last executing test programs: 6.706572153s ago: executing program 4 (id=6345): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)}, 0x10) fstat(r0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004, 0x4, @perf_config_ext={0x40, 0x8800000000000004}, 0x0, 0x2, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401c5820, &(0x7f0000000000)=0x818) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b0000a2a31d586b64456e00000000000000000000000000000000005c4bf0a477a48a5e389947cdbf68c999bd3d0564174d6327b36ccf9ed4ab57909820c0ca9ee66cd0b51dec20efe4583392d0c0e11e85c05511a1093ed6fd73cbcefa1e1e91d941eb61a22646eef2d9a13bc5807d66bb752b1ec1", @ANYRES32=0x1, @ANYBLOB="b79300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000020000000500"/28], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f00000002c0)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x93c, 0x0, 0x0, 0x0, 0x8}, [@generic={0x9, 0xc, 0x0, 0x401, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000680)='GPL\x00', 0x5, 0xb4, &(0x7f0000000b80)=""/180, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r7, 0xffffffffffffffff, r6, r6, r4], 0x0, 0x10, 0xc144}, 0x94) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r8, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001180)={&(0x7f0000000e80)="b968a712766dd5bd7f3a7ef1034d19ee81ab4070a5de47b12e8fddda601dead94b522ca6fd3ecf13dbcd5c941422f796e7ae5bce4a5fbc836e26777a9bf9e397deadfe481fcaa359f797febf703d538f5b9d6c5ca4bee316b22733533b8b5f82dee652c6068d5fffc6efd888a776e45b859f008fe677e4a1bccbdd14040ce40b86ab8b0fd2dcba4c8fc9e29fd90923f2aa24577ae8b2614c71e3726bc3e6a26b9e5c7d490e09d75f389a7823519fbed52fa59087e3de7b5ecad94a484e9a99b8464ab7146168ed05259cf4c422d4b49889a54acf8e3c5955fbe50f5f", &(0x7f0000000f80)=""/80, &(0x7f0000001000)="080187e6a10b8d2bb150cf358672ab0c9e6aebbd99521d0d451ee2c91b6c6578f4ca8463cf2e2371d82d49c4c142ebb48885253ad07ca0f0ef3cc4b89e6091d814eea0f10ff7c31ca1b140ea29fb0be1d6e3f14b34de66f1193397421edbacd54910966327717f065f5fc54b8db5b5397a37a2e70b24b9a8447fa57947ed7dcd6085cf9b3598d6926f80e9d20b3e6b79c28bced291035989d8fef84d7084360176826102512e99266e44f266941dcfb1fe53ed7f4a5363e2", &(0x7f00000010c0)="627e03ce69dbbf83a5c304eb6d408383b11f5e8a7649409a69bd667639ee3fa6c723a46fb5e804fc478fb525aaad05c9c86e8d398c6bcb39855f33e44ec0a2180397af46fb0ae0556a00bd9f0d887ff6f4df1ea6ee7c0abfbf6fb9062caad564c1731ab501e5248d37dd064b668534136167e36477cd3848b05d721502e83d929d565a91a5084c3a5a1a065e462000ffce4e141f039ea190ee0819", 0x7, r7}, 0x38) sendmsg$nl_xfrm(r2, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x48040}, 0x20008001) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x7}, 0x10456, 0x0, 0x0, 0xf, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x3, 0x0, 0x6, 0x2, 0x1, 0xffffffffffffffad, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2e, 0x25dfdbfc, {0x0, 0x0, 0x12, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0xe, 0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x81, 0x0, 0x8, 0x6, 0x5}, 0x2, 0x1, 0x4, 0x3, 0x6, 0x13, 0x7, 0x1d, 0x2, 0x7, {0xe7a, 0x35, 0x5, 0x8, 0x3, 0x10}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x800c051}, 0x0) 5.78405213s ago: executing program 4 (id=6349): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000002062200000000000000000005000009"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x48854) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="64000000090603000000000000000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a31"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 5.623014114s ago: executing program 1 (id=6351): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x301002, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x75, 0x1ef7}, 0x222, 0x4, 0x98, 0x0, 0x2, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xf, &(0x7f0000000780)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="20004d5fc3d665bb1c9eb28fdff462af00003a000100fbff0700040000000100"], 0x20}}, 0x4008094) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xf7e5) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x14000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext={0x0, 0xc}, 0x718, 0x0, 0x0, 0x8, 0x3fe, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x1c, 0x26, 0x1, 0x8f0bd22, 0xfffffff9, {0x54}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000c953}, 0x4000000) close(0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x19, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 4.406617704s ago: executing program 1 (id=6358): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3, 0xfe}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {0x6, 0x0, 0x0, 0x20000}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xfffffffd}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x23, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000980), &(0x7f0000000a80), 0x7f, r2}, 0x38) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e381, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffb}, 0x8, 0x80000000, 0x0, 0x7, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400200000000003a}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x3) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$kcm(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000800)="8b", 0x1}], 0x1}, 0x24008800) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000180)=0x1) close(r3) mkdir(&(0x7f0000000040)='./file0\x00', 0x100) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x11a0cb0, &(0x7f0000000b80)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYRESHEX]) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000400007012ebd7000fedbdf25027c00001800c2"], 0x34}, 0x1, 0x0, 0x0, 0x4c080}, 0x404c010) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41000}, 0x94) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x40030) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4044881}, 0x0) 4.206351106s ago: executing program 4 (id=6359): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60004841}, 0x8000) 3.962269849s ago: executing program 4 (id=6363): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x401}, 0x10a60, 0x420000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, 0x0, 0xf0) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e80)=@o_path={&(0x7f0000000e40)='./file0\x00', 0x0, 0x4018}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="130000000200c50000fcffff0000008000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000000000000000100"/25], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x1b, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000004000000e70004000600000007110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000003224180008000000183b0000020000000000000000000000186600000a00000000000000060000001834000001000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000ae40ff0f4f0b0000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000880)='syzkaller\x00', 0x2, 0x52, &(0x7f00000008c0)=""/82, 0x41100, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c80)={0x5, 0x1, 0x100, 0x122d21cb}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000f80)=[0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r2], &(0x7f0000000fc0)=[{0x2, 0x3, 0xa, 0x9}, {0x1, 0x4, 0x2, 0x7}], 0x10, 0x60000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269b8, 0xaea}, 0x4010, 0x30, 0x10000, 0x8, 0x3, 0x90000000, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$kcm(0x2, 0x200000000000003, 0x106) syz_open_procfs$namespace(0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x0, 0x33, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_netprio_ifpriomap(r7, 0x0, 0x2, 0x0) write$cgroup_netprio_ifpriomap(r8, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'sit0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}) r9 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x1, 0x47}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000240)="513b5a9c0c0000fb4c4241fc055d", 0x5ea}], 0x1}, 0x40080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 3.395169172s ago: executing program 1 (id=6368): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000200000004000000020000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x2000300, 0xb, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a98000000060a010400000000000000000a0004050900010073797a31000000006c000480680001800a000100696e6e65720000005800028008000440000000123400056b0c0001007061796c6f616400240002800800034000000092080002400000000408000440000000f5080001400000000b0800034000000002080002400000008408000140000000000900020073797a3200000000140000001100010000000000000000000100000a"], 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xefc, 0x30, 0xb, 0x0, 0x0, {}, [{0xee8, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe9c, 0x2, 0x0, 0x0, {{0xa}, {0xe70, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0xfffffffd, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x9, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x400}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0xffffffff, 0x4, 0x0, 0x1, 0x1, 0x4}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0xffffffff}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007e, 0x8}, {0x3, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x5, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0xffffffff, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xde, 0x1000, 0x1, 0x6, 0xe0}, {0x800800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xaa82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x12f, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x34}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x100007}, {0x6, 0x6, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xefc}}, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x2}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10000, 0x100, 0x200, 0x0, 0x0, 0xf000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="020a0909020000002bbd7000fddbdf2c"], 0x10}}, 0x20000044) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000940)='\'', 0x1}, {&(0x7f0000001b00)="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", 0xec0}], 0x2, &(0x7f00000029c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r5, &(0x7f0000002a00)={0x0, 0x0, 0x0}, 0x162) sendmsg$kcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4004850) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.285476405s ago: executing program 3 (id=6369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000002062200000000000000000005000009"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x48854) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="64000000090603000000000000000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a31"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 3.096258732s ago: executing program 3 (id=6370): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x12, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_DIFFSERV_MODE={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004080}, 0x8084) (fail_nth: 2) 3.024865716s ago: executing program 0 (id=6371): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3, 0xfe}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {0x6, 0x0, 0x0, 0x20000}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xfffffffd}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x23, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000980), &(0x7f0000000a80), 0x7f, r2}, 0x38) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e381, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffb}, 0x8, 0x80000000, 0x0, 0x7, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400200000000003a}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x3) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$kcm(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000800)="8b", 0x1}], 0x1}, 0x24008800) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000180)=0x1) close(r3) mkdir(&(0x7f0000000040)='./file0\x00', 0x100) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x11a0cb0, &(0x7f0000000b80)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYRESHEX]) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000400007012ebd7000fedbdf25027c00001800c2"], 0x34}, 0x1, 0x0, 0x0, 0x4c080}, 0x404c010) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41000}, 0x94) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x40030) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4044881}, 0x0) 3.020818708s ago: executing program 4 (id=6372): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x14905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000003000)={0x20, 0x3a, 0x1, 0x7fffa, 0x4, {0x1, 0x0, 0xea}, [@typed={0xc, 0xec, 0x0, 0x0, @u64=0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 2.898476032s ago: executing program 1 (id=6374): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000002b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x0, 0x4, 0x98, 0x4, 0x4e53, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1c, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0xc, &(0x7f0000000840)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xf) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x12, r7, {0x0, 0xf}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_DIFFSERV_MODE={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004080}, 0x8084) 2.840525765s ago: executing program 3 (id=6375): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1c, 0xe, &(0x7f0000000040)=ANY=[@ANYBLOB="1358c7b356fa58348f90dd3e21b5a3269ab3dbb3c1fa35aa02"], &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0600000004000000ff0f000005"], 0x50) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1, 0xd, &(0x7f0000000f40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001000)=r2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x4, &(0x7f0000001340)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x0, 0xc, &(0x7f0000001440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0x14, &(0x7f0000001540)=ANY=[@ANYRES32=0x0], &(0x7f0000001580)='syzkaller\x00', 0x40000000, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000015c0)={r3}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001600)={0x6, 0x1e, &(0x7f00000016c0)=ANY=[@ANYBLOB="180000000700000000000000400b000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000950000000000000018270000", @ANYRES32, @ANYBLOB="0000000006baef3d91cccc5355312ac0f99f508d00000085100000fdffffff1836000002", @ANYRES32, @ANYBLOB="0000000000000000b7080000f8ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000017c0)='GPL\x00', 0x4, 0xe4, &(0x7f0000001800)=""/228, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001900)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0xc, 0x4, 0x4f}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001980)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000019c0)=[{0x3, 0x2, 0xa, 0x1}], 0x10, 0xc27}, 0x94) r4 = socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000001a80)={0x1, 0x80, 0xe, 0xf0, 0x8, 0xfe, 0x0, 0x3, 0x2000, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xa, 0x4, @perf_config_ext={0x6, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x81, 0x2, 0x4, 0x0, 0x4, 0x0, 0x9}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b80)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x2004094}, 0x8040) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000001cc0)={r4}) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000002040), 0x43) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)=ANY=[@ANYRESHEX], 0x14}, 0x1, 0x0, 0x0, 0x448c0}, 0x3d773c3f063da69b) sendmsg$nl_generic(r6, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002180)={&(0x7f00000021c0)=ANY=[@ANYBLOB="280000003900250825bd7000fadbdf250f000000140007800800028004005e8008001b00", @ANYRESHEX, @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0) r7 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000022c0), 0x43) write$cgroup_subtree(r4, &(0x7f0000002300)=ANY=[], 0x101d0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) 2.554010603s ago: executing program 0 (id=6376): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, 0x0, 0x3a, 0x0, 0x1, 0x327}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004e884}, 0x0) r0 = getpid() r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x2c, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000014) 2.340105757s ago: executing program 3 (id=6378): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xc, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="150a00000000000061114b00000000009500000040000000"], &(0x7f00000001c0)='GPL\x00'}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x11c266, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, r0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="dc0300002300000129bd7000fddbdf251a00000008008a00", @ANYRES32=r1, @ANYBLOB="f9edaafbedf61a61a20eb94042bb4dd437db090c42f49c3e32d382a9ecdd10fca5daca56140428ef542e1710cada338c88a93ae906ed0ce18df032810f26a0b900afd25879de9ca16b535df39767ea435f6823aa5a0b81f12ecdc7530e0f36cd4ef3af72e49ff16ef002641b7d2c6b3eab86b236726468fd178b9711b78b41d5c8a7ca562a8acf027d5e21c02f532a0fc1fb30208d4dbbbafb2c83146d016e1b7e473c99a4670e67d53e3ed5a499ee36db81df5207dbd890ca7258a10946cca7f135467776bf15a8cf64cbc8e4bb092d341dc609b954752d31465d4cc4188619203e7bd0cd2de871ea953aff54c6d6137a2cbf58343d95503a540f522425eb1b31bf9bb3f840d1f4956d3ef4e9d4ad922e88fa3714a8e69a246374b1d8a48f0968cf888294919fa012548cdcc5fce8748726033f25dea84444998fef73afd2f76af3b8743020e1f17d6329b374c11018f98732cee12cc179c9db73de2dc1002873c1cfcbc37758813904dfc22ed6aa58789708137ff28bc7b80c12e25baead9716e386f6f7d5ec813cc74cae61ad442d6876f6fa7f3dfc08", @ANYRES32=0x0, @ANYBLOB="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"], 0x3dc}, 0x1, 0x0, 0x0, 0x4080}, 0xd0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1d, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x37, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000900)) r2 = perf_event_open(&(0x7f0000000940)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x88, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc012, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000009c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r2, 0x8) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a3100000000080041007278650014003300626f6e645f736c6176655f31000000008f39f01abebb610d11035ac22809e9acf612e812d20dfbb9abd9f4a6b016f39d671c98b5fbd55a3556d3d75c18b59c3bdd2a5b6c2751bd49a8bb2cfbe34208201aac30bdbd5f5c48fee3d1cbb88c236315d4e3eb01ebb02314097f97a18d3ed1c027a67e33370db9bc598615803c53eca28d75db1faf9b97d0ca08516f8cb56b318c027c28518ad4975851903a4327b093b6c0fd8245326a542196f4d2"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c00)) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$unix(r4, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x5, &(0x7f0000000d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xf0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e00)) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x19, 0x0, 0x0, &(0x7f0000000f00)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf}, 0x94) socketpair(0x1f, 0x0, 0xb581, &(0x7f0000000f40)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000f80)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000001000)) socket$nl_netfilter(0x10, 0x3, 0xc) 2.157518556s ago: executing program 0 (id=6379): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000d80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0), 0x1d4}, 0x48) perf_event_open(&(0x7f0000000e00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x3, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7faa}, 0x800, 0x9, 0x7, 0x7, 0x10000, 0x2, 0x4, 0x0, 0x2004, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000080), 0xcf) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="0213020902000000e4a17c4e2ca18baa", 0x10}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x5, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000001040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x40) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={0x0, 0x6c}}, 0x0) sendmsg$kcm(r8, &(0x7f00000011c0)={&(0x7f0000001200)=@hci={0x1f, 0x0, 0x4}, 0xd0, &(0x7f0000001280), 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001d80)={0x1}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001e40)={{0x1}, &(0x7f0000001dc0), &(0x7f0000001e00)='%pi6 \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001f00)={0x11, 0x27, &(0x7f0000001640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x28}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_query, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7e6}}, @alu={0x7, 0x0, 0x5, 0x2, 0xb, 0xfffffffffffffffe, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001780)='syzkaller\x00', 0x7f, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000018c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001900)={0x1, 0xa, 0x225, 0x10ce}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001e80), &(0x7f0000001ec0)=[{0x3, 0x5, 0x6}, {0x5, 0x4, 0xb, 0xc}, {0x5, 0x1, 0xc, 0x1}]}, 0x94) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x4050}, 0x40000c4) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000001340)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000013c0)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x26000880) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r9, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x20004040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e80)={r0, 0x300f000, 0xe, 0x0, &(0x7f0000000f00)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.138261453s ago: executing program 2 (id=6380): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x2000300, 0xb, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a98000000060a010400000000000000000a0004050900010073797a31000000006c000480680001800a000100696e6e65720000005800028008000440000000123400056b0c0001007061796c6f616400240002800800034000000092080002400000000408000440000000f5080001400000000b0800034000000002080002400000008408000140000000000900020073797a3200000000140000001100010000000000000000000100000a"], 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xefc, 0x30, 0xb, 0x0, 0x0, {}, [{0xee8, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe9c, 0x2, 0x0, 0x0, {{0xa}, {0xe70, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0xfffffffd, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x9, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x400}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0xffffffff, 0x4, 0x0, 0x1, 0x1, 0x4}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0xffffffff}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007e, 0x8}, {0x3, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x5, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0xffffffff, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xde, 0x1000, 0x1, 0x6, 0xe0}, {0x800800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xaa82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x12f, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x34}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x100007}, {0x6, 0x6, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xefc}}, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x2}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10000, 0x100, 0x200, 0x0, 0x0, 0xf000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="020a0909020000002bbd7000fddbdf2c"], 0x10}}, 0x20000044) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000940)='\'', 0x1}, {&(0x7f0000001b00)="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", 0xec0}], 0x2, &(0x7f00000029c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r5, &(0x7f0000002a00)={0x0, 0x0, 0x0}, 0x162) sendmsg$kcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4004850) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.843254917s ago: executing program 0 (id=6381): ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0xffffffff) perf_event_open(&(0x7f0000000040)={0x9, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x58}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0xeaff) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000000000000007a56c198b7a3763dc000000"], 0x18}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xfffffffc, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x3, &(0x7f0000000380)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x110, 0x71, 0x10, 0x51}}, &(0x7f00000003c0)='syzkaller\x00'}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x2, 0x1, 0x0, 0x7}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x1c1842, 0x0) r3 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x114, 0x7, 0x0, 0xa0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8983, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x120) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x7, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0xe02a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000ac0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe80"], 0xfdef) 1.692290676s ago: executing program 1 (id=6382): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() perf_event_open(&(0x7f0000001580)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x29, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000001600)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x5, 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000001780)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000017c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200, 0x2, @perf_config_ext={0xff, 0xfffffffffffffffb}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001840)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0xc, 0x8, &(0x7f0000001940)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000001980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000019c0)={r2, 0x3e8, 0xe80, 0x0, &(0x7f0000001a40)="c1df07000000d30a298ee688884787", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.568272301s ago: executing program 2 (id=6383): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x5828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) (fail_nth: 1) 1.380536539s ago: executing program 3 (id=6384): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000003080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f00000001c0)={0x4, &(0x7f0000000200)=[{0x45, 0x0, 0x2, 0x2}, {0x3d}, {0x2, 0x0, 0xd, 0x7}, {0x6}]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000800)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000280)=ANY=[], 0x0, 0x3a, 0x0, 0x1, 0x327}, 0x28) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x18, 0x43, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@typed={0x4, 0x70, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1e, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688655887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 789.67315ms ago: executing program 2 (id=6385): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x1, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000a00)={0x0, 0xa6, &(0x7f0000000b40)=[{&(0x7f0000000c40)="64000000120001060000000000000000000000003f000000000000000000000010001d0076657468300000000000000025001200080001007665746818000000000001000005e2cf6c50a3070010000300766574683100000000000000cf13b7feedeb9e", 0x64}], 0x1}, 0x0) 572.086238ms ago: executing program 2 (id=6386): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)}], 0x1}, 0x41) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x94}, @NFTA_SET_DESC={0x4}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x84}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a00"/42], 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e007375"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000000608)="090000000400", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r2, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x5) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000040)=r1, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00001008c0)={0xc0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000100940)={0x8, 0x23, &(0x7f0000100700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffff899, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @printk={@lld}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000100840)='GPL\x00', 0x3ff, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x6, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000100900)=[{0x2, 0x3, 0x2, 0x1}, {0x4, 0x2, 0xb}, {0x4, 0x3, 0xf, 0xb}], 0x10, 0x7}, 0x94) 439.263753ms ago: executing program 0 (id=6387): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e381, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x5, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="bf16000000000000b7020000300000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000005c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000680)="0000000000002d9d8aaf5dc79048", 0x0, 0x8ce3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, 0x0, 0x300068c1) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, 0x0, 0x20000811) r3 = socket$netlink(0x10, 0x3, 0x6) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005e00010c5d5286000000000254d41f7c060000006a"], 0x1c}], 0x1}, 0x8000) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x70, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x40805}, 0x20000080) r4 = socket$kcm(0x10, 0x2, 0x4) mkdir(&(0x7f00000006c0)='./file0\x00', 0x2) sendmsg$inet(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4040010) 434.70335ms ago: executing program 1 (id=6388): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x5, &(0x7f0000000500)=ANY=[@ANYRESDEC=r0], &(0x7f0000000540)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x105006, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newsa={0x148, 0x24, 0x1, 0x70bd28, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x2, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x56, 0x2, {{'cbc(twofish)\x00'}, 0x70, "1a000b0000849a73904500240000"}}]}, 0x148}}, 0x44050) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(0xffffffffffffffff) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={0x0}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1, 0xe, 0x0, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000b00), 0x8, 0x10, &(0x7f0000000b40), 0x10}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b80)={0xffffffffffffffff}) recvmsg(r6, 0x0, 0x10001) r7 = socket$kcm(0xa, 0x1, 0x106) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x94, 0x3d, 0x100, 0x70bd2a, 0x25dfdbff, {0x1c}, [@typed={0x71, 0xa7, 0x0, 0x0, @binary="1877758985fbb85461bcb30d7a428e02a2b9e1c6e618503a04a29ac71325bc4d934929fe964de44a12f36bc6c179662699f61a78e7080b8b3e2533fc850da0c91270cf384accdffbfacfe56fe2b178b1cf672102a47ca1b522f1196ba4da4fb7713dbfe1aa8ae456a08e41923a"}, @typed={0xc, 0x14f, 0x0, 0x0, @u64=0xa}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x20004040) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x3f7, 0x20, 0x70bd25, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x2000c042) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0xa}, 0x6}, 0x80, 0x0}, 0x2004c001) sendmsg$kcm(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x48010) 350.702895ms ago: executing program 3 (id=6389): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002600010022bdf0a0a568f3ff7f0000"], 0x1c}, 0x1, 0x0, 0x0, 0x1000c953}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xa, 0x1}}}, 0x24}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_user\x00', 0x26e1, 0x0) fstat(r4, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000440)=r4, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x3, 0x8, &(0x7f0000000980)=ANY=[@ANYRES64], &(0x7f0000001b40)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001bc0)={@fallback=r5, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001c00)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001c40)={@cgroup=r5, r6, 0x2f, 0x2020, 0x4, @void, @void, @value=r8, @void, r7}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001cc0)=@base={0x1, 0x4, 0x4, 0xa, 0xc90, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d40)={{r9}, &(0x7f0000001d80), &(0x7f0000001dc0)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001f40)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x6, 0x44, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x1}, 0x114b05, 0x4, 0x0, 0x4, 0x8, 0x4000, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001fc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4f64, 0x830d}, 0x14f00, 0x3, 0xfffffffc, 0x1, 0x0, 0x0, 0xcf35, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002140)={0x6, 0x3, &(0x7f0000002200)=ANY=[], &(0x7f0000002240)='syzkaller\x00'}, 0x94) mkdir(&(0x7f00000022c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xf2) 346.759858ms ago: executing program 2 (id=6390): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0xe, 0x4, 0x0, &(0x7f0000001880)='GPL\x00', 0x4, 0xc3, &(0x7f00000018c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000019c0), 0x8, 0x10, &(0x7f0000001a00), 0x10}, 0x94) perf_event_open(&(0x7f0000001a40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, 0x2b, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x2, 0x0, 0x1, [@nested={0x5, 0x78, 0x0, 0x1, [@generic='\x00']}]}, @nested={0x4, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002b00070127bd700000000000017c00000c000280058078805e000000040007"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) bpf$MAP_CREATE(0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) 11.889868ms ago: executing program 4 (id=6391): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70500000000e000720a23fe000000008500000012000000b70000000000000095000000000000004e6258941c823b7505608556ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd42abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ef88bc333fbcec0ea4334844d232279ae95a90fd41d528f58d305000000435883df6c10ce86188c92292b2d0226082960be682836bdff8b0971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da000ef78df03000000d19913a5fb03c79dac2e489f68127892658115e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517000026637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc928b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba0fa978f41eb1d4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e717f694018630366397266090a82343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d8081cb3bf251d906c00da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa461fc54401a76406db718d4efd6c1bd10ce1d087cf9bba461162555a95524c84df0952d32093082b7aa71304e0d2d9ec310d1b676b378a5879e47941de1a28c3a8f400000000000000000e032b7d2badd0bc6617a859b7ac273b6304555f664469cec152030f06cc0ca1765838eb5590264736fbccfc3a8f4e3b10daf6a275daf5db2dac7096fe8ac8876acaad043663b3b0fedb05e6d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e8807107f79ac50cc1d4f546b4443d137eb706b71b1767a10cca7a7c82b76c96e874aff249f36329a6526b354b6e674b08f7ef492b804c4b08fb10de807d79fd782027318cd7632e22d2faa16209272b39b5ec8d239832ea02cc88e249a2e77753a58987547571fbc8de747faab724bebb6401412b496e078fcb6c78ab447e871b76a8b0506f49594aa1d610567e14d739a60ff3ce04d0d2e5681e787c7e1ad25467bb81f2f448128207fe07a83759ec30cf9e0a3fd3f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca430a62d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf80200ce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d4573aad5f6501d1cd27657ce17330402dacb78d72d776330711645eed7d4c292f4448733c0826c4eb950f3d40457f82d7f792d106518f6bde874aff9e2bea7d73f74bebeeacfc700000000000000000000d40d73be47803297db004264c8c70b7761b22a7114a078a87d63d63b0c9dcc263a5b773bfeba212abef4181ad9e4872e328c0f105d51e3d167a2b717051d7681ba04552eeba18a000000b22b50d76d85040c9000ea68a528049a60d5e26b20455194f4be3b8466fd66d0e6cefcff7891c485d61cb66f4076cd60a22733cb00cf7cc12ca7d9bb864c0e650236a79a5c85349a9b1e6bbc3bace197e72490c566431cd3a08e9d1b641c1ba1f661d01573b904c3fa1427370fa15cecd294ac21fefe3d161fdf58e8bc5957ef145839f4370176e1be88d2e3516a1998c1621a00b4438b85a4dfee6f61827a1e50e158038b037dfda3ffb35069e41fc740ae720800de53948f176c3c15f3a529c02434b920d87f12a6e3420a2fdcb3559e7a5b1ddbb06b7a5977f63bfac701e673bf626d126b213c92e7169a930beb8d76f9db34e8098bea301baa96916d6458c923866dc192928b320738d1b298fb55f2a64500000000000000000000000000509885a38d9d995a46817e7ff7acddcc5f9253c63f86baf33f92820c9ff497cf76b6482c3ab53fb6ecea6d220b91b99b2fb4279ab09ae0645ab92df309000000000000a4868411948f8e3e259b717d722a1eebd3f6860a17f1ae9e10a1178f6aef4951b192d13e9600c1f700ca7b1d127e451034469bf2a8f93dbae6ad8e932e431dc18323794156238625bb9c45c5a76a68a8646e701b29a71ffbd854f50f195823106a5625ff94221f1f04c72525b50aae69081de9626de9847bf53475d90642d9730101d80b1b0000000000000000822b0641698d60160d9157548302dd2636d12c431f96728ae4a45361e6d47a1c4a52d67c0f0a62585c09fcfd70d0f249f87c44b47283c1c6f2430d70c751e4ada9b646e6e7c1719faee476d88a2943c71a21db55b7497dd7ed385ac2e8cb916390a3a0ed52e7371e1a141e69afa07b46ac20f3521fb251b72c82ee1c7eb4f67c0deed5618d0db925ce7a7c50a99835544c540f5d528587d1a26e78df1bc9a8e4d90c57d0b8122eae7b23e4456624f5337c16c42648c7a3d0b799ad409befe0cbe2aa781ba826918df7aa80dff4f62258e54419629eb1d37de7f6a3512bd618781d1ad3a4d4b0da44df9f9a93f0487f79a9b16dfa6f68b06ce6a96ca344d194cded05702c2300d1a4f451b33830765f8131f6c28fada65701851bba089b8a8347900e72d68cea965feb6a06225dd3f0e135323a5bde3b43c9d242b73abf9e05336af040a4a6bb5918146393f1d50705c1d1e986bf2f690de51ee8727d37339df5391db535bb1e9bb3e5dadb6e5a2bb4faa2dcbc6ca9b40ac96e448b9dadeb08fc2cf3a960f22bf20b9e967b7a75687372b8e3edc543896c360674d901a7f56b07ba1479b46eea3d94026a9c7e670ab40bb2c1ca1a7c90299361239bef773140af974c7efc285a64633d21513481b3ac62dec9fa3e8ce6156d76b82baa145bc550b0ccbc0934ccfea45292caa2f0654fe18dc0669a4f2af9fa232a293ad94261f55675cc686db72783a6bacc0df6a1ea943ae266af112f35319980cd681811a369e0d03cf7d22bed7cbe1afe498b88942b1bf7edae441a0d0d88fce65cb4e848793a28cbd7373f6acd3b5a48c034e487750388929d37fa3165f205dab3be5f3e5781a84298687cbf02dcaf0e14a2b260293f349d076eb75a2ddc5382d106f0beea02aa45018fe36d1176cf7704383b6922d10dc80bc7feca3982ae232d4bb47c722c83a7cf6ee8832f038b072eb803a47cd7f753e80c9f6eedb8"], &(0x7f0000000d80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0), 0x1d4}, 0x48) perf_event_open(&(0x7f0000000e00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x3, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7faa}, 0x800, 0x9, 0x7, 0x7, 0x10000, 0x2, 0x4, 0x0, 0x2004, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000080), 0xcf) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="0213020902000000e4a17c4e2ca18baa", 0x10}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x5, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000001040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x40) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={0x0, 0x6c}}, 0x0) sendmsg$kcm(r8, &(0x7f00000011c0)={&(0x7f0000001200)=@hci={0x1f, 0x0, 0x4}, 0xd0, &(0x7f0000001280), 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001d80)={0x1}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001e40)={{0x1}, &(0x7f0000001dc0), &(0x7f0000001e00)='%pi6 \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001f00)={0x11, 0x27, &(0x7f0000001640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x28}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_query, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7e6}}, @alu={0x7, 0x0, 0x5, 0x2, 0xb, 0xfffffffffffffffe, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001780)='syzkaller\x00', 0x7f, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000018c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001900)={0x1, 0xa, 0x225, 0x10ce}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001e80), &(0x7f0000001ec0)=[{0x3, 0x5, 0x6}, {0x5, 0x4, 0xb, 0xc}, {0x5, 0x1, 0xc, 0x1}]}, 0x94) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x4050}, 0x40000c4) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000001340)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000013c0)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x26000880) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r9, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x20004040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e80)={r0, 0x300f000, 0xe, 0x0, &(0x7f0000000f00)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 11.320155ms ago: executing program 0 (id=6392): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x100cf4933d6a9b90, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) getpid() ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000011) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41d5d007}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000240), 0x6}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004430000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="02"], 0x48) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0x2, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 0s ago: executing program 2 (id=6393): r0 = syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x1, @perf_bp={0x0, 0x4}, 0x114905, 0x0, 0x0, 0x0, 0x7, 0x4, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xa}, 0x50, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000dc0)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="458215c270467d42bba54f3938052841d97d3f9e25d023ae37e2e153db6365fd7c4a488b51714d571e18c4ced51f3e3db1aa80a6ccb76c8f24ca050e27db337d80b522f84579c4fad9eeba583cb3e4208a82ddd643d3cbcd9717a521a3", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x1c, 0x3a, 0x1, 0x7fffa, 0x4, {0x1}, [@typed={0x8, 0xec, 0x0, 0x0, @u32=0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) recvmsg(0xffffffffffffffff, 0x0, 0x40000180) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000480), 0x8, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={r3, 0x0, 0x30, 0x0, @void}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) recvmsg$kcm(r4, &(0x7f0000000700)={&(0x7f0000000740)=@phonet, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/85, 0x55}], 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r2, 0x1f00, 0xe, 0x0, &(0x7f0000000900)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0x0, 0xe, 0x0, &(0x7f0000000940)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000b80)=ANY=[@ANYBLOB="240000002f00090027bd9f0000000000040000000c00180002ac0f0005ac0f"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000040000000200"/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x10, &(0x7f0000000b80)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0xa2, 0x92, &(0x7f0000000c00)=""/146, 0x41100, 0x53, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000d00)={0x4, 0xe, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000d40), &(0x7f0000000d80)=[{0x5, 0x1, 0xe, 0x1}], 0x10, 0x6}, 0x94) r6 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x1, 0x25, &(0x7f00000005c0), 0x8) kernel console output (not intermixed with test programs): __vmalloc_node_range_noprof+0x5b4/0x1540 [ 1027.920618][T24423] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 1027.920646][T24423] __vmalloc_node_range_noprof+0x5b4/0x1540 [ 1027.920681][T24423] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 1027.920711][T24423] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1027.920734][T24423] ? apparmor_capable+0x126/0x170 [ 1027.920760][T24423] ? bpf_lsm_capable+0x9/0x20 [ 1027.920781][T24423] ? security_capable+0x7e/0x2c0 [ 1027.920811][T24423] ? bpf_check+0x1523/0x3560 [ 1027.920833][T24423] __vmalloc_noprof+0xd2/0x120 [ 1027.920855][T24423] ? bpf_check+0x1523/0x3560 [ 1027.920882][T24423] bpf_check+0x1523/0x3560 [ 1027.920906][T24423] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1027.920942][T24423] ? ktime_get_with_offset+0x93/0x2d0 [ 1027.920966][T24423] ? __pfx_bpf_check+0x10/0x10 [ 1027.920994][T24423] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1027.921027][T24423] bpf_prog_load+0x1594/0x1d60 [ 1027.921063][T24423] ? __pfx_bpf_prog_load+0x10/0x10 [ 1027.921111][T24423] __sys_bpf+0xd86/0xe00 [ 1027.921142][T24423] ? __pfx___sys_bpf+0x10/0x10 [ 1027.921177][T24423] ? __fget_files+0x2a/0x420 [ 1027.921217][T24423] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1027.921240][T24423] ? ksys_write+0x242/0x270 [ 1027.921264][T24423] ? __pfx_ksys_write+0x10/0x10 [ 1027.921289][T24423] __x64_sys_bpf+0xba/0xd0 [ 1027.921314][T24423] do_syscall_64+0x166/0x520 [ 1027.921338][T24423] ? trace_irq_disable+0x3b/0x140 [ 1027.921359][T24423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.921379][T24423] ? clear_bhb_loop+0x70/0xc0 [ 1027.921403][T24423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.921422][T24423] RIP: 0033:0x7f81ffd9e1d9 [ 1027.921440][T24423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1027.921457][T24423] RSP: 002b:00007f8200d23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1027.921478][T24423] RAX: ffffffffffffffda RBX: 00007f8200025fa0 RCX: 00007f81ffd9e1d9 [ 1027.921493][T24423] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 1027.921506][T24423] RBP: 00007f8200d23090 R08: 0000000000000000 R09: 0000000000000000 [ 1027.921519][T24423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1027.921530][T24423] R13: 00007f8200026038 R14: 00007f8200025fa0 R15: 00007fff6245f738 [ 1027.921561][T24423] [ 1027.921647][T24423] syz.1.5515: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1027.921720][T24423] CPU: 1 UID: 0 PID: 24423 Comm: syz.1.5515 Not tainted syzkaller #0 PREEMPT(full) [ 1027.921741][T24423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1027.921752][T24423] Call Trace: [ 1027.921760][T24423] [ 1027.921768][T24423] dump_stack_lvl+0xe8/0x150 [ 1027.921797][T24423] warn_alloc+0x24d/0x270 [ 1027.921825][T24423] ? __pfx_warn_alloc+0x10/0x10 [ 1027.921853][T24423] ? __kmalloc_node_noprof+0x4d7/0x720 [ 1027.921875][T24423] ? __get_vm_area_node+0x200/0x2f0 [ 1027.921894][T24423] ? __get_vm_area_node+0x283/0x2f0 [ 1027.921913][T24423] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 1027.921933][T24423] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 1027.921961][T24423] __vmalloc_node_range_noprof+0x969/0x1540 [ 1027.921997][T24423] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 1027.922027][T24423] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1027.922051][T24423] ? apparmor_capable+0x126/0x170 [ 1027.922075][T24423] ? bpf_lsm_capable+0x9/0x20 [ 1027.922095][T24423] ? security_capable+0x7e/0x2c0 [ 1027.922124][T24423] ? bpf_check+0x1523/0x3560 [ 1027.922146][T24423] __vmalloc_noprof+0xd2/0x120 [ 1027.922167][T24423] ? bpf_check+0x1523/0x3560 [ 1027.922194][T24423] bpf_check+0x1523/0x3560 [ 1027.922225][T24423] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1027.922260][T24423] ? ktime_get_with_offset+0x93/0x2d0 [ 1027.922283][T24423] ? __pfx_bpf_check+0x10/0x10 [ 1027.922312][T24423] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1027.922344][T24423] bpf_prog_load+0x1594/0x1d60 [ 1027.922380][T24423] ? __pfx_bpf_prog_load+0x10/0x10 [ 1027.922430][T24423] __sys_bpf+0xd86/0xe00 [ 1027.922462][T24423] ? __pfx___sys_bpf+0x10/0x10 [ 1027.922496][T24423] ? __fget_files+0x2a/0x420 [ 1027.922530][T24423] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1027.922552][T24423] ? ksys_write+0x242/0x270 [ 1027.922575][T24423] ? __pfx_ksys_write+0x10/0x10 [ 1027.922601][T24423] __x64_sys_bpf+0xba/0xd0 [ 1027.922626][T24423] do_syscall_64+0x166/0x520 [ 1027.922646][T24423] ? trace_irq_disable+0x3b/0x140 [ 1027.922666][T24423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.922686][T24423] ? clear_bhb_loop+0x70/0xc0 [ 1027.922708][T24423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.922728][T24423] RIP: 0033:0x7f81ffd9e1d9 [ 1027.922744][T24423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1027.922760][T24423] RSP: 002b:00007f8200d23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1027.922778][T24423] RAX: ffffffffffffffda RBX: 00007f8200025fa0 RCX: 00007f81ffd9e1d9 [ 1027.922792][T24423] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 1027.922805][T24423] RBP: 00007f8200d23090 R08: 0000000000000000 R09: 0000000000000000 [ 1027.922817][T24423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1027.922829][T24423] R13: 00007f8200026038 R14: 00007f8200025fa0 R15: 00007fff6245f738 [ 1027.922858][T24423] [ 1027.923000][T24423] Mem-Info: [ 1027.923010][T24423] active_anon:19397 inactive_anon:0 isolated_anon:0 [ 1027.923010][T24423] active_file:8 inactive_file:62372 isolated_file:0 [ 1027.923010][T24423] unevictable:0 dirty:415 writeback:0 [ 1027.923010][T24423] slab_reclaimable:11560 slab_unreclaimable:108155 [ 1027.923010][T24423] mapped:30450 shmem:9255 pagetables:1256 [ 1027.923010][T24423] sec_pagetables:0 bounce:0 [ 1027.923010][T24423] kernel_misc_reclaimable:0 [ 1027.923010][T24423] free:1278078 free_pcp:14306 free_cma:0 [ 1027.923060][T24423] Node 0 active_anon:77588kB inactive_anon:0kB active_file:32kB inactive_file:249284kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121800kB dirty:1656kB writeback:0kB shmem:37020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12040kB pagetables:4892kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1027.923114][T24423] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1027.923189][T24423] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1027.923250][T24423] lowmem_reserve[]: 0 2467 2467 2467 2467 [ 1027.923285][T24423] Node 0 DMA32 free:1164304kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:77588kB inactive_anon:0kB active_file:32kB inactive_file:249284kB unevictable:0kB writepending:1656kB zspages:0kB present:3129332kB managed:2527208kB mlocked:0kB bounce:0kB free_pcp:57224kB local_pcp:13384kB free_cma:0kB [ 1027.923341][T24423] lowmem_reserve[]: 0 0 0 0 0 [ 1027.923375][T24423] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1027.923426][T24423] lowmem_reserve[]: 0 0 0 0 0 [ 1027.923459][T24423] Node 1 Normal free:3932648kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1027.923515][T24423] lowmem_reserve[]: 0 0 0 0 0 [ 1027.923547][T24423] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1027.923662][T24423] Node 0 DMA32: 1225*4kB (UME) 942*8kB (UM) 395*16kB (UME) 1082*32kB (UME) 1050*64kB (UME) 362*128kB (UME) 102*256kB (UM) 69*512kB (UME) 32*1024kB (UM) 17*2048kB (M) 212*4096kB (UME) = 1164292kB [ 1027.923813][T24423] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1027.923936][T24423] Node 1 Normal: 2*4kB (UM) 4*8kB (UM) 4*16kB (UM) 2*32kB (UM) 7*64kB (UM) 3*128kB (UM) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 2*2048kB (U) 958*4096kB (M) = 3932648kB [ 1027.924146][T24423] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1027.924163][T24423] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1027.924179][T24423] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1027.924195][T24423] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1027.924220][T24423] 71631 total pagecache pages [ 1027.924233][T24423] 0 pages in swap cache [ 1027.924240][T24423] Free swap = 124996kB [ 1027.924247][T24423] Total swap = 124996kB [ 1027.924255][T24423] 2097051 pages RAM [ 1027.924262][T24423] 0 pages HighMem/MovableOnly [ 1027.924270][T24423] 433633 pages reserved [ 1027.924277][T24423] 0 pages cma reserved [ 1028.360996][T24426] wlan0 speed is unknown, defaulting to 1000 [ 1029.668295][T24443] netlink: 'syz.2.5522': attribute type 10 has an invalid length. [ 1030.289520][T24469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5533'. [ 1030.398377][T24464] netlink: 'syz.2.5531': attribute type 10 has an invalid length. [ 1030.679017][T24482] netlink: 'syz.3.5538': attribute type 10 has an invalid length. [ 1030.832594][T24482] team0: Device wg2 is of different type [ 1031.074595][T24490] netlink: 'syz.2.5540': attribute type 17 has an invalid length. [ 1031.479295][T24503] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5545'. [ 1032.386338][ T31] audit: type=1107 audit(1791654426.069:66): pid=24514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1032.667354][T24527] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5556'. [ 1032.755264][T24529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5555'. [ 1033.073276][T24540] FAULT_INJECTION: forcing a failure. [ 1033.073276][T24540] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.073312][T24540] CPU: 0 UID: 0 PID: 24540 Comm: syz.1.5558 Not tainted syzkaller #0 PREEMPT(full) [ 1033.073335][T24540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1033.073347][T24540] Call Trace: [ 1033.073355][T24540] [ 1033.073364][T24540] dump_stack_lvl+0xe8/0x150 [ 1033.073398][T24540] should_fail_ex+0x410/0x560 [ 1033.073432][T24540] should_failslab+0xa8/0x100 [ 1033.073461][T24540] ? skb_clone+0x212/0x3a0 [ 1033.073490][T24540] kmem_cache_alloc_noprof+0xa1/0x600 [ 1033.073516][T24540] ? skb_clone+0x212/0x3a0 [ 1033.073545][T24540] skb_clone+0x212/0x3a0 [ 1033.073570][T24540] __netlink_deliver_tap+0x413/0x860 [ 1033.073603][T24540] ? netlink_deliver_tap+0x2e/0x1b0 [ 1033.073628][T24540] netlink_deliver_tap+0x19c/0x1b0 [ 1033.073668][T24540] netlink_unicast+0x781/0x940 [ 1033.073700][T24540] netlink_sendmsg+0x813/0xb40 [ 1033.073737][T24540] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1033.073768][T24540] ? apparmor_socket_sendmsg+0x98/0x360 [ 1033.073801][T24540] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1033.073823][T24540] sock_sendmsg_nosec+0x13a/0x180 [ 1033.073852][T24540] ____sys_sendmsg+0x54e/0x850 [ 1033.073877][T24540] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1033.073907][T24540] ? import_iovec+0x73/0xa0 [ 1033.073941][T24540] ___sys_sendmsg+0x2a5/0x360 [ 1033.073960][T24540] ? __lock_acquire+0x747/0x2de0 [ 1033.073987][T24540] ? __pfx____sys_sendmsg+0x10/0x10 [ 1033.074044][T24540] ? __fget_files+0x2a/0x420 [ 1033.074064][T24540] ? __fget_files+0x3a2/0x420 [ 1033.074094][T24540] __x64_sys_sendmsg+0x1b1/0x290 [ 1033.074118][T24540] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1033.074149][T24540] ? trace_syscall_enter+0x58/0x110 [ 1033.074176][T24540] ? rcu_is_watching+0x16/0xb0 [ 1033.074200][T24540] ? trace_syscall_enter+0x58/0x110 [ 1033.074229][T24540] do_syscall_64+0x166/0x520 [ 1033.074250][T24540] ? trace_irq_disable+0x3b/0x140 [ 1033.074272][T24540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.074293][T24540] ? clear_bhb_loop+0x70/0xc0 [ 1033.074317][T24540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.074337][T24540] RIP: 0033:0x7f81ffd9e1d9 [ 1033.074356][T24540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1033.074373][T24540] RSP: 002b:00007f8200d23028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1033.074395][T24540] RAX: ffffffffffffffda RBX: 00007f8200025fa0 RCX: 00007f81ffd9e1d9 [ 1033.074410][T24540] RDX: 000000000400c0c0 RSI: 0000200000000100 RDI: 0000000000000003 [ 1033.074424][T24540] RBP: 00007f8200d23090 R08: 0000000000000000 R09: 0000000000000000 [ 1033.074437][T24540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1033.074449][T24540] R13: 00007f8200026038 R14: 00007f8200025fa0 R15: 00007fff6245f738 [ 1033.074482][T24540] [ 1033.377499][T24540] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5558'. [ 1033.708025][T24555] netlink: 'syz.1.5565': attribute type 3 has an invalid length. [ 1033.708048][T24555] netlink: 'syz.1.5565': attribute type 5 has an invalid length. [ 1033.749111][T24559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1033.782198][T24559] netlink: 'syz.0.5567': attribute type 10 has an invalid length. [ 1033.782240][T24559] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5567'. [ 1033.918847][T24563] tipc: Started in network mode [ 1033.919072][T24563] tipc: Node identity 805e0004, cluster identity 4711 [ 1033.919121][T24563] tipc: Node number set to 2153644036 [ 1033.925858][T24561] netlink: 'syz.2.5568': attribute type 10 has an invalid length. [ 1033.949655][T24561] geneve1: entered promiscuous mode [ 1034.066736][T24563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5569'. [ 1034.731376][T24589] netlink: 'syz.3.5575': attribute type 10 has an invalid length. [ 1034.750532][T24589] ipvlan0: entered allmulticast mode [ 1034.750567][T24589] veth0_vlan: entered allmulticast mode [ 1034.771230][T24589] team0: Device ipvlan0 failed to register rx_handler [ 1034.971688][T24598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1035.015752][T24598] netlink: 'syz.1.5579': attribute type 10 has an invalid length. [ 1035.015807][T24598] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5579'. [ 1035.080448][T24601] netlink: 'syz.3.5582': attribute type 3 has an invalid length. [ 1035.240395][T24609] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5585'. [ 1035.249729][T24605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5583'. [ 1035.425220][T24607] tc_dump_action: action bad kind [ 1035.491662][T24612] tmpfs: Bad value for 'uid' [ 1035.491705][T24612] tmpfs: Bad value for 'uid' [ 1035.573602][ T31] audit: type=1107 audit(1791654429.259:67): pid=24614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1035.590252][T24621] netlink: 468 bytes leftover after parsing attributes in process `syz.1.5590'. [ 1035.591960][T24621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5590'. [ 1035.619879][T24621] siw: device registration error -23 [ 1035.670478][T24625] validate_nla: 1 callbacks suppressed [ 1035.670496][T24625] netlink: 'syz.4.5591': attribute type 2 has an invalid length. [ 1036.105708][T24629] netlink: 'syz.4.5591': attribute type 49 has an invalid length. [ 1036.130735][ T31] audit: type=1107 audit(1791654429.819:68): pid=24633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1036.278175][T24637] tmpfs: Bad value for 'gid' [ 1036.278213][T24637] tmpfs: Bad value for 'gid' [ 1036.361644][T24642] netlink: 'syz.1.5598': attribute type 3 has an invalid length. [ 1036.361666][T24642] netlink: 'syz.1.5598': attribute type 5 has an invalid length. [ 1036.427477][ T31] audit: type=1107 audit(1791654430.119:69): pid=24643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1036.546129][T24651] tc_dump_action: action bad kind [ 1036.647815][T24654] netlink: 'syz.2.5603': attribute type 16 has an invalid length. [ 1036.647869][T24654] netlink: 'syz.2.5603': attribute type 3 has an invalid length. [ 1037.724605][ T31] audit: type=1107 audit(1791654431.359:70): pid=24672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1037.872991][T24668] __nla_validate_parse: 3 callbacks suppressed [ 1037.873011][T24668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5604'. [ 1038.164904][T24684] sit0: left promiscuous mode [ 1038.277940][T24691] netlink: 'syz.4.5615': attribute type 3 has an invalid length. [ 1038.277962][T24691] netlink: 'syz.4.5615': attribute type 5 has an invalid length. [ 1038.387339][T24695] tmpfs: Bad value for 'uid' [ 1038.387360][T24695] tmpfs: Bad value for 'uid' [ 1038.570750][T24687] sit0: entered promiscuous mode [ 1038.899768][T24716] netlink: 'syz.4.5621': attribute type 10 has an invalid length. [ 1039.307496][T24728] FAULT_INJECTION: forcing a failure. [ 1039.307496][T24728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1039.307532][T24728] CPU: 1 UID: 0 PID: 24728 Comm: syz.1.5626 Not tainted syzkaller #0 PREEMPT(full) [ 1039.307555][T24728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1039.307568][T24728] Call Trace: [ 1039.307577][T24728] [ 1039.307587][T24728] dump_stack_lvl+0xe8/0x150 [ 1039.307621][T24728] should_fail_ex+0x410/0x560 [ 1039.307654][T24728] _copy_to_user+0x31/0xb0 [ 1039.307676][T24728] bpf_test_finish+0x1cf/0x690 [ 1039.307708][T24728] ? __pfx____migrate_enable+0x10/0x10 [ 1039.307731][T24728] ? __pfx_bpf_test_finish+0x10/0x10 [ 1039.307756][T24728] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1039.307790][T24728] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1039.307831][T24728] bpf_prog_test_run_flow_dissector+0x478/0x610 [ 1039.307872][T24728] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1039.307901][T24728] ? __fget_files+0x2a/0x420 [ 1039.307926][T24728] ? __fget_files+0x2a/0x420 [ 1039.307949][T24728] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1039.307976][T24728] bpf_prog_test_run+0x2c5/0x340 [ 1039.308006][T24728] __sys_bpf+0xb1e/0xe00 [ 1039.308039][T24728] ? __pfx___sys_bpf+0x10/0x10 [ 1039.308065][T24728] ? __lock_acquire+0x747/0x2de0 [ 1039.308116][T24728] ? trace_syscall_enter+0x58/0x110 [ 1039.308154][T24728] __x64_sys_bpf+0xba/0xd0 [ 1039.308181][T24728] do_syscall_64+0x166/0x520 [ 1039.308202][T24728] ? trace_irq_disable+0x3b/0x140 [ 1039.308224][T24728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.308245][T24728] ? clear_bhb_loop+0x70/0xc0 [ 1039.308270][T24728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.308290][T24728] RIP: 0033:0x7f81ffd9e1d9 [ 1039.308310][T24728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1039.308328][T24728] RSP: 002b:00007f8200d23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1039.308350][T24728] RAX: ffffffffffffffda RBX: 00007f8200025fa0 RCX: 00007f81ffd9e1d9 [ 1039.308366][T24728] RDX: 000000000000004c RSI: 0000200000000800 RDI: 000000000000000a [ 1039.308380][T24728] RBP: 00007f8200d23090 R08: 0000000000000000 R09: 0000000000000000 [ 1039.308393][T24728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1039.308405][T24728] R13: 00007f8200026038 R14: 00007f8200025fa0 R15: 00007fff6245f738 [ 1039.308438][T24728] [ 1039.606135][T24734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5629'. [ 1039.717053][T24737] sit0: left promiscuous mode [ 1039.719271][T24740] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5632'. [ 1039.719384][T24740] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5632'. [ 1040.030982][T24741] sit0: entered promiscuous mode [ 1040.123157][T24749] netlink: 'syz.4.5634': attribute type 10 has an invalid length. [ 1040.871192][T24775] netlink: 'syz.2.5640': attribute type 10 has an invalid length. [ 1041.149947][T24779] FAULT_INJECTION: forcing a failure. [ 1041.149947][T24779] name failslab, interval 1, probability 0, space 0, times 0 [ 1041.149997][T24779] CPU: 1 UID: 0 PID: 24779 Comm: syz.1.5642 Not tainted syzkaller #0 PREEMPT(full) [ 1041.150023][T24779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1041.150035][T24779] Call Trace: [ 1041.150043][T24779] [ 1041.150053][T24779] dump_stack_lvl+0xe8/0x150 [ 1041.150087][T24779] should_fail_ex+0x410/0x560 [ 1041.150121][T24779] should_failslab+0xa8/0x100 [ 1041.150152][T24779] __kvmalloc_node_noprof+0x176/0x820 [ 1041.150180][T24779] ? __kvmalloc_node_noprof+0x345/0x820 [ 1041.150206][T24779] ? bpf_test_run_xdp_live+0x220/0x1c20 [ 1041.150230][T24779] ? bpf_test_run_xdp_live+0x220/0x1c20 [ 1041.150262][T24779] bpf_test_run_xdp_live+0x220/0x1c20 [ 1041.150298][T24779] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 1041.150329][T24779] ? __mutex_unlock_slowpath+0x731/0x900 [ 1041.150358][T24779] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1041.150385][T24779] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1041.150412][T24779] ? 0xffffffffa0404e40 [ 1041.150492][T24779] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1041.150526][T24779] ? _copy_from_user+0x94/0xb0 [ 1041.150545][T24779] ? bpf_test_init+0x113/0x150 [ 1041.150567][T24779] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1041.150595][T24779] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 1041.150634][T24779] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1041.150665][T24779] ? __fget_files+0x2a/0x420 [ 1041.150690][T24779] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1041.150716][T24779] bpf_prog_test_run+0x2c5/0x340 [ 1041.150747][T24779] __sys_bpf+0xb1e/0xe00 [ 1041.150779][T24779] ? __pfx___sys_bpf+0x10/0x10 [ 1041.150805][T24779] ? __lock_acquire+0x747/0x2de0 [ 1041.150856][T24779] ? trace_syscall_enter+0x58/0x110 [ 1041.150893][T24779] __x64_sys_bpf+0xba/0xd0 [ 1041.150919][T24779] do_syscall_64+0x166/0x520 [ 1041.150941][T24779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.150962][T24779] ? clear_bhb_loop+0x70/0xc0 [ 1041.150986][T24779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.151007][T24779] RIP: 0033:0x7f81ffd9e1d9 [ 1041.151025][T24779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1041.151042][T24779] RSP: 002b:00007f8200d23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1041.151063][T24779] RAX: ffffffffffffffda RBX: 00007f8200025fa0 RCX: 00007f81ffd9e1d9 [ 1041.151079][T24779] RDX: 0000000000000050 RSI: 0000200000000640 RDI: 000000000000000a [ 1041.151092][T24779] RBP: 00007f8200d23090 R08: 0000000000000000 R09: 0000000000000000 [ 1041.151105][T24779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1041.151117][T24779] R13: 00007f8200026038 R14: 00007f8200025fa0 R15: 00007fff6245f738 [ 1041.151150][T24779] [ 1041.819320][T24792] sit0: left promiscuous mode [ 1042.067336][T24793] sit0: entered promiscuous mode [ 1045.339632][T24824] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5657'. [ 1045.408938][T24827] tmpfs: Bad value for 'uid' [ 1045.408961][T24827] tmpfs: Bad value for 'uid' [ 1045.558369][T24833] sit0: left promiscuous mode [ 1045.652938][T24836] sit0: entered promiscuous mode [ 1048.877323][T24869] FAULT_INJECTION: forcing a failure. [ 1048.877323][T24869] name failslab, interval 1, probability 0, space 0, times 0 [ 1048.877407][T24869] CPU: 0 UID: 0 PID: 24869 Comm: syz.0.5672 Not tainted syzkaller #0 PREEMPT(full) [ 1048.877431][T24869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1048.877443][T24869] Call Trace: [ 1048.877452][T24869] [ 1048.877461][T24869] dump_stack_lvl+0xe8/0x150 [ 1048.877496][T24869] should_fail_ex+0x410/0x560 [ 1048.877533][T24869] should_failslab+0xa8/0x100 [ 1048.877566][T24869] __kmalloc_noprof+0xfe/0x720 [ 1048.877591][T24869] ? __fget_files+0x2a/0x420 [ 1048.877611][T24869] ? bpf_prog_bind_map+0x39b/0x6e0 [ 1048.877639][T24869] ? bpf_prog_bind_map+0x39b/0x6e0 [ 1048.877678][T24869] bpf_prog_bind_map+0x39b/0x6e0 [ 1048.877708][T24869] ? security_bpf+0x7e/0x2d0 [ 1048.877741][T24869] __sys_bpf+0xc0e/0xe00 [ 1048.877780][T24869] ? __pfx___sys_bpf+0x10/0x10 [ 1048.877822][T24869] ? __fget_files+0x2a/0x420 [ 1048.877868][T24869] ? ksys_write+0x242/0x270 [ 1048.877895][T24869] ? __pfx_ksys_write+0x10/0x10 [ 1048.877927][T24869] __x64_sys_bpf+0xba/0xd0 [ 1048.877962][T24869] do_syscall_64+0x166/0x520 [ 1048.877987][T24869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.878008][T24869] ? clear_bhb_loop+0x70/0xc0 [ 1048.878035][T24869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.878056][T24869] RIP: 0033:0x7fd46779e1d9 [ 1048.878076][T24869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1048.878094][T24869] RSP: 002b:00007fd4685b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1048.878117][T24869] RAX: ffffffffffffffda RBX: 00007fd467a25fa0 RCX: 00007fd46779e1d9 [ 1048.878133][T24869] RDX: 000000000000000c RSI: 0000200000000980 RDI: 0000000000000023 [ 1048.878147][T24869] RBP: 00007fd4685b5090 R08: 0000000000000000 R09: 0000000000000000 [ 1048.878160][T24869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1048.878173][T24869] R13: 00007fd467a26038 R14: 00007fd467a25fa0 R15: 00007ffffb5fae88 [ 1048.878213][T24869] [ 1049.176914][T24873] sit0: left promiscuous mode [ 1049.339244][T24871] sit0: entered promiscuous mode [ 1049.922053][T24878] netlink: 'syz.4.5675': attribute type 2 has an invalid length. [ 1049.922691][T24876] netlink: 'syz.4.5675': attribute type 13 has an invalid length. [ 1049.922729][T24876] netlink: 'syz.4.5675': attribute type 12 has an invalid length. [ 1051.563071][T24920] netlink: 'syz.4.5691': attribute type 16 has an invalid length. [ 1051.563143][T24920] netlink: 'syz.4.5691': attribute type 3 has an invalid length. [ 1051.565203][T24920] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5691'. [ 1051.651456][T24918] sit0: left promiscuous mode [ 1051.840397][T24921] sit0: entered promiscuous mode [ 1052.036230][T24926] siw: device registration error -23 [ 1053.040554][T24954] FAULT_INJECTION: forcing a failure. [ 1053.040554][T24954] name failslab, interval 1, probability 0, space 0, times 0 [ 1053.040606][T24954] CPU: 0 UID: 0 PID: 24954 Comm: syz.2.5703 Not tainted syzkaller #0 PREEMPT(full) [ 1053.040632][T24954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1053.040644][T24954] Call Trace: [ 1053.040652][T24954] [ 1053.040662][T24954] dump_stack_lvl+0xe8/0x150 [ 1053.040697][T24954] should_fail_ex+0x410/0x560 [ 1053.040730][T24954] should_failslab+0xa8/0x100 [ 1053.040762][T24954] __kmalloc_noprof+0xfe/0x720 [ 1053.040785][T24954] ? rcu_is_watching+0x16/0xb0 [ 1053.040812][T24954] ? tomoyo_realpath_from_path+0xef/0x640 [ 1053.040833][T24954] ? tomoyo_realpath_from_path+0xef/0x640 [ 1053.040861][T24954] tomoyo_realpath_from_path+0xef/0x640 [ 1053.040893][T24954] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1053.040923][T24954] tomoyo_path_number_perm+0x246/0x5f0 [ 1053.040953][T24954] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1053.040981][T24954] ? __lock_acquire+0x747/0x2de0 [ 1053.041018][T24954] ? irqentry_exit+0x218/0x910 [ 1053.041039][T24954] ? hook_file_ioctl+0x1f2/0x600 [ 1053.041088][T24954] ? __fget_files+0x2a/0x420 [ 1053.041112][T24954] ? __fget_files+0x2a/0x420 [ 1053.041130][T24954] ? __fget_files+0x3a2/0x420 [ 1053.041149][T24954] ? __fget_files+0x2a/0x420 [ 1053.041173][T24954] security_file_ioctl+0xc3/0x2a0 [ 1053.041203][T24954] __se_sys_ioctl+0x47/0x170 [ 1053.041231][T24954] do_syscall_64+0x166/0x520 [ 1053.041253][T24954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.041274][T24954] ? clear_bhb_loop+0x70/0xc0 [ 1053.041300][T24954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.041320][T24954] RIP: 0033:0x7f211079e1d9 [ 1053.041339][T24954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1053.041357][T24954] RSP: 002b:00007f211160e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1053.041379][T24954] RAX: ffffffffffffffda RBX: 00007f2110a25fa0 RCX: 00007f211079e1d9 [ 1053.041394][T24954] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000011 [ 1053.041408][T24954] RBP: 00007f211160e090 R08: 0000000000000000 R09: 0000000000000000 [ 1053.041421][T24954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1053.041434][T24954] R13: 00007f2110a26038 R14: 00007f2110a25fa0 R15: 00007ffc9fe2ef78 [ 1053.041467][T24954] [ 1053.041548][T24954] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1053.372537][T24959] sit0: left promiscuous mode [ 1053.472376][T24962] sit0: entered promiscuous mode [ 1053.627899][T24961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5706'. [ 1054.049039][T24965] netlink: 'syz.1.5707': attribute type 10 has an invalid length. [ 1054.071726][T24969] netlink: 'syz.4.5709': attribute type 16 has an invalid length. [ 1054.071745][T24969] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5709'. [ 1054.271501][T24969] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5709'. [ 1054.318791][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.318853][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.598737][T24980] tipc: Started in network mode [ 1054.598768][T24980] tipc: Node identity 805e0004, cluster identity 4711 [ 1054.598783][T24980] tipc: Node number set to 2153644036 [ 1054.616168][T24980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5712'. [ 1054.720662][T24988] netlink: 'syz.4.5715': attribute type 16 has an invalid length. [ 1054.720713][T24988] netlink: 'syz.4.5715': attribute type 3 has an invalid length. [ 1054.720741][T24988] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5715'. [ 1055.600395][T24998] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5719'. [ 1055.829594][T25000] sit0: left promiscuous mode [ 1056.195394][T25012] sit0: entered promiscuous mode [ 1056.297735][T25019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5725'. [ 1056.297814][T25019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5725'. [ 1056.325224][T25008] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5723'. [ 1057.760769][T25068] FAULT_INJECTION: forcing a failure. [ 1057.760769][T25068] name failslab, interval 1, probability 0, space 0, times 0 [ 1057.760804][T25068] CPU: 1 UID: 0 PID: 25068 Comm: syz.2.5739 Not tainted syzkaller #0 PREEMPT(full) [ 1057.760828][T25068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1057.760841][T25068] Call Trace: [ 1057.760851][T25068] [ 1057.760863][T25068] dump_stack_lvl+0xe8/0x150 [ 1057.760905][T25068] should_fail_ex+0x410/0x560 [ 1057.760956][T25068] should_failslab+0xa8/0x100 [ 1057.760994][T25068] __kmalloc_noprof+0xfe/0x720 [ 1057.761035][T25068] ? tomoyo_encode+0x2ad/0x570 [ 1057.761057][T25068] ? tomoyo_encode+0x2ad/0x570 [ 1057.761103][T25068] tomoyo_encode+0x2ad/0x570 [ 1057.761149][T25068] tomoyo_realpath_from_path+0x5fa/0x640 [ 1057.761206][T25068] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1057.761242][T25068] tomoyo_path_number_perm+0x246/0x5f0 [ 1057.761286][T25068] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1057.761319][T25068] ? __lock_acquire+0x747/0x2de0 [ 1057.761394][T25068] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1057.761421][T25068] ? hook_file_ioctl+0x1f2/0x600 [ 1057.761517][T25068] ? __fget_files+0x2a/0x420 [ 1057.761553][T25068] ? __fget_files+0x2a/0x420 [ 1057.761575][T25068] ? __fget_files+0x3a2/0x420 [ 1057.761598][T25068] ? __fget_files+0x2a/0x420 [ 1057.761638][T25068] security_file_ioctl+0xc3/0x2a0 [ 1057.761678][T25068] __se_sys_ioctl+0x47/0x170 [ 1057.761719][T25068] do_syscall_64+0x166/0x520 [ 1057.761744][T25068] ? trace_irq_disable+0x3b/0x140 [ 1057.761769][T25068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.761794][T25068] ? clear_bhb_loop+0x70/0xc0 [ 1057.761831][T25068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.761854][T25068] RIP: 0033:0x7f211079e1d9 [ 1057.761878][T25068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1057.761896][T25068] RSP: 002b:00007f211160e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1057.761920][T25068] RAX: ffffffffffffffda RBX: 00007f2110a25fa0 RCX: 00007f211079e1d9 [ 1057.761936][T25068] RDX: 0000200000000200 RSI: 00000000000089e2 RDI: 0000000000000004 [ 1057.761950][T25068] RBP: 00007f211160e090 R08: 0000000000000000 R09: 0000000000000000 [ 1057.761964][T25068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1057.761977][T25068] R13: 00007f2110a26038 R14: 00007f2110a25fa0 R15: 00007ffc9fe2ef78 [ 1057.762054][T25068] [ 1057.848670][T25068] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1058.390819][T25088] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5744'. [ 1058.460998][T25089] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5744'. [ 1058.711454][T25094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5746'. [ 1059.385149][T25109] netlink: 'syz.4.5751': attribute type 16 has an invalid length. [ 1059.385172][T25109] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5751'. [ 1059.730454][T25122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1059.869105][T25116] netlink: 'syz.2.5754': attribute type 10 has an invalid length. [ 1059.869148][T25116] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5754'. [ 1060.049044][T25128] netlink: 'syz.1.5756': attribute type 10 has an invalid length. [ 1060.266382][T25139] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5760'. [ 1060.446622][T25148] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5763'. [ 1060.481690][T25145] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 1060.709987][T25156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5766'. [ 1061.011251][T25165] tmpfs: Bad value for 'uid' [ 1061.011299][T25165] tmpfs: Bad value for 'uid' [ 1061.023640][T25165] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5769'. [ 1061.476883][T25179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5773'. [ 1061.656526][T25184] netlink: 'syz.2.5774': attribute type 39 has an invalid length. [ 1061.852780][ T31] audit: type=1107 audit(1791654455.539:71): pid=25185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1062.487528][T25206] netlink: 'syz.1.5780': attribute type 12 has an invalid length. [ 1062.492471][T25213] netlink: 'syz.4.5782': attribute type 16 has an invalid length. [ 1062.502089][T25206] netlink: 'syz.1.5780': attribute type 2 has an invalid length. [ 1062.856193][T25219] netlink: 'syz.1.5784': attribute type 10 has an invalid length. [ 1062.879785][T25226] netlink: 'syz.3.5787': attribute type 29 has an invalid length. [ 1063.126374][T25234] netlink: 'syz.2.5789': attribute type 10 has an invalid length. [ 1063.144122][ T31] audit: type=1107 audit(1791654456.829:72): pid=25231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1063.665324][T25253] __nla_validate_parse: 8 callbacks suppressed [ 1063.665397][T25253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5797'. [ 1064.141977][T25258] team0: Device ipvlan0 failed to register rx_handler [ 1064.357329][T25268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5800'. [ 1064.393233][T25277] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5804'. [ 1064.642866][T25288] tmpfs: Bad value for 'uid' [ 1064.642888][T25288] tmpfs: Bad value for 'uid' [ 1064.650907][T25288] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5808'. [ 1065.491753][T25301] FAULT_INJECTION: forcing a failure. [ 1065.491753][T25301] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1065.491786][T25301] CPU: 0 UID: 0 PID: 25301 Comm: syz.0.5812 Not tainted syzkaller #0 PREEMPT(full) [ 1065.491799][T25301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1065.491806][T25301] Call Trace: [ 1065.491811][T25301] [ 1065.491816][T25301] dump_stack_lvl+0xe8/0x150 [ 1065.491836][T25301] should_fail_ex+0x410/0x560 [ 1065.491854][T25301] prepare_alloc_pages+0x223/0x600 [ 1065.491872][T25301] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1065.491888][T25301] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1065.491904][T25301] ? __pfx_policy_nodemask+0x10/0x10 [ 1065.491926][T25301] alloc_pages_mpol+0x21e/0x390 [ 1065.491944][T25301] alloc_pages_noprof+0xb1/0x2b0 [ 1065.491960][T25301] bpf_prog_test_run_skb+0x148f/0x22c0 [ 1065.491989][T25301] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1065.492002][T25301] bpf_prog_test_run+0x2c5/0x340 [ 1065.492019][T25301] __sys_bpf+0xb1e/0xe00 [ 1065.492036][T25301] ? __pfx___sys_bpf+0x10/0x10 [ 1065.492065][T25301] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1065.492077][T25301] ? ksys_write+0x242/0x270 [ 1065.492091][T25301] ? __pfx_ksys_write+0x10/0x10 [ 1065.492105][T25301] __x64_sys_bpf+0xba/0xd0 [ 1065.492119][T25301] do_syscall_64+0x166/0x520 [ 1065.492131][T25301] ? trace_irq_disable+0x3b/0x140 [ 1065.492143][T25301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.492154][T25301] ? clear_bhb_loop+0x70/0xc0 [ 1065.492167][T25301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.492178][T25301] RIP: 0033:0x7fd46779e1d9 [ 1065.492192][T25301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1065.492202][T25301] RSP: 002b:00007fd4685b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1065.492214][T25301] RAX: ffffffffffffffda RBX: 00007fd467a25fa0 RCX: 00007fd46779e1d9 [ 1065.492223][T25301] RDX: 0000000000000050 RSI: 0000200000003b80 RDI: 000000000000000a [ 1065.492230][T25301] RBP: 00007fd4685b5090 R08: 0000000000000000 R09: 0000000000000000 [ 1065.492237][T25301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1065.492243][T25301] R13: 00007fd467a26038 R14: 00007fd467a25fa0 R15: 00007ffffb5fae88 [ 1065.492260][T25301] [ 1065.563127][T25300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5811'. [ 1065.872746][T25313] validate_nla: 5 callbacks suppressed [ 1065.872769][T25313] netlink: 'syz.2.5816': attribute type 16 has an invalid length. [ 1065.872786][T25313] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5816'. [ 1065.883201][T25303] netlink: 'syz.4.5813': attribute type 13 has an invalid length. [ 1065.883240][T25303] netlink: 'syz.4.5813': attribute type 12 has an invalid length. [ 1065.892154][T25303] netlink: 'syz.4.5813': attribute type 2 has an invalid length. [ 1065.991557][T25315] netlink: Conntrack attr has 8 unknown bytes [ 1065.991629][T25315] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1066.178732][T25325] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5822'. [ 1066.225221][T25327] FAULT_INJECTION: forcing a failure. [ 1066.225221][T25327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1066.225253][T25327] CPU: 0 UID: 0 PID: 25327 Comm: syz.0.5823 Not tainted syzkaller #0 PREEMPT(full) [ 1066.225274][T25327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1066.225285][T25327] Call Trace: [ 1066.225293][T25327] [ 1066.225302][T25327] dump_stack_lvl+0xe8/0x150 [ 1066.225335][T25327] should_fail_ex+0x410/0x560 [ 1066.225367][T25327] _copy_from_user+0x2d/0xb0 [ 1066.225388][T25327] ___sys_sendmsg+0x1c6/0x360 [ 1066.225408][T25327] ? __lock_acquire+0x747/0x2de0 [ 1066.225435][T25327] ? __pfx____sys_sendmsg+0x10/0x10 [ 1066.225491][T25327] ? __fget_files+0x2a/0x420 [ 1066.225510][T25327] ? __fget_files+0x3a2/0x420 [ 1066.225541][T25327] __x64_sys_sendmsg+0x1b1/0x290 [ 1066.225565][T25327] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1066.225597][T25327] ? trace_syscall_enter+0x58/0x110 [ 1066.225623][T25327] ? rcu_is_watching+0x16/0xb0 [ 1066.225647][T25327] ? trace_syscall_enter+0x58/0x110 [ 1066.225676][T25327] do_syscall_64+0x166/0x520 [ 1066.225697][T25327] ? trace_irq_disable+0x3b/0x140 [ 1066.225719][T25327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.225739][T25327] ? clear_bhb_loop+0x70/0xc0 [ 1066.225763][T25327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.225783][T25327] RIP: 0033:0x7fd46779e1d9 [ 1066.225802][T25327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1066.225819][T25327] RSP: 002b:00007fd4685b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1066.225841][T25327] RAX: ffffffffffffffda RBX: 00007fd467a25fa0 RCX: 00007fd46779e1d9 [ 1066.225856][T25327] RDX: 0000000000008000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1066.225870][T25327] RBP: 00007fd4685b5090 R08: 0000000000000000 R09: 0000000000000000 [ 1066.225884][T25327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1066.225896][T25327] R13: 00007fd467a26038 R14: 00007fd467a25fa0 R15: 00007ffffb5fae88 [ 1066.225929][T25327] [ 1066.546467][T25339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5826'. [ 1066.893410][T25345] netlink: 'syz.0.5828': attribute type 13 has an invalid length. [ 1066.893452][T25345] netlink: 'syz.0.5828': attribute type 12 has an invalid length. [ 1066.912837][T25345] netlink: 'syz.0.5828': attribute type 2 has an invalid length. [ 1067.149684][T25362] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5835'. [ 1067.336781][T25369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5838'. [ 1067.470386][T25375] FAULT_INJECTION: forcing a failure. [ 1067.470386][T25375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1067.470454][T25375] CPU: 1 UID: 0 PID: 25375 Comm: syz.1.5841 Not tainted syzkaller #0 PREEMPT(full) [ 1067.470477][T25375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1067.470490][T25375] Call Trace: [ 1067.470499][T25375] [ 1067.470507][T25375] dump_stack_lvl+0xe8/0x150 [ 1067.470543][T25375] should_fail_ex+0x410/0x560 [ 1067.470578][T25375] _copy_from_user+0x2d/0xb0 [ 1067.470599][T25375] kstrtouint_from_user+0xd6/0x180 [ 1067.470625][T25375] ? ktime_get+0x45/0x220 [ 1067.470650][T25375] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1067.470685][T25375] ? lock_acquire+0x115/0x350 [ 1067.470713][T25375] proc_fail_nth_write+0x8e/0x210 [ 1067.470738][T25375] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1067.470771][T25375] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1067.470795][T25375] vfs_write+0x296/0xba0 [ 1067.470827][T25375] ? __pfx_vfs_write+0x10/0x10 [ 1067.470852][T25375] ? __fget_files+0x2a/0x420 [ 1067.470877][T25375] ? __fget_files+0x3a2/0x420 [ 1067.470896][T25375] ? __fget_files+0x2a/0x420 [ 1067.470926][T25375] ksys_write+0x150/0x270 [ 1067.470952][T25375] ? __pfx_ksys_write+0x10/0x10 [ 1067.470993][T25375] do_syscall_64+0x166/0x520 [ 1067.471015][T25375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.471036][T25375] ? clear_bhb_loop+0x70/0xc0 [ 1067.471061][T25375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.471080][T25375] RIP: 0033:0x7f81ffd5ea0e [ 1067.471100][T25375] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1067.471117][T25375] RSP: 002b:00007f8200d22fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1067.471139][T25375] RAX: ffffffffffffffda RBX: 00007f8200d236c0 RCX: 00007f81ffd5ea0e [ 1067.471154][T25375] RDX: 0000000000000001 RSI: 00007f8200d230a0 RDI: 0000000000000009 [ 1067.471167][T25375] RBP: 00007f8200d23090 R08: 0000000000000000 R09: 0000000000000000 [ 1067.471180][T25375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1067.471192][T25375] R13: 00007f8200026038 R14: 00007f8200025fa0 R15: 00007fff6245f738 [ 1067.471226][T25375] [ 1067.843305][T25382] netlink: 'syz.0.5843': attribute type 13 has an invalid length. [ 1067.843328][T25382] netlink: 'syz.0.5843': attribute type 12 has an invalid length. [ 1067.847782][T25382] netlink: 'syz.0.5843': attribute type 2 has an invalid length. [ 1069.210657][T25434] FAULT_INJECTION: forcing a failure. [ 1069.210657][T25434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1069.210710][T25434] CPU: 1 UID: 0 PID: 25434 Comm: syz.4.5863 Not tainted syzkaller #0 PREEMPT(full) [ 1069.210733][T25434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1069.210745][T25434] Call Trace: [ 1069.210753][T25434] [ 1069.210761][T25434] dump_stack_lvl+0xe8/0x150 [ 1069.210802][T25434] should_fail_ex+0x410/0x560 [ 1069.210836][T25434] _copy_from_iter+0x1d3/0x1660 [ 1069.210864][T25434] ? __alloc_skb+0x27a/0x7a0 [ 1069.210895][T25434] ? __alloc_skb+0x27a/0x7a0 [ 1069.210925][T25434] ? __alloc_skb+0x27a/0x7a0 [ 1069.210954][T25434] ? __pfx__copy_from_iter+0x10/0x10 [ 1069.210980][T25434] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1069.211003][T25434] ? __alloc_skb+0x27a/0x7a0 [ 1069.211030][T25434] ? __alloc_skb+0x27a/0x7a0 [ 1069.211064][T25434] ? netlink_sendmsg+0x650/0xb40 [ 1069.211088][T25434] ? skb_put+0x112/0x210 [ 1069.211110][T25434] netlink_sendmsg+0x6c0/0xb40 [ 1069.211144][T25434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1069.211177][T25434] ? apparmor_socket_sendmsg+0x98/0x360 [ 1069.211208][T25434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1069.211231][T25434] sock_sendmsg_nosec+0x13a/0x180 [ 1069.211260][T25434] ____sys_sendmsg+0x54e/0x850 [ 1069.211286][T25434] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1069.211316][T25434] ? import_iovec+0x73/0xa0 [ 1069.211350][T25434] ___sys_sendmsg+0x2a5/0x360 [ 1069.211376][T25434] ? __pfx____sys_sendmsg+0x10/0x10 [ 1069.211402][T25434] ? irqentry_exit+0x218/0x910 [ 1069.211423][T25434] ? trace_irq_disable+0x3b/0x140 [ 1069.211473][T25434] ? __fget_files+0x2a/0x420 [ 1069.211492][T25434] ? __fget_files+0x3a2/0x420 [ 1069.211522][T25434] __x64_sys_sendmsg+0x1b1/0x290 [ 1069.211543][T25434] ? perf_trace_preemptirq_template+0x270/0x350 [ 1069.211569][T25434] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1069.211611][T25434] do_syscall_64+0x166/0x520 [ 1069.211633][T25434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.211654][T25434] ? clear_bhb_loop+0x70/0xc0 [ 1069.211678][T25434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.211698][T25434] RIP: 0033:0x7efdd239e1d9 [ 1069.211718][T25434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1069.211735][T25434] RSP: 002b:00007efdd3228028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1069.211757][T25434] RAX: ffffffffffffffda RBX: 00007efdd2625fa0 RCX: 00007efdd239e1d9 [ 1069.211773][T25434] RDX: 0000000000000000 RSI: 0000200000000a00 RDI: 0000000000000005 [ 1069.211792][T25434] RBP: 00007efdd3228090 R08: 0000000000000000 R09: 0000000000000000 [ 1069.211804][T25434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1069.211817][T25434] R13: 00007efdd2626038 R14: 00007efdd2625fa0 R15: 00007ffc09656488 [ 1069.211848][T25434] [ 1069.351466][T25435] __nla_validate_parse: 5 callbacks suppressed [ 1069.351485][T25435] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5862'. [ 1069.476511][T25438] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5864'. [ 1069.584412][T25441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5865'. [ 1069.831377][T25457] FAULT_INJECTION: forcing a failure. [ 1069.831377][T25457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1069.831398][T25457] CPU: 0 UID: 0 PID: 25457 Comm: syz.4.5873 Not tainted syzkaller #0 PREEMPT(full) [ 1069.831410][T25457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1069.831418][T25457] Call Trace: [ 1069.831423][T25457] [ 1069.831427][T25457] dump_stack_lvl+0xe8/0x150 [ 1069.831447][T25457] should_fail_ex+0x410/0x560 [ 1069.831466][T25457] _copy_from_user+0x2d/0xb0 [ 1069.831477][T25457] ___sys_sendmsg+0x1c6/0x360 [ 1069.831489][T25457] ? __lock_acquire+0x747/0x2de0 [ 1069.831504][T25457] ? __pfx____sys_sendmsg+0x10/0x10 [ 1069.831533][T25457] ? __fget_files+0x2a/0x420 [ 1069.831544][T25457] ? __fget_files+0x3a2/0x420 [ 1069.831560][T25457] __x64_sys_sendmsg+0x1b1/0x290 [ 1069.831573][T25457] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1069.831589][T25457] ? trace_syscall_enter+0x58/0x110 [ 1069.831604][T25457] ? rcu_is_watching+0x16/0xb0 [ 1069.831617][T25457] ? trace_syscall_enter+0x58/0x110 [ 1069.831632][T25457] do_syscall_64+0x166/0x520 [ 1069.831644][T25457] ? trace_irq_disable+0x3b/0x140 [ 1069.831656][T25457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.831670][T25457] ? clear_bhb_loop+0x70/0xc0 [ 1069.831683][T25457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.831694][T25457] RIP: 0033:0x7efdd239e1d9 [ 1069.831704][T25457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1069.831716][T25457] RSP: 002b:00007efdd3228028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1069.831731][T25457] RAX: ffffffffffffffda RBX: 00007efdd2625fa0 RCX: 00007efdd239e1d9 [ 1069.831739][T25457] RDX: 0000000000008084 RSI: 00002000000007c0 RDI: 0000000000000003 [ 1069.831747][T25457] RBP: 00007efdd3228090 R08: 0000000000000000 R09: 0000000000000000 [ 1069.831754][T25457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1069.831761][T25457] R13: 00007efdd2626038 R14: 00007efdd2625fa0 R15: 00007ffc09656488 [ 1069.831778][T25457] [ 1070.070568][T25463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5875'. [ 1070.402614][ T5627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1070.408535][ T5627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1070.414877][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1070.432560][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1070.433318][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1070.792676][T25481] FAULT_INJECTION: forcing a failure. [ 1070.792676][T25481] name failslab, interval 1, probability 0, space 0, times 0 [ 1070.792743][T25481] CPU: 1 UID: 0 PID: 25481 Comm: syz.2.5880 Not tainted syzkaller #0 PREEMPT(full) [ 1070.792767][T25481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1070.792779][T25481] Call Trace: [ 1070.792788][T25481] [ 1070.792797][T25481] dump_stack_lvl+0xe8/0x150 [ 1070.792831][T25481] should_fail_ex+0x410/0x560 [ 1070.792863][T25481] ? __alloc_skb+0x1db/0x7a0 [ 1070.792893][T25481] should_failslab+0xa8/0x100 [ 1070.792923][T25481] ? __alloc_skb+0x1db/0x7a0 [ 1070.792950][T25481] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1070.792979][T25481] ? __alloc_skb+0x1db/0x7a0 [ 1070.793014][T25481] __alloc_skb+0x1db/0x7a0 [ 1070.793048][T25481] netlink_sendmsg+0x5d4/0xb40 [ 1070.793083][T25481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1070.793117][T25481] ? apparmor_socket_sendmsg+0x98/0x360 [ 1070.793154][T25481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1070.793178][T25481] sock_sendmsg_nosec+0x13a/0x180 [ 1070.793208][T25481] ____sys_sendmsg+0x54e/0x850 [ 1070.793235][T25481] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1070.793266][T25481] ? import_iovec+0x73/0xa0 [ 1070.793301][T25481] ___sys_sendmsg+0x2a5/0x360 [ 1070.793321][T25481] ? __lock_acquire+0x747/0x2de0 [ 1070.793349][T25481] ? __pfx____sys_sendmsg+0x10/0x10 [ 1070.793404][T25481] ? __fget_files+0x2a/0x420 [ 1070.793424][T25481] ? __fget_files+0x3a2/0x420 [ 1070.793454][T25481] __x64_sys_sendmsg+0x1b1/0x290 [ 1070.793478][T25481] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1070.793521][T25481] do_syscall_64+0x166/0x520 [ 1070.793544][T25481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.793565][T25481] ? clear_bhb_loop+0x70/0xc0 [ 1070.793591][T25481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.793611][T25481] RIP: 0033:0x7f211079e1d9 [ 1070.793630][T25481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1070.793647][T25481] RSP: 002b:00007f211160e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1070.793670][T25481] RAX: ffffffffffffffda RBX: 00007f2110a25fa0 RCX: 00007f211079e1d9 [ 1070.793685][T25481] RDX: 0000000000008000 RSI: 0000200000000040 RDI: 0000000000000007 [ 1070.793698][T25481] RBP: 00007f211160e090 R08: 0000000000000000 R09: 0000000000000000 [ 1070.793711][T25481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1070.793724][T25481] R13: 00007f2110a26038 R14: 00007f2110a25fa0 R15: 00007ffc9fe2ef78 [ 1070.793758][T25481] [ 1070.901041][T25486] FAULT_INJECTION: forcing a failure. [ 1070.901041][T25486] name failslab, interval 1, probability 0, space 0, times 0 [ 1070.901071][T25486] CPU: 1 UID: 0 PID: 25486 Comm: syz.3.5881 Not tainted syzkaller #0 PREEMPT(full) [ 1070.901093][T25486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1070.901105][T25486] Call Trace: [ 1070.901113][T25486] [ 1070.901121][T25486] dump_stack_lvl+0xe8/0x150 [ 1070.901161][T25486] should_fail_ex+0x410/0x560 [ 1070.901192][T25486] ? __alloc_skb+0x1db/0x7a0 [ 1070.901220][T25486] should_failslab+0xa8/0x100 [ 1070.901250][T25486] ? __alloc_skb+0x1db/0x7a0 [ 1070.901276][T25486] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1070.901301][T25486] ? __alloc_skb+0x1db/0x7a0 [ 1070.901335][T25486] __alloc_skb+0x1db/0x7a0 [ 1070.901367][T25486] netlink_sendmsg+0x5d4/0xb40 [ 1070.901400][T25486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1070.901432][T25486] ? apparmor_socket_sendmsg+0x98/0x360 [ 1070.901462][T25486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1070.901485][T25486] sock_sendmsg_nosec+0x13a/0x180 [ 1070.901514][T25486] ____sys_sendmsg+0x54e/0x850 [ 1070.901540][T25486] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1070.901569][T25486] ? import_iovec+0x73/0xa0 [ 1070.901601][T25486] ___sys_sendmsg+0x2a5/0x360 [ 1070.901621][T25486] ? __lock_acquire+0x747/0x2de0 [ 1070.901648][T25486] ? __pfx____sys_sendmsg+0x10/0x10 [ 1070.901700][T25486] ? __fget_files+0x2a/0x420 [ 1070.901719][T25486] ? __fget_files+0x3a2/0x420 [ 1070.901748][T25486] __x64_sys_sendmsg+0x1b1/0x290 [ 1070.901772][T25486] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1070.901811][T25486] do_syscall_64+0x166/0x520 [ 1070.901833][T25486] ? trace_irq_disable+0x3b/0x140 [ 1070.901855][T25486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.901875][T25486] ? clear_bhb_loop+0x70/0xc0 [ 1070.901899][T25486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.901917][T25486] RIP: 0033:0x7fbba3b9e1d9 [ 1070.901936][T25486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1070.901953][T25486] RSP: 002b:00007fbba49bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1070.901974][T25486] RAX: ffffffffffffffda RBX: 00007fbba3e25fa0 RCX: 00007fbba3b9e1d9 [ 1070.901989][T25486] RDX: 0000000000000000 RSI: 0000200000001840 RDI: 0000000000000003 [ 1070.902001][T25486] RBP: 00007fbba49bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1070.902014][T25486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1070.902025][T25486] R13: 00007fbba3e26038 R14: 00007fbba3e25fa0 R15: 00007ffd9e4a26e8 [ 1070.902056][T25486] [ 1071.712376][T25497] validate_nla: 7 callbacks suppressed [ 1071.712415][T25497] netlink: 'syz.4.5883': attribute type 29 has an invalid length. [ 1071.712491][T25497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5883'. [ 1071.712582][T25497] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5883'. [ 1071.858031][T25471] wlan0 speed is unknown, defaulting to 1000 [ 1071.915184][T25504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5885'. [ 1071.920360][T25501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5884'. [ 1071.929258][T25501] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5884'. [ 1071.939839][T25501] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5884'. [ 1072.445854][T25471] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.446028][T25471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.446151][T25471] bridge_slave_0: entered allmulticast mode [ 1072.448585][T25471] bridge_slave_0: entered promiscuous mode [ 1072.454150][T25471] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.454327][T25471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.454445][T25471] bridge_slave_1: entered allmulticast mode [ 1072.459361][T25471] bridge_slave_1: entered promiscuous mode [ 1072.484060][T15261] Bluetooth: hci3: command tx timeout [ 1072.567075][T25471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1072.585613][T25471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1072.637684][T25471] team0: Port device team_slave_0 added [ 1072.641167][T25471] team0: Port device team_slave_1 added [ 1072.683329][T25471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1072.683344][T25471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1072.683371][T25471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1072.729441][T25471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1072.729455][T25471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1072.729480][T25471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1072.809631][T25538] FAULT_INJECTION: forcing a failure. [ 1072.809631][T25538] name failslab, interval 1, probability 0, space 0, times 0 [ 1072.809661][T25538] CPU: 0 UID: 0 PID: 25538 Comm: syz.3.5894 Not tainted syzkaller #0 PREEMPT(full) [ 1072.809684][T25538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1072.809696][T25538] Call Trace: [ 1072.809704][T25538] [ 1072.809714][T25538] dump_stack_lvl+0xe8/0x150 [ 1072.809748][T25538] should_fail_ex+0x410/0x560 [ 1072.809782][T25538] should_failslab+0xa8/0x100 [ 1072.809811][T25538] ? skb_clone+0x212/0x3a0 [ 1072.809834][T25538] kmem_cache_alloc_noprof+0xa1/0x600 [ 1072.809859][T25538] ? skb_clone+0x212/0x3a0 [ 1072.809888][T25538] skb_clone+0x212/0x3a0 [ 1072.809921][T25538] __netlink_deliver_tap+0x413/0x860 [ 1072.809957][T25538] ? netlink_deliver_tap+0x2e/0x1b0 [ 1072.809984][T25538] netlink_deliver_tap+0x19c/0x1b0 [ 1072.810010][T25538] netlink_unicast+0x781/0x940 [ 1072.810044][T25538] netlink_sendmsg+0x813/0xb40 [ 1072.810079][T25538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1072.810111][T25538] ? apparmor_socket_sendmsg+0x98/0x360 [ 1072.810141][T25538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1072.810164][T25538] sock_sendmsg_nosec+0x13a/0x180 [ 1072.810194][T25538] ____sys_sendmsg+0x54e/0x850 [ 1072.810221][T25538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1072.810252][T25538] ? import_iovec+0x73/0xa0 [ 1072.810287][T25538] ___sys_sendmsg+0x2a5/0x360 [ 1072.810307][T25538] ? __lock_acquire+0x747/0x2de0 [ 1072.810334][T25538] ? __pfx____sys_sendmsg+0x10/0x10 [ 1072.810393][T25538] ? __fget_files+0x2a/0x420 [ 1072.810413][T25538] ? __fget_files+0x3a2/0x420 [ 1072.810444][T25538] __x64_sys_sendmsg+0x1b1/0x290 [ 1072.810469][T25538] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1072.810513][T25538] do_syscall_64+0x166/0x520 [ 1072.810535][T25538] ? trace_irq_disable+0x3b/0x140 [ 1072.810558][T25538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.810580][T25538] ? clear_bhb_loop+0x70/0xc0 [ 1072.810605][T25538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.810626][T25538] RIP: 0033:0x7fbba3b9e1d9 [ 1072.810645][T25538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1072.810663][T25538] RSP: 002b:00007fbba499e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1072.810685][T25538] RAX: ffffffffffffffda RBX: 00007fbba3e26090 RCX: 00007fbba3b9e1d9 [ 1072.810700][T25538] RDX: 0000000000008000 RSI: 0000200000000380 RDI: 0000000000000004 [ 1072.810714][T25538] RBP: 00007fbba499e090 R08: 0000000000000000 R09: 0000000000000000 [ 1072.810728][T25538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1072.810741][T25538] R13: 00007fbba3e26128 R14: 00007fbba3e26090 R15: 00007ffd9e4a26e8 [ 1072.810775][T25538] [ 1072.810808][T25538] netlink: 'syz.3.5894': attribute type 1 has an invalid length. [ 1073.061441][T25471] hsr_slave_0: entered promiscuous mode [ 1073.069038][T25471] hsr_slave_1: entered promiscuous mode [ 1073.077455][T25471] debugfs: 'hsr0' already exists in 'hsr' [ 1073.077477][T25471] Cannot create hsr debugfs directory [ 1073.260073][T25548] netlink: 'syz.4.5896': attribute type 10 has an invalid length. [ 1073.442679][T25560] FAULT_INJECTION: forcing a failure. [ 1073.442679][T25560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1073.442714][T25560] CPU: 0 UID: 0 PID: 25560 Comm: syz.4.5898 Not tainted syzkaller #0 PREEMPT(full) [ 1073.442737][T25560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1073.442748][T25560] Call Trace: [ 1073.442757][T25560] [ 1073.442773][T25560] dump_stack_lvl+0xe8/0x150 [ 1073.442807][T25560] should_fail_ex+0x410/0x560 [ 1073.442840][T25560] _copy_from_user+0x2d/0xb0 [ 1073.442861][T25560] ___sys_sendmsg+0x1c6/0x360 [ 1073.442882][T25560] ? __lock_acquire+0x747/0x2de0 [ 1073.442911][T25560] ? __pfx____sys_sendmsg+0x10/0x10 [ 1073.442969][T25560] ? __fget_files+0x2a/0x420 [ 1073.442989][T25560] ? __fget_files+0x3a2/0x420 [ 1073.443019][T25560] __x64_sys_sendmsg+0x1b1/0x290 [ 1073.443044][T25560] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1073.443086][T25560] do_syscall_64+0x166/0x520 [ 1073.443108][T25560] ? trace_irq_disable+0x3b/0x140 [ 1073.443130][T25560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.443152][T25560] ? clear_bhb_loop+0x70/0xc0 [ 1073.443176][T25560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.443197][T25560] RIP: 0033:0x7efdd239e1d9 [ 1073.443216][T25560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1073.443233][T25560] RSP: 002b:00007efdd3228028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1073.443255][T25560] RAX: ffffffffffffffda RBX: 00007efdd2625fa0 RCX: 00007efdd239e1d9 [ 1073.443270][T25560] RDX: 0000000000000004 RSI: 0000200000001e40 RDI: 0000000000000003 [ 1073.443283][T25560] RBP: 00007efdd3228090 R08: 0000000000000000 R09: 0000000000000000 [ 1073.443296][T25560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1073.443308][T25560] R13: 00007efdd2626038 R14: 00007efdd2625fa0 R15: 00007ffc09656488 [ 1073.443347][T25560] [ 1073.757491][T25471] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.979913][T25471] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.144517][T25471] .`: (slave netdevsim1): Releasing backup interface [ 1074.148544][T25471] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.213106][T25585] netlink: 'syz.3.5905': attribute type 10 has an invalid length. [ 1074.229301][T25585] team0: Device ipvlan0 failed to register rx_handler [ 1074.311896][T25471] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.554050][T15261] Bluetooth: hci3: command tx timeout [ 1075.109518][T25471] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1075.123443][T25471] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1075.124488][T25471] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1075.134334][T25471] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1075.135601][T25471] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1075.141706][T25471] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1075.142423][T25471] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1075.148230][T25471] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1075.410837][T25607] netlink: 'syz.0.5910': attribute type 16 has an invalid length. [ 1075.410880][T25607] netlink: 'syz.0.5910': attribute type 3 has an invalid length. [ 1075.410933][T25607] __nla_validate_parse: 5 callbacks suppressed [ 1075.410970][T25607] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5910'. [ 1075.487093][T25471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1075.531234][T25471] 8021q: adding VLAN 0 to HW filter on device team0 [ 1075.548154][T19912] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.548325][T19912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1075.574802][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.574928][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1076.129177][T25613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5912'. [ 1076.637883][ T5627] Bluetooth: hci3: command tx timeout [ 1076.873939][ T5627] Bluetooth: hci0: command 0x0406 tx timeout [ 1077.056595][T25652] netlink: 'syz.3.5921': attribute type 16 has an invalid length. [ 1077.056638][T25652] netlink: 'syz.3.5921': attribute type 3 has an invalid length. [ 1077.056666][T25652] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5921'. [ 1077.060232][T25471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1077.097593][T25653] netlink: 'syz.0.5922': attribute type 10 has an invalid length. [ 1077.157582][T25471] veth0_vlan: entered promiscuous mode [ 1077.185967][T25471] veth1_vlan: entered promiscuous mode [ 1077.243233][T25471] veth0_macvtap: entered promiscuous mode [ 1077.260437][T25471] veth1_macvtap: entered promiscuous mode [ 1077.287690][T25657] sit0: left promiscuous mode [ 1077.303813][T25471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1077.328019][T25471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1077.352958][T25657] sit0: entered promiscuous mode [ 1077.374125][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.374316][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.374671][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.446460][ T146] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.641381][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1077.641404][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1077.706191][T25663] block nbd0: not configured, cannot reconfigure [ 1077.708125][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1077.708146][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1077.983123][T25673] netlink: 'syz.1.5930': attribute type 10 has an invalid length. [ 1077.983209][T25673] ipvlan0: entered allmulticast mode [ 1077.983243][T25673] veth0_vlan: entered allmulticast mode [ 1078.019187][T25673] team0: Device ipvlan0 failed to register rx_handler [ 1078.336133][T25685] FAULT_INJECTION: forcing a failure. [ 1078.336133][T25685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1078.336195][T25685] CPU: 0 UID: 0 PID: 25685 Comm: syz.1.5935 Not tainted syzkaller #0 PREEMPT(full) [ 1078.336218][T25685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1078.336230][T25685] Call Trace: [ 1078.336238][T25685] [ 1078.336247][T25685] dump_stack_lvl+0xe8/0x150 [ 1078.336281][T25685] should_fail_ex+0x410/0x560 [ 1078.336312][T25685] _copy_from_user+0x2d/0xb0 [ 1078.336338][T25685] __sys_bpf+0x2e7/0xe00 [ 1078.336372][T25685] ? __pfx___sys_bpf+0x10/0x10 [ 1078.336394][T25685] ? lock_acquire+0x115/0x350 [ 1078.336425][T25685] ? ktime_get+0x45/0x220 [ 1078.336463][T25685] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1078.336489][T25685] ? pv_queued_spin_unlock_traced+0x5a/0x1b0 [ 1078.336523][T25685] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 1078.336561][T25685] __x64_sys_bpf+0xba/0xd0 [ 1078.336587][T25685] do_syscall_64+0x166/0x520 [ 1078.336609][T25685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.336630][T25685] ? clear_bhb_loop+0x70/0xc0 [ 1078.336654][T25685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.336674][T25685] RIP: 0033:0x7fdc56b9e1d9 [ 1078.336693][T25685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1078.336710][T25685] RSP: 002b:00007fdc57a1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1078.336733][T25685] RAX: ffffffffffffffda RBX: 00007fdc56e25fa0 RCX: 00007fdc56b9e1d9 [ 1078.336748][T25685] RDX: 000000000000002a RSI: 0000200000001580 RDI: 000000000000000a [ 1078.336761][T25685] RBP: 00007fdc57a1b090 R08: 0000000000000000 R09: 0000000000000000 [ 1078.336774][T25685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1078.336786][T25685] R13: 00007fdc56e26038 R14: 00007fdc56e25fa0 R15: 00007fffe14c7fd8 [ 1078.336817][T25685] [ 1078.720785][T15261] Bluetooth: hci3: command tx timeout [ 1078.809410][T25693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5937'. [ 1078.839916][T25699] netlink: 'syz.4.5939': attribute type 9 has an invalid length. [ 1080.499237][T25726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5945'. [ 1082.508940][T25745] netlink: 'syz.4.5950': attribute type 10 has an invalid length. [ 1082.514543][T25747] sit0: left promiscuous mode [ 1082.826770][T25752] sit0: entered promiscuous mode [ 1084.719038][T25773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5959'. [ 1086.745541][T25796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1087.069810][T25799] netlink: 'syz.0.5967': attribute type 10 has an invalid length. [ 1087.069836][T25799] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5967'. [ 1087.475292][T25791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5965'. [ 1088.613914][T25808] sit0: left promiscuous mode [ 1089.009273][T25811] sit0: entered promiscuous mode [ 1089.738422][T25820] netlink: 'syz.4.5971': attribute type 10 has an invalid length. [ 1090.299933][ T43] bridge_slave_1: left allmulticast mode [ 1090.299967][ T43] bridge_slave_1: left promiscuous mode [ 1090.300474][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.488379][ T43] bridge_slave_0: left allmulticast mode [ 1090.488411][ T43] bridge_slave_0: left promiscuous mode [ 1090.498155][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.619257][T25827] netlink: 'syz.2.5975': attribute type 3 has an invalid length. [ 1090.619285][T25827] netlink: 'syz.2.5975': attribute type 5 has an invalid length. [ 1090.720642][ T5627] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1090.732756][ T5627] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1090.735491][ T5627] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1090.750497][ T5627] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1090.752811][ T5627] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1092.396336][T25846] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5979'. [ 1092.629177][ T43] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1092.633777][ T43] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1092.658640][ T43] .` (unregistering): Released all slaves [ 1092.686142][T25819] netlink: 'syz.1.5973': attribute type 13 has an invalid length. [ 1092.686165][T25819] netlink: 'syz.1.5973': attribute type 12 has an invalid length. [ 1092.794567][T15261] Bluetooth: hci5: command tx timeout [ 1093.225915][T20149] syz0: Port: 1 Link DOWN [ 1093.520102][T25856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5981'. [ 1094.184373][T25873] netlink: 'syz.2.5986': attribute type 10 has an invalid length. [ 1094.192280][T25828] wlan0 speed is unknown, defaulting to 1000 [ 1094.729260][T25894] netlink: 'syz.4.5992': attribute type 3 has an invalid length. [ 1094.729285][T25894] netlink: 'syz.4.5992': attribute type 5 has an invalid length. [ 1094.874366][T15261] Bluetooth: hci5: command tx timeout [ 1094.977883][T25899] netlink: 'syz.2.5993': attribute type 12 has an invalid length. [ 1094.977978][T25899] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5993'. [ 1095.186544][T25828] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.186705][T25828] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.186829][T25828] bridge_slave_0: entered allmulticast mode [ 1095.217682][T25828] bridge_slave_0: entered promiscuous mode [ 1095.270202][T25828] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.270309][T25828] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.270457][T25828] bridge_slave_1: entered allmulticast mode [ 1095.273738][T25828] bridge_slave_1: entered promiscuous mode [ 1095.472254][T25828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1095.489580][T25828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1095.690075][ T1380] smbdirect: ib_dev[syz1] removed [ 1095.746381][T25828] team0: Port device team_slave_0 added [ 1095.749314][T25828] team0: Port device team_slave_1 added [ 1095.775226][T25916] sit0: entered allmulticast mode [ 1095.778889][ T5759] infiniband syz1: ib_query_port failed (-19) [ 1095.797530][T25907] sit0: entered promiscuous mode [ 1095.864348][T25923] netlink: 'syz.4.6000': attribute type 10 has an invalid length. [ 1095.875974][T25924] netlink: 'syz.2.5999': attribute type 10 has an invalid length. [ 1095.916982][T25828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1095.916997][T25828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1095.917019][T25828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1095.919530][T25828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1095.919544][T25828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1095.919568][T25828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1096.028608][ T43] hsr_slave_0: left promiscuous mode [ 1096.029850][ T43] hsr_slave_1: left promiscuous mode [ 1096.030888][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1096.030909][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1096.032708][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1096.032726][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1096.271164][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1096.924550][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1096.964520][T15261] Bluetooth: hci5: command tx timeout [ 1096.986108][ T1414] smbdirect: ib_dev[syz0] removed [ 1097.180048][T25828] hsr_slave_0: entered promiscuous mode [ 1097.181080][T25828] hsr_slave_1: entered promiscuous mode [ 1097.181810][T25828] debugfs: 'hsr0' already exists in 'hsr' [ 1097.181829][T25828] Cannot create hsr debugfs directory [ 1097.941547][T25828] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.166520][T25961] netlink: 'syz.1.6012': attribute type 10 has an invalid length. [ 1098.434369][T25961] bridge0: port 3(netdevsim1) entered blocking state [ 1098.434763][T25961] bridge0: port 3(netdevsim1) entered disabled state [ 1098.447551][T25961] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 1098.588955][T25961] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 1098.882946][T25963] tmpfs: Bad value for 'gid' [ 1098.882997][T25963] tmpfs: Bad value for 'gid' [ 1098.884876][T25963] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6013'. [ 1099.044358][T15261] Bluetooth: hci5: command tx timeout [ 1099.051223][T25828] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.210069][T25828] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.376748][T25828] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.560336][ T43] bridge_slave_1: left allmulticast mode [ 1099.560370][ T43] bridge_slave_1: left promiscuous mode [ 1099.560577][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.586491][ T43] bridge_slave_0: left allmulticast mode [ 1099.586515][ T43] bridge_slave_0: left promiscuous mode [ 1099.587805][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.588642][T25984] tmpfs: Bad value for 'uid' [ 1099.588687][T25984] tmpfs: Bad value for 'uid' [ 1099.592463][T25984] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6021'. [ 1099.702895][T25988] netlink: 'syz.1.6022': attribute type 3 has an invalid length. [ 1099.702918][T25988] netlink: 'syz.1.6022': attribute type 5 has an invalid length. [ 1099.821763][T25991] tmpfs: Bad value for 'gid' [ 1099.821809][T25991] tmpfs: Bad value for 'gid' [ 1099.823003][T25991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6023'. [ 1099.879120][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1099.881258][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1099.883849][ T43] bond0 (unregistering): Released all slaves [ 1100.049665][ T43] : left promiscuous mode [ 1100.144783][ T43] H: left promiscuous mode [ 1100.411594][T25995] netlink: 'syz.3.6024': attribute type 13 has an invalid length. [ 1100.411647][T25995] netlink: 'syz.3.6024': attribute type 12 has an invalid length. [ 1100.412961][ T43] tipc: Left network mode [ 1100.522500][T25828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1100.546392][T25828] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1100.547400][T25828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1100.559840][T25828] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1100.563779][T25828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1100.592821][T25828] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1100.593523][T25828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1100.628120][T25828] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1101.054727][T26010] netlink: 'syz.3.6027': attribute type 13 has an invalid length. [ 1101.054765][T26010] netlink: 'syz.3.6027': attribute type 12 has an invalid length. [ 1101.105774][T25828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1101.281658][T25828] 8021q: adding VLAN 0 to HW filter on device team0 [ 1101.291436][ T1414] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.291534][ T1414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1101.322889][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.322988][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1101.762368][T26035] tmpfs: Bad value for 'gid' [ 1101.762390][T26035] tmpfs: Bad value for 'gid' [ 1101.775704][T26035] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6034'. [ 1101.884575][T25998] infiniband syz1: set active [ 1101.884602][T25998] infiniband syz1: added bond_slave_1 [ 1101.946873][T25998] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1101.966915][T25998] infiniband syz1: Couldn't open port 1 [ 1101.967209][T25998] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1101.967899][T25998] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1101.967942][T25998] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1102.090805][T25998] RDS/IB: syz1: added [ 1102.099575][T25998] smc: adding ib device syz1 with port count 1 [ 1102.099747][T25998] smc: ib device syz1 port 1 has no pnetid [ 1102.454882][T26043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6036'. [ 1102.736963][T26057] block nbd0: not configured, cannot reconfigure [ 1103.236991][T25828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1103.306817][T25828] veth0_vlan: entered promiscuous mode [ 1103.327757][T25828] veth1_vlan: entered promiscuous mode [ 1103.383296][T25828] veth0_macvtap: entered promiscuous mode [ 1103.395059][T25828] veth1_macvtap: entered promiscuous mode [ 1103.419168][T25828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1103.436644][T25828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1103.455843][ T146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.456008][ T146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.476812][ T146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.476852][ T146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.602106][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1103.602125][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.689927][T19912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1103.689948][T19912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.725820][T26076] tmpfs: Bad value for 'gid' [ 1103.725838][T26076] tmpfs: Bad value for 'gid' [ 1103.726343][T26076] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6045'. [ 1104.199241][T26080] tipc: Started in network mode [ 1104.199306][T26080] tipc: Node identity 805e0004, cluster identity 4711 [ 1104.199334][T26080] tipc: Node number set to 2153644036 [ 1105.051678][T26096] netlink: 'syz.3.6051': attribute type 10 has an invalid length. [ 1105.088623][T26096] team0: Device ipvlan0 failed to register rx_handler [ 1105.978901][T26108] netlink: 'syz.3.6055': attribute type 8 has an invalid length. [ 1106.190696][T26112] netlink: 122 bytes leftover after parsing attributes in process `syz.4.6058'. [ 1106.439641][ T43] hsr_slave_1: left promiscuous mode [ 1106.440638][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1106.440662][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1106.486416][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1106.486440][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1106.825881][T26140] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 1106.831105][T26141] netlink: 'syz.0.6065': attribute type 10 has an invalid length. [ 1108.056738][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1108.073827][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1108.269762][ T43] team0 (unregistering): Port device dummy0 removed [ 1108.292459][T26151] netlink: 'syz.4.6072': attribute type 29 has an invalid length. [ 1108.310899][T26124] sit0: left promiscuous mode [ 1108.352632][T26130] sit0: entered promiscuous mode [ 1108.405043][T26141] ipvlan0: entered allmulticast mode [ 1108.405065][T26141] veth0_vlan: entered allmulticast mode [ 1108.407549][T26141] team0: Device ipvlan0 failed to register rx_handler [ 1108.457039][T26154] netlink: 'syz.4.6072': attribute type 29 has an invalid length. [ 1108.463450][T26156] netlink: 'syz.4.6072': attribute type 29 has an invalid length. [ 1108.591398][T26159] sit0: left promiscuous mode [ 1108.941577][T26160] sit0: entered promiscuous mode [ 1109.255946][T26166] block nbd0: not configured, cannot reconfigure [ 1109.259901][T26169] netlink: 122 bytes leftover after parsing attributes in process `syz.1.6077'. [ 1109.509969][T26175] block nbd0: not configured, cannot reconfigure [ 1110.010550][T26186] sit0: left promiscuous mode [ 1110.030865][T26195] netlink: 'syz.4.6086': attribute type 29 has an invalid length. [ 1110.192969][T26188] sit0: entered promiscuous mode [ 1110.196818][T26197] netlink: 'syz.4.6086': attribute type 29 has an invalid length. [ 1110.217982][T26192] netlink: 'syz.0.6084': attribute type 10 has an invalid length. [ 1110.272083][T26200] netlink: 'syz.4.6086': attribute type 29 has an invalid length. [ 1110.297359][T26192] team0: Device ipvlan0 failed to register rx_handler [ 1112.959619][T26206] tipc: Started in network mode [ 1112.959685][T26206] tipc: Node identity 805e0004, cluster identity 4711 [ 1112.959714][T26206] tipc: Node number set to 2153644036 [ 1113.047581][T26208] FAULT_INJECTION: forcing a failure. [ 1113.047581][T26208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1113.047614][T26208] CPU: 1 UID: 0 PID: 26208 Comm: syz.3.6089 Not tainted syzkaller #0 PREEMPT(full) [ 1113.047637][T26208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1113.047649][T26208] Call Trace: [ 1113.047658][T26208] [ 1113.047666][T26208] dump_stack_lvl+0xe8/0x150 [ 1113.047701][T26208] should_fail_ex+0x410/0x560 [ 1113.047734][T26208] _copy_from_iter+0x1d3/0x1660 [ 1113.047763][T26208] ? __alloc_skb+0x27a/0x7a0 [ 1113.047794][T26208] ? __alloc_skb+0x27a/0x7a0 [ 1113.047825][T26208] ? __alloc_skb+0x27a/0x7a0 [ 1113.047853][T26208] ? __pfx__copy_from_iter+0x10/0x10 [ 1113.047879][T26208] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1113.047902][T26208] ? __alloc_skb+0x27a/0x7a0 [ 1113.047927][T26208] ? __alloc_skb+0x27a/0x7a0 [ 1113.047959][T26208] ? netlink_sendmsg+0x650/0xb40 [ 1113.047981][T26208] ? skb_put+0x112/0x210 [ 1113.048002][T26208] netlink_sendmsg+0x6c0/0xb40 [ 1113.048033][T26208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1113.048065][T26208] ? apparmor_socket_sendmsg+0x98/0x360 [ 1113.048102][T26208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1113.048126][T26208] sock_sendmsg_nosec+0x13a/0x180 [ 1113.048154][T26208] ____sys_sendmsg+0x54e/0x850 [ 1113.048181][T26208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1113.048209][T26208] ? import_iovec+0x73/0xa0 [ 1113.048241][T26208] ___sys_sendmsg+0x2a5/0x360 [ 1113.048261][T26208] ? __lock_acquire+0x747/0x2de0 [ 1113.048288][T26208] ? __pfx____sys_sendmsg+0x10/0x10 [ 1113.048343][T26208] ? __fget_files+0x2a/0x420 [ 1113.048363][T26208] ? __fget_files+0x3a2/0x420 [ 1113.048393][T26208] __x64_sys_sendmsg+0x1b1/0x290 [ 1113.048417][T26208] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1113.048459][T26208] do_syscall_64+0x166/0x520 [ 1113.048481][T26208] ? trace_irq_disable+0x3b/0x140 [ 1113.048502][T26208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.048522][T26208] ? clear_bhb_loop+0x70/0xc0 [ 1113.048547][T26208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.048565][T26208] RIP: 0033:0x7fbba3b9e1d9 [ 1113.048583][T26208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1113.048599][T26208] RSP: 002b:00007fbba49bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1113.048619][T26208] RAX: ffffffffffffffda RBX: 00007fbba3e25fa0 RCX: 00007fbba3b9e1d9 [ 1113.048634][T26208] RDX: 0000000000008410 RSI: 0000200000000580 RDI: 0000000000000006 [ 1113.048648][T26208] RBP: 00007fbba49bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1113.048661][T26208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1113.048672][T26208] R13: 00007fbba3e26038 R14: 00007fbba3e25fa0 R15: 00007ffd9e4a26e8 [ 1113.048703][T26208] [ 1113.387043][T26213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6092'. [ 1113.392207][T26222] nbd: couldn't find a device at index 38 [ 1113.601322][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1113.604194][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1113.613275][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1113.616977][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1113.617959][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1113.626461][T26230] netlink: 'syz.0.6097': attribute type 29 has an invalid length. [ 1113.630581][T26230] netlink: 'syz.0.6097': attribute type 29 has an invalid length. [ 1113.631019][T26230] netlink: 'syz.0.6097': attribute type 29 has an invalid length. [ 1115.674122][T15261] Bluetooth: hci2: command tx timeout [ 1115.756024][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.756082][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.951532][T26259] netlink: 384 bytes leftover after parsing attributes in process `syz.2.6103'. [ 1117.291525][T26272] netlink: 'syz.3.6105': attribute type 4 has an invalid length. [ 1117.416187][ T1517] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.467823][T26269] sit0: entered allmulticast mode [ 1117.471488][T26275] sit0: entered promiscuous mode [ 1117.580329][ T1517] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.640037][T26280] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.6106'. [ 1117.671908][ T1517] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.756955][T15261] Bluetooth: hci2: command tx timeout [ 1117.843648][ T1517] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.653757][T26226] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.662293][T26226] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.662731][T26226] bridge_slave_0: entered allmulticast mode [ 1118.679827][T26226] bridge_slave_0: entered promiscuous mode [ 1118.698751][T26226] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.698838][T26226] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.698950][T26226] bridge_slave_1: entered allmulticast mode [ 1118.704406][T26226] bridge_slave_1: entered promiscuous mode [ 1119.008018][ T1517] bridge_slave_1: left allmulticast mode [ 1119.008046][ T1517] bridge_slave_1: left promiscuous mode [ 1119.008248][ T1517] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.844114][T15261] Bluetooth: hci2: command tx timeout [ 1120.555664][ T1517] bridge_slave_0: left allmulticast mode [ 1120.555691][ T1517] bridge_slave_0: left promiscuous mode [ 1120.555893][ T1517] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.840623][T26325] netlink: 'syz.2.6114': attribute type 9 has an invalid length. [ 1121.837660][ T1517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1121.840069][ T1517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1121.841237][ T1517] bond0 (unregistering): Released all slaves [ 1121.872198][T26226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1121.885575][T26330] sit0: left promiscuous mode [ 1121.924586][T15261] Bluetooth: hci2: command tx timeout [ 1121.982831][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1122.053460][T26226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1122.085152][T26330] sit0: entered promiscuous mode [ 1122.331897][T26226] team0: Port device team_slave_0 added [ 1122.376096][T26226] team0: Port device team_slave_1 added [ 1122.593632][T26226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1122.593649][T26226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.593674][T26226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1122.944869][T26226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1122.944888][T26226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.944914][T26226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1123.422088][T26369] netlink: 'syz.0.6124': attribute type 9 has an invalid length. [ 1123.860367][T26226] hsr_slave_0: entered promiscuous mode [ 1123.870269][T26226] hsr_slave_1: entered promiscuous mode [ 1123.882847][T26226] debugfs: 'hsr0' already exists in 'hsr' [ 1123.882869][T26226] Cannot create hsr debugfs directory [ 1123.897430][T26367] netlink: 272 bytes leftover after parsing attributes in process `syz.1.6125'. [ 1123.897503][T26367] netlink: 272 bytes leftover after parsing attributes in process `syz.1.6125'. [ 1123.961789][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1127.622457][T26401] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6133'. [ 1127.699916][T26392] sit0: left promiscuous mode [ 1128.003345][ T1517] hsr_slave_0: left promiscuous mode [ 1128.068158][ T1517] hsr_slave_1: left promiscuous mode [ 1128.071086][ T1517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1128.071110][ T1517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1128.073359][ T1517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1128.073379][ T1517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1128.110537][ T1517] batman_adv: batadv0: Interface deactivated: dummy0 [ 1128.110557][ T1517] batman_adv: batadv0: Removing interface: dummy0 [ 1128.283731][T26421] netlink: 'syz.3.6135': attribute type 9 has an invalid length. [ 1129.077146][T26429] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6137'. [ 1129.676342][ T1517] team0 (unregistering): Port device team_slave_1 removed [ 1129.745605][ T1517] team0 (unregistering): Port device team_slave_0 removed [ 1131.418093][T26408] sit0: entered promiscuous mode [ 1131.458420][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1131.737342][T26439] netlink: 'syz.1.6139': attribute type 10 has an invalid length. [ 1131.737392][T26439] netlink: 55 bytes leftover after parsing attributes in process `syz.1.6139'. [ 1133.242709][T26470] tipc: Started in network mode [ 1133.242761][T26470] tipc: Node identity 805e0004, cluster identity 4711 [ 1133.242802][T26470] tipc: Node number set to 2153644036 [ 1133.631205][T26488] sit0: left promiscuous mode [ 1133.853080][T26491] sit0: entered promiscuous mode [ 1134.283357][T26226] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1134.311434][T26226] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1134.316308][T26226] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1134.384409][T26226] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1134.390296][T26226] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1134.464321][ T31] audit: type=1107 audit(1791654528.159:73): pid=26503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1134.469309][T26504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6152'. [ 1135.275251][T26226] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1135.287228][T26226] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1135.368172][T26531] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6153'. [ 1135.368198][T26531] nbd: must specify at least one socket [ 1135.642690][T26226] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1135.991789][T26226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1136.036261][T26226] 8021q: adding VLAN 0 to HW filter on device team0 [ 1136.060767][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.060888][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1136.099879][ T1517] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.099983][ T1517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1137.027680][T26590] netlink: 'syz.3.6160': attribute type 10 has an invalid length. [ 1137.057967][T26590] team0: Device ipvlan0 failed to register rx_handler [ 1137.250061][T26607] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6163'. [ 1137.250087][T26607] nbd: must specify at least one socket [ 1137.445793][T26226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1138.013623][T26226] veth0_vlan: entered promiscuous mode [ 1138.023311][T26226] veth1_vlan: entered promiscuous mode [ 1138.066739][T26226] veth0_macvtap: entered promiscuous mode [ 1138.072327][T26226] veth1_macvtap: entered promiscuous mode [ 1138.093551][T26226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1138.107104][T26226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1140.466169][ T1517] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.474569][ T146] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.493838][ T1380] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.580389][T26633] netlink: 'syz.2.6170': attribute type 3 has an invalid length. [ 1140.580408][T26633] netlink: 'syz.2.6170': attribute type 5 has an invalid length. [ 1140.612622][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.612643][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1140.659876][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.659896][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1140.679986][ T1380] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.754917][T26637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6171'. [ 1140.904991][T26643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6091'. [ 1141.047638][T26645] netlink: 'syz.1.6173': attribute type 2 has an invalid length. [ 1141.047665][T26645] netlink: 'syz.1.6173': attribute type 8 has an invalid length. [ 1141.047680][T26645] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6173'. [ 1141.868098][T26671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6185'. [ 1141.901214][T26669] netlink: 'syz.2.6184': attribute type 10 has an invalid length. [ 1142.089685][T26673] block nbd0: not configured, cannot reconfigure [ 1142.233570][T26683] netlink: 'syz.4.6187': attribute type 2 has an invalid length. [ 1142.233607][T26683] netlink: 'syz.4.6187': attribute type 8 has an invalid length. [ 1142.233646][T26683] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6187'. [ 1143.571038][T26716] netlink: 272 bytes leftover after parsing attributes in process `syz.1.6199'. [ 1143.571071][T26716] netlink: 272 bytes leftover after parsing attributes in process `syz.1.6199'. [ 1143.718194][T26722] block nbd0: not configured, cannot reconfigure [ 1144.207528][T26731] FAULT_INJECTION: forcing a failure. [ 1144.207528][T26731] name failslab, interval 1, probability 0, space 0, times 0 [ 1144.207635][T26731] CPU: 0 UID: 0 PID: 26731 Comm: syz.1.6209 Not tainted syzkaller #0 PREEMPT(full) [ 1144.207659][T26731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1144.207671][T26731] Call Trace: [ 1144.207680][T26731] [ 1144.207690][T26731] dump_stack_lvl+0xe8/0x150 [ 1144.207726][T26731] should_fail_ex+0x410/0x560 [ 1144.207763][T26731] should_failslab+0xa8/0x100 [ 1144.207796][T26731] __kmalloc_cache_noprof+0xa3/0x600 [ 1144.207825][T26731] ? bpf_diag_init+0x87/0x140 [ 1144.207852][T26731] ? bpf_diag_init+0x87/0x140 [ 1144.207883][T26731] bpf_diag_init+0x87/0x140 [ 1144.207908][T26731] bpf_check+0x8c6/0x3560 [ 1144.207934][T26731] ? trace_irq_disable+0x3b/0x140 [ 1144.207978][T26731] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1144.208006][T26731] ? __pfx_bpf_check+0x10/0x10 [ 1144.208039][T26731] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1144.208077][T26731] bpf_prog_load+0x1594/0x1d60 [ 1144.208121][T26731] ? __pfx_bpf_prog_load+0x10/0x10 [ 1144.208183][T26731] __sys_bpf+0xd86/0xe00 [ 1144.208221][T26731] ? __pfx___sys_bpf+0x10/0x10 [ 1144.208291][T26731] ? trace_syscall_enter+0x58/0x110 [ 1144.208333][T26731] __x64_sys_bpf+0xba/0xd0 [ 1144.208362][T26731] do_syscall_64+0x166/0x520 [ 1144.208385][T26731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.208406][T26731] ? clear_bhb_loop+0x70/0xc0 [ 1144.208433][T26731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.208454][T26731] RIP: 0033:0x7fdc56b9e1d9 [ 1144.208474][T26731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1144.208492][T26731] RSP: 002b:00007fdc57a1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1144.208514][T26731] RAX: ffffffffffffffda RBX: 00007fdc56e25fa0 RCX: 00007fdc56b9e1d9 [ 1144.208529][T26731] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 1144.208543][T26731] RBP: 00007fdc57a1b090 R08: 0000000000000000 R09: 0000000000000000 [ 1144.208557][T26731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1144.208569][T26731] R13: 00007fdc56e26038 R14: 00007fdc56e25fa0 R15: 00007fffe14c7fd8 [ 1144.208608][T26731] [ 1144.211660][T26729] netlink: 272 bytes leftover after parsing attributes in process `syz.3.6207'. [ 1144.211690][T26729] netlink: 272 bytes leftover after parsing attributes in process `syz.3.6207'. [ 1144.807629][T26738] netlink: 'syz.4.6208': attribute type 13 has an invalid length. [ 1144.807654][T26738] netlink: 'syz.4.6208': attribute type 12 has an invalid length. [ 1144.813819][T26738] netlink: 'syz.4.6208': attribute type 2 has an invalid length. [ 1145.105228][T26747] tmpfs: Bad value for 'gid' [ 1145.105249][T26747] tmpfs: Bad value for 'gid' [ 1145.109646][T26747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6212'. [ 1145.247224][T26753] block nbd0: not configured, cannot reconfigure [ 1145.271639][T26752] netlink: 'syz.4.6215': attribute type 10 has an invalid length. [ 1145.271700][T26752] ipvlan0: entered allmulticast mode [ 1145.271732][T26752] veth0_vlan: entered allmulticast mode [ 1145.311601][T26752] team0: Device ipvlan0 failed to register rx_handler [ 1145.533136][T26761] FAULT_INJECTION: forcing a failure. [ 1145.533136][T26761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1145.533205][T26761] CPU: 1 UID: 0 PID: 26761 Comm: syz.3.6219 Not tainted syzkaller #0 PREEMPT(full) [ 1145.533228][T26761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1145.533240][T26761] Call Trace: [ 1145.533248][T26761] [ 1145.533257][T26761] dump_stack_lvl+0xe8/0x150 [ 1145.533291][T26761] should_fail_ex+0x410/0x560 [ 1145.533324][T26761] _copy_from_user+0x2d/0xb0 [ 1145.533345][T26761] ___sys_sendmsg+0x1c6/0x360 [ 1145.533366][T26761] ? __lock_acquire+0x747/0x2de0 [ 1145.533394][T26761] ? __pfx____sys_sendmsg+0x10/0x10 [ 1145.533421][T26761] ? __pfx_trace_call_bpf+0x10/0x10 [ 1145.533476][T26761] ? __fget_files+0x2a/0x420 [ 1145.533496][T26761] ? __fget_files+0x3a2/0x420 [ 1145.533525][T26761] __x64_sys_sendmsg+0x1b1/0x290 [ 1145.533549][T26761] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1145.533591][T26761] do_syscall_64+0x166/0x520 [ 1145.533614][T26761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.533635][T26761] ? clear_bhb_loop+0x70/0xc0 [ 1145.533666][T26761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.533686][T26761] RIP: 0033:0x7fbba3b9e1d9 [ 1145.533705][T26761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1145.533723][T26761] RSP: 002b:00007fbba49bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1145.533745][T26761] RAX: ffffffffffffffda RBX: 00007fbba3e25fa0 RCX: 00007fbba3b9e1d9 [ 1145.533760][T26761] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1145.533773][T26761] RBP: 00007fbba49bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1145.533786][T26761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1145.533798][T26761] R13: 00007fbba3e26038 R14: 00007fbba3e25fa0 R15: 00007ffd9e4a26e8 [ 1145.533830][T26761] [ 1146.096310][T26771] netlink: 'syz.4.6224': attribute type 10 has an invalid length. [ 1146.117273][T26771] team0: Device ipvlan0 failed to register rx_handler [ 1146.249606][T26779] netlink: 'syz.1.6225': attribute type 13 has an invalid length. [ 1146.249631][T26779] netlink: 'syz.1.6225': attribute type 12 has an invalid length. [ 1146.251739][T26779] netlink: 'syz.1.6225': attribute type 2 has an invalid length. [ 1146.446512][ T31] audit: type=1107 audit(1791654540.139:74): pid=26784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1146.655704][T26793] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1146.655794][T26793] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1146.655869][T26793] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1146.758438][T26793] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1147.155337][T26814] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.6237'. [ 1147.155377][T26814] veth0_to_bond: default FDB implementation only supports local addresses [ 1147.380549][T26819] netlink: 'syz.1.6240': attribute type 13 has an invalid length. [ 1147.380577][T26819] netlink: 'syz.1.6240': attribute type 12 has an invalid length. [ 1147.385532][T26819] netlink: 'syz.1.6240': attribute type 2 has an invalid length. [ 1147.741312][ T31] audit: type=1107 audit(1791654541.429:75): pid=26828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1147.778047][T26831] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6244'. [ 1148.059277][ T31] audit: type=1107 audit(1791654541.749:76): pid=26837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1148.166959][T26840] netlink: 'syz.0.6246': attribute type 10 has an invalid length. [ 1148.209402][T26840] team0: Device ipvlan0 failed to register rx_handler [ 1148.210973][T26843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6249'. [ 1148.210993][T26843] nbd: must specify at least one socket [ 1148.351132][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1148.361155][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1148.362802][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1148.364631][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1148.388632][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1148.748927][T26860] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.6254'. [ 1148.751660][T26860] openvswitch: netlink: Message has 8 unknown bytes. [ 1148.751712][T26860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1149.186429][T26857] netlink: 'syz.3.6253': attribute type 13 has an invalid length. [ 1149.186490][T26857] netlink: 'syz.3.6253': attribute type 12 has an invalid length. [ 1149.212276][T26857] netlink: 'syz.3.6253': attribute type 2 has an invalid length. [ 1149.361770][T26877] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6257'. [ 1149.419401][T26880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6259'. [ 1149.419425][T26880] nbd: must specify at least one socket [ 1149.518648][T26878] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 1149.884694][T26899] netlink: 'syz.0.6262': attribute type 2 has an invalid length. [ 1149.884734][T26899] netlink: 'syz.0.6262': attribute type 8 has an invalid length. [ 1149.884772][T26899] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6262'. [ 1150.177910][T26907] netlink: 'syz.1.6265': attribute type 4 has an invalid length. [ 1150.271822][T26902] netlink: 71 bytes leftover after parsing attributes in process `syz.1.6265'. [ 1150.475982][ T5627] Bluetooth: hci4: command tx timeout [ 1150.568186][T26845] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.570106][T26845] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.570259][T26845] bridge_slave_0: entered allmulticast mode [ 1150.572830][T26845] bridge_slave_0: entered promiscuous mode [ 1150.576337][T26845] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.576450][T26845] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.576587][T26845] bridge_slave_1: entered allmulticast mode [ 1150.578479][T26845] bridge_slave_1: entered promiscuous mode [ 1150.666369][T26917] tmpfs: Bad value for 'uid' [ 1150.666412][T26917] tmpfs: Bad value for 'uid' [ 1150.678193][T26917] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6268'. [ 1150.705806][T26845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1150.708971][T26845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1150.742568][T26920] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6269'. [ 1150.801250][T26845] team0: Port device team_slave_0 added [ 1150.809647][T26845] team0: Port device team_slave_1 added [ 1150.823263][T26922] nbd: must specify at least one socket [ 1150.916695][T26845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1150.916714][T26845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1150.916740][T26845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1150.919036][T26845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1150.919051][T26845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1150.919106][T26845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1151.060112][T26845] hsr_slave_0: entered promiscuous mode [ 1151.061385][T26845] hsr_slave_1: entered promiscuous mode [ 1151.062205][T26845] debugfs: 'hsr0' already exists in 'hsr' [ 1151.062225][T26845] Cannot create hsr debugfs directory [ 1151.832118][T26845] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.982865][T26845] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.100761][T26845] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.344006][T26845] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.403423][T26953] tmpfs: Bad value for 'uid' [ 1152.403457][T26953] tmpfs: Bad value for 'uid' [ 1152.408431][T26953] __nla_validate_parse: 3 callbacks suppressed [ 1152.408564][T26953] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6279'. [ 1152.574016][ T5627] Bluetooth: hci4: command tx timeout [ 1152.647984][T26955] validate_nla: 2 callbacks suppressed [ 1152.648005][T26955] netlink: 'syz.3.6280': attribute type 4 has an invalid length. [ 1152.648022][T26955] netlink: 'syz.3.6280': attribute type 17 has an invalid length. [ 1152.826983][T26961] netlink: 71 bytes leftover after parsing attributes in process `syz.3.6280'. [ 1153.549694][T26845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1153.557969][T26845] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1153.560446][T26845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1153.600870][T26845] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1153.604991][T26845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1153.640783][T26845] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1153.641680][T26845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1153.656351][T26972] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 1153.681953][T26845] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1153.869297][T26988] netlink: 272 bytes leftover after parsing attributes in process `syz.0.6284'. [ 1153.869323][T26988] netlink: 272 bytes leftover after parsing attributes in process `syz.0.6284'. [ 1154.440908][T26845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1154.498801][T26845] 8021q: adding VLAN 0 to HW filter on device team0 [ 1154.524298][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.524403][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1154.551241][ T1387] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.551342][ T1387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1154.635128][ T5627] Bluetooth: hci4: command tx timeout [ 1155.062666][T27021] netlink: 'syz.1.6291': attribute type 9 has an invalid length. [ 1155.516536][T27033] sit0: entered allmulticast mode [ 1155.574846][T27029] sit0: entered promiscuous mode [ 1155.786382][T26845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1155.816583][T27039] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6295'. [ 1155.819095][T27039] unsupported nlmsg_type 40 [ 1155.911750][T26845] veth0_vlan: entered promiscuous mode [ 1155.934795][T26845] veth1_vlan: entered promiscuous mode [ 1155.988716][T26845] veth0_macvtap: entered promiscuous mode [ 1155.996517][T26845] veth1_macvtap: entered promiscuous mode [ 1156.148517][T27047] netlink: 272 bytes leftover after parsing attributes in process `syz.4.6297'. [ 1156.148563][T27047] netlink: 272 bytes leftover after parsing attributes in process `syz.4.6297'. [ 1156.226290][T27049] netlink: 272 bytes leftover after parsing attributes in process `syz.3.6296'. [ 1156.226318][T27049] netlink: 272 bytes leftover after parsing attributes in process `syz.3.6296'. [ 1156.287443][T26845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1156.316408][T26845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1156.636901][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.639558][ T1387] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.639743][ T1387] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.639920][ T1387] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.714992][ T5627] Bluetooth: hci4: command tx timeout [ 1156.745119][T27055] tipc: Started in network mode [ 1156.745643][T27055] tipc: Node identity 805e0004, cluster identity 4711 [ 1156.745694][T27055] tipc: Node number set to 2153644036 [ 1156.748777][ T1387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1156.748796][ T1387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1156.827577][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1156.827599][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1157.026724][T27066] netlink: 'syz.1.6304': attribute type 9 has an invalid length. [ 1158.418716][T27092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6314'. [ 1158.469240][T27094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6315'. [ 1158.802078][T27105] netlink: 'syz.1.6317': attribute type 9 has an invalid length. [ 1159.952037][T27136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6329'. [ 1160.148628][T27141] tmpfs: Bad value for 'uid' [ 1160.148674][T27141] tmpfs: Bad value for 'uid' [ 1160.149833][T27141] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6331'. [ 1160.757551][T27146] sit0: left promiscuous mode [ 1160.970161][T27153] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 1161.044802][T27149] sit0: entered promiscuous mode [ 1161.606322][T27183] tmpfs: Bad value for 'uid' [ 1161.606342][T27183] tmpfs: Bad value for 'uid' [ 1161.608554][T27183] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6343'. [ 1162.550432][ T59] bridge_slave_1: left allmulticast mode [ 1162.550460][ T59] bridge_slave_1: left promiscuous mode [ 1162.550707][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.578046][ T59] bridge_slave_0: left allmulticast mode [ 1162.578071][ T59] bridge_slave_0: left promiscuous mode [ 1162.578273][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.643425][T27195] netlink: Conntrack attr has 8 unknown bytes [ 1162.643518][T27195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1162.802701][T27202] netlink: 'syz.3.6350': attribute type 16 has an invalid length. [ 1162.802725][T27202] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6350'. [ 1163.141596][ T59] tipc: Left network mode [ 1163.325685][T27211] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6353'. [ 1163.360035][T27211] netlink: 'syz.0.6353': attribute type 2 has an invalid length. [ 1163.360059][T27211] netlink: 119 bytes leftover after parsing attributes in process `syz.0.6353'. [ 1163.868555][ T31] audit: type=1107 audit(1791654557.559:77): pid=27223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1164.204280][T27228] tmpfs: Bad value for 'uid' [ 1164.204300][T27228] tmpfs: Bad value for 'uid' [ 1164.572929][T27244] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6365'. [ 1164.663279][T27242] sit0: left promiscuous mode [ 1164.738600][T27249] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6365'. [ 1165.098286][T27248] sit0: entered promiscuous mode [ 1165.308625][T27256] netlink: 'syz.1.6368': attribute type 10 has an invalid length. [ 1165.317581][T27256] team0: Device ipvlan0 failed to register rx_handler [ 1165.480552][T27261] FAULT_INJECTION: forcing a failure. [ 1165.480552][T27261] name failslab, interval 1, probability 0, space 0, times 0 [ 1165.480585][T27261] CPU: 0 UID: 0 PID: 27261 Comm: syz.3.6370 Not tainted syzkaller #0 PREEMPT(full) [ 1165.480607][T27261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1165.480619][T27261] Call Trace: [ 1165.480627][T27261] [ 1165.480636][T27261] dump_stack_lvl+0xe8/0x150 [ 1165.480669][T27261] should_fail_ex+0x410/0x560 [ 1165.480699][T27261] ? __alloc_skb+0x1db/0x7a0 [ 1165.480727][T27261] should_failslab+0xa8/0x100 [ 1165.480756][T27261] ? __alloc_skb+0x1db/0x7a0 [ 1165.480777][T27261] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1165.480799][T27261] ? __alloc_skb+0x18d/0x7a0 [ 1165.480826][T27261] ? __alloc_skb+0x1db/0x7a0 [ 1165.480861][T27261] __alloc_skb+0x1db/0x7a0 [ 1165.480893][T27261] netlink_sendmsg+0x5d4/0xb40 [ 1165.480931][T27261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1165.480964][T27261] ? apparmor_socket_sendmsg+0x98/0x360 [ 1165.481002][T27261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1165.481026][T27261] sock_sendmsg_nosec+0x13a/0x180 [ 1165.481055][T27261] ____sys_sendmsg+0x54e/0x850 [ 1165.481082][T27261] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1165.481113][T27261] ? import_iovec+0x73/0xa0 [ 1165.481146][T27261] ___sys_sendmsg+0x2a5/0x360 [ 1165.481166][T27261] ? __lock_acquire+0x747/0x2de0 [ 1165.481194][T27261] ? __pfx____sys_sendmsg+0x10/0x10 [ 1165.481250][T27261] ? __fget_files+0x2a/0x420 [ 1165.481268][T27261] ? __fget_files+0x3a2/0x420 [ 1165.481297][T27261] __x64_sys_sendmsg+0x1b1/0x290 [ 1165.481321][T27261] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1165.481359][T27261] do_syscall_64+0x166/0x520 [ 1165.481380][T27261] ? trace_irq_disable+0x3b/0x140 [ 1165.481401][T27261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.481421][T27261] ? clear_bhb_loop+0x70/0xc0 [ 1165.481445][T27261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.481464][T27261] RIP: 0033:0x7fbba3b9e1d9 [ 1165.481483][T27261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1165.481499][T27261] RSP: 002b:00007fbba49bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1165.481520][T27261] RAX: ffffffffffffffda RBX: 00007fbba3e25fa0 RCX: 00007fbba3b9e1d9 [ 1165.481535][T27261] RDX: 0000000000008084 RSI: 00002000000007c0 RDI: 0000000000000003 [ 1165.481548][T27261] RBP: 00007fbba49bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1165.481561][T27261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1165.481574][T27261] R13: 00007fbba3e26038 R14: 00007fbba3e25fa0 R15: 00007ffd9e4a26e8 [ 1165.481606][T27261] [ 1165.603651][T27264] tmpfs: Bad value for 'uid' [ 1165.603684][T27264] tmpfs: Bad value for 'uid' [ 1165.620072][T27264] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6371'. [ 1165.950083][ T59] hsr_slave_0: left promiscuous mode [ 1165.950978][ T59] hsr_slave_1: left promiscuous mode [ 1165.951926][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1165.951954][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1165.962180][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1165.962201][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1166.161679][T27277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6377'. [ 1166.595699][T27290] netlink: 'syz.2.6380': attribute type 10 has an invalid length. [ 1166.659821][ T5742] infiniband syz1: ib_query_port failed (-19) [ 1166.663192][T27279] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 1166.668101][ T1517] smc: removing ib device syz1 [ 1166.672434][T27290] ipvlan0: entered allmulticast mode [ 1166.672453][T27290] veth0_vlan: entered allmulticast mode [ 1166.679794][T27290] team0: Device ipvlan0 failed to register rx_handler [ 1166.798282][ T1517] smbdirect: ib_dev[syz1] removed [ 1166.869220][T27300] FAULT_INJECTION: forcing a failure. [ 1166.869220][T27300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1166.869254][T27300] CPU: 1 UID: 0 PID: 27300 Comm: syz.2.6383 Not tainted syzkaller #0 PREEMPT(full) [ 1166.869274][T27300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1166.869287][T27300] Call Trace: [ 1166.869298][T27300] [ 1166.869309][T27300] dump_stack_lvl+0xe8/0x150 [ 1166.869348][T27300] should_fail_ex+0x410/0x560 [ 1166.869394][T27300] _copy_from_user+0x2d/0xb0 [ 1166.869422][T27300] __sys_bpf+0x2e7/0xe00 [ 1166.869477][T27300] ? __pfx___sys_bpf+0x10/0x10 [ 1166.869543][T27300] ? __fget_files+0x2a/0x420 [ 1166.869619][T27300] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1166.869642][T27300] ? ksys_write+0x242/0x270 [ 1166.869676][T27300] ? __pfx_ksys_write+0x10/0x10 [ 1166.869718][T27300] __x64_sys_bpf+0xba/0xd0 [ 1166.869762][T27300] do_syscall_64+0x166/0x520 [ 1166.869786][T27300] ? trace_irq_disable+0x3b/0x140 [ 1166.869810][T27300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.869835][T27300] ? clear_bhb_loop+0x70/0xc0 [ 1166.869885][T27300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.869908][T27300] RIP: 0033:0x7fba9bd9e1d9 [ 1166.869933][T27300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1166.869950][T27300] RSP: 002b:00007fba9cc46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1166.869974][T27300] RAX: ffffffffffffffda RBX: 00007fba9c025fa0 RCX: 00007fba9bd9e1d9 [ 1166.869989][T27300] RDX: 0000000000000048 RSI: 0000200000000ec0 RDI: 0000000000000000 [ 1166.870003][T27300] RBP: 00007fba9cc46090 R08: 0000000000000000 R09: 0000000000000000 [ 1166.870017][T27300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1166.870030][T27300] R13: 00007fba9c026038 R14: 00007fba9c025fa0 R15: 00007ffd5955b688 [ 1166.870094][T27300] [ 1167.615314][T27306] netlink: 'syz.2.6385': attribute type 29 has an invalid length. [ 1167.615353][T27306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6385'. [ 1167.615404][T27306] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6385'. [ 1168.159288][T27310] netlink: 308 bytes leftover after parsing attributes in process `syz.1.6388'. [ 1168.189779][T27316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6389'. [ 1168.192922][T27317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6390'. [ 1168.527360][ T1517] ================================================================== [ 1168.527376][ T1517] BUG: KASAN: slab-use-after-free in kobject_uevent_net_broadcast+0x12c/0x560 [ 1168.527410][ T1517] Read of size 8 at addr ffff888035245dd0 by task kworker/u8:14/1517 [ 1168.527427][ T1517] [ 1168.527437][ T1517] CPU: 1 UID: 0 PID: 1517 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 1168.527459][ T1517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1168.527471][ T1517] Workqueue: ib-unreg-wq ib_unregister_work [ 1168.527496][ T1517] Call Trace: [ 1168.527504][ T1517] [ 1168.527513][ T1517] dump_stack_lvl+0xe8/0x150 [ 1168.527542][ T1517] print_address_description+0x55/0x1e0 [ 1168.527569][ T1517] ? kobject_uevent_net_broadcast+0x12c/0x560 [ 1168.527596][ T1517] print_report+0x58/0x70 [ 1168.527619][ T1517] kasan_report+0x117/0x150 [ 1168.527648][ T1517] ? kobject_uevent_net_broadcast+0x12c/0x560 [ 1168.527687][ T1517] ? __pfx_device_namespace+0x10/0x10 [ 1168.527708][ T1517] kobject_uevent_net_broadcast+0x12c/0x560 [ 1168.527739][ T1517] kobject_uevent_env+0x566/0x9e0 [ 1168.527768][ T1517] device_del+0x74d/0x8f0 [ 1168.527792][ T1517] ? lockdep_hardirqs_on+0x7b/0x110 [ 1168.527816][ T1517] ? __pfx_device_del+0x10/0x10 [ 1168.527843][ T1517] ? kobject_put+0x50f/0x550 [ 1168.527868][ T1517] disable_device+0x248/0x330 [ 1168.527894][ T1517] ? __pfx_disable_device+0x10/0x10 [ 1168.527918][ T1517] ? perf_trace_preemptirq_template+0xb3/0x350 [ 1168.527943][ T1517] ? _raw_spin_unlock_irq+0x23/0x50 [ 1168.527973][ T1517] ? lock_acquire+0x115/0x350 [ 1168.527994][ T1517] ? process_scheduled_works+0x97a/0x1630 [ 1168.528021][ T1517] __ib_unregister_device+0x2c9/0x400 [ 1168.528045][ T1517] ? rcu_is_watching+0x16/0xb0 [ 1168.528070][ T1517] ? process_scheduled_works+0x97a/0x1630 [ 1168.528096][ T1517] ib_unregister_work+0x19/0x30 [ 1168.528117][ T1517] process_scheduled_works+0xc3d/0x1630 [ 1168.528156][ T1517] ? __pfx_process_scheduled_works+0x10/0x10 [ 1168.528184][ T1517] ? assign_work+0x3cf/0x5d0 [ 1168.528211][ T1517] worker_thread+0xa47/0xfb0 [ 1168.528244][ T1517] ? __kthread_parkme+0x71/0x1f0 [ 1168.528277][ T1517] kthread+0x38b/0x480 [ 1168.528297][ T1517] ? __pfx_worker_thread+0x10/0x10 [ 1168.528323][ T1517] ? __pfx_kthread+0x10/0x10 [ 1168.528343][ T1517] ret_from_fork+0x514/0xb70 [ 1168.528364][ T1517] ? __pfx_ret_from_fork+0x10/0x10 [ 1168.528383][ T1517] ? __switch_to+0xc89/0x1420 [ 1168.528411][ T1517] ? __pfx_kthread+0x10/0x10 [ 1168.528431][ T1517] ret_from_fork_asm+0x1a/0x30 [ 1168.528457][ T1517] [ 1168.528464][ T1517] [ 1168.528470][ T1517] Allocated by task 27265: [ 1168.528480][ T1517] kasan_save_track+0x3e/0x80 [ 1168.528503][ T1517] __kasan_kmalloc+0x93/0xb0 [ 1168.528527][ T1517] __kmalloc_cache_noprof+0x321/0x600 [ 1168.528548][ T1517] uevent_net_init+0xdb/0x2d0 [ 1168.528572][ T1517] ops_init+0x35d/0x5d0 [ 1168.528597][ T1517] setup_net+0x118/0x350 [ 1168.528619][ T1517] copy_net_ns+0x53b/0x780 [ 1168.528640][ T1517] create_new_namespaces+0x3f0/0x6b0 [ 1168.528662][ T1517] copy_namespaces+0x432/0x4b0 [ 1168.528694][ T1517] copy_process+0x1ec4/0x4400 [ 1168.528718][ T1517] kernel_clone+0x2d7/0x940 [ 1168.528743][ T1517] __x64_sys_clone+0x1b6/0x230 [ 1168.528769][ T1517] do_syscall_64+0x166/0x520 [ 1168.528788][ T1517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.528807][ T1517] [ 1168.528812][ T1517] Freed by task 27265: [ 1168.528822][ T1517] kasan_save_track+0x3e/0x80 [ 1168.528844][ T1517] kasan_save_free_info+0x40/0x50 [ 1168.528863][ T1517] __kasan_slab_free+0x5c/0x80 [ 1168.528886][ T1517] kfree+0x1c5/0x650 [ 1168.528903][ T1517] ops_undo_list+0x43d/0x8d0 [ 1168.528928][ T1517] setup_net+0x2f6/0x350 [ 1168.528952][ T1517] copy_net_ns+0x53b/0x780 [ 1168.528974][ T1517] create_new_namespaces+0x3f0/0x6b0 [ 1168.528996][ T1517] copy_namespaces+0x432/0x4b0 [ 1168.529019][ T1517] copy_process+0x1ec4/0x4400 [ 1168.529042][ T1517] kernel_clone+0x2d7/0x940 [ 1168.529067][ T1517] __x64_sys_clone+0x1b6/0x230 [ 1168.529094][ T1517] do_syscall_64+0x166/0x520 [ 1168.529112][ T1517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.529130][ T1517] [ 1168.529135][ T1517] The buggy address belongs to the object at ffff888035245dc0 [ 1168.529135][ T1517] which belongs to the cache kmalloc-32 of size 32 [ 1168.529153][ T1517] The buggy address is located 16 bytes inside of [ 1168.529153][ T1517] freed 32-byte region [ffff888035245dc0, ffff888035245de0) [ 1168.529172][ T1517] [ 1168.529177][ T1517] The buggy address belongs to the physical page: [ 1168.529188][ T1517] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888035245f80 pfn:0x35245 [ 1168.529208][ T1517] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1168.529226][ T1517] page_type: f5(slab) [ 1168.529244][ T1517] raw: 00fff00000000200 ffff88801c041780 ffffea000166c650 ffffea0000a92910 [ 1168.529261][ T1517] raw: ffff888035245f80 000000000040002b 00000000f5000000 0000000000000000 [ 1168.529272][ T1517] page dumped because: kasan: bad access detected [ 1168.529289][ T1517] page_owner tracks the page as allocated [ 1168.529300][ T1517] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18683217520 [ 1168.529330][ T1517] post_alloc_hook+0x1f9/0x250 [ 1168.529349][ T1517] get_page_from_freelist+0x2209/0x2280 [ 1168.529373][ T1517] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 1168.529396][ T1517] allocate_slab+0x7d/0x620 [ 1168.529411][ T1517] refill_objects+0x2d5/0x350 [ 1168.529427][ T1517] __pcs_replace_empty_main+0x2c8/0x6c0 [ 1168.529455][ T1517] __kmalloc_noprof+0x47b/0x720 [ 1168.529475][ T1517] kobject_get_path+0xc5/0x2f0 [ 1168.529496][ T1517] kobject_uevent_env+0x29e/0x9e0 [ 1168.529521][ T1517] kernel_add_sysfs_param+0xb1/0xe0 [ 1168.529544][ T1517] param_sysfs_builtin+0x199/0x250 [ 1168.529565][ T1517] param_sysfs_builtin_init+0x23/0x30 [ 1168.529587][ T1517] do_one_initcall+0x250/0x870 [ 1168.529613][ T1517] do_initcall_level+0x10a/0x1a0 [ 1168.529638][ T1517] do_initcalls+0x59/0xa0 [ 1168.529660][ T1517] kernel_init_freeable+0x29d/0x3e0 [ 1168.529690][ T1517] page last free pid 1414 tgid 1414 ts 18682511526 stack trace: [ 1168.529704][ T1517] __free_frozen_pages+0xc93/0xd90 [ 1168.529724][ T1517] __kasan_populate_vmalloc+0x1a8/0x1c0 [ 1168.529746][ T1517] alloc_vmap_area+0xd1a/0x1420 [ 1168.529763][ T1517] __get_vm_area_node+0x200/0x2f0 [ 1168.529780][ T1517] __vmalloc_node_range_noprof+0x343/0x1540 [ 1168.529800][ T1517] __vmalloc_node_noprof+0xc2/0x100 [ 1168.529819][ T1517] dup_task_struct+0x2c6/0xa00 [ 1168.529841][ T1517] copy_process+0x7e0/0x4400 [ 1168.529863][ T1517] kernel_clone+0x2d7/0x940 [ 1168.529888][ T1517] user_mode_thread+0x115/0x180 [ 1168.529914][ T1517] call_usermodehelper_exec_work+0x5c/0x230 [ 1168.529938][ T1517] process_scheduled_works+0xc3d/0x1630 [ 1168.529961][ T1517] worker_thread+0xa47/0xfb0 [ 1168.529985][ T1517] kthread+0x38b/0x480 [ 1168.530002][ T1517] ret_from_fork+0x514/0xb70 [ 1168.530018][ T1517] ret_from_fork_asm+0x1a/0x30 [ 1168.530035][ T1517] [ 1168.530040][ T1517] Memory state around the buggy address: [ 1168.530050][ T1517] ffff888035245c80: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 1168.530064][ T1517] ffff888035245d00: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 1168.530077][ T1517] >ffff888035245d80: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 1168.530087][ T1517] ^ [ 1168.530098][ T1517] ffff888035245e00: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 1168.530111][ T1517] ffff888035245e80: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 1168.530121][ T1517] ================================================================== [ 1168.530139][ T1517] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1169.262337][ T1517] CPU: 1 UID: 0 PID: 1517 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 1169.271857][ T1517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1169.281902][ T1517] Workqueue: ib-unreg-wq ib_unregister_work [ 1169.287783][ T1517] Call Trace: [ 1169.291046][ T1517] [ 1169.293961][ T1517] vpanic+0x56d/0xa60 [ 1169.297934][ T1517] ? __pfx_vpanic+0x10/0x10 [ 1169.302425][ T1517] panic+0xc5/0xd0 [ 1169.306130][ T1517] ? __pfx_panic+0x10/0x10 [ 1169.310534][ T1517] ? kobject_uevent_net_broadcast+0x12c/0x560 [ 1169.316594][ T1517] ? kobject_uevent_net_broadcast+0x12c/0x560 [ 1169.322647][ T1517] check_panic_on_warn+0x89/0xb0 [ 1169.327568][ T1517] ? kobject_uevent_net_broadcast+0x12c/0x560 [ 1169.333621][ T1517] end_report+0x73/0x170 [ 1169.337849][ T1517] ? kobject_uevent_net_broadcast+0x12c/0x560 [ 1169.343908][ T1517] kasan_report+0x128/0x150 [ 1169.348402][ T1517] ? kobject_uevent_net_broadcast+0x12c/0x560 [ 1169.354454][ T1517] ? __pfx_device_namespace+0x10/0x10 [ 1169.359808][ T1517] kobject_uevent_net_broadcast+0x12c/0x560 [ 1169.365687][ T1517] kobject_uevent_env+0x566/0x9e0 [ 1169.370700][ T1517] device_del+0x74d/0x8f0 [ 1169.375014][ T1517] ? lockdep_hardirqs_on+0x7b/0x110 [ 1169.380195][ T1517] ? __pfx_device_del+0x10/0x10 [ 1169.385033][ T1517] ? kobject_put+0x50f/0x550 [ 1169.389634][ T1517] disable_device+0x248/0x330 [ 1169.394301][ T1517] ? __pfx_disable_device+0x10/0x10 [ 1169.399483][ T1517] ? perf_trace_preemptirq_template+0xb3/0x350 [ 1169.405619][ T1517] ? _raw_spin_unlock_irq+0x23/0x50 [ 1169.410805][ T1517] ? lock_acquire+0x115/0x350 [ 1169.415491][ T1517] ? process_scheduled_works+0x97a/0x1630 [ 1169.421197][ T1517] __ib_unregister_device+0x2c9/0x400 [ 1169.426555][ T1517] ? rcu_is_watching+0x16/0xb0 [ 1169.431306][ T1517] ? process_scheduled_works+0x97a/0x1630 [ 1169.437016][ T1517] ib_unregister_work+0x19/0x30 [ 1169.441892][ T1517] process_scheduled_works+0xc3d/0x1630 [ 1169.447460][ T1517] ? __pfx_process_scheduled_works+0x10/0x10 [ 1169.453430][ T1517] ? assign_work+0x3cf/0x5d0 [ 1169.458007][ T1517] worker_thread+0xa47/0xfb0 [ 1169.462589][ T1517] ? __kthread_parkme+0x71/0x1f0 [ 1169.467517][ T1517] kthread+0x38b/0x480 [ 1169.471594][ T1517] ? __pfx_worker_thread+0x10/0x10 [ 1169.476694][ T1517] ? __pfx_kthread+0x10/0x10 [ 1169.481265][ T1517] ret_from_fork+0x514/0xb70 [ 1169.485839][ T1517] ? __pfx_ret_from_fork+0x10/0x10 [ 1169.490957][ T1517] ? __switch_to+0xc89/0x1420 [ 1169.495622][ T1517] ? __pfx_kthread+0x10/0x10 [ 1169.500200][ T1517] ret_from_fork_asm+0x1a/0x30 [ 1169.504948][ T1517] [ 1169.508214][ T1517] Kernel Offset: disabled [ 1169.512526][ T1517] Rebooting in 86400 seconds..