last executing test programs: 2m59.674564197s ago: executing program 1 (id=1759): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@o_path={&(0x7f0000000580)='.\x00', 0x0, 0x18}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x200}}, @float={0x10, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x0, 0x0, 0x0, 0x5f, 0x0]}}, &(0x7f0000000a80)=""/217, 0x43, 0xd9, 0x0, 0x100, 0x10000}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c40)=0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x17, &(0x7f0000000200)=r2, 0x21) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r4, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x5, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="0800715df964cff6787b00ff0712956d1c16f1963bfd3e259b000000004c46cc"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r5}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, 0x0, 0x40000) socket$kcm(0x2b, 0x1, 0x0) r6 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) recvmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0) sendmsg$kcm(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="ff", 0x25}], 0x1, &(0x7f00000015c0)=ANY=[], 0x11f0}, 0x10008014) 2m58.057944504s ago: executing program 1 (id=1767): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r7}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8936, &(0x7f0000000000)={r7}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = perf_event_open(&(0x7f0000000e80)={0x4, 0x80, 0x3, 0x9, 0x40, 0x7, 0x0, 0x4, 0x840, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f00000002c0)}, 0x308c, 0x6, 0x7, 0x8, 0x80000001, 0x9, 0xa6, 0x0, 0x1, 0x0, 0x2}, 0x0, 0x7, r0, 0x1) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000300)={r8}) ioctl$PERF_EVENT_IOC_REFRESH(r9, 0x2402, 0x200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001080)={r1, 0x0, 0x36, 0x1000, &(0x7f0000000f00)="87bc95a62fae4630e3a79c124b451a74875bc1aa0f5b76eeae4299c011faf53a56afb9000a014f93aea54223eb04731077335892c088", &(0x7f0000001980)=""/4096, 0x7ff, 0x0, 0x19, 0xd3, &(0x7f0000000f40)="a2d49fdc4e59f29792e8077bddcae4ef509d6e273945a4944e", &(0x7f0000000f80)="a023af6e3f3857a9be4c8aa5b4d88d799535b46a3b67481957a57c8b1e0d87659da4b23fb2208e3d683df4e5476cd5ba4e9c9689ea3ea98e2ec2fb38762d392fa513ee7b1ae847ad4ce03d689cb89c1c5c3f11c2d89b18b085a03e2da4694f52bb6d36b0d566c97dbfba94de39292e9ac2528d8e8744bf7f59acd0e7097eddaa54cb37fc385a57b209e9281ca9e838a26d5f353b38d7c2f8ae950051740e072bd177c95ab6b846a9d79e5e488159ee888f37ac994b3b7f4c38edc53ec434b425f0a2ed146685d8322bf79e0fa796227576afd2", 0x2, 0x0, 0x165}, 0x50) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c00168008000f00884777"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r9}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f065581bff88fbffff4000632f77fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000200)}, 0x50) 2m57.291928074s ago: executing program 1 (id=1773): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r2, 0xc040ff0b, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40880) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x0]}}, 0x0, 0x1c}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0xf, 0xb, 0x2) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xf, &(0x7f0000000080)=[{&(0x7f00000000c0)="0207070002000000e4a17c45c8d260c90ec56959a440278950ff8cdca342f51686908ea4fe07dee035abee82755979fbd7991b71517d20096811c5a663a947eaf378bf56aaccdde0d91d2fa08aba131d91a15f81bfd1e961e534a605e9196747aaf27c0ec3994018ec333b40070beae950827d3efce8a34af6c67c60ee83b76c1132f55a7ccf7843a9a1de5284a60a57f66fa52701bccb915def033b664bc63242c782ecc7", 0x33fe0}], 0x1}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x73) socket$kcm(0xa, 0x2, 0x88) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0xc0b, 0x0, 0x0, {0x2, 0x0, 0xf}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x48090}, 0x0) sendmsg$kcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000b00)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c0050014260360ab1208000f0000000401a80016001100014003000300036010faccfdeb1d40696d936980b925b35381df6486338260de280e900094007134cf6ee08000a0e408e858ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4", 0xda}], 0x1}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000200)={'bond_slave_1\x00'}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000440)={r5, r2}, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000000406010300000000000000000100000905000100070000000900020073797a31000000000500010007000000050001000700000005000100070000000900020073797232000000000900020073797a31000000000900020073797a30000000000900020073797a3100000000189f7b708cc420e4af8af43800880de05cb0ff855a01a89da7fab059babde66006c446d6bdcd0d18766e298c5ae2c816bb828f80da3a76cfed5a8161d72f0d"], 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x10000044) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="5c00000015006f02c84e21100af32c6e0a0675f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d78ae3d694ab2beac49", 0x5c}, {&(0x7f00000000c0)="90c3ff2d8ad8555c941c9f3f476058d57616022d75e2a87b3195142be7a50683bd0de23c4e66b736158b81837ba85bf60a59b09dcb66e339cedd564d8bedf7c78d6e92a085dd806c429f35e51db89fe8ebce1c703bc258b6b336ea24d249", 0x5e}, {&(0x7f0000000200)="35af0d472bdd3f23427020a065bbbed5e584e65acd8571aaac3e28d4634f7171c6e3e0bfd32223c1b925c4b16b25204b30d1237c16a44da545f1ff186f92309ae0f93369225c3a0dc8c0a6808afcd1ea9b081d07", 0x54}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x2, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 2m57.062857385s ago: executing program 1 (id=1777): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@o_path={&(0x7f0000000580)='.\x00', 0x0, 0x18}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x200}}, @float={0x10, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x0, 0x0, 0x0, 0x5f, 0x0]}}, &(0x7f0000000a80)=""/217, 0x43, 0xd9, 0x0, 0x100, 0x10000}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c40)=0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x17, &(0x7f0000000200)=r2, 0x21) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r4, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x5, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="0800715df964cff6787b00ff0712956d1c16f1963bfd3e259b000000004c46cc"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r5}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, 0x0, 0x40000) socket$kcm(0x2b, 0x1, 0x0) r6 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) recvmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0) sendmsg$kcm(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="ff", 0x25}], 0x1, &(0x7f00000015c0)=ANY=[], 0x11f0}, 0x10008014) 2m55.655808408s ago: executing program 1 (id=1783): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0xfd) 2m55.655273882s ago: executing program 1 (id=1784): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a00", 0x3c}], 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000440), 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a"], 0xfdef) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000840)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2d, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) socket$kcm(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m40.621778391s ago: executing program 32 (id=1784): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a00", 0x3c}], 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000440), 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a"], 0xfdef) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000840)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2d, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) socket$kcm(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 13.988132384s ago: executing program 2 (id=3047): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c9", 0x13}], 0x1}, 0x0) 13.985965849s ago: executing program 2 (id=3048): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x3}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x4, &(0x7f0000000000), 0x4) 13.923552151s ago: executing program 2 (id=3050): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x48050) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xf}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) close(0x3) 13.799489218s ago: executing program 2 (id=3052): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 11.499560579s ago: executing program 2 (id=3062): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc010000000000000000000000000000ac1414aa00000000000000000000000000000000000002090200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe"], 0xec}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x0, 0x0, 0x2, 0x0, 0xb, 0x6}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0xd}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) 11.098883281s ago: executing program 2 (id=3065): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x831d}, 0x104000, 0x2, 0xfffffffe, 0x6, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x12101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac64837e8fc8a504, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x5, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x1, 0xffffffffffffffff, 0x8) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0xfffffffd, 0xe}, {0x10000002, 0x0, 0x4, 0x2}]}, 0x94) close(0x3) r2 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) close(r0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.602248945s ago: executing program 5 (id=3097): r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x20}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) syz_clone(0x40000500, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x9, 0x5, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x7, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x2, 0xffffffffffffffff, 0x2) 4.222446361s ago: executing program 4 (id=3100): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711210000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, 0x0) socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000080100000000000000400"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x5}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, r2, 0x2f, 0x0, @void}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x14, &(0x7f0000000580)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f0000000640)='syzkaller\x00', 0x8, 0xcc, &(0x7f0000000700)=""/204, 0x41100, 0x78, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000680)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000800)={0x2, 0x0, 0x7, 0x7fffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r0, r0, r0, r0], &(0x7f0000000880), 0x10, 0xa}, 0x94) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r3, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r3, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) close(0xffffffffffffffff) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb7s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0R\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB\x01\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\tb\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18\x00\b\x00\x00Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @exit, @alu={0x5, 0x1, 0x4, 0xa, 0xa}]}, 0x0, 0x4}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) (fail_nth: 2) 4.105441875s ago: executing program 0 (id=3101): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0xcf59f199ae5be757, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000100)}, 0x20) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003fffe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x602f, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 3.483941712s ago: executing program 0 (id=3103): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x7, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2e2c}}, 0x0, 0x40, 0xef, &(0x7f0000000a40)=""/239, 0x41100, 0x41, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x2, 0x10, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffff9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r4, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000000)=ANY=[], &(0x7f00000007c0)=""/127, 0x43, 0x7f, 0x1, 0x80000001}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x7, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x5, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xfffffff7}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xd}]}, &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000880)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0x3, 0x0, 0x3}, 0x10}, 0x94) openat$cgroup_int(r4, &(0x7f0000000280)='memory.max\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)}, {&(0x7f0000000200)}], 0x2}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x10, 0x2, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x2000000000000049, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xc0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000080)) close(r0) 3.110136577s ago: executing program 4 (id=3105): bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x105050, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x3, 0xd, 0x3}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0x94) r1 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000380)='f2fs_get_victim\x00', r0, 0x0, 0xc}, 0x18) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000820009000000000000000100000d040000000700000002000000000000000000000200000000000000000000002e002aff113e79db603bd742a2b401eaccb42dfce3a0ae240056d5b86ce4a62b1cb9cf60b1fe65a81b0082e21c29ded5d00674bbca045bf9d09a626031c06c4b25cc59004a1232e874228fb4000000557f338736949fdc8033e3d4567f6ed52ad1f655182cb0f4df375f579ad92d553dd31f34be1d86f2b65d5889dac9df499f5c8f33cf2d14"], 0x0, 0x41}, 0x28) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0400000004000000040000000200010000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x50) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1a000}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="c3aa0016010000007110ee026f835e23b001ed417dd96fa5970000003a37eb51fc009b665c67"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1c0000005e007f62516a071c02f8abc36f1d73dbe1ce84ebc7c4c1c9", 0x1c}], 0x1}, 0x0) recvmsg(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000700000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801a9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x5, 0x2}, 0x1000, 0x4, 0x0, 0x9, 0x0, 0xfffffffc, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000500)="d8000000180081064e81f789db4cb904021d080006007c09e8ee55a10a0015000400142603600e1208000f0000000401a8001600200008800000000000000100a0e408e802ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5d9001901df60e1b6649682e1cace81ed0bffece0b42a9ecbee5de6", 0xd5}, {&(0x7f0000000180)="4d61dcd62409b5f7b311d62048e1d629db9480d88eff9fc1ab5058cb5d40ff2410fc06a802554837b2a00bfc983b7cdba303661498aad07fad632fcf3b9efc2eaf6293e7e9f570dd4a111ecd5a4d82edcb6ad98efdbdd21f0969fd2cf8ef1a1d7d8ed9fdcbbcdd012d07ea2b7817a51fd258782ca44f27780415ced828d6dea2a4837ff73849d5f6ff9e69b4d988", 0x8e}, {}], 0x3}, 0x0) 3.067312803s ago: executing program 0 (id=3107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x27, 0xd50, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x2, 0x200, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x1, 0x0, 0x0, 0x100000001, 0x82e0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x3}, 0x2418, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="623bed114d421d8b1c60ea4388a8", 0xe}], 0x1}, 0x20044001) close(0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES8=r3], 0x9a) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x40004) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x3d, 0x107, 0x8000, 0x8, {0x2, 0x7c}, [@nested={0x10, 0x8, 0x0, 0x1, [@typed={0xc, 0x8, 0x0, 0x0, @u64=0x50b}]}]}, 0x24}}, 0xc000) 2.775015464s ago: executing program 0 (id=3108): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000700000095000000000000008f5df2daa18b963b98d33eca868e3a546f628330291c205b2f2c8c26860d5390e463ede3430fda0a22ed589981cd9711fa024f276acfe9e8d0"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r3, 0x25, 0x4, @void}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e1700800000876c1d0000007ea60864160af36514001ac00400020207000200020001000200000000938037a786a6d0001000000e4509c5f05c2f070000000000000088bbcb", 0x52}, {&(0x7f0000000100)="9b25af20af07241a63c3", 0xa}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.513524897s ago: executing program 0 (id=3110): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0xc64f, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xb3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x8000000000001946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x60, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 2.452406841s ago: executing program 4 (id=3111): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x4f, 0x594}}], 0x18}, 0x40000c1) r1 = getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x8, 0x7f, 0xf8, 0x2, 0x0, 0x9, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x819, 0xfff, 0x2, 0x2, 0xff, 0x7, 0xa, 0x0, 0xffffffff, 0x0, 0x2}, r1, 0xf, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x7fff, 0x420, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff1, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x4f}, [@ldst={0x6, 0x0, 0x3}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004700)=""/4098, 0x1002}, {&(0x7f00000018c0)=""/4154, 0x103a}, {&(0x7f0000000140)=""/165, 0xa5}], 0x3}, 0x40000000) r4 = socket$kcm(0x2c, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) setsockopt$sock_attach_bpf(r4, 0x11b, 0x2, &(0x7f0000000040)=r5, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="c20000000002"}) 2.347006062s ago: executing program 0 (id=3113): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x30, 0x0, 0x1000000) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000000)=@in={0x2, 0x4e21, @local}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)="d2321ffd150655300eefcdd32908c2c9b14e63d99638abb7907c56b5c4f1e94b4256fd08862b7a7fa0c3ce347b5cd96c591fff78300b5af59c600fb16bc0a7495f477d407b528803e8b99e248aabe9133c52611dd8edfe8e8f1f3a0a3eebd2e1fe5132669005f19bbb3d401d0cf114a12fcb4f6b0a78b938cdd473e1d096982d99899b958d8c41d852102d7c84a851898c0f6c34b63e0d6aba4a0741ac79b2ac89534bb09b3d071d801d409fd1589e37b9faffedc4491b898d3631c22ed3b7ee0a93d064cb991a8bd91b35ff0de6631670689f091db1a82e3c4330052396cd2d0086ffa95ec7ee816e0d11622f06500e61b8", 0xf2}], 0x1, &(0x7f0000000440)=[{0x1010, 0x84, 0x800, "76e2fb88566d0b2429caa1436ee71aba387afeb16c8f73c21caee25fafa460b688ee73637ab12c0dc0690316cde4b8ee5e587f6abcdc018de8ec3787c5550928d86202185439abcc43f06fd66f6ddf67f6723438be8f5fb49ec7b4249d737f0e352124d5c86249131bb0e6471eafd3bc7ceedbd611c51585cfd525e6a5b8515e2a360218534300788eb3d0ae059072bb80f2c42af738683a77232a2298f8c687f42e8fd8dede0983b239aaa360daff77ac1548a9761988ddcadac674059683c7863ee81503dda9d4edc63b10a832b0bf9165e12bdfc58bfa95eb69a85b72b9f8546d7e6ba4496e9633f74982cd25e0cf5b06cf2bc2af88f587ba65564a0d11eae8ba612a612f193eb728974a4be85be39dca083fabe4822edee2b776869f9f575ea0d4de5e8d7c407b0ea877219e3aef757240e9ee4c93b1f78cd33d8a97d9b72912c57a147cd03f494781e19fe5b8617c934a4c2978cb51d4576d04b7623f1186f3883b8eef9e4f8272f0bde76724ce720eb85c807ff3c56ad074d73069f22aba857407509165d854035182c01212715ea3660d7349df61883f1f91554fefba39c06e17b3fa2021d99cadd50cac3519e911067dd76c6e28bdbc78967542d951a912a64e9b12d5c61de7e7b788a7c64f17f24960ce3baa7e47cf97d2a9d5cc395a26f26d6cb7189b27126f11f9e5fec9648824bc780f03b99e74a4c2347aae341a0ca10c33e02fa635268bbef481c60bead67fab46ebbc506f79566b023af2efb40295a15a37bd9d64ddef9eda9c1008f768bd85878dcac07181323e444e9ec0ee1fd108d86fbaa0c359bbda8e98f891ef0e8f577a7c5eb8fb5e62e7b659c52f43781ca1b9349df41b769adbebd11d788c85a5f4ca01b1bafe65d1a061481dadbce572320dac8db32f6de642bce95850823af030e3521f4ec48c8a16d8c93bebd460bbba461e152252f7158ffe34b6e62c6df92da613afbfe98dc04b488bba6a3a0de7cfe0208089d9a404964649ff553f85e9b814b097a49c43ce8d70da06f185190b9ca3cfb43932187d9d631c914c2c1f51e9a5d5f28fbf5235080abf6cf3f7f461029b8292b5f24917049d34f25a4963b51826bbbdf981fc9b915477494d4ad2eb8388f0bfaa17ab8aff9eb2f98354952d7566e5315388cd854b119494647675d362cff623fdb7ba03ff63251ef9c7be4b93b76164425b28b006e79f83e14c5139f18694ba15e193a9aecf123d62f94cb8c7853c637cd7d3ed207b8b297c186064048147422dc9a6dcf33e9c389220fccf607ea15e854003ab71d995a0816248b404acb4926995466d2afc912bb77e1eade533126fea79bffbcdf13e463ddab4a8871c45623131d94ba8b26d5a2c78f26a684fd3e6eb594e7c34003873badab48c3a497a89eba7edc68ea0834b6594eb267ee582313c7951aad3ec53d6ca0d9a3604e4c6f7cb2b6c2741b43fd85504fe71386e09aa50726bdf8d4676869c6df0b2512afb82dae168b424391bc760409332b9bf326e0779ae7e34d46bec54aa4703992c7f815965f8df7e300f5df9ed9a314b71d2afc2725b7d387a1259390669ca7e74e6079a68e7e6a488aeab6db7ccfc7fdd43e42a8e37feabe8c201f1648fed13ff42dac759c771c8bd8b9420e4d6e6ec914c08b3aefbe52141dc5d27b2f105a7d0394222dffcdd3909d227908ff29f2f800a6d8ec8f72e2384c1c06f309abf661ad1078b60149be79f0fb7d2c380a97389cdff60960379acf0cf1a1612eb247815dd8716584090381e5888f6f4cbe4708d69c84e7832049e58db6e1fc550a66d9cfba583348ee0a908a339033806c7dc189386e059ecb870cd6ea91362ecce5258ef9283f5760125d746cbc62157a8c602c2a01e1eb0f624fe3f0c4d794b30d689736ba120f74ce15165b71873fb31a96f1e0f40ab9a00e93e9d0355ee4e9cccce0488a20b89601a6d6c6da39cbc81f13a31e0889604783b1cd1fcf63fa24f846f9cedfbd619379d5de2455687910454f831966394de12825c52ef0a95b739b5e2b549bf6db2fb49465fd624e5fd84bc09357b9d4b8f02c5d98db374e2c8e426c33b1f4e2171a5fd35c124babbe86245a27d4dde5e4d351673c88bd03327842bbbcbfbc80773f6b74929623b13e24ba3197462c81904b16acebfdaeb3ea9cf91241fd25d94e55d00308493ed3e7235da7f0ce51e422f5cd2e74ee013b7e08de3217ac5b7b9a4956ade279b2206cc551d253fdaecd271ab025e4a00a67aae91f1418bae470be43e96a74aa4a139a0ca1659bab0e5f3caca38342730c5b2a900157066ea3aadd3dcb42917f208535f860bd57855fb0deb17a790f309da934f0dacedbc0cc2f14a28b157e3313c8a725c0eb7dea367aa544d0b084a36f09e8b2b31d37a8afb5b745d4392b94bdda4c703ab889178bb1bebeb755ba098dc8eb07bf8a210cfe48432338b7385fb6a40de48c16aa765ae86201d8ebf37b3884aa9fc62887c44a6a5d016f2a107e96fa719131677c37eaac3ec943893a650142c188a1cdd5b9641c4f63ebb3cf64f6adeded9509b91ad9a54c209e1c2f0f3c388fed94fab86984532dd17fbe19f21a393605417b121db5bbb3351863af93ead0d2b446afaad55332c62aac95ae641f5715f1e1e5b09d9267a10839772166a6af1df0d6711fe3de473d473d2db6d2a68cb7a8618a9f64743276544a923d32b55f422b2dffa68fc4a710f11eeed5cb92a323b160f6e8dda2a72e76f26f16431ab88ba48e5822380c45ef6359e71c062a9eccf349a50e2bb36965b5d9ce0950f392b4194d1af103484457c0558e2c94435980fa1b52a839865e8fd6d4f5c6f7c3a0c9063b85e57a33cc7bdbd7b70058d3b1a4efef5931edfd985b852724491117f26e0cef6ccc083ec5dbf35db986aca3511b1d5935158f9e2d0c7bc1849f06a3133c2049c8bbbe0cf0cfac03ea3e6aaafacea437cccf865f69367f48ac46c6f54cb188b10e2aceae2cfb2ea9aaf9c34519059ce5edf5c756e37decd788935d27f9e41f0433e2d666d0bd810b31b0503a8dd27b98d73f61d8014d0a65b21bc81e249595da8936eae00e7bcd022d1bef531224a3fd81ed454cebb1d116f39ed0334d8c32d579a1cd5e60fb17e167195056a4b52d0a2a03208738e282e6ac6a1851553ece4a5013a1d690a731087b4d39d6299b24c6a4a040c416f5c24964ceba4d785a6bb8e72364589b010afc5338eac06ad699e1a9602bf4d9015c8c5c5a7f62cc74580d16f1d1a3b4de3fbe52c906eb6462a8b5688447c9fd84834917c314658e58daa77a3203d7e1403522f9d445aab107b846e44f16a66ef29887f75576ff558a84ccbf8119f0ac6aa5a9591aedb166ddf2f02d36157aecf63ea7e40ffb1606a1a75abba769e3a65759a0a6ed99fb05d77918cd4ebc8bb3014b9d3a40fc98ba7b67765140b3c4f5d2bcc88fa436015439e700ec96eca693438420a1b0f6c035c67b43a857307813165e76c567ae27593f7e1886074424ff69349f02ddbfff74959b9e1a0dd167c4701fb0ad8f10a508fd9058d9b487d45ce4e1c335adf2892844c9146d2474f7e50814a12f30616d6139cb52a1b4c61b8711f37a029643934c0f64f203e17c61d43c5b43a852751e2fbfce0d0b42b54b096ab80db7a3bca99f7dbfb3a67bcc8c11bdda1175ac067df688643d4fb3c86267c8253af9f197e673b7333e2c6e72d3223aca5f98503928943569de0e9d8ea25c2191c9e26a32d02f73cd6fbc3574eb46d053f82e80b34c3113fadc704b3586e01218de3fad90bd27262141d48b4bbd5b5f0535cba4fbe7576ea32445e7902d0b751b591f46a982c2ecfae53bbb451991c1ed3f2a75060fc5d2bc59497fae23f60fede70a128f981b6843a20b6c7e14e28074664f63184dc1f03e72dd8be5d2b4cee5c1dc759d453aaed8198fc4a4965029f71edf24f104bdcc424b01b27150b9b61f183fff63aef9941f35046f1337069ef36a8352fce85879198ef53468a544672307adc0b3da4cfe0a1e10ad2945e23a73234ae189e644c4445463f73fe381d3f74ee03fe98ec852415b50a40c637372b47873d4c202cd0da8ecae48535be47ec726aa07b2f5acec3280dfe03133809bdff482e9559742d82925e3f3ff626fda296bbb32f631a51bbb751e742326c7254512b2754841b4ef7d1580eb21baaff3e70c9b42944171ec3b62b55fe83c97a11e7473fd081060b5dd282b4136220fc069d13f159b0ca17d2d7800a353547b4fa084d4941d857f948100f0c7f821263e1daeb74bfbd2b939669fb39150dbb5619765761276f17f11afc4b07c6b47d9e45aa8dfc5f536db291fea92323a9477082ce48fee26ccde67bca54c489412903b2e06384352618df417339cc6ac3d256417d086be65ccc7dd46e3d2a871763ad40db8c13d7ab23b0dd8b178d8ff14fb9685167f419d4ab893b4e31026cf937566ecc71ec7780e02220fbcde1aaa37883fb27f792f15d2b56ae93dc3852b4aae389997984f82f514f28bdfa1a080112039eb9f17b1b0fcca09490b28e6e68aeeec603f045a6bcbf8f81d997403ce53f56a437f6cd47b2886ebca3a003402346e396b00eea6cd37842e15895d903c7d0253b89861e251cc209c599dc3363a3376842dd022654144bb90e6558c4c7543803b63e943a33353316c6dbc7743ce5c50d0caa6ac2f9539ee6a06eb800585fd09c713751dd5d5cb098782595a4066209464ff36f70f8642351209b801ca6d769304a17d7940812461cc66e4bf72a950fc0b35f44613f3a06b9ff6d6a8773ed1a021e2ecedc242287e7d48da63fa29a8db1abec515e2e086eec7c8c952235dc62278c1702a0bafc0872ba0f4e136cffe9ebb4760302cf952d0bf7909eafcdb1d85115bd4892225d7b95946efd6e19401f52788cbdf0130794f1b64a9bf354a59fda364d413c65d28d9a1e4bbe1d75fa2c2cc80ed771fca1814c96caa1a417782c03e2dfdfa343e000fbd54098d5cf29c472bcf73db682406d7ec116811e66d0168bb96e0557ab7062428a67740bdf7153777380f2be7e4a54f7ccf130c5f8055fd7f553e93b44ff5ffbb82222cb62795bd63a8428ab8e2873836ff830cbd94d17044e9c3db1494f5e6b6230a7009eb93a4a0b358b965233a6dc85c2a86105e6ec29370ac06bd1572b21b54b75303cf18b5fadab2b2d2f91d518e67eb1cae8ea0b107ff3ea34cafcefe9b6d1511e635fe01508f09b37c7d3dc49e5f3dcb9d73e552b68bce2e95e9b13017934ba26c6305e182da2d11f3d450d5820acfb8c5f68fa87a4df81d6c5bf90d040e74c07ec8cfc0ea6a739b8bd46f4ad95eb2d68c0ee7e2853c0a0c9cf27f730e07303f459c15bb69d5c63d8d2943029b9cf5aa0d6e12d632cae7258c54fe0020e73a4f08615bfdc8faab3ac146bffe41c22a7b0f01ec8f7ae694d397107b9109b6df571e93ee9f687033d550ebd4241544efb2592339f9760c0a34ec75032381d4b2c936e10b659e251c392c595096cd0bbf46f55d7bcf189a070bfcc86496cb74c37e446caf4f9d3a2cdbabf6f3dcc8f6d4bcd8f0c8dfc96fe888889e0294d3e7b22b72cf2305a03ef63e299ed4e108537edf8f5cd902b2ddf85a34a0df0a3b831eb064ee7ff088aad1e22236555136fe3bc2e13e0337c47fb7ef642c42de1e6c6ec9e27ec19a573f63eb0df34ab0d5cd50a82e44fb48825a948f4b5c6b8afbce4ff9968a9da329f56c36f5efc33eec07e22d0a531137173e5ee86354d29c597b63d74e0f633a5f0e99f86605a40"}, {0x40, 0x112, 0x4, "d0e7197ea1051e2fda401dab1d4b900686db49daf2534fda3d110de91542cbd666a781360fb81781ec24"}, {0x70, 0x22, 0x2, "ef09207d165ee8122feaa6a2e94cbcdd11ba1e6bf6eeb138ae47ebe3c781bfa916b0fd6399456f46fc0543f67ff741a0ad32f858b1402d388cb130179b60b876d7d7f0ea75656192f0ed3b1036134b19ef794f860b5ee414f81f9f40e028"}, {0xa0, 0x6, 0x7f, "32fc99985e2a09adcf1e62deaef36ee2c464bc79c1e10fc8910f9ea3989dd6d8bdd442ee8140220b72feac237ba4e901044a411345052ccb42a6497193439ddcda7dd88571c06545f02b807f99b153859234969d6389a55f734f9a095d42000b2a469e51a64fab71d22333c3dd316ace45cbdf273a3e7a16673871e6dc8dfbad7cbad10a01f53c756f"}, {0x90, 0x10d, 0x30, "93bdd9020cf3b77bf5b6f2a8a1fd99beb5cff6c2311983545afb6dd39d29ed8a12eccefc60c045ead7cbe1e6834388250e7167e33680e57203b50dbb9dd9d0bbd365423b64296c349c8d636d21a03bd177425d205ca2c29c45d9bbe134e3d8e006d85fb71b1579aab2a405ac9cd7dfb0fab28eb1641c8f8250bdc7"}, {0x100, 0x111, 0x7, "3b72ef919bfe642b1db834c8cf8e9fecbdd7c55fef0ca4638760856d90e0a9b8ca3581913c923b48f1f8238d105e326a8af680f1cec322a099f1fe8855891c95a2391b5a3fe5583e6b17230b7e09f6abaae55ce5f51416aea7a4c1e4b1e6aed79ce2b73fc516c074c73f2cd02824506df1e121aabbaa885597b5068488cded251797188cfc0194125fdf213ccef798a0d43d39a783750890c249120c5695614411b09f7390940c49fb8713e1ad69b62622864212e1ff4b9da737d6861f4f04673ba92b65c17a29d68d1ad0386d32077d36b29d931c9ac08163db37bb8bd4cb307f5dca81a0b6f1c0f7"}], 0x12f0}, 0x1) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x2) 2.318033492s ago: executing program 5 (id=3114): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() sendmsg$unix(r3, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}], 0x30, 0x20000010}, 0x1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0xfffffffe, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@rand_addr=' \x01\x00', {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="200000001c008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) 2.076487574s ago: executing program 3 (id=3115): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0x1d0, 0x8, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88f8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x108, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x28, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}, {0x70, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xe000000000000000}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xffffffff}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x200}, @NFTA_QUOTA_BYTES={0xc}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000000000000000}]}}}, {0x24, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x1f0, 0x3, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x78708af5}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1f6d331e}, @NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x24278687}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_USERDATA={0x5c, 0xc, "90717f11d7cedf1bad5af9814515f48485119baaff6618538ce1122613597b974ee22b8b44b93f9900f7779e8d3d626f561499cda285b3983df2d57279c731e210cb90aa2c71106aa4cfe41daa7947653aa7fbd87bee3736"}, @NFTA_CHAIN_USERDATA={0x98, 0xc, "acc1f33f0a02db519225a8e491d1573e0d311cc394c34999d021182c1bb079f3eb7db73a72d7c09faf9d349e85de8a61d23e4e5a49bb145c028d0e40639632af0a2b20155ffd13456213fc5760becb6e5c37a31c43d92ddfb6a261cae31321ef84f2d69c23726e21ff8b9245b958de1b324df80accd6f9a3708a092506b37b4f4367868b28fb5b4378768a35c36fdada58bc3a10"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3332}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x9c, 0x14, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x3e, 0x8, "8a89504eca011841a11d1e8e582353c0c043440b931eac18558c72193b05d0b9ab95e4252eb758f85aa0991c3e9e91414db6d4f6431a2810b7cb"}]}, @NFT_MSG_DELRULE={0xf0, 0x8, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_USERDATA={0x7c, 0x7, 0x1, 0x0, "f4beb0fcaedecba8f8a8dcc5d31650830957dc66922ebd46c673238d5696ddfcdf0bb737748a0c4667fed5b276e994e0b36ed31c58e3448e71e9a57e102fa00651ef68dd7d87c30e5dd1a703eda806da641ff0d730045f38ec2f88dd47c98918c58e9d3b75f166c5f368a6176380248b29dc1c75f7ae92ea"}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x36}, @NFTA_SET_KEY_TYPE={0x8}]}, @NFT_MSG_NEWTABLE={0x2a0, 0x0, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x9b, 0x6, "3db110659452183c013f2f442fc8fa89f41b913f6e4e0f18bd2fdfb3dd3a3dda142c4c36351d30d189836b743f625ee7a2898807a0b6ec66e4f9daf39bff7e215736c01d458f6715ff20eae8f083db32ee3c1e56fe638ce17497d2605b3ab9f6798e66aec9f7b92c1434be827b3aea507df9322f7b54899de4f4a48cb4cc92323d4299e37e9b1d57251332b4ddd7f374821044427c7d71"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xd6, 0x6, "871cf7e3191fc1dbc0230ee8f5e7aae5c5b7b754da21846a8f4b7f68862eadab63c2e7402559265c418907703fb357ed796f2a7d30b997d7167e5f4a388aae50dc7ea67f2c4aa25788ae739d613ec7f15dd3ac0772816bae013654bf90c44ef98aeaa50c65a3321ddfdc4252b24b270f7f1c673ffcfa00b06f421edbfb1eb89ffee79e960db08db99b714ea13d492ecef5c465421981a10b50644583b9fc5ca73434a494d80aef3627f0f4199312079d1f3d9c37923511703805af11229daa318a650531c3de92ab32e321b747d7f0100fe9"}, @NFTA_TABLE_USERDATA={0xdd, 0x6, "c590de233905854cc3bf4d855ca8570654931cecd67884ea54d0787a50fa81cb19ee41228734a995a02eef66e8d90b734db4e02dc29862956b61865502c53fecefc41539e55088634c7bc6b1abc88757375259cda61f85dc6822202c55e103a40a122035ce5093626bd5ef719960ae3b96a2eb7414a624478b1090190b75f202a46789a8bb522d151c0d089abbf95b7f77aefd39db08cf525727dc9021170a8877c48ea75c058814039a268264d064866bef1e39fe31352d3c72cb19d6e018d9781149242413e3cde4e15a3cae46d28e564a75ed8c588ff448"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88c}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000400000000000000050000007201360000003b3f95"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc3cb}, 0x94) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r7, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg$kcm(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/143, 0x8f}], 0x1}, 0x2) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, 0x3, 0x3, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.599089637s ago: executing program 3 (id=3116): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5}}]}, {0x0, [0x30, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000240)=""/113, 0x36, 0x71, 0x0, 0x7}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x73, &(0x7f0000000400)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x33, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xe978}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000006c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x3034, 0xffffffffffffffff, 0x0, &(0x7f0000000740)=[0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x4, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, [@map_fd={0x18, 0x7, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000100)=""/214, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x6, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0x6, 0x9, 0x22a7}, 0x10, r3, r4, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, r5], &(0x7f0000000900), 0x10, 0x79}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r7, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, 0x2, 0x9, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfffff55a}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x1) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)=@newspdinfo={0x44, 0x24, 0x1, 0x70bd2b, 0x25dfdbfd, 0x40, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40001) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r10, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c80)=""/146, 0x92}], 0x1, 0x0, 0x0, 0x2000c880}, 0x2000) sendmsg$NFT_MSG_GETTABLE(r7, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x34, 0x1, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000f00)=@generic={&(0x7f0000000ec0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001040)={@fallback=r6, 0xf, 0x0, 0xf, &(0x7f0000000f40)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000f80)=[0x0, 0x0, 0x0], &(0x7f0000000fc0)=[0x0], &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001080)={@map=r0, r6, 0x15, 0x0, 0x0, @void, @value=r8, @void, @void, r13}, 0x20) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x14, 0x28, &(0x7f00000010c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x1, 0x2, 0x6, 0x1, 0x2, 0xfffffffffffffff3, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}, @map_fd={0x18, 0xb, 0x1, 0x0, r8}]}, &(0x7f0000001200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, @fallback=0xd, r9, 0x8, &(0x7f0000001240)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001280)={0x2, 0x0, 0x5, 0x7fffffff}, 0x10, r3, r12, 0x4, &(0x7f00000012c0)=[r5, r8, r5, r5, r1, r11, r5, r5], &(0x7f0000001300)=[{0x0, 0x3, 0x0, 0x9}, {0x4, 0x1, 0xd, 0xc}, {0x3, 0x4, 0xa, 0x8}, {0x5, 0x2, 0x5, 0x3}], 0x10, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001600)={r5, 0x58, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r16 = bpf$ITER_CREATE(0x21, &(0x7f0000001680)={r12}, 0x8) r17 = bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x1f, 0x11, &(0x7f0000001400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x23}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000014c0)='syzkaller\x00', 0xff, 0x6b, &(0x7f0000001500)=""/107, 0x41100, 0x4, '\x00', r15, @fallback=0x15, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001640)={0x1, 0x8, 0x3, 0x8}, 0x10, r3, r8, 0x4, &(0x7f00000016c0)=[r5, r5, r12, r11, r16], &(0x7f0000001700)=[{0x2, 0x5, 0x10, 0xc}, {0x1, 0x4, 0x6, 0xb}, {0x3, 0x3, 0x4, 0x5}, {0x1, 0x5, 0x9, 0x7}], 0x10, 0x10001}, 0x94) recvmsg$unix(r12, &(0x7f0000001d80)={&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000001880)=""/10, 0xa}, {&(0x7f00000018c0)=""/65, 0x41}, {&(0x7f0000001940)=""/168, 0xa8}, {&(0x7f0000001a00)=""/184, 0xb8}, {&(0x7f0000001ac0)=""/3, 0x3}, {&(0x7f0000001b00)=""/200, 0xc8}, {&(0x7f0000001c00)=""/95, 0x5f}, {&(0x7f0000001c80)=""/27, 0x1b}], 0x8, &(0x7f0000001d40)=[@cred={{0x1c}}], 0x20}, 0x40010100) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001ec0)={@ifindex=r15, 0x3, 0x1, 0x7, &(0x7f0000001dc0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000001e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001e40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001f00)={r14, r12}, 0xc) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001f40)={0xafe}, 0x8) sendmsg$key(r8, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x2, 0xe, 0x9, 0x2, 0x7, 0x0, 0x70bd25, 0x25dfdbff, [@sadb_x_sa2={0x2, 0x13, 0x7, 0x0, 0x0, 0x70bd29, 0x3506}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e22}, @sadb_ident={0x2, 0xb, 0x0, 0x0, 0xfffffffffffffffe}]}, 0x38}}, 0x4008) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000002040)='hugetlb.1GB.usage_in_bytes\x00') r18 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000002080)=0xffffffffffffffff, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000020c0)={r18, r17, 0x4}, 0x10) 1.569341124s ago: executing program 3 (id=3117): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd29, 0x25dfdbff, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x10) 1.506275782s ago: executing program 3 (id=3118): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000700000095000000000000008f5df2daa18b963b98d33eca868e3a546f628330291c205b2f2c8c26860d5390e463ede3430fda0a22ed589981cd9711fa024f276acfe9e8d0"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r3, 0x25, 0x4, @void}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e1700800000876c1d0000007ea60864160af36514001ac00400020207000200020001000200000000938037a786a6d0001000000e4509c5f05c2f070000000000000088bbcb", 0x52}, {&(0x7f0000000100)="9b25af20af07241a63c3", 0xa}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 802.499269ms ago: executing program 5 (id=3119): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043000900000000000000000003000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000044) 793.931058ms ago: executing program 4 (id=3120): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) (fail_nth: 2) 642.363622ms ago: executing program 5 (id=3121): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x106, 0x40, 0x40, 0x41}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)="140000003800a334711c186489da922e0a154080", 0x14}], 0x1}, 0x20000844) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) 368.403504ms ago: executing program 4 (id=3122): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001e00)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a118000600014002020a600e41b0000900ac00040211000000160012000a00ff020048035c4c61c1d67f6f94007133cf6efb8000a007a290457f01a7cee4090000001fb7d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de61fccd40dd6e4edef3d93452a9247c47870ae1d092665c07a81ead0f98a952c795c0e9703920723f9000000008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc010000190001000000000010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000100ffff00000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000010001000000000004010500ac1414aa000000000000000000000000000000003c00000000000000fc0200000000000000000000000000004000000000000000000000000000000000000000ffffffff000000000000000000000000000000003c00000000000000fe8000000000000000000000000000fd00000000000000000008000000000000000000007f000001000000000000000000000000000000002b00000000000000e0000001000000000000000000000000000000000301000000000000000000000000000020010000000000000000000000000000000000003300000000000000fc01000000000000000000000000000f0000000004008000010000000a00000000000000"], 0x1bc}}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x3fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$bpf(0x0, 0x0, 0x0, 0x10804, 0xfffffffffffffffd) 338.46974ms ago: executing program 3 (id=3123): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x4f, 0x594}}], 0x18}, 0x40000c1) r1 = getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x8, 0x7f, 0xf8, 0x2, 0x0, 0x9, 0x10000, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x819, 0xfff, 0x2, 0x2, 0xff, 0x7, 0xa, 0x0, 0xffffffff, 0x0, 0x2}, r1, 0xf, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x7fff, 0x420, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff1, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x4f}, [@ldst={0x6, 0x0, 0x3}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004700)=""/4098, 0x1002}, {&(0x7f00000018c0)=""/4154, 0x103a}, {&(0x7f0000000140)=""/165, 0xa5}], 0x3}, 0x40000000) r5 = socket$kcm(0x2c, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) setsockopt$sock_attach_bpf(r5, 0x11b, 0x2, &(0x7f0000000040)=r6, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="c20000000002"}) 238.725294ms ago: executing program 5 (id=3124): socket$unix(0x1, 0x1, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x9, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000082000000010000000000000c02000000000000000200000d0000000000000000000000000000000000000000006100"], 0x0, 0x43}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="183e96555700000000000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x4000000) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5, 0x0, @perf_config_ext={0x4, 0x2}, 0x0, 0x2, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x4, 0x5, 0x7ffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000400000006000000000000005421ef119ec11defefeb39e0fa5584b3d33d90f6a7f2ce9ee91a5893d468bf22c8c1dadad1e5156d15cd840b15a18b38641ff89158d1a451792be89a56f33aeac93a6ac545c849e09be360e0190a36c261f751abd37144a9e5f0cca1", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES64=r3, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="f00000040300"/27], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x26, 0x0, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x922000000003, 0x11) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x6c, 0x30, 0xb, 0x5, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) 90.104044ms ago: executing program 3 (id=3125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009400000"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000004000000430000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB], 0x50) socket$kcm(0x2, 0x922000000001, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r1, 0x40047459, 0xf0ff1f00000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x7c, 0x30, 0xb, 0x5, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000340)='memory.pressure\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) 44.082435ms ago: executing program 4 (id=3126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x3c, 0x0, 0x1, 0x5, 0xd, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x4}]}, 0x3c}}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r4, &(0x7f0000000000)={0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) setsockopt$sock_attach_bpf(r6, 0x6, 0x19, &(0x7f0000000ec0)=r7, 0x4) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8880, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={0x0, 0x6}, 0x4008, 0x3, 0x0, 0x6, 0x7, 0x4, 0x2, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r11 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r11, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000e4a17c4e2ca18baa", 0x10}], 0x1}, 0x0) r12 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r12, 0x110, 0x7, 0x0, 0x0) sendmsg$inet(r6, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newtaction={0x1c0, 0x30, 0xb, 0x40, 0xfffffffd, {}, [{0x1ac, 0x1, [@m_vlan={0x6c, 0x1, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x800, 0x0, 0x0, 0x15, 0x6}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf97}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbmod={0x13c, 0xa, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xb}]}, {0xfe, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 0s ago: executing program 5 (id=3127): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x58, 0xe, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0xc000}, 0x10) kernel console output (not intermixed with test programs): 31.340486][T13862] ? __bpf_redirect+0x56d/0xe40 [ 431.340512][T13862] __bpf_tx_skb+0x18e/0x260 [ 431.340541][T13862] bpf_clone_redirect+0x272/0x3d0 [ 431.340567][T13862] ? bpf_test_run+0x197/0x7b0 [ 431.340588][T13862] bpf_prog_208b094576c80b22+0x5f/0x68 [ 431.340607][T13862] ? lockdep_hardirqs_on+0x9c/0x150 [ 431.340640][T13862] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 431.340667][T13862] ? seqcount_lockdep_reader_access+0x17e/0x1c0 [ 431.340694][T13862] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 431.340722][T13862] ? __local_bh_disable_ip+0xf1/0x190 [ 431.340741][T13862] ? __pfx___cant_migrate+0x10/0x10 [ 431.340765][T13862] ? read_tsc+0x9/0x20 [ 431.340790][T13862] ? ktime_get+0x1cb/0x1f0 [ 431.340819][T13862] bpf_test_run+0x318/0x7b0 [ 431.340850][T13862] ? irqentry_enter+0x3d/0x60 [ 431.340886][T13862] ? __pfx_bpf_test_run+0x10/0x10 [ 431.340933][T13862] ? slab_build_skb+0x273/0x3e0 [ 431.340954][T13862] ? convert___skb_to_skb+0x3d/0x590 [ 431.340977][T13862] bpf_prog_test_run_skb+0xb30/0x1560 [ 431.341016][T13862] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 431.341038][T13862] bpf_prog_test_run+0x2c4/0x340 [ 431.341070][T13862] __sys_bpf+0x581/0x870 [ 431.341099][T13862] ? __pfx___sys_bpf+0x10/0x10 [ 431.341157][T13862] __x64_sys_bpf+0x7c/0x90 [ 431.341180][T13862] do_syscall_64+0xfa/0x3b0 [ 431.341204][T13862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.341223][T13862] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 431.341242][T13862] ? clear_bhb_loop+0x60/0xb0 [ 431.341266][T13862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.341285][T13862] RIP: 0033:0x7f5ead98eba9 [ 431.341304][T13862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.341321][T13862] RSP: 002b:00007f5eae7f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 431.341342][T13862] RAX: ffffffffffffffda RBX: 00007f5eadbd5fa0 RCX: 00007f5ead98eba9 [ 431.341356][T13862] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 431.341369][T13862] RBP: 00007f5eae7f3090 R08: 0000000000000000 R09: 0000000000000000 [ 431.341382][T13862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 431.341394][T13862] R13: 00007f5eadbd6038 R14: 00007f5eadbd5fa0 R15: 00007ffdce4719b8 [ 431.341427][T13862] [ 431.348027][T13864] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2511'. [ 431.960979][T13878] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2516'. [ 432.020230][T13877] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2515'. [ 432.277591][T13889] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2519'. [ 432.320227][T13890] netlink: 'syz.4.2520': attribute type 21 has an invalid length. [ 432.334245][T13890] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2520'. [ 432.419803][T13894] FAULT_INJECTION: forcing a failure. [ 432.419803][T13894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.445484][T13894] CPU: 1 UID: 0 PID: 13894 Comm: syz.2.2521 Not tainted syzkaller #0 PREEMPT(full) [ 432.445519][T13894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 432.445531][T13894] Call Trace: [ 432.445539][T13894] [ 432.445548][T13894] dump_stack_lvl+0x189/0x250 [ 432.445575][T13894] ? __pfx____ratelimit+0x10/0x10 [ 432.445596][T13894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.445619][T13894] ? __pfx__printk+0x10/0x10 [ 432.445647][T13894] ? __might_fault+0xb0/0x130 [ 432.445678][T13894] ? __might_fault+0xb0/0x130 [ 432.445711][T13894] should_fail_ex+0x414/0x560 [ 432.445746][T13894] _copy_from_iter+0x1de/0x1790 [ 432.445773][T13894] ? irqentry_exit+0x74/0x90 [ 432.445793][T13894] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.445821][T13894] ? __pfx__copy_from_iter+0x10/0x10 [ 432.445847][T13894] ? __build_skb_around+0x257/0x3e0 [ 432.445873][T13894] ? netlink_sendmsg+0x642/0xb30 [ 432.445893][T13894] ? skb_put+0x11b/0x210 [ 432.445920][T13894] netlink_sendmsg+0x6b2/0xb30 [ 432.445955][T13894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.445981][T13894] ? aa_sock_msg_perm+0xf1/0x1d0 [ 432.446004][T13894] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 432.446026][T13894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.446050][T13894] __sock_sendmsg+0x219/0x270 [ 432.446082][T13894] ____sys_sendmsg+0x505/0x830 [ 432.446112][T13894] ? __pfx_____sys_sendmsg+0x10/0x10 [ 432.446147][T13894] ? import_iovec+0x74/0xa0 [ 432.446176][T13894] ___sys_sendmsg+0x21f/0x2a0 [ 432.446202][T13894] ? __pfx____sys_sendmsg+0x10/0x10 [ 432.446252][T13894] ? __fget_files+0x2a/0x420 [ 432.446286][T13894] ? __fget_files+0x2a/0x420 [ 432.446302][T13894] ? __fget_files+0x3a0/0x420 [ 432.446333][T13894] __x64_sys_sendmsg+0x19b/0x260 [ 432.446360][T13894] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 432.446413][T13894] do_syscall_64+0xfa/0x3b0 [ 432.446435][T13894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.446452][T13894] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 432.446471][T13894] ? clear_bhb_loop+0x60/0xb0 [ 432.446495][T13894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.446521][T13894] RIP: 0033:0x7f5ead98eba9 [ 432.446537][T13894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.446554][T13894] RSP: 002b:00007f5eae7f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.446574][T13894] RAX: ffffffffffffffda RBX: 00007f5eadbd5fa0 RCX: 00007f5ead98eba9 [ 432.446588][T13894] RDX: 0000000024000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 432.446601][T13894] RBP: 00007f5eae7f3090 R08: 0000000000000000 R09: 0000000000000000 [ 432.446613][T13894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.446625][T13894] R13: 00007f5eadbd6038 R14: 00007f5eadbd5fa0 R15: 00007ffdce4719b8 [ 432.446660][T13894] [ 433.198498][T13917] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2530'. [ 433.370661][T13923] wg0 speed is unknown, defaulting to 1000 [ 433.382606][T13923] wg0 speed is unknown, defaulting to 1000 [ 433.396244][T13923] wg0 speed is unknown, defaulting to 1000 [ 433.431474][T13925] netlink: 'syz.4.2534': attribute type 21 has an invalid length. [ 433.456555][T13925] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2534'. [ 433.537793][T13923] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 434.074079][T13930] netlink: 'syz.5.2537': attribute type 4 has an invalid length. [ 434.332870][T13923] wg0 speed is unknown, defaulting to 1000 [ 434.361063][T13923] wg0 speed is unknown, defaulting to 1000 [ 434.371202][T13923] wg0 speed is unknown, defaulting to 1000 [ 434.386116][T13923] wg0 speed is unknown, defaulting to 1000 [ 434.397128][T13923] wg0 speed is unknown, defaulting to 1000 [ 434.977427][T13975] netlink: 'syz.4.2549': attribute type 21 has an invalid length. [ 436.124288][T14007] __nla_validate_parse: 5 callbacks suppressed [ 436.124308][T14007] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2559'. [ 436.322346][T14011] netlink: 'syz.3.2560': attribute type 21 has an invalid length. [ 436.334981][T14011] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2560'. [ 436.615472][T14023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2567'. [ 436.631700][T14025] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2565'. [ 436.984152][T14040] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2572'. [ 437.530771][T14051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.612680][T14053] netlink: 388 bytes leftover after parsing attributes in process `syz.5.2575'. [ 437.813407][T14059] FAULT_INJECTION: forcing a failure. [ 437.813407][T14059] name failslab, interval 1, probability 0, space 0, times 0 [ 437.858084][T14059] CPU: 0 UID: 0 PID: 14059 Comm: syz.3.2579 Not tainted syzkaller #0 PREEMPT(full) [ 437.858112][T14059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 437.858125][T14059] Call Trace: [ 437.858139][T14059] [ 437.858150][T14059] dump_stack_lvl+0x189/0x250 [ 437.858187][T14059] ? __pfx____ratelimit+0x10/0x10 [ 437.858217][T14059] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.858249][T14059] ? __pfx__printk+0x10/0x10 [ 437.858316][T14059] ? __pfx___might_resched+0x10/0x10 [ 437.858340][T14059] ? fs_reclaim_acquire+0x7d/0x100 [ 437.858388][T14059] should_fail_ex+0x414/0x560 [ 437.858450][T14059] should_failslab+0xa8/0x100 [ 437.858493][T14059] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 437.858528][T14059] ? preload_this_cpu_lock+0x49/0xc0 [ 437.858546][T14059] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 437.858600][T14059] preload_this_cpu_lock+0x49/0xc0 [ 437.858632][T14059] alloc_vmap_area+0x41c/0x14a0 [ 437.858743][T14059] ? __pfx_alloc_vmap_area+0x10/0x10 [ 437.858775][T14059] ? __kasan_kmalloc+0x93/0xb0 [ 437.858815][T14059] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 437.858849][T14059] ? __get_vm_area_node+0x13f/0x300 [ 437.858882][T14059] ? copy_process+0x54b/0x3c00 [ 437.858913][T14059] __get_vm_area_node+0x1f8/0x300 [ 437.858983][T14059] __vmalloc_node_range_noprof+0x301/0x12f0 [ 437.859021][T14059] ? copy_process+0x54b/0x3c00 [ 437.859047][T14059] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 437.859079][T14059] ? perf_trace_preemptirq_template+0x280/0x340 [ 437.859170][T14059] ? irqentry_exit+0x74/0x90 [ 437.859244][T14059] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 437.859336][T14059] __vmalloc_node_noprof+0xc2/0x110 [ 437.859369][T14059] ? copy_process+0x54b/0x3c00 [ 437.859383][T14059] ? copy_process+0x54b/0x3c00 [ 437.859423][T14059] dup_task_struct+0x3e7/0x860 [ 437.859480][T14059] copy_process+0x54b/0x3c00 [ 437.859539][T14059] ? __pfx_perf_tp_event+0x10/0x10 [ 437.859574][T14059] ? migrate_enable+0x29c/0x3c0 [ 437.859674][T14059] ? __pfx_copy_process+0x10/0x10 [ 437.859764][T14059] kernel_clone+0x21e/0x840 [ 437.859795][T14059] ? __pfx_trace_call_bpf+0x10/0x10 [ 437.859838][T14059] ? __pfx_kernel_clone+0x10/0x10 [ 437.859985][T14059] __x64_sys_clone+0x18b/0x1e0 [ 437.860035][T14059] ? __pfx___x64_sys_clone+0x10/0x10 [ 437.860220][T14059] do_syscall_64+0xfa/0x3b0 [ 437.860253][T14059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.860270][T14059] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 437.860288][T14059] ? clear_bhb_loop+0x60/0xb0 [ 437.860335][T14059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.860356][T14059] RIP: 0033:0x7f436c18eba9 [ 437.860381][T14059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.860398][T14059] RSP: 002b:00007f436d070fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 437.860418][T14059] RAX: ffffffffffffffda RBX: 00007f436c3d5fa0 RCX: 00007f436c18eba9 [ 437.860432][T14059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 437.860444][T14059] RBP: 00007f436d071090 R08: 0000000000000000 R09: 0000000000000000 [ 437.860457][T14059] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 437.860468][T14059] R13: 00007f436c3d6038 R14: 00007f436c3d5fa0 R15: 00007ffd65cd62f8 [ 437.860566][T14059] [ 437.875191][T14060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.254771][T14063] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.2581'. [ 439.477207][T14059] wg0 speed is unknown, defaulting to 1000 [ 439.811564][T14078] FAULT_INJECTION: forcing a failure. [ 439.811564][T14078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.923404][T14078] CPU: 0 UID: 0 PID: 14078 Comm: syz.2.2584 Not tainted syzkaller #0 PREEMPT(full) [ 439.923432][T14078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 439.923444][T14078] Call Trace: [ 439.923456][T14078] [ 439.923467][T14078] dump_stack_lvl+0x189/0x250 [ 439.923503][T14078] ? __pfx____ratelimit+0x10/0x10 [ 439.923533][T14078] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.923566][T14078] ? __pfx__printk+0x10/0x10 [ 439.923620][T14078] ? __might_fault+0xb0/0x130 [ 439.923683][T14078] should_fail_ex+0x414/0x560 [ 439.923746][T14078] _copy_to_user+0x31/0xb0 [ 439.923794][T14078] simple_read_from_buffer+0xe1/0x170 [ 439.923852][T14078] proc_fail_nth_read+0x1b3/0x220 [ 439.923898][T14078] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 439.923945][T14078] ? rw_verify_area+0x2a6/0x4d0 [ 439.923976][T14078] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 439.924015][T14078] vfs_read+0x200/0xa30 [ 439.924047][T14078] ? fdget_pos+0x247/0x320 [ 439.924095][T14078] ? __pfx___mutex_lock+0x10/0x10 [ 439.924127][T14078] ? __pfx_vfs_read+0x10/0x10 [ 439.924172][T14078] ? __fget_files+0x2a/0x420 [ 439.924218][T14078] ? __fget_files+0x3a0/0x420 [ 439.924237][T14078] ? __fget_files+0x2a/0x420 [ 439.924305][T14078] ksys_read+0x145/0x250 [ 439.924353][T14078] ? __pfx_ksys_read+0x10/0x10 [ 439.924414][T14078] ? do_syscall_64+0xbe/0x3b0 [ 439.924461][T14078] do_syscall_64+0xfa/0x3b0 [ 439.924482][T14078] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.924508][T14078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.924531][T14078] ? clear_bhb_loop+0x60/0xb0 [ 439.924572][T14078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.924592][T14078] RIP: 0033:0x7f5ead98d5bc [ 439.924616][T14078] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 439.924633][T14078] RSP: 002b:00007f5eae7f3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 439.924655][T14078] RAX: ffffffffffffffda RBX: 00007f5eadbd5fa0 RCX: 00007f5ead98d5bc [ 439.924669][T14078] RDX: 000000000000000f RSI: 00007f5eae7f30a0 RDI: 0000000000000004 [ 439.924682][T14078] RBP: 00007f5eae7f3090 R08: 0000000000000000 R09: 0000000000000000 [ 439.924694][T14078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.924706][T14078] R13: 00007f5eadbd6038 R14: 00007f5eadbd5fa0 R15: 00007ffdce4719b8 [ 439.924800][T14078] [ 440.176323][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.182815][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.641822][T14089] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2588'. [ 440.757816][T14095] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2587'. [ 441.275773][T14111] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2595'. [ 441.481909][T14117] netlink: 'syz.2.2600': attribute type 1 has an invalid length. [ 441.498419][T14117] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.2600'. [ 441.606766][T14123] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2602'. [ 442.142326][T14143] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2610'. [ 442.234251][T14139] netlink: 'syz.2.2607': attribute type 21 has an invalid length. [ 442.243384][T14139] netlink: 'syz.2.2607': attribute type 6 has an invalid length. [ 442.304418][T14139] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2607'. [ 442.502415][T14155] IPv6: : Disabled Multicast RS [ 442.553834][T14155] netlink: 'syz.5.2613': attribute type 2 has an invalid length. [ 442.650875][T14163] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2614'. [ 442.727526][T14165] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2616'. [ 443.249615][T14181] FAULT_INJECTION: forcing a failure. [ 443.249615][T14181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.268553][T14181] CPU: 1 UID: 0 PID: 14181 Comm: syz.4.2623 Not tainted syzkaller #0 PREEMPT(full) [ 443.268580][T14181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 443.268590][T14181] Call Trace: [ 443.268598][T14181] [ 443.268607][T14181] dump_stack_lvl+0x189/0x250 [ 443.268634][T14181] ? __pfx____ratelimit+0x10/0x10 [ 443.268657][T14181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 443.268681][T14181] ? __pfx__printk+0x10/0x10 [ 443.268709][T14181] ? __might_fault+0xb0/0x130 [ 443.268739][T14181] ? __might_fault+0xb0/0x130 [ 443.268774][T14181] should_fail_ex+0x414/0x560 [ 443.268820][T14181] _copy_from_user+0x2d/0xb0 [ 443.268848][T14181] ___sys_sendmsg+0x158/0x2a0 [ 443.268878][T14181] ? __pfx____sys_sendmsg+0x10/0x10 [ 443.268930][T14181] ? __fget_files+0x2a/0x420 [ 443.268965][T14181] ? __fget_files+0x2a/0x420 [ 443.268981][T14181] ? __fget_files+0x3a0/0x420 [ 443.269013][T14181] __x64_sys_sendmsg+0x19b/0x260 [ 443.269043][T14181] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 443.269081][T14181] ? __pfx_ksys_write+0x10/0x10 [ 443.269104][T14181] ? rcu_is_watching+0x15/0xb0 [ 443.269131][T14181] ? do_syscall_64+0xbe/0x3b0 [ 443.269158][T14181] do_syscall_64+0xfa/0x3b0 [ 443.269178][T14181] ? lockdep_hardirqs_on+0x9c/0x150 [ 443.269198][T14181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.269217][T14181] ? clear_bhb_loop+0x60/0xb0 [ 443.269242][T14181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.269261][T14181] RIP: 0033:0x7f9c8438eba9 [ 443.269279][T14181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.269295][T14181] RSP: 002b:00007f9c851f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.269315][T14181] RAX: ffffffffffffffda RBX: 00007f9c845d5fa0 RCX: 00007f9c8438eba9 [ 443.269330][T14181] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000003 [ 443.269343][T14181] RBP: 00007f9c851f2090 R08: 0000000000000000 R09: 0000000000000000 [ 443.269355][T14181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.269366][T14181] R13: 00007f9c845d6038 R14: 00007f9c845d5fa0 R15: 00007ffd7737d1a8 [ 443.269401][T14181] [ 443.513059][T14179] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2622'. [ 443.811705][T14193] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2628'. [ 444.287189][T14218] netlink: 201660 bytes leftover after parsing attributes in process `syz.5.2637'. [ 444.498065][T14227] netlink: 'syz.5.2640': attribute type 8 has an invalid length. [ 444.631588][T14232] FAULT_INJECTION: forcing a failure. [ 444.631588][T14232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.700104][T14232] CPU: 0 UID: 0 PID: 14232 Comm: syz.3.2642 Not tainted syzkaller #0 PREEMPT(full) [ 444.700131][T14232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 444.700142][T14232] Call Trace: [ 444.700150][T14232] [ 444.700158][T14232] dump_stack_lvl+0x189/0x250 [ 444.700187][T14232] ? __pfx____ratelimit+0x10/0x10 [ 444.700209][T14232] ? __pfx_dump_stack_lvl+0x10/0x10 [ 444.700232][T14232] ? __pfx__printk+0x10/0x10 [ 444.700259][T14232] ? __might_fault+0xb0/0x130 [ 444.700298][T14232] should_fail_ex+0x414/0x560 [ 444.700334][T14232] _copy_from_user+0x2d/0xb0 [ 444.700361][T14232] ___sys_sendmsg+0x158/0x2a0 [ 444.700390][T14232] ? __pfx____sys_sendmsg+0x10/0x10 [ 444.700453][T14232] ? __fget_files+0x2a/0x420 [ 444.700470][T14232] ? __fget_files+0x3a0/0x420 [ 444.700498][T14232] __x64_sys_sendmsg+0x19b/0x260 [ 444.700521][T14232] ? perf_trace_run_bpf_submit+0x100/0x170 [ 444.700545][T14232] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 444.700580][T14232] ? __pfx_ksys_write+0x10/0x10 [ 444.700604][T14232] ? rcu_is_watching+0x15/0xb0 [ 444.700636][T14232] ? do_syscall_64+0xbe/0x3b0 [ 444.700662][T14232] do_syscall_64+0xfa/0x3b0 [ 444.700682][T14232] ? lockdep_hardirqs_on+0x9c/0x150 [ 444.700708][T14232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.700728][T14232] ? clear_bhb_loop+0x60/0xb0 [ 444.700751][T14232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.700769][T14232] RIP: 0033:0x7f436c18eba9 [ 444.700786][T14232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.700802][T14232] RSP: 002b:00007f436d071038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 444.700824][T14232] RAX: ffffffffffffffda RBX: 00007f436c3d5fa0 RCX: 00007f436c18eba9 [ 444.700839][T14232] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 444.700853][T14232] RBP: 00007f436d071090 R08: 0000000000000000 R09: 0000000000000000 [ 444.700866][T14232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.700877][T14232] R13: 00007f436c3d6038 R14: 00007f436c3d5fa0 R15: 00007ffd65cd62f8 [ 444.700909][T14232] [ 445.190184][T14250] netlink: 'syz.0.2649': attribute type 4 has an invalid length. [ 445.218334][T14250] netlink: 'syz.0.2649': attribute type 11 has an invalid length. [ 445.238909][T14250] netlink: 'syz.0.2649': attribute type 30 has an invalid length. [ 445.541362][T14259] FAULT_INJECTION: forcing a failure. [ 445.541362][T14259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.628400][T14259] CPU: 1 UID: 0 PID: 14259 Comm: syz.5.2651 Not tainted syzkaller #0 PREEMPT(full) [ 445.628430][T14259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 445.628443][T14259] Call Trace: [ 445.628454][T14259] [ 445.628466][T14259] dump_stack_lvl+0x189/0x250 [ 445.628502][T14259] ? __pfx____ratelimit+0x10/0x10 [ 445.628532][T14259] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.628565][T14259] ? __pfx__printk+0x10/0x10 [ 445.628602][T14259] ? __might_fault+0xb0/0x130 [ 445.628692][T14259] should_fail_ex+0x414/0x560 [ 445.628755][T14259] _copy_from_iter+0x1de/0x1790 [ 445.628822][T14259] ? rcu_is_watching+0x15/0xb0 [ 445.628856][T14259] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 445.628897][T14259] ? __pfx__copy_from_iter+0x10/0x10 [ 445.628940][T14259] ? __build_skb_around+0x257/0x3e0 [ 445.628988][T14259] ? netlink_sendmsg+0x642/0xb30 [ 445.629008][T14259] ? skb_put+0x11b/0x210 [ 445.629058][T14259] netlink_sendmsg+0x6b2/0xb30 [ 445.629133][T14259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.629179][T14259] ? aa_sock_msg_perm+0xf1/0x1d0 [ 445.629217][T14259] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 445.629241][T14259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.629277][T14259] __sock_sendmsg+0x219/0x270 [ 445.629332][T14259] ____sys_sendmsg+0x505/0x830 [ 445.629400][T14259] ? __pfx_____sys_sendmsg+0x10/0x10 [ 445.629479][T14259] ? import_iovec+0x74/0xa0 [ 445.629532][T14259] ___sys_sendmsg+0x21f/0x2a0 [ 445.629579][T14259] ? __pfx____sys_sendmsg+0x10/0x10 [ 445.629785][T14259] ? __fget_files+0x2a/0x420 [ 445.629805][T14259] ? __fget_files+0x3a0/0x420 [ 445.629882][T14259] __x64_sys_sendmsg+0x19b/0x260 [ 445.629929][T14259] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 445.630008][T14259] ? __pfx_ksys_write+0x10/0x10 [ 445.630032][T14259] ? rcu_is_watching+0x15/0xb0 [ 445.630081][T14259] ? do_syscall_64+0xbe/0x3b0 [ 445.630126][T14259] do_syscall_64+0xfa/0x3b0 [ 445.630148][T14259] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.630174][T14259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.630196][T14259] ? clear_bhb_loop+0x60/0xb0 [ 445.630237][T14259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.630258][T14259] RIP: 0033:0x7ff4d878eba9 [ 445.630282][T14259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.630300][T14259] RSP: 002b:00007ff4d69f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.630321][T14259] RAX: ffffffffffffffda RBX: 00007ff4d89d5fa0 RCX: 00007ff4d878eba9 [ 445.630336][T14259] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 445.630354][T14259] RBP: 00007ff4d69f6090 R08: 0000000000000000 R09: 0000000000000000 [ 445.630366][T14259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.630378][T14259] R13: 00007ff4d89d6038 R14: 00007ff4d89d5fa0 R15: 00007ffc9674a2b8 [ 445.630476][T14259] [ 446.150951][T14264] netlink: 'syz.4.2654': attribute type 8 has an invalid length. [ 446.412366][T14276] __nla_validate_parse: 5 callbacks suppressed [ 446.412386][T14276] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2657'. [ 446.486011][T14271] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2656'. [ 446.886118][T14288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2662'. [ 447.132254][T14298] netlink: 'syz.4.2666': attribute type 8 has an invalid length. [ 447.687531][T14311] netlink: 'syz.2.2670': attribute type 2 has an invalid length. [ 447.696324][T14311] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2670'. [ 447.727455][T14311] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 447.835367][T14311] netlink: 'syz.2.2670': attribute type 1 has an invalid length. [ 448.214429][T14318] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2672'. [ 448.535469][T14329] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2676'. [ 448.680421][T14331] FAULT_INJECTION: forcing a failure. [ 448.680421][T14331] name failslab, interval 1, probability 0, space 0, times 0 [ 448.729047][T14331] CPU: 0 UID: 0 PID: 14331 Comm: syz.4.2677 Not tainted syzkaller #0 PREEMPT(full) [ 448.729075][T14331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 448.729086][T14331] Call Trace: [ 448.729094][T14331] [ 448.729101][T14331] dump_stack_lvl+0x189/0x250 [ 448.729131][T14331] ? __pfx____ratelimit+0x10/0x10 [ 448.729152][T14331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.729175][T14331] ? __pfx__printk+0x10/0x10 [ 448.729204][T14331] ? __lock_acquire+0xab9/0xd20 [ 448.729242][T14331] should_fail_ex+0x414/0x560 [ 448.729279][T14331] should_failslab+0xa8/0x100 [ 448.729309][T14331] kmem_cache_alloc_noprof+0x73/0x3c0 [ 448.729334][T14331] ? skb_clone+0x212/0x3a0 [ 448.729375][T14331] skb_clone+0x212/0x3a0 [ 448.729403][T14331] __netlink_deliver_tap+0x404/0x850 [ 448.729444][T14331] ? netlink_deliver_tap+0x2e/0x1b0 [ 448.729468][T14331] netlink_deliver_tap+0x19c/0x1b0 [ 448.729492][T14331] netlink_unicast+0x7fa/0x9e0 [ 448.729522][T14331] ? __pfx_netlink_unicast+0x10/0x10 [ 448.729544][T14331] ? netlink_sendmsg+0x642/0xb30 [ 448.729562][T14331] ? skb_put+0x11b/0x210 [ 448.729588][T14331] netlink_sendmsg+0x805/0xb30 [ 448.729623][T14331] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.729651][T14331] ? aa_sock_msg_perm+0xf1/0x1d0 [ 448.729675][T14331] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 448.729696][T14331] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.729719][T14331] __sock_sendmsg+0x219/0x270 [ 448.729752][T14331] ____sys_sendmsg+0x505/0x830 [ 448.729786][T14331] ? __pfx_____sys_sendmsg+0x10/0x10 [ 448.729824][T14331] ? import_iovec+0x74/0xa0 [ 448.729855][T14331] ___sys_sendmsg+0x21f/0x2a0 [ 448.729884][T14331] ? __pfx____sys_sendmsg+0x10/0x10 [ 448.729949][T14331] ? __fget_files+0x2a/0x420 [ 448.729966][T14331] ? __fget_files+0x3a0/0x420 [ 448.729998][T14331] __x64_sys_sendmsg+0x19b/0x260 [ 448.730028][T14331] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 448.730065][T14331] ? __pfx_ksys_write+0x10/0x10 [ 448.730098][T14331] ? do_syscall_64+0xbe/0x3b0 [ 448.730126][T14331] do_syscall_64+0xfa/0x3b0 [ 448.730145][T14331] ? lockdep_hardirqs_on+0x9c/0x150 [ 448.730165][T14331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.730183][T14331] ? clear_bhb_loop+0x60/0xb0 [ 448.730208][T14331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.730227][T14331] RIP: 0033:0x7f9c8438eba9 [ 448.730245][T14331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.730263][T14331] RSP: 002b:00007f9c851f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.730284][T14331] RAX: ffffffffffffffda RBX: 00007f9c845d5fa0 RCX: 00007f9c8438eba9 [ 448.730300][T14331] RDX: 0000000024000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 448.730313][T14331] RBP: 00007f9c851f2090 R08: 0000000000000000 R09: 0000000000000000 [ 448.730326][T14331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.730337][T14331] R13: 00007f9c845d6038 R14: 00007f9c845d5fa0 R15: 00007ffd7737d1a8 [ 448.730379][T14331] [ 448.730591][T14331] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2677'. [ 449.076912][T14343] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2682'. [ 449.094192][T14343] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 449.336527][T14351] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2684'. [ 449.346606][T14351] netlink: 'syz.4.2684': attribute type 3 has an invalid length. [ 449.461004][T14358] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2685'. [ 451.533395][T14431] __nla_validate_parse: 5 callbacks suppressed [ 451.533419][T14431] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2710'. [ 452.795316][T14434] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2711'. [ 453.133216][T14447] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2714'. [ 453.174886][T14448] netlink: 'syz.4.2713': attribute type 8 has an invalid length. [ 453.233013][T14450] netlink: 'syz.0.2715': attribute type 21 has an invalid length. [ 453.293468][T14454] FAULT_INJECTION: forcing a failure. [ 453.293468][T14454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.307031][T14454] CPU: 1 UID: 0 PID: 14454 Comm: syz.4.2717 Not tainted syzkaller #0 PREEMPT(full) [ 453.307057][T14454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 453.307069][T14454] Call Trace: [ 453.307077][T14454] [ 453.307085][T14454] dump_stack_lvl+0x189/0x250 [ 453.307114][T14454] ? __pfx____ratelimit+0x10/0x10 [ 453.307135][T14454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.307158][T14454] ? __pfx__printk+0x10/0x10 [ 453.307186][T14454] ? __might_fault+0xb0/0x130 [ 453.307224][T14454] should_fail_ex+0x414/0x560 [ 453.307257][T14454] _copy_from_iter+0x1de/0x1790 [ 453.307288][T14454] ? rcu_is_watching+0x15/0xb0 [ 453.307309][T14454] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 453.307338][T14454] ? __pfx__copy_from_iter+0x10/0x10 [ 453.307362][T14454] ? __build_skb_around+0x257/0x3e0 [ 453.307388][T14454] ? netlink_sendmsg+0x642/0xb30 [ 453.307408][T14454] ? skb_put+0x11b/0x210 [ 453.307434][T14454] netlink_sendmsg+0x6b2/0xb30 [ 453.307465][T14454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.307489][T14454] ? aa_sock_msg_perm+0xf1/0x1d0 [ 453.307510][T14454] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 453.307530][T14454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.307552][T14454] __sock_sendmsg+0x219/0x270 [ 453.307584][T14454] ____sys_sendmsg+0x505/0x830 [ 453.307612][T14454] ? __pfx_____sys_sendmsg+0x10/0x10 [ 453.307642][T14454] ? import_iovec+0x74/0xa0 [ 453.307657][T14454] ___sys_sendmsg+0x21f/0x2a0 [ 453.307671][T14454] ? __pfx____sys_sendmsg+0x10/0x10 [ 453.307706][T14454] ? __fget_files+0x2a/0x420 [ 453.307716][T14454] ? __fget_files+0x3a0/0x420 [ 453.307731][T14454] __x64_sys_sendmsg+0x19b/0x260 [ 453.307745][T14454] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 453.307763][T14454] ? __pfx_ksys_write+0x10/0x10 [ 453.307776][T14454] ? rcu_is_watching+0x15/0xb0 [ 453.307788][T14454] ? do_syscall_64+0xbe/0x3b0 [ 453.307802][T14454] do_syscall_64+0xfa/0x3b0 [ 453.307812][T14454] ? lockdep_hardirqs_on+0x9c/0x150 [ 453.307823][T14454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.307841][T14454] ? clear_bhb_loop+0x60/0xb0 [ 453.307853][T14454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.307863][T14454] RIP: 0033:0x7f9c8438eba9 [ 453.307873][T14454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.307882][T14454] RSP: 002b:00007f9c851f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.307895][T14454] RAX: ffffffffffffffda RBX: 00007f9c845d5fa0 RCX: 00007f9c8438eba9 [ 453.307903][T14454] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 453.307909][T14454] RBP: 00007f9c851f2090 R08: 0000000000000000 R09: 0000000000000000 [ 453.307915][T14454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.307921][T14454] R13: 00007f9c845d6038 R14: 00007f9c845d5fa0 R15: 00007ffd7737d1a8 [ 453.307937][T14454] [ 453.601532][T14456] FAULT_INJECTION: forcing a failure. [ 453.601532][T14456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.615301][T14456] CPU: 0 UID: 0 PID: 14456 Comm: syz.5.2716 Not tainted syzkaller #0 PREEMPT(full) [ 453.615325][T14456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 453.615336][T14456] Call Trace: [ 453.615343][T14456] [ 453.615350][T14456] dump_stack_lvl+0x189/0x250 [ 453.615375][T14456] ? lockdep_hardirqs_on+0x9c/0x150 [ 453.615395][T14456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.615420][T14456] ? dump_stack+0x9/0x20 [ 453.615443][T14456] should_fail_ex+0x414/0x560 [ 453.615473][T14456] _copy_to_user+0x31/0xb0 [ 453.615497][T14456] simple_read_from_buffer+0xe1/0x170 [ 453.615526][T14456] proc_fail_nth_read+0x1b3/0x220 [ 453.615548][T14456] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 453.615565][T14456] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 453.615583][T14456] ? vfs_read+0x1e5/0xa30 [ 453.615606][T14456] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 453.615626][T14456] vfs_read+0x200/0xa30 [ 453.615647][T14456] ? fdget_pos+0x247/0x320 [ 453.615665][T14456] ? __pfx___mutex_lock+0x10/0x10 [ 453.615685][T14456] ? __pfx_vfs_read+0x10/0x10 [ 453.615707][T14456] ? __fget_files+0x2a/0x420 [ 453.615726][T14456] ? __fget_files+0x3a0/0x420 [ 453.615740][T14456] ? __fget_files+0x2a/0x420 [ 453.615762][T14456] ksys_read+0x145/0x250 [ 453.615785][T14456] ? __pfx_ksys_read+0x10/0x10 [ 453.615811][T14456] ? do_syscall_64+0xbe/0x3b0 [ 453.615833][T14456] do_syscall_64+0xfa/0x3b0 [ 453.615853][T14456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.615868][T14456] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 453.615885][T14456] ? clear_bhb_loop+0x60/0xb0 [ 453.615911][T14456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.615927][T14456] RIP: 0033:0x7ff4d878d5bc [ 453.615942][T14456] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 453.615957][T14456] RSP: 002b:00007ff4d69d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 453.615975][T14456] RAX: ffffffffffffffda RBX: 00007ff4d89d6090 RCX: 00007ff4d878d5bc [ 453.615989][T14456] RDX: 000000000000000f RSI: 00007ff4d69d50a0 RDI: 0000000000000009 [ 453.615999][T14456] RBP: 00007ff4d69d5090 R08: 0000000000000000 R09: 0000000000000000 [ 453.616010][T14456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.616019][T14456] R13: 00007ff4d89d6128 R14: 00007ff4d89d6090 R15: 00007ffc9674a2b8 [ 453.616045][T14456] [ 453.860171][T14458] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2719'. [ 454.068073][T14464] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2722'. [ 454.170759][T14468] netlink: 'syz.5.2724': attribute type 21 has an invalid length. [ 454.179118][T14468] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2724'. [ 454.311311][T14481] openvswitch: netlink: Key type 16383 is out of range max 32 [ 454.311454][T14475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2726'. [ 454.407619][T14477] netlink: 'syz.4.2727': attribute type 8 has an invalid length. [ 454.461316][T14487] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2730'. [ 454.522910][T14486] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2731'. [ 454.761212][T14495] FAULT_INJECTION: forcing a failure. [ 454.761212][T14495] name failslab, interval 1, probability 0, space 0, times 0 [ 454.802079][T14495] CPU: 0 UID: 0 PID: 14495 Comm: syz.4.2733 Not tainted syzkaller #0 PREEMPT(full) [ 454.802108][T14495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 454.802120][T14495] Call Trace: [ 454.802128][T14495] [ 454.802136][T14495] dump_stack_lvl+0x189/0x250 [ 454.802168][T14495] ? __pfx____ratelimit+0x10/0x10 [ 454.802190][T14495] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.802213][T14495] ? __pfx__printk+0x10/0x10 [ 454.802246][T14495] ? __pfx___might_resched+0x10/0x10 [ 454.802264][T14495] ? fs_reclaim_acquire+0x7d/0x100 [ 454.802289][T14495] should_fail_ex+0x414/0x560 [ 454.802324][T14495] should_failslab+0xa8/0x100 [ 454.802354][T14495] __kmalloc_cache_noprof+0x70/0x3d0 [ 454.802381][T14495] ? nfnetlink_rcv+0xeff/0x2520 [ 454.802415][T14495] nfnetlink_rcv+0xeff/0x2520 [ 454.802477][T14495] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 454.802523][T14495] ? ref_tracker_free+0x63a/0x7d0 [ 454.802580][T14495] ? __netlink_deliver_tap+0x807/0x850 [ 454.802602][T14495] ? netlink_deliver_tap+0x2e/0x1b0 [ 454.802643][T14495] netlink_unicast+0x82c/0x9e0 [ 454.802671][T14495] ? __pfx_netlink_unicast+0x10/0x10 [ 454.802692][T14495] ? netlink_sendmsg+0x642/0xb30 [ 454.802712][T14495] ? skb_put+0x11b/0x210 [ 454.802738][T14495] netlink_sendmsg+0x805/0xb30 [ 454.802771][T14495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.802796][T14495] ? aa_sock_msg_perm+0xf1/0x1d0 [ 454.802818][T14495] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 454.802839][T14495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.802859][T14495] __sock_sendmsg+0x219/0x270 [ 454.802889][T14495] ____sys_sendmsg+0x505/0x830 [ 454.802919][T14495] ? __pfx_____sys_sendmsg+0x10/0x10 [ 454.802951][T14495] ? import_iovec+0x74/0xa0 [ 454.802978][T14495] ___sys_sendmsg+0x21f/0x2a0 [ 454.803003][T14495] ? __pfx____sys_sendmsg+0x10/0x10 [ 454.803024][T14495] ? migrate_enable+0x29c/0x3c0 [ 454.803081][T14495] ? __fget_files+0x2a/0x420 [ 454.803097][T14495] ? __fget_files+0x3a0/0x420 [ 454.803125][T14495] __x64_sys_sendmsg+0x19b/0x260 [ 454.803153][T14495] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 454.803186][T14495] ? __pfx_ksys_write+0x10/0x10 [ 454.803207][T14495] ? rcu_is_watching+0x15/0xb0 [ 454.803230][T14495] ? do_syscall_64+0xbe/0x3b0 [ 454.803254][T14495] do_syscall_64+0xfa/0x3b0 [ 454.803273][T14495] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.803292][T14495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.803309][T14495] ? clear_bhb_loop+0x60/0xb0 [ 454.803332][T14495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.803350][T14495] RIP: 0033:0x7f9c8438eba9 [ 454.803368][T14495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.803385][T14495] RSP: 002b:00007f9c851f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 454.803406][T14495] RAX: ffffffffffffffda RBX: 00007f9c845d5fa0 RCX: 00007f9c8438eba9 [ 454.803420][T14495] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 454.803433][T14495] RBP: 00007f9c851f2090 R08: 0000000000000000 R09: 0000000000000000 [ 454.803445][T14495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.803457][T14495] R13: 00007f9c845d6038 R14: 00007f9c845d5fa0 R15: 00007ffd7737d1a8 [ 454.803489][T14495] [ 455.753245][T14507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2738'. [ 456.042695][T14512] netlink: 'syz.5.2739': attribute type 16 has an invalid length. [ 456.059171][T14512] netlink: 'syz.5.2739': attribute type 3 has an invalid length. [ 456.081831][T14510] delete_channel: no stack [ 456.562200][T14526] __nla_validate_parse: 2 callbacks suppressed [ 456.562222][T14526] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2744'. [ 456.976745][T14534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2747'. [ 456.991248][T14534] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2747'. [ 457.004553][T14537] FAULT_INJECTION: forcing a failure. [ 457.004553][T14537] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 457.032974][T14531] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2746'. [ 457.040210][T14537] CPU: 0 UID: 0 PID: 14537 Comm: syz.4.2748 Not tainted syzkaller #0 PREEMPT(full) [ 457.040238][T14537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 457.040249][T14537] Call Trace: [ 457.040257][T14537] [ 457.040265][T14537] dump_stack_lvl+0x189/0x250 [ 457.040292][T14537] ? __pfx____ratelimit+0x10/0x10 [ 457.040313][T14537] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.040335][T14537] ? __pfx__printk+0x10/0x10 [ 457.040363][T14537] ? fs_reclaim_acquire+0x7d/0x100 [ 457.040390][T14537] should_fail_ex+0x414/0x560 [ 457.040423][T14537] prepare_alloc_pages+0x213/0x610 [ 457.040449][T14537] __alloc_frozen_pages_noprof+0x123/0x370 [ 457.040473][T14537] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 457.040491][T14537] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.040513][T14537] ? exc_page_fault+0x9f/0xf0 [ 457.040533][T14537] ? policy_nodemask+0x27c/0x720 [ 457.040565][T14537] alloc_pages_mpol+0x232/0x4a0 [ 457.040603][T14537] alloc_pages_noprof+0xa9/0x190 [ 457.040633][T14537] bpf_prog_test_run_xdp+0xb8d/0x1000 [ 457.040670][T14537] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 457.040696][T14537] ? __fget_files+0x2a/0x420 [ 457.040718][T14537] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 457.040740][T14537] bpf_prog_test_run+0x2c4/0x340 [ 457.040771][T14537] __sys_bpf+0x581/0x870 [ 457.040798][T14537] ? __pfx___sys_bpf+0x10/0x10 [ 457.040837][T14537] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 457.040865][T14537] ? __pfx_ksys_write+0x10/0x10 [ 457.040887][T14537] ? rcu_is_watching+0x15/0xb0 [ 457.040914][T14537] __x64_sys_bpf+0x7c/0x90 [ 457.040936][T14537] do_syscall_64+0xfa/0x3b0 [ 457.040956][T14537] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.040975][T14537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.040994][T14537] ? clear_bhb_loop+0x60/0xb0 [ 457.041017][T14537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.041034][T14537] RIP: 0033:0x7f9c8438eba9 [ 457.041051][T14537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.041068][T14537] RSP: 002b:00007f9c851f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 457.041088][T14537] RAX: ffffffffffffffda RBX: 00007f9c845d5fa0 RCX: 00007f9c8438eba9 [ 457.041102][T14537] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 457.041114][T14537] RBP: 00007f9c851f2090 R08: 0000000000000000 R09: 0000000000000000 [ 457.041126][T14537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.041137][T14537] R13: 00007f9c845d6038 R14: 00007f9c845d5fa0 R15: 00007ffd7737d1a8 [ 457.041167][T14537] [ 458.978059][T14576] FAULT_INJECTION: forcing a failure. [ 458.978059][T14576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.017869][T14576] CPU: 1 UID: 0 PID: 14576 Comm: syz.4.2760 Not tainted syzkaller #0 PREEMPT(full) [ 459.017896][T14576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 459.017909][T14576] Call Trace: [ 459.017916][T14576] [ 459.017924][T14576] dump_stack_lvl+0x189/0x250 [ 459.017953][T14576] ? __pfx____ratelimit+0x10/0x10 [ 459.017974][T14576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.017997][T14576] ? __pfx__printk+0x10/0x10 [ 459.018056][T14576] should_fail_ex+0x414/0x560 [ 459.018090][T14576] _copy_to_user+0x31/0xb0 [ 459.018119][T14576] simple_read_from_buffer+0xe1/0x170 [ 459.018153][T14576] proc_fail_nth_read+0x1b3/0x220 [ 459.018180][T14576] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 459.018202][T14576] ? rw_verify_area+0x2a6/0x4d0 [ 459.018223][T14576] ? __lock_acquire+0xab9/0xd20 [ 459.018247][T14576] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 459.018270][T14576] vfs_read+0x200/0xa30 [ 459.018294][T14576] ? fdget_pos+0x247/0x320 [ 459.018316][T14576] ? __pfx___mutex_lock+0x10/0x10 [ 459.018339][T14576] ? __pfx_vfs_read+0x10/0x10 [ 459.018366][T14576] ? __fget_files+0x2a/0x420 [ 459.018389][T14576] ? __fget_files+0x3a0/0x420 [ 459.018405][T14576] ? __fget_files+0x2a/0x420 [ 459.018442][T14576] ksys_read+0x145/0x250 [ 459.018470][T14576] ? __pfx_ksys_read+0x10/0x10 [ 459.018493][T14576] ? rcu_is_watching+0x15/0xb0 [ 459.018518][T14576] ? do_syscall_64+0xbe/0x3b0 [ 459.018544][T14576] do_syscall_64+0xfa/0x3b0 [ 459.018565][T14576] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.018585][T14576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.018604][T14576] ? clear_bhb_loop+0x60/0xb0 [ 459.018627][T14576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.018644][T14576] RIP: 0033:0x7f9c8438d5bc [ 459.018662][T14576] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 459.018679][T14576] RSP: 002b:00007f9c851d1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 459.018700][T14576] RAX: ffffffffffffffda RBX: 00007f9c845d6090 RCX: 00007f9c8438d5bc [ 459.018715][T14576] RDX: 000000000000000f RSI: 00007f9c851d10a0 RDI: 0000000000000005 [ 459.018728][T14576] RBP: 00007f9c851d1090 R08: 0000000000000000 R09: 0000000000000000 [ 459.018740][T14576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.018752][T14576] R13: 00007f9c845d6128 R14: 00007f9c845d6090 R15: 00007ffd7737d1a8 [ 459.018784][T14576] [ 459.571138][T14590] _ÐZ`Ô€@S!: entered promiscuous mode [ 459.834653][T14590] wg0 speed is unknown, defaulting to 1000 [ 462.302602][T14633] netlink: 'syz.4.2776': attribute type 6 has an invalid length. [ 462.312656][T14633] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2776'. [ 462.426467][T14635] netlink: 'syz.0.2777': attribute type 21 has an invalid length. [ 462.460506][T14635] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2777'. [ 463.478182][T14647] delete_channel: no stack [ 463.755012][T14663] netlink: 'syz.0.2785': attribute type 21 has an invalid length. [ 463.772932][T14663] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2785'. [ 463.991311][T14676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.036754][T14676] netlink: 'syz.2.2790': attribute type 17 has an invalid length. [ 464.056592][T14675] pim6reg1: entered promiscuous mode [ 464.062321][T14675] pim6reg1: entered allmulticast mode [ 464.092415][T14670] netlink: 'syz.4.2789': attribute type 39 has an invalid length. [ 464.635395][T14684] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2792'. [ 465.192644][T14718] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2801'. [ 465.211254][T14712] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2801'. [ 465.223312][T14718] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2801'. [ 466.222591][T14750] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2815'. [ 466.251131][T14750] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2815'. [ 466.311610][T14758] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2818'. [ 467.521905][T14786] netlink: 'syz.3.2829': attribute type 27 has an invalid length. [ 467.556807][T14786] netlink: 'syz.3.2829': attribute type 4 has an invalid length. [ 467.579823][T14786] __nla_validate_parse: 2 callbacks suppressed [ 467.579843][T14786] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2829'. [ 468.396073][T14811] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2835'. [ 468.733026][T14821] netlink: 'syz.0.2838': attribute type 11 has an invalid length. [ 468.757209][T14821] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2838'. [ 469.357182][T14845] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2846'. [ 469.413117][T14849] netlink: 'syz.0.2848': attribute type 1 has an invalid length. [ 469.429114][T14849] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2848'. [ 469.476246][T14852] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2847'. [ 469.796172][T14862] netlink: 'syz.5.2853': attribute type 6 has an invalid length. [ 469.804191][T14862] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2853'. [ 469.898773][T14864] netlink: 56537 bytes leftover after parsing attributes in process `syz.0.2854'. [ 470.072114][T14870] FAULT_INJECTION: forcing a failure. [ 470.072114][T14870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.088391][T14870] CPU: 1 UID: 0 PID: 14870 Comm: syz.0.2857 Not tainted syzkaller #0 PREEMPT(full) [ 470.088418][T14870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 470.088439][T14870] Call Trace: [ 470.088447][T14870] [ 470.088455][T14870] dump_stack_lvl+0x189/0x250 [ 470.088483][T14870] ? __pfx____ratelimit+0x10/0x10 [ 470.088504][T14870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 470.088527][T14870] ? __pfx__printk+0x10/0x10 [ 470.088553][T14870] ? __might_fault+0xb0/0x130 [ 470.088593][T14870] should_fail_ex+0x414/0x560 [ 470.088627][T14870] _copy_from_user+0x2d/0xb0 [ 470.088653][T14870] __sys_bpf+0x1ed/0x870 [ 470.088679][T14870] ? __pfx___sys_bpf+0x10/0x10 [ 470.088721][T14870] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 470.088750][T14870] ? __pfx_ksys_write+0x10/0x10 [ 470.088773][T14870] ? rcu_is_watching+0x15/0xb0 [ 470.088800][T14870] __x64_sys_bpf+0x7c/0x90 [ 470.088824][T14870] do_syscall_64+0xfa/0x3b0 [ 470.088844][T14870] ? lockdep_hardirqs_on+0x9c/0x150 [ 470.088864][T14870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.088883][T14870] ? clear_bhb_loop+0x60/0xb0 [ 470.088906][T14870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.088925][T14870] RIP: 0033:0x7fe603f8eba9 [ 470.088942][T14870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.088959][T14870] RSP: 002b:00007fe6021ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 470.088979][T14870] RAX: ffffffffffffffda RBX: 00007fe6041d5fa0 RCX: 00007fe603f8eba9 [ 470.088994][T14870] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000004 [ 470.089007][T14870] RBP: 00007fe6021ee090 R08: 0000000000000000 R09: 0000000000000000 [ 470.089019][T14870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.089032][T14870] R13: 00007fe6041d6038 R14: 00007fe6041d5fa0 R15: 00007fffc77c1bb8 [ 470.089063][T14870] [ 470.527356][T14884] FAULT_INJECTION: forcing a failure. [ 470.527356][T14884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.564037][T14884] CPU: 0 UID: 0 PID: 14884 Comm: syz.2.2862 Not tainted syzkaller #0 PREEMPT(full) [ 470.564066][T14884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 470.564078][T14884] Call Trace: [ 470.564086][T14884] [ 470.564095][T14884] dump_stack_lvl+0x189/0x250 [ 470.564123][T14884] ? __pfx____ratelimit+0x10/0x10 [ 470.564144][T14884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 470.564167][T14884] ? __pfx__printk+0x10/0x10 [ 470.564207][T14884] should_fail_ex+0x414/0x560 [ 470.564241][T14884] _copy_from_iter+0x1de/0x1790 [ 470.564280][T14884] ? __pfx__copy_from_iter+0x10/0x10 [ 470.564305][T14884] ? __build_skb_around+0x257/0x3e0 [ 470.564330][T14884] ? netlink_sendmsg+0x642/0xb30 [ 470.564350][T14884] ? skb_put+0x11b/0x210 [ 470.564381][T14884] netlink_sendmsg+0x6b2/0xb30 [ 470.564410][T14884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 470.564434][T14884] ? aa_sock_msg_perm+0xf1/0x1d0 [ 470.564457][T14884] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 470.564479][T14884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 470.564503][T14884] __sock_sendmsg+0x219/0x270 [ 470.564537][T14884] ____sys_sendmsg+0x505/0x830 [ 470.564568][T14884] ? __pfx_____sys_sendmsg+0x10/0x10 [ 470.564603][T14884] ? import_iovec+0x74/0xa0 [ 470.564633][T14884] ___sys_sendmsg+0x21f/0x2a0 [ 470.564661][T14884] ? __pfx____sys_sendmsg+0x10/0x10 [ 470.564724][T14884] ? __fget_files+0x2a/0x420 [ 470.564742][T14884] ? __fget_files+0x3a0/0x420 [ 470.564772][T14884] __x64_sys_sendmsg+0x19b/0x260 [ 470.564795][T14884] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 470.564820][T14884] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 470.564864][T14884] ? do_syscall_64+0xbe/0x3b0 [ 470.564890][T14884] do_syscall_64+0xfa/0x3b0 [ 470.564913][T14884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.564932][T14884] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 470.564952][T14884] ? clear_bhb_loop+0x60/0xb0 [ 470.564976][T14884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.564995][T14884] RIP: 0033:0x7f5ead98eba9 [ 470.565013][T14884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.565031][T14884] RSP: 002b:00007f5eae7f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 470.565052][T14884] RAX: ffffffffffffffda RBX: 00007f5eadbd5fa0 RCX: 00007f5ead98eba9 [ 470.565067][T14884] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 470.565079][T14884] RBP: 00007f5eae7f3090 R08: 0000000000000000 R09: 0000000000000000 [ 470.565091][T14884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.565103][T14884] R13: 00007f5eadbd6038 R14: 00007f5eadbd5fa0 R15: 00007ffdce4719b8 [ 470.565134][T14884] [ 470.971019][T14882] netlink: 'syz.0.2860': attribute type 21 has an invalid length. [ 470.993062][T14882] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2860'. [ 471.037411][T14882] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2860'. [ 471.308625][T14906] FAULT_INJECTION: forcing a failure. [ 471.308625][T14906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.355517][T14906] CPU: 1 UID: 0 PID: 14906 Comm: syz.0.2869 Not tainted syzkaller #0 PREEMPT(full) [ 471.355545][T14906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 471.355557][T14906] Call Trace: [ 471.355566][T14906] [ 471.355576][T14906] dump_stack_lvl+0x189/0x250 [ 471.355607][T14906] ? __pfx____ratelimit+0x10/0x10 [ 471.355633][T14906] ? __pfx_dump_stack_lvl+0x10/0x10 [ 471.355660][T14906] ? __pfx__printk+0x10/0x10 [ 471.355693][T14906] ? __might_fault+0xb0/0x130 [ 471.355731][T14906] ? __might_fault+0xb0/0x130 [ 471.355777][T14906] should_fail_ex+0x414/0x560 [ 471.355826][T14906] _copy_from_iter+0x1de/0x1790 [ 471.355875][T14906] ? rcu_is_watching+0x15/0xb0 [ 471.355902][T14906] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 471.355937][T14906] ? __pfx__copy_from_iter+0x10/0x10 [ 471.355972][T14906] ? __build_skb_around+0x257/0x3e0 [ 471.356008][T14906] ? netlink_sendmsg+0x642/0xb30 [ 471.356028][T14906] ? skb_put+0x11b/0x210 [ 471.356071][T14906] netlink_sendmsg+0x6b2/0xb30 [ 471.356124][T14906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.356160][T14906] ? aa_sock_msg_perm+0xf1/0x1d0 [ 471.356189][T14906] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 471.356212][T14906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.356241][T14906] __sock_sendmsg+0x219/0x270 [ 471.356282][T14906] ____sys_sendmsg+0x505/0x830 [ 471.356327][T14906] ? __pfx_____sys_sendmsg+0x10/0x10 [ 471.356383][T14906] ? import_iovec+0x74/0xa0 [ 471.356421][T14906] ___sys_sendmsg+0x21f/0x2a0 [ 471.356455][T14906] ? __pfx____sys_sendmsg+0x10/0x10 [ 471.356543][T14906] ? __fget_files+0x2a/0x420 [ 471.356600][T14906] ? __fget_files+0x2a/0x420 [ 471.356616][T14906] ? __fget_files+0x3a0/0x420 [ 471.356665][T14906] __x64_sys_sendmsg+0x19b/0x260 [ 471.356703][T14906] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 471.356760][T14906] ? __pfx_ksys_write+0x10/0x10 [ 471.356783][T14906] ? rcu_is_watching+0x15/0xb0 [ 471.356819][T14906] ? do_syscall_64+0xbe/0x3b0 [ 471.356855][T14906] do_syscall_64+0xfa/0x3b0 [ 471.356876][T14906] ? lockdep_hardirqs_on+0x9c/0x150 [ 471.356898][T14906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.356936][T14906] ? clear_bhb_loop+0x60/0xb0 [ 471.356968][T14906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.356987][T14906] RIP: 0033:0x7fe603f8eba9 [ 471.357008][T14906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.357025][T14906] RSP: 002b:00007fe6021ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.357045][T14906] RAX: ffffffffffffffda RBX: 00007fe6041d5fa0 RCX: 00007fe603f8eba9 [ 471.357065][T14906] RDX: 000000000000c004 RSI: 0000200000000200 RDI: 0000000000000003 [ 471.357078][T14906] RBP: 00007fe6021ee090 R08: 0000000000000000 R09: 0000000000000000 [ 471.357090][T14906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.357101][T14906] R13: 00007fe6041d6038 R14: 00007fe6041d5fa0 R15: 00007fffc77c1bb8 [ 471.357162][T14906] [ 473.293582][T14916] __nla_validate_parse: 1 callbacks suppressed [ 473.293601][T14916] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2873'. [ 473.318951][T14916] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2873'. [ 473.333065][T14916] netlink: 'syz.3.2873': attribute type 4 has an invalid length. [ 473.342488][T14917] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 473.607459][T14939] netlink: 'syz.4.2879': attribute type 21 has an invalid length. [ 473.658599][T14939] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2879'. [ 473.693646][T14939] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2879'. [ 474.297961][T14970] €Â: renamed from hsr0 (while UP) [ 474.317967][T14967] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2889'. [ 474.358976][T14970] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2890'. [ 474.562715][T14977] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2892'. [ 474.574055][T14976] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2892'. [ 474.639511][T14983] netlink: 'syz.4.2894': attribute type 4 has an invalid length. [ 474.648723][T14983] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2894'. [ 474.847043][T14986] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2895'. [ 474.880509][T14988] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 474.950333][T14990] FAULT_INJECTION: forcing a failure. [ 474.950333][T14990] name failslab, interval 1, probability 0, space 0, times 0 [ 475.009302][T14990] CPU: 1 UID: 0 PID: 14990 Comm: syz.0.2897 Not tainted syzkaller #0 PREEMPT(full) [ 475.009330][T14990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 475.009343][T14990] Call Trace: [ 475.009354][T14990] [ 475.009367][T14990] dump_stack_lvl+0x189/0x250 [ 475.009404][T14990] ? __pfx____ratelimit+0x10/0x10 [ 475.009434][T14990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.009467][T14990] ? __pfx__printk+0x10/0x10 [ 475.009571][T14990] should_fail_ex+0x414/0x560 [ 475.009634][T14990] should_failslab+0xa8/0x100 [ 475.009678][T14990] kmem_cache_alloc_noprof+0x73/0x3c0 [ 475.009709][T14990] ? skb_clone+0x212/0x3a0 [ 475.009762][T14990] skb_clone+0x212/0x3a0 [ 475.009814][T14990] __netlink_deliver_tap+0x404/0x850 [ 475.009901][T14990] ? netlink_deliver_tap+0x2e/0x1b0 [ 475.009939][T14990] netlink_deliver_tap+0x19c/0x1b0 [ 475.009982][T14990] netlink_unicast+0x7fa/0x9e0 [ 475.010054][T14990] ? __pfx_netlink_unicast+0x10/0x10 [ 475.010093][T14990] ? netlink_sendmsg+0x642/0xb30 [ 475.010112][T14990] ? skb_put+0x11b/0x210 [ 475.010166][T14990] netlink_sendmsg+0x805/0xb30 [ 475.010241][T14990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.010280][T14990] ? trace_call_bpf+0xb7/0x850 [ 475.010301][T14990] ? aa_sock_msg_perm+0xf1/0x1d0 [ 475.010338][T14990] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 475.010363][T14990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.010398][T14990] __sock_sendmsg+0x219/0x270 [ 475.010453][T14990] sock_write_iter+0x258/0x330 [ 475.010504][T14990] ? __pfx_sock_write_iter+0x10/0x10 [ 475.010594][T14990] ? bpf_lsm_file_permission+0x9/0x20 [ 475.010618][T14990] ? security_file_permission+0x75/0x290 [ 475.010692][T14990] vfs_write+0x5c9/0xb30 [ 475.010751][T14990] ? __pfx_sock_write_iter+0x10/0x10 [ 475.010793][T14990] ? __pfx_vfs_write+0x10/0x10 [ 475.010880][T14990] ? __fget_files+0x2a/0x420 [ 475.010950][T14990] ksys_write+0x145/0x250 [ 475.011004][T14990] ? __pfx_ksys_write+0x10/0x10 [ 475.011028][T14990] ? rcu_is_watching+0x15/0xb0 [ 475.011080][T14990] ? do_syscall_64+0xbe/0x3b0 [ 475.011125][T14990] do_syscall_64+0xfa/0x3b0 [ 475.011147][T14990] ? lockdep_hardirqs_on+0x9c/0x150 [ 475.011172][T14990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.011195][T14990] ? clear_bhb_loop+0x60/0xb0 [ 475.011236][T14990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.011257][T14990] RIP: 0033:0x7fe603f8eba9 [ 475.011281][T14990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.011300][T14990] RSP: 002b:00007fe6021ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 475.011322][T14990] RAX: ffffffffffffffda RBX: 00007fe6041d5fa0 RCX: 00007fe603f8eba9 [ 475.011337][T14990] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000005 [ 475.011350][T14990] RBP: 00007fe6021ee090 R08: 0000000000000000 R09: 0000000000000000 [ 475.011363][T14990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.011375][T14990] R13: 00007fe6041d6038 R14: 00007fe6041d5fa0 R15: 00007fffc77c1bb8 [ 475.011476][T14990] [ 475.601288][T15001] FAULT_INJECTION: forcing a failure. [ 475.601288][T15001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.678568][T15001] CPU: 1 UID: 0 PID: 15001 Comm: syz.2.2898 Not tainted syzkaller #0 PREEMPT(full) [ 475.678596][T15001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 475.678608][T15001] Call Trace: [ 475.678619][T15001] [ 475.678631][T15001] dump_stack_lvl+0x189/0x250 [ 475.678714][T15001] ? __pfx____ratelimit+0x10/0x10 [ 475.678743][T15001] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.678774][T15001] ? __pfx__printk+0x10/0x10 [ 475.678815][T15001] ? __might_fault+0xb0/0x130 [ 475.678858][T15001] ? __might_fault+0xb0/0x130 [ 475.678918][T15001] should_fail_ex+0x414/0x560 [ 475.678981][T15001] _copy_from_iter+0x1de/0x1790 [ 475.679050][T15001] ? rcu_is_watching+0x15/0xb0 [ 475.679084][T15001] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 475.679126][T15001] ? __pfx__copy_from_iter+0x10/0x10 [ 475.679170][T15001] ? __build_skb_around+0x257/0x3e0 [ 475.679217][T15001] ? netlink_sendmsg+0x642/0xb30 [ 475.679237][T15001] ? skb_put+0x11b/0x210 [ 475.679324][T15001] netlink_sendmsg+0x6b2/0xb30 [ 475.679400][T15001] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.679439][T15001] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 475.679463][T15001] ? aa_sock_msg_perm+0xf1/0x1d0 [ 475.679501][T15001] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 475.679527][T15001] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.679562][T15001] __sock_sendmsg+0x219/0x270 [ 475.679618][T15001] ____sys_sendmsg+0x505/0x830 [ 475.679688][T15001] ? __pfx_____sys_sendmsg+0x10/0x10 [ 475.679768][T15001] ? import_iovec+0x74/0xa0 [ 475.679821][T15001] ___sys_sendmsg+0x21f/0x2a0 [ 475.679868][T15001] ? __pfx____sys_sendmsg+0x10/0x10 [ 475.679999][T15001] ? __fget_files+0x2a/0x420 [ 475.680083][T15001] ? __fget_files+0x2a/0x420 [ 475.680103][T15001] ? __fget_files+0x3a0/0x420 [ 475.680178][T15001] __x64_sys_sendmsg+0x19b/0x260 [ 475.680225][T15001] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 475.680305][T15001] ? __pfx_ksys_write+0x10/0x10 [ 475.680329][T15001] ? rcu_is_watching+0x15/0xb0 [ 475.680380][T15001] ? do_syscall_64+0xbe/0x3b0 [ 475.680426][T15001] do_syscall_64+0xfa/0x3b0 [ 475.680448][T15001] ? lockdep_hardirqs_on+0x9c/0x150 [ 475.680474][T15001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.680497][T15001] ? clear_bhb_loop+0x60/0xb0 [ 475.680539][T15001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.680560][T15001] RIP: 0033:0x7f5ead98eba9 [ 475.680584][T15001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.680602][T15001] RSP: 002b:00007f5eae7f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 475.680622][T15001] RAX: ffffffffffffffda RBX: 00007f5eadbd5fa0 RCX: 00007f5ead98eba9 [ 475.680638][T15001] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 0000000000000005 [ 475.680650][T15001] RBP: 00007f5eae7f3090 R08: 0000000000000000 R09: 0000000000000000 [ 475.680668][T15001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.680680][T15001] R13: 00007f5eadbd6038 R14: 00007f5eadbd5fa0 R15: 00007ffdce4719b8 [ 475.680765][T15001] [ 476.294217][T15019] tun0: tun_chr_ioctl cmd 1074025677 [ 476.299726][T15019] tun0: linktype set to 774 [ 476.795645][T15027] netlink: 'syz.0.2906': attribute type 1 has an invalid length. [ 476.842310][T15027] netlink: 'syz.0.2906': attribute type 4 has an invalid length. [ 478.159660][ T5187] Bluetooth: hci5: command 0x0406 tx timeout [ 478.834040][T15061] __nla_validate_parse: 7 callbacks suppressed [ 478.834072][T15061] netlink: 56537 bytes leftover after parsing attributes in process `syz.5.2916'. [ 478.848288][ T5187] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 478.867105][ T5187] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 478.872607][T15051] netlink: 'syz.0.2914': attribute type 2 has an invalid length. [ 478.894485][ T5187] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 478.903281][T15051] netlink: 'syz.0.2914': attribute type 1 has an invalid length. [ 478.916163][ T5187] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 478.925318][ T5187] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 478.935214][T15051] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2914'. [ 478.950052][T15051] block nbd0: not configured, cannot reconfigure [ 479.202787][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.313226][T15079] FAULT_INJECTION: forcing a failure. [ 479.313226][T15079] name failslab, interval 1, probability 0, space 0, times 0 [ 479.333705][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.344793][T15079] CPU: 1 UID: 0 PID: 15079 Comm: syz.2.2921 Not tainted syzkaller #0 PREEMPT(full) [ 479.344822][T15079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 479.344834][T15079] Call Trace: [ 479.344842][T15079] [ 479.344850][T15079] dump_stack_lvl+0x189/0x250 [ 479.344878][T15079] ? __pfx____ratelimit+0x10/0x10 [ 479.344899][T15079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.344919][T15079] ? __pfx__printk+0x10/0x10 [ 479.344948][T15079] ? __pfx___might_resched+0x10/0x10 [ 479.344963][T15079] ? fs_reclaim_acquire+0x7d/0x100 [ 479.344986][T15079] should_fail_ex+0x414/0x560 [ 479.345017][T15079] should_failslab+0xa8/0x100 [ 479.345044][T15079] __kmalloc_noprof+0xcb/0x4f0 [ 479.345068][T15079] ? security_sk_alloc+0x52/0x390 [ 479.345093][T15079] security_sk_alloc+0x52/0x390 [ 479.345119][T15079] sk_prot_alloc+0x101/0x220 [ 479.345140][T15079] ? sk_alloc+0x24/0x370 [ 479.345165][T15079] sk_alloc+0x3a/0x370 [ 479.345186][T15079] ? bpf_ctx_init+0x167/0x1d0 [ 479.345209][T15079] bpf_prog_test_run_skb+0x2ed/0x1560 [ 479.345227][T15079] ? __fget_files+0x2a/0x420 [ 479.345257][T15079] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 479.345278][T15079] bpf_prog_test_run+0x2c4/0x340 [ 479.345308][T15079] __sys_bpf+0x581/0x870 [ 479.345335][T15079] ? __pfx___sys_bpf+0x10/0x10 [ 479.345376][T15079] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 479.345405][T15079] ? __pfx_ksys_write+0x10/0x10 [ 479.345427][T15079] ? rcu_is_watching+0x15/0xb0 [ 479.345453][T15079] __x64_sys_bpf+0x7c/0x90 [ 479.345480][T15079] do_syscall_64+0xfa/0x3b0 [ 479.345500][T15079] ? lockdep_hardirqs_on+0x9c/0x150 [ 479.345520][T15079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.345539][T15079] ? clear_bhb_loop+0x60/0xb0 [ 479.345562][T15079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.345579][T15079] RIP: 0033:0x7f5ead98eba9 [ 479.345596][T15079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.345612][T15079] RSP: 002b:00007f5eae7f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 479.345632][T15079] RAX: ffffffffffffffda RBX: 00007f5eadbd5fa0 RCX: 00007f5ead98eba9 [ 479.345646][T15079] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 479.345659][T15079] RBP: 00007f5eae7f3090 R08: 0000000000000000 R09: 0000000000000000 [ 479.345677][T15079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.345688][T15079] R13: 00007f5eadbd6038 R14: 00007f5eadbd5fa0 R15: 00007ffdce4719b8 [ 479.345718][T15079] [ 479.463498][T15081] netlink: 'syz.0.2922': attribute type 10 has an invalid length. [ 479.686272][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.741954][T15081] batman_adv: batadv0: Adding interface: netdevsim0 [ 479.749801][T15081] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.783208][T15081] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 479.805409][T15093] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2925'. [ 479.815203][T15062] wg0 speed is unknown, defaulting to 1000 [ 479.850802][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.336144][T15105] netlink: 56537 bytes leftover after parsing attributes in process `syz.0.2929'. [ 480.406091][T15062] chnl_net:caif_netlink_parms(): no params data found [ 481.030621][ T5187] Bluetooth: hci2: command tx timeout [ 481.045000][T15120] netlink: 'syz.2.2933': attribute type 10 has an invalid length. [ 481.165909][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.177037][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.189450][ T49] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 481.199362][ T49] bond0 (unregistering): Released all slaves [ 481.227290][T15120] bond0: (slave bond_slave_0): Releasing backup interface [ 481.389359][T15131] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2936'. [ 481.404473][T15117] wg0 speed is unknown, defaulting to 1000 [ 481.543630][T15062] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.551807][T15062] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.560109][T15062] bridge_slave_0: entered allmulticast mode [ 481.567892][T15062] bridge_slave_0: entered promiscuous mode [ 481.594632][T15062] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.601869][T15062] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.610129][T15062] bridge_slave_1: entered allmulticast mode [ 481.617946][T15062] bridge_slave_1: entered promiscuous mode [ 481.686810][T15136] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2938'. [ 481.780691][T15062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.849321][T15062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.970478][T15144] netlink: 8180 bytes leftover after parsing attributes in process `syz.3.2941'. [ 481.980598][T15144] openvswitch: netlink: Flow key attr not present in new flow. [ 481.994423][T15142] netlink: 'syz.5.2940': attribute type 13 has an invalid length. [ 482.003743][T15142] netlink: 24859 bytes leftover after parsing attributes in process `syz.5.2940'. [ 482.043099][T15062] team0: Port device team_slave_0 added [ 482.065951][T15146] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2941'. [ 482.081998][ T49] hsr_slave_0: left promiscuous mode [ 482.106838][ T49] hsr_slave_1: left promiscuous mode [ 482.115523][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.123702][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.141363][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.152215][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.177700][ T49] veth1_macvtap: left promiscuous mode [ 482.183667][ T49] veth0_macvtap: left promiscuous mode [ 482.193865][ T49] veth1_vlan: left promiscuous mode [ 482.836811][ T49] team0 (unregistering): Port device team_slave_1 removed [ 482.880172][ T49] team0 (unregistering): Port device C removed [ 483.112762][ T5187] Bluetooth: hci2: command tx timeout [ 483.266976][T15062] team0: Port device team_slave_1 added [ 483.412100][T15062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.422016][T15062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.467209][T15062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.495630][T15062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.507291][T15062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.552013][T15062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.580229][T15167] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2948'. [ 483.726956][T15062] hsr_slave_0: entered promiscuous mode [ 483.736441][T15062] hsr_slave_1: entered promiscuous mode [ 483.846314][T15180] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2951'. [ 484.381253][T15190] netlink: 8180 bytes leftover after parsing attributes in process `syz.2.2956'. [ 484.392103][T15190] openvswitch: netlink: Flow key attr not present in new flow. [ 484.480658][T15195] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2956'. [ 484.574394][T15197] netlink: 'syz.3.2959': attribute type 2 has an invalid length. [ 484.582542][T15197] netlink: 'syz.3.2959': attribute type 2 has an invalid length. [ 484.781598][T15207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2962'. [ 484.803732][T15207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2962'. [ 485.070578][T15062] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 485.159343][T15062] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 485.186539][T15062] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 485.198550][ T5187] Bluetooth: hci2: command tx timeout [ 485.205426][T15062] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 485.289978][T15062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.370024][T15062] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.412611][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.419817][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.444280][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.451503][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.948787][T15234] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2970'. [ 486.005538][T15236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2971'. [ 486.424882][T15062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.669363][T15249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.793781][T15252] netlink: 8180 bytes leftover after parsing attributes in process `syz.3.2976'. [ 486.825975][T15252] openvswitch: netlink: Flow key attr not present in new flow. [ 486.937748][T15258] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2976'. [ 486.984932][T15261] netlink: 'syz.5.2978': attribute type 6 has an invalid length. [ 487.002849][T15261] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2978'. [ 487.063205][T15062] veth0_vlan: entered promiscuous mode [ 487.096949][T15062] veth1_vlan: entered promiscuous mode [ 487.180777][T15062] veth0_macvtap: entered promiscuous mode [ 487.201141][T15062] veth1_macvtap: entered promiscuous mode [ 487.245726][T15062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.270553][T15062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.277886][ T5187] Bluetooth: hci2: command tx timeout [ 487.334308][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.351668][T15269] netlink: 'syz.0.2981': attribute type 8 has an invalid length. [ 487.380358][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.411558][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.457974][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.608036][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.623275][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.656062][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.665438][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.057261][T15293] FAULT_INJECTION: forcing a failure. [ 488.057261][T15293] name failslab, interval 1, probability 0, space 0, times 0 [ 488.071854][T15293] CPU: 0 UID: 0 PID: 15293 Comm: syz.4.2988 Not tainted syzkaller #0 PREEMPT(full) [ 488.071878][T15293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 488.071889][T15293] Call Trace: [ 488.071896][T15293] [ 488.071903][T15293] dump_stack_lvl+0x189/0x250 [ 488.071929][T15293] ? __pfx____ratelimit+0x10/0x10 [ 488.071947][T15293] ? __pfx_dump_stack_lvl+0x10/0x10 [ 488.071967][T15293] ? __pfx__printk+0x10/0x10 [ 488.071995][T15293] ? __pfx___might_resched+0x10/0x10 [ 488.072015][T15293] should_fail_ex+0x414/0x560 [ 488.072044][T15293] should_failslab+0xa8/0x100 [ 488.072070][T15293] __kmalloc_cache_noprof+0x70/0x3d0 [ 488.072092][T15293] ? alloc_perf_context+0x4e/0x220 [ 488.072110][T15293] ? apparmor_capable+0x137/0x1b0 [ 488.072134][T15293] alloc_perf_context+0x4e/0x220 [ 488.072154][T15293] find_get_context+0x82/0x4f0 [ 488.072180][T15293] __se_sys_perf_event_open+0xb30/0x1d70 [ 488.072211][T15293] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 488.072242][T15293] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 488.072269][T15293] ? __pfx_ksys_write+0x10/0x10 [ 488.072289][T15293] ? rcu_is_watching+0x15/0xb0 [ 488.072310][T15293] ? do_syscall_64+0xbe/0x3b0 [ 488.072327][T15293] ? __x64_sys_perf_event_open+0x20/0xc0 [ 488.072349][T15293] do_syscall_64+0xfa/0x3b0 [ 488.072366][T15293] ? lockdep_hardirqs_on+0x9c/0x150 [ 488.072383][T15293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.072399][T15293] ? clear_bhb_loop+0x60/0xb0 [ 488.072419][T15293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.072435][T15293] RIP: 0033:0x7f74e698eba9 [ 488.072449][T15293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.072465][T15293] RSP: 002b:00007f74e7838038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 488.072483][T15293] RAX: ffffffffffffffda RBX: 00007f74e6bd5fa0 RCX: 00007f74e698eba9 [ 488.072495][T15293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 488.072506][T15293] RBP: 00007f74e7838090 R08: 0000000000000000 R09: 0000000000000000 [ 488.072516][T15293] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 488.072527][T15293] R13: 00007f74e6bd6038 R14: 00007f74e6bd5fa0 R15: 00007ffedbe29098 [ 488.072555][T15293] [ 488.584601][ T5875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 488.597304][ T5875] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 488.605743][ T5875] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 488.615096][ T5875] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 488.623305][ T5875] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 488.710038][T15299] netlink: 'syz.2.2991': attribute type 8 has an invalid length. [ 488.817043][T15307] delete_channel: no stack [ 488.822398][T15307] delete_channel: no stack [ 488.834436][T15307] FAULT_INJECTION: forcing a failure. [ 488.834436][T15307] name failslab, interval 1, probability 0, space 0, times 0 [ 488.848757][T15307] CPU: 1 UID: 0 PID: 15307 Comm: syz.2.2994 Not tainted syzkaller #0 PREEMPT(full) [ 488.848784][T15307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 488.848798][T15307] Call Trace: [ 488.848806][T15307] [ 488.848814][T15307] dump_stack_lvl+0x189/0x250 [ 488.848843][T15307] ? __pfx____ratelimit+0x10/0x10 [ 488.848865][T15307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 488.848889][T15307] ? __pfx__printk+0x10/0x10 [ 488.848919][T15307] ? __pfx___might_resched+0x10/0x10 [ 488.848938][T15307] ? fs_reclaim_acquire+0x7d/0x100 [ 488.848963][T15307] should_fail_ex+0x414/0x560 [ 488.848998][T15307] should_failslab+0xa8/0x100 [ 488.849029][T15307] __kmalloc_noprof+0xcb/0x4f0 [ 488.849054][T15307] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 488.849090][T15307] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 488.849126][T15307] genl_family_rcv_msg_doit+0xb8/0x300 [ 488.849161][T15307] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 488.849193][T15307] ? __pfx_genl_get_cmd+0x10/0x10 [ 488.849217][T15307] ? __pfx_ovs_meter_cmd_get+0x10/0x10 [ 488.849244][T15307] ? perf_trace_run_bpf_submit+0xee/0x170 [ 488.849273][T15307] genl_rcv_msg+0x60e/0x790 [ 488.849312][T15307] ? __pfx_genl_rcv_msg+0x10/0x10 [ 488.849338][T15307] ? __pfx_ovs_meter_cmd_get+0x10/0x10 [ 488.849369][T15307] netlink_rcv_skb+0x208/0x470 [ 488.849387][T15307] ? __lock_acquire+0xab9/0xd20 [ 488.849414][T15307] ? __pfx_genl_rcv_msg+0x10/0x10 [ 488.849443][T15307] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 488.849485][T15307] ? down_read+0x1ad/0x2e0 [ 488.849518][T15307] genl_rcv+0x28/0x40 [ 488.849541][T15307] netlink_unicast+0x82c/0x9e0 [ 488.849570][T15307] ? __pfx_netlink_unicast+0x10/0x10 [ 488.849590][T15307] ? __sanitizer_cov_trace_pc+0x4/0x70 [ 488.849627][T15307] netlink_sendmsg+0x805/0xb30 [ 488.849660][T15307] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.849690][T15307] ? aa_sock_msg_perm+0xf1/0x1d0 [ 488.849716][T15307] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 488.849738][T15307] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.849760][T15307] __sock_sendmsg+0x219/0x270 [ 488.849793][T15307] ____sys_sendmsg+0x505/0x830 [ 488.849825][T15307] ? __pfx_____sys_sendmsg+0x10/0x10 [ 488.849860][T15307] ? import_iovec+0x74/0xa0 [ 488.849891][T15307] ___sys_sendmsg+0x21f/0x2a0 [ 488.849918][T15307] ? __pfx____sys_sendmsg+0x10/0x10 [ 488.849984][T15307] ? __fget_files+0x2a/0x420 [ 488.850001][T15307] ? __fget_files+0x3a0/0x420 [ 488.850031][T15307] __x64_sys_sendmsg+0x19b/0x260 [ 488.850060][T15307] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 488.850113][T15307] do_syscall_64+0xfa/0x3b0 [ 488.850137][T15307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.850155][T15307] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 488.850176][T15307] ? clear_bhb_loop+0x60/0xb0 [ 488.850199][T15307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.850219][T15307] RIP: 0033:0x7f5ead98eba9 [ 488.850237][T15307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.850255][T15307] RSP: 002b:00007f5eae7f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.850277][T15307] RAX: ffffffffffffffda RBX: 00007f5eadbd5fa0 RCX: 00007f5ead98eba9 [ 488.850292][T15307] RDX: 0000000010049014 RSI: 0000200000000040 RDI: 000000000000000c [ 488.850305][T15307] RBP: 00007f5eae7f3090 R08: 0000000000000000 R09: 0000000000000000 [ 488.850317][T15307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.850329][T15307] R13: 00007f5eadbd6038 R14: 00007f5eadbd5fa0 R15: 00007ffdce4719b8 [ 488.850363][T15307] [ 489.215769][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.376151][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.402599][T15295] wg0 speed is unknown, defaulting to 1000 [ 489.495474][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.661761][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.724853][T15327] netlink: 'syz.0.3000': attribute type 10 has an invalid length. [ 489.766941][T15327] bond0: (slave bond_slave_0): Releasing backup interface [ 489.794054][T15327] bond_slave_0: left promiscuous mode [ 489.817673][T15329] netlink: 'syz.5.3001': attribute type 10 has an invalid length. [ 489.867039][T15329] bond0: (slave bond_slave_0): Releasing backup interface [ 489.949788][T15333] __nla_validate_parse: 3 callbacks suppressed [ 489.949824][T15333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3003'. [ 489.974676][T15333] netlink: 'syz.0.3003': attribute type 8 has an invalid length. [ 490.090795][T15337] netlink: 'syz.5.3004': attribute type 10 has an invalid length. [ 490.173040][T15295] chnl_net:caif_netlink_parms(): no params data found [ 490.217765][T15341] FAULT_INJECTION: forcing a failure. [ 490.217765][T15341] name failslab, interval 1, probability 0, space 0, times 0 [ 490.271238][T15341] CPU: 1 UID: 0 PID: 15341 Comm: syz.0.3006 Not tainted syzkaller #0 PREEMPT(full) [ 490.271265][T15341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 490.271277][T15341] Call Trace: [ 490.271285][T15341] [ 490.271294][T15341] dump_stack_lvl+0x189/0x250 [ 490.271327][T15341] ? __pfx____ratelimit+0x10/0x10 [ 490.271351][T15341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.271375][T15341] ? __pfx__printk+0x10/0x10 [ 490.271413][T15341] ? __pfx___might_resched+0x10/0x10 [ 490.271448][T15341] should_fail_ex+0x414/0x560 [ 490.271492][T15341] should_failslab+0xa8/0x100 [ 490.271528][T15341] kmem_cache_alloc_noprof+0x73/0x3c0 [ 490.271553][T15341] ? getname_flags+0xb8/0x540 [ 490.271587][T15341] getname_flags+0xb8/0x540 [ 490.271607][T15341] ? _copy_from_user+0x94/0xb0 [ 490.271640][T15341] user_path_at+0x24/0x60 [ 490.271666][T15341] __se_sys_mount+0x2d3/0x410 [ 490.271698][T15341] ? __pfx___se_sys_mount+0x10/0x10 [ 490.271733][T15341] ? __x64_sys_mount+0x20/0xc0 [ 490.271759][T15341] do_syscall_64+0xfa/0x3b0 [ 490.271785][T15341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.271801][T15341] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 490.271819][T15341] ? clear_bhb_loop+0x60/0xb0 [ 490.271847][T15341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.271866][T15341] RIP: 0033:0x7fe603f8eba9 [ 490.271887][T15341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.271902][T15341] RSP: 002b:00007fe6021ee038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 490.271922][T15341] RAX: ffffffffffffffda RBX: 00007fe6041d5fa0 RCX: 00007fe603f8eba9 [ 490.271937][T15341] RDX: 0000200000000b00 RSI: 0000200000000040 RDI: 0000000000000000 [ 490.271950][T15341] RBP: 00007fe6021ee090 R08: 0000000000000000 R09: 0000000000000000 [ 490.271962][T15341] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 490.271973][T15341] R13: 00007fe6041d6038 R14: 00007fe6041d5fa0 R15: 00007fffc77c1bb8 [ 490.272032][T15341] [ 490.710290][ T5875] Bluetooth: hci3: command tx timeout [ 490.813925][T15358] netlink: 'syz.2.3011': attribute type 2 has an invalid length. [ 490.823715][T15358] netlink: 'syz.2.3011': attribute type 2 has an invalid length. [ 490.934467][T15364] netlink: 'syz.2.3012': attribute type 10 has an invalid length. [ 491.268925][T15369] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3013'. [ 491.279595][T15369] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3013'. [ 491.289036][T15369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3013'. [ 491.466509][ T13] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.479432][ T13] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.493924][ T13] .` (unregistering): (slave macvlan0): Releasing backup interface [ 491.505925][ T13] .` (unregistering): Released all slaves [ 491.907712][T15295] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.937137][T15295] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.948827][T15295] bridge_slave_0: entered allmulticast mode [ 491.959009][T15295] bridge_slave_0: entered promiscuous mode [ 491.967713][T15380] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3017'. [ 491.980980][T15295] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.999066][T15295] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.006949][T15295] bridge_slave_1: entered allmulticast mode [ 492.017311][T15295] bridge_slave_1: entered promiscuous mode [ 492.157505][T15295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.241878][T15295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.424303][T15295] team0: Port device team_slave_0 added [ 492.457412][ T13] hsr_slave_0: left promiscuous mode [ 492.479372][ T13] hsr_slave_1: left promiscuous mode [ 492.493187][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.514236][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.534892][T15401] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3023'. [ 492.573982][ T13] veth1_macvtap: left promiscuous mode [ 492.581029][ T13] veth0_macvtap: left promiscuous mode [ 492.587388][T15403] netlink: 'syz.0.3024': attribute type 10 has an invalid length. [ 492.595203][ T13] veth1_vlan: left promiscuous mode [ 492.595458][ T13] veth0_vlan: left promiscuous mode [ 492.664650][T15401] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3023'. [ 492.725886][T15407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3025'. [ 492.744380][T15407] netlink: 'syz.4.3025': attribute type 8 has an invalid length. [ 492.789170][ T5875] Bluetooth: hci3: command tx timeout [ 492.841393][T15411] netlink: 'syz.4.3026': attribute type 6 has an invalid length. [ 492.849800][T15411] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3026'. [ 492.882305][T15401] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3023'. [ 493.413951][ T13] team0 (unregistering): Port device team_slave_1 removed [ 493.458036][ T13] team0 (unregistering): Port device team_slave_0 removed [ 493.826157][T15295] team0: Port device team_slave_1 added [ 493.952929][T15295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.966665][T15295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.052355][T15295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.067378][T15295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.098795][T15295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.126190][T15295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.291472][T15295] hsr_slave_0: entered promiscuous mode [ 494.307865][T15295] hsr_slave_1: entered promiscuous mode [ 494.323119][T15295] debugfs: 'hsr0' already exists in 'hsr' [ 494.335890][T15295] Cannot create hsr debugfs directory [ 494.871983][ T5875] Bluetooth: hci3: command tx timeout [ 495.704947][T15451] validate_nla: 1 callbacks suppressed [ 495.704969][T15451] netlink: 'syz.2.3039': attribute type 10 has an invalid length. [ 495.906542][T15453] __nla_validate_parse: 2 callbacks suppressed [ 495.906564][T15453] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3040'. [ 496.133189][T15457] FAULT_INJECTION: forcing a failure. [ 496.133189][T15457] name failslab, interval 1, probability 0, space 0, times 0 [ 496.146115][T15457] CPU: 1 UID: 0 PID: 15457 Comm: syz.2.3042 Not tainted syzkaller #0 PREEMPT(full) [ 496.146141][T15457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 496.146152][T15457] Call Trace: [ 496.146161][T15457] [ 496.146169][T15457] dump_stack_lvl+0x189/0x250 [ 496.146198][T15457] ? __pfx____ratelimit+0x10/0x10 [ 496.146219][T15457] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.146234][T15457] ? __pfx__printk+0x10/0x10 [ 496.146253][T15457] ? __pfx___might_resched+0x10/0x10 [ 496.146266][T15457] should_fail_ex+0x414/0x560 [ 496.146287][T15457] should_failslab+0xa8/0x100 [ 496.146304][T15457] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 496.146320][T15457] ? __get_vm_area_node+0x13f/0x300 [ 496.146337][T15457] __get_vm_area_node+0x13f/0x300 [ 496.146355][T15457] __vmalloc_node_range_noprof+0x301/0x12f0 [ 496.146371][T15457] ? ethtool_get_strings+0x3be/0x8d0 [ 496.146394][T15457] ? perf_trace_lock+0xec/0x3b0 [ 496.146410][T15457] ? __might_fault+0xb0/0x130 [ 496.146427][T15457] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 496.146446][T15457] ? ethtool_get_strings+0x3be/0x8d0 [ 496.146461][T15457] vzalloc_noprof+0xb2/0xf0 [ 496.146476][T15457] ? ethtool_get_strings+0x3be/0x8d0 [ 496.146492][T15457] ethtool_get_strings+0x3be/0x8d0 [ 496.146511][T15457] ? __pfx_ethtool_get_strings+0x10/0x10 [ 496.146527][T15457] ? netdev_name_node_lookup+0xdf/0x120 [ 496.146545][T15457] dev_ethtool+0x124b/0x19b0 [ 496.146567][T15457] ? __pfx_dev_ethtool+0x10/0x10 [ 496.146581][T15457] ? dev_load+0x21/0x1f0 [ 496.146599][T15457] ? dev_load+0x21/0x1f0 [ 496.146611][T15457] dev_ioctl+0x392/0x1150 [ 496.146625][T15457] sock_do_ioctl+0x22c/0x300 [ 496.146643][T15457] ? __pfx_sock_do_ioctl+0x10/0x10 [ 496.146669][T15457] sock_ioctl+0x576/0x790 [ 496.146686][T15457] ? __pfx_sock_ioctl+0x10/0x10 [ 496.146701][T15457] ? __fget_files+0x2a/0x420 [ 496.146710][T15457] ? __fget_files+0x3a0/0x420 [ 496.146719][T15457] ? __fget_files+0x2a/0x420 [ 496.146730][T15457] ? bpf_lsm_file_ioctl+0x9/0x20 [ 496.146744][T15457] ? __pfx_sock_ioctl+0x10/0x10 [ 496.146759][T15457] __se_sys_ioctl+0xfc/0x170 [ 496.146774][T15457] do_syscall_64+0xfa/0x3b0 [ 496.146785][T15457] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.146795][T15457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.146806][T15457] ? clear_bhb_loop+0x60/0xb0 [ 496.146819][T15457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.146829][T15457] RIP: 0033:0x7f5ead98eba9 [ 496.146840][T15457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.146850][T15457] RSP: 002b:00007f5eae7f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 496.146869][T15457] RAX: ffffffffffffffda RBX: 00007f5eadbd5fa0 RCX: 00007f5ead98eba9 [ 496.146876][T15457] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000b [ 496.146883][T15457] RBP: 00007f5eae7f3090 R08: 0000000000000000 R09: 0000000000000000 [ 496.146890][T15457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.146896][T15457] R13: 00007f5eadbd6038 R14: 00007f5eadbd5fa0 R15: 00007ffdce4719b8 [ 496.146914][T15457] [ 496.146997][T15457] warn_alloc: 1 callbacks suppressed [ 496.147007][T15457] syz.2.3042: vmalloc error: size 3872, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 496.485140][T15457] CPU: 1 UID: 0 PID: 15457 Comm: syz.2.3042 Not tainted syzkaller #0 PREEMPT(full) [ 496.485167][T15457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 496.485179][T15457] Call Trace: [ 496.485187][T15457] [ 496.485195][T15457] dump_stack_lvl+0x189/0x250 [ 496.485227][T15457] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.485251][T15457] ? __pfx__printk+0x10/0x10 [ 496.485276][T15457] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 496.485299][T15457] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 496.485323][T15457] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 496.485348][T15457] warn_alloc+0x214/0x310 [ 496.485373][T15457] ? __pfx_warn_alloc+0x10/0x10 [ 496.485393][T15457] ? __get_vm_area_node+0x13f/0x300 [ 496.485426][T15457] ? __get_vm_area_node+0x2b5/0x300 [ 496.485461][T15457] __vmalloc_node_range_noprof+0x326/0x12f0 [ 496.485507][T15457] ? perf_trace_lock+0xec/0x3b0 [ 496.485538][T15457] ? __might_fault+0xb0/0x130 [ 496.485567][T15457] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 496.485604][T15457] ? ethtool_get_strings+0x3be/0x8d0 [ 496.485633][T15457] vzalloc_noprof+0xb2/0xf0 [ 496.485661][T15457] ? ethtool_get_strings+0x3be/0x8d0 [ 496.485690][T15457] ethtool_get_strings+0x3be/0x8d0 [ 496.485725][T15457] ? __pfx_ethtool_get_strings+0x10/0x10 [ 496.485756][T15457] ? netdev_name_node_lookup+0xdf/0x120 [ 496.485788][T15457] dev_ethtool+0x124b/0x19b0 [ 496.485827][T15457] ? __pfx_dev_ethtool+0x10/0x10 [ 496.485859][T15457] ? dev_load+0x21/0x1f0 [ 496.485892][T15457] ? dev_load+0x21/0x1f0 [ 496.485913][T15457] dev_ioctl+0x392/0x1150 [ 496.485938][T15457] sock_do_ioctl+0x22c/0x300 [ 496.485970][T15457] ? __pfx_sock_do_ioctl+0x10/0x10 [ 496.486018][T15457] sock_ioctl+0x576/0x790 [ 496.486052][T15457] ? __pfx_sock_ioctl+0x10/0x10 [ 496.486079][T15457] ? __fget_files+0x2a/0x420 [ 496.486095][T15457] ? __fget_files+0x3a0/0x420 [ 496.486112][T15457] ? __fget_files+0x2a/0x420 [ 496.486132][T15457] ? bpf_lsm_file_ioctl+0x9/0x20 [ 496.486156][T15457] ? __pfx_sock_ioctl+0x10/0x10 [ 496.486183][T15457] __se_sys_ioctl+0xfc/0x170 [ 496.486210][T15457] do_syscall_64+0xfa/0x3b0 [ 496.486230][T15457] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.486250][T15457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.486269][T15457] ? clear_bhb_loop+0x60/0xb0 [ 496.486293][T15457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.486311][T15457] RIP: 0033:0x7f5ead98eba9 [ 496.486328][T15457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.486345][T15457] RSP: 002b:00007f5eae7f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 496.486365][T15457] RAX: ffffffffffffffda RBX: 00007f5eadbd5fa0 RCX: 00007f5ead98eba9 [ 496.486380][T15457] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000b [ 496.486392][T15457] RBP: 00007f5eae7f3090 R08: 0000000000000000 R09: 0000000000000000 [ 496.486404][T15457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.486416][T15457] R13: 00007f5eadbd6038 R14: 00007f5eadbd5fa0 R15: 00007ffdce4719b8 [ 496.486448][T15457] [ 496.486574][T15457] Mem-Info: [ 496.795412][T15457] active_anon:5289 inactive_anon:0 isolated_anon:0 [ 496.795412][T15457] active_file:17671 inactive_file:40033 isolated_file:0 [ 496.795412][T15457] unevictable:768 dirty:274 writeback:0 [ 496.795412][T15457] slab_reclaimable:11783 slab_unreclaimable:94687 [ 496.795412][T15457] mapped:30154 shmem:1356 pagetables:1146 [ 496.795412][T15457] sec_pagetables:0 bounce:0 [ 496.795412][T15457] kernel_misc_reclaimable:0 [ 496.795412][T15457] free:1316048 free_pcp:13888 free_cma:0 [ 496.841006][T15457] Node 0 active_anon:21156kB inactive_anon:0kB active_file:70684kB inactive_file:159932kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120616kB dirty:1092kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11368kB pagetables:4468kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 496.872968][T15457] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 496.903832][T15457] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 496.942884][T15457] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 496.953197][ T5875] Bluetooth: hci3: command tx timeout [ 496.960864][T15457] Node 0 DMA32 free:1360500kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20940kB inactive_anon:0kB active_file:70684kB inactive_file:158352kB unevictable:1536kB writepending:1088kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:39708kB local_pcp:18520kB free_cma:0kB [ 496.994773][T15457] lowmem_reserve[]: 0 0 1 1 1 [ 496.999801][T15457] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 497.032071][T15457] lowmem_reserve[]: 0 0 0 0 0 [ 497.036826][T15457] Node 1 Normal free:3889076kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16128kB local_pcp:11104kB free_cma:0kB [ 497.096439][T15457] lowmem_reserve[]: 0 0 0 0 0 [ 497.106012][T15457] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 497.120353][T15457] Node 0 DMA32: 1406*4kB (M) 630*8kB (UME) 755*16kB (UM) 1085*32kB (UM) 548*64kB (UM) 246*128kB (UME) 117*256kB (UME) 44*512kB (UME) 33*1024kB (UME) 10*2048kB (UME) 276*4096kB (M) = 1361272kB [ 497.141743][T15457] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 497.181075][T15457] Node 1 Normal: 203*4kB (UME) 51*8kB (UME) 41*16kB (UME) 179*32kB (UME) 50*64kB (UME) 9*128kB (UME) 3*256kB (ME) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 945*4096kB (M) = 3889076kB [ 497.202421][T15457] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 497.219250][T15457] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 497.228672][T15457] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 497.238403][T15457] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 497.247723][T15457] 59056 total pagecache pages [ 497.252636][T15457] 0 pages in swap cache [ 497.256812][T15457] Free swap = 124996kB [ 497.261100][T15457] Total swap = 124996kB [ 497.265356][T15457] 2097051 pages RAM [ 497.270906][T15457] 0 pages HighMem/MovableOnly [ 497.275702][T15457] 425672 pages reserved [ 497.279967][T15457] 0 pages cma reserved [ 497.578069][T15476] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3049'. [ 497.585376][T15295] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 497.618384][T15295] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 497.640829][T15295] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 497.660728][T15485] FAULT_INJECTION: forcing a failure. [ 497.660728][T15485] name failslab, interval 1, probability 0, space 0, times 0 [ 497.691010][T15485] CPU: 1 UID: 0 PID: 15485 Comm: syz.0.3053 Not tainted syzkaller #0 PREEMPT(full) [ 497.691038][T15485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 497.691051][T15485] Call Trace: [ 497.691061][T15485] [ 497.691070][T15485] dump_stack_lvl+0x189/0x250 [ 497.691102][T15485] ? __pfx____ratelimit+0x10/0x10 [ 497.691128][T15485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 497.691156][T15485] ? __pfx__printk+0x10/0x10 [ 497.691201][T15485] ? __pfx___might_resched+0x10/0x10 [ 497.691239][T15485] should_fail_ex+0x414/0x560 [ 497.691286][T15485] should_failslab+0xa8/0x100 [ 497.691321][T15485] __kmalloc_cache_noprof+0x70/0x3d0 [ 497.691350][T15485] ? dev_ethtool+0x126/0x19b0 [ 497.691391][T15485] dev_ethtool+0x126/0x19b0 [ 497.691437][T15485] ? __pfx_perf_trace_lock+0x10/0x10 [ 497.691470][T15485] ? __pfx_dev_ethtool+0x10/0x10 [ 497.691502][T15485] ? dev_load+0x21/0x1f0 [ 497.691544][T15485] ? dev_load+0x21/0x1f0 [ 497.691573][T15485] ? dev_load+0x21/0x1f0 [ 497.691603][T15485] dev_ioctl+0x392/0x1150 [ 497.691638][T15485] sock_do_ioctl+0x22c/0x300 [ 497.691679][T15485] ? __pfx_sock_do_ioctl+0x10/0x10 [ 497.691763][T15485] sock_ioctl+0x576/0x790 [ 497.691801][T15485] ? __pfx_sock_ioctl+0x10/0x10 [ 497.691835][T15485] ? __fget_files+0x2a/0x420 [ 497.691853][T15485] ? __fget_files+0x3a0/0x420 [ 497.691871][T15485] ? __fget_files+0x2a/0x420 [ 497.691902][T15485] ? bpf_lsm_file_ioctl+0x9/0x20 [ 497.691930][T15485] ? __pfx_sock_ioctl+0x10/0x10 [ 497.691961][T15485] __se_sys_ioctl+0xfc/0x170 [ 497.691997][T15485] do_syscall_64+0xfa/0x3b0 [ 497.692018][T15485] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.692041][T15485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.692062][T15485] ? clear_bhb_loop+0x60/0xb0 [ 497.692094][T15485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.692114][T15485] RIP: 0033:0x7fe603f8eba9 [ 497.692134][T15485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.692151][T15485] RSP: 002b:00007fe6021ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 497.692173][T15485] RAX: ffffffffffffffda RBX: 00007fe6041d5fa0 RCX: 00007fe603f8eba9 [ 497.692187][T15485] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006 [ 497.692200][T15485] RBP: 00007fe6021ee090 R08: 0000000000000000 R09: 0000000000000000 [ 497.692212][T15485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.692224][T15485] R13: 00007fe6041d6038 R14: 00007fe6041d5fa0 R15: 00007fffc77c1bb8 [ 497.692286][T15485] [ 497.978806][T15295] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 499.942551][T15295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.996246][T15520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3061'. [ 500.014093][T15295] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.046945][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.054191][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.142071][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.149382][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.263255][T15525] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3064'. [ 500.730196][T15295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.807951][T15295] veth0_vlan: entered promiscuous mode [ 500.820463][T15295] veth1_vlan: entered promiscuous mode [ 500.858894][T15295] veth0_macvtap: entered promiscuous mode [ 500.875301][T15295] veth1_macvtap: entered promiscuous mode [ 500.910678][T15295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.928138][T15295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.934571][T15545] openvswitch: netlink: Flow actions attr not present in new flow. [ 500.947972][ T1170] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.965068][ T1170] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.974272][ T1170] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.995752][ T1170] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.016181][T15546] netlink: 388 bytes leftover after parsing attributes in process `syz.4.3069'. [ 501.086058][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.095191][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.135409][ T1029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.143752][ T1029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.599163][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.607030][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.830666][T15550] wg0 speed is unknown, defaulting to 1000 [ 501.933793][T15559] netlink: 'syz.5.3073': attribute type 10 has an invalid length. [ 502.015757][T15561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3074'. [ 502.110037][T15561] netlink: 'syz.4.3074': attribute type 8 has an invalid length. [ 502.252077][T15568] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 502.288487][T15568] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 502.299174][T15568] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 502.314999][T15568] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 502.325127][T15568] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 502.499182][T15573] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3076'. [ 502.518075][T15573] bond_slave_0: entered promiscuous mode [ 502.524309][T15573] bond_slave_1: entered promiscuous mode [ 502.715950][ T1029] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.745629][T15577] netlink: 'syz.5.3077': attribute type 29 has an invalid length. [ 502.768580][T15579] netlink: 'syz.5.3077': attribute type 29 has an invalid length. [ 502.812070][T15580] netlink: 'syz.5.3077': attribute type 29 has an invalid length. [ 502.960674][ T1029] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.032401][T15577] netlink: 'syz.5.3077': attribute type 29 has an invalid length. [ 503.230552][ T1029] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.288359][T15566] wg0 speed is unknown, defaulting to 1000 [ 503.424667][ T1029] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.464541][T15593] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3082'. [ 503.499890][T15596] netlink: 'syz.4.3081': attribute type 10 has an invalid length. [ 503.901243][T15596] team0 (unregistering): Port device team_slave_0 removed [ 503.963155][T15596] team0 (unregistering): Port device team_slave_1 removed [ 504.045206][T15595] netlink: 'syz.0.3083': attribute type 29 has an invalid length. [ 504.088437][T15603] netlink: 56537 bytes leftover after parsing attributes in process `syz.3.3085'. [ 504.111481][T15597] netlink: 'syz.0.3083': attribute type 29 has an invalid length. [ 504.279130][T15598] netlink: 'syz.0.3083': attribute type 29 has an invalid length. [ 504.398764][T15568] Bluetooth: hci1: command tx timeout [ 506.087007][ T1029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.103484][ T1029] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 506.116652][ T1029] bond0 (unregistering): Released all slaves [ 506.170884][T15566] chnl_net:caif_netlink_parms(): no params data found [ 506.374511][T15629] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3092'. [ 506.493821][T15568] Bluetooth: hci1: command tx timeout [ 506.818467][T15645] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3096'. [ 506.978858][T15651] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3098'. [ 507.027176][T15566] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.040469][T15566] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.057133][T15566] bridge_slave_0: entered allmulticast mode [ 507.070199][T15566] bridge_slave_0: entered promiscuous mode [ 507.080273][T15566] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.087628][T15566] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.095520][T15566] bridge_slave_1: entered allmulticast mode [ 507.109896][T15566] bridge_slave_1: entered promiscuous mode [ 507.261407][T15648] wg0 speed is unknown, defaulting to 1000 [ 507.422977][T15659] FAULT_INJECTION: forcing a failure. [ 507.422977][T15659] name failslab, interval 1, probability 0, space 0, times 0 [ 507.458323][T15659] CPU: 0 UID: 0 PID: 15659 Comm: syz.4.3100 Not tainted syzkaller #0 PREEMPT(full) [ 507.458350][T15659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 507.458362][T15659] Call Trace: [ 507.458370][T15659] [ 507.458379][T15659] dump_stack_lvl+0x189/0x250 [ 507.458407][T15659] ? __pfx____ratelimit+0x10/0x10 [ 507.458428][T15659] ? __pfx_dump_stack_lvl+0x10/0x10 [ 507.458451][T15659] ? __pfx__printk+0x10/0x10 [ 507.458480][T15659] ? __pfx___might_resched+0x10/0x10 [ 507.458500][T15659] ? fs_reclaim_acquire+0x7d/0x100 [ 507.458524][T15659] should_fail_ex+0x414/0x560 [ 507.458558][T15659] should_failslab+0xa8/0x100 [ 507.458588][T15659] __kmalloc_noprof+0xcb/0x4f0 [ 507.458613][T15659] ? tomoyo_encode+0x28b/0x550 [ 507.458638][T15659] tomoyo_encode+0x28b/0x550 [ 507.458669][T15659] tomoyo_realpath_from_path+0x58d/0x5d0 [ 507.458692][T15659] ? tomoyo_domain+0xd9/0x130 [ 507.458719][T15659] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 507.458749][T15659] tomoyo_path_number_perm+0x1e8/0x5a0 [ 507.458779][T15659] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 507.458825][T15659] ? __lock_acquire+0xab9/0xd20 [ 507.458873][T15659] ? __fget_files+0x2a/0x420 [ 507.458894][T15659] ? __fget_files+0x2a/0x420 [ 507.458909][T15659] ? __fget_files+0x3a0/0x420 [ 507.458925][T15659] ? __fget_files+0x2a/0x420 [ 507.458946][T15659] security_file_ioctl+0xcb/0x2d0 [ 507.458975][T15659] __se_sys_ioctl+0x47/0x170 [ 507.459000][T15659] do_syscall_64+0xfa/0x3b0 [ 507.459021][T15659] ? lockdep_hardirqs_on+0x9c/0x150 [ 507.459041][T15659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.459060][T15659] ? clear_bhb_loop+0x60/0xb0 [ 507.459084][T15659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.459110][T15659] RIP: 0033:0x7f74e698eba9 [ 507.459127][T15659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.459144][T15659] RSP: 002b:00007f74e7817038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 507.459164][T15659] RAX: ffffffffffffffda RBX: 00007f74e6bd6090 RCX: 00007f74e698eba9 [ 507.459178][T15659] RDX: 0000200000000080 RSI: 0000000000008b06 RDI: 000000000000000a [ 507.459191][T15659] RBP: 00007f74e7817090 R08: 0000000000000000 R09: 0000000000000000 [ 507.459203][T15659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.459214][T15659] R13: 00007f74e6bd6128 R14: 00007f74e6bd6090 R15: 00007ffedbe29098 [ 507.459245][T15659] [ 507.459289][T15659] ERROR: Out of memory at tomoyo_realpath_from_path. [ 507.768346][T15566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.854611][T15566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.906925][T15665] FAULT_INJECTION: forcing a failure. [ 507.906925][T15665] name failslab, interval 1, probability 0, space 0, times 0 [ 507.920710][T15665] CPU: 0 UID: 0 PID: 15665 Comm: syz.3.3104 Not tainted syzkaller #0 PREEMPT(full) [ 507.920736][T15665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 507.920749][T15665] Call Trace: [ 507.920757][T15665] [ 507.920765][T15665] dump_stack_lvl+0x189/0x250 [ 507.920793][T15665] ? __pfx____ratelimit+0x10/0x10 [ 507.920815][T15665] ? __pfx_dump_stack_lvl+0x10/0x10 [ 507.920837][T15665] ? __pfx__printk+0x10/0x10 [ 507.920871][T15665] ? __pfx___might_resched+0x10/0x10 [ 507.920895][T15665] should_fail_ex+0x414/0x560 [ 507.920929][T15665] should_failslab+0xa8/0x100 [ 507.920959][T15665] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 507.920987][T15665] ? __alloc_skb+0x112/0x2d0 [ 507.921014][T15665] __alloc_skb+0x112/0x2d0 [ 507.921039][T15665] netlink_sendmsg+0x5c6/0xb30 [ 507.921071][T15665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.921104][T15665] ? aa_sock_msg_perm+0xf1/0x1d0 [ 507.921127][T15665] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 507.921149][T15665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.921172][T15665] __sock_sendmsg+0x219/0x270 [ 507.921204][T15665] ____sys_sendmsg+0x505/0x830 [ 507.921235][T15665] ? __pfx_____sys_sendmsg+0x10/0x10 [ 507.921271][T15665] ? import_iovec+0x74/0xa0 [ 507.921301][T15665] ___sys_sendmsg+0x21f/0x2a0 [ 507.921328][T15665] ? __pfx____sys_sendmsg+0x10/0x10 [ 507.921391][T15665] ? __fget_files+0x2a/0x420 [ 507.921408][T15665] ? __fget_files+0x3a0/0x420 [ 507.921437][T15665] __x64_sys_sendmsg+0x19b/0x260 [ 507.921464][T15665] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 507.921497][T15665] ? __pfx_ksys_write+0x10/0x10 [ 507.921518][T15665] ? rcu_is_watching+0x15/0xb0 [ 507.921542][T15665] ? do_syscall_64+0xbe/0x3b0 [ 507.921567][T15665] do_syscall_64+0xfa/0x3b0 [ 507.921588][T15665] ? lockdep_hardirqs_on+0x9c/0x150 [ 507.921608][T15665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.921627][T15665] ? clear_bhb_loop+0x60/0xb0 [ 507.921651][T15665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.921670][T15665] RIP: 0033:0x7f4c92d8eba9 [ 507.921687][T15665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.921705][T15665] RSP: 002b:00007f4c93c30038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 507.921726][T15665] RAX: ffffffffffffffda RBX: 00007f4c92fd5fa0 RCX: 00007f4c92d8eba9 [ 507.921741][T15665] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000003 [ 507.921754][T15665] RBP: 00007f4c93c30090 R08: 0000000000000000 R09: 0000000000000000 [ 507.921766][T15665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.921777][T15665] R13: 00007f4c92fd6038 R14: 00007f4c92fd5fa0 R15: 00007ffc0317af08 [ 507.921809][T15665] [ 508.270114][T15566] team0: Port device team_slave_0 added [ 508.337906][T15672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3107'. [ 508.349911][T15672] validate_nla: 2 callbacks suppressed [ 508.349943][T15672] netlink: 'syz.0.3107': attribute type 8 has an invalid length. [ 508.506051][T15566] team0: Port device team_slave_1 added [ 508.545203][T15675] netlink: 'syz.4.3105': attribute type 21 has an invalid length. [ 508.553293][T15568] Bluetooth: hci1: command tx timeout [ 508.671005][T15675] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3105'. [ 508.677852][T15680] netlink: 'syz.3.3109': attribute type 6 has an invalid length. [ 508.686934][T15681] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3108'. [ 508.687998][T15680] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3109'. [ 508.697477][T15675] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3105'. [ 508.734723][T15566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.744213][T15566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.773474][T15566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.795830][T15566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.804272][T15566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.833704][T15566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.081057][ T1029] hsr_slave_0: left promiscuous mode [ 509.087352][ T1029] hsr_slave_1: left promiscuous mode [ 509.093551][ T1029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.138326][ T1029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.155319][ T1029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.162926][ T1029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.192993][ T1029] veth1_macvtap: left promiscuous mode [ 509.201716][ T1029] veth0_macvtap: left promiscuous mode [ 509.207645][ T1029] veth1_vlan: left promiscuous mode [ 509.216230][ T1029] veth0_vlan: left promiscuous mode [ 509.926124][T15708] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3118'. [ 510.042675][ T1029] team_slave_1 (unregistering): left promiscuous mode [ 510.050083][ T1029] team_slave_1 (unregistering): left allmulticast mode [ 510.057788][ T1029] team0 (unregistering): Port device team_slave_1 removed [ 510.097392][ T1029] C (unregistering): left promiscuous mode [ 510.103473][ T1029] C (unregistering): left allmulticast mode [ 510.110905][ T1029] team0 (unregistering): Port device C removed [ 510.445315][T15566] hsr_slave_0: entered promiscuous mode [ 510.452041][T15566] hsr_slave_1: entered promiscuous mode [ 510.458063][T15566] debugfs: 'hsr0' already exists in 'hsr' [ 510.465580][T15566] Cannot create hsr debugfs directory [ 510.489594][T15694] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3114'. [ 510.551892][T15708] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.628955][T15568] Bluetooth: hci1: command tx timeout [ 510.655290][T15711] FAULT_INJECTION: forcing a failure. [ 510.655290][T15711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.655673][T15708] bridge_slave_0 (unregistering): left allmulticast mode [ 510.677071][T15708] bridge_slave_0 (unregistering): left promiscuous mode [ 510.686446][T15708] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.694936][T15711] CPU: 0 UID: 0 PID: 15711 Comm: syz.4.3120 Not tainted syzkaller #0 PREEMPT(full) [ 510.694962][T15711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 510.694973][T15711] Call Trace: [ 510.694981][T15711] [ 510.694989][T15711] dump_stack_lvl+0x189/0x250 [ 510.695018][T15711] ? __pfx____ratelimit+0x10/0x10 [ 510.695037][T15711] ? __pfx_dump_stack_lvl+0x10/0x10 [ 510.695058][T15711] ? __pfx__printk+0x10/0x10 [ 510.695096][T15711] should_fail_ex+0x414/0x560 [ 510.695126][T15711] _copy_from_user+0x2d/0xb0 [ 510.695152][T15711] __copy_msghdr+0x3c5/0x5b0 [ 510.695182][T15711] ___sys_sendmsg+0x1a5/0x2a0 [ 510.695210][T15711] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.695271][T15711] ? __fget_files+0x2a/0x420 [ 510.695289][T15711] ? __fget_files+0x3a0/0x420 [ 510.695318][T15711] __x64_sys_sendmsg+0x19b/0x260 [ 510.695346][T15711] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 510.695381][T15711] ? __pfx_ksys_write+0x10/0x10 [ 510.695405][T15711] ? rcu_is_watching+0x15/0xb0 [ 510.695432][T15711] ? do_syscall_64+0xbe/0x3b0 [ 510.695458][T15711] do_syscall_64+0xfa/0x3b0 [ 510.695478][T15711] ? lockdep_hardirqs_on+0x9c/0x150 [ 510.695499][T15711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.695518][T15711] ? clear_bhb_loop+0x60/0xb0 [ 510.695542][T15711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.695568][T15711] RIP: 0033:0x7f74e698eba9 [ 510.695586][T15711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.695603][T15711] RSP: 002b:00007f74e7838038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.695623][T15711] RAX: ffffffffffffffda RBX: 00007f74e6bd5fa0 RCX: 00007f74e698eba9 [ 510.695638][T15711] RDX: 0000000000000804 RSI: 0000200000000c00 RDI: 0000000000000003 [ 510.695651][T15711] RBP: 00007f74e7838090 R08: 0000000000000000 R09: 0000000000000000 [ 510.695663][T15711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.695675][T15711] R13: 00007f74e6bd6038 R14: 00007f74e6bd5fa0 R15: 00007ffedbe29098 [ 510.695706][T15711] [ 510.964902][T15716] netlink: 'syz.4.3122': attribute type 6 has an invalid length. [ 511.205425][T15693] wg0 speed is unknown, defaulting to 1000 [ 512.049703][ T1029] ================================================================== [ 512.057834][ T1029] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x666/0xca0 [ 512.065939][ T1029] Write of size 8 at addr ffff888028dba668 by task kworker/u8:5/1029 [ 512.074027][ T1029] [ 512.076368][ T1029] CPU: 1 UID: 0 PID: 1029 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 512.076391][ T1029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 512.076405][ T1029] Workqueue: netns cleanup_net [ 512.076437][ T1029] Call Trace: [ 512.076447][ T1029] [ 512.076458][ T1029] dump_stack_lvl+0x189/0x250 [ 512.076489][ T1029] ? __virt_addr_valid+0x1c8/0x5c0 [ 512.076519][ T1029] ? __pfx_dump_stack_lvl+0x10/0x10 [ 512.076540][ T1029] ? __virt_addr_valid+0x1c8/0x5c0 [ 512.076567][ T1029] ? lock_release+0x4b/0x3e0 [ 512.076618][ T1029] ? __virt_addr_valid+0x4a5/0x5c0 [ 512.076654][ T1029] print_report+0xca/0x240 [ 512.076677][ T1029] ? __xfrm_state_delete+0x666/0xca0 [ 512.076693][ T1029] kasan_report+0x118/0x150 [ 512.076733][ T1029] ? __xfrm_state_delete+0x666/0xca0 [ 512.076780][ T1029] __xfrm_state_delete+0x666/0xca0 [ 512.076841][ T1029] __xfrm_state_delete+0x87b/0xca0 [ 512.076901][ T1029] xfrm_state_flush+0x45f/0x770 [ 512.076962][ T1029] xfrm6_tunnel_net_exit+0x3c/0x100 [ 512.076999][ T1029] ops_undo_list+0x49a/0x990 [ 512.077043][ T1029] ? __pfx_ops_undo_list+0x10/0x10 [ 512.077079][ T1029] ? do_raw_spin_unlock+0x122/0x240 [ 512.077121][ T1029] cleanup_net+0x4c5/0x800 [ 512.077156][ T1029] ? __pfx_cleanup_net+0x10/0x10 [ 512.077190][ T1029] ? _raw_spin_unlock_irq+0x23/0x50 [ 512.077210][ T1029] ? process_scheduled_works+0x9ef/0x17b0 [ 512.077231][ T1029] ? process_scheduled_works+0x9ef/0x17b0 [ 512.077261][ T1029] process_scheduled_works+0xae1/0x17b0 [ 512.077377][ T1029] ? __pfx_process_scheduled_works+0x10/0x10 [ 512.077512][ T1029] worker_thread+0x8a0/0xda0 [ 512.077544][ T1029] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 512.077601][ T1029] ? __kthread_parkme+0x7b/0x200 [ 512.077654][ T1029] kthread+0x70e/0x8a0 [ 512.077691][ T1029] ? __pfx_worker_thread+0x10/0x10 [ 512.077714][ T1029] ? __pfx_kthread+0x10/0x10 [ 512.077749][ T1029] ? _raw_spin_unlock_irq+0x23/0x50 [ 512.077769][ T1029] ? lockdep_hardirqs_on+0x9c/0x150 [ 512.077787][ T1029] ? __pfx_kthread+0x10/0x10 [ 512.077819][ T1029] ret_from_fork+0x436/0x7d0 [ 512.077852][ T1029] ? __pfx_ret_from_fork+0x10/0x10 [ 512.077897][ T1029] ? __switch_to_asm+0x39/0x70 [ 512.077920][ T1029] ? __switch_to_asm+0x33/0x70 [ 512.077944][ T1029] ? __pfx_kthread+0x10/0x10 [ 512.077977][ T1029] ret_from_fork_asm+0x1a/0x30 [ 512.078049][ T1029] [ 512.078056][ T1029] [ 512.308143][ T1029] Allocated by task 14746: [ 512.312569][ T1029] kasan_save_track+0x3e/0x80 [ 512.317256][ T1029] __kasan_slab_alloc+0x6c/0x80 [ 512.322114][ T1029] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 512.327576][ T1029] xfrm_state_alloc+0x24/0x2f0 [ 512.332339][ T1029] __find_acq_core+0x8a7/0x1c00 [ 512.337192][ T1029] xfrm_find_acq+0x78/0xa0 [ 512.341604][ T1029] xfrm_alloc_userspi+0x6b3/0xc90 [ 512.346628][ T1029] xfrm_user_rcv_msg+0x7a0/0xab0 [ 512.351565][ T1029] netlink_rcv_skb+0x208/0x470 [ 512.356331][ T1029] xfrm_netlink_rcv+0x79/0x90 [ 512.361011][ T1029] netlink_unicast+0x82c/0x9e0 [ 512.365773][ T1029] netlink_sendmsg+0x805/0xb30 [ 512.370530][ T1029] __sock_sendmsg+0x219/0x270 [ 512.375212][ T1029] ____sys_sendmsg+0x505/0x830 [ 512.379973][ T1029] ___sys_sendmsg+0x21f/0x2a0 [ 512.384645][ T1029] __x64_sys_sendmsg+0x19b/0x260 [ 512.389580][ T1029] do_syscall_64+0xfa/0x3b0 [ 512.394080][ T1029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.399968][ T1029] [ 512.402286][ T1029] Freed by task 24: [ 512.406078][ T1029] kasan_save_track+0x3e/0x80 [ 512.410754][ T1029] kasan_save_free_info+0x46/0x50 [ 512.415781][ T1029] __kasan_slab_free+0x5b/0x80 [ 512.420540][ T1029] kmem_cache_free+0x18f/0x400 [ 512.425301][ T1029] xfrm_state_gc_task+0x52d/0x6b0 [ 512.430332][ T1029] process_scheduled_works+0xae1/0x17b0 [ 512.435878][ T1029] worker_thread+0x8a0/0xda0 [ 512.440471][ T1029] kthread+0x70e/0x8a0 [ 512.444534][ T1029] ret_from_fork+0x436/0x7d0 [ 512.449117][ T1029] ret_from_fork_asm+0x1a/0x30 [ 512.453885][ T1029] [ 512.456209][ T1029] The buggy address belongs to the object at ffff888028dba640 [ 512.456209][ T1029] which belongs to the cache xfrm_state of size 928 [ 512.470181][ T1029] The buggy address is located 40 bytes inside of [ 512.470181][ T1029] freed 928-byte region [ffff888028dba640, ffff888028dba9e0) [ 512.483889][ T1029] [ 512.486208][ T1029] The buggy address belongs to the physical page: [ 512.492622][ T1029] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888028db9540 pfn:0x28db8 [ 512.502690][ T1029] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 512.511211][ T1029] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 512.518750][ T1029] page_type: f5(slab) [ 512.522727][ T1029] raw: 00fff00000000040 ffff88801af123c0 dead000000000122 0000000000000000 [ 512.531319][ T1029] raw: ffff888028db9540 00000000800f000d 00000000f5000000 0000000000000000 [ 512.539912][ T1029] head: 00fff00000000040 ffff88801af123c0 dead000000000122 0000000000000000 [ 512.548579][ T1029] head: ffff888028db9540 00000000800f000d 00000000f5000000 0000000000000000 [ 512.557256][ T1029] head: 00fff00000000002 ffffea0000a36e01 00000000ffffffff 00000000ffffffff [ 512.565932][ T1029] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 512.574597][ T1029] page dumped because: kasan: bad access detected [ 512.581017][ T1029] page_owner tracks the page as allocated [ 512.586724][ T1029] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 11504, tgid 11503 (syz.2.1735), ts 328933866973, free_ts 328850477148 [ 512.606168][ T1029] post_alloc_hook+0x240/0x2a0 [ 512.610938][ T1029] get_page_from_freelist+0x21e4/0x22c0 [ 512.616481][ T1029] __alloc_frozen_pages_noprof+0x181/0x370 [ 512.622285][ T1029] alloc_pages_mpol+0x232/0x4a0 [ 512.627136][ T1029] allocate_slab+0x8a/0x370 [ 512.631630][ T1029] ___slab_alloc+0xbeb/0x1420 [ 512.636297][ T1029] kmem_cache_alloc_noprof+0x283/0x3c0 [ 512.641755][ T1029] xfrm_state_alloc+0x24/0x2f0 [ 512.646532][ T1029] pfkey_add+0x6e4/0x2e00 [ 512.650872][ T1029] pfkey_sendmsg+0xbfe/0x1090 [ 512.655570][ T1029] __sock_sendmsg+0x219/0x270 [ 512.660272][ T1029] ____sys_sendmsg+0x505/0x830 [ 512.665041][ T1029] ___sys_sendmsg+0x21f/0x2a0 [ 512.669736][ T1029] __x64_sys_sendmsg+0x19b/0x260 [ 512.674702][ T1029] do_syscall_64+0xfa/0x3b0 [ 512.679225][ T1029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.685122][ T1029] page last free pid 11495 tgid 11495 stack trace: [ 512.691611][ T1029] __free_frozen_pages+0xbc4/0xd30 [ 512.696729][ T1029] __put_partials+0x156/0x1a0 [ 512.701402][ T1029] put_cpu_partial+0x17c/0x250 [ 512.706167][ T1029] __slab_free+0x2d5/0x3c0 [ 512.710606][ T1029] qlist_free_all+0x97/0x140 [ 512.715206][ T1029] kasan_quarantine_reduce+0x148/0x160 [ 512.720676][ T1029] __kasan_slab_alloc+0x22/0x80 [ 512.725539][ T1029] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 512.731016][ T1029] jbd2__journal_start+0x146/0x5b0 [ 512.736148][ T1029] __ext4_journal_start_sb+0x227/0x5c0 [ 512.741623][ T1029] ext4_dirty_inode+0x93/0x110 [ 512.746386][ T1029] __mark_inode_dirty+0x2ec/0xe10 [ 512.751423][ T1029] file_update_time+0x40c/0x490 [ 512.756267][ T1029] ext4_page_mkwrite+0x20e/0x1190 [ 512.761298][ T1029] do_page_mkwrite+0x14d/0x310 [ 512.766062][ T1029] __handle_mm_fault+0x1916/0x5440 [ 512.771176][ T1029] [ 512.773493][ T1029] Memory state around the buggy address: [ 512.779203][ T1029] ffff888028dba500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 512.787289][ T1029] ffff888028dba580: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 512.795372][ T1029] >ffff888028dba600: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 512.803440][ T1029] ^ [ 512.810886][ T1029] ffff888028dba680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 512.819007][ T1029] ffff888028dba700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 512.827055][ T1029] ================================================================== [ 512.835348][ T1029] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 512.842558][ T1029] CPU: 1 UID: 0 PID: 1029 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 512.852033][ T1029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 512.862105][ T1029] Workqueue: netns cleanup_net [ 512.866903][ T1029] Call Trace: [ 512.870190][ T1029] [ 512.873132][ T1029] dump_stack_lvl+0x99/0x250 [ 512.877744][ T1029] ? __asan_memcpy+0x40/0x70 [ 512.882358][ T1029] ? __pfx_dump_stack_lvl+0x10/0x10 [ 512.887573][ T1029] ? __pfx__printk+0x10/0x10 [ 512.892225][ T1029] vpanic+0x281/0x750 [ 512.896235][ T1029] ? __pfx_vpanic+0x10/0x10 [ 512.900749][ T1029] ? irqentry_exit+0x74/0x90 [ 512.905388][ T1029] panic+0xb9/0xc0 [ 512.909126][ T1029] ? __pfx_panic+0x10/0x10 [ 512.913562][ T1029] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 512.919493][ T1029] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 512.925418][ T1029] ? __xfrm_state_delete+0x666/0xca0 [ 512.930714][ T1029] check_panic_on_warn+0x89/0xb0 [ 512.935670][ T1029] ? __xfrm_state_delete+0x666/0xca0 [ 512.940972][ T1029] end_report+0x78/0x160 [ 512.945241][ T1029] kasan_report+0x129/0x150 [ 512.949779][ T1029] ? __xfrm_state_delete+0x666/0xca0 [ 512.955108][ T1029] __xfrm_state_delete+0x666/0xca0 [ 512.960270][ T1029] __xfrm_state_delete+0x87b/0xca0 [ 512.965433][ T1029] xfrm_state_flush+0x45f/0x770 [ 512.970340][ T1029] xfrm6_tunnel_net_exit+0x3c/0x100 [ 512.975585][ T1029] ops_undo_list+0x49a/0x990 [ 512.980211][ T1029] ? __pfx_ops_undo_list+0x10/0x10 [ 512.985356][ T1029] ? do_raw_spin_unlock+0x122/0x240 [ 512.990586][ T1029] cleanup_net+0x4c5/0x800 [ 512.995033][ T1029] ? __pfx_cleanup_net+0x10/0x10 [ 512.999996][ T1029] ? _raw_spin_unlock_irq+0x23/0x50 [ 513.005207][ T1029] ? process_scheduled_works+0x9ef/0x17b0 [ 513.010940][ T1029] ? process_scheduled_works+0x9ef/0x17b0 [ 513.016692][ T1029] process_scheduled_works+0xae1/0x17b0 [ 513.022342][ T1029] ? __pfx_process_scheduled_works+0x10/0x10 [ 513.028395][ T1029] worker_thread+0x8a0/0xda0 [ 513.033016][ T1029] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 513.039388][ T1029] ? __kthread_parkme+0x7b/0x200 [ 513.044360][ T1029] kthread+0x70e/0x8a0 [ 513.048442][ T1029] ? __pfx_worker_thread+0x10/0x10 [ 513.053553][ T1029] ? __pfx_kthread+0x10/0x10 [ 513.058150][ T1029] ? _raw_spin_unlock_irq+0x23/0x50 [ 513.063353][ T1029] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.068550][ T1029] ? __pfx_kthread+0x10/0x10 [ 513.073154][ T1029] ret_from_fork+0x436/0x7d0 [ 513.077749][ T1029] ? __pfx_ret_from_fork+0x10/0x10 [ 513.082875][ T1029] ? __switch_to_asm+0x39/0x70 [ 513.087638][ T1029] ? __switch_to_asm+0x33/0x70 [ 513.092492][ T1029] ? __pfx_kthread+0x10/0x10 [ 513.097093][ T1029] ret_from_fork_asm+0x1a/0x30 [ 513.101897][ T1029] [ 513.105175][ T1029] Kernel Offset: disabled [ 513.109491][ T1029] Rebooting in 86400 seconds..