? __local_bh_enable_ip+0x12d/0x1c0 [ 291.977968][ T9046] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 291.977999][ T9046] ? security_sctp_bind_connect+0x7e/0x2e0 [ 291.978028][ T9046] sctp_sendmsg+0x155c/0x2810 [ 291.978073][ T9046] ? __pfx_sctp_sendmsg+0x10/0x10 [ 291.978107][ T9046] ? aa_sk_perm+0x81e/0x950 [ 291.978141][ T9046] ? __pfx_aa_sk_perm+0x10/0x10 [ 291.978174][ T9046] ? sock_rps_record_flow+0x19/0x410 [ 291.978202][ T9046] ? inet_sendmsg+0x2f4/0x370 [ 291.978230][ T9046] __sock_sendmsg+0x19c/0x270 [ 291.978260][ T9046] ____sys_sendmsg+0x505/0x830 [ 291.978288][ T9046] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.978321][ T9046] ? import_iovec+0x74/0xa0 [ 291.978348][ T9046] ___sys_sendmsg+0x21f/0x2a0 [ 291.978371][ T9046] ? __pfx____sys_sendmsg+0x10/0x10 [ 291.978455][ T9046] ? __fget_files+0x2a/0x420 [ 291.978471][ T9046] ? __fget_files+0x3a0/0x420 [ 291.978511][ T9046] __x64_sys_sendmsg+0x19b/0x260 [ 291.978536][ T9046] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 291.978569][ T9046] ? __pfx_ksys_write+0x10/0x10 [ 291.978600][ T9046] ? rcu_is_watching+0x15/0xb0 [ 291.978626][ T9046] ? do_syscall_64+0xbe/0x3b0 [ 291.978658][ T9046] do_syscall_64+0xfa/0x3b0 [ 291.978682][ T9046] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.978705][ T9046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.978723][ T9046] ? clear_bhb_loop+0x60/0xb0 [ 291.978745][ T9046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.978763][ T9046] RIP: 0033:0x7f041598ebe9 [ 291.978782][ T9046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.978797][ T9046] RSP: 002b:00007f041680f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.978818][ T9046] RAX: ffffffffffffffda RBX: 00007f0415bc5fa0 RCX: 00007f041598ebe9 [ 291.978831][ T9046] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000003 [ 291.978843][ T9046] RBP: 00007f041680f090 R08: 0000000000000000 R09: 0000000000000000 [ 291.978854][ T9046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 291.978865][ T9046] R13: 00007f0415bc6038 R14: 00007f0415bc5fa0 R15: 00007ffcecc49658 [ 291.978900][ T9046] [ 292.367319][ T8991] chnl_net:caif_netlink_parms(): no params data found [ 292.394199][ T5182] Bluetooth: hci3: command tx timeout [ 292.583777][ T7273] bridge_slave_1: left allmulticast mode [ 292.591170][ T7273] bridge_slave_1: left promiscuous mode [ 292.597561][ T7273] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.662202][ T7273] bridge_slave_0: left allmulticast mode [ 292.669306][ T7273] bridge_slave_0: left promiscuous mode [ 292.675987][ T7273] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.658844][ T9077] netlink: 'syz.4.945': attribute type 23 has an invalid length. [ 293.774969][ T9078] netlink: 'syz.4.945': attribute type 2 has an invalid length. [ 293.817356][ T9072] netlink: zone id is out of range [ 293.825543][ T9072] netlink: zone id is out of range [ 293.840521][ T9078] netlink: 'syz.4.945': attribute type 8 has an invalid length. [ 293.840547][ T9078] netlink: 132 bytes leftover after parsing attributes in process `syz.4.945'. [ 294.160777][ T9072] netlink: set zone limit has 4 unknown bytes [ 294.294400][ T9091] FAULT_INJECTION: forcing a failure. [ 294.294400][ T9091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.309570][ T9091] CPU: 0 UID: 0 PID: 9091 Comm: syz.3.949 Not tainted syzkaller #0 PREEMPT(full) [ 294.309596][ T9091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 294.309606][ T9091] Call Trace: [ 294.309613][ T9091] [ 294.309621][ T9091] dump_stack_lvl+0x189/0x250 [ 294.309648][ T9091] ? __pfx____ratelimit+0x10/0x10 [ 294.309673][ T9091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.309694][ T9091] ? __pfx__printk+0x10/0x10 [ 294.309720][ T9091] ? __might_fault+0xb0/0x130 [ 294.309771][ T9091] should_fail_ex+0x414/0x560 [ 294.309799][ T9091] _copy_from_iter+0x1db/0x16f0 [ 294.309823][ T9091] ? rcu_is_watching+0x15/0xb0 [ 294.309843][ T9091] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 294.309869][ T9091] ? __pfx__copy_from_iter+0x10/0x10 [ 294.309891][ T9091] ? __build_skb_around+0x257/0x3e0 [ 294.309921][ T9091] ? tipc_msg_build+0x400/0xcf0 [ 294.309953][ T9091] tipc_msg_build+0x458/0xcf0 [ 294.309984][ T9091] ? __lock_acquire+0xab9/0xd20 [ 294.310008][ T9091] ? tipc_node_find+0xb3/0x480 [ 294.310031][ T9091] ? __pfx_tipc_msg_build+0x10/0x10 [ 294.310077][ T9091] __tipc_sendmsg+0x1715/0x2960 [ 294.310098][ T9091] ? look_up_lock_class+0x74/0x170 [ 294.310135][ T9091] ? __lock_acquire+0xab9/0xd20 [ 294.310165][ T9091] ? __pfx___tipc_sendmsg+0x10/0x10 [ 294.310189][ T9091] ? process_measurement+0x3d8/0x1a40 [ 294.310209][ T9091] ? ima_match_policy+0x10b/0x2150 [ 294.310241][ T9091] ? process_measurement+0x72d/0x1a40 [ 294.310266][ T9091] ? up_write+0x1c4/0x420 [ 294.310294][ T9091] ? process_measurement+0x1640/0x1a40 [ 294.310346][ T9091] ? aa_label_sk_perm+0x4cd/0x630 [ 294.310376][ T9091] ? __pfx_woken_wake_function+0x10/0x10 [ 294.310405][ T9091] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 294.310440][ T9091] __tipc_sendstream+0x1041/0x1290 [ 294.310469][ T9091] ? look_up_lock_class+0x74/0x170 [ 294.310505][ T9091] ? perf_trace_preemptirq_template+0xa3/0x340 [ 294.310534][ T9091] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 294.310573][ T9091] ? __pfx___tipc_sendstream+0x10/0x10 [ 294.310598][ T9091] ? __local_bh_enable_ip+0x12d/0x1c0 [ 294.310614][ T9091] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 294.310642][ T9091] tipc_sendstream+0x55/0x70 [ 294.310662][ T9091] ? __pfx_tipc_sendstream+0x10/0x10 [ 294.310681][ T9091] __sock_sendmsg+0x21c/0x270 [ 294.310707][ T9091] ____sys_sendmsg+0x505/0x830 [ 294.310742][ T9091] ? __pfx_____sys_sendmsg+0x10/0x10 [ 294.310774][ T9091] ? import_iovec+0x74/0xa0 [ 294.310800][ T9091] ___sys_sendmsg+0x21f/0x2a0 [ 294.310823][ T9091] ? __pfx____sys_sendmsg+0x10/0x10 [ 294.310889][ T9091] ? __fget_files+0x2a/0x420 [ 294.310906][ T9091] ? __fget_files+0x3a0/0x420 [ 294.310936][ T9091] __x64_sys_sendmsg+0x19b/0x260 [ 294.310960][ T9091] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 294.310990][ T9091] ? __pfx_ksys_write+0x10/0x10 [ 294.311010][ T9091] ? rcu_is_watching+0x15/0xb0 [ 294.311034][ T9091] ? do_syscall_64+0xbe/0x3b0 [ 294.311062][ T9091] do_syscall_64+0xfa/0x3b0 [ 294.311085][ T9091] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.311106][ T9091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.311124][ T9091] ? clear_bhb_loop+0x60/0xb0 [ 294.311157][ T9091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.311175][ T9091] RIP: 0033:0x7f1697f8ebe9 [ 294.311193][ T9091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.311207][ T9091] RSP: 002b:00007f1698ea2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.311228][ T9091] RAX: ffffffffffffffda RBX: 00007f16981c5fa0 RCX: 00007f1697f8ebe9 [ 294.311241][ T9091] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 294.311253][ T9091] RBP: 00007f1698ea2090 R08: 0000000000000000 R09: 0000000000000000 [ 294.311264][ T9091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.311274][ T9091] R13: 00007f16981c6038 R14: 00007f16981c5fa0 R15: 00007fff1b884208 [ 294.311308][ T9091] [ 294.426837][ T5182] Bluetooth: hci3: command tx timeout [ 294.859508][ T7273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.872597][ T7273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.883616][ T7273] bond0 (unregistering): Released all slaves [ 295.579535][ T9114] netlink: 830 bytes leftover after parsing attributes in process `syz.4.955'. [ 295.704132][ T9126] netlink: 'syz.1.958': attribute type 21 has an invalid length. [ 295.968789][ T9135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.960'. [ 296.724594][ T9126] netlink: 132 bytes leftover after parsing attributes in process `syz.1.958'. [ 296.736108][ T8991] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.746860][ T5182] Bluetooth: hci3: command tx timeout [ 296.759690][ T8991] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.777512][ T8991] bridge_slave_0: entered allmulticast mode [ 296.796075][ T8991] bridge_slave_0: entered promiscuous mode [ 296.820529][ T8991] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.838253][ T8991] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.845784][ T8991] bridge_slave_1: entered allmulticast mode [ 296.855536][ T8991] bridge_slave_1: entered promiscuous mode [ 297.115487][ T9152] netlink: 'syz.0.963': attribute type 39 has an invalid length. [ 297.353457][ T8991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.385403][ T9159] netlink: 'syz.3.965': attribute type 10 has an invalid length. [ 297.428064][ T8991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.579927][ T9159] batman_adv: batadv0: Adding interface: netdevsim0 [ 297.631743][ T9159] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.676786][ T9159] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 298.044376][ T9170] ================================================================== [ 298.052521][ T9170] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x677/0xcf0 [ 298.060367][ T9170] Write of size 8 at addr ffff88802713a658 by task syz.0.970/9170 [ 298.068187][ T9170] [ 298.070535][ T9170] CPU: 1 UID: 0 PID: 9170 Comm: syz.0.970 Not tainted syzkaller #0 PREEMPT(full) [ 298.070557][ T9170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 298.070569][ T9170] Call Trace: [ 298.070577][ T9170] [ 298.070584][ T9170] dump_stack_lvl+0x189/0x250 [ 298.070611][ T9170] ? rcu_is_watching+0x15/0xb0 [ 298.070629][ T9170] ? __kasan_check_byte+0x12/0x40 [ 298.070656][ T9170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.070676][ T9170] ? rcu_is_watching+0x15/0xb0 [ 298.070692][ T9170] ? __virt_addr_valid+0x1c8/0x5c0 [ 298.070716][ T9170] ? lock_release+0x4b/0x3e0 [ 298.070746][ T9170] ? __virt_addr_valid+0x1c8/0x5c0 [ 298.070769][ T9170] ? __virt_addr_valid+0x4a5/0x5c0 [ 298.070793][ T9170] print_report+0xca/0x240 [ 298.070812][ T9170] ? __bpf_get_stackid+0x677/0xcf0 [ 298.070839][ T9170] kasan_report+0x118/0x150 [ 298.070866][ T9170] ? __bpf_get_stackid+0x677/0xcf0 [ 298.070895][ T9170] ? __alloc_pages_noprof+0xa/0x30 [ 298.070915][ T9170] __bpf_get_stackid+0x677/0xcf0 [ 298.070960][ T9170] ? bpf_prog_12712c88fd19bd5b+0x2a/0x32 [ 298.070979][ T9170] bpf_get_stackid_raw_tp+0x196/0x210 [ 298.071005][ T9170] bpf_prog_12712c88fd19bd5b+0x2a/0x32 [ 298.071021][ T9170] bpf_trace_run4+0x28b/0x4a0 [ 298.071045][ T9170] ? bpf_trace_run4+0x19c/0x4a0 [ 298.071068][ T9170] ? __pfx_bpf_trace_run4+0x10/0x10 [ 298.071095][ T9170] ? percpu_ref_get_many+0x19/0x140 [ 298.071121][ T9170] ? percpu_ref_get_many+0x19/0x140 [ 298.071151][ T9170] trace_mm_page_alloc+0x129/0x150 [ 298.071172][ T9170] __alloc_frozen_pages_noprof+0x1d6/0x370 [ 298.071194][ T9170] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 298.071215][ T9170] ? __kmalloc_node_noprof+0x293/0x4e0 [ 298.071240][ T9170] ? bpf_map_area_alloc+0x64/0x180 [ 298.071272][ T9170] __alloc_pages_noprof+0xa/0x30 [ 298.071289][ T9170] bpf_ringbuf_alloc+0x93/0x590 [ 298.071308][ T9170] ? bpf_map_init_from_attr+0x14a/0x340 [ 298.071336][ T9170] ringbuf_map_alloc+0x1c8/0x2f0 [ 298.071366][ T9170] map_create+0xaa0/0x14d0 [ 298.071392][ T9170] ? security_bpf+0x7e/0x300 [ 298.071419][ T9170] __sys_bpf+0x60f/0x870 [ 298.071443][ T9170] ? __pfx___sys_bpf+0x10/0x10 [ 298.071487][ T9170] __x64_sys_bpf+0x7c/0x90 [ 298.071508][ T9170] do_syscall_64+0xfa/0x3b0 [ 298.071534][ T9170] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.071557][ T9170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.071575][ T9170] ? clear_bhb_loop+0x60/0xb0 [ 298.071597][ T9170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.071615][ T9170] RIP: 0033:0x7f041598ebe9 [ 298.071632][ T9170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.071647][ T9170] RSP: 002b:00007f041680f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 298.071668][ T9170] RAX: ffffffffffffffda RBX: 00007f0415bc5fa0 RCX: 00007f041598ebe9 [ 298.071681][ T9170] RDX: 0000000000000048 RSI: 00002000000007c0 RDI: 0000000000000000 [ 298.071692][ T9170] RBP: 00007f0415a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 298.071704][ T9170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.071715][ T9170] R13: 00007f0415bc6038 R14: 00007f0415bc5fa0 R15: 00007ffcecc49658 [ 298.071740][ T9170] [ 298.071747][ T9170] [ 298.387729][ T9170] Allocated by task 9170: [ 298.392074][ T9170] kasan_save_track+0x3e/0x80 [ 298.399555][ T9170] __kasan_kmalloc+0x93/0xb0 [ 298.404163][ T9170] __kmalloc_node_noprof+0x276/0x4e0 [ 298.409456][ T9170] bpf_map_area_alloc+0x64/0x180 [ 298.414490][ T9170] prealloc_elems_and_freelist+0x86/0x1d0 [ 298.420384][ T9170] stack_map_alloc+0x33f/0x4c0 [ 298.425161][ T9170] map_create+0xaa0/0x14d0 [ 298.429611][ T9170] __sys_bpf+0x60f/0x870 [ 298.433864][ T9170] __x64_sys_bpf+0x7c/0x90 [ 298.438284][ T9170] do_syscall_64+0xfa/0x3b0 [ 298.442800][ T9170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.448796][ T9170] [ 298.451215][ T9170] The buggy address belongs to the object at ffff88802713a000 [ 298.451215][ T9170] which belongs to the cache kmalloc-cg-2k of size 2048 [ 298.465529][ T9170] The buggy address is located 24 bytes to the right of [ 298.465529][ T9170] allocated 1600-byte region [ffff88802713a000, ffff88802713a640) [ 298.480399][ T9170] [ 298.482732][ T9170] The buggy address belongs to the physical page: [ 298.489145][ T9170] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27138 [ 298.497912][ T9170] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 298.506416][ T9170] memcg:ffff888031ca1301 [ 298.510665][ T9170] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 298.518215][ T9170] page_type: f5(slab) [ 298.522201][ T9170] raw: 00fff00000000040 ffff88801a44b3c0 dead000000000122 0000000000000000 [ 298.530875][ T9170] raw: 0000000000000000 0000000080080008 00000000f5000000 ffff888031ca1301 [ 298.539463][ T9170] head: 00fff00000000040 ffff88801a44b3c0 dead000000000122 0000000000000000 [ 298.548224][ T9170] head: 0000000000000000 0000000080080008 00000000f5000000 ffff888031ca1301 [ 298.557073][ T9170] head: 00fff00000000003 ffffea00009c4e01 00000000ffffffff 00000000ffffffff [ 298.565749][ T9170] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 298.574416][ T9170] page dumped because: kasan: bad access detected [ 298.580861][ T9170] page_owner tracks the page as allocated [ 298.586593][ T9170] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5861, tgid 5861 (syz-executor), ts 297825463091, free_ts 297063912568 [ 298.608147][ T9170] post_alloc_hook+0x240/0x2a0 [ 298.612936][ T9170] get_page_from_freelist+0x21e4/0x22c0 [ 298.618486][ T9170] __alloc_frozen_pages_noprof+0x181/0x370 [ 298.624310][ T9170] alloc_pages_mpol+0x232/0x4a0 [ 298.629283][ T9170] allocate_slab+0x8a/0x370 [ 298.633990][ T9170] ___slab_alloc+0xbeb/0x1410 [ 298.638704][ T9170] __kvmalloc_node_noprof+0x429/0x5f0 [ 298.644117][ T9170] alloc_fdtable+0xfc/0x2c0 [ 298.648766][ T9170] dup_fd+0x86c/0xb60 [ 298.652786][ T9170] copy_files+0xc9/0x120 [ 298.657170][ T9170] copy_process+0x15b2/0x3c00 [ 298.661859][ T9170] kernel_clone+0x21e/0x840 [ 298.666374][ T9170] __x64_sys_clone+0x18b/0x1e0 [ 298.671152][ T9170] do_syscall_64+0xfa/0x3b0 [ 298.675665][ T9170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.681586][ T9170] page last free pid 5864 tgid 5864 stack trace: [ 298.687917][ T9170] __free_frozen_pages+0xbc4/0xd30 [ 298.693214][ T9170] __put_partials+0x156/0x1a0 [ 298.698011][ T9170] put_cpu_partial+0x17c/0x250 [ 298.702784][ T9170] __slab_free+0x2d5/0x3c0 [ 298.707384][ T9170] qlist_free_all+0x97/0x140 [ 298.711980][ T9170] kasan_quarantine_reduce+0x148/0x160 [ 298.717446][ T9170] __kasan_slab_alloc+0x22/0x80 [ 298.722347][ T9170] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 298.727821][ T9170] getname_flags+0xb8/0x540 [ 298.732331][ T9170] user_path_at+0x24/0x60 [ 298.736678][ T9170] __x64_sys_umount+0xee/0x160 [ 298.741483][ T9170] do_syscall_64+0xfa/0x3b0 [ 298.746038][ T9170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.751953][ T9170] [ 298.754285][ T9170] Memory state around the buggy address: [ 298.759914][ T9170] ffff88802713a500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 298.767982][ T9170] ffff88802713a580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 298.776042][ T9170] >ffff88802713a600: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 298.784104][ T9170] ^ [ 298.791038][ T9170] ffff88802713a680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 298.799105][ T9170] ffff88802713a700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 298.807439][ T9170] ================================================================== [ 298.866708][ T5182] Bluetooth: hci3: command tx timeout [ 298.890795][ T9170] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 298.898065][ T9170] CPU: 1 UID: 0 PID: 9170 Comm: syz.0.970 Not tainted syzkaller #0 PREEMPT(full) [ 298.907284][ T9170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 298.917355][ T9170] Call Trace: [ 298.920669][ T9170] [ 298.923667][ T9170] dump_stack_lvl+0x99/0x250 [ 298.928321][ T9170] ? __asan_memcpy+0x40/0x70 [ 298.932952][ T9170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.938190][ T9170] ? __pfx__printk+0x10/0x10 [ 298.942841][ T9170] vpanic+0x281/0x750 [ 298.946862][ T9170] ? __pfx_vpanic+0x10/0x10 [ 298.951443][ T9170] ? irqentry_exit+0x74/0x90 [ 298.956062][ T9170] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.961326][ T9170] panic+0xb9/0xc0 [ 298.965071][ T9170] ? __pfx_panic+0x10/0x10 [ 298.969533][ T9170] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 298.975486][ T9170] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 298.981861][ T9170] ? __bpf_get_stackid+0x677/0xcf0 [ 298.987008][ T9170] check_panic_on_warn+0x89/0xb0 [ 298.991979][ T9170] ? __bpf_get_stackid+0x677/0xcf0 [ 298.997135][ T9170] end_report+0x78/0x160 [ 299.001409][ T9170] kasan_report+0x129/0x150 [ 299.005950][ T9170] ? __bpf_get_stackid+0x677/0xcf0 [ 299.011113][ T9170] ? __alloc_pages_noprof+0xa/0x30 [ 299.016249][ T9170] __bpf_get_stackid+0x677/0xcf0 [ 299.021239][ T9170] ? bpf_prog_12712c88fd19bd5b+0x2a/0x32 [ 299.026905][ T9170] bpf_get_stackid_raw_tp+0x196/0x210 [ 299.032424][ T9170] bpf_prog_12712c88fd19bd5b+0x2a/0x32 [ 299.037915][ T9170] bpf_trace_run4+0x28b/0x4a0 [ 299.042710][ T9170] ? bpf_trace_run4+0x19c/0x4a0 [ 299.047598][ T9170] ? __pfx_bpf_trace_run4+0x10/0x10 [ 299.052842][ T9170] ? percpu_ref_get_many+0x19/0x140 [ 299.058070][ T9170] ? percpu_ref_get_many+0x19/0x140 [ 299.063307][ T9170] trace_mm_page_alloc+0x129/0x150 [ 299.068442][ T9170] __alloc_frozen_pages_noprof+0x1d6/0x370 [ 299.074274][ T9170] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 299.080712][ T9170] ? __kmalloc_node_noprof+0x293/0x4e0 [ 299.086203][ T9170] ? bpf_map_area_alloc+0x64/0x180 [ 299.091361][ T9170] __alloc_pages_noprof+0xa/0x30 [ 299.096321][ T9170] bpf_ringbuf_alloc+0x93/0x590 [ 299.101193][ T9170] ? bpf_map_init_from_attr+0x14a/0x340 [ 299.106777][ T9170] ringbuf_map_alloc+0x1c8/0x2f0 [ 299.111770][ T9170] map_create+0xaa0/0x14d0 [ 299.116216][ T9170] ? security_bpf+0x7e/0x300 [ 299.120833][ T9170] __sys_bpf+0x60f/0x870 [ 299.125104][ T9170] ? __pfx___sys_bpf+0x10/0x10 [ 299.130040][ T9170] __x64_sys_bpf+0x7c/0x90 [ 299.134481][ T9170] do_syscall_64+0xfa/0x3b0 [ 299.139015][ T9170] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.144242][ T9170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.150422][ T9170] ? clear_bhb_loop+0x60/0xb0 [ 299.155131][ T9170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.161053][ T9170] RIP: 0033:0x7f041598ebe9 [ 299.165486][ T9170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.185110][ T9170] RSP: 002b:00007f041680f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 299.193550][ T9170] RAX: ffffffffffffffda RBX: 00007f0415bc5fa0 RCX: 00007f041598ebe9 [ 299.201560][ T9170] RDX: 0000000000000048 RSI: 00002000000007c0 RDI: 0000000000000000 [ 299.209556][ T9170] RBP: 00007f0415a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 299.217551][ T9170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.225546][ T9170] R13: 00007f0415bc6038 R14: 00007f0415bc5fa0 R15: 00007ffcecc49658 [ 299.233573][ T9170] [ 299.236978][ T9170] Kernel Offset: disabled [ 299.241331][ T9170] Rebooting in 86400 seconds..