last executing test programs: 5m3.504341182s ago: executing program 4 (id=596): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x64}}, 0x0) 5m3.155547378s ago: executing program 4 (id=600): r0 = socket$kcm(0x10, 0x7, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1d, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ae00000095000000ff000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x90) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x935a, 0x2, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYRESOCT=r1], &(0x7f0000000340)='GPL\x00', 0x4}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, 0x0) r5 = openat$cgroup_devices(r2, &(0x7f0000000440)='devices.deny\x00', 0x2, 0x0) r6 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e24, 0x1}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0xc000) recvmsg$kcm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/224, 0xe0}], 0x1, &(0x7f0000000500)=""/4, 0x4}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r7, &(0x7f0000000700)=ANY=[@ANYBLOB="7c12d244a863ef"], 0xfe3a) write$cgroup_devices(r5, 0x0, 0xa) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/175, 0xaf}, {&(0x7f0000000c80)=""/230, 0xe6}, {&(0x7f0000003940)=""/4058, 0xfda}, {&(0x7f00000007c0)=""/164, 0xa4}], 0x4}, 0x10100) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x1184e, 0x0, 0x7, 0x0, 0xc, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) r8 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}, {&(0x7f00000005c0)="75ef66cd16eaa3d2a695bd6e95cd4d860d457d85b4984b5328bd566479f73f06e90a1e78a161657fb323210dae6b5993d57aa9a533ba6ba34977af564d72cd3b87aeb42dc6dd14f0716cd3bf754bd31da5f31114b1244d1a49a463417b58e937f793cac6e53017a12bc13328ca164fd01f7715a961a7e676466bae9148a632033c8d8293c98db31febe0ea1def8def11523b40e3226ce2f9dca406a25d6151190abd952ce714", 0xa6}], 0x2, 0x0, 0x55}, 0x1000) 5m1.978935s ago: executing program 4 (id=608): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0x0, 0x0, 0x2}]}, 0x94) close(0x3) r0 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000), 0x62) 5m0.962317853s ago: executing program 4 (id=618): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r0}, 0x38) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r0}, 0x38) (fail_nth: 6) 5m0.430889114s ago: executing program 4 (id=620): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000080)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x80, &(0x7f0000000280)}, 0x4000850) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x30]}}, 0x0, 0x1b, 0x0, 0x1, 0x3, 0x10000}, 0x28) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x800) fstat(0xffffffffffffffff, &(0x7f0000000a40)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x2, 0x0, 0x0, 0x1, 0x0, 0x71, 0x0, 0x2a, 0x1}]}}, 0x0, 0x2a, 0x0, 0x1, 0x7}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0x1, 0x58, &(0x7f0000000480)}, 0x10) 4m59.454831698s ago: executing program 4 (id=632): socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, @in=@remote, 0xfffe, 0x400, 0x1000, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}}}, 0xb8}, 0x1, 0x0, 0x0, 0x8005}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x10}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) r4 = socket$kcm(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x28, 0x3c, 0x0, 0x0) 4m44.411175206s ago: executing program 32 (id=632): socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, @in=@remote, 0xfffe, 0x400, 0x1000, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}}}, 0xb8}, 0x1, 0x0, 0x0, 0x8005}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x10}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) r4 = socket$kcm(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x28, 0x3c, 0x0, 0x0) 17.742697503s ago: executing program 3 (id=3011): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x37}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r2}, 0x38) (fail_nth: 1) 17.200689603s ago: executing program 3 (id=3015): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x37}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000280d124552ce99bf", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x66) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', r2, 0x4000, r3}, 0x18) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r5}, 0x38) 17.091955935s ago: executing program 3 (id=3016): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtaction={0xb8, 0x30, 0xffff, 0x3, 0x0, {0x0, 0x0, 0x1300}, [{0xa4, 0x1, [@m_csum={0xa0, 0x101, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x8, 0x4, 0x6}, 0x48}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0xc, 0x8, 0x1, 0x6}, 0x1a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x4, 0x5, 0x9}, 0x60}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x4, 0x3, 0x6, 0x4}, 0x21}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x2404c080}, 0x40000) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10558, 0x2, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x8c0}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020816c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) unlink(0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x2}]}, @enum]}}, 0x0, 0x3e}, 0x28) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000140), 0x4) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x200}, 0x8) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x3, 0x73) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x2004fc10) close(r5) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 16.858724994s ago: executing program 3 (id=3018): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x194a}, 0x0, 0x0, 0x7fffffff, 0x4, 0x3fe, 0x7fffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = socket$kcm(0x28, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r2, 0x0, 0x40000) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8933, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000100)=[{0x94, 0x0, 0x0, 0xffffffff}, {0x6}]}) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[], 0x1c}}, 0x84) 16.588980152s ago: executing program 3 (id=3022): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="d80000001c0081030081f782db44b904021d080201000000040000a118000c000600141a62600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x4001) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfe33) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8880, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={0x0, 0x6}, 0x4008, 0x3, 0x0, 0x6, 0x7, 0x4, 0x2, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000f00)="709b", 0x2}], 0x1}, 0x800) 15.671914654s ago: executing program 3 (id=3027): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1, 0xe4ffffff}, 0x10) 4.93739174s ago: executing program 2 (id=3085): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x1a, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000120000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x4000000) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) socket$kcm(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000400009002bbd7000fddbdf250200000004001f000800018004001f90", @ANYRES16=r3], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x23, r4}, 0x38) socket$nl_route(0x10, 0x3, 0x0) 4.808554733s ago: executing program 1 (id=3087): socket$kcm(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xf0, 0x30, 0x1, 0xe501, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800, 0x0, 0x0, {0x0, 0x1}, {}, 0x8001}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x400000, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x4, 0x2}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf0}}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socketpair(0x2c, 0x2, 0x80004, &(0x7f00000013c0)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@map, 0xffffffffffffffff, 0x6}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2d}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, 0x0, 0x3406c012) 4.661635943s ago: executing program 2 (id=3089): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x3800, &(0x7f0000003780)={&(0x7f0000001d40)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x2, 0x8, 0xffffff40, 0x100, 0x8, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0xeb22, 0xd, 0x2, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x9, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0xa, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x6, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x0, 0xb, 0x5, 0x9, {0xc, 0x0, 0x6, 0x7ff, 0x3, 0x83f2}, {0xf3, 0x1, 0x7, 0x5, 0xb}, 0x8, 0x9, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7cc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x490}, 0x1, 0x0, 0x0, 0x50}, 0x0) 4.432357513s ago: executing program 1 (id=3091): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0xe0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) (fail_nth: 9) 4.431582854s ago: executing program 5 (id=3092): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x50) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000000206010800000000000000000000fffd14000780080011400000000805001500000900000500010006000000050005000a00000005000400000000000900020073797a300000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x80) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, 0x0, 0xfe33) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r6, &(0x7f0000000a00)='syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f00000000c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) 4.430967761s ago: executing program 0 (id=3093): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) socket$kcm(0x10, 0x2, 0x10) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000900)="89000000120081ae08060cdc030ec0007f03e3f7feff000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf00d7815e381ad6e706033a0093b837dc6cc01e32efaec8c7a6ec08123d000200354001000400446b9bbc7a46e3988285dcdf12f21308f868fece01951fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) socket$kcm(0x29, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000000300)=[{&(0x7f0000001800)='@', 0x1}], 0x1}, 0x10004024) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r4}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r5, 0xff03, 0x500) socket$kcm(0x2, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000f3ffffff"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000055a60701000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000004850000008600000118110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) 3.97500333s ago: executing program 2 (id=3094): close(0xffffffffffffffff) socket$kcm(0x10, 0xd, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008002655070002000600040024eab556a705251e618294ffd4938037e786a6900010", 0x46}, {&(0x7f0000001e40)="dceddd02a62da3", 0x7}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x10080) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000a48286de0c10000000241435c2ad57021976b5c6b78d454db05befa0b7ad80877db13ef5c72994086b7e958df8ab4bb9d297e6a5cef398c6162604593e69264538d3e580701cd16677ef178239246f84b0a5fc801720a77f72cb2cd3ee912bbbd0d9ab74a2ca844e96683ba4ceaa18e288baf36503d6bf71799eb2b4c97d78bb57ba3c1a00000000a0000000ac4436879c3d3dc4c5afe3c05479a9a9876b63fdbc65f193236c2113e3a604cef4fac30fdcaf5e1e"], 0x48) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x28fe0}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x4000000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc6cc9aa31f46a8703140000001f03000000350000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf58e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) 3.948882003s ago: executing program 1 (id=3095): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r4, 0x0) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0xc5c3) 3.639395833s ago: executing program 1 (id=3096): r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$kcm(r0, 0x0, 0x200c68c4) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fa, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0x9, 0x3, 0x4, 0xb, 0x0, 0x2, 0x8c, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_bp={0x0, 0x2}, 0x2200, 0x4, 0x4017, 0x3, 0x40, 0x2, 0x5, 0x0, 0x6, 0x0, 0x637}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x1e, 0x2, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000940b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x40, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x75}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000000040)="1400000024000b94f01013e175b7bd7d7edd75", 0x13}], 0x1}, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = getpid() perf_event_open(0x0, r6, 0xfffffffffffffffe, r1, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) syz_clone(0xab009500, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r8, 0x0, 0x20000081) 3.322944727s ago: executing program 5 (id=3097): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtaction={0xb8, 0x30, 0xffff, 0x3, 0x0, {0x0, 0x0, 0x1300}, [{0xa4, 0x1, [@m_csum={0xa0, 0x101, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x8, 0x4, 0x6}, 0x48}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0xc, 0x8, 0x1, 0x6}, 0x1a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x4, 0x5, 0x9}, 0x60}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x4, 0x3, 0x6, 0x4}, 0x21}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x2404c080}, 0x40000) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, 0x0, 0x8000) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10558, 0x2, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x8c0}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020816c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) unlink(0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x2}]}, @enum]}}, 0x0, 0x3e}, 0x28) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000140), 0x4) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x200}, 0x8) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x3, 0x73) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x2004fc10) close(r5) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 3.169385337s ago: executing program 0 (id=3098): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000a080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x400dc) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000bc000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x1, 0x2, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24008810}, 0x80) (async) r4 = getpid() r5 = syz_clone(0x800000, &(0x7f0000000100)="572ed25202bdcbb988cd47667a14a383e0f7e0968683d945d8447a126408bfde3c366fa100941db9576f7bda9ca7e5b8278e9dbf220caf848b36cf4d11864a13874e9e0cde377db4730cb3e1b72c9990a2106e44c884854f26bd83ba5ff82854bcd4020320b9e0e8928f8d34a9df99f2b3cbe474e48756ac", 0x78, &(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000340)="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") sendmsg$nl_netfilter(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x114, 0x2, 0x6, 0x301, 0x70bd27, 0x25dfdbfb, {0x7, 0x0, 0x6}, [@nested={0x44, 0x120, 0x0, 0x1, [@typed={0x14, 0xa9, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @nested={0x4, 0xe}, @typed={0x8, 0x47, 0x0, 0x0, @pid=r4}, @nested={0x4, 0x5d}, @typed={0x8, 0x84, 0x0, 0x0, @pid=r5}, @typed={0x7, 0x10f, 0x0, 0x0, @str=')#\x00'}, @nested={0x4, 0xda}, @typed={0x8, 0x30, 0x0, 0x0, @ipv4=@multicast2}]}, @nested={0xc, 0xdc, 0x0, 0x1, [@typed={0x4, 0x110}, @nested={0x4, 0xe8}]}, @typed={0x4, 0x37}, @typed={0xab, 0x3c, 0x0, 0x0, @binary="e22159661d2acaf0df571b41f30cdc0950cde301db303636c51c777b9bbb0e808f5459b232deead617cc3b13b267fdf38a7ebec2d096fba4154e3db793fc48de4e65c7fa8d5b8260e5640d78880f4b9c700d939c2c5778e1875f365e8abb9f660240e5b966066e1f06e290b8f300a705f66a2cb293896ebd14b7213a03fc52bcd30dd42e26a5a408423d843030e1b81aeefdbeb2b3e270da69dc42f25b884c52cdd3e70167fa21"}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000000}, 0x14000) 3.045070343s ago: executing program 2 (id=3099): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x1a, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000120000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x4000000) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) socket$kcm(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000400009002bbd7000fddbdf250200000004001f000800018004001f90", @ANYRES16=r3], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x23, r4}, 0x38) socket$nl_route(0x10, 0x3, 0x0) 2.805789164s ago: executing program 1 (id=3100): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000050000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000681ad64020000000000450404000100ff0f1704000001130a00b7050000030000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) socket$kcm(0x10, 0x2, 0x10) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000900)="89000000120081ae08060cdc030ec0007f03e3f7feff000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf00d7815e381ad6e706033a0093b837dc6cc01e32efaec8c7a6ec08123d000200354001000400446b9bbc7a46e3988285dcdf12f21308f868fece01951fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) socket$kcm(0x29, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000000300)=[{&(0x7f0000001800)='@', 0x1}], 0x1}, 0x10004024) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x10) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r4}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r5, 0xff03, 0x500) socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000f3ffffff"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000055a60701000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000004850000008600000118110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4889, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.704185692s ago: executing program 0 (id=3101): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r4, 0x0) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0xc5c3) 2.664363042s ago: executing program 2 (id=3102): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) socket$kcm(0x10, 0x2, 0x10) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000900)="89000000120081ae08060cdc030ec0007f03e3f7feff000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf00d7815e381ad6e706033a0093b837dc6cc01e32efaec8c7a6ec08123d000200354001000400446b9bbc7a46e3988285dcdf12f21308f868fece01951fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) socket$kcm(0x29, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000000300)=[{&(0x7f0000001800)='@', 0x1}], 0x1}, 0x10004024) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x10) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r4}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r5, 0xff03, 0x500) socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000f3ffffff"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000055a60701000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000004850000008600000118110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4889, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.062838304s ago: executing program 0 (id=3103): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={r0, r1, 0x25, 0x4, @val=@netfilter={0x3, 0x1, 0x9}}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dffff000000000000a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x180, 0xc8, 0x400000, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x20b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x8001, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x12, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x2100000}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfdef) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$inet(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000cc0)="2206b49bbd253c5028678f113393db4525511468432c99c1b198fa9bdd61a7b491c5f0725de0d5dad57a75fd350a40403d86d5514323ee37", 0x38}], 0x1}, 0x4008041) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.092207645s ago: executing program 0 (id=3104): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000300009116144f782db44b904021d08000500142603600e120900210000000401a8001600a400014006002100036010fab94dcf4f0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e012dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d00040000d6e4edef3d93452a92954b43370e970100"/216, 0xd8}], 0x1}, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x2a, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3, 0x80, 0x6, 0xff, 0x0, 0x401, 0x400, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0xdb7, 0x3}, 0x1000, 0x9, 0x1, 0x0, 0x7, 0x6, 0x9, 0x0, 0x7fffffff}, r1, 0xe, 0xffffffffffffffff, 0x3) sendmsg$kcm(r2, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) recvmsg(r2, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x20) socket$kcm(0x2, 0x1000000000000005, 0x0) 977.245954ms ago: executing program 5 (id=3105): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)={0x18, 0x1a, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x19, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) 836.401435ms ago: executing program 1 (id=3106): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='sched_switch\x00', r0}, 0x18) r2 = syz_clone(0x40000400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$kcm(0x10, 0x3, 0x10) r5 = socket$kcm(0x10, 0x2, 0x4) close(r5) r6 = socket$kcm(0x10, 0x400000002, 0x0) fstat(r6, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_clone(0x8000000, &(0x7f0000000980)="a2c9018699d5c3dcd019a4fb44382c7b08e85fd339d5ec82d0eed98c475f4fba1e2272b22a05007e5a501ad18fc7cbd7627d9406e8a8acf9742dae118909266a08684b321c7487f584054ea9254b56d4d8f62430f914462eb6146ce7d86b8d6e58aadac82e394db1554fa8b08cb3898e3145534e29948ba71bb7c35a165c5b419f101a1feec6a51027910a80decbebeba06b036722471206c438e41b4f85f5cbf7d5d54799b3c703e89d7eb874", 0xad, &(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)="25a035cbf016d2a80a22f355933b7587459eca8eed4bf5708ae08e9e77b591215a9b3ca3c939043e50ca5fa06d14292fd80d6618fe0aa20677f42a7f83f54f8b7ec41decdb2d26469875dde94f2d900ea51c33c539ee2b80fdefa0551a8085dac25c50fb4bb7c5823fa28648d7ac66595c53bf1f560602b5baec370fe1c0f6a99997054f64f440a37cc410f3cc25f57bfe894243b0ea5c1e13f1359514872d8cade731f7fc7a7b61b33654b6a8248cd8bb4e1616e0c9ee41d5e777c3ea31aed12f87d86f8e64d6af01fdf4279371bc9ea8fc240d2731a0") r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) fstat(r10, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r12, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9e, &(0x7f00000003c0)=[{}], 0x8, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xdd, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x48801, &(0x7f0000000200)={[{@gid={'gid', 0x3d, r11}}, {}, {}], [{@measure}, {@hash}, {@smackfshat={'smackfshat', 0x3d, 'memory.events\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}) fstat(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[], 0x0, 0x32, 0x0, 0xfffffffe, 0x5e2}, 0x28) fstat(r15, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x8000, &(0x7f0000000140)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r16, @ANYBLOB="2c6d61736b3d5e4d41595f455845432c650100643e", @ANYRESDEC=0xee00, @ANYBLOB=',\x00']) r17 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x3, 0x0, 0x0, 0x0, 0x4800000000000009, 0x854f, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x5, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x7, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r17, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_generic(r14, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="540400001c00000327bd7000fbdbdf250b00000008007000ac1e0001b9004e8036de20c4c50a3516ef3603f7902539391c6a2cb6baf07b6fdf4476924653a9e6b30aeba4f44d4b949d83d6b9652e6854012753d5b0a04debd0507a1188fe32f5533a4c18e75d976cdbc61abe8340551dd7c355b41a05b6d23b97c339a920653c8043db339f8aed1b19e69a0acdbf279637f307bee5931ce9ad3bf458b7fb14d2fb36c6c548f9f61880e587439d513f6a5a20757e5fb59538bc12aa3c1daf638f8151ac7c954ed0e3b14140ba06bef31f0f0369f4390000008e024f80368203e61abcbdcf263a80e3a13c4d5360ca85ec9202e4115799c290ec8f1ddef84f3293524814f2150aa71af3bbe50fa13e92881914dd7ccbc2170362b28d59402daa58a810b9f9ec7b8af7b2995849c50b0ca74bd474c347d20eb1604e4557a19d0cb37bf37656448a6edc08005800", @ANYRES32=r16, @ANYBLOB="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", @ANYRES32=r17, @ANYBLOB="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"], 0x454}, 0x1, 0x0, 0x0, 0x8040}, 0x56f07bcd77b3e1ee) fstat(r3, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r4, &(0x7f0000000e00)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)=[{&(0x7f0000000600)={0x2f8, 0x30, 0x400, 0x70bd26, 0x25dfdbfe, "", [@nested={0xc5, 0x142, 0x0, 0x1, [@typed={0x4, 0x62}, @generic="3a72c245a36a586a7e4206d99563fc62310b4fc38aa19467eb3ae755062c071f77e033702eb5f0647bbf07821268608f5f825b2f022a302f1a0b4b84e0d87b1e708f927c496c84ff5c3e7a358e69403eecef159ffb4729d17fc7", @generic="b1ed06d0ec1778789b39ca90579cd1d6b42abb834e553946e437030ec57fda76208b2979737719ae5293c687c103223e8c3b755608b2a5ad2b4343ab54bc418c404c1f4fe35668525fb584e0aa1558598949b6bef43a6c854b5f8c69065a8a3d2628e5"]}, @nested={0x85, 0x10d, 0x0, 0x1, [@generic="a8cb8f51ef31c3d5f237d48b4e2c1ba279d9583ecf455ff73d8b83fc6f7f0100fcc8ddd3cae70c4fdd8375d4cf6a66d122d73db004a812093ee42b8b2f72daec72c11b23b2e4022ec215d4c18e4677a0b515bf462e25aaa89755a68ef0c4d32088ff47d141cf848e427dc33ab2129daec779dcc4c1e767166945f82fac", @nested={0x4, 0x47}]}, @generic="f4d052a29c74e826860fce38ec7e310305059db07c3576a37a36547401d22dba89f40b472f1ea168b1ead96cfc795ae932f347522085c733dcad67fd2898a9e094dd93c3a1e31eab781a37ce7a4890d335e01e429366a8d84dd15174935cefbd2adc4bc90c85", @generic="95d9a6010a88d5f81a515f8b5fc135276e1446c40178a662f4e3da629947f1feb602a24677b67fc9152466d393c224cd1de986faa880ff170326d0a9f509960062473b6fe0787239e06beef5d15fd2fd5dc332b3d9841035a417109f2d1223c74f689e17c5fec76107b742a1db8a0e85dfcd5adcf1cdc4e87cabe0ef2ddf29d58f51bab88c5df64df636f74cd6383d92a2b2f5a3b9463586f14a220e5d123b5f4c9ef1de02a0cb6257015ef260fe8abaeefb091f42845d0a247c7de3ed642b94deb1147c84e4951a19548da25f20cc98e104e4b7815a32655163d6e59ccf33b7db0aa6775e261320d3ca83d841df65d54a99fff78bab", @generic="b00b590cdf44111862a8116433a4e8e65f9a1e46cc60fcfaa49e25dc81a9602293c5d7a40e13c8edf6d549e73f04e2d74bec8d084672344162575f"]}, 0x2f8}, {&(0x7f00000000c0)={0x18, 0x3f, 0x300, 0x70bd2c, 0x25dfdbfd, "", [@typed={0x8, 0x19, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2a}}]}, 0x18}, {&(0x7f0000000180)={0x3c, 0x34, 0x400, 0x70bd2a, 0x25dfdbfe, "", [@typed={0xc, 0x13d, 0x0, 0x0, @u64=0x1000000}, @generic="190e34fddae0509ce097202fe9b81072630b3d3110f63d8d0fb3c5a090e6"]}, 0x3c}], 0x3, &(0x7f0000000cc0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r3, r0]}}, @rights={{0x30, 0x1, 0x1, [r5, r1, r4, r5, r0, r4, r6, r4]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, r13}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, r18}}}], 0x108, 0x40000}, 0x80) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000004000000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e4e82949a3651f668c3664402682fb6e27bbfa83b5cae0300c9fcd1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) 801.152929ms ago: executing program 2 (id=3107): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='sched_switch\x00', r0}, 0x18) r2 = syz_clone(0x40000400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$kcm(0x10, 0x3, 0x10) r5 = socket$kcm(0x10, 0x2, 0x4) close(r5) r6 = socket$kcm(0x10, 0x400000002, 0x0) fstat(r6, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_clone(0x8000000, &(0x7f0000000980)="a2c9018699d5c3dcd019a4fb44382c7b08e85fd339d5ec82d0eed98c475f4fba1e2272b22a05007e5a501ad18fc7cbd7627d9406e8a8acf9742dae118909266a08684b321c7487f584054ea9254b56d4d8f62430f914462eb6146ce7d86b8d6e58aadac82e394db1554fa8b08cb3898e3145534e29948ba71bb7c35a165c5b419f101a1feec6a51027910a80decbebeba06b036722471206c438e41b4f85f5cbf7d5d54799b3c703e89d7eb874", 0xad, &(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)="25a035cbf016d2a80a22f355933b7587459eca8eed4bf5708ae08e9e77b591215a9b3ca3c939043e50ca5fa06d14292fd80d6618fe0aa20677f42a7f83f54f8b7ec41decdb2d26469875dde94f2d900ea51c33c539ee2b80fdefa0551a8085dac25c50fb4bb7c5823fa28648d7ac66595c53bf1f560602b5baec370fe1c0f6a99997054f64f440a37cc410f3cc25f57bfe894243b0ea5c1e13f1359514872d8cade731f7fc7a7b61b33654b6a8248cd8bb4e1616e0c9ee41d5e777c3ea31aed12f87d86f8e64d6af01fdf4279371bc9ea8fc240d2731a0") r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) fstat(r10, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r12, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9e, &(0x7f00000003c0)=[{}], 0x8, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xdd, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x48801, &(0x7f0000000200)={[{@gid={'gid', 0x3d, r11}}, {}, {}], [{@measure}, {@hash}, {@smackfshat={'smackfshat', 0x3d, 'memory.events\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}) fstat(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[], 0x0, 0x32, 0x0, 0xfffffffe, 0x5e2}, 0x28) fstat(r15, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x8000, &(0x7f0000000140)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r16, @ANYBLOB="2c6d61736b3d5e4d41595f455845432c650100643e", @ANYRESDEC=0xee00, @ANYBLOB=',\x00']) r17 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x3, 0x0, 0x0, 0x0, 0x4800000000000009, 0x854f, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x5, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x7, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r17, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_generic(r14, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=r16, @ANYBLOB="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", @ANYRES32=r17, @ANYBLOB="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"], 0x454}, 0x1, 0x0, 0x0, 0x8040}, 0x56f07bcd77b3e1ee) fstat(r3, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r4, &(0x7f0000000e00)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)=[{&(0x7f0000000600)={0x2f8, 0x30, 0x400, 0x70bd26, 0x25dfdbfe, "", [@nested={0xc5, 0x142, 0x0, 0x1, [@typed={0x4, 0x62}, @generic="3a72c245a36a586a7e4206d99563fc62310b4fc38aa19467eb3ae755062c071f77e033702eb5f0647bbf07821268608f5f825b2f022a302f1a0b4b84e0d87b1e708f927c496c84ff5c3e7a358e69403eecef159ffb4729d17fc7", @generic="b1ed06d0ec1778789b39ca90579cd1d6b42abb834e553946e437030ec57fda76208b2979737719ae5293c687c103223e8c3b755608b2a5ad2b4343ab54bc418c404c1f4fe35668525fb584e0aa1558598949b6bef43a6c854b5f8c69065a8a3d2628e5"]}, @nested={0x85, 0x10d, 0x0, 0x1, [@generic="a8cb8f51ef31c3d5f237d48b4e2c1ba279d9583ecf455ff73d8b83fc6f7f0100fcc8ddd3cae70c4fdd8375d4cf6a66d122d73db004a812093ee42b8b2f72daec72c11b23b2e4022ec215d4c18e4677a0b515bf462e25aaa89755a68ef0c4d32088ff47d141cf848e427dc33ab2129daec779dcc4c1e767166945f82fac", @nested={0x4, 0x47}]}, @generic="f4d052a29c74e826860fce38ec7e310305059db07c3576a37a36547401d22dba89f40b472f1ea168b1ead96cfc795ae932f347522085c733dcad67fd2898a9e094dd93c3a1e31eab781a37ce7a4890d335e01e429366a8d84dd15174935cefbd2adc4bc90c85", @generic="95d9a6010a88d5f81a515f8b5fc135276e1446c40178a662f4e3da629947f1feb602a24677b67fc9152466d393c224cd1de986faa880ff170326d0a9f509960062473b6fe0787239e06beef5d15fd2fd5dc332b3d9841035a417109f2d1223c74f689e17c5fec76107b742a1db8a0e85dfcd5adcf1cdc4e87cabe0ef2ddf29d58f51bab88c5df64df636f74cd6383d92a2b2f5a3b9463586f14a220e5d123b5f4c9ef1de02a0cb6257015ef260fe8abaeefb091f42845d0a247c7de3ed642b94deb1147c84e4951a19548da25f20cc98e104e4b7815a32655163d6e59ccf33b7db0aa6775e261320d3ca83d841df65d54a99fff78bab", @generic="b00b590cdf44111862a8116433a4e8e65f9a1e46cc60fcfaa49e25dc81a9602293c5d7a40e13c8edf6d549e73f04e2d74bec8d084672344162575f"]}, 0x2f8}, {&(0x7f00000000c0)={0x18, 0x3f, 0x300, 0x70bd2c, 0x25dfdbfd, "", [@typed={0x8, 0x19, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2a}}]}, 0x18}, {&(0x7f0000000180)={0x3c, 0x34, 0x400, 0x70bd2a, 0x25dfdbfe, "", [@typed={0xc, 0x13d, 0x0, 0x0, @u64=0x1000000}, @generic="190e34fddae0509ce097202fe9b81072630b3d3110f63d8d0fb3c5a090e6"]}, 0x3c}], 0x3, &(0x7f0000000cc0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r3, r0]}}, @rights={{0x30, 0x1, 0x1, [r5, r1, r4, r5, r0, r4, r6, r4]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, r13}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, r18}}}], 0x108, 0x40000}, 0x80) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000004000000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e4e82949a3651f668c3664402682fb6e27bbfa83b5cae0300c9fcd1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) 703.287132ms ago: executing program 5 (id=3108): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r0, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=@deltfilter={0x488, 0x2d, 0x10, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x8}, {0x8, 0xb}, {0x0, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_u32={{0x8}, {0x424, 0x2, [@TCA_U32_LINK={0x8}, @TCA_U32_HASH={0x8, 0x2, 0x3}, @TCA_U32_ACT={0x408, 0x7, [@m_ct={0xf4, 0xf, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x401}]}, {0xc1, 0x6, "312c6d967ceb5cd9076259552d11b73fd27a7333b70e2f8505a3df1c6ce1ad6a0b146b8cb4e5503b00191bf9d0cd34a00afb0b85ac23700406b62d13c4507f736ceb35166a9e85a6f9ee1ecab6c33d9a74927e5d4c18de9709337eac53e8b468667f0cc0b5662e12135b6d77b373d54545f5aa09bf5588ff02ac2b06cf431c5b4b33bbc842d667cb052a268a87b36dcc8924cd7f204a4ceeed8e65a02fce44f942486317be9672bc1210d928ac70bee17e2b99a051dd09be6bdc0ae2e4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_tunnel_key={0x144, 0x12, 0x0, 0x0, {{0xf}, {0x80, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x3}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x9, 0x1, 0x6861694, 0x10}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x6}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}]}, {0x97, 0x6, "fe91425959700a2c3a03f2dbf6c4e94c42124ff8cb76ca64f0a4274308db95bf632eff235f9b334f8b2438bb3c76a1d9cac135185039065a280026b2669f8196e1ae40d926edaa9eaf4014b0a34bc123ddb4360759f26bb6e542957f01f7747504aa3add8254acd0deb2becc6a1d9ef40c1b402c5a229e902518d400c51df710700d2358e16be00fa4a806f8ba412396980a2c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0x1cc, 0xd, 0x0, 0x0, {{0x9}, {0x100, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x5, 0x5, 0x80, 0x101}, 0x19}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7cdb, 0x2, 0x3, 0xfffffffc, 0x4}, 0x63}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x6, 0x1, 0x6, 0x8}, 0x6}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xa7c0, 0x8, 0x0, 0x29ad, 0x9}, 0x47}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000001, 0x8, 0x7, 0xc8d, 0xb}, 0x5}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x2, 0x6, 0xffffff7f, 0x5}, 0x4c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x80000000, 0x10000000, 0x5, 0x5}, 0x7}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x6, 0x20000006, 0x3, 0xc}, 0x67}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x1ff, 0x8, 0x1, 0x200}, 0x17}}]}, {0xa4, 0x6, "ba7f3dbffa4d55959714fc50797bff5a69a7c92665639216074b3a471222fc045f3c7baf520a9f6d78371596e145fd6e93f91d3c181b65055ec83f691bc340c0a06204607d1e8f999793c75e80af7ee9e8df2044a6bc487d22e44a8fd5da3bf76a58bd07babf9110677f74715a68c11becce851b78b6cbc01565e6bdf023125942ce95122dd0e577bf29aaa9228a20892f12d627fefbc475ea78fe982d0fef7c"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_U32_CLASSID={0x8, 0x1, {0xfffa, 0xffff}}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xa17}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0x8001}]}, 0x488}, 0x1, 0x0, 0x0, 0x64044008}, 0x48804) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000980)=ANY=[@ANYBLOB="3800000001010500000000000000000002000001240001801400018008000100e0000002080002"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ff"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, 0x0, 0x1) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x9, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = getpid() r7 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x58412, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7bffffff}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70200005245855db7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf020000000000008500000084000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x541b, 0x0) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x60, 0x1403, 0x1, 0x70bd24, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'erspan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f91100"}) 363.975066ms ago: executing program 5 (id=3109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) 143.997017ms ago: executing program 5 (id=3110): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x80, 0x101, 0x0, 0x0, 0x2000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r4, 0x0) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0xc5c3) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x8, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={r5}, 0x4) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000c80)="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", 0x579}], 0x1}, 0x4c080) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x10000, '\x00', r8, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014070080090001006c617374000000000400028008000340000001"], 0xe4}}, 0x20050800) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000080)={0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 0s ago: executing program 0 (id=3111): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x80, 0x101, 0x0, 0x0, 0x2000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r4, 0x0) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0xc5c3) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x8, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={r5}, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000c80)="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", 0x579}], 0x1}, 0x4c080) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x10000, '\x00', r7, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014070080090001006c617374000000000400028008000340000001"], 0xe4}}, 0x20050800) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000080)={0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) kernel console output (not intermixed with test programs): 339.998286][T12389] RIP: 0033:0x7f96f5b8eba9 [ 339.998310][T12389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.998327][T12389] RSP: 002b:00007f96f6a71038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.998348][T12389] RAX: ffffffffffffffda RBX: 00007f96f5dd5fa0 RCX: 00007f96f5b8eba9 [ 339.998364][T12389] RDX: 0000000000040040 RSI: 00002000000005c0 RDI: 0000000000000006 [ 339.998377][T12389] RBP: 00007f96f6a71090 R08: 0000000000000000 R09: 0000000000000000 [ 339.998394][T12389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.998406][T12389] R13: 00007f96f5dd6038 R14: 00007f96f5dd5fa0 R15: 00007ffc117a8308 [ 339.998496][T12389] [ 340.774113][T12403] netlink: 'syz.3.2166': attribute type 10 has an invalid length. [ 340.782351][T12403] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2166'. [ 340.865889][T12405] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2167'. [ 342.634222][T12437] netlink: 'syz.2.2175': attribute type 3 has an invalid length. [ 342.658672][T12437] netlink: 'syz.2.2175': attribute type 1 has an invalid length. [ 342.715720][T12437] netlink: 'syz.2.2175': attribute type 2 has an invalid length. [ 342.748302][T12437] netlink: 'syz.2.2175': attribute type 8 has an invalid length. [ 342.825540][T12437] netlink: 'syz.2.2175': attribute type 10 has an invalid length. [ 342.843876][T12437] netlink: 'syz.2.2175': attribute type 11 has an invalid length. [ 342.875356][T12437] netlink: 198236 bytes leftover after parsing attributes in process `syz.2.2175'. [ 344.064654][T12477] netlink: 'syz.5.2188': attribute type 3 has an invalid length. [ 344.078607][T12474] netlink: 'syz.2.2187': attribute type 10 has an invalid length. [ 344.086753][T12474] __nla_validate_parse: 1 callbacks suppressed [ 344.086771][T12474] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2187'. [ 344.104343][T12477] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2188'. [ 344.159432][T12479] erspan0 speed is unknown, defaulting to 1000 [ 344.168058][T12474] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 344.202104][T12477] netlink: 'syz.5.2188': attribute type 21 has an invalid length. [ 344.708036][T12498] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2193'. [ 344.717958][T12498] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2193'. [ 344.758842][T12500] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2194'. [ 344.774632][T12498] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2193'. [ 345.465000][T12523] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2202'. [ 345.508669][T12523] FAULT_INJECTION: forcing a failure. [ 345.508669][T12523] name failslab, interval 1, probability 0, space 0, times 0 [ 345.554179][T12523] CPU: 1 UID: 0 PID: 12523 Comm: syz.1.2202 Not tainted syzkaller #0 PREEMPT(full) [ 345.554208][T12523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 345.554221][T12523] Call Trace: [ 345.554229][T12523] [ 345.554237][T12523] dump_stack_lvl+0x189/0x250 [ 345.554265][T12523] ? __pfx____ratelimit+0x10/0x10 [ 345.554284][T12523] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.554307][T12523] ? __pfx__printk+0x10/0x10 [ 345.554332][T12523] ? irqentry_enter+0x3d/0x60 [ 345.554362][T12523] should_fail_ex+0x414/0x560 [ 345.554397][T12523] should_failslab+0xa8/0x100 [ 345.554427][T12523] kmem_cache_alloc_noprof+0x73/0x3c0 [ 345.554454][T12523] ? skb_clone+0x212/0x3a0 [ 345.554483][T12523] skb_clone+0x212/0x3a0 [ 345.554528][T12523] __netlink_deliver_tap+0x404/0x850 [ 345.554562][T12523] ? netlink_deliver_tap+0x2e/0x1b0 [ 345.554585][T12523] netlink_deliver_tap+0x19c/0x1b0 [ 345.554607][T12523] netlink_sendskb+0x68/0x140 [ 345.554639][T12523] netlink_unicast+0x397/0x9e0 [ 345.554666][T12523] ? __asan_memcpy+0x40/0x70 [ 345.554696][T12523] ? __pfx_netlink_unicast+0x10/0x10 [ 345.554736][T12523] netlink_rcv_skb+0x28c/0x470 [ 345.554758][T12523] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 345.554782][T12523] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 345.554806][T12523] ? irqentry_exit+0x74/0x90 [ 345.554848][T12523] netlink_unicast+0x82f/0x9e0 [ 345.554887][T12523] ? __pfx_netlink_unicast+0x10/0x10 [ 345.554918][T12523] ? netlink_sendmsg+0x642/0xb30 [ 345.554937][T12523] ? skb_put+0x11b/0x210 [ 345.554962][T12523] netlink_sendmsg+0x805/0xb30 [ 345.554994][T12523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.555019][T12523] ? aa_sock_msg_perm+0xf1/0x1d0 [ 345.555041][T12523] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 345.555061][T12523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.555083][T12523] __sock_sendmsg+0x219/0x270 [ 345.555116][T12523] ____sys_sendmsg+0x505/0x830 [ 345.555147][T12523] ? __pfx_____sys_sendmsg+0x10/0x10 [ 345.555177][T12523] ? import_iovec+0x74/0xa0 [ 345.555207][T12523] ___sys_sendmsg+0x21f/0x2a0 [ 345.555234][T12523] ? __pfx____sys_sendmsg+0x10/0x10 [ 345.555298][T12523] ? __fget_files+0x2a/0x420 [ 345.555315][T12523] ? __fget_files+0x3a0/0x420 [ 345.555343][T12523] __x64_sys_sendmsg+0x19b/0x260 [ 345.555370][T12523] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 345.555418][T12523] do_syscall_64+0xfa/0x3b0 [ 345.555440][T12523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.555459][T12523] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 345.555478][T12523] ? clear_bhb_loop+0x60/0xb0 [ 345.555502][T12523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.555521][T12523] RIP: 0033:0x7f830458eba9 [ 345.555537][T12523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.555554][T12523] RSP: 002b:00007f8305371038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.555576][T12523] RAX: ffffffffffffffda RBX: 00007f83047d5fa0 RCX: 00007f830458eba9 [ 345.555591][T12523] RDX: 0000000000000c04 RSI: 0000200000000080 RDI: 000000000000000c [ 345.555603][T12523] RBP: 00007f8305371090 R08: 0000000000000000 R09: 0000000000000000 [ 345.555615][T12523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.555626][T12523] R13: 00007f83047d6038 R14: 00007f83047d5fa0 R15: 00007ffc22d31158 [ 345.555658][T12523] [ 345.968297][T12531] netlink: 'syz.0.2203': attribute type 6 has an invalid length. [ 346.103889][T12538] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2207'. [ 346.117068][T12530] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2206'. [ 346.160921][T12530] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 346.380657][T12546] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2211'. [ 347.950584][T12599] netlink: set zone limit has 4 unknown bytes [ 348.008024][T12599] validate_nla: 1 callbacks suppressed [ 348.008059][T12599] netlink: 'syz.5.2223': attribute type 16 has an invalid length. [ 348.050425][T12599] netlink: 'syz.5.2223': attribute type 3 has an invalid length. [ 348.198670][T12610] netlink: 'syz.0.2227': attribute type 10 has an invalid length. [ 349.126104][T12663] __nla_validate_parse: 6 callbacks suppressed [ 349.126140][T12663] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2245'. [ 349.144433][T12656] erspan0 speed is unknown, defaulting to 1000 [ 349.305033][T12667] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2246'. [ 349.751528][T12684] netlink: 'syz.2.2251': attribute type 6 has an invalid length. [ 349.763686][T12684] netlink: 'syz.2.2251': attribute type 1 has an invalid length. [ 349.777803][T12684] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.2251'. [ 349.877615][T12680] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2250'. [ 349.950102][T12688] netlink: 'syz.5.2252': attribute type 10 has an invalid length. [ 349.960647][T12688] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2252'. [ 350.200559][T12702] FAULT_INJECTION: forcing a failure. [ 350.200559][T12702] name failslab, interval 1, probability 0, space 0, times 0 [ 350.222935][T12702] CPU: 0 UID: 0 PID: 12702 Comm: syz.2.2256 Not tainted syzkaller #0 PREEMPT(full) [ 350.222959][T12702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 350.222970][T12702] Call Trace: [ 350.222977][T12702] [ 350.222985][T12702] dump_stack_lvl+0x189/0x250 [ 350.223010][T12702] ? __pfx____ratelimit+0x10/0x10 [ 350.223030][T12702] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.223051][T12702] ? __pfx__printk+0x10/0x10 [ 350.223081][T12702] ? __pfx___might_resched+0x10/0x10 [ 350.223106][T12702] should_fail_ex+0x414/0x560 [ 350.223137][T12702] should_failslab+0xa8/0x100 [ 350.223165][T12702] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 350.223190][T12702] ? __alloc_skb+0x112/0x2d0 [ 350.223215][T12702] __alloc_skb+0x112/0x2d0 [ 350.223240][T12702] netlink_ack+0x146/0xa50 [ 350.223256][T12702] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 350.223301][T12702] netlink_rcv_skb+0x28c/0x470 [ 350.223321][T12702] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 350.223349][T12702] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 350.223390][T12702] ? bpf_lsm_capable+0x9/0x20 [ 350.223413][T12702] ? security_capable+0x7e/0x2e0 [ 350.223449][T12702] nfnetlink_rcv+0x26a/0x2520 [ 350.223478][T12702] ? __dev_queue_xmit+0x1d79/0x3b50 [ 350.223515][T12702] ? __dev_queue_xmit+0x27b/0x3b50 [ 350.223552][T12702] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 350.223578][T12702] ? __pfx___dev_queue_xmit+0x10/0x10 [ 350.223618][T12702] ? ref_tracker_free+0x63a/0x7d0 [ 350.223636][T12702] ? __asan_memcpy+0x40/0x70 [ 350.223656][T12702] ? __pfx_ref_tracker_free+0x10/0x10 [ 350.223671][T12702] ? __skb_clone+0x63/0x7a0 [ 350.223697][T12702] ? perf_trace_lock+0xec/0x3b0 [ 350.223713][T12702] ? __skb_clone+0x483/0x7a0 [ 350.223740][T12702] ? __pfx_perf_trace_lock+0x10/0x10 [ 350.223757][T12702] ? skb_clone+0x246/0x3a0 [ 350.223784][T12702] ? __netlink_deliver_tap+0x807/0x850 [ 350.223803][T12702] ? netlink_deliver_tap+0x2e/0x1b0 [ 350.223830][T12702] ? netlink_deliver_tap+0x2e/0x1b0 [ 350.223858][T12702] netlink_unicast+0x82f/0x9e0 [ 350.223895][T12702] ? __pfx_netlink_unicast+0x10/0x10 [ 350.223924][T12702] ? netlink_sendmsg+0x642/0xb30 [ 350.223941][T12702] ? skb_put+0x11b/0x210 [ 350.223966][T12702] netlink_sendmsg+0x805/0xb30 [ 350.223996][T12702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.224021][T12702] ? aa_sock_msg_perm+0xf1/0x1d0 [ 350.224041][T12702] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 350.224060][T12702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.224080][T12702] __sock_sendmsg+0x219/0x270 [ 350.224111][T12702] ____sys_sendmsg+0x505/0x830 [ 350.224140][T12702] ? __pfx_____sys_sendmsg+0x10/0x10 [ 350.224174][T12702] ? import_iovec+0x74/0xa0 [ 350.224202][T12702] ___sys_sendmsg+0x21f/0x2a0 [ 350.224227][T12702] ? __pfx____sys_sendmsg+0x10/0x10 [ 350.224276][T12702] ? __fget_files+0x2a/0x420 [ 350.224307][T12702] ? __fget_files+0x2a/0x420 [ 350.224321][T12702] ? __fget_files+0x3a0/0x420 [ 350.224350][T12702] __x64_sys_sendmsg+0x19b/0x260 [ 350.224376][T12702] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 350.224418][T12702] ? __pfx_ksys_write+0x10/0x10 [ 350.224449][T12702] ? do_syscall_64+0xbe/0x3b0 [ 350.224474][T12702] do_syscall_64+0xfa/0x3b0 [ 350.224495][T12702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.224512][T12702] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 350.224530][T12702] ? clear_bhb_loop+0x60/0xb0 [ 350.224552][T12702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.224570][T12702] RIP: 0033:0x7f4dd358eba9 [ 350.224587][T12702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.224604][T12702] RSP: 002b:00007f4dd44db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.224624][T12702] RAX: ffffffffffffffda RBX: 00007f4dd37d5fa0 RCX: 00007f4dd358eba9 [ 350.224638][T12702] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 350.224649][T12702] RBP: 00007f4dd44db090 R08: 0000000000000000 R09: 0000000000000000 [ 350.224660][T12702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.224670][T12702] R13: 00007f4dd37d6038 R14: 00007f4dd37d5fa0 R15: 00007ffda9b5be18 [ 350.224703][T12702] [ 350.785315][T12710] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2258'. [ 350.822032][T12709] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2259'. [ 351.100371][T12719] FAULT_INJECTION: forcing a failure. [ 351.100371][T12719] name failslab, interval 1, probability 0, space 0, times 0 [ 351.114114][T12719] CPU: 0 UID: 0 PID: 12719 Comm: syz.0.2262 Not tainted syzkaller #0 PREEMPT(full) [ 351.114139][T12719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 351.114151][T12719] Call Trace: [ 351.114159][T12719] [ 351.114168][T12719] dump_stack_lvl+0x189/0x250 [ 351.114196][T12719] ? __pfx____ratelimit+0x10/0x10 [ 351.114217][T12719] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.114241][T12719] ? __pfx__printk+0x10/0x10 [ 351.114265][T12719] ? genl_rcv+0x28/0x40 [ 351.114291][T12719] ? ____sys_sendmsg+0x505/0x830 [ 351.114313][T12719] ? __x64_sys_sendmsg+0x19b/0x260 [ 351.114345][T12719] should_fail_ex+0x414/0x560 [ 351.114378][T12719] should_failslab+0xa8/0x100 [ 351.114406][T12719] kmem_cache_alloc_noprof+0x73/0x3c0 [ 351.114432][T12719] ? skb_clone+0x212/0x3a0 [ 351.114461][T12719] skb_clone+0x212/0x3a0 [ 351.114488][T12719] __netlink_deliver_tap+0x404/0x850 [ 351.114521][T12719] ? netlink_deliver_tap+0x2e/0x1b0 [ 351.114544][T12719] netlink_deliver_tap+0x19c/0x1b0 [ 351.114566][T12719] netlink_sendskb+0x68/0x140 [ 351.114604][T12719] netlink_unicast+0x397/0x9e0 [ 351.114630][T12719] ? __asan_memcpy+0x40/0x70 [ 351.114661][T12719] ? __pfx_netlink_unicast+0x10/0x10 [ 351.114702][T12719] netlink_rcv_skb+0x28c/0x470 [ 351.114720][T12719] ? __lock_acquire+0xab9/0xd20 [ 351.114750][T12719] ? __pfx_genl_rcv_msg+0x10/0x10 [ 351.114778][T12719] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 351.114820][T12719] ? down_read+0x1ad/0x2e0 [ 351.114844][T12719] genl_rcv+0x28/0x40 [ 351.114868][T12719] netlink_unicast+0x82f/0x9e0 [ 351.114906][T12719] ? __pfx_netlink_unicast+0x10/0x10 [ 351.114937][T12719] ? netlink_sendmsg+0x642/0xb30 [ 351.114955][T12719] ? skb_put+0x11b/0x210 [ 351.114981][T12719] netlink_sendmsg+0x805/0xb30 [ 351.115012][T12719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.115037][T12719] ? aa_sock_msg_perm+0xf1/0x1d0 [ 351.115059][T12719] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 351.115081][T12719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.115103][T12719] __sock_sendmsg+0x219/0x270 [ 351.115137][T12719] ____sys_sendmsg+0x505/0x830 [ 351.115168][T12719] ? __pfx_____sys_sendmsg+0x10/0x10 [ 351.115200][T12719] ? import_iovec+0x74/0xa0 [ 351.115227][T12719] ___sys_sendmsg+0x21f/0x2a0 [ 351.115255][T12719] ? __pfx____sys_sendmsg+0x10/0x10 [ 351.115314][T12719] ? __fget_files+0x2a/0x420 [ 351.115330][T12719] ? __fget_files+0x3a0/0x420 [ 351.115359][T12719] __x64_sys_sendmsg+0x19b/0x260 [ 351.115385][T12719] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 351.115419][T12719] ? __pfx_ksys_write+0x10/0x10 [ 351.115441][T12719] ? rcu_is_watching+0x15/0xb0 [ 351.115463][T12719] ? do_syscall_64+0xbe/0x3b0 [ 351.115485][T12719] do_syscall_64+0xfa/0x3b0 [ 351.115501][T12719] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.115517][T12719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.115534][T12719] ? clear_bhb_loop+0x60/0xb0 [ 351.115554][T12719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.115570][T12719] RIP: 0033:0x7fe7aa58eba9 [ 351.115585][T12719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.115607][T12719] RSP: 002b:00007fe7ab4b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.115624][T12719] RAX: ffffffffffffffda RBX: 00007fe7aa7d5fa0 RCX: 00007fe7aa58eba9 [ 351.115637][T12719] RDX: 000000000000c000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 351.115649][T12719] RBP: 00007fe7ab4b0090 R08: 0000000000000000 R09: 0000000000000000 [ 351.115659][T12719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 351.115669][T12719] R13: 00007fe7aa7d6038 R14: 00007fe7aa7d5fa0 R15: 00007fffd82f1248 [ 351.115697][T12719] [ 351.553077][T12723] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2265'. [ 351.683611][T12735] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2269'. [ 351.692994][T12735] netlink: 240 bytes leftover after parsing attributes in process `syz.5.2269'. [ 354.169243][T12802] __nla_validate_parse: 5 callbacks suppressed [ 354.169283][T12802] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2289'. [ 354.203328][T12806] netlink: 'syz.3.2288': attribute type 3 has an invalid length. [ 354.216393][T12806] netlink: 201336 bytes leftover after parsing attributes in process `syz.3.2288'. [ 354.834001][T12823] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2294'. [ 354.859606][T12823] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2294'. [ 354.969229][T12829] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2305'. [ 355.052391][T12835] sit0: entered allmulticast mode [ 355.129568][T12831] erspan0 speed is unknown, defaulting to 1000 [ 356.114005][T12863] netlink: 'syz.3.2304': attribute type 10 has an invalid length. [ 356.125933][T12863] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2304'. [ 356.324415][T12875] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2310'. [ 356.461893][T12880] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2311'. [ 356.482981][T12880] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2311'. [ 356.851973][T12891] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2314'. [ 358.304434][T12925] netlink: 'syz.5.2329': attribute type 10 has an invalid length. [ 358.482267][T12941] FAULT_INJECTION: forcing a failure. [ 358.482267][T12941] name failslab, interval 1, probability 0, space 0, times 0 [ 358.498220][T12941] CPU: 0 UID: 0 PID: 12941 Comm: syz.0.2333 Not tainted syzkaller #0 PREEMPT(full) [ 358.498248][T12941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 358.498260][T12941] Call Trace: [ 358.498268][T12941] [ 358.498275][T12941] dump_stack_lvl+0x189/0x250 [ 358.498304][T12941] ? __pfx____ratelimit+0x10/0x10 [ 358.498324][T12941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.498347][T12941] ? __pfx__printk+0x10/0x10 [ 358.498370][T12941] ? nfnetlink_rcv+0x26a/0x2520 [ 358.498414][T12941] should_fail_ex+0x414/0x560 [ 358.498449][T12941] should_failslab+0xa8/0x100 [ 358.498480][T12941] kmem_cache_alloc_noprof+0x73/0x3c0 [ 358.498505][T12941] ? skb_clone+0x212/0x3a0 [ 358.498534][T12941] skb_clone+0x212/0x3a0 [ 358.498562][T12941] __netlink_deliver_tap+0x404/0x850 [ 358.498597][T12941] ? netlink_deliver_tap+0x2e/0x1b0 [ 358.498619][T12941] netlink_deliver_tap+0x19c/0x1b0 [ 358.498642][T12941] netlink_sendskb+0x68/0x140 [ 358.498677][T12941] netlink_unicast+0x397/0x9e0 [ 358.498704][T12941] ? __asan_memcpy+0x40/0x70 [ 358.498735][T12941] ? __pfx_netlink_unicast+0x10/0x10 [ 358.498775][T12941] netlink_rcv_skb+0x28c/0x470 [ 358.498803][T12941] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 358.498833][T12941] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 358.498866][T12941] ? bpf_lsm_capable+0x9/0x20 [ 358.498892][T12941] ? security_capable+0x7e/0x2e0 [ 358.498928][T12941] nfnetlink_rcv+0x26a/0x2520 [ 358.498960][T12941] ? __dev_queue_xmit+0x1d79/0x3b50 [ 358.498997][T12941] ? __dev_queue_xmit+0x27b/0x3b50 [ 358.499036][T12941] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 358.499063][T12941] ? __pfx___dev_queue_xmit+0x10/0x10 [ 358.499104][T12941] ? ref_tracker_free+0x63a/0x7d0 [ 358.499123][T12941] ? __asan_memcpy+0x40/0x70 [ 358.499144][T12941] ? __pfx_ref_tracker_free+0x10/0x10 [ 358.499161][T12941] ? __skb_clone+0x63/0x7a0 [ 358.499188][T12941] ? perf_trace_lock+0xec/0x3b0 [ 358.499206][T12941] ? __skb_clone+0x483/0x7a0 [ 358.499234][T12941] ? __pfx_perf_trace_lock+0x10/0x10 [ 358.499254][T12941] ? skb_clone+0x246/0x3a0 [ 358.499283][T12941] ? __netlink_deliver_tap+0x807/0x850 [ 358.499304][T12941] ? netlink_deliver_tap+0x2e/0x1b0 [ 358.499332][T12941] ? netlink_deliver_tap+0x2e/0x1b0 [ 358.499361][T12941] netlink_unicast+0x82f/0x9e0 [ 358.499400][T12941] ? __pfx_netlink_unicast+0x10/0x10 [ 358.499432][T12941] ? netlink_sendmsg+0x642/0xb30 [ 358.499451][T12941] ? skb_put+0x11b/0x210 [ 358.499478][T12941] netlink_sendmsg+0x805/0xb30 [ 358.499509][T12941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.499535][T12941] ? aa_sock_msg_perm+0xf1/0x1d0 [ 358.499556][T12941] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 358.499576][T12941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.499598][T12941] __sock_sendmsg+0x219/0x270 [ 358.499630][T12941] ____sys_sendmsg+0x505/0x830 [ 358.499661][T12941] ? __pfx_____sys_sendmsg+0x10/0x10 [ 358.499695][T12941] ? import_iovec+0x74/0xa0 [ 358.499725][T12941] ___sys_sendmsg+0x21f/0x2a0 [ 358.499752][T12941] ? __pfx____sys_sendmsg+0x10/0x10 [ 358.499805][T12941] ? __fget_files+0x2a/0x420 [ 358.499837][T12941] ? __fget_files+0x2a/0x420 [ 358.499853][T12941] ? __fget_files+0x3a0/0x420 [ 358.499882][T12941] __x64_sys_sendmsg+0x19b/0x260 [ 358.499909][T12941] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 358.499945][T12941] ? __pfx_ksys_write+0x10/0x10 [ 358.499977][T12941] ? do_syscall_64+0xbe/0x3b0 [ 358.500003][T12941] do_syscall_64+0xfa/0x3b0 [ 358.500022][T12941] ? lockdep_hardirqs_on+0x9c/0x150 [ 358.500042][T12941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.500061][T12941] ? clear_bhb_loop+0x60/0xb0 [ 358.500086][T12941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.500104][T12941] RIP: 0033:0x7fe7aa58eba9 [ 358.500122][T12941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.500139][T12941] RSP: 002b:00007fe7ab4b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.500161][T12941] RAX: ffffffffffffffda RBX: 00007fe7aa7d5fa0 RCX: 00007fe7aa58eba9 [ 358.500176][T12941] RDX: 0000000000000000 RSI: 0000200000000b40 RDI: 0000000000000003 [ 358.500189][T12941] RBP: 00007fe7ab4b0090 R08: 0000000000000000 R09: 0000000000000000 [ 358.500200][T12941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.500212][T12941] R13: 00007fe7aa7d6038 R14: 00007fe7aa7d5fa0 R15: 00007fffd82f1248 [ 358.500245][T12941] [ 359.163175][T12953] netlink: 'syz.0.2338': attribute type 6 has an invalid length. [ 359.172799][T12953] netlink: 'syz.0.2338': attribute type 1 has an invalid length. [ 359.180628][T12953] __nla_validate_parse: 7 callbacks suppressed [ 359.180644][T12953] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.2338'. [ 359.182368][T12951] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2337'. [ 359.321555][T12960] netlink: 'syz.5.2339': attribute type 2 has an invalid length. [ 359.351037][T12962] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2341'. [ 359.360990][T12962] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2341'. [ 359.511675][T12966] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2342'. [ 359.733802][T12977] netlink: 'syz.0.2345': attribute type 10 has an invalid length. [ 359.795512][T12977] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2345'. [ 360.218869][T12996] netlink: 'syz.2.2350': attribute type 3 has an invalid length. [ 360.231908][T12996] netlink: 201336 bytes leftover after parsing attributes in process `syz.2.2350'. [ 360.300621][T13000] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2352'. [ 360.556578][T13012] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2356'. [ 360.593151][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2358'. [ 360.639794][T13017] erspan0 speed is unknown, defaulting to 1000 [ 361.127443][T13032] FAULT_INJECTION: forcing a failure. [ 361.127443][T13032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.147768][T13032] CPU: 1 UID: 0 PID: 13032 Comm: syz.5.2362 Not tainted syzkaller #0 PREEMPT(full) [ 361.147800][T13032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 361.147812][T13032] Call Trace: [ 361.147829][T13032] [ 361.147845][T13032] dump_stack_lvl+0x189/0x250 [ 361.147896][T13032] ? __pfx____ratelimit+0x10/0x10 [ 361.147942][T13032] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.147989][T13032] ? __pfx__printk+0x10/0x10 [ 361.148081][T13032] ? __might_fault+0xb0/0x130 [ 361.148193][T13032] should_fail_ex+0x414/0x560 [ 361.148302][T13032] _copy_to_user+0x31/0xb0 [ 361.148374][T13032] simple_read_from_buffer+0xe1/0x170 [ 361.148483][T13032] proc_fail_nth_read+0x1b3/0x220 [ 361.148569][T13032] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 361.148649][T13032] ? rw_verify_area+0x2a6/0x4d0 [ 361.148689][T13032] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 361.148756][T13032] vfs_read+0x200/0xa30 [ 361.148799][T13032] ? fdget_pos+0x247/0x320 [ 361.148875][T13032] ? __pfx___mutex_lock+0x10/0x10 [ 361.148921][T13032] ? __pfx_vfs_read+0x10/0x10 [ 361.148994][T13032] ? __fget_files+0x2a/0x420 [ 361.149078][T13032] ? __fget_files+0x3a0/0x420 [ 361.149102][T13032] ? __fget_files+0x2a/0x420 [ 361.149240][T13032] ksys_read+0x145/0x250 [ 361.149318][T13032] ? __pfx_ksys_read+0x10/0x10 [ 361.149426][T13032] ? do_syscall_64+0xbe/0x3b0 [ 361.149506][T13032] do_syscall_64+0xfa/0x3b0 [ 361.149530][T13032] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.149572][T13032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.149599][T13032] ? clear_bhb_loop+0x60/0xb0 [ 361.149678][T13032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.149702][T13032] RIP: 0033:0x7f96f5b8d5bc [ 361.149736][T13032] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 361.149753][T13032] RSP: 002b:00007f96f6a71030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 361.149775][T13032] RAX: ffffffffffffffda RBX: 00007f96f5dd5fa0 RCX: 00007f96f5b8d5bc [ 361.149789][T13032] RDX: 000000000000000f RSI: 00007f96f6a710a0 RDI: 0000000000000006 [ 361.149801][T13032] RBP: 00007f96f6a71090 R08: 0000000000000000 R09: 0000000000000000 [ 361.149813][T13032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.149825][T13032] R13: 00007f96f5dd6038 R14: 00007f96f5dd5fa0 R15: 00007ffc117a8308 [ 361.150018][T13032] [ 362.022742][T13045] netlink: 'syz.3.2367': attribute type 2 has an invalid length. [ 362.360385][T13052] netlink: 'syz.5.2368': attribute type 10 has an invalid length. [ 362.945946][T13068] netlink: 'syz.2.2372': attribute type 3 has an invalid length. [ 362.964151][T13068] netlink: 'syz.2.2372': attribute type 16 has an invalid length. [ 364.889488][T13118] netlink: 'syz.3.2385': attribute type 10 has an invalid length. [ 364.902618][T13124] __nla_validate_parse: 7 callbacks suppressed [ 364.902653][T13124] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2387'. [ 364.904771][T13118] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2385'. [ 364.936211][T13127] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2386'. [ 365.439518][T13139] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2390'. [ 365.455506][T13139] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2390'. [ 365.477667][T13139] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2390'. [ 366.034633][T13159] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2395'. [ 366.080473][T13161] FAULT_INJECTION: forcing a failure. [ 366.080473][T13161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.195416][T13161] CPU: 0 UID: 0 PID: 13161 Comm: syz.3.2396 Not tainted syzkaller #0 PREEMPT(full) [ 366.195444][T13161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 366.195460][T13161] Call Trace: [ 366.195471][T13161] [ 366.195482][T13161] dump_stack_lvl+0x189/0x250 [ 366.195518][T13161] ? __pfx____ratelimit+0x10/0x10 [ 366.195552][T13161] ? __pfx_dump_stack_lvl+0x10/0x10 [ 366.195584][T13161] ? __pfx__printk+0x10/0x10 [ 366.195622][T13161] ? __might_fault+0xb0/0x130 [ 366.195669][T13161] ? __might_fault+0xb0/0x130 [ 366.195729][T13161] should_fail_ex+0x414/0x560 [ 366.195790][T13161] _copy_from_iter+0x589/0x1790 [ 366.195863][T13161] ? rcu_is_watching+0x15/0xb0 [ 366.195916][T13161] ? __pfx__copy_from_iter+0x10/0x10 [ 366.195958][T13161] ? __build_skb_around+0x257/0x3e0 [ 366.196005][T13161] ? netlink_sendmsg+0x642/0xb30 [ 366.196025][T13161] ? skb_put+0x11b/0x210 [ 366.196073][T13161] netlink_sendmsg+0x6b2/0xb30 [ 366.196147][T13161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.196185][T13161] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 366.196209][T13161] ? aa_sock_msg_perm+0xf1/0x1d0 [ 366.196246][T13161] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 366.196270][T13161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.196304][T13161] __sock_sendmsg+0x219/0x270 [ 366.196359][T13161] ____sys_sendmsg+0x505/0x830 [ 366.196436][T13161] ? __pfx_____sys_sendmsg+0x10/0x10 [ 366.196514][T13161] ? import_iovec+0x74/0xa0 [ 366.196566][T13161] ___sys_sendmsg+0x21f/0x2a0 [ 366.196612][T13161] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.196763][T13161] ? __fget_files+0x2a/0x420 [ 366.196852][T13161] ? __fget_files+0x2a/0x420 [ 366.196872][T13161] ? __fget_files+0x3a0/0x420 [ 366.196947][T13161] __x64_sys_sendmsg+0x19b/0x260 [ 366.196994][T13161] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 366.197073][T13161] ? __pfx_ksys_write+0x10/0x10 [ 366.197096][T13161] ? rcu_is_watching+0x15/0xb0 [ 366.197147][T13161] ? do_syscall_64+0xbe/0x3b0 [ 366.197193][T13161] do_syscall_64+0xfa/0x3b0 [ 366.197215][T13161] ? lockdep_hardirqs_on+0x9c/0x150 [ 366.197240][T13161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.197262][T13161] ? clear_bhb_loop+0x60/0xb0 [ 366.197303][T13161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.197329][T13161] RIP: 0033:0x7fa924b8eba9 [ 366.197354][T13161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.197372][T13161] RSP: 002b:00007fa925af3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.197393][T13161] RAX: ffffffffffffffda RBX: 00007fa924dd5fa0 RCX: 00007fa924b8eba9 [ 366.197407][T13161] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 366.197419][T13161] RBP: 00007fa925af3090 R08: 0000000000000000 R09: 0000000000000000 [ 366.197432][T13161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.197443][T13161] R13: 00007fa924dd6038 R14: 00007fa924dd5fa0 R15: 00007ffe2b7f2c98 [ 366.197537][T13161] [ 366.587425][T13165] netlink: del zone limit has 4 unknown bytes [ 366.651470][T13165] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2397'. [ 366.731821][T13166] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2397'. [ 367.074482][T13169] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2398'. [ 368.053954][T13199] netlink: 'syz.2.2408': attribute type 12 has an invalid length. [ 369.142403][T13232] openvswitch: netlink: Missing key (keys=40, expected=100) [ 369.420672][T13240] erspan0 speed is unknown, defaulting to 1000 [ 372.699988][T13266] __nla_validate_parse: 6 callbacks suppressed [ 372.700023][T13266] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2427'. [ 373.354350][T13284] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2432'. [ 373.695620][T13297] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2437'. [ 373.897185][T13304] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2438'. [ 373.953766][T13304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 374.113958][T13310] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2440'. [ 374.453225][T13320] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2444'. [ 374.464361][T13320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2444'. [ 374.559560][T13326] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2444'. [ 374.632167][T13330] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 375.080597][T13343] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2450'. [ 375.499086][T13350] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2452'. [ 375.768513][T13354] FAULT_INJECTION: forcing a failure. [ 375.768513][T13354] name failslab, interval 1, probability 0, space 0, times 0 [ 375.818227][T13354] CPU: 1 UID: 0 PID: 13354 Comm: syz.1.2454 Not tainted syzkaller #0 PREEMPT(full) [ 375.818254][T13354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 375.818267][T13354] Call Trace: [ 375.818274][T13354] [ 375.818283][T13354] dump_stack_lvl+0x189/0x250 [ 375.818311][T13354] ? __pfx____ratelimit+0x10/0x10 [ 375.818332][T13354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.818354][T13354] ? __pfx__printk+0x10/0x10 [ 375.818384][T13354] ? __pfx___might_resched+0x10/0x10 [ 375.818403][T13354] ? fs_reclaim_acquire+0x7d/0x100 [ 375.818426][T13354] should_fail_ex+0x414/0x560 [ 375.818460][T13354] should_failslab+0xa8/0x100 [ 375.818490][T13354] __kmalloc_noprof+0xcb/0x4f0 [ 375.818515][T13354] ? tomoyo_encode+0x28b/0x550 [ 375.818540][T13354] tomoyo_encode+0x28b/0x550 [ 375.818567][T13354] tomoyo_mount_permission+0x44d/0x970 [ 375.818591][T13354] ? tomoyo_mount_permission+0x27a/0x970 [ 375.818611][T13354] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 375.818667][T13354] ? perf_trace_preemptirq_template+0x280/0x340 [ 375.818717][T13354] security_sb_mount+0xec/0x350 [ 375.818741][T13354] path_mount+0xbc/0xfe0 [ 375.818767][T13354] ? user_path_at+0x44/0x60 [ 375.818787][T13354] ? kmem_cache_free+0x18f/0x400 [ 375.818822][T13354] __se_sys_mount+0x317/0x410 [ 375.818861][T13354] ? __pfx___se_sys_mount+0x10/0x10 [ 375.818900][T13354] ? do_syscall_64+0xbe/0x3b0 [ 375.818920][T13354] ? __x64_sys_mount+0x20/0xc0 [ 375.818951][T13354] do_syscall_64+0xfa/0x3b0 [ 375.818973][T13354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.818992][T13354] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 375.819011][T13354] ? clear_bhb_loop+0x60/0xb0 [ 375.819035][T13354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.819054][T13354] RIP: 0033:0x7f830458eba9 [ 375.819071][T13354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.819089][T13354] RSP: 002b:00007f8305371038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 375.819111][T13354] RAX: ffffffffffffffda RBX: 00007f83047d5fa0 RCX: 00007f830458eba9 [ 375.819125][T13354] RDX: 0000200000011c40 RSI: 0000200000011c00 RDI: 0000000000000000 [ 375.819139][T13354] RBP: 00007f8305371090 R08: 0000200000000100 R09: 0000000000000000 [ 375.819151][T13354] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000002 [ 375.819162][T13354] R13: 00007f83047d6038 R14: 00007f83047d5fa0 R15: 00007ffc22d31158 [ 375.819193][T13354] [ 376.888121][T13382] netlink: 'syz.5.2462': attribute type 10 has an invalid length. [ 377.923790][T13372] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 378.061159][T13393] netlink: 'syz.5.2468': attribute type 10 has an invalid length. [ 378.210490][T13393] wlan1: mtu less than device minimum [ 378.245683][T13393] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 378.274650][T13402] netlink: 'syz.3.2470': attribute type 12 has an invalid length. [ 378.313256][T13402] __nla_validate_parse: 3 callbacks suppressed [ 378.313277][T13402] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2470'. [ 378.552139][T13416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2475'. [ 378.576455][T13414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2474'. [ 378.610772][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.617582][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.687862][T13419] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2476'. [ 378.823935][T13421] can: request_module (can-proto-4) failed. [ 378.972440][T13424] syzkaller0: entered promiscuous mode [ 378.985478][T13424] syzkaller0: entered allmulticast mode [ 379.047816][T13427] netlink: 'syz.2.2479': attribute type 10 has an invalid length. [ 379.055917][T13427] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2479'. [ 379.091159][T13427] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 379.175828][T13440] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2483'. [ 379.199129][T13439] netlink: 'syz.5.2484': attribute type 12 has an invalid length. [ 379.207497][T13439] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2484'. [ 379.552600][T13453] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2488'. [ 379.662571][T13458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2490'. [ 379.870457][T13456] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 379.908742][T13459] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 380.032494][T13468] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2493'. [ 380.056625][T13468] netlink: 'syz.2.2493': attribute type 21 has an invalid length. [ 382.199985][T13554] FAULT_INJECTION: forcing a failure. [ 382.199985][T13554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.226487][T13554] CPU: 0 UID: 0 PID: 13554 Comm: syz.0.2525 Not tainted syzkaller #0 PREEMPT(full) [ 382.226522][T13554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 382.226535][T13554] Call Trace: [ 382.226542][T13554] [ 382.226550][T13554] dump_stack_lvl+0x189/0x250 [ 382.226578][T13554] ? __pfx____ratelimit+0x10/0x10 [ 382.226599][T13554] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.226622][T13554] ? __pfx__printk+0x10/0x10 [ 382.226646][T13554] ? __might_fault+0xb0/0x130 [ 382.226682][T13554] should_fail_ex+0x414/0x560 [ 382.226714][T13554] _copy_from_user+0x2d/0xb0 [ 382.226739][T13554] __sys_bpf+0x1ed/0x870 [ 382.226765][T13554] ? __pfx___sys_bpf+0x10/0x10 [ 382.226809][T13554] ? rcu_is_watching+0x15/0xb0 [ 382.226831][T13554] __x64_sys_bpf+0x7c/0x90 [ 382.226853][T13554] do_syscall_64+0xfa/0x3b0 [ 382.226871][T13554] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.226890][T13554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.226908][T13554] ? clear_bhb_loop+0x60/0xb0 [ 382.226931][T13554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.226948][T13554] RIP: 0033:0x7fe7aa58eba9 [ 382.226964][T13554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.226981][T13554] RSP: 002b:00007fe7ab4b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 382.227005][T13554] RAX: ffffffffffffffda RBX: 00007fe7aa7d5fa0 RCX: 00007fe7aa58eba9 [ 382.227020][T13554] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000010 [ 382.227031][T13554] RBP: 00007fe7ab4b0090 R08: 0000000000000000 R09: 0000000000000000 [ 382.227042][T13554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.227052][T13554] R13: 00007fe7aa7d6038 R14: 00007fe7aa7d5fa0 R15: 00007fffd82f1248 [ 382.227081][T13554] [ 382.670530][T13569] netlink: 'syz.2.2531': attribute type 12 has an invalid length. [ 383.097327][T13589] FAULT_INJECTION: forcing a failure. [ 383.097327][T13589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.151594][T13589] CPU: 1 UID: 0 PID: 13589 Comm: syz.1.2536 Not tainted syzkaller #0 PREEMPT(full) [ 383.151620][T13589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 383.151632][T13589] Call Trace: [ 383.151640][T13589] [ 383.151648][T13589] dump_stack_lvl+0x189/0x250 [ 383.151676][T13589] ? __pfx____ratelimit+0x10/0x10 [ 383.151695][T13589] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.151717][T13589] ? __pfx__printk+0x10/0x10 [ 383.151744][T13589] ? __might_fault+0xb0/0x130 [ 383.151778][T13589] should_fail_ex+0x414/0x560 [ 383.151811][T13589] _copy_from_user+0x2d/0xb0 [ 383.151837][T13589] __sys_bpf+0x1ed/0x870 [ 383.151864][T13589] ? __pfx___sys_bpf+0x10/0x10 [ 383.151904][T13589] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 383.151931][T13589] ? __pfx_ksys_write+0x10/0x10 [ 383.151954][T13589] ? rcu_is_watching+0x15/0xb0 [ 383.151979][T13589] __x64_sys_bpf+0x7c/0x90 [ 383.152001][T13589] do_syscall_64+0xfa/0x3b0 [ 383.152020][T13589] ? lockdep_hardirqs_on+0x9c/0x150 [ 383.152038][T13589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.152056][T13589] ? clear_bhb_loop+0x60/0xb0 [ 383.152078][T13589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.152095][T13589] RIP: 0033:0x7f830458eba9 [ 383.152110][T13589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.152126][T13589] RSP: 002b:00007f8305371038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 383.152146][T13589] RAX: ffffffffffffffda RBX: 00007f83047d5fa0 RCX: 00007f830458eba9 [ 383.152159][T13589] RDX: 0000000000000020 RSI: 0000200000000100 RDI: 0000000000000008 [ 383.152170][T13589] RBP: 00007f8305371090 R08: 0000000000000000 R09: 0000000000000000 [ 383.152181][T13589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.152192][T13589] R13: 00007f83047d6038 R14: 00007f83047d5fa0 R15: 00007ffc22d31158 [ 383.152222][T13589] [ 383.461103][T13592] __nla_validate_parse: 12 callbacks suppressed [ 383.461122][T13592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2537'. [ 383.601485][T13598] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2540'. [ 383.740314][T13609] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2543'. [ 383.754893][T13609] netlink: 240 bytes leftover after parsing attributes in process `syz.5.2543'. [ 383.862229][T13614] netlink: 'syz.3.2547': attribute type 12 has an invalid length. [ 383.903728][T13614] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2547'. [ 384.098142][T13624] netlink: 'syz.1.2551': attribute type 2 has an invalid length. [ 384.111993][T13624] netlink: 'syz.1.2551': attribute type 3 has an invalid length. [ 384.126856][T13624] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2551'. [ 384.292874][T13635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2553'. [ 384.388886][T13638] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2555'. [ 384.674661][T13647] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2559'. [ 384.692816][T13647] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2559'. [ 385.537498][T13668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.848744][T13686] netlink: 'syz.3.2572': attribute type 11 has an invalid length. [ 385.858940][T13687] netlink: 'syz.0.2573': attribute type 12 has an invalid length. [ 387.218098][T13728] netlink: 'syz.2.2586': attribute type 11 has an invalid length. [ 388.237366][T13763] netlink: 'syz.5.2600': attribute type 11 has an invalid length. [ 388.479062][T13769] __nla_validate_parse: 13 callbacks suppressed [ 388.479082][T13769] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2602'. [ 388.494883][T13769] netlink: 240 bytes leftover after parsing attributes in process `syz.5.2602'. [ 388.748975][T13779] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2606'. [ 388.839838][T13778] FAULT_INJECTION: forcing a failure. [ 388.839838][T13778] name failslab, interval 1, probability 0, space 0, times 0 [ 388.865395][T13778] CPU: 0 UID: 0 PID: 13778 Comm: syz.3.2605 Not tainted syzkaller #0 PREEMPT(full) [ 388.865420][T13778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 388.865430][T13778] Call Trace: [ 388.865437][T13778] [ 388.865445][T13778] dump_stack_lvl+0x189/0x250 [ 388.865469][T13778] ? __pfx____ratelimit+0x10/0x10 [ 388.865489][T13778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.865510][T13778] ? __pfx__printk+0x10/0x10 [ 388.865539][T13778] ? __pfx___might_resched+0x10/0x10 [ 388.865560][T13778] should_fail_ex+0x414/0x560 [ 388.865602][T13778] ? bpf_test_run_xdp_live+0x1b5/0x1b10 [ 388.865619][T13778] should_failslab+0xa8/0x100 [ 388.865646][T13778] __kvmalloc_node_noprof+0x161/0x5f0 [ 388.865670][T13778] ? bpf_test_run_xdp_live+0x1b5/0x1b10 [ 388.865693][T13778] bpf_test_run_xdp_live+0x1b5/0x1b10 [ 388.865716][T13778] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 388.865741][T13778] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 388.865771][T13778] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 388.865787][T13778] ? 0xffffffffa02057c0 [ 388.865804][T13778] ? 0xffffffffa02057c0 [ 388.865867][T13778] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 388.865894][T13778] ? _copy_from_user+0x94/0xb0 [ 388.865917][T13778] ? bpf_test_init+0x133/0x170 [ 388.865931][T13778] ? xdp_convert_md_to_buff+0x5b/0x330 [ 388.865952][T13778] bpf_prog_test_run_xdp+0x713/0x1000 [ 388.865986][T13778] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 388.866009][T13778] ? __fget_files+0x2a/0x420 [ 388.866030][T13778] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 388.866049][T13778] bpf_prog_test_run+0x2c7/0x340 [ 388.866077][T13778] __sys_bpf+0x581/0x870 [ 388.866101][T13778] ? __pfx___sys_bpf+0x10/0x10 [ 388.866138][T13778] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 388.866174][T13778] __x64_sys_bpf+0x7c/0x90 [ 388.866195][T13778] do_syscall_64+0xfa/0x3b0 [ 388.866214][T13778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.866230][T13778] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 388.866246][T13778] ? clear_bhb_loop+0x60/0xb0 [ 388.866266][T13778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.866282][T13778] RIP: 0033:0x7fa924b8eba9 [ 388.866296][T13778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.866311][T13778] RSP: 002b:00007fa925af3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 388.866328][T13778] RAX: ffffffffffffffda RBX: 00007fa924dd5fa0 RCX: 00007fa924b8eba9 [ 388.866340][T13778] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 388.866351][T13778] RBP: 00007fa925af3090 R08: 0000000000000000 R09: 0000000000000000 [ 388.866362][T13778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.866371][T13778] R13: 00007fa924dd6038 R14: 00007fa924dd5fa0 R15: 00007ffe2b7f2c98 [ 388.866400][T13778] [ 389.505822][T13796] netlink: 'syz.3.2612': attribute type 11 has an invalid length. [ 389.567777][T13798] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2613'. [ 389.578131][T13798] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2613'. [ 389.595605][T13798] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2613'. [ 389.765495][T13807] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2617'. [ 389.786054][T13807] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2617'. [ 389.854415][T13811] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2618'. [ 389.875270][T13805] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 389.883287][T13805] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 390.023832][T13816] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2620'. [ 390.443303][T13834] netlink: 'syz.5.2627': attribute type 12 has an invalid length. [ 391.124435][T13854] netlink: 'syz.3.2635': attribute type 10 has an invalid length. [ 391.501800][T13871] netlink: 'syz.2.2639': attribute type 21 has an invalid length. [ 392.922698][T13907] netlink: 'syz.3.2650': attribute type 12 has an invalid length. [ 393.020962][T13912] FAULT_INJECTION: forcing a failure. [ 393.020962][T13912] name failslab, interval 1, probability 0, space 0, times 0 [ 393.035993][T13912] CPU: 0 UID: 0 PID: 13912 Comm: syz.0.2653 Not tainted syzkaller #0 PREEMPT(full) [ 393.036021][T13912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 393.036034][T13912] Call Trace: [ 393.036042][T13912] [ 393.036051][T13912] dump_stack_lvl+0x189/0x250 [ 393.036079][T13912] ? __pfx____ratelimit+0x10/0x10 [ 393.036100][T13912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.036124][T13912] ? __pfx__printk+0x10/0x10 [ 393.036159][T13912] ? __pfx___might_resched+0x10/0x10 [ 393.036195][T13912] should_fail_ex+0x414/0x560 [ 393.036231][T13912] should_failslab+0xa8/0x100 [ 393.036263][T13912] __kmalloc_cache_noprof+0x70/0x3d0 [ 393.036290][T13912] ? __request_module+0x2b5/0x5e0 [ 393.036325][T13912] __request_module+0x2b5/0x5e0 [ 393.036362][T13912] ? __pfx___request_module+0x10/0x10 [ 393.036416][T13912] ? ctnetlink_new_conntrack+0x6d3/0x2070 [ 393.036445][T13912] ctnetlink_new_conntrack+0x1903/0x2070 [ 393.036474][T13912] ? ctnetlink_new_conntrack+0x6d3/0x2070 [ 393.036510][T13912] ? __pfx_ctnetlink_new_conntrack+0x10/0x10 [ 393.036533][T13912] ? trace_contention_end+0x39/0x120 [ 393.036556][T13912] ? __mutex_lock+0x335/0x1350 [ 393.036578][T13912] ? perf_trace_lock+0xec/0x3b0 [ 393.036602][T13912] ? perf_trace_lock+0xec/0x3b0 [ 393.036624][T13912] ? nfnetlink_rcv_msg+0x9dc/0x1130 [ 393.036689][T13912] nfnetlink_rcv_msg+0xb4d/0x1130 [ 393.036719][T13912] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 393.036773][T13912] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 393.036799][T13912] ? kasan_save_free_info+0x46/0x50 [ 393.036858][T13912] ? perf_trace_preemptirq_template+0xa3/0x340 [ 393.036886][T13912] ? kasan_quarantine_put+0x3d/0x220 [ 393.036934][T13912] netlink_rcv_skb+0x208/0x470 [ 393.036956][T13912] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 393.036988][T13912] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 393.037024][T13912] ? bpf_lsm_capable+0x9/0x20 [ 393.037049][T13912] ? security_capable+0x7e/0x2e0 [ 393.037087][T13912] nfnetlink_rcv+0x26a/0x2520 [ 393.037121][T13912] ? __dev_queue_xmit+0x1d79/0x3b50 [ 393.037169][T13912] ? __dev_queue_xmit+0x27b/0x3b50 [ 393.037211][T13912] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 393.037240][T13912] ? __pfx___dev_queue_xmit+0x10/0x10 [ 393.037284][T13912] ? ref_tracker_free+0x63a/0x7d0 [ 393.037305][T13912] ? __asan_memcpy+0x40/0x70 [ 393.037326][T13912] ? __pfx_ref_tracker_free+0x10/0x10 [ 393.037343][T13912] ? __skb_clone+0x63/0x7a0 [ 393.037372][T13912] ? perf_trace_lock+0xec/0x3b0 [ 393.037389][T13912] ? __skb_clone+0x483/0x7a0 [ 393.037418][T13912] ? __pfx_perf_trace_lock+0x10/0x10 [ 393.037438][T13912] ? skb_clone+0x246/0x3a0 [ 393.037468][T13912] ? __netlink_deliver_tap+0x807/0x850 [ 393.037488][T13912] ? netlink_deliver_tap+0x2e/0x1b0 [ 393.037518][T13912] ? netlink_deliver_tap+0x2e/0x1b0 [ 393.037550][T13912] netlink_unicast+0x82f/0x9e0 [ 393.037593][T13912] ? __pfx_netlink_unicast+0x10/0x10 [ 393.037625][T13912] ? netlink_sendmsg+0x642/0xb30 [ 393.037644][T13912] ? skb_put+0x11b/0x210 [ 393.037671][T13912] netlink_sendmsg+0x805/0xb30 [ 393.037705][T13912] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.037732][T13912] ? aa_sock_msg_perm+0xf1/0x1d0 [ 393.037754][T13912] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 393.037775][T13912] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.037798][T13912] __sock_sendmsg+0x219/0x270 [ 393.037832][T13912] ____sys_sendmsg+0x505/0x830 [ 393.037865][T13912] ? __pfx_____sys_sendmsg+0x10/0x10 [ 393.037902][T13912] ? import_iovec+0x74/0xa0 [ 393.037933][T13912] ___sys_sendmsg+0x21f/0x2a0 [ 393.037961][T13912] ? __pfx____sys_sendmsg+0x10/0x10 [ 393.038013][T13912] ? __fget_files+0x2a/0x420 [ 393.038048][T13912] ? __fget_files+0x2a/0x420 [ 393.038063][T13912] ? __fget_files+0x3a0/0x420 [ 393.038095][T13912] __x64_sys_sendmsg+0x19b/0x260 [ 393.038123][T13912] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 393.038161][T13912] ? __pfx_ksys_write+0x10/0x10 [ 393.038189][T13912] ? rcu_is_watching+0x15/0xb0 [ 393.038216][T13912] ? do_syscall_64+0xbe/0x3b0 [ 393.038243][T13912] do_syscall_64+0xfa/0x3b0 [ 393.038266][T13912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.038284][T13912] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 393.038303][T13912] ? clear_bhb_loop+0x60/0xb0 [ 393.038327][T13912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.038345][T13912] RIP: 0033:0x7fe7aa58eba9 [ 393.038364][T13912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.038381][T13912] RSP: 002b:00007fe7ab4b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.038401][T13912] RAX: ffffffffffffffda RBX: 00007fe7aa7d5fa0 RCX: 00007fe7aa58eba9 [ 393.038416][T13912] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 393.038428][T13912] RBP: 00007fe7ab4b0090 R08: 0000000000000000 R09: 0000000000000000 [ 393.038441][T13912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.038452][T13912] R13: 00007fe7aa7d6038 R14: 00007fe7aa7d5fa0 R15: 00007fffd82f1248 [ 393.038488][T13912] [ 393.673989][T13910] netlink: 'syz.1.2652': attribute type 10 has an invalid length. [ 393.682184][T13910] __nla_validate_parse: 12 callbacks suppressed [ 393.682199][T13910] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2652'. [ 393.699062][T13910] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 394.847977][T13938] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2662'. [ 394.895287][T13938] netlink: 240 bytes leftover after parsing attributes in process `syz.5.2662'. [ 395.129312][T13940] FAULT_INJECTION: forcing a failure. [ 395.129312][T13940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.166261][T13940] CPU: 0 UID: 0 PID: 13940 Comm: syz.0.2663 Not tainted syzkaller #0 PREEMPT(full) [ 395.166295][T13940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 395.166308][T13940] Call Trace: [ 395.166315][T13940] [ 395.166324][T13940] dump_stack_lvl+0x189/0x250 [ 395.166352][T13940] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.166374][T13940] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.166405][T13940] ? dump_stack+0x9/0x20 [ 395.166433][T13940] should_fail_ex+0x414/0x560 [ 395.166468][T13940] _copy_to_user+0x31/0xb0 [ 395.166495][T13940] bpf_test_finish+0x1ab/0x700 [ 395.166523][T13940] ? bpf_test_timer_leave+0x10b/0x150 [ 395.166544][T13940] ? __pfx_bpf_test_finish+0x10/0x10 [ 395.166569][T13940] ? bpf_test_timer_leave+0x10b/0x150 [ 395.166596][T13940] bpf_prog_test_run_sk_lookup+0x922/0xb60 [ 395.166636][T13940] ? __pfx_bpf_prog_test_run_sk_lookup+0x10/0x10 [ 395.166662][T13940] ? __fget_files+0x3a0/0x420 [ 395.166679][T13940] ? __fget_files+0x2a/0x420 [ 395.166701][T13940] ? __pfx_bpf_prog_test_run_sk_lookup+0x10/0x10 [ 395.166725][T13940] bpf_prog_test_run+0x2c7/0x340 [ 395.166756][T13940] __sys_bpf+0x581/0x870 [ 395.166783][T13940] ? __pfx___sys_bpf+0x10/0x10 [ 395.166805][T13940] ? sched_clock_cpu+0x74/0x430 [ 395.166854][T13940] __x64_sys_bpf+0x7c/0x90 [ 395.166878][T13940] do_syscall_64+0xfa/0x3b0 [ 395.166901][T13940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.166918][T13940] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 395.166938][T13940] ? clear_bhb_loop+0x60/0xb0 [ 395.166962][T13940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.166980][T13940] RIP: 0033:0x7fe7aa58eba9 [ 395.166998][T13940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.167015][T13940] RSP: 002b:00007fe7ab4b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 395.167035][T13940] RAX: ffffffffffffffda RBX: 00007fe7aa7d5fa0 RCX: 00007fe7aa58eba9 [ 395.167050][T13940] RDX: 0000000000000048 RSI: 0000200000000440 RDI: 000000000000000a [ 395.167063][T13940] RBP: 00007fe7ab4b0090 R08: 0000000000000000 R09: 0000000000000000 [ 395.167075][T13940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.167087][T13940] R13: 00007fe7aa7d6038 R14: 00007fe7aa7d5fa0 R15: 00007fffd82f1248 [ 395.167118][T13940] [ 395.655005][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 395.671004][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 395.683045][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 395.699766][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 395.712089][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 395.743003][T13960] netlink: 136 bytes leftover after parsing attributes in process `syz.5.2669'. [ 395.772042][T13961] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2669'. [ 395.807909][T13960] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2669'. [ 395.907552][T12579] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.982393][T13950] netlink: 'syz.0.2667': attribute type 12 has an invalid length. [ 395.994988][T13950] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2667'. [ 396.045314][T13960] batadv_slave_1: entered promiscuous mode [ 396.103418][T12579] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.153101][T13966] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2671'. [ 396.194486][T13951] erspan0 speed is unknown, defaulting to 1000 [ 396.273564][T12579] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.530253][T12579] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.799493][ T5869] Bluetooth: hci1: command tx timeout [ 398.377670][T13990] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 398.410330][T13993] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2678'. [ 398.478256][T13993] netlink: zone id is out of range [ 398.483555][T13993] netlink: zone id is out of range [ 398.492481][T13993] netlink: zone id is out of range [ 398.498561][T13993] netlink: zone id is out of range [ 398.503997][T13993] netlink: zone id is out of range [ 398.509807][T13993] netlink: zone id is out of range [ 398.517854][T13993] netlink: zone id is out of range [ 398.523312][T13993] netlink: zone id is out of range [ 399.875803][ T5869] Bluetooth: hci1: command tx timeout [ 400.423405][T12579] .` (unregistering): (slave c1ÿ): Releasing backup interface [ 400.433386][T12579] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.444599][T12579] .` (unregistering): (slave team0): Releasing backup interface [ 400.461687][T12579] .` (unregistering): Released all slaves [ 400.474980][T13996] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2679'. [ 400.484471][T13996] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2679'. [ 400.601134][T14030] netlink: 'syz.0.2683': attribute type 12 has an invalid length. [ 400.631386][T14030] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2683'. [ 400.739122][T14011] erspan0 speed is unknown, defaulting to 1000 [ 401.955735][ T5869] Bluetooth: hci1: command tx timeout [ 402.450947][T14062] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2689'. [ 402.703503][T13951] chnl_net:caif_netlink_parms(): no params data found [ 402.741796][T12579] hsr_slave_0: left promiscuous mode [ 402.751928][T12579] hsr_slave_1: left promiscuous mode [ 402.761012][T12579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.773275][T12579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.784797][T12579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.792681][T12579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.809759][T12579] veth1_macvtap: left promiscuous mode [ 402.815648][T12579] veth0_macvtap: left promiscuous mode [ 402.821430][T12579] veth1_vlan: left promiscuous mode [ 402.826959][T12579] veth0_vlan: left promiscuous mode [ 402.849243][T14079] netlink: 'syz.2.2692': attribute type 10 has an invalid length. [ 402.861315][T14079] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2692'. [ 402.988034][T12579] team0 (unregistering): Port device macvlan1 removed [ 403.240414][T12579] team0 (unregistering): Port device team_slave_1 removed [ 403.281572][T12579] team0 (unregistering): Port device team_slave_0 removed [ 403.793656][T14079] net_ratelimit: 76 callbacks suppressed [ 403.793678][T14079] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 404.036686][ T5869] Bluetooth: hci1: command tx timeout [ 404.369822][T14094] netlink: 'syz.2.2695': attribute type 12 has an invalid length. [ 404.379461][T14094] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2695'. [ 404.709158][T13951] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.733084][T13951] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.741902][T13951] bridge_slave_0: entered allmulticast mode [ 404.753464][T13951] bridge_slave_0: entered promiscuous mode [ 404.798901][T13951] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.808405][T13951] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.818257][T13951] bridge_slave_1: entered allmulticast mode [ 404.830126][T13951] bridge_slave_1: entered promiscuous mode [ 404.964060][T13951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.130141][T13951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.217207][T14115] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 405.372121][T14130] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2702'. [ 405.399603][T14130] netlink: 'syz.3.2702': attribute type 13 has an invalid length. [ 405.426585][T14130] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2702'. [ 405.468366][T13951] team0: Port device team_slave_0 added [ 405.511152][T14130] : renamed from syz_tun (while UP) [ 405.587664][T14130] : refused to change device tx_queue_len [ 405.609091][T14130] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 405.664233][T13951] team0: Port device team_slave_1 added [ 405.709596][T14139] netlink: 'syz.0.2704': attribute type 10 has an invalid length. [ 405.728491][T14139] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2704'. [ 405.793632][T13951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.807137][T13951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.841947][T13951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.853351][T14134] erspan0 speed is unknown, defaulting to 1000 [ 405.864464][T13951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.882061][T13951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.952813][T14149] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2705'. [ 405.970220][T13951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.168158][T13951] hsr_slave_0: entered promiscuous mode [ 406.178229][T13951] hsr_slave_1: entered promiscuous mode [ 406.184904][T13951] debugfs: 'hsr0' already exists in 'hsr' [ 406.191077][T13951] Cannot create hsr debugfs directory [ 406.242296][T14160] netlink: 'syz.3.2708': attribute type 12 has an invalid length. [ 406.266597][T14160] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2708'. [ 406.594233][T14167] netlink: 'syz.3.2709': attribute type 10 has an invalid length. [ 406.609381][T14166] netlink: 'syz.3.2709': attribute type 29 has an invalid length. [ 406.875094][T14183] FAULT_INJECTION: forcing a failure. [ 406.875094][T14183] name failslab, interval 1, probability 0, space 0, times 0 [ 406.964412][T14183] CPU: 1 UID: 0 PID: 14183 Comm: syz.0.2712 Not tainted syzkaller #0 PREEMPT(full) [ 406.964441][T14183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 406.964453][T14183] Call Trace: [ 406.964464][T14183] [ 406.964476][T14183] dump_stack_lvl+0x189/0x250 [ 406.964513][T14183] ? __pfx____ratelimit+0x10/0x10 [ 406.964543][T14183] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.964575][T14183] ? __pfx__printk+0x10/0x10 [ 406.964598][T14183] ? trace_call_bpf+0x5ba/0x850 [ 406.964627][T14183] ? trace_call_bpf+0xb7/0x850 [ 406.964698][T14183] should_fail_ex+0x414/0x560 [ 406.964760][T14183] should_failslab+0xa8/0x100 [ 406.964812][T14183] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 406.964848][T14183] ? __alloc_skb+0x112/0x2d0 [ 406.964897][T14183] __alloc_skb+0x112/0x2d0 [ 406.964948][T14183] xfrm_send_policy_notify+0x29d/0x1bb0 [ 406.964994][T14183] ? __lock_acquire+0xab9/0xd20 [ 406.965050][T14183] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 406.965100][T14183] ? km_policy_notify+0x28/0x200 [ 406.965168][T14183] ? km_policy_notify+0x28/0x200 [ 406.965201][T14183] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 406.965235][T14183] km_policy_notify+0x11e/0x200 [ 406.965260][T14183] ? km_policy_notify+0x28/0x200 [ 406.965305][T14183] xfrm_add_policy+0x4c7/0x800 [ 406.965369][T14183] ? __pfx_xfrm_add_policy+0x10/0x10 [ 406.965394][T14183] ? apparmor_capable+0x137/0x1b0 [ 406.965449][T14183] ? __nla_parse+0x40/0x60 [ 406.965498][T14183] xfrm_user_rcv_msg+0x7a3/0xab0 [ 406.965562][T14183] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 406.965761][T14183] ? __pfx___mutex_trylock_common+0x10/0x10 [ 406.965814][T14183] ? rcu_is_watching+0x15/0xb0 [ 406.965842][T14183] ? trace_contention_end+0x39/0x120 [ 406.965871][T14183] ? __mutex_lock+0x335/0x1350 [ 406.965927][T14183] netlink_rcv_skb+0x208/0x470 [ 406.965962][T14183] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 406.966004][T14183] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 406.966100][T14183] ? netlink_deliver_tap+0x2e/0x1b0 [ 406.966126][T14183] ? netlink_deliver_tap+0x2e/0x1b0 [ 406.966166][T14183] xfrm_netlink_rcv+0x79/0x90 [ 406.966203][T14183] netlink_unicast+0x82f/0x9e0 [ 406.966285][T14183] ? __pfx_netlink_unicast+0x10/0x10 [ 406.966334][T14183] ? netlink_sendmsg+0x642/0xb30 [ 406.966353][T14183] ? skb_put+0x11b/0x210 [ 406.966402][T14183] netlink_sendmsg+0x805/0xb30 [ 406.966475][T14183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.966514][T14183] ? perf_trace_run_bpf_submit+0x100/0x170 [ 406.966538][T14183] ? aa_sock_msg_perm+0xf1/0x1d0 [ 406.966574][T14183] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 406.966598][T14183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.966632][T14183] __sock_sendmsg+0x219/0x270 [ 406.966686][T14183] ____sys_sendmsg+0x505/0x830 [ 406.966747][T14183] ? __pfx_____sys_sendmsg+0x10/0x10 [ 406.966832][T14183] ? import_iovec+0x74/0xa0 [ 406.966885][T14183] ___sys_sendmsg+0x21f/0x2a0 [ 406.966932][T14183] ? __pfx____sys_sendmsg+0x10/0x10 [ 406.967066][T14183] ? __fget_files+0x2a/0x420 [ 406.967150][T14183] ? __fget_files+0x2a/0x420 [ 406.967169][T14183] ? __fget_files+0x3a0/0x420 [ 406.967245][T14183] __x64_sys_sendmsg+0x19b/0x260 [ 406.967292][T14183] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 406.967372][T14183] ? __pfx_ksys_write+0x10/0x10 [ 406.967395][T14183] ? rcu_is_watching+0x15/0xb0 [ 406.967446][T14183] ? do_syscall_64+0xbe/0x3b0 [ 406.967493][T14183] do_syscall_64+0xfa/0x3b0 [ 406.967514][T14183] ? lockdep_hardirqs_on+0x9c/0x150 [ 406.967539][T14183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.967562][T14183] ? clear_bhb_loop+0x60/0xb0 [ 406.967603][T14183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.967624][T14183] RIP: 0033:0x7fe7aa58eba9 [ 406.967649][T14183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.967667][T14183] RSP: 002b:00007fe7ab4b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 406.967687][T14183] RAX: ffffffffffffffda RBX: 00007fe7aa7d5fa0 RCX: 00007fe7aa58eba9 [ 406.967702][T14183] RDX: 0000000000000014 RSI: 0000200000000380 RDI: 0000000000000006 [ 406.967715][T14183] RBP: 00007fe7ab4b0090 R08: 0000000000000000 R09: 0000000000000000 [ 406.967727][T14183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.967739][T14183] R13: 00007fe7aa7d6038 R14: 00007fe7aa7d5fa0 R15: 00007fffd82f1248 [ 406.967836][T14183] [ 408.165591][T14198] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2715'. [ 408.592797][T14212] netlink: 'syz.2.2719': attribute type 12 has an invalid length. [ 408.610141][T14212] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2719'. [ 408.833684][T14222] netlink: 'syz.0.2722': attribute type 2 has an invalid length. [ 408.866209][T14222] netlink: 'syz.0.2722': attribute type 1 has an invalid length. [ 408.902403][T14223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2723'. [ 408.915907][T14222] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2722'. [ 408.916029][T14222] nbd: couldn't find device at index 16 [ 408.948898][T13951] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 408.993504][T13951] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 409.294616][T13951] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 409.460868][T13951] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 410.188614][T14263] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2729'. [ 410.633106][T14276] netlink: 'syz.3.2731': attribute type 10 has an invalid length. [ 410.641522][T14276] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2731'. [ 412.211908][T13951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.258327][T14298] netlink: 'syz.0.2734': attribute type 12 has an invalid length. [ 412.286811][T14298] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2734'. [ 412.360053][T13951] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.376943][T12593] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.384134][T12593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.463174][T12593] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.470376][T12593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.967164][T14327] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2739'. [ 413.062335][T14321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2737'. [ 414.253434][T14339] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2741'. [ 414.275534][T14339] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 414.557729][T13951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.589437][T14344] netlink: 'syz.0.2742': attribute type 10 has an invalid length. [ 414.597648][T14344] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2742'. [ 414.783714][T13951] veth0_vlan: entered promiscuous mode [ 414.831096][T13951] veth1_vlan: entered promiscuous mode [ 414.928355][T13951] veth0_macvtap: entered promiscuous mode [ 414.959502][T13951] veth1_macvtap: entered promiscuous mode [ 415.041221][T13951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.070447][T13951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.124648][T12593] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.142737][T12593] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.154667][T14358] netlink: 'syz.5.2745': attribute type 5 has an invalid length. [ 415.170048][T12593] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.184523][T14358] netlink: 4304 bytes leftover after parsing attributes in process `syz.5.2745'. [ 415.208120][T12593] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.960151][T12579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.107448][T12579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.143848][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.154991][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.783512][T14417] netlink: 'syz.0.2756': attribute type 10 has an invalid length. [ 418.791764][T14417] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2756'. [ 418.845413][T14430] netlink: 'syz.3.2758': attribute type 12 has an invalid length. [ 418.864785][T14430] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2758'. [ 418.963292][T14434] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2759'. [ 418.976873][T14434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2759'. [ 420.716427][T14484] netlink: 'syz.1.2771': attribute type 12 has an invalid length. [ 420.732703][T14484] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2771'. [ 421.285335][T14500] netlink: 'syz.0.2778': attribute type 1 has an invalid length. [ 421.308584][T14500] netlink: 'syz.0.2778': attribute type 1 has an invalid length. [ 421.379244][T14500] netlink: 'syz.0.2778': attribute type 2 has an invalid length. [ 421.471159][T14506] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2778'. [ 421.472253][T14500] netlink: 'syz.0.2778': attribute type 1 has an invalid length. [ 421.585307][T14500] netlink: 'syz.0.2778': attribute type 1 has an invalid length. [ 422.200199][T14521] netlink: 'syz.0.2784': attribute type 12 has an invalid length. [ 422.235014][T14521] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2784'. [ 422.349454][T14526] netlink: 'syz.5.2787': attribute type 10 has an invalid length. [ 422.874529][T14540] netlink: 'syz.5.2792': attribute type 10 has an invalid length. [ 422.882713][T14540] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2792'. [ 423.014027][T14549] netlink: 'syz.2.2794': attribute type 10 has an invalid length. [ 423.129898][T14549] team0: Device veth0_vlan is already a lower device of the team interface [ 423.393564][T14555] erspan0 speed is unknown, defaulting to 1000 [ 423.584316][T14573] FAULT_INJECTION: forcing a failure. [ 423.584316][T14573] name failslab, interval 1, probability 0, space 0, times 0 [ 423.654966][T14573] CPU: 0 UID: 0 PID: 14573 Comm: syz.2.2801 Not tainted syzkaller #0 PREEMPT(full) [ 423.654994][T14573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 423.655006][T14573] Call Trace: [ 423.655017][T14573] [ 423.655028][T14573] dump_stack_lvl+0x189/0x250 [ 423.655063][T14573] ? __pfx____ratelimit+0x10/0x10 [ 423.655092][T14573] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.655126][T14573] ? __pfx__printk+0x10/0x10 [ 423.655184][T14573] ? __pfx___might_resched+0x10/0x10 [ 423.655230][T14573] should_fail_ex+0x414/0x560 [ 423.655291][T14573] should_failslab+0xa8/0x100 [ 423.655334][T14573] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 423.655369][T14573] ? __alloc_skb+0x112/0x2d0 [ 423.655418][T14573] __alloc_skb+0x112/0x2d0 [ 423.655475][T14573] netlink_sendmsg+0x5c6/0xb30 [ 423.655549][T14573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.655586][T14573] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 423.655609][T14573] ? aa_sock_msg_perm+0xf1/0x1d0 [ 423.655694][T14573] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 423.655718][T14573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.655752][T14573] __sock_sendmsg+0x219/0x270 [ 423.655806][T14573] ____sys_sendmsg+0x505/0x830 [ 423.655868][T14573] ? __pfx_____sys_sendmsg+0x10/0x10 [ 423.655944][T14573] ? import_iovec+0x74/0xa0 [ 423.655997][T14573] ___sys_sendmsg+0x21f/0x2a0 [ 423.656043][T14573] ? __pfx____sys_sendmsg+0x10/0x10 [ 423.656162][T14573] ? __fget_files+0x2a/0x420 [ 423.656239][T14573] ? __fget_files+0x2a/0x420 [ 423.656257][T14573] ? __fget_files+0x3a0/0x420 [ 423.656330][T14573] __x64_sys_sendmsg+0x19b/0x260 [ 423.656374][T14573] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 423.656455][T14573] ? __pfx_ksys_write+0x10/0x10 [ 423.656477][T14573] ? rcu_is_watching+0x15/0xb0 [ 423.656523][T14573] ? do_syscall_64+0xbe/0x3b0 [ 423.656567][T14573] do_syscall_64+0xfa/0x3b0 [ 423.656588][T14573] ? lockdep_hardirqs_on+0x9c/0x150 [ 423.656612][T14573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.656633][T14573] ? clear_bhb_loop+0x60/0xb0 [ 423.656673][T14573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.656693][T14573] RIP: 0033:0x7f4dd358eba9 [ 423.656717][T14573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.656734][T14573] RSP: 002b:00007f4dd44db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.656755][T14573] RAX: ffffffffffffffda RBX: 00007f4dd37d5fa0 RCX: 00007f4dd358eba9 [ 423.656770][T14573] RDX: 0000000000044000 RSI: 0000200000000600 RDI: 0000000000000005 [ 423.656783][T14573] RBP: 00007f4dd44db090 R08: 0000000000000000 R09: 0000000000000000 [ 423.656794][T14573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.656805][T14573] R13: 00007f4dd37d6038 R14: 00007f4dd37d5fa0 R15: 00007ffda9b5be18 [ 423.656893][T14573] [ 425.141755][T14566] erspan0 speed is unknown, defaulting to 1000 [ 425.699740][T14608] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 426.286805][T14620] netlink: 'syz.2.2813': attribute type 62 has an invalid length. [ 426.852864][T14639] netlink: 'syz.1.2818': attribute type 12 has an invalid length. [ 426.878452][T14639] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2818'. [ 427.027581][T14635] syzkaller0: entered promiscuous mode [ 427.033170][T14635] syzkaller0: entered allmulticast mode [ 428.947998][T14668] erspan0 speed is unknown, defaulting to 1000 [ 428.957945][T14672] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 430.401359][T14704] netlink: 'syz.0.2837': attribute type 10 has an invalid length. [ 430.425456][T14704] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2837'. [ 430.882617][T14722] netlink: 'syz.3.2841': attribute type 11 has an invalid length. [ 430.898803][T14722] netlink: 4288 bytes leftover after parsing attributes in process `syz.3.2841'. [ 431.193526][T14732] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.2845'. [ 431.554357][T14742] C: renamed from team_slave_0 [ 431.671400][T14742] netlink: 'syz.5.2849': attribute type 3 has an invalid length. [ 431.730086][T14742] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2849'. [ 432.594284][T14761] netlink: 'syz.5.2853': attribute type 10 has an invalid length. [ 432.605713][T14761] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2853'. [ 432.646380][T14764] netlink: 'syz.2.2854': attribute type 10 has an invalid length. [ 432.654427][T14764] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2854'. [ 432.682194][T14764] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 432.930924][T14786] FAULT_INJECTION: forcing a failure. [ 432.930924][T14786] name failslab, interval 1, probability 0, space 0, times 0 [ 432.959548][T14786] CPU: 1 UID: 0 PID: 14786 Comm: syz.3.2861 Not tainted syzkaller #0 PREEMPT(full) [ 432.959577][T14786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 432.959589][T14786] Call Trace: [ 432.959597][T14786] [ 432.959606][T14786] dump_stack_lvl+0x189/0x250 [ 432.959634][T14786] ? __pfx____ratelimit+0x10/0x10 [ 432.959655][T14786] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.959678][T14786] ? __pfx__printk+0x10/0x10 [ 432.959711][T14786] ? __pfx___might_resched+0x10/0x10 [ 432.959728][T14786] ? fs_reclaim_acquire+0x7d/0x100 [ 432.959751][T14786] should_fail_ex+0x414/0x560 [ 432.959784][T14786] ? nf_hook_entries_grow+0x27c/0x710 [ 432.959803][T14786] should_failslab+0xa8/0x100 [ 432.959833][T14786] __kvmalloc_node_noprof+0x161/0x5f0 [ 432.959861][T14786] ? nf_hook_entries_grow+0x27c/0x710 [ 432.959888][T14786] nf_hook_entries_grow+0x27c/0x710 [ 432.959926][T14786] __nf_register_net_hook+0x2c9/0x930 [ 432.959960][T14786] nf_register_net_hook+0xb2/0x190 [ 432.959985][T14786] nf_register_net_hooks+0x44/0x1b0 [ 432.960010][T14786] nf_ct_netns_do_get+0x363/0x5a0 [ 432.960037][T14786] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 432.960068][T14786] ? __raw_spin_lock_init+0x45/0x100 [ 432.960097][T14786] nf_ct_netns_get+0x44/0xb0 [ 432.960118][T14786] nft_connlimit_do_init+0x1de/0x2e0 [ 432.960145][T14786] nft_set_elem_expr_alloc+0x1d8/0x590 [ 432.960178][T14786] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 432.960224][T14786] ? nft_rhash_init+0x2b3/0x3a0 [ 432.960254][T14786] ? __pfx_nft_rhash_init+0x10/0x10 [ 432.960275][T14786] ? __pfx_nft_rhash_key+0x10/0x10 [ 432.960294][T14786] ? __pfx_nft_rhash_obj+0x10/0x10 [ 432.960314][T14786] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 432.960339][T14786] nft_set_expr_alloc+0x4da/0x760 [ 432.960366][T14786] nf_tables_newset+0x1c47/0x2530 [ 432.960406][T14786] ? __pfx_nf_tables_newset+0x10/0x10 [ 432.960455][T14786] ? __nla_parse+0x40/0x60 [ 432.960482][T14786] nfnetlink_rcv+0x112f/0x2520 [ 432.960547][T14786] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 432.960594][T14786] ? ref_tracker_free+0x63a/0x7d0 [ 432.960646][T14786] ? __netlink_deliver_tap+0x807/0x850 [ 432.960668][T14786] ? netlink_deliver_tap+0x2e/0x1b0 [ 432.960709][T14786] netlink_unicast+0x82f/0x9e0 [ 432.960749][T14786] ? __pfx_netlink_unicast+0x10/0x10 [ 432.960780][T14786] ? netlink_sendmsg+0x642/0xb30 [ 432.960799][T14786] ? skb_put+0x11b/0x210 [ 432.960825][T14786] netlink_sendmsg+0x805/0xb30 [ 432.960857][T14786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.960883][T14786] ? aa_sock_msg_perm+0xf1/0x1d0 [ 432.960904][T14786] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 432.960924][T14786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.960947][T14786] __sock_sendmsg+0x219/0x270 [ 432.960980][T14786] ____sys_sendmsg+0x505/0x830 [ 432.961011][T14786] ? __pfx_____sys_sendmsg+0x10/0x10 [ 432.961047][T14786] ? import_iovec+0x74/0xa0 [ 432.961077][T14786] ___sys_sendmsg+0x21f/0x2a0 [ 432.961104][T14786] ? __pfx____sys_sendmsg+0x10/0x10 [ 432.961169][T14786] ? __fget_files+0x2a/0x420 [ 432.961185][T14786] ? __fget_files+0x3a0/0x420 [ 432.961214][T14786] __x64_sys_sendmsg+0x19b/0x260 [ 432.961250][T14786] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 432.961285][T14786] ? __pfx_ksys_write+0x10/0x10 [ 432.961317][T14786] ? do_syscall_64+0xbe/0x3b0 [ 432.961343][T14786] do_syscall_64+0xfa/0x3b0 [ 432.961365][T14786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.961383][T14786] ? asm_sysvec_call_function_single+0x1a/0x20 [ 432.961402][T14786] ? clear_bhb_loop+0x60/0xb0 [ 432.961425][T14786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.961443][T14786] RIP: 0033:0x7fa924b8eba9 [ 432.961461][T14786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.961479][T14786] RSP: 002b:00007fa925af3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.961500][T14786] RAX: ffffffffffffffda RBX: 00007fa924dd5fa0 RCX: 00007fa924b8eba9 [ 432.961516][T14786] RDX: 0000000020050890 RSI: 00002000000000c0 RDI: 0000000000000005 [ 432.961529][T14786] RBP: 00007fa925af3090 R08: 0000000000000000 R09: 0000000000000000 [ 432.961542][T14786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 432.961554][T14786] R13: 00007fa924dd6038 R14: 00007fa924dd5fa0 R15: 00007ffe2b7f2c98 [ 432.961592][T14786] [ 433.471614][T14794] netlink: 'syz.5.2864': attribute type 4 has an invalid length. [ 433.479530][T14794] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2864'. [ 433.499691][T14794] mac80211_hwsim hwsim19 wlan1: entered promiscuous mode [ 433.509062][T14794] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 434.225054][T14823] FAULT_INJECTION: forcing a failure. [ 434.225054][T14823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.280223][T14823] CPU: 0 UID: 0 PID: 14823 Comm: syz.0.2873 Not tainted syzkaller #0 PREEMPT(full) [ 434.280250][T14823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 434.280263][T14823] Call Trace: [ 434.280271][T14823] [ 434.280280][T14823] dump_stack_lvl+0x189/0x250 [ 434.280309][T14823] ? __pfx____ratelimit+0x10/0x10 [ 434.280331][T14823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.280355][T14823] ? __pfx__printk+0x10/0x10 [ 434.280390][T14823] ? __asan_memcpy+0x40/0x70 [ 434.280421][T14823] should_fail_ex+0x414/0x560 [ 434.280457][T14823] _copy_to_user+0x31/0xb0 [ 434.280486][T14823] bpf_verifier_vlog+0x48c/0x900 [ 434.280524][T14823] btf_verifier_log+0x10a/0x180 [ 434.280558][T14823] ? __pfx_btf_verifier_log+0x10/0x10 [ 434.280589][T14823] ? btf_func_proto_log+0x645/0x840 [ 434.280616][T14823] __btf_verifier_log_type+0x3f5/0x630 [ 434.280657][T14823] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 434.280692][T14823] ? sort+0xa4/0xf0 [ 434.280720][T14823] btf_func_proto_check_meta+0xed/0x160 [ 434.280744][T14823] btf_parse_type_sec+0x44a/0x24a0 [ 434.280776][T14823] ? __pfx_btf_check_sec_info+0x10/0x10 [ 434.280803][T14823] ? btf_parse_str_sec+0x212/0x2a0 [ 434.280828][T14823] btf_new_fd+0x40e/0xc90 [ 434.280849][T14823] ? apparmor_capable+0x137/0x1b0 [ 434.280883][T14823] ? __pfx_btf_new_fd+0x10/0x10 [ 434.280906][T14823] ? bpf_token_put+0x143/0x160 [ 434.280933][T14823] ? bpf_btf_load+0x126/0x190 [ 434.280963][T14823] __sys_bpf+0x406/0x870 [ 434.280991][T14823] ? __pfx___sys_bpf+0x10/0x10 [ 434.281032][T14823] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 434.281062][T14823] ? __pfx_ksys_write+0x10/0x10 [ 434.281086][T14823] ? rcu_is_watching+0x15/0xb0 [ 434.281114][T14823] __x64_sys_bpf+0x7c/0x90 [ 434.281139][T14823] do_syscall_64+0xfa/0x3b0 [ 434.281160][T14823] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.281180][T14823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.281200][T14823] ? clear_bhb_loop+0x60/0xb0 [ 434.281224][T14823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.281247][T14823] RIP: 0033:0x7fe7aa58eba9 [ 434.281265][T14823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.281284][T14823] RSP: 002b:00007fe7ab4b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 434.281307][T14823] RAX: ffffffffffffffda RBX: 00007fe7aa7d5fa0 RCX: 00007fe7aa58eba9 [ 434.281322][T14823] RDX: 0000000000000028 RSI: 0000200000000200 RDI: 0000000000000012 [ 434.281336][T14823] RBP: 00007fe7ab4b0090 R08: 0000000000000000 R09: 0000000000000000 [ 434.281350][T14823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 434.281362][T14823] R13: 00007fe7aa7d6038 R14: 00007fe7aa7d5fa0 R15: 00007fffd82f1248 [ 434.281404][T14823] [ 434.581785][T14827] erspan0 speed is unknown, defaulting to 1000 [ 434.813882][T14826] netlink: 'syz.1.2874': attribute type 10 has an invalid length. [ 434.873537][T14826] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2874'. [ 434.914670][T14842] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2878'. [ 434.990710][T14826] batadv0: entered promiscuous mode [ 434.996961][T14826] bridge0: port 3(batadv0) entered blocking state [ 435.003904][T14826] bridge0: port 3(batadv0) entered disabled state [ 435.015067][T14826] batadv0: entered allmulticast mode [ 435.023489][T14826] bridge0: port 3(batadv0) entered blocking state [ 435.030124][T14826] bridge0: port 3(batadv0) entered forwarding state [ 435.068631][ T49] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 435.077980][ T49] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 435.980332][T14879] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 436.431074][T14886] erspan0 speed is unknown, defaulting to 1000 [ 436.711402][T14895] netlink: 'syz.1.2889': attribute type 7 has an invalid length. [ 436.858618][T14894] netlink: 'syz.2.2891': attribute type 10 has an invalid length. [ 436.866695][T14894] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2891'. [ 436.882499][T14894] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 437.216243][T14907] option changes via remount are deprecated (pid=14906 comm=syz.0.2896) [ 437.836884][T14925] netlink: 'syz.2.2900': attribute type 12 has an invalid length. [ 437.923583][T14925] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2900'. [ 438.103186][T14929] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 438.540286][T14939] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 438.547707][T14939] IPv6: NLM_F_CREATE should be set when creating new route [ 438.555273][T14939] IPv6: NLM_F_CREATE should be set when creating new route [ 438.562619][T14939] IPv6: NLM_F_CREATE should be set when creating new route [ 439.577532][T14946] erspan0 speed is unknown, defaulting to 1000 [ 439.892260][T14962] netlink: 'syz.3.2910': attribute type 2 has an invalid length. [ 439.918276][T14962] netlink: 'syz.3.2910': attribute type 8 has an invalid length. [ 439.931825][T14962] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2910'. [ 440.051134][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.059784][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.135305][T14969] netlink: 'syz.3.2911': attribute type 10 has an invalid length. [ 440.176733][T14969] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2911'. [ 440.317510][T14975] netlink: 'syz.5.2913': attribute type 11 has an invalid length. [ 440.338057][T14975] netlink: 3760 bytes leftover after parsing attributes in process `syz.5.2913'. [ 440.886381][T14987] erspan0 speed is unknown, defaulting to 1000 [ 441.938318][T15019] FAULT_INJECTION: forcing a failure. [ 441.938318][T15019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.963196][T15019] CPU: 0 UID: 0 PID: 15019 Comm: syz.0.2925 Not tainted syzkaller #0 PREEMPT(full) [ 441.963224][T15019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 441.963238][T15019] Call Trace: [ 441.963246][T15019] [ 441.963255][T15019] dump_stack_lvl+0x189/0x250 [ 441.963283][T15019] ? __pfx____ratelimit+0x10/0x10 [ 441.963305][T15019] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.963329][T15019] ? __pfx__printk+0x10/0x10 [ 441.963357][T15019] ? __might_fault+0xb0/0x130 [ 441.963406][T15019] should_fail_ex+0x414/0x560 [ 441.963440][T15019] _copy_from_user+0x2d/0xb0 [ 441.963467][T15019] ___sys_sendmsg+0x158/0x2a0 [ 441.963496][T15019] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.963562][T15019] ? __fget_files+0x2a/0x420 [ 441.963579][T15019] ? __fget_files+0x3a0/0x420 [ 441.963609][T15019] __x64_sys_sendmsg+0x19b/0x260 [ 441.963637][T15019] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 441.963660][T15019] ? perf_trace_preemptirq_template+0xa3/0x340 [ 441.963698][T15019] ? __pfx_ksys_write+0x10/0x10 [ 441.963721][T15019] ? rcu_is_watching+0x15/0xb0 [ 441.963747][T15019] ? do_syscall_64+0xbe/0x3b0 [ 441.963773][T15019] do_syscall_64+0xfa/0x3b0 [ 441.963794][T15019] ? lockdep_hardirqs_on+0x9c/0x150 [ 441.963814][T15019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.963834][T15019] ? clear_bhb_loop+0x60/0xb0 [ 441.963859][T15019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.963878][T15019] RIP: 0033:0x7fe7aa58eba9 [ 441.963896][T15019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.963913][T15019] RSP: 002b:00007fe7ab48f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.963935][T15019] RAX: ffffffffffffffda RBX: 00007fe7aa7d6090 RCX: 00007fe7aa58eba9 [ 441.963950][T15019] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 441.963963][T15019] RBP: 00007fe7ab48f090 R08: 0000000000000000 R09: 0000000000000000 [ 441.963976][T15019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.963988][T15019] R13: 00007fe7aa7d6128 R14: 00007fe7aa7d6090 R15: 00007fffd82f1248 [ 441.964022][T15019] [ 442.993648][T15051] netlink: 'syz.2.2931': attribute type 10 has an invalid length. [ 443.001648][T15051] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2931'. [ 443.015996][T15051] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 445.065602][T15097] netlink: 'syz.3.2947': attribute type 10 has an invalid length. [ 445.085691][T15097] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2947'. [ 445.352857][T15101] erspan0 speed is unknown, defaulting to 1000 [ 445.812877][T15126] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 447.555304][T15154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2964'. [ 447.835463][T15156] erspan0 speed is unknown, defaulting to 1000 [ 447.847913][T15156] erspan0 speed is unknown, defaulting to 1000 [ 447.857606][T15156] erspan0 speed is unknown, defaulting to 1000 [ 448.211525][T15174] netlink: 'syz.5.2970': attribute type 10 has an invalid length. [ 448.250898][T15174] veth1_vlan: entered allmulticast mode [ 448.270974][T15171] netlink: 'syz.3.2968': attribute type 10 has an invalid length. [ 448.315625][T15177] netlink: 'syz.5.2970': attribute type 2 has an invalid length. [ 448.320274][T15171] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2968'. [ 448.335357][T15177] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2970'. [ 448.379787][T15177] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 448.612932][T15181] erspan0 speed is unknown, defaulting to 1000 [ 448.882150][T15189] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 449.281948][T15194] veth0_vlan: left promiscuous mode [ 449.313466][T15194] veth0_vlan: entered promiscuous mode [ 449.426087][T15156] infiniband syz0: set active [ 449.438564][T15156] infiniband syz0: added erspan0 [ 449.450776][ T5945] erspan0 speed is unknown, defaulting to 1000 [ 449.463413][T15156] syz0: rxe_create_cq: returned err = -12 [ 449.484478][T15156] infiniband syz0: Couldn't create ib_mad CQ [ 449.500861][T15156] infiniband syz0: Couldn't open port 1 [ 449.575903][T15156] RDS/IB: syz0: added [ 449.586144][T15156] smc: adding ib device syz0 with port count 1 [ 449.620246][T15156] smc: ib device syz0 port 1 has pnetid [ 449.779657][ T5945] erspan0 speed is unknown, defaulting to 1000 [ 449.811776][T15207] erspan0 speed is unknown, defaulting to 1000 [ 449.832362][T15156] erspan0 speed is unknown, defaulting to 1000 [ 450.682959][T15156] erspan0 speed is unknown, defaulting to 1000 [ 451.056319][T15246] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 451.270328][T15156] erspan0 speed is unknown, defaulting to 1000 [ 451.603372][T15156] erspan0 speed is unknown, defaulting to 1000 [ 451.669687][T15263] netlink: 'syz.1.2994': attribute type 12 has an invalid length. [ 451.677806][T15263] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2994'. [ 451.905349][T15272] FAULT_INJECTION: forcing a failure. [ 451.905349][T15272] name failslab, interval 1, probability 0, space 0, times 0 [ 451.927640][T15272] CPU: 0 UID: 0 PID: 15272 Comm: syz.3.2997 Not tainted syzkaller #0 PREEMPT(full) [ 451.927668][T15272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 451.927681][T15272] Call Trace: [ 451.927690][T15272] [ 451.927700][T15272] dump_stack_lvl+0x189/0x250 [ 451.927729][T15272] ? __pfx____ratelimit+0x10/0x10 [ 451.927752][T15272] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.927776][T15272] ? __pfx__printk+0x10/0x10 [ 451.927811][T15272] ? __pfx___might_resched+0x10/0x10 [ 451.927840][T15272] should_fail_ex+0x414/0x560 [ 451.927876][T15272] should_failslab+0xa8/0x100 [ 451.927908][T15272] __kmalloc_cache_noprof+0x70/0x3d0 [ 451.927935][T15272] ? tcf_action_init_1+0x19f/0x6d0 [ 451.927970][T15272] tcf_action_init_1+0x19f/0x6d0 [ 451.928006][T15272] ? __pfx_tcf_action_init_1+0x10/0x10 [ 451.928034][T15272] ? _raw_read_unlock+0x28/0x50 [ 451.928052][T15272] ? tc_action_load_ops+0x214/0x4e0 [ 451.928101][T15272] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 451.928131][T15272] ? __nla_parse+0x40/0x60 [ 451.928157][T15272] tcf_action_init+0x2cf/0xab0 [ 451.928192][T15272] ? __pfx_stack_trace_save+0x10/0x10 [ 451.928221][T15272] ? __pfx_tcf_action_init+0x10/0x10 [ 451.928263][T15272] ? perf_trace_lock+0xa0/0x3b0 [ 451.928325][T15272] ? __pfx___nla_validate_parse+0x10/0x10 [ 451.928393][T15272] tc_ctl_action+0x430/0xbd0 [ 451.928435][T15272] ? __pfx_tc_ctl_action+0x10/0x10 [ 451.928470][T15272] ? rcu_is_watching+0x15/0xb0 [ 451.928492][T15272] ? trace_contention_end+0x39/0x120 [ 451.928570][T15272] ? __pfx_tc_ctl_action+0x10/0x10 [ 451.928598][T15272] rtnetlink_rcv_msg+0x779/0xb70 [ 451.928631][T15272] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 451.928653][T15272] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 451.928672][T15272] ? ref_tracker_free+0x63a/0x7d0 [ 451.928692][T15272] ? __asan_memcpy+0x40/0x70 [ 451.928715][T15272] ? __pfx_ref_tracker_free+0x10/0x10 [ 451.928733][T15272] ? __skb_clone+0x63/0x7a0 [ 451.928771][T15272] netlink_rcv_skb+0x208/0x470 [ 451.928796][T15272] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 451.928820][T15272] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 451.928857][T15272] ? netlink_deliver_tap+0x2e/0x1b0 [ 451.928890][T15272] netlink_unicast+0x82f/0x9e0 [ 451.928932][T15272] ? __pfx_netlink_unicast+0x10/0x10 [ 451.928965][T15272] ? netlink_sendmsg+0x642/0xb30 [ 451.928984][T15272] ? skb_put+0x11b/0x210 [ 451.929013][T15272] netlink_sendmsg+0x805/0xb30 [ 451.929047][T15272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.929074][T15272] ? aa_sock_msg_perm+0xf1/0x1d0 [ 451.929098][T15272] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 451.929120][T15272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.929144][T15272] __sock_sendmsg+0x219/0x270 [ 451.929178][T15272] ____sys_sendmsg+0x505/0x830 [ 451.929211][T15272] ? __pfx_____sys_sendmsg+0x10/0x10 [ 451.929249][T15272] ? import_iovec+0x74/0xa0 [ 451.929281][T15272] ___sys_sendmsg+0x21f/0x2a0 [ 451.929309][T15272] ? __pfx____sys_sendmsg+0x10/0x10 [ 451.929363][T15272] ? __fget_files+0x2a/0x420 [ 451.929396][T15272] ? __fget_files+0x2a/0x420 [ 451.929413][T15272] ? __fget_files+0x3a0/0x420 [ 451.929445][T15272] __x64_sys_sendmsg+0x19b/0x260 [ 451.929474][T15272] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 451.929513][T15272] ? __pfx_ksys_write+0x10/0x10 [ 451.929537][T15272] ? rcu_is_watching+0x15/0xb0 [ 451.929564][T15272] ? do_syscall_64+0xbe/0x3b0 [ 451.929591][T15272] do_syscall_64+0xfa/0x3b0 [ 451.929611][T15272] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.929637][T15272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.929658][T15272] ? clear_bhb_loop+0x60/0xb0 [ 451.929683][T15272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.929702][T15272] RIP: 0033:0x7fa924b8eba9 [ 451.929721][T15272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.929739][T15272] RSP: 002b:00007fa925af3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.929761][T15272] RAX: ffffffffffffffda RBX: 00007fa924dd5fa0 RCX: 00007fa924b8eba9 [ 451.929776][T15272] RDX: 0000000000000000 RSI: 00002000000096c0 RDI: 0000000000000004 [ 451.929790][T15272] RBP: 00007fa925af3090 R08: 0000000000000000 R09: 0000000000000000 [ 451.929803][T15272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.929815][T15272] R13: 00007fa924dd6038 R14: 00007fa924dd5fa0 R15: 00007ffe2b7f2c98 [ 451.929853][T15272] [ 452.380055][T15156] erspan0 speed is unknown, defaulting to 1000 [ 452.605402][T15156] erspan0 speed is unknown, defaulting to 1000 [ 452.830362][T15156] erspan0 speed is unknown, defaulting to 1000 [ 453.116728][T15289] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3003'. [ 453.199486][T15292] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3004'. [ 453.283164][T15295] netlink: 'syz.3.3006': attribute type 12 has an invalid length. [ 453.294914][T15297] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3005'. [ 453.324286][T15295] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3006'. [ 453.341889][T15298] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3005'. [ 453.392463][T15300] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 453.815509][T15311] FAULT_INJECTION: forcing a failure. [ 453.815509][T15311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.846208][T15311] CPU: 0 UID: 0 PID: 15311 Comm: syz.3.3011 Not tainted syzkaller #0 PREEMPT(full) [ 453.846240][T15311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 453.846254][T15311] Call Trace: [ 453.846262][T15311] [ 453.846272][T15311] dump_stack_lvl+0x189/0x250 [ 453.846304][T15311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.846362][T15311] should_fail_ex+0x414/0x560 [ 453.846398][T15311] _copy_from_user+0x2d/0xb0 [ 453.846425][T15311] __sys_bpf+0x1ed/0x870 [ 453.846455][T15311] ? __pfx___sys_bpf+0x10/0x10 [ 453.846478][T15311] ? sched_clock_cpu+0x74/0x430 [ 453.846535][T15311] __x64_sys_bpf+0x7c/0x90 [ 453.846560][T15311] do_syscall_64+0xfa/0x3b0 [ 453.846585][T15311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.846604][T15311] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 453.846624][T15311] ? clear_bhb_loop+0x60/0xb0 [ 453.846650][T15311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.846669][T15311] RIP: 0033:0x7fa924b8eba9 [ 453.846687][T15311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.846705][T15311] RSP: 002b:00007fa925af3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 453.846726][T15311] RAX: ffffffffffffffda RBX: 00007fa924dd5fa0 RCX: 00007fa924b8eba9 [ 453.846743][T15311] RDX: 0000000000000038 RSI: 0000200000000900 RDI: 000000000000001a [ 453.846756][T15311] RBP: 00007fa925af3090 R08: 0000000000000000 R09: 0000000000000000 [ 453.846770][T15311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.846782][T15311] R13: 00007fa924dd6038 R14: 00007fa924dd5fa0 R15: 00007ffe2b7f2c98 [ 453.846819][T15311] [ 454.585564][T15330] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3019'. [ 454.687204][T15333] FAULT_INJECTION: forcing a failure. [ 454.687204][T15333] name failslab, interval 1, probability 0, space 0, times 0 [ 454.703186][T15333] CPU: 0 UID: 0 PID: 15333 Comm: syz.1.3020 Not tainted syzkaller #0 PREEMPT(full) [ 454.703216][T15333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 454.703229][T15333] Call Trace: [ 454.703238][T15333] [ 454.703247][T15333] dump_stack_lvl+0x189/0x250 [ 454.703276][T15333] ? __pfx____ratelimit+0x10/0x10 [ 454.703297][T15333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.703320][T15333] ? __pfx__printk+0x10/0x10 [ 454.703361][T15333] ? __pfx___might_resched+0x10/0x10 [ 454.703379][T15333] ? fs_reclaim_acquire+0x7d/0x100 [ 454.703403][T15333] should_fail_ex+0x414/0x560 [ 454.703438][T15333] should_failslab+0xa8/0x100 [ 454.703468][T15333] __kmalloc_noprof+0xcb/0x4f0 [ 454.703493][T15333] ? kfree+0x4d/0x440 [ 454.703515][T15333] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 454.703543][T15333] tomoyo_realpath_from_path+0xe3/0x5d0 [ 454.703567][T15333] ? tomoyo_domain+0xd9/0x130 [ 454.703595][T15333] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 454.703624][T15333] tomoyo_path_number_perm+0x1e8/0x5a0 [ 454.703656][T15333] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 454.703685][T15333] ? perf_trace_run_bpf_submit+0xee/0x170 [ 454.703721][T15333] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 454.703747][T15333] ? __lock_acquire+0xab9/0xd20 [ 454.703806][T15333] ? security_file_ioctl+0xa7/0x2d0 [ 454.703839][T15333] security_file_ioctl+0xcb/0x2d0 [ 454.703869][T15333] __se_sys_ioctl+0x47/0x170 [ 454.703896][T15333] do_syscall_64+0xfa/0x3b0 [ 454.703919][T15333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.703939][T15333] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 454.703959][T15333] ? clear_bhb_loop+0x60/0xb0 [ 454.703983][T15333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.704003][T15333] RIP: 0033:0x7f2b24d8eba9 [ 454.704021][T15333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.704039][T15333] RSP: 002b:00007f2b25ce7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 454.704061][T15333] RAX: ffffffffffffffda RBX: 00007f2b24fd5fa0 RCX: 00007f2b24d8eba9 [ 454.704076][T15333] RDX: 0000200000000cc0 RSI: 0000000000008933 RDI: 0000000000000008 [ 454.704090][T15333] RBP: 00007f2b25ce7090 R08: 0000000000000000 R09: 0000000000000000 [ 454.704102][T15333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.704115][T15333] R13: 00007f2b24fd6038 R14: 00007f2b24fd5fa0 R15: 00007ffdab9013d8 [ 454.704147][T15333] [ 454.948252][T15333] ERROR: Out of memory at tomoyo_realpath_from_path. [ 454.995299][T15335] dummy0: left allmulticast mode [ 455.000295][T15335] dummy0: left promiscuous mode [ 455.005930][T15335] bridge0: port 4(dummy0) entered disabled state [ 455.086037][T15335] batadv0: left allmulticast mode [ 455.092463][T15335] bridge0: port 3(batadv0) entered disabled state [ 455.107307][T15344] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 455.142265][T15335] bridge_slave_1: left allmulticast mode [ 455.154721][T15335] bridge_slave_1: left promiscuous mode [ 455.218769][T15335] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.260676][T15335] bridge_slave_0: left allmulticast mode [ 455.288502][T15335] bridge_slave_0: left promiscuous mode [ 455.294875][T15335] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.424939][T15341] netlink: 'syz.3.3022': attribute type 12 has an invalid length. [ 455.433161][T15341] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3022'. [ 455.581176][T15355] netlink: 'syz.2.3025': attribute type 8 has an invalid length. [ 456.385810][T15371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3028'. [ 456.436121][T15370] tap0: tun_chr_ioctl cmd 21731 [ 456.641105][T15374] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3032'. [ 456.925613][T15384] netlink: 'syz.1.3037': attribute type 12 has an invalid length. [ 456.933468][T15384] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3037'. [ 457.595038][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 457.607080][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 457.615021][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 457.624622][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 457.633971][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 457.896089][T12580] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.954093][T15390] erspan0 speed is unknown, defaulting to 1000 [ 458.030665][T12580] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.210513][T12580] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.382815][T12580] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.440470][T15390] erspan0 speed is unknown, defaulting to 1000 [ 458.444098][T15398] erspan0 speed is unknown, defaulting to 1000 [ 459.070772][T15428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3047'. [ 459.169688][T12580] batadv0: left allmulticast mode [ 459.185362][T12580] bridge0: port 3(batadv0) entered disabled state [ 459.203352][T12580] bridge_slave_1: left allmulticast mode [ 459.215251][T12580] bridge_slave_1: left promiscuous mode [ 459.240272][T12580] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.250803][T15431] netlink: 'syz.0.3049': attribute type 10 has an invalid length. [ 459.262056][T15431] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3049'. [ 459.281561][T12580] bridge_slave_0: left allmulticast mode [ 459.287730][T12580] bridge_slave_0: left promiscuous mode [ 459.298842][T12580] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.486566][T15446] FAULT_INJECTION: forcing a failure. [ 459.486566][T15446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.502524][T15446] CPU: 1 UID: 0 PID: 15446 Comm: syz.2.3052 Not tainted syzkaller #0 PREEMPT(full) [ 459.502551][T15446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 459.502563][T15446] Call Trace: [ 459.502571][T15446] [ 459.502581][T15446] dump_stack_lvl+0x189/0x250 [ 459.502608][T15446] ? __pfx____ratelimit+0x10/0x10 [ 459.502630][T15446] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.502652][T15446] ? __pfx__printk+0x10/0x10 [ 459.502686][T15446] ? __might_fault+0xb0/0x130 [ 459.502722][T15446] should_fail_ex+0x414/0x560 [ 459.502755][T15446] _copy_from_user+0x2d/0xb0 [ 459.502780][T15446] ___sys_sendmsg+0x158/0x2a0 [ 459.502807][T15446] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.502865][T15446] ? __fget_files+0x2a/0x420 [ 459.502882][T15446] ? __fget_files+0x3a0/0x420 [ 459.502910][T15446] __x64_sys_sendmsg+0x19b/0x260 [ 459.502936][T15446] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 459.502968][T15446] ? __pfx_ksys_write+0x10/0x10 [ 459.502989][T15446] ? rcu_is_watching+0x15/0xb0 [ 459.503014][T15446] ? do_syscall_64+0xbe/0x3b0 [ 459.503038][T15446] do_syscall_64+0xfa/0x3b0 [ 459.503058][T15446] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.503077][T15446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.503094][T15446] ? clear_bhb_loop+0x60/0xb0 [ 459.503116][T15446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.503134][T15446] RIP: 0033:0x7f4dd358eba9 [ 459.503151][T15446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.503169][T15446] RSP: 002b:00007f4dd44db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.503188][T15446] RAX: ffffffffffffffda RBX: 00007f4dd37d5fa0 RCX: 00007f4dd358eba9 [ 459.503202][T15446] RDX: 0000000000004040 RSI: 00002000000003c0 RDI: 0000000000000003 [ 459.503214][T15446] RBP: 00007f4dd44db090 R08: 0000000000000000 R09: 0000000000000000 [ 459.503226][T15446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.503238][T15446] R13: 00007f4dd37d6038 R14: 00007f4dd37d5fa0 R15: 00007ffda9b5be18 [ 459.503268][T15446] [ 459.715319][ T5869] Bluetooth: hci4: command tx timeout [ 460.160380][T12580] team0: Port device bond0 removed [ 460.168529][T12580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.179696][T12580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.190066][T12580] bond0 (unregistering): Released all slaves [ 460.210841][T15398] erspan0 speed is unknown, defaulting to 1000 [ 460.218472][ T980] erspan0 speed is unknown, defaulting to 1000 [ 460.237154][ T980] syz2: Port: 1 Link DOWN [ 460.266683][ T5932] erspan0 speed is unknown, defaulting to 1000 [ 460.482423][T15461] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 460.537492][ T3492] smc: removing ib device syz2 [ 461.450316][T15492] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3060'. [ 461.580841][T15499] netlink: 'syz.5.3062': attribute type 12 has an invalid length. [ 461.625212][T15499] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3062'. [ 461.638380][T15398] chnl_net:caif_netlink_parms(): no params data found [ 461.797246][ T5869] Bluetooth: hci4: command tx timeout [ 461.886353][T15509] erspan0 speed is unknown, defaulting to 1000 [ 462.264264][T15516] netlink: 'syz.5.3065': attribute type 10 has an invalid length. [ 462.272274][T15516] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3065'. [ 462.323125][T15516] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 462.505654][T15398] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.512831][T15398] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.520721][T15398] bridge_slave_0: entered allmulticast mode [ 462.557480][T15398] bridge_slave_0: entered promiscuous mode [ 462.584251][T15398] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.622557][T15398] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.648157][T15398] bridge_slave_1: entered allmulticast mode [ 462.671284][T15398] bridge_slave_1: entered promiscuous mode [ 462.751423][T15533] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 462.903823][T15398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.959619][T15398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.076685][T15542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3073'. [ 463.154851][T15398] team0: Port device team_slave_0 added [ 463.193264][T15398] team0: Port device team_slave_1 added [ 463.400072][T15398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.455160][T15398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.550611][T15398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.604629][T15552] netlink: 'syz.5.3076': attribute type 13 has an invalid length. [ 463.692194][T15558] FAULT_INJECTION: forcing a failure. [ 463.692194][T15558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.783943][T15558] CPU: 1 UID: 0 PID: 15558 Comm: syz.1.3077 Not tainted syzkaller #0 PREEMPT(full) [ 463.783972][T15558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 463.783986][T15558] Call Trace: [ 463.784006][T15558] [ 463.784027][T15558] dump_stack_lvl+0x189/0x250 [ 463.784083][T15558] ? __pfx____ratelimit+0x10/0x10 [ 463.784137][T15558] ? __pfx_dump_stack_lvl+0x10/0x10 [ 463.784193][T15558] ? __pfx__printk+0x10/0x10 [ 463.784272][T15558] ? __might_fault+0xb0/0x130 [ 463.784367][T15558] ? __might_fault+0xb0/0x130 [ 463.784508][T15558] should_fail_ex+0x414/0x560 [ 463.784650][T15558] _copy_from_user+0x2d/0xb0 [ 463.784716][T15558] kstrtouint_from_user+0xc4/0x170 [ 463.784812][T15558] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 463.785110][T15558] proc_fail_nth_write+0x88/0x200 [ 463.785160][T15558] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 463.785303][T15558] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 463.785380][T15558] vfs_write+0x27b/0xb30 [ 463.785572][T15558] ? __pfx_vfs_write+0x10/0x10 [ 463.785666][T15558] ? __fget_files+0x2a/0x420 [ 463.785776][T15558] ? __fget_files+0x3a0/0x420 [ 463.785804][T15558] ? __fget_files+0x2a/0x420 [ 463.785979][T15558] ksys_write+0x145/0x250 [ 463.786077][T15558] ? __pfx_ksys_write+0x10/0x10 [ 463.786099][T15558] ? rcu_is_watching+0x15/0xb0 [ 463.786228][T15558] ? do_syscall_64+0xbe/0x3b0 [ 463.786331][T15558] do_syscall_64+0xfa/0x3b0 [ 463.786357][T15558] ? lockdep_hardirqs_on+0x9c/0x150 [ 463.786399][T15558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.786431][T15558] ? clear_bhb_loop+0x60/0xb0 [ 463.786520][T15558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.786546][T15558] RIP: 0033:0x7f2b24d8d65f [ 463.786587][T15558] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 463.786606][T15558] RSP: 002b:00007f2b25ce7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 463.786627][T15558] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2b24d8d65f [ 463.786643][T15558] RDX: 0000000000000001 RSI: 00007f2b25ce70a0 RDI: 0000000000000005 [ 463.786656][T15558] RBP: 00007f2b25ce7090 R08: 0000000000000000 R09: 0000000000000000 [ 463.786669][T15558] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 463.786682][T15558] R13: 00007f2b24fd6038 R14: 00007f2b24fd5fa0 R15: 00007ffdab9013d8 [ 463.786943][T15558] [ 463.896167][ T5869] Bluetooth: hci4: command tx timeout [ 464.048384][T15552] gretap0: refused to change device tx_queue_len [ 464.056077][T15552] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 464.163677][T15398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.206324][T15398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.267099][T15398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.764232][T15578] netlink: 'syz.2.3083': attribute type 10 has an invalid length. [ 464.772211][T15578] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3083'. [ 466.044120][T15572] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 466.074312][T15580] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 466.115299][ T5869] Bluetooth: hci4: command tx timeout [ 466.291267][T15578] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 466.322319][T15398] hsr_slave_0: entered promiscuous mode [ 466.336530][T15398] hsr_slave_1: entered promiscuous mode [ 466.342907][T15398] debugfs: 'hsr0' already exists in 'hsr' [ 466.353738][T15398] Cannot create hsr debugfs directory [ 466.545776][T15594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3085'. [ 466.692882][T15602] erspan0 speed is unknown, defaulting to 1000 [ 466.923385][T15618] FAULT_INJECTION: forcing a failure. [ 466.923385][T15618] name failslab, interval 1, probability 0, space 0, times 0 [ 466.965230][T15618] CPU: 1 UID: 0 PID: 15618 Comm: syz.1.3091 Not tainted syzkaller #0 PREEMPT(full) [ 466.965260][T15618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 466.965272][T15618] Call Trace: [ 466.965281][T15618] [ 466.965290][T15618] dump_stack_lvl+0x189/0x250 [ 466.965317][T15618] ? __pfx____ratelimit+0x10/0x10 [ 466.965336][T15618] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.965359][T15618] ? __pfx__printk+0x10/0x10 [ 466.965388][T15618] ? __pfx___might_resched+0x10/0x10 [ 466.965404][T15618] ? fs_reclaim_acquire+0x7d/0x100 [ 466.965427][T15618] should_fail_ex+0x414/0x560 [ 466.965462][T15618] should_failslab+0xa8/0x100 [ 466.965493][T15618] __kmalloc_node_noprof+0xd1/0x4e0 [ 466.965519][T15618] ? crypto_create_tfm_node+0x83/0x3f0 [ 466.965555][T15618] crypto_create_tfm_node+0x83/0x3f0 [ 466.965590][T15618] crypto_alloc_tfm_node+0x172/0x3f0 [ 466.965630][T15618] ipcomp_init_state+0x14d/0x2a0 [ 466.965655][T15618] ipcomp4_init_state+0xca/0xb20 [ 466.965684][T15618] ? __xfrm_init_state+0x7ef/0x13f0 [ 466.965718][T15618] __xfrm_init_state+0xa76/0x13f0 [ 466.965743][T15618] ? __xfrm_init_state+0x7ef/0x13f0 [ 466.965775][T15618] xfrm_init_state+0x18/0xa0 [ 466.965801][T15618] pfkey_add+0x1d38/0x2e00 [ 466.965844][T15618] ? __pfx_pfkey_add+0x10/0x10 [ 466.965864][T15618] ? kmem_cache_free+0x18f/0x400 [ 466.965912][T15618] pfkey_sendmsg+0xbfe/0x1090 [ 466.965955][T15618] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 466.966006][T15618] ? aa_sock_msg_perm+0xf1/0x1d0 [ 466.966028][T15618] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 466.966050][T15618] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 466.966074][T15618] __sock_sendmsg+0x219/0x270 [ 466.966108][T15618] ____sys_sendmsg+0x505/0x830 [ 466.966139][T15618] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.966175][T15618] ? import_iovec+0x74/0xa0 [ 466.966206][T15618] ___sys_sendmsg+0x21f/0x2a0 [ 466.966233][T15618] ? __pfx____sys_sendmsg+0x10/0x10 [ 466.966298][T15618] ? __fget_files+0x2a/0x420 [ 466.966316][T15618] ? __fget_files+0x3a0/0x420 [ 466.966345][T15618] __x64_sys_sendmsg+0x19b/0x260 [ 466.966372][T15618] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 466.966408][T15618] ? __pfx_ksys_write+0x10/0x10 [ 466.966431][T15618] ? rcu_is_watching+0x15/0xb0 [ 466.966458][T15618] ? do_syscall_64+0xbe/0x3b0 [ 466.966484][T15618] do_syscall_64+0xfa/0x3b0 [ 466.966504][T15618] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.966523][T15618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.966543][T15618] ? clear_bhb_loop+0x60/0xb0 [ 466.966567][T15618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.966586][T15618] RIP: 0033:0x7f2b24d8eba9 [ 466.966605][T15618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.966623][T15618] RSP: 002b:00007f2b25ce7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.966644][T15618] RAX: ffffffffffffffda RBX: 00007f2b24fd5fa0 RCX: 00007f2b24d8eba9 [ 466.966660][T15618] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 466.966673][T15618] RBP: 00007f2b25ce7090 R08: 0000000000000000 R09: 0000000000000000 [ 466.966686][T15618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.966698][T15618] R13: 00007f2b24fd6038 R14: 00007f2b24fd5fa0 R15: 00007ffdab9013d8 [ 466.966731][T15618] [ 467.680321][T15625] netlink: 'syz.2.3094': attribute type 10 has an invalid length. [ 467.696579][T15625] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3094'. [ 467.868360][T15625] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 468.393452][T12580] hsr_slave_0: left promiscuous mode [ 468.418175][T12580] hsr_slave_1: left promiscuous mode [ 468.432198][T12580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.450901][T15658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3099'. [ 468.465321][T12580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.519775][T12580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.527457][T12580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.597653][T12580] veth1_macvtap: left promiscuous mode [ 468.621127][T12580] veth0_macvtap: left promiscuous mode [ 468.633612][T12580] veth1_vlan: left promiscuous mode [ 468.644815][T12580] veth0_vlan: left promiscuous mode [ 469.478743][T15682] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 469.595721][T12580] team0 (unregistering): Port device team_slave_1 removed [ 469.652932][T12580] team0 (unregistering): Port device team_slave_0 removed [ 470.412336][T15684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3104'. [ 470.505784][T15684] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3104'. [ 470.670230][T15700] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3108'. [ 470.703490][T15700] rdma_rxe: rxe_newlink: failed to add erspan0 [ 471.039047][T15693] erspan0 speed is unknown, defaulting to 1000 [ 471.343418][T12580] ================================================================== [ 471.351520][T12580] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x666/0xca0 [ 471.359628][T12580] Write of size 8 at addr ffff88802ea888a8 by task kworker/u8:11/12580 [ 471.367862][T12580] [ 471.370183][T12580] CPU: 0 UID: 0 PID: 12580 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 471.370203][T12580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 471.370216][T12580] Workqueue: netns cleanup_net [ 471.370239][T12580] Call Trace: [ 471.370246][T12580] [ 471.370254][T12580] dump_stack_lvl+0x189/0x250 [ 471.370275][T12580] ? __virt_addr_valid+0x1c8/0x5c0 [ 471.370295][T12580] ? rcu_is_watching+0x15/0xb0 [ 471.370311][T12580] ? __kasan_check_byte+0x12/0x40 [ 471.370334][T12580] ? __pfx_dump_stack_lvl+0x10/0x10 [ 471.370352][T12580] ? rcu_is_watching+0x15/0xb0 [ 471.370369][T12580] ? lock_release+0x4b/0x3e0 [ 471.370394][T12580] ? __virt_addr_valid+0x1c8/0x5c0 [ 471.370414][T12580] ? __virt_addr_valid+0x4a5/0x5c0 [ 471.370435][T12580] print_report+0xca/0x240 [ 471.370451][T12580] ? __xfrm_state_delete+0x666/0xca0 [ 471.370470][T12580] kasan_report+0x118/0x150 [ 471.370493][T12580] ? __xfrm_state_delete+0x666/0xca0 [ 471.370514][T12580] __xfrm_state_delete+0x666/0xca0 [ 471.370537][T12580] xfrm_state_flush+0x45f/0x770 [ 471.370560][T12580] xfrm6_tunnel_net_exit+0x3c/0x100 [ 471.370583][T12580] ops_undo_list+0x49a/0x990 [ 471.370603][T12580] ? __pfx_ops_undo_list+0x10/0x10 [ 471.370622][T12580] ? do_raw_spin_unlock+0x122/0x240 [ 471.370644][T12580] cleanup_net+0x4c5/0x800 [ 471.370662][T12580] ? __pfx_cleanup_net+0x10/0x10 [ 471.370681][T12580] ? _raw_spin_unlock_irq+0x23/0x50 [ 471.370705][T12580] ? process_scheduled_works+0x9ef/0x17b0 [ 471.370726][T12580] ? process_scheduled_works+0x9ef/0x17b0 [ 471.370742][T12580] process_scheduled_works+0xae1/0x17b0 [ 471.370770][T12580] ? __pfx_process_scheduled_works+0x10/0x10 [ 471.370793][T12580] worker_thread+0x8a0/0xda0 [ 471.370815][T12580] ? __kthread_parkme+0x7b/0x200 [ 471.370836][T12580] kthread+0x70e/0x8a0 [ 471.370857][T12580] ? __pfx_worker_thread+0x10/0x10 [ 471.370873][T12580] ? __pfx_kthread+0x10/0x10 [ 471.370893][T12580] ? _raw_spin_unlock_irq+0x23/0x50 [ 471.370917][T12580] ? lockdep_hardirqs_on+0x9c/0x150 [ 471.370934][T12580] ? __pfx_kthread+0x10/0x10 [ 471.370954][T12580] ret_from_fork+0x436/0x7d0 [ 471.370972][T12580] ? __pfx_ret_from_fork+0x10/0x10 [ 471.370990][T12580] ? __switch_to_asm+0x39/0x70 [ 471.371011][T12580] ? __switch_to_asm+0x33/0x70 [ 471.371031][T12580] ? __pfx_kthread+0x10/0x10 [ 471.371050][T12580] ret_from_fork_asm+0x1a/0x30 [ 471.371078][T12580] [ 471.371084][T12580] [ 471.603942][T12580] Allocated by task 14819: [ 471.608340][T12580] kasan_save_track+0x3e/0x80 [ 471.613011][T12580] __kasan_slab_alloc+0x6c/0x80 [ 471.617851][T12580] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 471.623301][T12580] xfrm_state_alloc+0x24/0x2f0 [ 471.628052][T12580] __find_acq_core+0x8a7/0x1c00 [ 471.632898][T12580] xfrm_find_acq+0x78/0xa0 [ 471.637304][T12580] xfrm_alloc_userspi+0x6b3/0xc90 [ 471.642347][T12580] xfrm_user_rcv_msg+0x7a3/0xab0 [ 471.647272][T12580] netlink_rcv_skb+0x208/0x470 [ 471.652035][T12580] xfrm_netlink_rcv+0x79/0x90 [ 471.656723][T12580] netlink_unicast+0x82f/0x9e0 [ 471.661504][T12580] netlink_sendmsg+0x805/0xb30 [ 471.666260][T12580] __sock_sendmsg+0x219/0x270 [ 471.670944][T12580] ____sys_sendmsg+0x505/0x830 [ 471.675698][T12580] ___sys_sendmsg+0x21f/0x2a0 [ 471.680365][T12580] __x64_sys_sendmsg+0x19b/0x260 [ 471.685291][T12580] do_syscall_64+0xfa/0x3b0 [ 471.689784][T12580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.695662][T12580] [ 471.697970][T12580] Freed by task 980: [ 471.701840][T12580] kasan_save_track+0x3e/0x80 [ 471.706507][T12580] kasan_save_free_info+0x46/0x50 [ 471.711517][T12580] __kasan_slab_free+0x5b/0x80 [ 471.716298][T12580] kmem_cache_free+0x18f/0x400 [ 471.721070][T12580] xfrm_state_gc_task+0x52d/0x6b0 [ 471.726106][T12580] process_scheduled_works+0xae1/0x17b0 [ 471.731641][T12580] worker_thread+0x8a0/0xda0 [ 471.736229][T12580] kthread+0x70e/0x8a0 [ 471.740291][T12580] ret_from_fork+0x436/0x7d0 [ 471.744866][T12580] ret_from_fork_asm+0x1a/0x30 [ 471.749621][T12580] [ 471.751935][T12580] The buggy address belongs to the object at ffff88802ea88880 [ 471.751935][T12580] which belongs to the cache xfrm_state of size 928 [ 471.765884][T12580] The buggy address is located 40 bytes inside of [ 471.765884][T12580] freed 928-byte region [ffff88802ea88880, ffff88802ea88c20) [ 471.779578][T12580] [ 471.781885][T12580] The buggy address belongs to the physical page: [ 471.788293][T12580] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802ea88880 pfn:0x2ea88 [ 471.798352][T12580] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 471.806844][T12580] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 471.814376][T12580] page_type: f5(slab) [ 471.818347][T12580] raw: 00fff00000000040 ffff88801a5fe640 dead000000000122 0000000000000000 [ 471.826917][T12580] raw: ffff88802ea88880 00000000800f000c 00000000f5000000 0000000000000000 [ 471.835486][T12580] head: 00fff00000000040 ffff88801a5fe640 dead000000000122 0000000000000000 [ 471.844142][T12580] head: ffff88802ea88880 00000000800f000c 00000000f5000000 0000000000000000 [ 471.852799][T12580] head: 00fff00000000002 ffffea0000baa201 00000000ffffffff 00000000ffffffff [ 471.861453][T12580] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 471.870105][T12580] page dumped because: kasan: bad access detected [ 471.876509][T12580] page_owner tracks the page as allocated [ 471.882205][T12580] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6182, tgid 6181 (syz.3.72), ts 95040437669, free_ts 84392905314 [ 471.901117][T12580] post_alloc_hook+0x240/0x2a0 [ 471.905880][T12580] get_page_from_freelist+0x21e4/0x22c0 [ 471.911440][T12580] __alloc_frozen_pages_noprof+0x181/0x370 [ 471.917230][T12580] alloc_pages_mpol+0x232/0x4a0 [ 471.922073][T12580] allocate_slab+0x8a/0x370 [ 471.926560][T12580] ___slab_alloc+0xbeb/0x1420 [ 471.931230][T12580] kmem_cache_alloc_noprof+0x283/0x3c0 [ 471.936674][T12580] xfrm_state_alloc+0x24/0x2f0 [ 471.941421][T12580] xfrm_add_acquire+0xf7/0xb20 [ 471.946180][T12580] xfrm_user_rcv_msg+0x7a3/0xab0 [ 471.951105][T12580] netlink_rcv_skb+0x208/0x470 [ 471.955849][T12580] xfrm_netlink_rcv+0x79/0x90 [ 471.960513][T12580] netlink_unicast+0x82f/0x9e0 [ 471.965265][T12580] netlink_sendmsg+0x805/0xb30 [ 471.970013][T12580] __sock_sendmsg+0x219/0x270 [ 471.974680][T12580] ____sys_sendmsg+0x505/0x830 [ 471.979432][T12580] page last free pid 6023 tgid 6020 stack trace: [ 471.985737][T12580] __free_frozen_pages+0xbc4/0xd30 [ 471.990838][T12580] __put_partials+0x156/0x1a0 [ 471.995495][T12580] put_cpu_partial+0x17c/0x250 [ 472.000243][T12580] __slab_free+0x2d5/0x3c0 [ 472.004655][T12580] qlist_free_all+0x97/0x140 [ 472.009232][T12580] kasan_quarantine_reduce+0x148/0x160 [ 472.014675][T12580] __kasan_slab_alloc+0x22/0x80 [ 472.019515][T12580] __kmalloc_cache_noprof+0x1be/0x3d0 [ 472.024892][T12580] find_get_pmu_context+0x8b/0x890 [ 472.029989][T12580] __se_sys_perf_event_open+0xbfd/0x1d70 [ 472.035612][T12580] do_syscall_64+0xfa/0x3b0 [ 472.040121][T12580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.046004][T12580] [ 472.048319][T12580] Memory state around the buggy address: [ 472.054018][T12580] ffff88802ea88780: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 472.062063][T12580] ffff88802ea88800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 472.070123][T12580] >ffff88802ea88880: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 472.078165][T12580] ^ [ 472.083516][T12580] ffff88802ea88900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 472.091561][T12580] ffff88802ea88980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 472.099611][T12580] ================================================================== [ 472.107864][T12580] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 472.115150][T12580] CPU: 0 UID: 0 PID: 12580 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 472.124795][T12580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 472.134862][T12580] Workqueue: netns cleanup_net [ 472.139651][T12580] Call Trace: [ 472.142935][T12580] [ 472.145871][T12580] dump_stack_lvl+0x99/0x250 [ 472.150468][T12580] ? __asan_memcpy+0x40/0x70 [ 472.155065][T12580] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.160271][T12580] ? __pfx__printk+0x10/0x10 [ 472.164885][T12580] vpanic+0x281/0x750 [ 472.168879][T12580] ? __pfx_print_hex_dump+0x10/0x10 [ 472.174088][T12580] ? __pfx_vpanic+0x10/0x10 [ 472.178598][T12580] ? irqentry_exit+0x74/0x90 [ 472.183201][T12580] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.188417][T12580] panic+0xb9/0xc0 [ 472.192236][T12580] ? __pfx_panic+0x10/0x10 [ 472.196660][T12580] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 472.202565][T12580] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 472.208902][T12580] ? __xfrm_state_delete+0x666/0xca0 [ 472.214194][T12580] check_panic_on_warn+0x89/0xb0 [ 472.219143][T12580] ? __xfrm_state_delete+0x666/0xca0 [ 472.224428][T12580] end_report+0x78/0x160 [ 472.228680][T12580] kasan_report+0x129/0x150 [ 472.233188][T12580] ? __xfrm_state_delete+0x666/0xca0 [ 472.238476][T12580] __xfrm_state_delete+0x666/0xca0 [ 472.243592][T12580] xfrm_state_flush+0x45f/0x770 [ 472.248452][T12580] xfrm6_tunnel_net_exit+0x3c/0x100 [ 472.253656][T12580] ops_undo_list+0x49a/0x990 [ 472.258249][T12580] ? __pfx_ops_undo_list+0x10/0x10 [ 472.263362][T12580] ? do_raw_spin_unlock+0x122/0x240 [ 472.268565][T12580] cleanup_net+0x4c5/0x800 [ 472.272985][T12580] ? __pfx_cleanup_net+0x10/0x10 [ 472.277925][T12580] ? _raw_spin_unlock_irq+0x23/0x50 [ 472.283131][T12580] ? process_scheduled_works+0x9ef/0x17b0 [ 472.288847][T12580] ? process_scheduled_works+0x9ef/0x17b0 [ 472.294567][T12580] process_scheduled_works+0xae1/0x17b0 [ 472.300122][T12580] ? __pfx_process_scheduled_works+0x10/0x10 [ 472.306115][T12580] worker_thread+0x8a0/0xda0 [ 472.310722][T12580] ? __kthread_parkme+0x7b/0x200 [ 472.315675][T12580] kthread+0x70e/0x8a0 [ 472.319755][T12580] ? __pfx_worker_thread+0x10/0x10 [ 472.324865][T12580] ? __pfx_kthread+0x10/0x10 [ 472.329465][T12580] ? _raw_spin_unlock_irq+0x23/0x50 [ 472.334676][T12580] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.339880][T12580] ? __pfx_kthread+0x10/0x10 [ 472.344483][T12580] ret_from_fork+0x436/0x7d0 [ 472.349086][T12580] ? __pfx_ret_from_fork+0x10/0x10 [ 472.354201][T12580] ? __switch_to_asm+0x39/0x70 [ 472.358971][T12580] ? __switch_to_asm+0x33/0x70 [ 472.363737][T12580] ? __pfx_kthread+0x10/0x10 [ 472.368319][T12580] ret_from_fork_asm+0x1a/0x30 [ 472.373084][T12580] [ 472.376353][T12580] Kernel Offset: disabled [ 472.380657][T12580] Rebooting in 86400 seconds..