last executing test programs: 3.907546122s ago: executing program 3 (id=1069): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) close(r0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000900)=""/223, 0xdf}], 0x1}, 0x102) 3.190350247s ago: executing program 3 (id=1073): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x4, 0x0, 0x3, 0x100, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x0, 0x450, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e00000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x5}, 0x5000, 0x0, 0x1, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffff, 0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4) r5 = socket(0x8, 0x3, 0xfffffff6) recvmsg(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000000a40)=""/4096, 0x1000}, 0x2023) fstat(0xffffffffffffffff, 0x0) gettid() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) 3.110061981s ago: executing program 1 (id=1076): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_rdma(0x10, 0x3, 0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x28, 0xc3, 0x0, 0x0, 0x42001, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x4, 0x8}, 0x0, 0x3, 0x0, 0x0, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000140)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x10, 0x2, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r4}, 0x20) close(r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f0000000540), &(0x7f0000000700)=r3}, 0x20) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000280)='!.+]\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8946, &(0x7f0000000080)) 2.741779056s ago: executing program 4 (id=1081): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000000)="06ff03076844268cb89e14f008004ee0ffff00febabec41177fb86dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f7, &(0x7f00000006c0)=',\x04b\x99\xf11\n2\x13(\xda\a\xdfbg\x13\xac\xc9\x9dS\xbbl\xd2J@\xecl\xb2\x04}\x10\xc5/y\x90\xe5}\x15\xb3M\xadAh\xc0\x00\x83\xa9\x81\x1c\xc6\xc3ap\xe4x\xb4/:\x18\x01\xae\x86E\"\x90\x8au$)\'U\xd8\xbf\x17\x0ei\x93y\x92sa\xc9\x1fY\a\x00\x00\x00\x00\x00\x00\x00\x98\xce\x14\x0f\x19\xcb@\x90\xb9\xfe\x1bKz\'\x9e\xdf\xe0\xe6\xd6q*\x86\xbd\x9dM)\xc9\xcb\xc6\x8a\xf3 \x10\x0e\xa6j\x11\xd18\xc9\x90n5n\xea\xef\xb7\xdez\x98\x99=\x9d\n3\x84\xd9\x15\xa1\x9c\xda\x9d\xc9\xc4]\xe5\x99\x8eS\xfa\x9f\xb4\xaem\x9e\xf9\xb1\xbf\xd6p?\xa0') r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r1, 0x58, &(0x7f0000000580)}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r3}, 0x18) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, 0x0}, 0x3000c085) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r6) socket$kcm(0xa, 0x2, 0x73) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) sendmsg$inet6(r0, &(0x7f0000003040)={&(0x7f0000002e80)={0xa, 0x4e20, 0x800, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x40}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x4110, 0x0, 0x0, 0x8, 0x37e, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) 2.505884561s ago: executing program 4 (id=1084): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) close(r0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000900)=""/223, 0xdf}], 0x1}, 0x102) 2.447628648s ago: executing program 0 (id=1085): perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x3, 0x0, 0x4, 0x0, 0x3, 0x30e, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x0, 0x44e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000000240)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r1) socket$kcm(0x2, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b70500000100000085000000b600000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x6, 0xf3, 0x6, 0xc, 0x0, 0x6123a643, 0x2000, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0xf8, 0xd85}, 0xaf58, 0x7, 0x0, 0x0, 0x4, 0x6, 0x401, 0x0, 0x6, 0x0, 0x7f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a3100000000"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000420d000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000040000000000000000000002000000000000000000000000000000000000000440005000a010101000000000000000000000000000004d62b00000002000000fe8000000000000000000000000000aa00000000010000000900"/180], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003c0007010000000000400000017c00000400fc80100001805fd05a607fd4804053210000080002"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 1.996984303s ago: executing program 2 (id=1087): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.959168686s ago: executing program 4 (id=1088): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x5, 0x0, 0x9, 0xa7, 0x0, 0x7, 0x0, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x8}, 0x2, 0xb, 0x3, 0x6, 0x7fff, 0xa, 0x6, 0x0, 0x5, 0x0, 0x4}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000080a00000008000100", @ANYRES64=r1], 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a001000000002", 0x29}], 0x1}, 0x24000044) syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/time_for_children\x00') gettid() fstat(r0, &(0x7f0000000480)) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f0000000980)='ns/cgroup\x00') fstat(r0, &(0x7f0000000580)) fstat(r0, &(0x7f0000000600)) syz_clone(0xa88000, &(0x7f0000000680)="6ce49ee114fecd3c4e5008936128e9cea6377c360794a9aee095e82870f143c69682cb3236069b61ba342266bb113d0c8b", 0x31, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)="51a640d31637a9c758b71b4182154fec5fe24353ff7e9c7827056895a42e59b608b195db7115ce4245cb4bf1adad223e7071bc8171efd0a1db920ffb91752802897c7880baccff76e9cc5751dda235b44e5155f9529803af2506b139807c00fc281da3ced01c06510442df5cb9a7111f00eb5d190e03a0cbe7f605ad") fstat(r0, &(0x7f00000007c0)) fstat(r0, &(0x7f0000000840)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffff, 0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x200020, &(0x7f0000000600)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB=',mode=00000000000000000200201,gid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="6a50bae0b3e5"}) 1.916771399s ago: executing program 3 (id=1089): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0, 0x3}, 0x2, 0x0, 0x0, 0x5, 0x3fe, 0x7fffffff, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030a0903000000000000e600"/24], 0x18}, 0x1, 0x7}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d71, 0x30, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000380), 0x4}, 0x1b, 0x7, 0x0, 0x0, 0x8, 0xfffffffe, 0x3}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f83edf848480000005e140602ab1100000e002b000f000000028000001294", 0x2e}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000003e000b0104000000fddbdf25047c000008003680040002000c00018006000600088e"], 0x28}, 0x1, 0x0, 0x0, 0x488c0}, 0x2004c014) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4020000e9bf000061114c0000000000850000001c00000095000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x4, @perf_bp={&(0x7f00000000c0), 0x1}, 0x100800, 0xc8, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x8) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x15) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) 1.892361102s ago: executing program 1 (id=1090): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x104000, 0x2, 0xfffffffe, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x4, 0x7, 0x7f}, 0x48) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x6, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0xcec, 0x7, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffdfffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) 1.822614798s ago: executing program 4 (id=1091): r0 = socket$kcm(0x2a, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = getpid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r3, 0x12) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x28}, 0x20040000) r5 = socket$kcm(0x11, 0x7, 0x0) r6 = socket$kcm(0x2a, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=@migrate={0xcc, 0x21, 0x1, 0x0, 0xfffffffe, {{@in=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x8}]}, @user_kmaddress={0x2c, 0x13, {@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0xa}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x42000) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x80086601, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x891a, 0x0) 1.747234802s ago: executing program 2 (id=1092): socket$kcm(0x2c, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)={0x44, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000023000701feffffff00000000037c00000c000180080007"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000001400)="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", 0x76e}], 0x2}, 0x0) r5 = socket$kcm(0x25, 0x1, 0x0) sendmsg(r5, 0x0, 0x4) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000000340)}, 0x41) setsockopt$sock_attach_bpf(r6, 0x84, 0x1e, 0x0, 0x0) recvmsg(r6, &(0x7f0000000a40)={&(0x7f0000000480)=@ieee802154, 0x80, &(0x7f0000000940), 0x0, &(0x7f00000009c0)=""/94, 0x5e}, 0x23) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = socket$kcm(0x2, 0x3, 0x2) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(r7, 0x8916, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}}, 0x0) 1.651844135s ago: executing program 1 (id=1093): sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x4000091) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x2b, 0x107, 0x70bd27, 0x0, {0x8, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x148, 0x0, 0x0, @pid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x20048010) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x922000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1f, 0x2, &(0x7f0000000500)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xb}], &(0x7f0000000540)='GPL\x00', 0x7, 0xab, &(0x7f0000000580)=""/171, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000a40)={0x7fffffff, 0x2, 0x41, 0x80000001}, 0x10, 0x0, r1, 0x0, &(0x7f0000000cc0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0xd900, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb5020200080020a87b0000b70300000000000085000000a40000009500000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x90) 1.526719493s ago: executing program 1 (id=1094): socket$kcm(0x2, 0x5, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70500000100000085000000b600000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x6, 0xf3, 0x6, 0xc, 0x0, 0x6123a643, 0x2000, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0xf8, 0xd85}, 0x16302, 0x7, 0x0, 0x0, 0x4, 0x9, 0x401, 0x0, 0x6, 0x0, 0x7f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a3100000000"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000420d000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000040000000000000000000002000000000000000000000000000000000000000440005000a010101000000000000000000000000000004d62b00000002000000fe8000000000000000000000000000aa00000000010000000900"/180], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x4000, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003c0007010000000000400000017c00000400fc80100001805fd05a607fd4804053210000080002"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000005480)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000206010300000000000000000000000005000100070000000900020073797a3100000036056b9b2ab75d"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r9 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1}, 0x80) 1.43728198s ago: executing program 0 (id=1095): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000000)="06ff03076844268cb89e14f008004ee0ffff00febabec41177fb86dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f7, &(0x7f00000006c0)=',\x04b\x99\xf11\n2\x13(\xda\a\xdfbg\x13\xac\xc9\x9dS\xbbl\xd2J@\xecl\xb2\x04}\x10\xc5/y\x90\xe5}\x15\xb3M\xadAh\xc0\x00\x83\xa9\x81\x1c\xc6\xc3ap\xe4x\xb4/:\x18\x01\xae\x86E\"\x90\x8au$)\'U\xd8\xbf\x17\x0ei\x93y\x92sa\xc9\x1fY\a\x00\x00\x00\x00\x00\x00\x00\x98\xce\x14\x0f\x19\xcb@\x90\xb9\xfe\x1bKz\'\x9e\xdf\xe0\xe6\xd6q*\x86\xbd\x9dM)\xc9\xcb\xc6\x8a\xf3 \x10\x0e\xa6j\x11\xd18\xc9\x90n5n\xea\xef\xb7\xdez\x98\x99=\x9d\n3\x84\xd9\x15\xa1\x9c\xda\x9d\xc9\xc4]\xe5\x99\x8eS\xfa\x9f\xb4\xaem\x9e\xf9\xb1\xbf\xd6p?\xa0') r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r1, 0x58, &(0x7f0000000580)}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r3}, 0x18) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, 0x0}, 0x3000c085) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r6) socket$kcm(0xa, 0x2, 0x73) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) sendmsg$inet6(r0, &(0x7f0000003040)={&(0x7f0000002e80)={0xa, 0x4e20, 0x800, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x40}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x4110, 0x0, 0x0, 0x8, 0x37e, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) 1.436801007s ago: executing program 2 (id=1096): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x3, 0x96, 0xff, 0x3, 0x0, 0xfffffffffffffffb, 0x640661560d0e9e2b, 0x7, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f0e86ac}, 0x100, 0x7f, 0x7fff, 0x5, 0xffffffff, 0x3f, 0xfffb, 0x0, 0x4, 0x0, 0x5}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x20, 0x15, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}}, 0x4002040) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 1.434700642s ago: executing program 4 (id=1097): bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x20008024) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x24, 0x2, 0xffffffde, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000000a030000000800000000192a55b2da5a01530bfc0b00000b040000000900000001"], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xcc0, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x60000002) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x2, 0x80, 0x8, 0x0, 0x7, 0x9, 0x0, 0x7e, 0x0, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0xd}, 0x13002, 0x7, 0x800, 0x1, 0x4ae2, 0xe7, 0x7ff, 0x0, 0xb, 0x0, 0x3}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_ext={0x1c, 0x1a, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x213e8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.111303282s ago: executing program 2 (id=1098): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x103462, 0x4, 0xacd, 0x0, 0x7, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000006020010"], 0xb8}}, 0x0) 822.546677ms ago: executing program 4 (id=1099): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x4, 0x0, 0x3, 0x100, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x0, 0x450, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e00000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x5}, 0x5000, 0x0, 0x1, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffff, 0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4) r5 = socket(0x8, 0x3, 0xfffffff6) recvmsg(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000000a40)=""/4096, 0x1000}, 0x2023) fstat(0xffffffffffffffff, 0x0) gettid() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) 784.548065ms ago: executing program 0 (id=1100): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_rdma(0x10, 0x3, 0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x28, 0xc3, 0x0, 0x0, 0x42001, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x4, 0x8}, 0x0, 0x3, 0x0, 0x0, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000140)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x10, 0x2, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r4}, 0x20) close(r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f0000000540), &(0x7f0000000700)=r3}, 0x20) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000280)='!.+]\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000080)) 756.435006ms ago: executing program 3 (id=1101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x5, 0x0, 0x9, 0xa7, 0x0, 0x7, 0x0, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x8}, 0x2, 0xb, 0x3, 0x6, 0x7fff, 0xa, 0x6, 0x0, 0x5, 0x0, 0x4}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000080a00000008000100", @ANYRES64=r1], 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a001000000002", 0x29}], 0x1}, 0x24000044) syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/time_for_children\x00') gettid() fstat(r0, &(0x7f0000000480)) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f0000000980)='ns/cgroup\x00') fstat(r0, &(0x7f0000000580)) fstat(r0, &(0x7f0000000600)) syz_clone(0xa88000, &(0x7f0000000680)="6ce49ee114fecd3c4e5008936128e9cea6377c360794a9aee095e82870f143c69682cb3236069b61ba342266bb113d0c8b", 0x31, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)="51a640d31637a9c758b71b4182154fec5fe24353ff7e9c7827056895a42e59b608b195db7115ce4245cb4bf1adad223e7071bc8171efd0a1db920ffb91752802897c7880baccff76e9cc5751dda235b44e5155f9529803af2506b139807c00fc281da3ced01c06510442df5cb9a7111f00eb5d190e03a0cbe7f605ad") fstat(r0, &(0x7f00000007c0)) fstat(r0, &(0x7f0000000840)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffff, 0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x200020, &(0x7f0000000600)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB=',mode=00000000000000000200201,gid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="6a50bae0b3e5"}) 668.65941ms ago: executing program 3 (id=1102): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000080)=r2) 663.897225ms ago: executing program 2 (id=1103): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0x77, 0x3, 0x2, 0x200000, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x25, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x20, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200400000000000020000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000009fb3964d00000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff33, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$unix(r1, &(0x7f0000002100)={0x0, 0x0, 0x0}, 0x2100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8930, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmsg$can_raw(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/128, 0x80}, {&(0x7f0000003140)=""/4097, 0x1001}, {&(0x7f0000000540)=""/146, 0x92}, {&(0x7f0000005140)=""/4096, 0x1000}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000100)=""/48, 0x30}], 0x6}, 0x40010102) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89f0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 597.205488ms ago: executing program 0 (id=1104): sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x4000091) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x2b, 0x107, 0x70bd27, 0x0, {0x8, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x148, 0x0, 0x0, @pid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x20048010) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x922000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1f, 0x2, &(0x7f0000000500)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xb}], &(0x7f0000000540)='GPL\x00', 0x7, 0xab, &(0x7f0000000580)=""/171, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000a40)={0x7fffffff, 0x2, 0x41, 0x80000001}, 0x10, 0x0, r1, 0x0, &(0x7f0000000cc0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0xd900, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb5020200080020a87b0000b70300000000000085000000a40000009500000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x90) 531.156976ms ago: executing program 1 (id=1105): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e00000000000000014100001f00002004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000001000000000000000000000100"/28], 0x50) socket$key(0xf, 0x3, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x922000000001, 0x106) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x4d, 0x1, 0x13, 0x80000000}, {0x8, 0x8}, {0x0, 0x4}]}) r5 = socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffff, 0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010006000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0xc4) sendmsg$kcm(r2, 0x0, 0x20040000) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000000020400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000001500"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=r5, @ANYRES64=r0, @ANYRES32=r8, @ANYRES32, @ANYRES16=0x0, @ANYRESHEX=r7, @ANYRESOCT, @ANYRES8=r1], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8005, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x4, 0x0, 0x0) sendmsg$NFT_BATCH(r9, 0x0, 0x4000800) 473.709202ms ago: executing program 0 (id=1106): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010006000000280007800c00018008000140ffffffff0500070084000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0xc4) (fail_nth: 5) 109.352607ms ago: executing program 3 (id=1107): socket$kcm(0x2c, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)={0x44, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000023000701feffffff00000000037c00000c000180080007"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000001400)="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", 0x76e}], 0x2}, 0x0) r5 = socket$kcm(0x25, 0x1, 0x0) sendmsg(r5, 0x0, 0x4) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000000340)}, 0x41) setsockopt$sock_attach_bpf(r6, 0x84, 0x1e, 0x0, 0x0) recvmsg(r6, &(0x7f0000000a40)={&(0x7f0000000480)=@ieee802154, 0x80, &(0x7f0000000940), 0x0, &(0x7f00000009c0)=""/94, 0x5e}, 0x23) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = socket$kcm(0x2, 0x3, 0x2) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(r7, 0x8916, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}}, 0x0) 59.206832ms ago: executing program 0 (id=1108): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8005, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2a460, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1946}, 0x42, 0x0, 0x0, 0x1, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3, 0x300}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x20) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfd, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x50) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x1}, 0x80, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 32.270037ms ago: executing program 2 (id=1109): socket$kcm(0x2a, 0x2, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x1b, 0x0, 0x14) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}, 0x2062) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000170007010000000000000000017c00000c00018026000600800a0000"], 0x20}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe88000000000000e6ffffffffffff00fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ff02000000000000000000000000000100000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000200000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700000350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="680100001a000100feffffff0001000000000000000000000000ffffe0000002fe8800000000000000000000000001010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000008001f0003"], 0x168}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 0s ago: executing program 1 (id=1110): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x394}], 0x1}, 0x0) r0 = perf_event_open$cgroup(&(0x7f00000006c0)={0x4, 0x80, 0x0, 0x4, 0x0, 0xc, 0x0, 0xf17, 0xe0004, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffd, 0xbe3}, 0x8008, 0x4, 0x4, 0x0, 0x1e4, 0x9, 0x7ff, 0x0, 0x3, 0x0, 0x2}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000540)={0x2, 0x80, 0x2, 0x8, 0x1, 0x8, 0x0, 0xfffffffffffffffd, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x5}, 0x20, 0x6, 0xa, 0x2, 0xffff, 0x6, 0xfff8, 0x0, 0xfffffffb, 0x0, 0x9}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x9, 0x10, 0x0, 0xb}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50622, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10000000000, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r6 = socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(r6) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x840) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) fstat(0xffffffffffffffff, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r9, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@rthdr_2292={{0x18, 0x29, 0x5, {0x0, 0x0, 0x2, 0x1}}}], 0x18}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.23' (ED25519) to the list of known hosts. [ 66.995703][ T5855] cgroup: Unknown subsys name 'net' [ 67.187739][ T5855] cgroup: Unknown subsys name 'cpuset' [ 67.196504][ T5855] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.617686][ T5855] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.031371][ T5873] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.040648][ T5873] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.045251][ T5871] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.055738][ T5871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.063933][ T5871] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.072657][ T5876] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.086800][ T5882] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.094764][ T5882] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.097336][ T5880] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.102072][ T5882] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.111594][ T5880] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.118207][ T5882] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.131281][ T5882] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.138883][ T5882] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.145399][ T5880] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.155526][ T5882] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.163163][ T5882] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.174363][ T5883] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.174853][ T5885] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.182373][ T5883] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.195882][ T5885] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.197621][ T5883] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.203955][ T5885] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.211230][ T5883] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.234709][ T5885] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.370588][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.377122][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.745761][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 71.939533][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 72.032094][ T5877] chnl_net:caif_netlink_parms(): no params data found [ 72.080892][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 72.120417][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.127700][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.135778][ T5865] bridge_slave_0: entered allmulticast mode [ 72.142816][ T5865] bridge_slave_0: entered promiscuous mode [ 72.163033][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.170430][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.177773][ T5865] bridge_slave_1: entered allmulticast mode [ 72.185391][ T5865] bridge_slave_1: entered promiscuous mode [ 72.212172][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 72.314607][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.321753][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.329388][ T5872] bridge_slave_0: entered allmulticast mode [ 72.336549][ T5872] bridge_slave_0: entered promiscuous mode [ 72.353469][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.380770][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.388147][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.395522][ T5872] bridge_slave_1: entered allmulticast mode [ 72.402439][ T5872] bridge_slave_1: entered promiscuous mode [ 72.411723][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.525711][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.538246][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.548964][ T5865] team0: Port device team_slave_0 added [ 72.558315][ T5865] team0: Port device team_slave_1 added [ 72.579640][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.586855][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.594181][ T5877] bridge_slave_0: entered allmulticast mode [ 72.601128][ T5877] bridge_slave_0: entered promiscuous mode [ 72.646469][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.653619][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.661322][ T5867] bridge_slave_0: entered allmulticast mode [ 72.669124][ T5867] bridge_slave_0: entered promiscuous mode [ 72.676561][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.683719][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.691690][ T5877] bridge_slave_1: entered allmulticast mode [ 72.698727][ T5877] bridge_slave_1: entered promiscuous mode [ 72.720258][ T5872] team0: Port device team_slave_0 added [ 72.737746][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.745461][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.752642][ T5867] bridge_slave_1: entered allmulticast mode [ 72.760316][ T5867] bridge_slave_1: entered promiscuous mode [ 72.810472][ T5872] team0: Port device team_slave_1 added [ 72.817731][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.824741][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.850998][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.864769][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.871718][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.897688][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.931667][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.939151][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.946674][ T5874] bridge_slave_0: entered allmulticast mode [ 72.953557][ T5874] bridge_slave_0: entered promiscuous mode [ 72.993561][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.006349][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.017984][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.027982][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.035950][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.043156][ T5874] bridge_slave_1: entered allmulticast mode [ 73.050359][ T5874] bridge_slave_1: entered promiscuous mode [ 73.072710][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.079778][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.106190][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.132037][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.156663][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.166510][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.173471][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.200386][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.200450][ T5871] Bluetooth: hci2: command tx timeout [ 73.260183][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.274333][ T5871] Bluetooth: hci0: command tx timeout [ 73.274520][ T5186] Bluetooth: hci4: command tx timeout [ 73.280160][ T51] Bluetooth: hci1: command tx timeout [ 73.291290][ T5885] Bluetooth: hci3: command tx timeout [ 73.302540][ T5867] team0: Port device team_slave_0 added [ 73.359721][ T5867] team0: Port device team_slave_1 added [ 73.367368][ T5877] team0: Port device team_slave_0 added [ 73.379511][ T5865] hsr_slave_0: entered promiscuous mode [ 73.386013][ T5865] hsr_slave_1: entered promiscuous mode [ 73.393991][ T5874] team0: Port device team_slave_0 added [ 73.403071][ T5874] team0: Port device team_slave_1 added [ 73.433372][ T5877] team0: Port device team_slave_1 added [ 73.486895][ T5872] hsr_slave_0: entered promiscuous mode [ 73.493151][ T5872] hsr_slave_1: entered promiscuous mode [ 73.499774][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 73.506239][ T5872] Cannot create hsr debugfs directory [ 73.540711][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.547859][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.573975][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.586825][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.593790][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.619798][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.631491][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.638561][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.664781][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.716327][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.723299][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.749432][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.761002][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.768133][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.794164][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.848248][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.855473][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.881419][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.929908][ T5874] hsr_slave_0: entered promiscuous mode [ 73.936499][ T5874] hsr_slave_1: entered promiscuous mode [ 73.942470][ T5874] debugfs: 'hsr0' already exists in 'hsr' [ 73.948252][ T5874] Cannot create hsr debugfs directory [ 74.102623][ T5877] hsr_slave_0: entered promiscuous mode [ 74.109107][ T5877] hsr_slave_1: entered promiscuous mode [ 74.115404][ T5877] debugfs: 'hsr0' already exists in 'hsr' [ 74.121130][ T5877] Cannot create hsr debugfs directory [ 74.132412][ T5867] hsr_slave_0: entered promiscuous mode [ 74.139249][ T5867] hsr_slave_1: entered promiscuous mode [ 74.145656][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 74.151382][ T5867] Cannot create hsr debugfs directory [ 74.493278][ T5865] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.507463][ T5865] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.543848][ T5865] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.577708][ T5865] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.661097][ T5872] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.674999][ T5872] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.689424][ T5872] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.702383][ T5872] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.798078][ T5874] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.812127][ T5874] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.824032][ T5874] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.837608][ T5874] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.975538][ T5867] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.987325][ T5867] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.025455][ T5867] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.060877][ T5867] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.072971][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.147579][ T5877] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.162939][ T5877] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.176871][ T5877] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.191711][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.215393][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.222277][ T5877] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.265256][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.275000][ T5871] Bluetooth: hci2: command tx timeout [ 75.282668][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.290043][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.307339][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.331432][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.338603][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.354384][ T5871] Bluetooth: hci0: command tx timeout [ 75.359826][ T5871] Bluetooth: hci1: command tx timeout [ 75.364709][ T5885] Bluetooth: hci3: command tx timeout [ 75.366012][ T5871] Bluetooth: hci4: command tx timeout [ 75.382894][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.390089][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.410530][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.428960][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.436637][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.448172][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.455332][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.510710][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.517903][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.602005][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.649182][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.700702][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.707910][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.749810][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.757011][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.880061][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.982162][ T5877] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.021807][ T3565] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.029041][ T3565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.113932][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.121178][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.292141][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.325477][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.352143][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.481650][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.528346][ T5865] veth0_vlan: entered promiscuous mode [ 76.573832][ T5865] veth1_vlan: entered promiscuous mode [ 76.645134][ T5874] veth0_vlan: entered promiscuous mode [ 76.669913][ T5874] veth1_vlan: entered promiscuous mode [ 76.711848][ T5867] veth0_vlan: entered promiscuous mode [ 76.766272][ T5867] veth1_vlan: entered promiscuous mode [ 76.823458][ T5865] veth0_macvtap: entered promiscuous mode [ 76.837536][ T5874] veth0_macvtap: entered promiscuous mode [ 76.853452][ T5865] veth1_macvtap: entered promiscuous mode [ 76.869837][ T5874] veth1_macvtap: entered promiscuous mode [ 76.919914][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.930126][ T5872] veth0_vlan: entered promiscuous mode [ 76.953077][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.966114][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.983959][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.000168][ T5867] veth0_macvtap: entered promiscuous mode [ 77.012210][ T5872] veth1_vlan: entered promiscuous mode [ 77.030139][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.050644][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.070561][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.081482][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.100984][ T5867] veth1_macvtap: entered promiscuous mode [ 77.117678][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.138314][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.147260][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.180091][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.189213][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.213178][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.252649][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.279202][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.317764][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.327564][ T3505] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.354693][ T5871] Bluetooth: hci2: command tx timeout [ 77.362194][ T3536] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.392498][ T5877] veth0_vlan: entered promiscuous mode [ 77.396150][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.408997][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.410011][ T5872] veth0_macvtap: entered promiscuous mode [ 77.435371][ T5871] Bluetooth: hci3: command tx timeout [ 77.435413][ T51] Bluetooth: hci1: command tx timeout [ 77.440836][ T5871] Bluetooth: hci0: command tx timeout [ 77.446741][ T5885] Bluetooth: hci4: command tx timeout [ 77.480246][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.489030][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.521933][ T5872] veth1_macvtap: entered promiscuous mode [ 77.531921][ T5877] veth1_vlan: entered promiscuous mode [ 77.580450][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.595639][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.659989][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.670794][ T3536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.684544][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.702654][ T3536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.706793][ T5877] veth0_macvtap: entered promiscuous mode [ 77.721191][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.770911][ T5874] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.776574][ T5877] veth1_macvtap: entered promiscuous mode [ 77.802610][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.822438][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.833898][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.864438][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.873792][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.929698][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.968334][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.006065][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.052986][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.072479][ T5987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 78.088203][ T5987] netlink: 'syz.0.1': attribute type 21 has an invalid length. [ 78.140685][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.310638][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.333993][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.383306][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.614572][ C1] hrtimer: interrupt took 1074273 ns [ 78.964204][ T5999] netlink: 'syz.0.6': attribute type 4 has an invalid length. [ 79.004787][ T6004] netlink: 'syz.1.7': attribute type 1 has an invalid length. [ 79.013177][ T3536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.026996][ T3536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.038980][ T5999] netlink: 'syz.0.6': attribute type 4 has an invalid length. [ 79.051484][ T5999] netlink: 199756 bytes leftover after parsing attributes in process `syz.0.6'. [ 79.194790][ T6007] Unknown options in mask b7f2 [ 79.466760][ T5885] Bluetooth: hci2: command tx timeout [ 79.514392][ T5885] Bluetooth: hci4: command tx timeout [ 79.519842][ T5885] Bluetooth: hci1: command tx timeout [ 79.525402][ T51] Bluetooth: hci0: command tx timeout [ 79.530809][ T51] Bluetooth: hci3: command tx timeout [ 80.054285][ T6006] netlink: 10 bytes leftover after parsing attributes in process `syz.3.8'. [ 80.075547][ T6016] netlink: 'syz.1.10': attribute type 10 has an invalid length. [ 80.149019][ T6016] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.157394][ T6016] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.226843][ T6016] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.234162][ T6016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.239733][ T120] cfg80211: failed to load regulatory.db [ 80.242170][ T6016] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.254258][ T6016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.315039][ T6016] team0: Port device bridge0 added [ 80.351286][ T6018] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11'. [ 80.381527][ T6022] warning: `syz.1.10' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.439473][ T2998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.468213][ T2998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.525257][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.546294][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.151928][ T3536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.187507][ T3536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.573692][ T6048] netlink: 'syz.0.16': attribute type 21 has an invalid length. [ 81.764978][ T6048] netlink: 'syz.0.16': attribute type 6 has an invalid length. [ 81.882865][ T6048] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16'. [ 82.170359][ T6055] netlink: 'syz.3.19': attribute type 10 has an invalid length. [ 83.610739][ T6055] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 83.749905][ T6074] netlink: 13439 bytes leftover after parsing attributes in process `syz.3.19'. [ 84.035180][ T6080] netlink: 'syz.0.22': attribute type 13 has an invalid length. [ 84.109565][ T6080] netlink: 'syz.0.22': attribute type 17 has an invalid length. [ 84.299969][ T6091] Zero length message leads to an empty skb [ 84.318967][ T6091] netlink: 'syz.1.25': attribute type 23 has an invalid length. [ 84.780564][ T6080] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 85.222858][ T6101] ======================================================= [ 85.222858][ T6101] WARNING: The mand mount option has been deprecated and [ 85.222858][ T6101] and is ignored by this kernel. Remove the mand [ 85.222858][ T6101] option from the mount to silence this warning. [ 85.222858][ T6101] ======================================================= [ 85.271898][ T6097] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.29'. [ 85.300557][ T6101] tmpfs: Unknown parameter '' [ 85.362177][ T6100] netlink: 'syz.0.28': attribute type 21 has an invalid length. [ 85.806115][ T6107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.30'. [ 87.063837][ T6116] syz.3.32 (6116) used greatest stack depth: 14896 bytes left [ 88.233608][ T6141] raw_sendmsg: syz.3.41 forgot to set AF_INET. Fix it! [ 88.498157][ T6148] netlink: 'syz.1.44': attribute type 10 has an invalid length. [ 88.668327][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.680943][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.945069][ T6149] netlink: 56 bytes leftover after parsing attributes in process `syz.1.44'. [ 89.615438][ T6148] team0: Port device bridge0 removed [ 89.638267][ T6148] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.646127][ T6148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.654766][ T6148] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.662238][ T6148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.724385][ T6148] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 93.113871][ T30] audit: type=1107 audit(1759093814.875:2): pid=6182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 93.356173][ T6189] netlink: 'syz.3.57': attribute type 37 has an invalid length. [ 93.490527][ T6195] netlink: 6 bytes leftover after parsing attributes in process `syz.2.60'. [ 93.754299][ T6205] netlink: 'syz.3.62': attribute type 21 has an invalid length. [ 93.782852][ T6205] netlink: 'syz.3.62': attribute type 6 has an invalid length. [ 93.836987][ T6205] netlink: 132 bytes leftover after parsing attributes in process `syz.3.62'. [ 94.041151][ T6212] netlink: 132 bytes leftover after parsing attributes in process `syz.4.65'. [ 94.843002][ T6225] netlink: 'syz.2.68': attribute type 21 has an invalid length. [ 94.884573][ T6225] netlink: 156 bytes leftover after parsing attributes in process `syz.2.68'. [ 95.481072][ T6229] netlink: 10 bytes leftover after parsing attributes in process `syz.4.71'. [ 95.822239][ T6243] netlink: 16 bytes leftover after parsing attributes in process `syz.0.74'. [ 95.961670][ T6248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.68'. [ 96.354831][ T6254] netlink: 'syz.0.76': attribute type 1 has an invalid length. [ 96.689835][ T6252] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.906777][ T6267] netlink: 'syz.4.80': attribute type 37 has an invalid length. [ 97.080824][ T6271] netlink: 'syz.2.82': attribute type 10 has an invalid length. [ 97.107567][ T6271] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.115326][ T6271] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.214681][ T6271] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.221848][ T6271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.229422][ T6271] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.236617][ T6271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.296184][ T6271] team0: Port device bridge0 added [ 98.265308][ T6291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.86'. [ 98.303396][ T6290] netlink: 'syz.1.87': attribute type 10 has an invalid length. [ 98.331086][ T6290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.344975][ T6290] team0: Port device bond0 added [ 98.427795][ T6294] netlink: 10 bytes leftover after parsing attributes in process `syz.3.88'. [ 98.976403][ T6303] netlink: 'syz.2.91': attribute type 21 has an invalid length. [ 98.984645][ T6303] netlink: 'syz.2.91': attribute type 6 has an invalid length. [ 98.992349][ T6303] netlink: 132 bytes leftover after parsing attributes in process `syz.2.91'. [ 99.187322][ T6311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.93'. [ 99.315360][ T6315] netlink: 32 bytes leftover after parsing attributes in process `syz.3.94'. [ 99.328028][ T6315] openvswitch: netlink: Flow actions attr not present in new flow. [ 99.347768][ T6315] netlink: 68 bytes leftover after parsing attributes in process `syz.3.94'. [ 99.375602][ T6315] _ÐZ`Ô€@S!: entered promiscuous mode [ 99.383199][ T6315] netlink: 'syz.3.94': attribute type 2 has an invalid length. [ 99.404037][ T6315] k›*·]: entered promiscuous mode [ 99.986983][ T6332] netlink: 16 bytes leftover after parsing attributes in process `syz.1.101'. [ 100.237111][ T6332] netlink: 132 bytes leftover after parsing attributes in process `syz.1.101'. [ 100.455397][ T6349] netlink: 10 bytes leftover after parsing attributes in process `syz.3.104'. [ 101.847387][ T6374] netlink: 32 bytes leftover after parsing attributes in process `syz.0.115'. [ 101.900244][ T6383] netlink: 68 bytes leftover after parsing attributes in process `syz.0.115'. [ 101.904276][ T6374] openvswitch: netlink: Flow actions attr not present in new flow. [ 102.052529][ T6383] _ÐZ`Ô€@S!: entered promiscuous mode [ 102.133969][ T6374] netlink: 'syz.0.115': attribute type 2 has an invalid length. [ 102.241066][ T6374] k›*·]: entered promiscuous mode [ 103.207378][ T6417] netlink: 16 bytes leftover after parsing attributes in process `syz.4.129'. [ 103.394472][ T6426] netlink: 16 bytes leftover after parsing attributes in process `syz.1.131'. [ 103.589084][ T6425] syzkaller0: entered promiscuous mode [ 103.599975][ T6425] syzkaller0: entered allmulticast mode [ 104.255707][ T6453] __nla_validate_parse: 1 callbacks suppressed [ 104.255728][ T6453] netlink: 212424 bytes leftover after parsing attributes in process `syz.1.142'. [ 104.915925][ T6460] netlink: 16 bytes leftover after parsing attributes in process `syz.4.143'. [ 104.935832][ T6460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.949288][ T6460] netlink: 68 bytes leftover after parsing attributes in process `syz.4.143'. [ 105.024540][ T6461] netlink: 'syz.4.143': attribute type 2 has an invalid length. [ 105.460284][ T6460] _ÐZ`Ô€@S!: entered promiscuous mode [ 105.477696][ T6461] k›*·]: entered promiscuous mode [ 106.221885][ T6488] netlink: 32 bytes leftover after parsing attributes in process `syz.1.151'. [ 106.235608][ T6488] openvswitch: netlink: Flow actions attr not present in new flow. [ 106.252488][ T6488] netlink: 68 bytes leftover after parsing attributes in process `syz.1.151'. [ 106.262526][ T6486] netlink: 'syz.4.153': attribute type 10 has an invalid length. [ 106.328993][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.154'. [ 106.340852][ T6486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.365024][ T6492] netlink: 'syz.1.151': attribute type 2 has an invalid length. [ 106.373866][ T6486] team0: Port device bond0 added [ 106.403596][ T6488] _ÐZ`Ô€@S!: entered promiscuous mode [ 106.456448][ T6492] k›*·]: entered promiscuous mode [ 106.609589][ T6499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.155'. [ 106.650136][ T6499] netlink: 48 bytes leftover after parsing attributes in process `syz.4.155'. [ 107.079194][ T6510] netlink: 48 bytes leftover after parsing attributes in process `syz.2.159'. [ 107.229904][ T6514] FAULT_INJECTION: forcing a failure. [ 107.229904][ T6514] name failslab, interval 1, probability 0, space 0, times 1 [ 107.263998][ T6516] syz.1.162 uses obsolete (PF_INET,SOCK_PACKET) [ 107.270614][ T6514] CPU: 1 UID: 0 PID: 6514 Comm: syz.3.161 Not tainted syzkaller #0 PREEMPT(full) [ 107.270637][ T6514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 107.270653][ T6514] Call Trace: [ 107.270660][ T6514] [ 107.270668][ T6514] dump_stack_lvl+0x189/0x250 [ 107.270705][ T6514] ? __pfx____ratelimit+0x10/0x10 [ 107.270726][ T6514] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.270745][ T6514] ? __pfx__printk+0x10/0x10 [ 107.270769][ T6514] ? __lock_acquire+0xab9/0xd20 [ 107.270801][ T6514] should_fail_ex+0x414/0x560 [ 107.270825][ T6514] should_failslab+0xa8/0x100 [ 107.270843][ T6514] kmem_cache_alloc_noprof+0x73/0x3c0 [ 107.270866][ T6514] ? skb_clone+0x212/0x3a0 [ 107.270886][ T6514] skb_clone+0x212/0x3a0 [ 107.270905][ T6514] __netlink_deliver_tap+0x404/0x850 [ 107.270938][ T6514] ? netlink_deliver_tap+0x2e/0x1b0 [ 107.270959][ T6514] netlink_deliver_tap+0x19c/0x1b0 [ 107.270980][ T6514] netlink_unicast+0x7fa/0x9e0 [ 107.271008][ T6514] ? __pfx_netlink_unicast+0x10/0x10 [ 107.271028][ T6514] ? netlink_sendmsg+0x642/0xb30 [ 107.271046][ T6514] ? skb_put+0x11b/0x210 [ 107.271071][ T6514] netlink_sendmsg+0x805/0xb30 [ 107.271101][ T6514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.271124][ T6514] ? aa_sock_msg_perm+0xf1/0x1d0 [ 107.271146][ T6514] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 107.271166][ T6514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.271187][ T6514] __sock_sendmsg+0x219/0x270 [ 107.271208][ T6514] ____sys_sendmsg+0x505/0x830 [ 107.271237][ T6514] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.271269][ T6514] ? import_iovec+0x74/0xa0 [ 107.271296][ T6514] ___sys_sendmsg+0x21f/0x2a0 [ 107.271321][ T6514] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.271381][ T6514] ? __fget_files+0x2a/0x420 [ 107.271397][ T6514] ? __fget_files+0x3a0/0x420 [ 107.271425][ T6514] __x64_sys_sendmsg+0x19b/0x260 [ 107.271451][ T6514] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 107.271483][ T6514] ? __pfx_ksys_write+0x10/0x10 [ 107.271496][ T6514] ? rcu_is_watching+0x15/0xb0 [ 107.271519][ T6514] ? do_syscall_64+0xbe/0x3b0 [ 107.271543][ T6514] do_syscall_64+0xfa/0x3b0 [ 107.271562][ T6514] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.271580][ T6514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.271596][ T6514] ? clear_bhb_loop+0x60/0xb0 [ 107.271632][ T6514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.271648][ T6514] RIP: 0033:0x7f861098eec9 [ 107.271667][ T6514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.271680][ T6514] RSP: 002b:00007f8611747038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.271703][ T6514] RAX: ffffffffffffffda RBX: 00007f8610be5fa0 RCX: 00007f861098eec9 [ 107.271714][ T6514] RDX: 00000000000000c4 RSI: 0000200000000280 RDI: 0000000000000003 [ 107.271725][ T6514] RBP: 00007f8611747090 R08: 0000000000000000 R09: 0000000000000000 [ 107.271734][ T6514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.271744][ T6514] R13: 00007f8610be6038 R14: 00007f8610be5fa0 R15: 00007ffec4045bd8 [ 107.271773][ T6514] [ 107.644057][ T6510] Illegal XDP return value 12 on prog (id 111) dev N/A, expect packet loss! [ 107.767996][ T6522] netlink: 52 bytes leftover after parsing attributes in process `syz.4.163'. [ 108.210924][ T6532] FAULT_INJECTION: forcing a failure. [ 108.210924][ T6532] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 108.264297][ T6532] CPU: 1 UID: 0 PID: 6532 Comm: syz.1.166 Not tainted syzkaller #0 PREEMPT(full) [ 108.264318][ T6532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 108.264328][ T6532] Call Trace: [ 108.264335][ T6532] [ 108.264342][ T6532] dump_stack_lvl+0x189/0x250 [ 108.264370][ T6532] ? __pfx____ratelimit+0x10/0x10 [ 108.264391][ T6532] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.264410][ T6532] ? __pfx__printk+0x10/0x10 [ 108.264444][ T6532] should_fail_ex+0x414/0x560 [ 108.264468][ T6532] _copy_to_user+0x31/0xb0 [ 108.264486][ T6532] simple_read_from_buffer+0xe1/0x170 [ 108.264509][ T6532] proc_fail_nth_read+0x1b3/0x220 [ 108.264533][ T6532] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 108.264556][ T6532] ? rw_verify_area+0x2a6/0x4d0 [ 108.264577][ T6532] ? __lock_acquire+0xab9/0xd20 [ 108.264596][ T6532] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 108.264617][ T6532] vfs_read+0x200/0xa30 [ 108.264638][ T6532] ? fdget_pos+0x247/0x320 [ 108.264659][ T6532] ? __pfx___mutex_lock+0x10/0x10 [ 108.264680][ T6532] ? __pfx_vfs_read+0x10/0x10 [ 108.264703][ T6532] ? __fget_files+0x2a/0x420 [ 108.264722][ T6532] ? __fget_files+0x3a0/0x420 [ 108.264736][ T6532] ? __fget_files+0x2a/0x420 [ 108.264760][ T6532] ksys_read+0x145/0x250 [ 108.264776][ T6532] ? __pfx_ksys_read+0x10/0x10 [ 108.264795][ T6532] ? do_syscall_64+0xbe/0x3b0 [ 108.264817][ T6532] do_syscall_64+0xfa/0x3b0 [ 108.264833][ T6532] ? lockdep_hardirqs_on+0x9c/0x150 [ 108.264849][ T6532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.264863][ T6532] ? clear_bhb_loop+0x60/0xb0 [ 108.264898][ T6532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.264913][ T6532] RIP: 0033:0x7fb63298d8dc [ 108.264929][ T6532] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 108.264942][ T6532] RSP: 002b:00007fb6337b8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 108.264960][ T6532] RAX: ffffffffffffffda RBX: 00007fb632be5fa0 RCX: 00007fb63298d8dc [ 108.264971][ T6532] RDX: 000000000000000f RSI: 00007fb6337b80a0 RDI: 0000000000000004 [ 108.264980][ T6532] RBP: 00007fb6337b8090 R08: 0000000000000000 R09: 0000000000000000 [ 108.264990][ T6532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.264998][ T6532] R13: 00007fb632be6038 R14: 00007fb632be5fa0 R15: 00007ffc951bbb38 [ 108.265027][ T6532] [ 108.578266][ T6537] FAULT_INJECTION: forcing a failure. [ 108.578266][ T6537] name failslab, interval 1, probability 0, space 0, times 0 [ 108.613181][ T6537] CPU: 1 UID: 0 PID: 6537 Comm: syz.0.169 Not tainted syzkaller #0 PREEMPT(full) [ 108.613205][ T6537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 108.613215][ T6537] Call Trace: [ 108.613221][ T6537] [ 108.613229][ T6537] dump_stack_lvl+0x189/0x250 [ 108.613254][ T6537] ? __pfx____ratelimit+0x10/0x10 [ 108.613273][ T6537] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.613291][ T6537] ? __pfx__printk+0x10/0x10 [ 108.613314][ T6537] ? __lock_acquire+0xab9/0xd20 [ 108.613345][ T6537] should_fail_ex+0x414/0x560 [ 108.613368][ T6537] should_failslab+0xa8/0x100 [ 108.613388][ T6537] kmem_cache_alloc_noprof+0x73/0x3c0 [ 108.613411][ T6537] ? skb_clone+0x212/0x3a0 [ 108.613423][ T6537] ? __netlink_deliver_tap+0x24f/0x850 [ 108.613447][ T6537] skb_clone+0x212/0x3a0 [ 108.613465][ T6537] __netlink_deliver_tap+0x404/0x850 [ 108.613498][ T6537] ? netlink_deliver_tap+0x2e/0x1b0 [ 108.613518][ T6537] netlink_deliver_tap+0x19c/0x1b0 [ 108.613537][ T6537] netlink_unicast+0x7fa/0x9e0 [ 108.613565][ T6537] ? __pfx_netlink_unicast+0x10/0x10 [ 108.613585][ T6537] ? netlink_sendmsg+0x642/0xb30 [ 108.613603][ T6537] ? skb_put+0x11b/0x210 [ 108.613628][ T6537] netlink_sendmsg+0x805/0xb30 [ 108.613659][ T6537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.613688][ T6537] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 108.613708][ T6537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.613729][ T6537] __sock_sendmsg+0x219/0x270 [ 108.613752][ T6537] ____sys_sendmsg+0x505/0x830 [ 108.613787][ T6537] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.613820][ T6537] ? import_iovec+0x74/0xa0 [ 108.613847][ T6537] ___sys_sendmsg+0x21f/0x2a0 [ 108.613872][ T6537] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.613932][ T6537] ? __fget_files+0x2a/0x420 [ 108.613949][ T6537] ? __fget_files+0x3a0/0x420 [ 108.613978][ T6537] __x64_sys_sendmsg+0x19b/0x260 [ 108.613998][ T6537] ? clockevents_program_event+0x24d/0x360 [ 108.614021][ T6537] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 108.614061][ T6537] ? do_syscall_64+0xbe/0x3b0 [ 108.614083][ T6537] do_syscall_64+0xfa/0x3b0 [ 108.614102][ T6537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.614117][ T6537] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 108.614132][ T6537] ? clear_bhb_loop+0x60/0xb0 [ 108.614152][ T6537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.614168][ T6537] RIP: 0033:0x7f010518eec9 [ 108.614183][ T6537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.614197][ T6537] RSP: 002b:00007f0105f9a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.614214][ T6537] RAX: ffffffffffffffda RBX: 00007f01053e6090 RCX: 00007f010518eec9 [ 108.614226][ T6537] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 108.614235][ T6537] RBP: 00007f0105f9a090 R08: 0000000000000000 R09: 0000000000000000 [ 108.614245][ T6537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.614254][ T6537] R13: 00007f01053e6128 R14: 00007f01053e6090 R15: 00007ffe273aed08 [ 108.614283][ T6537] [ 108.959088][ T30] audit: type=1107 audit(1759093830.725:3): pid=6538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ei¶Ý2s‘º¤œž¼%’ÂzËŒ$æ'Û½õ,d_]' [ 108.973876][ T30] audit: type=1107 audit(1759093830.725:4): pid=6538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ei¶Ý2s‘º¤œž¼%’ÂzËŒ$æ'Û½õ,d_]' [ 108.989190][ T30] audit: type=1107 audit(1759093830.725:5): pid=6538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ei¶Ý2s‘º¤œž¼%’ÂzËŒ$æ'Û½õ,d_]' [ 109.003894][ T30] audit: type=1107 audit(1759093830.745:6): pid=6538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ei¶Ý2s‘º¤œž¼%’ÂzËŒ$æ'Û½õ,d_]' [ 109.018578][ T30] audit: type=1107 audit(1759093830.745:7): pid=6538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ei¶Ý2s‘º¤œž¼%’ÂzËŒ$æ'Û½õ,d_]' [ 109.033488][ T30] audit: type=1107 audit(1759093830.745:8): pid=6538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ei¶Ý2s‘º¤œž¼%’ÂzËŒ$æ'Û½õ,d_]' [ 109.048729][ T30] audit: type=1107 audit(1759093830.745:9): pid=6538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ei¶Ý2s‘º¤œž¼%’ÂzËŒ$æ'Û½õ,d_]' [ 109.063484][ T30] audit: type=1107 audit(1759093830.745:10): pid=6538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ei¶Ý2s‘º¤œž¼%’ÂzËŒ$æ'Û½õ,d_]' [ 109.078232][ T30] audit: type=1107 audit(1759093830.745:11): pid=6538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ei¶Ý2s‘º¤œž¼%’ÂzËŒ$æ'Û½õ,d_]' [ 109.093629][ T30] audit: type=1107 audit(1759093830.745:12): pid=6538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ei¶Ý2s‘º¤œž¼%’ÂzËŒ$æ'Û½õ,d_]' [ 110.265328][ T6561] netlink: 10 bytes leftover after parsing attributes in process `syz.0.174'. [ 110.563764][ T6582] netlink: 'syz.0.179': attribute type 2 has an invalid length. [ 110.604301][ T6582] netlink: 137592 bytes leftover after parsing attributes in process `syz.0.179'. [ 110.678298][ T6588] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.180'. [ 112.756000][ T6623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.941899][ T6628] netlink: 'syz.0.194': attribute type 10 has an invalid length. [ 113.041637][ T6628] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 113.885761][ T6645] netlink: 'syz.2.198': attribute type 32 has an invalid length. [ 114.213831][ T6653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.202'. [ 114.263475][ T6653] netlink: 48 bytes leftover after parsing attributes in process `syz.0.202'. [ 114.343884][ T6656] netlink: 16 bytes leftover after parsing attributes in process `syz.1.203'. [ 114.955049][ T6665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.977861][ T6665] netlink: 68 bytes leftover after parsing attributes in process `syz.0.206'. [ 115.054337][ T6665] netlink: 'syz.0.206': attribute type 2 has an invalid length. [ 115.145699][ T6673] netlink: 14 bytes leftover after parsing attributes in process `syz.2.208'. [ 115.180078][ T6673] hsr_slave_0: left promiscuous mode [ 115.197603][ T6673] hsr_slave_1: left promiscuous mode [ 116.451303][ T6699] netlink: 16 bytes leftover after parsing attributes in process `syz.3.218'. [ 117.090080][ T6717] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.223'. [ 117.099422][ T6717] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.223'. [ 117.196219][ T6719] netlink: 'syz.1.225': attribute type 10 has an invalid length. [ 117.205733][ T6719] netlink: 40 bytes leftover after parsing attributes in process `syz.1.225'. [ 117.221693][ T6719] ipvlan1: entered promiscuous mode [ 117.270301][ T6719] ipvlan1: entered allmulticast mode [ 117.277690][ T6719] veth0_vlan: entered allmulticast mode [ 117.293503][ T6719] bridge0: port 3(ipvlan1) entered blocking state [ 117.303456][ T6719] bridge0: port 3(ipvlan1) entered disabled state [ 117.345625][ T6719] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 117.574495][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.228'. [ 118.028302][ T6751] netlink: 16 bytes leftover after parsing attributes in process `syz.1.232'. [ 118.367566][ T6760] netlink: 20 bytes leftover after parsing attributes in process `syz.4.237'. [ 119.388103][ T6788] syzkaller0: entered promiscuous mode [ 119.412459][ T6788] syzkaller0: entered allmulticast mode [ 119.433495][ T6791] netlink: 16 bytes leftover after parsing attributes in process `syz.1.246'. [ 119.441111][ T6796] netlink: 'syz.3.247': attribute type 10 has an invalid length. [ 119.622928][ T6796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.640946][ T6796] team0: Port device bond0 added [ 119.711876][ T6805] netlink: 'syz.1.249': attribute type 10 has an invalid length. [ 119.962868][ T6815] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.253'. [ 120.189583][ T6819] netlink: 24 bytes leftover after parsing attributes in process `syz.3.255'. [ 120.427460][ T6826] openvswitch: netlink: Flow actions attr not present in new flow. [ 120.459161][ T6826] FAULT_INJECTION: forcing a failure. [ 120.459161][ T6826] name failslab, interval 1, probability 0, space 0, times 0 [ 120.478239][ T6826] CPU: 1 UID: 0 PID: 6826 Comm: syz.0.257 Not tainted syzkaller #0 PREEMPT(full) [ 120.478261][ T6826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 120.478270][ T6826] Call Trace: [ 120.478277][ T6826] [ 120.478284][ T6826] dump_stack_lvl+0x189/0x250 [ 120.478317][ T6826] ? __pfx____ratelimit+0x10/0x10 [ 120.478338][ T6826] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.478357][ T6826] ? __pfx__printk+0x10/0x10 [ 120.478383][ T6826] ? __pfx___might_resched+0x10/0x10 [ 120.478404][ T6826] should_fail_ex+0x414/0x560 [ 120.478427][ T6826] should_failslab+0xa8/0x100 [ 120.478445][ T6826] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 120.478470][ T6826] ? __alloc_skb+0x112/0x2d0 [ 120.478494][ T6826] __alloc_skb+0x112/0x2d0 [ 120.478517][ T6826] netlink_sendmsg+0x5c6/0xb30 [ 120.478544][ T6826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.478566][ T6826] ? aa_sock_msg_perm+0xf1/0x1d0 [ 120.478585][ T6826] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 120.478603][ T6826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.478632][ T6826] __sock_sendmsg+0x219/0x270 [ 120.478654][ T6826] ____sys_sendmsg+0x505/0x830 [ 120.478683][ T6826] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.478715][ T6826] ? import_iovec+0x74/0xa0 [ 120.478743][ T6826] ___sys_sendmsg+0x21f/0x2a0 [ 120.478768][ T6826] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.478826][ T6826] ? __fget_files+0x2a/0x420 [ 120.478843][ T6826] ? __fget_files+0x3a0/0x420 [ 120.478869][ T6826] __x64_sys_sendmsg+0x19b/0x260 [ 120.478895][ T6826] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 120.478927][ T6826] ? __pfx_ksys_write+0x10/0x10 [ 120.478940][ T6826] ? rcu_is_watching+0x15/0xb0 [ 120.478963][ T6826] ? do_syscall_64+0xbe/0x3b0 [ 120.478987][ T6826] do_syscall_64+0xfa/0x3b0 [ 120.479006][ T6826] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.479025][ T6826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.479041][ T6826] ? clear_bhb_loop+0x60/0xb0 [ 120.479060][ T6826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.479075][ T6826] RIP: 0033:0x7f010518eec9 [ 120.479096][ T6826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.479109][ T6826] RSP: 002b:00007f0105f9a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.479133][ T6826] RAX: ffffffffffffffda RBX: 00007f01053e6090 RCX: 00007f010518eec9 [ 120.479145][ T6826] RDX: 000000000000c010 RSI: 0000200000000040 RDI: 000000000000000b [ 120.479155][ T6826] RBP: 00007f0105f9a090 R08: 0000000000000000 R09: 0000000000000000 [ 120.479165][ T6826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.479174][ T6826] R13: 00007f01053e6128 R14: 00007f01053e6090 R15: 00007ffe273aed08 [ 120.479202][ T6826] [ 120.479973][ T6826] netlink: 'syz.0.257': attribute type 2 has an invalid length. [ 121.831993][ T6846] netlink: 'syz.2.264': attribute type 1 has an invalid length. [ 122.469357][ T6858] netlink: 'syz.4.268': attribute type 13 has an invalid length. [ 122.477395][ T6858] netlink: 'syz.4.268': attribute type 17 has an invalid length. [ 122.602954][ T6864] __nla_validate_parse: 4 callbacks suppressed [ 122.602988][ T6864] netlink: 14 bytes leftover after parsing attributes in process `syz.3.270'. [ 122.739499][ T6858] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 122.767420][ T6864] hsr_slave_0: left promiscuous mode [ 122.789609][ T6864] hsr_slave_1: left promiscuous mode [ 122.857483][ T6859] netlink: 'syz.0.266': attribute type 28 has an invalid length. [ 122.937969][ T6859] netlink: 'syz.0.266': attribute type 4 has an invalid length. [ 122.973009][ T6859] netlink: 132 bytes leftover after parsing attributes in process `syz.0.266'. [ 123.235067][ T6862] FAULT_INJECTION: forcing a failure. [ 123.235067][ T6862] name failslab, interval 1, probability 0, space 0, times 0 [ 123.240911][ T6872] netlink: 16 bytes leftover after parsing attributes in process `syz.3.272'. [ 123.248037][ T6862] CPU: 1 UID: 0 PID: 6862 Comm: syz.1.269 Not tainted syzkaller #0 PREEMPT(full) [ 123.248061][ T6862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 123.248071][ T6862] Call Trace: [ 123.248078][ T6862] [ 123.248085][ T6862] dump_stack_lvl+0x189/0x250 [ 123.248109][ T6862] ? __pfx____ratelimit+0x10/0x10 [ 123.248130][ T6862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.248149][ T6862] ? __pfx__printk+0x10/0x10 [ 123.248184][ T6862] should_fail_ex+0x414/0x560 [ 123.248206][ T6862] should_failslab+0xa8/0x100 [ 123.248225][ T6862] __kmalloc_noprof+0xcb/0x4f0 [ 123.248240][ T6862] ? hash_netport4_add+0x1d37/0x2720 [ 123.248268][ T6862] hash_netport4_add+0x1d37/0x2720 [ 123.248321][ T6862] hash_netport4_uadt+0xba9/0xf30 [ 123.248349][ T6862] ? __pfx_hash_netport4_add+0x10/0x10 [ 123.248371][ T6862] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 123.248391][ T6862] ? __nla_validate_parse+0x2400/0x2d40 [ 123.248434][ T6862] call_ad+0x175/0xb00 [ 123.248461][ T6862] ? __pfx_call_ad+0x10/0x10 [ 123.248502][ T6862] ? __nla_parse+0x40/0x60 [ 123.248525][ T6862] ip_set_ad+0x791/0x930 [ 123.248553][ T6862] ? __pfx_ip_set_ad+0x10/0x10 [ 123.248610][ T6862] nfnetlink_rcv_msg+0xb4d/0x1130 [ 123.248630][ T6862] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 123.248667][ T6862] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 123.248693][ T6862] ? kasan_save_free_info+0x46/0x50 [ 123.248740][ T6862] ? perf_trace_preemptirq_template+0xa3/0x340 [ 123.248761][ T6862] ? kasan_quarantine_put+0x3d/0x220 [ 123.248802][ T6862] netlink_rcv_skb+0x208/0x470 [ 123.248823][ T6862] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 123.248843][ T6862] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 123.248875][ T6862] ? bpf_lsm_capable+0x9/0x20 [ 123.248891][ T6862] ? security_capable+0x7e/0x2e0 [ 123.248916][ T6862] nfnetlink_rcv+0x26a/0x2520 [ 123.248938][ T6862] ? __dev_queue_xmit+0x1d79/0x3b50 [ 123.248963][ T6862] ? __dev_queue_xmit+0x27b/0x3b50 [ 123.248990][ T6862] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 123.249008][ T6862] ? __pfx___dev_queue_xmit+0x10/0x10 [ 123.249038][ T6862] ? ref_tracker_free+0x63a/0x7d0 [ 123.249058][ T6862] ? __asan_memcpy+0x40/0x70 [ 123.249077][ T6862] ? __pfx_ref_tracker_free+0x10/0x10 [ 123.249089][ T6862] ? __skb_clone+0x63/0x7a0 [ 123.249113][ T6862] ? __skb_clone+0x483/0x7a0 [ 123.249140][ T6862] ? skb_clone+0x246/0x3a0 [ 123.249158][ T6862] ? __netlink_deliver_tap+0x807/0x850 [ 123.249177][ T6862] ? netlink_deliver_tap+0x2e/0x1b0 [ 123.249203][ T6862] ? netlink_deliver_tap+0x2e/0x1b0 [ 123.249228][ T6862] netlink_unicast+0x82c/0x9e0 [ 123.249255][ T6862] ? __pfx_netlink_unicast+0x10/0x10 [ 123.249275][ T6862] ? netlink_sendmsg+0x642/0xb30 [ 123.249292][ T6862] ? skb_put+0x11b/0x210 [ 123.249315][ T6862] netlink_sendmsg+0x805/0xb30 [ 123.249344][ T6862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.249367][ T6862] ? aa_sock_msg_perm+0xf1/0x1d0 [ 123.249388][ T6862] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 123.249407][ T6862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.249427][ T6862] __sock_sendmsg+0x219/0x270 [ 123.249448][ T6862] ____sys_sendmsg+0x505/0x830 [ 123.249475][ T6862] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.249506][ T6862] ? import_iovec+0x74/0xa0 [ 123.249533][ T6862] ___sys_sendmsg+0x21f/0x2a0 [ 123.249557][ T6862] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.249615][ T6862] ? __fget_files+0x2a/0x420 [ 123.249631][ T6862] ? __fget_files+0x3a0/0x420 [ 123.249658][ T6862] __x64_sys_sendmsg+0x19b/0x260 [ 123.249690][ T6862] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 123.249720][ T6862] ? __pfx_ksys_write+0x10/0x10 [ 123.249733][ T6862] ? rcu_is_watching+0x15/0xb0 [ 123.249755][ T6862] ? do_syscall_64+0xbe/0x3b0 [ 123.249779][ T6862] do_syscall_64+0xfa/0x3b0 [ 123.249796][ T6862] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.249814][ T6862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.249829][ T6862] ? clear_bhb_loop+0x60/0xb0 [ 123.249849][ T6862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.249864][ T6862] RIP: 0033:0x7fb63298eec9 [ 123.249879][ T6862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.249892][ T6862] RSP: 002b:00007fb6337b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.249909][ T6862] RAX: ffffffffffffffda RBX: 00007fb632be5fa0 RCX: 00007fb63298eec9 [ 123.249920][ T6862] RDX: 00000000000000c4 RSI: 0000200000000280 RDI: 0000000000000003 [ 123.249930][ T6862] RBP: 00007fb6337b8090 R08: 0000000000000000 R09: 0000000000000000 [ 123.249939][ T6862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.249948][ T6862] R13: 00007fb632be6038 R14: 00007fb632be5fa0 R15: 00007ffc951bbb38 [ 123.249976][ T6862] [ 123.551759][ T6882] netlink: 16 bytes leftover after parsing attributes in process `syz.1.274'. [ 124.756072][ T6917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.765927][ T6917] netlink: 68 bytes leftover after parsing attributes in process `syz.1.285'. [ 124.823827][ T6918] netlink: 'syz.3.288': attribute type 32 has an invalid length. [ 125.160110][ T6932] FAULT_INJECTION: forcing a failure. [ 125.160110][ T6932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.176545][ T6932] CPU: 1 UID: 0 PID: 6932 Comm: syz.0.292 Not tainted syzkaller #0 PREEMPT(full) [ 125.176568][ T6932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 125.176577][ T6932] Call Trace: [ 125.176584][ T6932] [ 125.176590][ T6932] dump_stack_lvl+0x189/0x250 [ 125.176614][ T6932] ? __pfx____ratelimit+0x10/0x10 [ 125.176634][ T6932] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.176654][ T6932] ? __pfx__printk+0x10/0x10 [ 125.176687][ T6932] should_fail_ex+0x414/0x560 [ 125.176710][ T6932] _copy_to_user+0x31/0xb0 [ 125.176727][ T6932] simple_read_from_buffer+0xe1/0x170 [ 125.176748][ T6932] proc_fail_nth_read+0x1b3/0x220 [ 125.176771][ T6932] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 125.176795][ T6932] ? rw_verify_area+0x2a6/0x4d0 [ 125.176817][ T6932] ? __lock_acquire+0xab9/0xd20 [ 125.176838][ T6932] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 125.176863][ T6932] vfs_read+0x200/0xa30 [ 125.176885][ T6932] ? fdget_pos+0x247/0x320 [ 125.176907][ T6932] ? __pfx___mutex_lock+0x10/0x10 [ 125.176928][ T6932] ? __pfx_vfs_read+0x10/0x10 [ 125.176953][ T6932] ? __fget_files+0x2a/0x420 [ 125.176975][ T6932] ? __fget_files+0x3a0/0x420 [ 125.176991][ T6932] ? __fget_files+0x2a/0x420 [ 125.177018][ T6932] ksys_read+0x145/0x250 [ 125.177036][ T6932] ? __pfx_ksys_read+0x10/0x10 [ 125.177048][ T6932] ? rcu_is_watching+0x15/0xb0 [ 125.177071][ T6932] ? do_syscall_64+0xbe/0x3b0 [ 125.177095][ T6932] do_syscall_64+0xfa/0x3b0 [ 125.177114][ T6932] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.177133][ T6932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.177149][ T6932] ? clear_bhb_loop+0x60/0xb0 [ 125.177170][ T6932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.177185][ T6932] RIP: 0033:0x7f010518d8dc [ 125.177201][ T6932] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 125.177214][ T6932] RSP: 002b:00007f0105fbb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 125.177232][ T6932] RAX: ffffffffffffffda RBX: 00007f01053e5fa0 RCX: 00007f010518d8dc [ 125.177244][ T6932] RDX: 000000000000000f RSI: 00007f0105fbb0a0 RDI: 0000000000000006 [ 125.177254][ T6932] RBP: 00007f0105fbb090 R08: 0000000000000000 R09: 0000000000000000 [ 125.177263][ T6932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.177272][ T6932] R13: 00007f01053e6038 R14: 00007f01053e5fa0 R15: 00007ffe273aed08 [ 125.177302][ T6932] [ 125.810305][ T6950] netlink: 'syz.0.300': attribute type 10 has an invalid length. [ 125.863877][ T6950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.889736][ T6950] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 126.370484][ T6974] netlink: 'syz.1.307': attribute type 21 has an invalid length. [ 126.396771][ T6974] netlink: 'syz.1.307': attribute type 6 has an invalid length. [ 126.415190][ T6973] netlink: 20 bytes leftover after parsing attributes in process `syz.3.308'. [ 126.435310][ T6974] netlink: 132 bytes leftover after parsing attributes in process `syz.1.307'. [ 126.461237][ T6975] netlink: 'syz.0.309': attribute type 13 has an invalid length. [ 126.483104][ T6975] netlink: 'syz.0.309': attribute type 17 has an invalid length. [ 126.998658][ T6975] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.012398][ T6987] netlink: 16 bytes leftover after parsing attributes in process `syz.4.313'. [ 127.028183][ T6984] veth1_macvtap: left promiscuous mode [ 127.035030][ T6984] macsec0: entered promiscuous mode [ 127.048168][ T6984] macsec0: entered allmulticast mode [ 127.113375][ T6985] veth1_macvtap: entered promiscuous mode [ 127.141278][ T6985] veth1_macvtap: entered allmulticast mode [ 127.162286][ T6988] netlink: 132 bytes leftover after parsing attributes in process `syz.4.313'. [ 127.484015][ T7001] netlink: 'syz.0.319': attribute type 10 has an invalid length. [ 127.525801][ T7001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.541098][ T7001] team0: Port device bond0 added [ 127.819351][ T7016] delete_channel: no stack [ 127.917616][ T7022] netlink: 'syz.4.325': attribute type 10 has an invalid length. [ 127.927816][ T7022] netlink: 40 bytes leftover after parsing attributes in process `syz.4.325'. [ 127.958055][ T7022] veth0_vlan: entered allmulticast mode [ 127.981527][ T7022] bridge0: port 3(veth0_vlan) entered blocking state [ 128.000227][ T7022] bridge0: port 3(veth0_vlan) entered disabled state [ 128.027333][ T7028] netlink: 'syz.3.327': attribute type 21 has an invalid length. [ 128.055128][ T7022] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 128.116628][ T7028] netlink: 'syz.3.327': attribute type 6 has an invalid length. [ 128.158408][ T7028] netlink: 132 bytes leftover after parsing attributes in process `syz.3.327'. [ 128.168635][ T7027] netlink: 10 bytes leftover after parsing attributes in process `syz.2.328'. [ 128.541026][ T7048] netlink: 32 bytes leftover after parsing attributes in process `syz.1.334'. [ 128.552251][ T7048] openvswitch: netlink: Flow actions attr not present in new flow. [ 128.563886][ T7048] netlink: 68 bytes leftover after parsing attributes in process `syz.1.334'. [ 128.579654][ T7048] netlink: 'syz.1.334': attribute type 2 has an invalid length. [ 128.683859][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.337'. [ 128.743931][ T7053] netlink: 'syz.4.339': attribute type 10 has an invalid length. [ 128.759659][ T7053] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.768069][ T7053] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.801096][ T7053] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.808339][ T7053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.815966][ T7053] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.823145][ T7053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.916125][ T5871] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 129.012605][ T7053] team0: Port device bridge0 added [ 129.071973][ T7064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.090950][ T7064] netlink: 68 bytes leftover after parsing attributes in process `syz.3.342'. [ 129.119942][ T7064] netlink: 'syz.3.342': attribute type 2 has an invalid length. [ 129.407461][ T7069] netlink: 16 bytes leftover after parsing attributes in process `syz.2.345'. [ 129.486848][ T7074] netlink: 10 bytes leftover after parsing attributes in process `syz.4.346'. [ 130.000824][ T7091] netlink: 'syz.4.352': attribute type 13 has an invalid length. [ 130.061519][ T7091] netlink: 'syz.4.352': attribute type 17 has an invalid length. [ 130.145058][ T7097] netlink: 'syz.3.353': attribute type 10 has an invalid length. [ 130.145520][ T7097] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.146192][ T7097] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.169247][ T7097] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.169372][ T7097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.169666][ T7097] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.169795][ T7097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.231839][ T7097] team0: Port device bridge0 added [ 130.447161][ T5871] Bluetooth: hci1: ISO packet for unknown connection handle 255 [ 130.497946][ T7091] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.187958][ T7121] netlink: 16 bytes leftover after parsing attributes in process `syz.0.359'. [ 132.179892][ T5871] Bluetooth: hci0: ISO packet for unknown connection handle 255 [ 132.802997][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.809439][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.910869][ T7164] openvswitch: netlink: Flow actions attr not present in new flow. [ 132.913311][ T7165] FAULT_INJECTION: forcing a failure. [ 132.913311][ T7165] name failslab, interval 1, probability 0, space 0, times 0 [ 132.923874][ T7164] netlink: 'syz.2.371': attribute type 2 has an invalid length. [ 132.934593][ T7165] CPU: 0 UID: 0 PID: 7165 Comm: syz.3.374 Not tainted syzkaller #0 PREEMPT(full) [ 132.934614][ T7165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 132.934624][ T7165] Call Trace: [ 132.934630][ T7165] [ 132.934637][ T7165] dump_stack_lvl+0x189/0x250 [ 132.934660][ T7165] ? __pfx____ratelimit+0x10/0x10 [ 132.934681][ T7165] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.934699][ T7165] ? __pfx__printk+0x10/0x10 [ 132.934725][ T7165] ? __pfx___might_resched+0x10/0x10 [ 132.934745][ T7165] should_fail_ex+0x414/0x560 [ 132.934767][ T7165] should_failslab+0xa8/0x100 [ 132.934786][ T7165] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 132.934809][ T7165] ? __alloc_skb+0x112/0x2d0 [ 132.934834][ T7165] __alloc_skb+0x112/0x2d0 [ 132.934857][ T7165] netlink_sendmsg+0x5c6/0xb30 [ 132.934887][ T7165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.934915][ T7165] ? aa_sock_msg_perm+0xf1/0x1d0 [ 132.934936][ T7165] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 132.934955][ T7165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.934976][ T7165] __sock_sendmsg+0x219/0x270 [ 132.934997][ T7165] ____sys_sendmsg+0x505/0x830 [ 132.935023][ T7165] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.935054][ T7165] ? import_iovec+0x74/0xa0 [ 132.935081][ T7165] ___sys_sendmsg+0x21f/0x2a0 [ 132.935104][ T7165] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.935160][ T7165] ? __fget_files+0x2a/0x420 [ 132.935177][ T7165] ? __fget_files+0x3a0/0x420 [ 132.935210][ T7165] __x64_sys_sendmsg+0x19b/0x260 [ 132.935234][ T7165] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 132.935265][ T7165] ? __pfx_ksys_write+0x10/0x10 [ 132.935277][ T7165] ? rcu_is_watching+0x15/0xb0 [ 132.935298][ T7165] ? do_syscall_64+0xbe/0x3b0 [ 132.935321][ T7165] do_syscall_64+0xfa/0x3b0 [ 132.935339][ T7165] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.935362][ T7165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.935377][ T7165] ? clear_bhb_loop+0x60/0xb0 [ 132.935396][ T7165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.935411][ T7165] RIP: 0033:0x7f861098eec9 [ 132.935425][ T7165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.935439][ T7165] RSP: 002b:00007f8611747038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.935455][ T7165] RAX: ffffffffffffffda RBX: 00007f8610be5fa0 RCX: 00007f861098eec9 [ 132.935467][ T7165] RDX: 0000000000000080 RSI: 0000200000000080 RDI: 0000000000000003 [ 132.935476][ T7165] RBP: 00007f8611747090 R08: 0000000000000000 R09: 0000000000000000 [ 132.935486][ T7165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.935494][ T7165] R13: 00007f8610be6038 R14: 00007f8610be5fa0 R15: 00007ffec4045bd8 [ 132.935521][ T7165] [ 133.217392][ T7164] k›*·]: entered promiscuous mode [ 133.474435][ T5871] Bluetooth: hci0: ISO packet for unknown connection handle 255 [ 133.623896][ T7184] À: port 1(vlan0) entered blocking state [ 133.635459][ T7184] À: port 1(vlan0) entered disabled state [ 133.642923][ T7184] vlan0: entered allmulticast mode [ 133.691072][ T7184] vlan0: entered promiscuous mode [ 133.742527][ T7187] netlink: 'syz.4.380': attribute type 10 has an invalid length. [ 133.778746][ T7187] syz_tun: entered promiscuous mode [ 133.978831][ T7190] __nla_validate_parse: 6 callbacks suppressed [ 133.978870][ T7190] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.382'. [ 134.020884][ T7190] netlink: zone id is out of range [ 134.036979][ T7190] netlink: zone id is out of range [ 134.048602][ T7190] netlink: zone id is out of range [ 134.061285][ T7190] netlink: get zone limit has 8 unknown bytes [ 134.339543][ T7205] netlink: 20 bytes leftover after parsing attributes in process `syz.1.388'. [ 134.494041][ T5871] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 134.617630][ T7217] netlink: 'syz.3.392': attribute type 1 has an invalid length. [ 136.237701][ T7253] netlink: 'syz.1.404': attribute type 10 has an invalid length. [ 136.254382][ T7253] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.261796][ T7253] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.363369][ T5871] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 136.373553][ T7253] bond0: (slave bridge0): Releasing backup interface [ 136.410893][ T7260] netlink: 'syz.4.407': attribute type 21 has an invalid length. [ 136.421106][ T7253] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.421230][ T7253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.421520][ T7253] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.421647][ T7253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.425221][ T7253] team0: Port device bridge0 added [ 136.457999][ T7260] netlink: 'syz.4.407': attribute type 6 has an invalid length. [ 136.488901][ T7260] netlink: 132 bytes leftover after parsing attributes in process `syz.4.407'. [ 137.452571][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.413'. [ 137.488279][ T7277] netlink: 'syz.4.413': attribute type 39 has an invalid length. [ 137.668464][ T7285] netlink: 'syz.2.415': attribute type 10 has an invalid length. [ 137.677113][ T7285] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.684570][ T7285] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.352538][ T7298] netlink: 10 bytes leftover after parsing attributes in process `syz.3.421'. [ 138.463801][ T7302] netlink: 'syz.1.423': attribute type 10 has an invalid length. [ 138.472938][ T7302] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.480217][ T7302] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.687116][ T7308] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 138.713825][ T7308] netlink: 'syz.4.424': attribute type 13 has an invalid length. [ 138.728965][ T7308] netlink: 152 bytes leftover after parsing attributes in process `syz.4.424'. [ 139.436430][ T7317] netlink: 'syz.3.427': attribute type 1 has an invalid length. [ 140.049917][ T7339] netlink: 'syz.3.433': attribute type 10 has an invalid length. [ 140.475462][ T7347] netlink: 10 bytes leftover after parsing attributes in process `syz.4.435'. [ 140.692299][ T7355] netlink: 32 bytes leftover after parsing attributes in process `syz.1.438'. [ 140.723200][ T7355] openvswitch: netlink: Flow actions attr not present in new flow. [ 140.768582][ T7355] netlink: 68 bytes leftover after parsing attributes in process `syz.1.438'. [ 140.810844][ T7355] netlink: 'syz.1.438': attribute type 2 has an invalid length. [ 140.921232][ T7362] netlink: 'syz.2.441': attribute type 1 has an invalid length. [ 140.933132][ T7364] netlink: 16 bytes leftover after parsing attributes in process `syz.4.442'. [ 141.033104][ T7366] netlink: 132 bytes leftover after parsing attributes in process `syz.4.442'. [ 141.041489][ T7210] Set syz1 is full, maxelem 65536 reached [ 141.598237][ T7386] netlink: 'syz.1.450': attribute type 10 has an invalid length. [ 141.718271][ T7392] $Hÿ: renamed from bond0 (while UP) [ 141.744222][ T7396] netlink: 'syz.0.454': attribute type 1 has an invalid length. [ 141.763181][ T7392] $Hÿ: entered promiscuous mode [ 141.798130][ T7392] bond_slave_0: entered promiscuous mode [ 141.814440][ T7392] bond_slave_1: entered promiscuous mode [ 141.852198][ T5871] Bluetooth: hci4: ISO packet for unknown connection handle 3902 [ 141.942660][ T7398] netlink: 'syz.3.453': attribute type 3 has an invalid length. [ 142.847280][ T7431] netlink: 'syz.0.465': attribute type 32 has an invalid length. [ 144.405060][ T7455] netlink: 40 bytes leftover after parsing attributes in process `syz.4.474'. [ 144.676115][ T7457] netlink: 10 bytes leftover after parsing attributes in process `syz.0.476'. [ 145.000977][ T7467] netlink: 20 bytes leftover after parsing attributes in process `syz.2.479'. [ 146.410961][ T7494] validate_nla: 1 callbacks suppressed [ 146.410979][ T7494] netlink: 'syz.4.490': attribute type 29 has an invalid length. [ 146.464244][ T7497] netlink: 'syz.4.490': attribute type 10 has an invalid length. [ 146.488349][ T7497] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.490'. [ 146.639364][ T7501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.491'. [ 146.664137][ T7501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.491'. [ 146.706521][ T7504] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 146.786612][ T7501] netlink: 72 bytes leftover after parsing attributes in process `syz.0.491'. [ 147.844641][ T7513] netlink: 10 bytes leftover after parsing attributes in process `syz.1.495'. [ 148.193241][ T7527] netlink: 24032 bytes leftover after parsing attributes in process `syz.0.501'. [ 148.222085][ T7527] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.501'. [ 148.232845][ T7527] netlink: 24032 bytes leftover after parsing attributes in process `syz.0.501'. [ 148.256236][ T7525] netlink: 60 bytes leftover after parsing attributes in process `syz.0.501'. [ 148.269985][ T7530] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.500'. [ 148.313128][ T7531] veth1_macvtap: left promiscuous mode [ 148.324271][ T7531] macsec0: entered allmulticast mode [ 148.378312][ T7531] veth1_macvtap: entered promiscuous mode [ 148.384325][ T7531] veth1_macvtap: entered allmulticast mode [ 148.390349][ T7531] macsec0: entered promiscuous mode [ 148.591125][ T7539] netlink: 'syz.4.505': attribute type 1 has an invalid length. [ 151.831727][ T7592] __nla_validate_parse: 1 callbacks suppressed [ 151.831743][ T7592] netlink: 32 bytes leftover after parsing attributes in process `syz.0.523'. [ 151.850090][ T7479] Set syz1 is full, maxelem 65536 reached [ 151.863796][ T7592] openvswitch: netlink: Flow actions attr not present in new flow. [ 151.885016][ T7594] netlink: 68 bytes leftover after parsing attributes in process `syz.0.523'. [ 151.906991][ T7593] netlink: 'syz.1.524': attribute type 32 has an invalid length. [ 151.934567][ T7592] netlink: 'syz.0.523': attribute type 2 has an invalid length. [ 152.679522][ T7609] netlink: 10 bytes leftover after parsing attributes in process `syz.4.529'. [ 152.801925][ T7616] netlink: 'syz.1.532': attribute type 6 has an invalid length. [ 153.421723][ T7627] netlink: 'syz.3.536': attribute type 1 has an invalid length. [ 153.695763][ T5871] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 153.949834][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.542'. [ 154.170796][ T7665] netlink: 'syz.3.547': attribute type 1 has an invalid length. [ 155.420049][ T7692] mac80211_hwsim hwsim11 .3ãc¤±: renamed from wlan1 [ 155.691522][ T7708] netlink: 'syz.0.562': attribute type 21 has an invalid length. [ 155.720008][ T7708] netlink: 'syz.0.562': attribute type 6 has an invalid length. [ 155.769048][ T7708] netlink: 132 bytes leftover after parsing attributes in process `syz.0.562'. [ 156.022997][ T7720] netlink: 132 bytes leftover after parsing attributes in process `syz.2.565'. [ 156.748817][ T7732] FAULT_INJECTION: forcing a failure. [ 156.748817][ T7732] name failslab, interval 1, probability 0, space 0, times 0 [ 156.769400][ T7732] CPU: 1 UID: 0 PID: 7732 Comm: syz.0.566 Not tainted syzkaller #0 PREEMPT(full) [ 156.769425][ T7732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 156.769436][ T7732] Call Trace: [ 156.769443][ T7732] [ 156.769451][ T7732] dump_stack_lvl+0x189/0x250 [ 156.769474][ T7732] ? __pfx____ratelimit+0x10/0x10 [ 156.769492][ T7732] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.769510][ T7732] ? __pfx__printk+0x10/0x10 [ 156.769536][ T7732] ? __pfx___might_resched+0x10/0x10 [ 156.769555][ T7732] should_fail_ex+0x414/0x560 [ 156.769575][ T7732] should_failslab+0xa8/0x100 [ 156.769593][ T7732] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 156.769616][ T7732] ? __alloc_skb+0x112/0x2d0 [ 156.769637][ T7732] __alloc_skb+0x112/0x2d0 [ 156.769658][ T7732] netlink_sendmsg+0x5c6/0xb30 [ 156.769688][ T7732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.769711][ T7732] ? aa_sock_msg_perm+0xf1/0x1d0 [ 156.769730][ T7732] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 156.769749][ T7732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.769768][ T7732] __sock_sendmsg+0x219/0x270 [ 156.769786][ T7732] ____sys_sendmsg+0x505/0x830 [ 156.769813][ T7732] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.769844][ T7732] ? import_iovec+0x74/0xa0 [ 156.769870][ T7732] ___sys_sendmsg+0x21f/0x2a0 [ 156.769893][ T7732] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.769941][ T7732] ? __fget_files+0x2a/0x420 [ 156.769954][ T7732] ? __fget_files+0x3a0/0x420 [ 156.769973][ T7732] __x64_sys_sendmsg+0x19b/0x260 [ 156.769992][ T7732] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 156.770015][ T7732] ? __pfx_ksys_write+0x10/0x10 [ 156.770031][ T7732] ? do_syscall_64+0xbe/0x3b0 [ 156.770054][ T7732] do_syscall_64+0xfa/0x3b0 [ 156.770073][ T7732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.770093][ T7732] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 156.770106][ T7732] ? clear_bhb_loop+0x60/0xb0 [ 156.770123][ T7732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.770135][ T7732] RIP: 0033:0x7f010518eec9 [ 156.770151][ T7732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.770164][ T7732] RSP: 002b:00007f0105f9a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.770181][ T7732] RAX: ffffffffffffffda RBX: 00007f01053e6090 RCX: 00007f010518eec9 [ 156.770192][ T7732] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000d [ 156.770201][ T7732] RBP: 00007f0105f9a090 R08: 0000000000000000 R09: 0000000000000000 [ 156.770209][ T7732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.770217][ T7732] R13: 00007f01053e6128 R14: 00007f01053e6090 R15: 00007ffe273aed08 [ 156.770242][ T7732] [ 157.213282][ T7738] netlink: 'syz.4.572': attribute type 13 has an invalid length. [ 157.230039][ T7738] netlink: 'syz.4.572': attribute type 17 has an invalid length. [ 157.348345][ T7738] syz_tun: left promiscuous mode [ 157.618707][ T7738] $Hÿ: left promiscuous mode [ 157.623920][ T7738] bond_slave_0: left promiscuous mode [ 157.882208][ T7738] bond_slave_1: left promiscuous mode [ 157.900905][ T7738] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 158.155094][ T7738] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.260812][ T5871] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 158.595341][ T7768] netlink: 88 bytes leftover after parsing attributes in process `syz.0.578'. [ 159.657591][ T7784] FAULT_INJECTION: forcing a failure. [ 159.657591][ T7784] name failslab, interval 1, probability 0, space 0, times 0 [ 159.671835][ T7784] CPU: 1 UID: 0 PID: 7784 Comm: syz.2.586 Not tainted syzkaller #0 PREEMPT(full) [ 159.671858][ T7784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 159.671875][ T7784] Call Trace: [ 159.671882][ T7784] [ 159.671888][ T7784] dump_stack_lvl+0x189/0x250 [ 159.671911][ T7784] ? __pfx____ratelimit+0x10/0x10 [ 159.671930][ T7784] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.671947][ T7784] ? __pfx__printk+0x10/0x10 [ 159.671969][ T7784] ? __lock_acquire+0xab9/0xd20 [ 159.671998][ T7784] should_fail_ex+0x414/0x560 [ 159.672014][ T7784] should_failslab+0xa8/0x100 [ 159.672025][ T7784] kmem_cache_alloc_noprof+0x73/0x3c0 [ 159.672040][ T7784] ? skb_clone+0x212/0x3a0 [ 159.672050][ T7784] skb_clone+0x212/0x3a0 [ 159.672061][ T7784] __netlink_deliver_tap+0x404/0x850 [ 159.672080][ T7784] ? netlink_deliver_tap+0x2e/0x1b0 [ 159.672092][ T7784] netlink_deliver_tap+0x19c/0x1b0 [ 159.672104][ T7784] netlink_unicast+0x7fa/0x9e0 [ 159.672119][ T7784] ? __pfx_netlink_unicast+0x10/0x10 [ 159.672131][ T7784] ? netlink_sendmsg+0x642/0xb30 [ 159.672142][ T7784] ? skb_put+0x11b/0x210 [ 159.672156][ T7784] netlink_sendmsg+0x805/0xb30 [ 159.672173][ T7784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.672186][ T7784] ? aa_sock_msg_perm+0xf1/0x1d0 [ 159.672199][ T7784] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 159.672211][ T7784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.672223][ T7784] __sock_sendmsg+0x219/0x270 [ 159.672235][ T7784] ____sys_sendmsg+0x505/0x830 [ 159.672252][ T7784] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.672270][ T7784] ? import_iovec+0x74/0xa0 [ 159.672286][ T7784] ___sys_sendmsg+0x21f/0x2a0 [ 159.672301][ T7784] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.672333][ T7784] ? __fget_files+0x2a/0x420 [ 159.672343][ T7784] ? __fget_files+0x3a0/0x420 [ 159.672358][ T7784] __x64_sys_sendmsg+0x19b/0x260 [ 159.672377][ T7784] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 159.672406][ T7784] ? __pfx_ksys_write+0x10/0x10 [ 159.672417][ T7784] ? rcu_is_watching+0x15/0xb0 [ 159.672437][ T7784] ? do_syscall_64+0xbe/0x3b0 [ 159.672460][ T7784] do_syscall_64+0xfa/0x3b0 [ 159.672477][ T7784] ? lockdep_hardirqs_on+0x9c/0x150 [ 159.672495][ T7784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.672510][ T7784] ? clear_bhb_loop+0x60/0xb0 [ 159.672528][ T7784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.672544][ T7784] RIP: 0033:0x7f462ad8eec9 [ 159.672559][ T7784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.672572][ T7784] RSP: 002b:00007f462bbf8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.672587][ T7784] RAX: ffffffffffffffda RBX: 00007f462afe5fa0 RCX: 00007f462ad8eec9 [ 159.672594][ T7784] RDX: 0000000000000080 RSI: 0000200000000080 RDI: 0000000000000003 [ 159.672599][ T7784] RBP: 00007f462bbf8090 R08: 0000000000000000 R09: 0000000000000000 [ 159.672605][ T7784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.672610][ T7784] R13: 00007f462afe6038 R14: 00007f462afe5fa0 R15: 00007ffd7282dbe8 [ 159.672627][ T7784] [ 160.032443][ T7788] netlink: 'syz.2.587': attribute type 10 has an invalid length. [ 160.052438][ T7780] netlink: 'syz.0.584': attribute type 13 has an invalid length. [ 160.060874][ T7780] netlink: 'syz.0.584': attribute type 17 has an invalid length. [ 160.269849][ T7795] netlink: 'syz.2.589': attribute type 3 has an invalid length. [ 160.279778][ T7795] netlink: 'syz.2.589': attribute type 3 has an invalid length. [ 160.292412][ T7795] netlink: 130564 bytes leftover after parsing attributes in process `syz.2.589'. [ 160.482317][ T5871] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 161.324408][ T7825] netlink: 'syz.0.599': attribute type 10 has an invalid length. [ 161.332435][ T7825] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.340010][ T7825] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.356142][ T7825] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.363243][ T7825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.370815][ T7825] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.378010][ T7825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.386873][ T7832] netlink: 32 bytes leftover after parsing attributes in process `syz.3.602'. [ 161.390119][ T7825] team0: Port device bridge0 added [ 161.397924][ T7832] openvswitch: netlink: Flow actions attr not present in new flow. [ 161.413776][ T7832] netlink: 68 bytes leftover after parsing attributes in process `syz.3.602'. [ 161.427817][ T7832] netlink: 'syz.3.602': attribute type 2 has an invalid length. [ 161.548587][ T5871] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 162.003243][ T7863] netlink: 32 bytes leftover after parsing attributes in process `syz.2.610'. [ 162.012406][ T7863] openvswitch: netlink: Flow actions attr not present in new flow. [ 162.013628][ T7864] netlink: 'syz.4.613': attribute type 10 has an invalid length. [ 162.027448][ T7863] netlink: 68 bytes leftover after parsing attributes in process `syz.2.610'. [ 162.045500][ T7864] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.048857][ T7861] netlink: 16 bytes leftover after parsing attributes in process `syz.0.612'. [ 162.052894][ T7864] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.615764][ T5871] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 162.930924][ T7903] netlink: 44 bytes leftover after parsing attributes in process `syz.2.623'. [ 162.946945][ T7903] validate_nla: 1 callbacks suppressed [ 162.946998][ T7903] netlink: 'syz.2.623': attribute type 21 has an invalid length. [ 162.964469][ T7903] netlink: 156 bytes leftover after parsing attributes in process `syz.2.623'. [ 164.981017][ T7938] netlink: 'syz.1.635': attribute type 32 has an invalid length. [ 165.452546][ T5871] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 165.757669][ T7956] netlink: 'syz.0.642': attribute type 1 has an invalid length. [ 166.522746][ T7976] netlink: 32 bytes leftover after parsing attributes in process `syz.3.648'. [ 167.025800][ T7984] netlink: 88 bytes leftover after parsing attributes in process `syz.1.649'. [ 167.520238][ T5871] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 167.560357][ T7999] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.654'. [ 167.713488][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.657'. [ 167.738027][ T8004] netlink: 20 bytes leftover after parsing attributes in process `syz.4.656'. [ 167.990346][ T8019] netlink: 'syz.4.663': attribute type 10 has an invalid length. [ 168.093500][ T8030] netlink: 'syz.0.665': attribute type 21 has an invalid length. [ 168.116976][ T8029] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.664'. [ 168.133785][ T8030] netlink: 'syz.0.665': attribute type 6 has an invalid length. [ 168.155014][ T8030] netlink: 132 bytes leftover after parsing attributes in process `syz.0.665'. [ 168.165586][ T8024] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.664'. [ 168.177799][ T8034] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.664'. [ 168.656007][ T5871] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 168.842759][ T8050] netlink: 'syz.2.673': attribute type 13 has an invalid length. [ 168.858585][ T8056] bridge_slave_1: left allmulticast mode [ 168.864561][ T8056] bridge_slave_1: left promiscuous mode [ 168.870545][ T8056] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.897522][ T8050] netlink: 'syz.2.673': attribute type 17 has an invalid length. [ 168.955841][ T8056] bridge_slave_0: left allmulticast mode [ 168.961546][ T8056] bridge_slave_0: left promiscuous mode [ 168.968186][ T8056] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.066881][ T8056] team0: Port device bridge0 removed [ 169.190121][ T8067] netlink: 'syz.4.677': attribute type 10 has an invalid length. [ 169.450367][ T8050] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.458138][ T8050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.468634][ T8050] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.476309][ T8050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.540318][ T8050] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.948511][ T8083] netlink: 36 bytes leftover after parsing attributes in process `syz.4.683'. [ 170.291061][ T5871] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 170.438858][ T8094] netlink: 'syz.0.686': attribute type 21 has an invalid length. [ 170.447377][ T8094] netlink: 'syz.0.686': attribute type 6 has an invalid length. [ 171.344028][ T8113] netlink: 'syz.0.692': attribute type 10 has an invalid length. [ 171.366863][ T8113] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.374156][ T8113] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.632292][ T8130] netlink: 'syz.2.698': attribute type 1 has an invalid length. [ 171.717070][ T5871] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 172.151250][ T8145] __nla_validate_parse: 1 callbacks suppressed [ 172.151281][ T8145] netlink: 132 bytes leftover after parsing attributes in process `syz.0.702'. [ 172.491068][ T8157] netlink: 132 bytes leftover after parsing attributes in process `syz.2.705'. [ 172.703267][ T8166] netlink: 52 bytes leftover after parsing attributes in process `syz.4.708'. [ 172.991584][ T5871] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 173.970598][ T8193] validate_nla: 6 callbacks suppressed [ 173.970613][ T8193] netlink: 'syz.3.719': attribute type 10 has an invalid length. [ 174.355069][ T8198] netlink: 52 bytes leftover after parsing attributes in process `syz.2.721'. [ 174.383241][ T8208] tmpfs: Bad value for 'uid' [ 174.390844][ T8208] tmpfs: Bad value for 'uid' [ 174.402788][ T8208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.489342][ T8209] netlink: 'syz.3.723': attribute type 21 has an invalid length. [ 175.842215][ T8209] netlink: 'syz.3.723': attribute type 6 has an invalid length. [ 175.861539][ T8209] netlink: 132 bytes leftover after parsing attributes in process `syz.3.723'. [ 175.953407][ T8227] netlink: 'syz.4.726': attribute type 10 has an invalid length. [ 176.307258][ T8241] netlink: 'syz.0.732': attribute type 10 has an invalid length. [ 176.656923][ T8254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.737'. [ 176.667818][ T8254] netlink: 48 bytes leftover after parsing attributes in process `syz.4.737'. [ 176.778051][ T8252] netlink: 'syz.0.736': attribute type 1 has an invalid length. [ 177.156164][ T8267] netlink: 'syz.0.740': attribute type 21 has an invalid length. [ 177.268332][ T8267] netlink: 'syz.0.740': attribute type 6 has an invalid length. [ 177.290113][ T8267] netlink: 132 bytes leftover after parsing attributes in process `syz.0.740'. [ 177.503782][ T8279] netlink: 'syz.2.745': attribute type 10 has an invalid length. [ 177.512314][ T8279] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.519706][ T8279] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.690369][ T8285] netlink: 'syz.2.747': attribute type 32 has an invalid length. [ 177.751401][ T8287] netlink: 112 bytes leftover after parsing attributes in process `syz.2.748'. [ 178.092857][ T8299] netlink: 32 bytes leftover after parsing attributes in process `syz.0.752'. [ 178.113839][ T8299] openvswitch: netlink: Flow actions attr not present in new flow. [ 178.123961][ T8299] netlink: 68 bytes leftover after parsing attributes in process `syz.0.752'. [ 178.145836][ T8299] FAULT_INJECTION: forcing a failure. [ 178.145836][ T8299] name failslab, interval 1, probability 0, space 0, times 0 [ 178.172844][ T8299] CPU: 0 UID: 0 PID: 8299 Comm: syz.0.752 Not tainted syzkaller #0 PREEMPT(full) [ 178.172868][ T8299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 178.172878][ T8299] Call Trace: [ 178.172885][ T8299] [ 178.172892][ T8299] dump_stack_lvl+0x189/0x250 [ 178.172917][ T8299] ? __pfx____ratelimit+0x10/0x10 [ 178.172938][ T8299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.172957][ T8299] ? __pfx__printk+0x10/0x10 [ 178.172986][ T8299] ? __pfx___might_resched+0x10/0x10 [ 178.173007][ T8299] should_fail_ex+0x414/0x560 [ 178.173031][ T8299] should_failslab+0xa8/0x100 [ 178.173050][ T8299] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 178.173074][ T8299] ? __alloc_skb+0x112/0x2d0 [ 178.173093][ T8299] ? __pfx___nla_validate_parse+0x10/0x10 [ 178.173117][ T8299] __alloc_skb+0x112/0x2d0 [ 178.173142][ T8299] ovs_dp_cmd_new+0x167/0xaf0 [ 178.173174][ T8299] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 178.173200][ T8299] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 178.173225][ T8299] genl_family_rcv_msg_doit+0x215/0x300 [ 178.173249][ T8299] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 178.173279][ T8299] ? bpf_lsm_capable+0x9/0x20 [ 178.173294][ T8299] ? security_capable+0x7e/0x2e0 [ 178.173318][ T8299] genl_rcv_msg+0x60e/0x790 [ 178.173341][ T8299] ? __pfx_genl_rcv_msg+0x10/0x10 [ 178.173356][ T8299] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 178.173377][ T8299] ? perf_trace_lock_acquire+0xf5/0x410 [ 178.173403][ T8299] netlink_rcv_skb+0x208/0x470 [ 178.173421][ T8299] ? __lock_acquire+0xab9/0xd20 [ 178.173450][ T8299] ? __pfx_genl_rcv_msg+0x10/0x10 [ 178.173470][ T8299] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 178.173509][ T8299] ? down_read+0x1ad/0x2e0 [ 178.173534][ T8299] genl_rcv+0x28/0x40 [ 178.173547][ T8299] netlink_unicast+0x82c/0x9e0 [ 178.173575][ T8299] ? __pfx_netlink_unicast+0x10/0x10 [ 178.173596][ T8299] ? netlink_sendmsg+0x642/0xb30 [ 178.173614][ T8299] ? skb_put+0x11b/0x210 [ 178.173638][ T8299] netlink_sendmsg+0x805/0xb30 [ 178.173668][ T8299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.173692][ T8299] ? aa_sock_msg_perm+0xf1/0x1d0 [ 178.173714][ T8299] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 178.173734][ T8299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.173755][ T8299] __sock_sendmsg+0x219/0x270 [ 178.173776][ T8299] ____sys_sendmsg+0x505/0x830 [ 178.173805][ T8299] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.173837][ T8299] ? import_iovec+0x74/0xa0 [ 178.173864][ T8299] ___sys_sendmsg+0x21f/0x2a0 [ 178.173889][ T8299] ? __pfx____sys_sendmsg+0x10/0x10 [ 178.173949][ T8299] ? __fget_files+0x2a/0x420 [ 178.173966][ T8299] ? __fget_files+0x3a0/0x420 [ 178.173994][ T8299] __x64_sys_sendmsg+0x19b/0x260 [ 178.174015][ T8299] ? perf_trace_run_bpf_submit+0x100/0x170 [ 178.174037][ T8299] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 178.174067][ T8299] ? __pfx_ksys_write+0x10/0x10 [ 178.174079][ T8299] ? rcu_is_watching+0x15/0xb0 [ 178.174102][ T8299] ? do_syscall_64+0xbe/0x3b0 [ 178.174126][ T8299] do_syscall_64+0xfa/0x3b0 [ 178.174145][ T8299] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.174164][ T8299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.174179][ T8299] ? clear_bhb_loop+0x60/0xb0 [ 178.174199][ T8299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.174215][ T8299] RIP: 0033:0x7f010518eec9 [ 178.174230][ T8299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.174244][ T8299] RSP: 002b:00007f0105f9a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.174261][ T8299] RAX: ffffffffffffffda RBX: 00007f01053e6090 RCX: 00007f010518eec9 [ 178.174273][ T8299] RDX: 000000000000c010 RSI: 0000200000000040 RDI: 000000000000000b [ 178.174283][ T8299] RBP: 00007f0105f9a090 R08: 0000000000000000 R09: 0000000000000000 [ 178.174293][ T8299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.174302][ T8299] R13: 00007f01053e6128 R14: 00007f01053e6090 R15: 00007ffe273aed08 [ 178.174330][ T8299] [ 178.916484][ T8304] netlink: 10 bytes leftover after parsing attributes in process `syz.3.754'. [ 179.186878][ T8312] netlink: 10 bytes leftover after parsing attributes in process `syz.0.758'. [ 179.376461][ T8316] validate_nla: 1 callbacks suppressed [ 179.376478][ T8316] netlink: 'syz.4.757': attribute type 2 has an invalid length. [ 179.397126][ T8316] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.757'. [ 179.406766][ T8316] nbd: must specify a device to reconfigure [ 179.730875][ T8325] netlink: 'syz.3.762': attribute type 21 has an invalid length. [ 179.752287][ T8325] netlink: 'syz.3.762': attribute type 6 has an invalid length. [ 179.788075][ T8325] netlink: 132 bytes leftover after parsing attributes in process `syz.3.762'. [ 179.900221][ T8333] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 179.909725][ T8333] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 179.918955][ T8333] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 179.928163][ T8333] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 179.937470][ T8333] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 179.946680][ T8333] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 179.955869][ T8333] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 179.965062][ T8333] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 179.974267][ T8333] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 180.355497][ T8343] netlink: 16 bytes leftover after parsing attributes in process `syz.1.768'. [ 180.838982][ T8350] netlink: 'syz.2.769': attribute type 1 has an invalid length. [ 181.003553][ T8355] netlink: 10 bytes leftover after parsing attributes in process `syz.2.772'. [ 181.867202][ T8384] netlink: 'syz.3.782': attribute type 1 has an invalid length. [ 181.995062][ T8391] netlink: 'syz.0.783': attribute type 21 has an invalid length. [ 182.013722][ T8391] netlink: 'syz.0.783': attribute type 6 has an invalid length. [ 182.386027][ T8402] __nla_validate_parse: 4 callbacks suppressed [ 182.386132][ T8402] netlink: 20 bytes leftover after parsing attributes in process `syz.1.789'. [ 182.443590][ T8402] netlink: 68 bytes leftover after parsing attributes in process `syz.1.789'. [ 182.669099][ T8419] netlink: 10 bytes leftover after parsing attributes in process `syz.3.794'. [ 182.782304][ T8421] netlink: 16 bytes leftover after parsing attributes in process `syz.4.795'. [ 182.887984][ T8427] netlink: 'syz.0.797': attribute type 1 has an invalid length. [ 183.252449][ T8442] netlink: 'syz.1.803': attribute type 13 has an invalid length. [ 183.265467][ T8442] netlink: 'syz.1.803': attribute type 17 has an invalid length. [ 184.180329][ T8442] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.187580][ T8442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.195175][ T8442] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.202320][ T8442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.259291][ T8442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.308213][ T8442] net_ratelimit: 3321 callbacks suppressed [ 184.308225][ T8442] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 184.571257][ T8480] netlink: 10 bytes leftover after parsing attributes in process `syz.4.814'. [ 184.978057][ T8505] validate_nla: 1 callbacks suppressed [ 184.978075][ T8505] netlink: 'syz.3.821': attribute type 1 has an invalid length. [ 185.019815][ T8507] netlink: 60 bytes leftover after parsing attributes in process `syz.0.823'. [ 185.934275][ T8536] netlink: 'syz.3.834': attribute type 1 has an invalid length. [ 186.817384][ T8562] netlink: 'syz.1.844': attribute type 21 has an invalid length. [ 186.817609][ T8565] netlink: 32 bytes leftover after parsing attributes in process `syz.4.842'. [ 186.844848][ T8562] netlink: 'syz.1.844': attribute type 6 has an invalid length. [ 186.853089][ T8565] openvswitch: netlink: Flow actions attr not present in new flow. [ 186.871147][ T8562] netlink: 132 bytes leftover after parsing attributes in process `syz.1.844'. [ 186.873112][ T8569] netlink: 68 bytes leftover after parsing attributes in process `syz.4.842'. [ 187.228149][ T8578] netlink: 'syz.2.848': attribute type 1 has an invalid length. [ 188.060056][ T8600] netlink: 16 bytes leftover after parsing attributes in process `syz.3.856'. [ 188.173873][ T8607] netlink: 'syz.4.859': attribute type 21 has an invalid length. [ 188.182232][ T8607] netlink: 'syz.4.859': attribute type 6 has an invalid length. [ 188.201390][ T8607] netlink: 132 bytes leftover after parsing attributes in process `syz.4.859'. [ 188.262027][ T8610] netlink: 'syz.2.860': attribute type 1 has an invalid length. [ 188.652123][ T8618] netlink: 20 bytes leftover after parsing attributes in process `syz.3.864'. [ 189.272122][ T8641] netlink: 16 bytes leftover after parsing attributes in process `syz.4.870'. [ 189.309155][ T8642] netlink: 'syz.0.872': attribute type 1 has an invalid length. [ 190.184458][ T8668] netlink: 'syz.1.880': attribute type 21 has an invalid length. [ 190.271331][ T8668] netlink: 'syz.1.880': attribute type 6 has an invalid length. [ 190.281273][ T8673] netlink: 'syz.3.883': attribute type 1 has an invalid length. [ 190.313170][ T8668] netlink: 132 bytes leftover after parsing attributes in process `syz.1.880'. [ 190.861899][ T8684] netlink: 16 bytes leftover after parsing attributes in process `syz.2.886'. [ 190.887759][ T8689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'. [ 191.473808][ T8705] netlink: 'syz.4.894': attribute type 1 has an invalid length. [ 192.233579][ T8738] netlink: 'syz.0.904': attribute type 21 has an invalid length. [ 192.303416][ T8738] netlink: 'syz.0.904': attribute type 6 has an invalid length. [ 192.337826][ T8738] netlink: 132 bytes leftover after parsing attributes in process `syz.0.904'. [ 192.470810][ T8740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.905'. [ 192.600571][ T8746] netlink: 'syz.2.906': attribute type 1 has an invalid length. [ 193.008997][ T8750] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 193.018268][ T8750] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 193.027469][ T8750] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 193.036662][ T8750] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 193.045909][ T8750] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 193.055079][ T8750] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 193.064277][ T8750] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 193.066196][ T8760] netlink: 60 bytes leftover after parsing attributes in process `syz.4.910'. [ 193.073452][ T8750] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 193.091437][ T8750] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 193.100603][ T8750] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 193.774714][ T8770] netlink: 'syz.2.917': attribute type 1 has an invalid length. [ 194.000692][ T8781] netlink: 16 bytes leftover after parsing attributes in process `syz.2.921'. [ 194.247499][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.253825][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.447462][ T8789] netlink: 'syz.3.923': attribute type 1 has an invalid length. [ 194.497984][ T5884] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 194.520950][ T8795] netlink: 'syz.4.924': attribute type 21 has an invalid length. [ 194.560447][ T8795] netlink: 132 bytes leftover after parsing attributes in process `syz.4.924'. [ 195.308004][ T8808] validate_nla: 1 callbacks suppressed [ 195.308022][ T8808] netlink: 'syz.1.931': attribute type 1 has an invalid length. [ 196.324971][ T5186] Bluetooth: hci2: command 0x0406 tx timeout [ 196.326772][ T5884] Bluetooth: hci1: command 0x0406 tx timeout [ 196.331296][ T5186] Bluetooth: hci3: command 0x0406 tx timeout [ 196.337249][ T5876] Bluetooth: hci0: command 0x0406 tx timeout [ 196.337290][ T5876] Bluetooth: hci4: command 0x0406 tx timeout [ 196.610777][ T8842] netlink: 14 bytes leftover after parsing attributes in process `syz.4.946'. [ 196.641330][ T8838] netlink: 'syz.0.943': attribute type 21 has an invalid length. [ 196.660634][ T8842] hsr_slave_0: left promiscuous mode [ 196.675071][ T8847] netlink: 'syz.3.944': attribute type 1 has an invalid length. [ 196.699380][ T8842] hsr_slave_1: left promiscuous mode [ 196.981881][ T8838] netlink: 'syz.0.943': attribute type 6 has an invalid length. [ 196.999503][ T8838] netlink: 132 bytes leftover after parsing attributes in process `syz.0.943'. [ 197.019304][ T8854] netlink: 16 bytes leftover after parsing attributes in process `syz.1.947'. [ 198.112071][ T8883] netlink: 'syz.2.958': attribute type 1 has an invalid length. [ 198.255063][ T8889] net_ratelimit: 6648 callbacks suppressed [ 198.255101][ T8889] openvswitch: netlink: Duplicate or invalid key (type 0). [ 198.289584][ T8889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.302876][ T8889] netlink: 68 bytes leftover after parsing attributes in process `syz.2.961'. [ 198.382401][ T8891] netlink: 16 bytes leftover after parsing attributes in process `syz.3.960'. [ 198.410188][ T8893] netlink: 'syz.2.961': attribute type 2 has an invalid length. [ 198.439701][ T8889] _ÐZ`Ô€@S!: entered promiscuous mode [ 199.075217][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.965'. [ 199.091618][ T8902] netlink: 'syz.3.965': attribute type 13 has an invalid length. [ 199.149413][ T8902] netlink: 'syz.3.965': attribute type 17 has an invalid length. [ 199.433223][ T8902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.464308][ T8902] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.509455][ T8921] netlink: 'syz.2.971': attribute type 1 has an invalid length. [ 199.894457][ T8929] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.972'. [ 201.295562][ T8971] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 201.352665][ T8963] netlink: 16 bytes leftover after parsing attributes in process `syz.3.985'. [ 201.563583][ T8984] FAULT_INJECTION: forcing a failure. [ 201.563583][ T8984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.583422][ T8984] CPU: 0 UID: 0 PID: 8984 Comm: syz.3.992 Not tainted syzkaller #0 PREEMPT(full) [ 201.583447][ T8984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 201.583457][ T8984] Call Trace: [ 201.583464][ T8984] [ 201.583472][ T8984] dump_stack_lvl+0x189/0x250 [ 201.583497][ T8984] ? __pfx____ratelimit+0x10/0x10 [ 201.583518][ T8984] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.583537][ T8984] ? __pfx__printk+0x10/0x10 [ 201.583560][ T8984] ? __might_fault+0xb0/0x130 [ 201.583587][ T8984] should_fail_ex+0x414/0x560 [ 201.583610][ T8984] _copy_from_user+0x2d/0xb0 [ 201.583626][ T8984] ___sys_sendmsg+0x158/0x2a0 [ 201.583651][ T8984] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.583709][ T8984] ? __fget_files+0x2a/0x420 [ 201.583725][ T8984] ? __fget_files+0x3a0/0x420 [ 201.583753][ T8984] __x64_sys_sendmsg+0x19b/0x260 [ 201.583773][ T8984] ? perf_trace_run_bpf_submit+0x100/0x170 [ 201.583796][ T8984] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 201.583827][ T8984] ? __pfx_ksys_write+0x10/0x10 [ 201.583839][ T8984] ? rcu_is_watching+0x15/0xb0 [ 201.583860][ T8984] ? do_syscall_64+0xbe/0x3b0 [ 201.583884][ T8984] do_syscall_64+0xfa/0x3b0 [ 201.583902][ T8984] ? lockdep_hardirqs_on+0x9c/0x150 [ 201.583921][ T8984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.583937][ T8984] ? clear_bhb_loop+0x60/0xb0 [ 201.583957][ T8984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.583972][ T8984] RIP: 0033:0x7f861098eec9 [ 201.583987][ T8984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.584001][ T8984] RSP: 002b:00007f8611747038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.584018][ T8984] RAX: ffffffffffffffda RBX: 00007f8610be5fa0 RCX: 00007f861098eec9 [ 201.584033][ T8984] RDX: 0000000000000080 RSI: 0000200000000080 RDI: 0000000000000003 [ 201.584041][ T8984] RBP: 00007f8611747090 R08: 0000000000000000 R09: 0000000000000000 [ 201.584050][ T8984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.584058][ T8984] R13: 00007f8610be6038 R14: 00007f8610be5fa0 R15: 00007ffec4045bd8 [ 201.584086][ T8984] [ 201.872873][ T8988] netlink: 'syz.3.994': attribute type 1 has an invalid length. [ 201.874892][ T8987] netlink: 624 bytes leftover after parsing attributes in process `syz.1.993'. [ 203.113023][ T9013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1002'. [ 203.147726][ T9017] FAULT_INJECTION: forcing a failure. [ 203.147726][ T9017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.173326][ T9017] CPU: 0 UID: 0 PID: 9017 Comm: syz.4.1004 Not tainted syzkaller #0 PREEMPT(full) [ 203.173350][ T9017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 203.173360][ T9017] Call Trace: [ 203.173367][ T9017] [ 203.173374][ T9017] dump_stack_lvl+0x189/0x250 [ 203.173399][ T9017] ? __pfx____ratelimit+0x10/0x10 [ 203.173420][ T9017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.173440][ T9017] ? __pfx__printk+0x10/0x10 [ 203.173461][ T9017] ? __might_fault+0xb0/0x130 [ 203.173480][ T9017] ? __might_fault+0xb0/0x130 [ 203.173503][ T9017] should_fail_ex+0x414/0x560 [ 203.173535][ T9017] _copy_from_iter+0x1de/0x1790 [ 203.173566][ T9017] ? rcu_is_watching+0x15/0xb0 [ 203.173585][ T9017] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 203.173612][ T9017] ? __pfx__copy_from_iter+0x10/0x10 [ 203.173636][ T9017] ? __build_skb_around+0x257/0x3e0 [ 203.173659][ T9017] ? netlink_sendmsg+0x642/0xb30 [ 203.173675][ T9017] ? skb_put+0x11b/0x210 [ 203.173698][ T9017] netlink_sendmsg+0x6b2/0xb30 [ 203.173730][ T9017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.173756][ T9017] ? aa_sock_msg_perm+0xf1/0x1d0 [ 203.173776][ T9017] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 203.173797][ T9017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.173819][ T9017] __sock_sendmsg+0x219/0x270 [ 203.173842][ T9017] ____sys_sendmsg+0x505/0x830 [ 203.173872][ T9017] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.173907][ T9017] ? import_iovec+0x74/0xa0 [ 203.173935][ T9017] ___sys_sendmsg+0x21f/0x2a0 [ 203.173960][ T9017] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.174009][ T9017] ? __fget_files+0x2a/0x420 [ 203.174044][ T9017] ? __fget_files+0x2a/0x420 [ 203.174059][ T9017] ? __fget_files+0x3a0/0x420 [ 203.174086][ T9017] __x64_sys_sendmsg+0x19b/0x260 [ 203.174113][ T9017] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 203.174148][ T9017] ? __pfx_ksys_write+0x10/0x10 [ 203.174161][ T9017] ? rcu_is_watching+0x15/0xb0 [ 203.174184][ T9017] ? do_syscall_64+0xbe/0x3b0 [ 203.174210][ T9017] do_syscall_64+0xfa/0x3b0 [ 203.174229][ T9017] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.174248][ T9017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.174263][ T9017] ? clear_bhb_loop+0x60/0xb0 [ 203.174284][ T9017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.174299][ T9017] RIP: 0033:0x7f8c52d8eec9 [ 203.174315][ T9017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.174328][ T9017] RSP: 002b:00007f8c53bed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.174345][ T9017] RAX: ffffffffffffffda RBX: 00007f8c52fe5fa0 RCX: 00007f8c52d8eec9 [ 203.174357][ T9017] RDX: 00000000000000c4 RSI: 0000200000000280 RDI: 0000000000000003 [ 203.174367][ T9017] RBP: 00007f8c53bed090 R08: 0000000000000000 R09: 0000000000000000 [ 203.174377][ T9017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.174387][ T9017] R13: 00007f8c52fe6038 R14: 00007f8c52fe5fa0 R15: 00007ffccb065d68 [ 203.174417][ T9017] [ 203.205185][ T9020] netlink: 'syz.0.1006': attribute type 6 has an invalid length. [ 203.522563][ T9020] netlink: 'syz.0.1006': attribute type 3 has an invalid length. [ 203.530802][ T9020] netlink: 153952 bytes leftover after parsing attributes in process `syz.0.1006'. [ 203.551060][ T9022] netlink: 'syz.2.1005': attribute type 1 has an invalid length. [ 203.945277][ T9032] netlink: 'syz.1.1007': attribute type 13 has an invalid length. [ 204.017972][ T9032] netlink: 'syz.1.1007': attribute type 17 has an invalid length. [ 204.365369][ T9032] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.657160][ T9046] netlink: 'syz.1.1012': attribute type 21 has an invalid length. [ 204.678976][ T9046] netlink: 'syz.1.1012': attribute type 6 has an invalid length. [ 204.713976][ T9046] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1012'. [ 204.900685][ T9053] netlink: 'syz.3.1015': attribute type 21 has an invalid length. [ 205.680556][ T9066] netlink: 'syz.2.1019': attribute type 1 has an invalid length. [ 206.702919][ T9099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1032'. [ 206.712775][ T9099] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1032'. [ 206.750267][ T9101] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1033'. [ 206.966285][ T9105] FAULT_INJECTION: forcing a failure. [ 206.966285][ T9105] name failslab, interval 1, probability 0, space 0, times 0 [ 207.012607][ T9105] CPU: 1 UID: 0 PID: 9105 Comm: syz.3.1035 Not tainted syzkaller #0 PREEMPT(full) [ 207.012631][ T9105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 207.012642][ T9105] Call Trace: [ 207.012648][ T9105] [ 207.012655][ T9105] dump_stack_lvl+0x189/0x250 [ 207.012679][ T9105] ? __pfx____ratelimit+0x10/0x10 [ 207.012699][ T9105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.012718][ T9105] ? __pfx__printk+0x10/0x10 [ 207.012743][ T9105] ? __pfx___might_resched+0x10/0x10 [ 207.012759][ T9105] ? fs_reclaim_acquire+0x7d/0x100 [ 207.012782][ T9105] should_fail_ex+0x414/0x560 [ 207.012806][ T9105] should_failslab+0xa8/0x100 [ 207.012825][ T9105] __kmalloc_noprof+0xcb/0x4f0 [ 207.012840][ T9105] ? tomoyo_encode+0x28b/0x550 [ 207.012865][ T9105] tomoyo_encode+0x28b/0x550 [ 207.012891][ T9105] tomoyo_realpath_from_path+0x58d/0x5d0 [ 207.012913][ T9105] ? tomoyo_domain+0xd9/0x130 [ 207.012940][ T9105] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 207.012957][ T9105] tomoyo_path_number_perm+0x1e8/0x5a0 [ 207.012978][ T9105] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 207.013013][ T9105] ? __lock_acquire+0xab9/0xd20 [ 207.013057][ T9105] ? __fget_files+0x2a/0x420 [ 207.013078][ T9105] ? __fget_files+0x2a/0x420 [ 207.013094][ T9105] ? __fget_files+0x3a0/0x420 [ 207.013110][ T9105] ? __fget_files+0x2a/0x420 [ 207.013132][ T9105] security_file_ioctl+0xcb/0x2d0 [ 207.013151][ T9105] __se_sys_ioctl+0x47/0x170 [ 207.013177][ T9105] do_syscall_64+0xfa/0x3b0 [ 207.013199][ T9105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.013219][ T9105] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 207.013236][ T9105] ? clear_bhb_loop+0x60/0xb0 [ 207.013256][ T9105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.013272][ T9105] RIP: 0033:0x7f861098eec9 [ 207.013288][ T9105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.013301][ T9105] RSP: 002b:00007f8611747038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 207.013317][ T9105] RAX: ffffffffffffffda RBX: 00007f8610be5fa0 RCX: 00007f861098eec9 [ 207.013329][ T9105] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000051 [ 207.013339][ T9105] RBP: 00007f8611747090 R08: 0000000000000000 R09: 0000000000000000 [ 207.013349][ T9105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.013359][ T9105] R13: 00007f8610be6038 R14: 00007f8610be5fa0 R15: 00007ffec4045bd8 [ 207.013388][ T9105] [ 207.013530][ T9105] ERROR: Out of memory at tomoyo_realpath_from_path. [ 207.197911][ T5883] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 207.562342][ T9123] validate_nla: 4 callbacks suppressed [ 207.562375][ T9123] netlink: 'syz.3.1041': attribute type 10 has an invalid length. [ 207.596392][ T9123] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1041'. [ 208.031716][ T9139] FAULT_INJECTION: forcing a failure. [ 208.031716][ T9139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.080056][ T9139] CPU: 0 UID: 0 PID: 9139 Comm: syz.1.1045 Not tainted syzkaller #0 PREEMPT(full) [ 208.080081][ T9139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 208.080091][ T9139] Call Trace: [ 208.080097][ T9139] [ 208.080105][ T9139] dump_stack_lvl+0x189/0x250 [ 208.080130][ T9139] ? __pfx____ratelimit+0x10/0x10 [ 208.080151][ T9139] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.080170][ T9139] ? __pfx__printk+0x10/0x10 [ 208.080191][ T9139] ? __might_fault+0xb0/0x130 [ 208.080210][ T9139] ? __might_fault+0xb0/0x130 [ 208.080233][ T9139] should_fail_ex+0x414/0x560 [ 208.080258][ T9139] _copy_from_user+0x2d/0xb0 [ 208.080275][ T9139] ___sys_sendmsg+0x158/0x2a0 [ 208.080302][ T9139] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.080350][ T9139] ? __fget_files+0x2a/0x420 [ 208.080383][ T9139] ? __fget_files+0x2a/0x420 [ 208.080399][ T9139] ? __fget_files+0x3a0/0x420 [ 208.080430][ T9139] __x64_sys_sendmsg+0x19b/0x260 [ 208.080457][ T9139] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 208.080491][ T9139] ? __pfx_ksys_write+0x10/0x10 [ 208.080504][ T9139] ? rcu_is_watching+0x15/0xb0 [ 208.080527][ T9139] ? do_syscall_64+0xbe/0x3b0 [ 208.080553][ T9139] do_syscall_64+0xfa/0x3b0 [ 208.080572][ T9139] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.080591][ T9139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.080607][ T9139] ? clear_bhb_loop+0x60/0xb0 [ 208.080627][ T9139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.080642][ T9139] RIP: 0033:0x7fb63298eec9 [ 208.080657][ T9139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.080671][ T9139] RSP: 002b:00007fb6337b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.080688][ T9139] RAX: ffffffffffffffda RBX: 00007fb632be5fa0 RCX: 00007fb63298eec9 [ 208.080700][ T9139] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000003 [ 208.080711][ T9139] RBP: 00007fb6337b8090 R08: 0000000000000000 R09: 0000000000000000 [ 208.080721][ T9139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.080730][ T9139] R13: 00007fb632be6038 R14: 00007fb632be5fa0 R15: 00007ffc951bbb38 [ 208.080763][ T9139] [ 208.445408][ T9146] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1048'. [ 209.000463][ T9166] netlink: 'syz.4.1054': attribute type 21 has an invalid length. [ 209.015905][ T9166] netlink: 'syz.4.1054': attribute type 6 has an invalid length. [ 209.023771][ T9166] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1054'. [ 210.427012][ T9213] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1071'. [ 210.986760][ T9223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.006094][ T9223] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1074'. [ 211.074538][ T9223] netlink: 'syz.2.1074': attribute type 2 has an invalid length. [ 211.433525][ T9242] netlink: 'syz.0.1082': attribute type 1 has an invalid length. [ 211.749462][ T9249] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1085'. [ 211.766557][ T9249] openvswitch: netlink: Flow actions attr not present in new flow. [ 211.780768][ T9249] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1085'. [ 212.448666][ T9277] netlink: 'syz.1.1093': attribute type 1 has an invalid length. [ 212.649538][ T9283] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1094'. [ 212.687730][ T9283] openvswitch: netlink: Flow actions attr not present in new flow. [ 212.701896][ T9287] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1094'. [ 212.715768][ T9283] netlink: 'syz.1.1094': attribute type 2 has an invalid length. [ 213.525431][ T9308] netlink: 'syz.0.1104': attribute type 1 has an invalid length. [ 213.635717][ T9313] FAULT_INJECTION: forcing a failure. [ 213.635717][ T9313] name failslab, interval 1, probability 0, space 0, times 0 [ 213.649553][ T9313] CPU: 1 UID: 0 PID: 9313 Comm: syz.0.1106 Not tainted syzkaller #0 PREEMPT(full) [ 213.649577][ T9313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 213.649587][ T9313] Call Trace: [ 213.649595][ T9313] [ 213.649603][ T9313] dump_stack_lvl+0x189/0x250 [ 213.649627][ T9313] ? __pfx____ratelimit+0x10/0x10 [ 213.649646][ T9313] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.649665][ T9313] ? __pfx__printk+0x10/0x10 [ 213.649688][ T9313] ? __lock_acquire+0xab9/0xd20 [ 213.649727][ T9313] should_fail_ex+0x414/0x560 [ 213.649750][ T9313] should_failslab+0xa8/0x100 [ 213.649769][ T9313] kmem_cache_alloc_noprof+0x73/0x3c0 [ 213.649792][ T9313] ? skb_clone+0x212/0x3a0 [ 213.649813][ T9313] skb_clone+0x212/0x3a0 [ 213.649831][ T9313] __netlink_deliver_tap+0x404/0x850 [ 213.649865][ T9313] ? netlink_deliver_tap+0x2e/0x1b0 [ 213.649887][ T9313] netlink_deliver_tap+0x19c/0x1b0 [ 213.649909][ T9313] netlink_unicast+0x7fa/0x9e0 [ 213.649937][ T9313] ? __pfx_netlink_unicast+0x10/0x10 [ 213.649958][ T9313] ? netlink_sendmsg+0x642/0xb30 [ 213.649977][ T9313] ? skb_put+0x11b/0x210 [ 213.650001][ T9313] netlink_sendmsg+0x805/0xb30 [ 213.650032][ T9313] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.650056][ T9313] ? aa_sock_msg_perm+0xf1/0x1d0 [ 213.650077][ T9313] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 213.650098][ T9313] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.650119][ T9313] __sock_sendmsg+0x219/0x270 [ 213.650141][ T9313] ____sys_sendmsg+0x505/0x830 [ 213.650169][ T9313] ? __pfx_____sys_sendmsg+0x10/0x10 [ 213.650202][ T9313] ? import_iovec+0x74/0xa0 [ 213.650228][ T9313] ___sys_sendmsg+0x21f/0x2a0 [ 213.650252][ T9313] ? __pfx____sys_sendmsg+0x10/0x10 [ 213.650312][ T9313] ? __fget_files+0x2a/0x420 [ 213.650329][ T9313] ? __fget_files+0x3a0/0x420 [ 213.650358][ T9313] __x64_sys_sendmsg+0x19b/0x260 [ 213.650379][ T9313] ? perf_trace_run_bpf_submit+0x100/0x170 [ 213.650402][ T9313] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 213.650435][ T9313] ? __pfx_ksys_write+0x10/0x10 [ 213.650448][ T9313] ? rcu_is_watching+0x15/0xb0 [ 213.650470][ T9313] ? do_syscall_64+0xbe/0x3b0 [ 213.650495][ T9313] do_syscall_64+0xfa/0x3b0 [ 213.650515][ T9313] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.650533][ T9313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.650549][ T9313] ? clear_bhb_loop+0x60/0xb0 [ 213.650569][ T9313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.650585][ T9313] RIP: 0033:0x7f010518eec9 [ 213.650600][ T9313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.650615][ T9313] RSP: 002b:00007f0105fbb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.650633][ T9313] RAX: ffffffffffffffda RBX: 00007f01053e5fa0 RCX: 00007f010518eec9 [ 213.650645][ T9313] RDX: 00000000000000c4 RSI: 0000200000000280 RDI: 0000000000000003 [ 213.650656][ T9313] RBP: 00007f0105fbb090 R08: 0000000000000000 R09: 0000000000000000 [ 213.650666][ T9313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.650676][ T9313] R13: 00007f01053e6038 R14: 00007f01053e5fa0 R15: 00007ffe273aed08 [ 213.650712][ T9313] [ 214.112528][ T9323] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 214.124449][ T9323] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 214.132864][ T9323] CPU: 1 UID: 0 PID: 9323 Comm: syz.2.1109 Not tainted syzkaller #0 PREEMPT(full) [ 214.142145][ T9323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 214.147880][ T9327] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1111'. [ 214.152194][ T9323] RIP: 0010:__xfrm_state_insert+0x1011/0x1450 [ 214.152229][ T9323] Code: 18 00 74 08 4c 89 ef e8 1d 7f 01 f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 1a 7e 01 f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 f1 7e 01 f8 4d 89 2e 41 80 3c 1f 00 [ 214.152246][ T9323] RSP: 0018:ffffc9000be170e8 EFLAGS: 00010246 [ 214.152263][ T9323] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000 [ 214.152277][ T9323] RDX: ffffc9000d11a000 RSI: 000000000000046a RDI: 000000000000046b [ 214.152288][ T9323] RBP: ffff88802c25bbb0 R08: ffff88807ab01e00 R09: 0000000000000002 [ 214.152300][ T9323] R10: 000000000000000a R11: 0000000000000002 R12: ffff88802c25a668 [ 214.152311][ T9323] R13: ffff88802c25bba8 R14: 0000000000000000 R15: 1ffff1100584b4ce [ 214.152325][ T9323] FS: 00007f462bbf86c0(0000) GS:ffff888125d11000(0000) knlGS:0000000000000000 [ 214.152340][ T9323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 214.152351][ T9323] CR2: 0000001b33523ffc CR3: 000000007a61c000 CR4: 00000000003526f0 [ 214.152368][ T9323] Call Trace: [ 214.152375][ T9323] [ 214.152387][ T9323] ? xfrm_state_insert+0x44/0x60 [ 214.152412][ T9323] xfrm_state_insert+0x54/0x60 [ 214.152436][ T9323] ipcomp4_init_state+0x673/0xb20 [ 214.152457][ T9323] __xfrm_init_state+0xa76/0x13f0 [ 214.152474][ T9323] ? __xfrm_init_state+0x7ef/0x13f0 [ 214.152493][ T9323] xfrm_add_sa+0x2f5b/0x4070 [ 214.152513][ T9323] ? __pfx_xfrm_add_sa+0x10/0x10 [ 214.152527][ T9323] ? apparmor_capable+0x137/0x1b0 [ 214.152552][ T9323] ? __nla_parse+0x40/0x60 [ 214.152572][ T9323] xfrm_user_rcv_msg+0x7a3/0xab0 [ 214.152591][ T9323] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 214.152621][ T9323] ? __pfx___mutex_trylock_common+0x10/0x10 [ 214.152642][ T9323] ? rcu_is_watching+0x15/0xb0 [ 214.152659][ T9323] ? trace_contention_end+0x39/0x120 [ 214.152684][ T9323] ? __mutex_lock+0x335/0x1350 [ 214.152709][ T9323] netlink_rcv_skb+0x208/0x470 [ 214.152731][ T9323] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 214.152748][ T9323] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 214.152773][ T9323] ? netlink_deliver_tap+0x2e/0x1b0 [ 214.152793][ T9323] ? netlink_deliver_tap+0x2e/0x1b0 [ 214.152814][ T9323] xfrm_netlink_rcv+0x79/0x90 [ 214.367528][ T9323] netlink_unicast+0x82c/0x9e0 [ 214.372290][ T9323] ? __pfx_netlink_unicast+0x10/0x10 [ 214.377558][ T9323] ? netlink_sendmsg+0x642/0xb30 [ 214.382502][ T9323] ? skb_put+0x11b/0x210 [ 214.386748][ T9323] netlink_sendmsg+0x805/0xb30 [ 214.391501][ T9323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.396776][ T9323] ? aa_sock_msg_perm+0xf1/0x1d0 [ 214.401701][ T9323] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 214.406967][ T9323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.412236][ T9323] __sock_sendmsg+0x219/0x270 [ 214.416895][ T9323] ____sys_sendmsg+0x505/0x830 [ 214.421652][ T9323] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.426930][ T9323] ? import_iovec+0x74/0xa0 [ 214.431507][ T9323] ___sys_sendmsg+0x21f/0x2a0 [ 214.436170][ T9323] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.441365][ T9323] ? __fget_files+0x2a/0x420 [ 214.445937][ T9323] ? __fget_files+0x3a0/0x420 [ 214.450598][ T9323] __x64_sys_sendmsg+0x19b/0x260 [ 214.455527][ T9323] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 214.460976][ T9323] ? rcu_is_watching+0x15/0xb0 [ 214.465724][ T9323] ? do_syscall_64+0xbe/0x3b0 [ 214.470385][ T9323] do_syscall_64+0xfa/0x3b0 [ 214.474873][ T9323] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.480051][ T9323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.486099][ T9323] ? clear_bhb_loop+0x60/0xb0 [ 214.490759][ T9323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.496632][ T9323] RIP: 0033:0x7f462ad8eec9 [ 214.501031][ T9323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.520618][ T9323] RSP: 002b:00007f462bbf8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.529022][ T9323] RAX: ffffffffffffffda RBX: 00007f462afe5fa0 RCX: 00007f462ad8eec9 [ 214.536976][ T9323] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 214.544930][ T9323] RBP: 00007f462ae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 214.552879][ T9323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.560831][ T9323] R13: 00007f462afe6038 R14: 00007f462afe5fa0 R15: 00007ffd7282dbe8 [ 214.568798][ T9323] [ 214.571798][ T9323] Modules linked in: [ 214.575796][ T9323] ---[ end trace 0000000000000000 ]--- [ 214.581261][ T9323] RIP: 0010:__xfrm_state_insert+0x1011/0x1450 [ 214.587382][ T9323] Code: 18 00 74 08 4c 89 ef e8 1d 7f 01 f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 1a 7e 01 f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 f1 7e 01 f8 4d 89 2e 41 80 3c 1f 00 [ 214.607029][ T9323] RSP: 0018:ffffc9000be170e8 EFLAGS: 00010246 [ 214.613107][ T9323] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000 [ 214.621122][ T9323] RDX: ffffc9000d11a000 RSI: 000000000000046a RDI: 000000000000046b [ 214.629154][ T9323] RBP: ffff88802c25bbb0 R08: ffff88807ab01e00 R09: 0000000000000002 [ 214.637167][ T9323] R10: 000000000000000a R11: 0000000000000002 R12: ffff88802c25a668 [ 214.645182][ T9323] R13: ffff88802c25bba8 R14: 0000000000000000 R15: 1ffff1100584b4ce [ 214.653159][ T9323] FS: 00007f462bbf86c0(0000) GS:ffff888125d11000(0000) knlGS:0000000000000000 [ 214.662119][ T9323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 214.668734][ T9323] CR2: 0000001b33523ffc CR3: 000000007a61c000 CR4: 00000000003526f0 [ 214.674914][ T9325] netlink: 'syz.1.1110': attribute type 10 has an invalid length. [ 214.676743][ T9323] Kernel panic - not syncing: Fatal exception in interrupt [ 214.684729][ T9323] Kernel Offset: disabled