last executing test programs: 9m14.56792428s ago: executing program 1 (id=522): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xf, 0x3, 0x2) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x3ff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x22, 0x2, 0x25, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r1) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4000801) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x60}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) 9m14.268089143s ago: executing program 1 (id=526): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000007d000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(0x0, 0xbe9bac6d2d0f4e0b) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x9, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000200), 0x2}, 0x101130, 0x0, 0x0, 0x8, 0x6, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x800000000005}, 0x0, 0xa, 0xffffffffffffffff, 0xa) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x24080) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) 9m12.394370552s ago: executing program 1 (id=535): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040041}, 0x4080) socket$kcm(0x2, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f0000000d00)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="20000000091420682bb30c4bf19c5835bb0b010001000000080001000100000068d78519988805061073b7f9b9f66e7bbf56c8271718239701a10675abdd2c0c926c3e5798f97bfab9625fa3f31866d004f2af7ce3036a94003f9fe834bd7798d8cf606564be75d451b064214fc530da9f7a593fb121ae44059bb5f3e3a1848d7e0d192f2beb044b169ee3f865587dc27f72864fcb2b8d5891eb5d20aca49ac236843905b4dbfd4575548cff90f744822e20e386d601c961f1b3fd31eab54854db2e0304f62b14b344099fbc9ead82c792b6cb64e1c5fc59603b484f1712c948ce7d08654fa3d3351381c0"], 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x7, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c33, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) mkdir(0x0, 0x18b) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x80000006, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r5, &(0x7f0000000340)={&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f00000049c0)=""/4109, 0x100d}, {&(0x7f0000000500)=""/106, 0x6a}, {&(0x7f0000000140)=""/46, 0x2e}, {&(0x7f00000009c0)=""/220, 0xdc}, {&(0x7f0000000580)=""/100, 0x64}, {&(0x7f0000000ac0)=""/134, 0x86}, {&(0x7f0000000b80)=""/140, 0x8c}, {&(0x7f0000000280)=""/38, 0x26}], 0x9, &(0x7f0000000800)=""/126, 0x7e}, 0x12021) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000e00)=ANY=[@ANYBLOB="a80000006404010029bd7000fedbdf2531b49d835942512128a089c4df1adc6f637a087a19d62804ce3957e2b9dab0f88e01c9ee537f254726a02adabf900fa05a5170460e51ce00eb8799f315fb02cb964626c324d3e19bf9c14e7ada80281bf90264872614fe4883eaf2fb00915d771403f7140ed55cdd187740bb5c494c478836d5f2164aa7d3958af1057392a23df928842336ec9899cb178ada00f145a0bdcc94e4af04d44808f10f24ed60d7b4b1b0b330760000"], 0xa8}, 0x1, 0x0, 0x0, 0x81}, 0x20004884) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c000780180001801400024000"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 9m12.083500386s ago: executing program 1 (id=538): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4b, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x1946}, 0x10000, 0x0, 0x0, 0x9, 0x3fe, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20050800) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x800, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580)=0x2, 0x0}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0xbc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0x0, 0x4, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, 0x0) sendmsg$sock(r1, &(0x7f0000000800)={&(0x7f00000002c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x100}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000340)="5afb6f0a498fa3330573fabddf26d5f7abf81bd9c7faf25c42d4ae1b3a8d74182730cc306762f2074bef1d270ac72e2f", 0x30}, {&(0x7f0000000400)}, {&(0x7f00000004c0)="7d6f99deee6269ccffee130375beb64f59caed05589e9ce1505c99a31728959c7fc1b07c6ef3f5faa1382cc09e53c71cde90e0bf7f84b0822c9cd667295ffb47e1ab3b589a5b0ba169b9a152a7975a42122f0048b046943963627f1eff89895bfa77eef06210db4968190b6eacc32f0aca0aecc869fcc80476df52d7400a8b553b721c", 0x83}, {&(0x7f0000000580)="fcaa406f8856030f98d5959aecf43c6828c8053cd3271b0c476eb836439d9fc6d7", 0x21}, {&(0x7f0000000600)="1a79ad800978a775b3601dd18bb0c088d31e8c8ff66f7bef5e5cb4060e5765cf6436972970032e56c41b6975530b1320bdfdda5f2935dc0f75dae68f36a72ccf2d1af156d1c0362a3f09c571c50875686d827ba304e5bb608ff24b8e2538947e250809252c7c80840ab826e85f2304f7fab7", 0x72}, {&(0x7f0000000680)="4a37025ba545caf93129393ee95e8f1fcce86966d365a35cad8b50f762954ff0b93ab780e2c777ef35d36cc8aea3bc8ecff435ce173807864284f2d2699e1f72df79252656de14ef35420fba393211d644589a26e31572e46baa51b7f2a1a94dadef193612", 0x65}], 0x6, &(0x7f0000000780)}, 0x20000800) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c020000190001000000000001000000fe88000000000000000000000000010100000000000000000000000000000000000800000000000002000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 9m11.505331335s ago: executing program 1 (id=542): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1da}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) 9m8.678686426s ago: executing program 1 (id=555): socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000044}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a400000000108000340"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800800034000000002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 8m53.388243761s ago: executing program 32 (id=555): socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000044}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a400000000108000340"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800800034000000002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6.134683299s ago: executing program 2 (id=3775): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x4, 0x0, 0x10000000000, 0x808, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x4}, 0x4108, 0x3, 0x0, 0x6, 0x7, 0xffffffff, 0x802, 0x0, 0xffffffff, 0x0, 0x200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x19) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x48800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$TUNGETFEATURES(r3, 0x5452, &(0x7f00000013c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\xfd\xfd\xff\xff\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200"/32], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x23, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a320000000009000100", @ANYRES16=r3], 0xc4}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x82, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f0000000040), 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d}) 4.735460027s ago: executing program 2 (id=3797): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0xc, &(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x4d, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000084000000000100", @ANYRES32, @ANYRESHEX=r0], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003600000085000000080000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xe, 0xfffffffffffffd85, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x739d, 0x0, 0x7, 0xfffffffffffffff3}, 0x28) 3.82773065s ago: executing program 2 (id=3804): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010d631f6dbc8486bc5d5bf2ca8285056892db03cf1c62d57c08a90b189d190c341035de53a9a53608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18a77dda613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be4248cdc138408ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bced7798509e64df360d95f9a4099f86438ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c590bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c87acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b90106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10ea52f1018527f4aa39cdafa3eff63de2a7f50d042667820f6f86f276afb2b8134301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3bd9b1d742e334319c8979c322e92"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) socket$kcm(0x2, 0x922000000001, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000400009002bbd7000fddbdf250200000004001f000800018004001f90100004", @ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x800) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2080}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2e, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2000000000008, 0x830d}, 0x0, 0x2, 0x80000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000049bc2dab56b0733a2651", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = socket$kcm(0xa, 0x2, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$kcm(r4, &(0x7f0000000380)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 3.472421421s ago: executing program 5 (id=3808): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x401, 0x5}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0xa, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000002"], 0x0, 0x26}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x10020) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sockopt=0x16}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 3.133078256s ago: executing program 5 (id=3813): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="02150a091400000028bd7000fddbdf25010014000f00100003000700ffff000000000000000005000500ff2000000a004e2400000006fe8000000000000000000000000000aa040000000000000009000900f80100006ab94f6437c02a8a2209c382223762df2ff5ff957735ec1ca800462bc96aba692a1c8144a05cf8ecf0f949af79f507b18a1aa49f39f80000000000000000000000d04ac1ca4444f2a9b52e3df1b5396110a717cd81653ad1ebbc9de6c1e82d18a1504a2b167fe663efef843b0a000000000000000000"], 0xa0}}, 0x40) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000003a00010325bd7000120000000c000000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r5, &(0x7f0000000340)) 3.104329795s ago: executing program 3 (id=3814): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000d"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000c00000001"], 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x200, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x9, 0xc, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffbfffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000012000000240000000800000085"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xafe6) r2 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x2, 0x2, 0x88, &(0x7f0000000580)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2102) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af3650400420008001d001931a0e69ee517d34460bc0600e8ea2c0000a705251e6182949a3651f60a84c9f4d4938000e70e4509c5bb93776237", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) openat$cgroup_procs(r3, &(0x7f0000000340)='cgroup.threads\x00', 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8918, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="0200810000e1"}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000), 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="140000002d000b35f8ff", 0xa}], 0x1}, 0x0) 3.063560558s ago: executing program 0 (id=3815): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x4, 0x0, 0x10000000000, 0x808, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x4}, 0x4108, 0x3, 0x0, 0x6, 0x7, 0xffffffff, 0x802, 0x0, 0xffffffff, 0x0, 0x200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x19) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x48800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$TUNGETFEATURES(r3, 0x5452, &(0x7f00000013c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x40}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x4000801) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x1e, 0x1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) recvmsg$kcm(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000480)=""/146, 0x92}], 0x1}, 0x80f3051602a5e657) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x3, 0x3, 0x0, 0x400, 0x1, 0x1, '\x00', 0x0, r0, 0x0, 0x0, 0x4, 0x3}, 0x50) r8 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x11, 0x68, &(0x7f0000000640), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x1100, 0x0, 0x0, 0x6, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xe, 0xffffffffffffffff, 0x1) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000100)='THAWED\x00', 0x7) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0xf, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4044080) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0, 0x0, 0x6c}, @in6=@remote, {0x0, 0x40, 0x0, 0x0, 0x0, 0x1f6}, {}, {}, 0x0, 0x3506, 0xa, 0x1, 0x0, 0x40}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='rxrpc_client\x00', r7, 0x0, 0x5}, 0x18) r8 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0xfc00) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) 2.692770244s ago: executing program 5 (id=3817): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x1000000000003fe, 0x7fffffff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x8000000000008, 0xffffffffffffffff, 0xa) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x9, 0x0, r0, 0x87, '\x00', 0x0, r0, 0x4, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x5452, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='mm_lru_insertion\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000009000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, 0xf}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)) 2.241431658s ago: executing program 2 (id=3818): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="1000000011140f0000000007ffdbdf25cc3a58ed5a6c670dc83665aa50464d269042cd3fc0ce6fe002100d98918acc2956e55b5a32b4626fe07573ec173e5ec00702e60c920916b3a1895fbd6ef4e68d38d824711b30329482c825739d778fee81e8cb61c19a3c1dcaff497e49030dbfc4580e1e501412ae82080000007d81ce8cc70c"], 0x10}, 0x1, 0x0, 0x0, 0x2000}, 0x4000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000d00)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x0, 0x0}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000080)='syz0\x00', 0x1ff) openat$cgroup(r3, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000003060500000000000000000000000000050001"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 2.239186096s ago: executing program 4 (id=3819): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r3, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 2.052488115s ago: executing program 0 (id=3820): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e00"/20, @ANYRES32=0x1], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180000190000000002000000000000001840000002000000000000000000000095000000000000009500000000000200"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x2}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x4, 0x4, 0x6}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&\x00'], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="0500"], 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040)) write$cgroup_int(r0, &(0x7f0000000100)=0x3, 0x12) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d80000003e0081064e81ff83db4cb9040a1d080006007c09e8fc55a10a0015040400142603600e1208000f00000004bcb3d26f000800024004000000035c0461c1d67f6f94007134cf9df359d4aae88a22dab59e7a8f46236efb8000a007a264cf6ad4161f3e4e7ce06bbace8017cbec4c2ee5a7cef4090000001fb71b27d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ea37b00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffff05c1c9b6278754ca397c388b0dd6e4edef3d93", 0xd8}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x85080400, &(0x7f0000000440)="b620e18eadb3ba97f0024faad68ef3f35d9658afa54a080daf6bdf8f7c83a16864d79ea03a711caf357c89b40f11c151c2b8295ac15a3bd91c7460c436d3018a7eda704299854be3e1384acad966a817f1615d8de9", 0x55, &(0x7f0000000380), &(0x7f00000004c0), &(0x7f0000001340)="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") r5 = openat$tun(0xffffffffffffff9c, 0x0, 0xb6643, 0x0) close(r5) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x4, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4000056) r7 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x6, 0x43, &(0x7f0000000000), 0x4) 1.879499747s ago: executing program 5 (id=3821): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={0x20, 0x7, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1.874555373s ago: executing program 4 (id=3822): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000440)='ext4_fc_commit_stop\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1943}, 0x101020, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x23, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a320000000009000100", @ANYRES16=r3], 0xc4}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x82, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f0000000040), 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d}) 1.80313684s ago: executing program 0 (id=3823): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x401, 0x5}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0xa, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000002"], 0x0, 0x26}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x10020) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sockopt=0x16}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 1.801413263s ago: executing program 3 (id=3824): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x401, 0x5}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0xa, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[], 0x0, 0x26}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x10020) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sockopt=0x16}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 1.422384093s ago: executing program 5 (id=3825): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e00"/20, @ANYRES32=0x1], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180000190000000002000000000000001840000002000000000000000000000095000000000000009500000000000200"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x2}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x4, 0x4, 0x6}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&\x00'], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="0500"], 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040)) write$cgroup_int(r0, &(0x7f0000000100)=0x3, 0x12) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d80000003e0081064e81ff83db4cb9040a1d080006007c09e8fc55a10a0015040400142603600e1208000f00000004bcb3d26f000800024004000000035c0461c1d67f6f94007134cf9df359d4aae88a22dab59e7a8f46236efb8000a007a264cf6ad4161f3e4e7ce06bbace8017cbec4c2ee5a7cef4090000001fb71b27d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ea37b00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffff05c1c9b6278754ca397c388b0dd6e4edef3d93", 0xd8}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x85080400, &(0x7f0000000440)="b620e18eadb3ba97f0024faad68ef3f35d9658afa54a080daf6bdf8f7c83a16864d79ea03a711caf357c89b40f11c151c2b8295ac15a3bd91c7460c436d3018a7eda704299854be3e1384acad966a817f1615d8de9", 0x55, &(0x7f0000000380), &(0x7f00000004c0), &(0x7f0000001340)="6544960f948ed8d0d3a7ae50ff1e65ea241655a5c55ed4f9556449d4559be4fec81ed6eb7467067984908e7d845abd035374ac4d817c6cfff29c4592bd76a96d79535ed7c7e3a34c58474c28db6d687622c8fa6cb86f020a962fdbbd14b81aaaf5abb4a198e0cabc51118a64d25898365cbcc31f48c0db50cc5fbc84092f29511596acd28d1436ce2832cd85518128c643e1686c4c85ac765aa998dd4f1bc7c4913ddbe8e5f5a7a26e9a24ee7c3484f9248a3107d48e27fc9b7c5095622f5d35666874bffe793d0779a6803862811863e5430eb77de06adaad86288232dbd5840b55504a8b0acc3ea696c4fca92d0c6872bdf784a1d206f4f0faaf70f290b3dcdef285319f023ff461504a2670ae6d1c1b8c616251646d38774317882ec806519be928e962e0a9ad299043b9835b3509e16959a226ca8b5e5818b171d997042ad32cfd52590abc722fc3b764cdb2099c1b1e9ef6581d92eb054f7234556130b6c8dbfd03ea994f558089973928468f10f794ddb45cb28360003492e50b731a1f777d432ec09298ea0b905925bac50ac5d083ed61b6abc71c48770f7acda310e817c71a7eb2ff9e1739aad6d07b09f9785625c728f0a6a090b1f47bb7fd11fcb0ab67cc75ee1dd01c93d5f0ea9acaf38df29fef89671b7493cbd2c4ba9aa89312574b3e6a2a54a2d0a00e7d716e668b6a970a7c6f0d9520449bc5cf29eb8ca2601fab19dcd958f2e8839dae6908e2920286b5807925fd9898a4069b5233201a4cac980f03cab53b0bd9b2b4343764458f05abfae93b2599d308ebea7f92a0cf96ce173d5b2ca5a5fca0f19efc55bbd04ff5ac93a66a4b6b190019d38d0392c86fe0b12e338430ee6693b39f7252bb4b54cc1e81c362be92a4b9ca5eecd50d44572ecd80521c622c07f08fb21740c9776e9423cbc5ab2c928a865022179b633383182e5bb4455af72063949feae8351a33b01134d3eeb50a34471467eb8896b4ee230bc65f08bb63f2a23c594d109647586c6f861435ca6e9d7b505afa1ac31c08239f727c9e9eea9dc59957163bc36ed7f4c0b78bf0d7cafc7a39ebcd8d352b1ca772f36264b5388fdfbfb34b5e7085c7ea50b3ed6b01548e65d33310996518f96bfb747ff26305123e243efdd44b84ff90ba508de3348fe9920135e7100de950e556f586f308643f69cde794ad9e084254c69cdf2d329a95f74f62908c0897af417ade32a8a93fcc6a4a3f443c70afe4fb42137f97f16966aaab3cce3a580de63df507e3a30b6cbc35fd83e2470b1726c1886fa61ca7c08420a1018bae45f34a9b917625cf679fc24e3db5efc9a5004ea2b724b3d2d745fd6fd6c8f54b18ece20fae151e6c3d0a8abede4e903218a6ab8300c022128b1b6327352264c12bb5bfd6af9e46a7cdb4792dd57515bf2489ec8c1000282865ba3315d41325b94cab859f0e3e6a8a8eee03a6500967d686ad81426e9ae3080546e9835a77b15d5a20312fb7c5a10b3b1de86455becddb8cf30a985a85dc9b67f6d0e403dfd9a5685edb4ace257ae1850430f81073a34d9b77805b61c6031c144cff0438f6d32050fe28ee6ea27537201b1d33a5b96a721f0a1e64c2f303304142e3d3059c736556bd5b7c0b45de34d3fd42185fdf74327fe8129238df43093cde74a81f7c168217a2e53efee39b4bc1a46176be9e56477f94e8f72e37e0703b809fdc21cbb8829214e000d0eba8e4c03ed9b00f481bb0976db901907177ddffe2c3541dca249e7670d4790353dc843e930cf3d94c632e38994ae3a27549733a583aca4fec1078f3a8a21ae8c545831f851ec8b5bffc5bd4805c97d3e12c1f94c335180e3b92fd8b74d08d08cea39e6bf8e926dda88847a5b38da1b5cbfb6c79d89938be4fd890f79417aa0bd7237b8504bb693c191b9c143f529b025a1652ab827e69e4dd00d879b81ff34fc32ab854a42cbfb8845444a618e979a25b0d778bae80f166b652d08a18761ad941e66636538108120271bee9564e15cd982812c4bc90444d46ef821cd0cd6987bfd34b6d7b474190b42ab48b5af6abdadd11cee5579bb1d84f2b5ede2ed563d561e08ab008eae91b66072931771022145083994d26e884eddd8274be7eabae0874148249bc17c0d8ff1230b59d315ce8aa6f8445c3b3aef464fba8218334db59c744b012fda6787f3fb6b678424b5a3e9b971dc81cf5f490aa0b1548b78f0aadf14e692a1f8214679e6daba436f8d14d2ae02fbace1f1e484269b3fc648a3d3ffc73c820f3066eaed30ffd1ae32128aa34ff8936b8198f7d62d367489ade61da6de4a441af29cf734cb48786fbfa8e8d32cc30ff3e28863769e1af65d847a03e446749947312d6af3391dfc395b1d09fb6dc4d5c063884e7eba8d91cc4a11d3b4879ae17f4b5a0b7f0948bf99c2c2f2f8bdbe7986d80803863d47ab3b348644d501531e9038a416a42c14a69fd929857d99121cc94dbf0868fcb5ee68cf31c68f2845697903f47646110025cd110e38e4c7d5161be64373dee812ad29adc303f83f53128a739724c4aac7a3d0a7a631339387f31b1d9c84337c148cb59421c45e67f585ba2cd043dac5ba28201b8207b24cf4e4ced749fde8c3de41b78affc2429af1ec3c6c2f86bac70a24d47472cb2896fad205abd565abf4c02a5bcfd09edf0b71f0f5481ce4f7abda7e8a432b143078c796876c7370b06493ffc5788025c31d13729e864052fbfb08663f279fc6c3ab0e1222eacd12687c48873db3fbda8c33162521770759d0288bc196f60a377519a2531965e997eb8c90d43198f7bf35a44308bc42c38048da87b929d2cebc05bc7a0e06af4f1f7bd134c63df176bd93d3fc7754e9cedf2f84db4b435a2c1b49005491327d48c8d53e32cd3293a98a36197eacda8fff4eb67a30c84c846b70e5052db89c35811c178a88aa8136e50c4f3c3e8871c9bf52e4b61f3c0db7c566cc880cd7f4326bae1bf2019202db0c19490a7180a63ae4d9ef1bcf2824dd598a694adf5e17775b65d665492268222a0f3f63982abc7d33c951075c544f0173ca5840d803c044911795a90065e78afdfa39171b699ea8b2ed678b1ee75f429d62d3c618c064807ad479972adeaed30b9f9e002d0d4289c5aa53584df6c9503eaf1a84c671b6ba7eed7716ad057f7d03b105cf6dbd45a65d2e5323f4f083ea71daebf8b436eb44b63a1e63c0d53d93e6b2f28a45c14f340a324889cd6e214b0b721b68b9cceadd284d99bd16a795552de092e3f1c3dc8c88c7c21dfddc8ff5969237f482f574d283858c0e257c0cd2d940723823cde1405c35483c212883aabc5295514907c630c2284f9a9487fb4f7e449f11f175dbe8b8a1cf1c27cea30113e0d11e208d76f9bec3b201b8e8d5e7e151c9cc6d69c1be9c10009e1929da0e535da2c766b34848f17745759401e870c5c2324dd69220a0986bed4fc120717982b0472e0bda40d8969bb135dcd6625f04effdd5b2452c8417259b73bbff43219e242698e232b927ef619f1382a9b6a9ef1daa8c85bbc9c3af6689519537589a913429dd65e529b9171d82f713ba79141034e7ff6b42cd3b97a22516d9f00cdd6aba5df09c68ac1c4662ae91110b122d1597a5318ddb43e2270876158ead9daf9c92fa35370b39c614645452e23f6577a4cc367afd4f484862dc5013b75f5ecb8eeefcfc462a6d205fc8167d025f19fa68503681d89df1951ff1ad1ae5e7d2275ac754e3a333e324a18deff1e95a624c9b59fa4fbafb1d7648654df2c9f57d3158d666e774f9af52cab3aa99489a50bf1a9299d14fe87d079bd63d64b191c9bde7925a3f25cac49c4eb46deee1d40b8d82cbbab8bea21535a285a7706df1a3bbd97e3add33d9bc77e9ed8ae4a624216d20dd97cec39eafecf14078fb67d1ab3a64375e829056006aeb350f89b77cb24684ca5b3546f49ddca67ea891de730d0676f40af0cfdfc3380011395fe588d3086d08ba8afdeef261b699bafc87da6b50cc301c6bb33495b2cfae2f232afe2aa150a26267e28ca196e4778849537619e75280b4eab1e883fe72714020e8f4f3358e717942bd956e6762a841e3eb23aa257c73b8e05ec37b19e2a9aec3c27b3cf007edbb46a78fc06bec73abddde694ff8eec35e8d453fdda0fbd463637ed6c85681db1e8aa56649fb9812efcbb1cc451d11aff3e2e916193f2feb70c1ecacd137f276a44ba501a38d3e1dd095bd94e52f7e53d9eb4635abc3f96487505933e9951d933a9846f5884897fa8b940e703274cac394fe720bd7916446c60cfd504270fc96853514b0f6a8d6c884d0ba38f634f6dbf8671f97cd347857b4756830d211e674c9cd45ec53da5dab94f55f38aa612c93a19cbdb706e1d355bd4d964e744a6e66bca2277cf8352958ffb45a8388bbd58a7fc84d1c45c8a4776eac03cc9a2a2c4a80103d8f142ba0a7981a20f5d26dffec6205ab59a1a4ca113962ff0d50cfbd11b536bb92b5a22268cf2d71502ad9930212f251e145e4d030d69e1d43e0f4b5254e5bdc9d78308d5be82ac2cd9257357ec764b5029699b3ae9fe22adbc6bd6d4821dc70daab2920dd0666b9bed42c0f575a478f9826550b2e1fb9f02fe1707978a394e653abe42947675155d675326b748abf91e65852fc3283c43e6f2f4d1754a4d4e6ef03737791ab87aeb71e2a0356d5aaffe94d455d34b776b4b5c678f0b194b71924cd6fba2fd822771bfcbb801141fd96f2644dc7e8803b297095cb3ec452652b6da408324c41251f4178e871ccf94cf837e7d37a38d2b7311cca1d8630bfc6bcdae8fc474d093d2f10d3012e274b4ffff0b7243cea078d92f3fe3f66aa676ff49dcb684e850dc13d5a5e1cffd98d686b41457540418bfa1b9bf17b7c056a057f03783a5c588a2a04272b33857a100034509bfab1cd7cc12fb60320c8beb174fa1369f93205827b15d4f133211638809ffbf49dd2df90c8e1f6bedc19baae01c7400402c8a70bee234018c033c7f5e8c4b404a7c89caad6282e2cf70d79ff2015dbd1e065ec0e3590838c40ed0b379deb002e336ef86388247fff1090a7a27aaca3668b533dda650b99e534ccca9cdaecb4e8c6d44180215650a11a5ebab988f32f4b0c38538c9eab5bf5609ed3c2c46102ff084f08594e8561b2758ef6f20e0deed0be9c0f099ce02741c0e97ea7df5e8a1f5143fbc2717df122c975e7e4813c43db14cfc1ef56b63d652ac3084725170b8faece0bc2a40fb194cc83bc7bb4d553867ede4ff5e67da457d6f5fbcdb711b4cc1ca1bb049df69e51478e059a4d8f588c3ca249d7adc6f224030d3ac46cdeabc8340a6b7881886694be54e65ce413459e26f6a1fd12290cc051de2cacffe30d24d4339f3519320434ddf58223c2864cf481f3a0c77da3ca756275d4eeb422ac75958f05de39116730e9891ee7b86896295f00655f1d4708ac0e67faef2212c2f861a962e7ca84ed0a5ead606f833e88a9120e3b92d5f7db931c8ed97a5b7f4b72374ebc27bb0dda990cb533a8a9b3748676a9ea8ff805939bb5cc54a1f1e74b243df34375be52b69032827e35b0f42bf9c9711c2e399d7aacb2dac7e58b73a081a30d500d08c74c08a3ef257d7292bb03b1eb1f20e1e588aa16897cf963fccd36f0a7b0f736f347b1de17b5c28a820aa10369baf823aec9af7f7ec9558a3e467cb916a9d77a91b5319abd74aab90aaa1416c9183ca5dbd6838487e24eb83558cade68829c18be1a884c5748322bf36b47713ccdc949306d47ba48058258231247b64f7071e723b6fb4e1") r5 = openat$tun(0xffffffffffffff9c, 0x0, 0xb6643, 0x0) close(r5) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x4, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4000056) r7 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x6, 0x43, &(0x7f0000000000), 0x4) 1.393166882s ago: executing program 3 (id=3826): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1944}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f9172406", 0x13}], 0x1}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="22e5f93ffb8c917ee73166087019", 0x0, 0xc699, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.221946583s ago: executing program 0 (id=3827): socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="30000000150a030080000000000000fd655499d40005000001080003400000000a080003"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='rxrpc_rx_data\x00', r0, 0x0, 0xfffffffffffff800}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1200000017000000040000000100000000000000", @ANYRES32, @ANYBLOB="000000000000005ed7fd7b7835f04ba2c2f6f900000000000900000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x400482, 0x0) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000380)=r0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f5, &(0x7f0000000080)) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0xa, 0xce24, 0x1, @mcast2, 0x42}, 0x80, 0x0}, 0x0) 1.101411765s ago: executing program 0 (id=3828): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x2000000, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x2, [{0x8}, {0xa, 0x4}, {0x8, 0x4}]}]}}, &(0x7f0000000700)=""/4096, 0x3e, 0x1000, 0x8, 0x5}, 0x28) 1.026071695s ago: executing program 3 (id=3829): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0xc2, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, r6}, 0x38) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x4030582a, &(0x7f0000000040)=0x6c0000000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x70, '\x00', 0x0, r7, 0x5, 0x5}, 0x50) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_pid(r8, &(0x7f0000000980), 0x20000992) 929.393582ms ago: executing program 5 (id=3830): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000007d"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(0x0, 0xbe9bac6d2d0f4e0b) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x9, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000200), 0x2}, 0x101130, 0x0, 0x0, 0x8, 0x6, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x800000000005}, 0x0, 0xa, 0xffffffffffffffff, 0xa) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x24080) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x16, 0xc5, 0x9, 0x2, 0x0, 0x70bd28, 0x25dfdbfe}, 0x10}}, 0x40014) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) 879.578317ms ago: executing program 0 (id=3831): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e00"/20, @ANYRES32=0x1], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180000190000000002000000000000001840000002000000000000000000000095000000000000009500000000000200"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x2}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x4, 0x4, 0x6}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&\x00'], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="0500"], 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040)) write$cgroup_int(r0, &(0x7f0000000100)=0x3, 0x12) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d80000003e0081064e81ff83db4cb9040a1d080006007c09e8fc55a10a0015040400142603600e1208000f00000004bcb3d26f000800024004000000035c0461c1d67f6f94007134cf9df359d4aae88a22dab59e7a8f46236efb8000a007a264cf6ad4161f3e4e7ce06bbace8017cbec4c2ee5a7cef4090000001fb71b27d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ea37b00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffff05c1c9b6278754ca397c388b0dd6e4edef3d93", 0xd8}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x85080400, &(0x7f0000000440)="b620e18eadb3ba97f0024faad68ef3f35d9658afa54a080daf6bdf8f7c83a16864d79ea03a711caf357c89b40f11c151c2b8295ac15a3bd91c7460c436d3018a7eda704299854be3e1384acad966a817f1615d8de9", 0x55, &(0x7f0000000380), &(0x7f00000004c0), &(0x7f0000001340)="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") r5 = openat$tun(0xffffffffffffff9c, 0x0, 0xb6643, 0x0) close(r5) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x4, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4000056) r7 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x6, 0x43, &(0x7f0000000000), 0x4) 799.993065ms ago: executing program 4 (id=3832): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r3, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 458.493948ms ago: executing program 2 (id=3833): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x1100, 0x0, 0x0, 0x6, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xe, 0xffffffffffffffff, 0x1) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000100)='THAWED\x00', 0x7) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0xf, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4044080) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0, 0x0, 0x6c}, @in6=@remote, {0x0, 0x40, 0x0, 0x0, 0x0, 0x1f6}, {}, {}, 0x0, 0x3506, 0xa, 0x1, 0x0, 0x40}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x1, 0x0, 0x5, 0x81701, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xea, 0x6}, 0x940, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='rxrpc_client\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) r7 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0xfc00) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) 435.718401ms ago: executing program 4 (id=3834): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0xffffffffffffffff, 0x800ff, 0xfffffffb}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x2404c080}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x80, 0x5, 0x5, 0xa, 0x6, 0x0, 0x3, 0x10122, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xda18, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x100094, 0x3, 0xff, 0x3, 0xc, 0x1, 0x9, 0x0, 0x3ff, 0x0, 0x3}, r2, 0x5, 0xffffffffffffffff, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000024000103030000000000000000000000d4a5744012feeb05c5deafdb35fd4db8a902d7987fc178a4307773626b4b49b58d0f057ba5f3"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) recvmsg(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40000040) socket$nl_netfilter(0x10, 0x3, 0xc) 111.287495ms ago: executing program 4 (id=3835): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={0x20, 0x7, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 50.22224ms ago: executing program 3 (id=3836): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x4, 0x0, 0x10000000000, 0x808, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x4}, 0x4108, 0x3, 0x0, 0x6, 0x7, 0xffffffff, 0x802, 0x0, 0xffffffff, 0x0, 0x200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x19) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x48800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$TUNGETFEATURES(r3, 0x5452, &(0x7f00000013c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x40}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x4000801) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x1e, 0x1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) recvmsg$kcm(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000480)=""/146, 0x92}], 0x1}, 0x80f3051602a5e657) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x3, 0x3, 0x0, 0x400, 0x1, 0x1, '\x00', 0x0, r0, 0x0, 0x0, 0x4, 0x3}, 0x50) r8 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x11, 0x68, &(0x7f0000000640), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000002"], 0x0, 0x26}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x10020) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sockopt=0x16}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) kernel console output (not intermixed with test programs): ibutes in process `syz.2.2204'. [ 453.628805][T13496] netlink: 'syz.0.2206': attribute type 10 has an invalid length. [ 453.656010][T13488] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2204'. [ 454.278833][T13513] netlink: 'syz.3.2211': attribute type 10 has an invalid length. [ 454.294910][T13503] netlink: 'syz.5.2209': attribute type 13 has an invalid length. [ 454.787397][T13503] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 455.096951][T13511] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 455.361991][T13527] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2216'. [ 455.376992][T13522] delete_channel: no stack [ 456.958831][T13572] validate_nla: 4 callbacks suppressed [ 456.958865][T13572] netlink: 'syz.4.2233': attribute type 10 has an invalid length. [ 457.104017][T13563] netlink: 'syz.5.2231': attribute type 13 has an invalid length. [ 457.116525][T13563] netlink: 'syz.5.2231': attribute type 17 has an invalid length. [ 457.312183][T13563] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 457.569451][T13581] netlink: 'syz.4.2236': attribute type 10 has an invalid length. [ 457.730090][T13590] __nla_validate_parse: 1 callbacks suppressed [ 457.730119][T13590] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2239'. [ 458.012064][T13595] delete_channel: no stack [ 459.027463][T13625] netlink: 'syz.0.2248': attribute type 10 has an invalid length. [ 459.580321][T13628] netlink: 'syz.3.2250': attribute type 13 has an invalid length. [ 459.590273][T13628] netlink: 'syz.3.2250': attribute type 17 has an invalid length. [ 459.977508][T13628] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 460.495625][T13652] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2256'. [ 461.162752][T13658] delete_channel: no stack [ 462.461218][T13681] netlink: 'syz.3.2264': attribute type 13 has an invalid length. [ 462.476419][T13681] netlink: 'syz.3.2264': attribute type 17 has an invalid length. [ 462.620573][T13681] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 463.760481][T13715] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2274'. [ 464.747208][T13746] delete_channel: no stack [ 466.002341][T13741] netlink: 'syz.2.2281': attribute type 13 has an invalid length. [ 466.012923][T13741] netlink: 'syz.2.2281': attribute type 17 has an invalid length. [ 466.695495][T13741] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 466.945548][T13768] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2292'. [ 468.083890][T13794] netlink: 'syz.5.2296': attribute type 13 has an invalid length. [ 468.092190][T13794] netlink: 'syz.5.2296': attribute type 17 has an invalid length. [ 468.250224][T13794] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 468.668130][T13799] delete_channel: no stack [ 468.753296][T13811] netlink: 'syz.5.2305': attribute type 10 has an invalid length. [ 470.841809][T13845] netlink: 'syz.0.2313': attribute type 13 has an invalid length. [ 470.850096][T13845] netlink: 'syz.0.2313': attribute type 17 has an invalid length. [ 471.206373][T13845] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 472.051668][T13868] netlink: 'syz.3.2321': attribute type 13 has an invalid length. [ 472.076719][T13868] netlink: 'syz.3.2321': attribute type 17 has an invalid length. [ 472.915464][T13868] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 473.982901][T13859] netlink: 'syz.2.2318': attribute type 13 has an invalid length. [ 474.330313][T13859] netlink: 'syz.2.2318': attribute type 17 has an invalid length. [ 474.626809][T13859] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 476.706509][T13915] netlink: 'syz.4.2333': attribute type 13 has an invalid length. [ 476.717853][T13915] netlink: 'syz.4.2333': attribute type 17 has an invalid length. [ 476.813056][T13929] netlink: 'syz.0.2335': attribute type 13 has an invalid length. [ 476.866727][T13929] netlink: 'syz.0.2335': attribute type 17 has an invalid length. [ 476.914050][T13915] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 477.108931][T13929] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 477.235028][T13934] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2338'. [ 477.817531][T13936] netlink: 'syz.3.2337': attribute type 13 has an invalid length. [ 477.945900][T13936] netlink: 'syz.3.2337': attribute type 17 has an invalid length. [ 478.788122][T13936] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 479.717143][T13970] netlink: 'syz.4.2347': attribute type 60 has an invalid length. [ 480.166692][T13968] delete_channel: no stack [ 480.628652][T13981] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2351'. [ 480.890888][T13986] netlink: 'syz.3.2354': attribute type 60 has an invalid length. [ 481.210716][T13985] delete_channel: no stack [ 481.983493][T14002] netlink: 'syz.2.2353': attribute type 13 has an invalid length. [ 482.035761][T14002] netlink: 'syz.2.2353': attribute type 17 has an invalid length. [ 482.186087][T14002] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 482.603746][T14004] netlink: 'syz.5.2357': attribute type 13 has an invalid length. [ 482.644865][T14004] netlink: 'syz.5.2357': attribute type 17 has an invalid length. [ 483.022360][T14014] netlink: 'syz.0.2360': attribute type 10 has an invalid length. [ 483.111423][T14004] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 484.122507][T14032] netlink: 'syz.0.2364': attribute type 13 has an invalid length. [ 484.188309][T14032] netlink: 'syz.0.2364': attribute type 17 has an invalid length. [ 484.468055][T14032] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 485.544884][T14043] netlink: 'syz.4.2371': attribute type 13 has an invalid length. [ 485.556787][T14043] netlink: 'syz.4.2371': attribute type 17 has an invalid length. [ 485.670646][T14043] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 487.421494][T14072] netlink: 'syz.4.2377': attribute type 13 has an invalid length. [ 487.436639][T14072] netlink: 'syz.4.2377': attribute type 17 has an invalid length. [ 487.587083][T14072] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 488.343887][T14090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2383'. [ 489.663431][T14104] netlink: 'syz.3.2387': attribute type 13 has an invalid length. [ 489.693660][T14104] netlink: 'syz.3.2387': attribute type 17 has an invalid length. [ 490.011632][T14104] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 491.464881][T14123] netlink: 'syz.2.2389': attribute type 13 has an invalid length. [ 491.476094][T14123] netlink: 'syz.2.2389': attribute type 17 has an invalid length. [ 491.548598][T14123] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 494.080657][T14171] netlink: 'syz.0.2407': attribute type 13 has an invalid length. [ 494.267435][T14171] netlink: 'syz.0.2407': attribute type 17 has an invalid length. [ 494.642943][T14171] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 495.244476][T14182] netlink: 'syz.4.2409': attribute type 13 has an invalid length. [ 495.253736][T14182] netlink: 'syz.4.2409': attribute type 17 has an invalid length. [ 495.807125][T14182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 496.668067][T14208] netlink: 'syz.4.2415': attribute type 10 has an invalid length. [ 498.512333][T14242] netlink: 'syz.0.2425': attribute type 13 has an invalid length. [ 498.556618][T14242] netlink: 'syz.0.2425': attribute type 17 has an invalid length. [ 498.897716][T14242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 501.453859][T14289] netlink: 'syz.2.2436': attribute type 13 has an invalid length. [ 501.506637][T14289] netlink: 'syz.2.2436': attribute type 17 has an invalid length. [ 501.636454][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.643829][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.079021][T14289] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 502.593014][T14322] netlink: 'syz.0.2446': attribute type 60 has an invalid length. [ 502.717520][T14321] delete_channel: no stack [ 504.975850][T14372] netlink: 'syz.5.2461': attribute type 13 has an invalid length. [ 504.987137][T14372] netlink: 'syz.5.2461': attribute type 17 has an invalid length. [ 505.041874][T14372] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 508.931638][T14443] netlink: 'syz.4.2481': attribute type 13 has an invalid length. [ 508.941658][T14443] netlink: 'syz.4.2481': attribute type 17 has an invalid length. [ 508.996764][T14443] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 509.285654][T14471] netlink: 'syz.5.2485': attribute type 13 has an invalid length. [ 509.294157][T14471] netlink: 'syz.5.2485': attribute type 17 has an invalid length. [ 509.505947][T14471] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 510.650898][T14486] netlink: 'syz.0.2492': attribute type 13 has an invalid length. [ 510.676600][T14486] netlink: 'syz.0.2492': attribute type 17 has an invalid length. [ 511.086963][T14486] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 511.660703][T14503] netlink: 'syz.3.2497': attribute type 10 has an invalid length. [ 512.041012][T14505] netlink: 'syz.0.2498': attribute type 13 has an invalid length. [ 512.078169][T14505] netlink: 'syz.0.2498': attribute type 17 has an invalid length. [ 512.583339][T14505] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 514.041337][T14539] netlink: 'syz.4.2508': attribute type 13 has an invalid length. [ 514.097655][T14539] netlink: 'syz.4.2508': attribute type 17 has an invalid length. [ 514.318231][T14539] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 514.742107][T14568] netlink: 'syz.5.2514': attribute type 13 has an invalid length. [ 514.802106][T14568] netlink: 'syz.5.2514': attribute type 17 has an invalid length. [ 514.893364][T14568] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 515.170927][T14573] netlink: 'syz.4.2516': attribute type 13 has an invalid length. [ 515.232065][T14573] netlink: 'syz.4.2516': attribute type 17 has an invalid length. [ 515.395206][T14573] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 516.115317][T14598] netlink: 'syz.4.2524': attribute type 13 has an invalid length. [ 516.140400][T14598] netlink: 'syz.4.2524': attribute type 17 has an invalid length. [ 516.817955][T14598] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 520.461248][T14685] netlink: 'syz.5.2549': attribute type 13 has an invalid length. [ 520.476761][T14685] netlink: 'syz.5.2549': attribute type 17 has an invalid length. [ 520.865384][T14685] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 521.482114][T14711] netlink: 'syz.3.2555': attribute type 13 has an invalid length. [ 521.499410][T14711] netlink: 'syz.3.2555': attribute type 17 has an invalid length. [ 521.684260][T14711] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 523.709953][T14732] netlink: 'syz.2.2560': attribute type 13 has an invalid length. [ 523.724198][T14732] netlink: 'syz.2.2560': attribute type 17 has an invalid length. [ 524.354330][T14732] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 527.250825][T14814] netlink: 'syz.5.2579': attribute type 13 has an invalid length. [ 527.269605][T14814] netlink: 'syz.5.2579': attribute type 17 has an invalid length. [ 527.575572][T14814] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 529.828115][T14848] netlink: 'syz.4.2588': attribute type 13 has an invalid length. [ 529.836119][T14848] netlink: 'syz.4.2588': attribute type 17 has an invalid length. [ 530.018551][T14848] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 530.877844][T14859] netlink: 'syz.5.2592': attribute type 13 has an invalid length. [ 530.886773][T14859] netlink: 'syz.5.2592': attribute type 17 has an invalid length. [ 531.001254][T14859] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 531.574897][T14870] netlink: 'syz.4.2596': attribute type 13 has an invalid length. [ 531.588200][T14870] netlink: 'syz.4.2596': attribute type 17 has an invalid length. [ 531.766808][T14870] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 535.301878][T14964] netlink: 'syz.5.2621': attribute type 13 has an invalid length. [ 535.329165][T14964] netlink: 'syz.5.2621': attribute type 17 has an invalid length. [ 535.684276][T14964] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 537.668097][T15000] netlink: 'syz.5.2630': attribute type 13 has an invalid length. [ 537.713321][T15000] netlink: 'syz.5.2630': attribute type 17 has an invalid length. [ 537.952292][T15000] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 538.124891][T15013] netlink: 'syz.4.2632': attribute type 13 has an invalid length. [ 538.147366][T15013] netlink: 'syz.4.2632': attribute type 17 has an invalid length. [ 538.467712][T15013] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 539.890076][T15038] netlink: 'syz.5.2640': attribute type 13 has an invalid length. [ 539.956402][T15038] netlink: 'syz.5.2640': attribute type 17 has an invalid length. [ 540.090316][T15038] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 541.522066][T15053] netlink: 'syz.2.2636': attribute type 13 has an invalid length. [ 542.125780][T15053] netlink: 'syz.2.2636': attribute type 17 has an invalid length. [ 542.337979][T15074] netlink: 'syz.3.2649': attribute type 13 has an invalid length. [ 542.345916][T15074] netlink: 'syz.3.2649': attribute type 17 has an invalid length. [ 542.377802][T15053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 542.556545][T15074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 543.611704][T15093] netlink: 'syz.5.2656': attribute type 13 has an invalid length. [ 543.624360][T15097] netlink: 'syz.3.2655': attribute type 13 has an invalid length. [ 543.671530][T15097] netlink: 'syz.3.2655': attribute type 17 has an invalid length. [ 543.698749][T15093] netlink: 'syz.5.2656': attribute type 17 has an invalid length. [ 543.854067][T15093] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 543.922488][T15097] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 545.047036][T15107] netlink: 'syz.0.2659': attribute type 13 has an invalid length. [ 545.065617][T15107] netlink: 'syz.0.2659': attribute type 17 has an invalid length. [ 545.334011][T15107] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 548.365448][T15166] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2677'. [ 549.322087][T15180] netlink: 'syz.3.2681': attribute type 13 has an invalid length. [ 549.352203][T15180] netlink: 'syz.3.2681': attribute type 17 has an invalid length. [ 550.111660][T15180] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 551.365052][T15206] netlink: 'syz.3.2689': attribute type 13 has an invalid length. [ 551.385073][T15206] netlink: 'syz.3.2689': attribute type 17 has an invalid length. [ 551.778825][T15206] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 552.494983][T15224] netlink: 'syz.3.2693': attribute type 13 has an invalid length. [ 552.505637][T15224] netlink: 'syz.3.2693': attribute type 17 has an invalid length. [ 552.840644][T15224] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 553.583623][T15242] netlink: 'syz.4.2696': attribute type 13 has an invalid length. [ 553.619799][T15242] netlink: 'syz.4.2696': attribute type 17 has an invalid length. [ 553.676045][T15216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2691'. [ 553.741646][T15250] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2699'. [ 553.811349][T15242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 554.812501][T15256] netlink: 'syz.5.2702': attribute type 13 has an invalid length. [ 554.850031][T15256] netlink: 'syz.5.2702': attribute type 17 has an invalid length. [ 554.935879][T15256] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 555.776163][T15281] netlink: 'syz.5.2707': attribute type 13 has an invalid length. [ 555.789323][T15281] netlink: 'syz.5.2707': attribute type 17 has an invalid length. [ 556.290760][T15285] netlink: 'syz.3.2709': attribute type 13 has an invalid length. [ 556.299993][T15281] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 556.338345][T15285] netlink: 'syz.3.2709': attribute type 17 has an invalid length. [ 556.513298][T15285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 556.721778][T15295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2711'. [ 557.212635][T15300] netlink: 'syz.5.2713': attribute type 13 has an invalid length. [ 557.220963][T15300] netlink: 'syz.5.2713': attribute type 17 has an invalid length. [ 557.323980][T15300] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 558.348602][T15333] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2721'. [ 558.706737][T15328] netlink: 'syz.0.2720': attribute type 13 has an invalid length. [ 558.715137][T15328] netlink: 'syz.0.2720': attribute type 17 has an invalid length. [ 559.047753][T15328] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 559.794876][T15340] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 560.179371][T15356] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2727'. [ 560.411192][T15363] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2729'. [ 560.681762][T15374] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2732'. [ 561.536711][T15389] validate_nla: 2 callbacks suppressed [ 561.536730][T15389] netlink: 'syz.4.2736': attribute type 13 has an invalid length. [ 561.642782][T15389] netlink: 'syz.4.2736': attribute type 17 has an invalid length. [ 561.798677][T15389] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 563.053373][T15416] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2745'. [ 563.135049][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.143602][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.981330][T15428] netlink: 'syz.5.2749': attribute type 13 has an invalid length. [ 564.281816][T15441] FAULT_INJECTION: forcing a failure. [ 564.281816][T15441] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 564.302078][T15441] CPU: 1 UID: 0 PID: 15441 Comm: syz.4.2751 Not tainted syzkaller #0 PREEMPT(full) [ 564.302109][T15441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 564.302125][T15441] Call Trace: [ 564.302131][T15441] [ 564.302139][T15441] dump_stack_lvl+0x189/0x250 [ 564.302172][T15441] ? __pfx____ratelimit+0x10/0x10 [ 564.302193][T15441] ? __pfx_dump_stack_lvl+0x10/0x10 [ 564.302213][T15441] ? __pfx__printk+0x10/0x10 [ 564.302235][T15441] ? __might_fault+0xb0/0x130 [ 564.302266][T15441] should_fail_ex+0x414/0x560 [ 564.302288][T15441] _copy_from_user+0x2d/0xb0 [ 564.302304][T15441] __sys_bpf+0x1e3/0x860 [ 564.302327][T15441] ? __pfx___sys_bpf+0x10/0x10 [ 564.302361][T15441] ? do_syscall_64+0xb7/0x3b0 [ 564.302383][T15441] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 564.302404][T15441] ? __pfx_ksys_write+0x10/0x10 [ 564.302417][T15441] ? rcu_is_watching+0x15/0xb0 [ 564.302440][T15441] __x64_sys_bpf+0x7c/0x90 [ 564.302458][T15441] do_syscall_64+0xfa/0x3b0 [ 564.302476][T15441] ? lockdep_hardirqs_on+0x9c/0x150 [ 564.302495][T15441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.302511][T15441] ? clear_bhb_loop+0x60/0xb0 [ 564.302530][T15441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.302548][T15441] RIP: 0033:0x7fa7cab8eec9 [ 564.302567][T15441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.302581][T15441] RSP: 002b:00007fa7cbaa9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 564.302606][T15441] RAX: ffffffffffffffda RBX: 00007fa7cade5fa0 RCX: 00007fa7cab8eec9 [ 564.302617][T15441] RDX: 0000000000000028 RSI: 0000200000000340 RDI: 0000000000000012 [ 564.302627][T15441] RBP: 00007fa7cbaa9090 R08: 0000000000000000 R09: 0000000000000000 [ 564.302637][T15441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.302646][T15441] R13: 00007fa7cade6038 R14: 00007fa7cade5fa0 R15: 00007ffff96f10a8 [ 564.302673][T15441] [ 564.689091][T15448] FAULT_INJECTION: forcing a failure. [ 564.689091][T15448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.757924][T15448] CPU: 1 UID: 0 PID: 15448 Comm: syz.4.2753 Not tainted syzkaller #0 PREEMPT(full) [ 564.757948][T15448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 564.757957][T15448] Call Trace: [ 564.757965][T15448] [ 564.757973][T15448] dump_stack_lvl+0x189/0x250 [ 564.758003][T15448] ? __pfx____ratelimit+0x10/0x10 [ 564.758021][T15448] ? __pfx_dump_stack_lvl+0x10/0x10 [ 564.758036][T15448] ? __pfx__printk+0x10/0x10 [ 564.758059][T15448] ? __might_fault+0xb0/0x130 [ 564.758082][T15448] should_fail_ex+0x414/0x560 [ 564.758104][T15448] _copy_from_user+0x2d/0xb0 [ 564.758120][T15448] __sys_bpf+0x1e3/0x860 [ 564.758144][T15448] ? __pfx___sys_bpf+0x10/0x10 [ 564.758176][T15448] ? do_syscall_64+0xb7/0x3b0 [ 564.758193][T15448] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 564.758214][T15448] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 564.758234][T15448] ? __pfx_ksys_write+0x10/0x10 [ 564.758257][T15448] __x64_sys_bpf+0x7c/0x90 [ 564.758277][T15448] do_syscall_64+0xfa/0x3b0 [ 564.758295][T15448] ? lockdep_hardirqs_on+0x9c/0x150 [ 564.758313][T15448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.758328][T15448] ? clear_bhb_loop+0x60/0xb0 [ 564.758346][T15448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.758360][T15448] RIP: 0033:0x7fa7cab8eec9 [ 564.758375][T15448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.758388][T15448] RSP: 002b:00007fa7cbaa9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 564.758404][T15448] RAX: ffffffffffffffda RBX: 00007fa7cade5fa0 RCX: 00007fa7cab8eec9 [ 564.758416][T15448] RDX: 0000000000000028 RSI: 0000200000000540 RDI: 0000000000000012 [ 564.758427][T15448] RBP: 00007fa7cbaa9090 R08: 0000000000000000 R09: 0000000000000000 [ 564.758437][T15448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.758447][T15448] R13: 00007fa7cade6038 R14: 00007fa7cade5fa0 R15: 00007ffff96f10a8 [ 564.758473][T15448] [ 565.075115][T15453] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2755'. [ 565.237170][T15461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2758'. [ 565.675404][T15451] netlink: 'syz.5.2754': attribute type 13 has an invalid length. [ 565.981995][T15451] netlink: 'syz.5.2754': attribute type 17 has an invalid length. [ 566.256699][T15451] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 567.718873][T15507] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2772'. [ 568.618510][T15523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2776'. [ 569.282257][T15553] netlink: 'syz.0.2786': attribute type 13 has an invalid length. [ 569.291880][T15553] netlink: 'syz.0.2786': attribute type 17 has an invalid length. [ 569.335689][T15553] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 570.069281][T15572] FAULT_INJECTION: forcing a failure. [ 570.069281][T15572] name failslab, interval 1, probability 0, space 0, times 1 [ 570.136692][ T30] audit: type=1107 audit(1759415307.770:3): pid=15568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='˜`¹' [ 570.186291][T15572] CPU: 1 UID: 0 PID: 15572 Comm: syz.0.2793 Not tainted syzkaller #0 PREEMPT(full) [ 570.186315][T15572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 570.186326][T15572] Call Trace: [ 570.186333][T15572] [ 570.186341][T15572] dump_stack_lvl+0x189/0x250 [ 570.186362][T15572] ? __pfx____ratelimit+0x10/0x10 [ 570.186383][T15572] ? __pfx_dump_stack_lvl+0x10/0x10 [ 570.186400][T15572] ? __pfx__printk+0x10/0x10 [ 570.186422][T15572] ? __pfx___might_resched+0x10/0x10 [ 570.186435][T15572] ? fs_reclaim_acquire+0x7d/0x100 [ 570.186458][T15572] should_fail_ex+0x414/0x560 [ 570.186481][T15572] should_failslab+0xa8/0x100 [ 570.186500][T15572] kmem_cache_alloc_noprof+0x73/0x3c0 [ 570.186523][T15572] ? getname_flags+0xb8/0x540 [ 570.186545][T15572] getname_flags+0xb8/0x540 [ 570.186567][T15572] do_sys_openat2+0xbc/0x1c0 [ 570.186589][T15572] ? __pfx_do_sys_openat2+0x10/0x10 [ 570.186612][T15572] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 570.186643][T15572] __x64_sys_openat+0x138/0x170 [ 570.186684][T15572] do_syscall_64+0xfa/0x3b0 [ 570.186704][T15572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.186719][T15572] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 570.186733][T15572] ? clear_bhb_loop+0x60/0xb0 [ 570.186750][T15572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.186764][T15572] RIP: 0033:0x7f41c1f8d710 [ 570.186778][T15572] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 570.186792][T15572] RSP: 002b:00007f41c2e63f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 570.186810][T15572] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f41c1f8d710 [ 570.186822][T15572] RDX: 0000000000000002 RSI: 00007f41c2e63fa0 RDI: 00000000ffffff9c [ 570.186831][T15572] RBP: 00007f41c2e63fa0 R08: 0000000000000000 R09: 0000000000000000 [ 570.186840][T15572] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 570.186847][T15572] R13: 00007f41c21e6038 R14: 00007f41c21e5fa0 R15: 00007ffd7ddcbd48 [ 570.186873][T15572] [ 570.968984][T15585] FAULT_INJECTION: forcing a failure. [ 570.968984][T15585] name failslab, interval 1, probability 0, space 0, times 0 [ 570.983948][T15585] CPU: 0 UID: 0 PID: 15585 Comm: syz.2.2796 Not tainted syzkaller #0 PREEMPT(full) [ 570.983972][T15585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 570.983982][T15585] Call Trace: [ 570.983989][T15585] [ 570.983997][T15585] dump_stack_lvl+0x189/0x250 [ 570.984020][T15585] ? __pfx____ratelimit+0x10/0x10 [ 570.984042][T15585] ? __pfx_dump_stack_lvl+0x10/0x10 [ 570.984061][T15585] ? __pfx__printk+0x10/0x10 [ 570.984090][T15585] ? __pfx___might_resched+0x10/0x10 [ 570.984105][T15585] ? fs_reclaim_acquire+0x7d/0x100 [ 570.984129][T15585] should_fail_ex+0x414/0x560 [ 570.984153][T15585] should_failslab+0xa8/0x100 [ 570.984172][T15585] __kmalloc_noprof+0xcb/0x4f0 [ 570.984186][T15585] ? kfree+0x4d/0x440 [ 570.984206][T15585] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 570.984231][T15585] tomoyo_realpath_from_path+0xe3/0x5d0 [ 570.984254][T15585] ? tomoyo_domain+0xd9/0x130 [ 570.984280][T15585] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 570.984297][T15585] tomoyo_path_number_perm+0x1e8/0x5a0 [ 570.984318][T15585] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 570.984388][T15585] ? __lock_acquire+0xab9/0xd20 [ 570.984431][T15585] ? __fget_files+0x2a/0x420 [ 570.984457][T15585] ? __fget_files+0x2a/0x420 [ 570.984472][T15585] ? __fget_files+0x3a0/0x420 [ 570.984489][T15585] ? __fget_files+0x2a/0x420 [ 570.984511][T15585] security_file_ioctl+0xcb/0x2d0 [ 570.984530][T15585] __se_sys_ioctl+0x47/0x170 [ 570.984556][T15585] do_syscall_64+0xfa/0x3b0 [ 570.984575][T15585] ? lockdep_hardirqs_on+0x9c/0x150 [ 570.984594][T15585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.984607][T15585] ? clear_bhb_loop+0x60/0xb0 [ 570.984628][T15585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.984643][T15585] RIP: 0033:0x7f980958eec9 [ 570.984659][T15585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.984674][T15585] RSP: 002b:00007f980a3d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 570.984692][T15585] RAX: ffffffffffffffda RBX: 00007f98097e5fa0 RCX: 00007f980958eec9 [ 570.984704][T15585] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000004 [ 570.984715][T15585] RBP: 00007f980a3d5090 R08: 0000000000000000 R09: 0000000000000000 [ 570.984726][T15585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.984736][T15585] R13: 00007f98097e6038 R14: 00007f98097e5fa0 R15: 00007ffc244a6758 [ 570.984765][T15585] [ 570.984773][T15585] ERROR: Out of memory at tomoyo_realpath_from_path. [ 571.081932][T15587] FAULT_INJECTION: forcing a failure. [ 571.081932][T15587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.256196][T15587] CPU: 1 UID: 0 PID: 15587 Comm: syz.0.2797 Not tainted syzkaller #0 PREEMPT(full) [ 571.256220][T15587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 571.256229][T15587] Call Trace: [ 571.256236][T15587] [ 571.256243][T15587] dump_stack_lvl+0x189/0x250 [ 571.256266][T15587] ? __pfx____ratelimit+0x10/0x10 [ 571.256282][T15587] ? __pfx_dump_stack_lvl+0x10/0x10 [ 571.256298][T15587] ? __pfx__printk+0x10/0x10 [ 571.256315][T15587] ? __might_fault+0xb0/0x130 [ 571.256340][T15587] should_fail_ex+0x414/0x560 [ 571.256363][T15587] _copy_from_user+0x2d/0xb0 [ 571.256380][T15587] __sys_bpf+0x1e3/0x860 [ 571.256403][T15587] ? __pfx___sys_bpf+0x10/0x10 [ 571.256437][T15587] ? do_syscall_64+0xb7/0x3b0 [ 571.256455][T15587] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 571.256477][T15587] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 571.256500][T15587] ? __pfx_ksys_write+0x10/0x10 [ 571.256547][T15587] __x64_sys_bpf+0x7c/0x90 [ 571.256566][T15587] do_syscall_64+0xfa/0x3b0 [ 571.256583][T15587] ? lockdep_hardirqs_on+0x9c/0x150 [ 571.256602][T15587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.256619][T15587] ? clear_bhb_loop+0x60/0xb0 [ 571.256639][T15587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.256655][T15587] RIP: 0033:0x7f41c1f8eec9 [ 571.256671][T15587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.256686][T15587] RSP: 002b:00007f41c2e64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 571.256705][T15587] RAX: ffffffffffffffda RBX: 00007f41c21e5fa0 RCX: 00007f41c1f8eec9 [ 571.256718][T15587] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 0000000000000000 [ 571.256729][T15587] RBP: 00007f41c2e64090 R08: 0000000000000000 R09: 0000000000000000 [ 571.256739][T15587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.256749][T15587] R13: 00007f41c21e6038 R14: 00007f41c21e5fa0 R15: 00007ffd7ddcbd48 [ 571.256779][T15587] [ 573.164346][T15613] FAULT_INJECTION: forcing a failure. [ 573.164346][T15613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 573.227297][T15613] CPU: 1 UID: 0 PID: 15613 Comm: syz.3.2806 Not tainted syzkaller #0 PREEMPT(full) [ 573.227321][T15613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 573.227331][T15613] Call Trace: [ 573.227342][T15613] [ 573.227352][T15613] dump_stack_lvl+0x189/0x250 [ 573.227382][T15613] ? __pfx____ratelimit+0x10/0x10 [ 573.227412][T15613] ? __pfx_dump_stack_lvl+0x10/0x10 [ 573.227439][T15613] ? __pfx__printk+0x10/0x10 [ 573.227472][T15613] ? __might_fault+0xb0/0x130 [ 573.227546][T15613] should_fail_ex+0x414/0x560 [ 573.227596][T15613] _copy_from_user+0x2d/0xb0 [ 573.227630][T15613] __sys_bpf+0x1e3/0x860 [ 573.227672][T15613] ? __pfx___sys_bpf+0x10/0x10 [ 573.227775][T15613] ? ksys_write+0x22a/0x250 [ 573.227810][T15613] ? __pfx_ksys_write+0x10/0x10 [ 573.227869][T15613] __x64_sys_bpf+0x7c/0x90 [ 573.227902][T15613] do_syscall_64+0xfa/0x3b0 [ 573.227923][T15613] ? lockdep_hardirqs_on+0x9c/0x150 [ 573.227948][T15613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.227968][T15613] ? clear_bhb_loop+0x60/0xb0 [ 573.228005][T15613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.228023][T15613] RIP: 0033:0x7f0bcb38eec9 [ 573.228043][T15613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.228059][T15613] RSP: 002b:00007f0bcc308038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 573.228077][T15613] RAX: ffffffffffffffda RBX: 00007f0bcb5e5fa0 RCX: 00007f0bcb38eec9 [ 573.228089][T15613] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 0000000000000000 [ 573.228100][T15613] RBP: 00007f0bcc308090 R08: 0000000000000000 R09: 0000000000000000 [ 573.228111][T15613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.228121][T15613] R13: 00007f0bcb5e6038 R14: 00007f0bcb5e5fa0 R15: 00007fff7a6f48c8 [ 573.228213][T15613] [ 573.599196][T15611] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2804'. [ 574.040638][T15625] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2810'. [ 575.096046][T15651] netlink: 'syz.3.2816': attribute type 13 has an invalid length. [ 575.123873][T15651] netlink: 'syz.3.2816': attribute type 17 has an invalid length. [ 575.162394][T15651] netlink: 'syz.3.2816': attribute type 27 has an invalid length. [ 575.221288][T15656] tmpfs: Bad value for 'uid' [ 575.226033][T15656] tmpfs: Bad value for 'uid' [ 575.232939][T15656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2819'. [ 575.359435][T15652] delete_channel: no stack [ 575.578981][T15670] FAULT_INJECTION: forcing a failure. [ 575.578981][T15670] name failslab, interval 1, probability 0, space 0, times 0 [ 575.593721][T15670] CPU: 1 UID: 0 PID: 15670 Comm: syz.5.2825 Not tainted syzkaller #0 PREEMPT(full) [ 575.593746][T15670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 575.593756][T15670] Call Trace: [ 575.593764][T15670] [ 575.593771][T15670] dump_stack_lvl+0x189/0x250 [ 575.593801][T15670] ? __pfx____ratelimit+0x10/0x10 [ 575.593822][T15670] ? __pfx_dump_stack_lvl+0x10/0x10 [ 575.593841][T15670] ? __pfx__printk+0x10/0x10 [ 575.593869][T15670] ? __pfx___might_resched+0x10/0x10 [ 575.593890][T15670] should_fail_ex+0x414/0x560 [ 575.593913][T15670] should_failslab+0xa8/0x100 [ 575.593933][T15670] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 575.593958][T15670] ? __alloc_skb+0x112/0x2d0 [ 575.593984][T15670] __alloc_skb+0x112/0x2d0 [ 575.594008][T15670] netlink_sendmsg+0x5c6/0xb30 [ 575.594039][T15670] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.594063][T15670] ? aa_sock_msg_perm+0xf1/0x1d0 [ 575.594086][T15670] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 575.594106][T15670] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.594127][T15670] __sock_sendmsg+0x219/0x270 [ 575.594155][T15670] ____sys_sendmsg+0x505/0x830 [ 575.594183][T15670] ? __pfx_____sys_sendmsg+0x10/0x10 [ 575.594215][T15670] ? import_iovec+0x74/0xa0 [ 575.594243][T15670] ___sys_sendmsg+0x21f/0x2a0 [ 575.594268][T15670] ? __pfx____sys_sendmsg+0x10/0x10 [ 575.594327][T15670] ? __fget_files+0x2a/0x420 [ 575.594344][T15670] ? __fget_files+0x3a0/0x420 [ 575.594372][T15670] __x64_sys_sendmsg+0x19b/0x260 [ 575.594398][T15670] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 575.594437][T15670] ? __pfx_ksys_write+0x10/0x10 [ 575.594450][T15670] ? rcu_is_watching+0x15/0xb0 [ 575.594472][T15670] ? do_syscall_64+0xbe/0x3b0 [ 575.594497][T15670] do_syscall_64+0xfa/0x3b0 [ 575.594516][T15670] ? lockdep_hardirqs_on+0x9c/0x150 [ 575.594535][T15670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.594552][T15670] ? clear_bhb_loop+0x60/0xb0 [ 575.594572][T15670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.594588][T15670] RIP: 0033:0x7feed738eec9 [ 575.594604][T15670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.594618][T15670] RSP: 002b:00007feed8272038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 575.594636][T15670] RAX: ffffffffffffffda RBX: 00007feed75e5fa0 RCX: 00007feed738eec9 [ 575.594648][T15670] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 575.594659][T15670] RBP: 00007feed8272090 R08: 0000000000000000 R09: 0000000000000000 [ 575.594669][T15670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.594678][T15670] R13: 00007feed75e6038 R14: 00007feed75e5fa0 R15: 00007ffc316c8f28 [ 575.594707][T15670] [ 575.902730][T15671] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2824'. [ 576.553405][T15689] netlink: 182 bytes leftover after parsing attributes in process `syz.4.2826'. [ 576.556061][T15688] FAULT_INJECTION: forcing a failure. [ 576.556061][T15688] name failslab, interval 1, probability 0, space 0, times 0 [ 576.575467][T15688] CPU: 0 UID: 0 PID: 15688 Comm: syz.3.2829 Not tainted syzkaller #0 PREEMPT(full) [ 576.575489][T15688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 576.575499][T15688] Call Trace: [ 576.575506][T15688] [ 576.575514][T15688] dump_stack_lvl+0x189/0x250 [ 576.575537][T15688] ? __pfx____ratelimit+0x10/0x10 [ 576.575556][T15688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 576.575576][T15688] ? __pfx__printk+0x10/0x10 [ 576.575606][T15688] ? __pfx___might_resched+0x10/0x10 [ 576.575628][T15688] should_fail_ex+0x414/0x560 [ 576.575654][T15688] should_failslab+0xa8/0x100 [ 576.575673][T15688] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 576.575698][T15688] ? __alloc_skb+0x112/0x2d0 [ 576.575730][T15688] __alloc_skb+0x112/0x2d0 [ 576.575756][T15688] netlink_sendmsg+0x5c6/0xb30 [ 576.575787][T15688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 576.575812][T15688] ? aa_sock_msg_perm+0xf1/0x1d0 [ 576.575832][T15688] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 576.575851][T15688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 576.575873][T15688] __sock_sendmsg+0x219/0x270 [ 576.575894][T15688] ____sys_sendmsg+0x505/0x830 [ 576.575924][T15688] ? __pfx_____sys_sendmsg+0x10/0x10 [ 576.575957][T15688] ? import_iovec+0x74/0xa0 [ 576.575982][T15688] ___sys_sendmsg+0x21f/0x2a0 [ 576.576006][T15688] ? __pfx____sys_sendmsg+0x10/0x10 [ 576.576051][T15688] ? __fget_files+0x2a/0x420 [ 576.576082][T15688] ? __fget_files+0x2a/0x420 [ 576.576098][T15688] ? __fget_files+0x3a0/0x420 [ 576.576127][T15688] __x64_sys_sendmsg+0x19b/0x260 [ 576.576151][T15688] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 576.576199][T15688] do_syscall_64+0xfa/0x3b0 [ 576.576222][T15688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.576236][T15688] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 576.576251][T15688] ? clear_bhb_loop+0x60/0xb0 [ 576.576272][T15688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.576288][T15688] RIP: 0033:0x7f0bcb38eec9 [ 576.576304][T15688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.576319][T15688] RSP: 002b:00007f0bcc308038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 576.576337][T15688] RAX: ffffffffffffffda RBX: 00007f0bcb5e5fa0 RCX: 00007f0bcb38eec9 [ 576.576350][T15688] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 576.576361][T15688] RBP: 00007f0bcc308090 R08: 0000000000000000 R09: 0000000000000000 [ 576.576371][T15688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.576381][T15688] R13: 00007f0bcb5e6038 R14: 00007f0bcb5e5fa0 R15: 00007fff7a6f48c8 [ 576.576414][T15688] [ 577.342569][T15709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2836'. [ 577.383373][T15709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2836'. [ 577.739352][T15718] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2838'. [ 577.891326][T15731] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2841'. [ 577.903022][T15731] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2841'. [ 578.335529][T15745] netlink: 'syz.4.2847': attribute type 2 has an invalid length. [ 578.870989][T15752] __nla_validate_parse: 3 callbacks suppressed [ 578.872247][T15752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2849'. [ 578.983934][T15753] netlink: 'syz.3.2849': attribute type 21 has an invalid length. [ 579.055895][T15753] ‚: renamed from bond_slave_0 (while UP) [ 579.124353][T15755] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.2850'. [ 579.264481][T15762] netlink: 'syz.5.2852': attribute type 10 has an invalid length. [ 579.328637][T15762] veth1_vlan: entered allmulticast mode [ 579.361858][T15762] team0: Device veth1_vlan failed to register rx_handler [ 579.400415][T15767] netlink: 822 bytes leftover after parsing attributes in process `syz.4.2854'. [ 579.487718][T15772] netlink: 'syz.0.2856': attribute type 13 has an invalid length. [ 579.495829][T15772] netlink: 'syz.0.2856': attribute type 17 has an invalid length. [ 579.720293][T15772] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 579.770618][T15775] netlink: 'syz.3.2857': attribute type 10 has an invalid length. [ 580.158440][T15786] netlink: 'syz.5.2860': attribute type 10 has an invalid length. [ 580.182955][T15789] FAULT_INJECTION: forcing a failure. [ 580.182955][T15789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 580.211137][T15789] CPU: 0 UID: 0 PID: 15789 Comm: syz.0.2862 Not tainted syzkaller #0 PREEMPT(full) [ 580.211162][T15789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 580.211171][T15789] Call Trace: [ 580.211177][T15789] [ 580.211183][T15789] dump_stack_lvl+0x189/0x250 [ 580.211204][T15789] ? __pfx____ratelimit+0x10/0x10 [ 580.211221][T15789] ? __pfx_dump_stack_lvl+0x10/0x10 [ 580.211236][T15789] ? __pfx__printk+0x10/0x10 [ 580.211254][T15789] ? __might_fault+0xb0/0x130 [ 580.211270][T15789] ? __might_fault+0xb0/0x130 [ 580.211287][T15789] should_fail_ex+0x414/0x560 [ 580.211308][T15789] _copy_from_user+0x2d/0xb0 [ 580.211321][T15789] sock_do_ioctl+0x182/0x300 [ 580.211335][T15789] ? irqentry_exit+0x74/0x90 [ 580.211351][T15789] ? __pfx_sock_do_ioctl+0x10/0x10 [ 580.211378][T15789] ? __pfx_sock_ioctl+0x10/0x10 [ 580.211399][T15789] sock_ioctl+0x576/0x790 [ 580.211414][T15789] ? __pfx_sock_ioctl+0x10/0x10 [ 580.211430][T15789] ? __se_sys_ioctl+0x2d/0x170 [ 580.211453][T15789] ? bpf_lsm_file_ioctl+0x9/0x20 [ 580.211471][T15789] ? __pfx_sock_ioctl+0x10/0x10 [ 580.211484][T15789] __se_sys_ioctl+0xfc/0x170 [ 580.211504][T15789] do_syscall_64+0xfa/0x3b0 [ 580.211521][T15789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.211533][T15789] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 580.211546][T15789] ? clear_bhb_loop+0x60/0xb0 [ 580.211562][T15789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.211574][T15789] RIP: 0033:0x7f41c1f8eec9 [ 580.211587][T15789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 580.211598][T15789] RSP: 002b:00007f41c2e64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 580.211613][T15789] RAX: ffffffffffffffda RBX: 00007f41c21e5fa0 RCX: 00007f41c1f8eec9 [ 580.211624][T15789] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000008 [ 580.211632][T15789] RBP: 00007f41c2e64090 R08: 0000000000000000 R09: 0000000000000000 [ 580.211640][T15789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.211647][T15789] R13: 00007f41c21e6038 R14: 00007f41c21e5fa0 R15: 00007ffd7ddcbd48 [ 580.211672][T15789] [ 580.214507][T15791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2863'. [ 580.670938][T15802] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2865'. [ 580.774966][T15786] team0 (unregistering): Port device team_slave_0 removed [ 580.813118][T15786] team0 (unregistering): Port device team_slave_1 removed [ 581.507234][T15822] netlink: 'syz.4.2873': attribute type 13 has an invalid length. [ 581.524146][T15822] netlink: 'syz.4.2873': attribute type 17 has an invalid length. [ 581.731257][T15822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 582.139201][T15832] netlink: 'syz.0.2876': attribute type 1 has an invalid length. [ 582.168265][T15832] netlink: 'syz.0.2876': attribute type 3 has an invalid length. [ 582.176033][T15832] netlink: 'syz.0.2876': attribute type 1 has an invalid length. [ 582.195582][T15832] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2876'. [ 582.207508][T15836] FAULT_INJECTION: forcing a failure. [ 582.207508][T15836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 582.211238][T15837] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2877'. [ 582.222013][T15836] CPU: 0 UID: 0 PID: 15836 Comm: syz.5.2878 Not tainted syzkaller #0 PREEMPT(full) [ 582.222036][T15836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 582.222046][T15836] Call Trace: [ 582.222052][T15836] [ 582.222059][T15836] dump_stack_lvl+0x189/0x250 [ 582.222084][T15836] ? __pfx____ratelimit+0x10/0x10 [ 582.222103][T15836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 582.222122][T15836] ? __pfx__printk+0x10/0x10 [ 582.222144][T15836] ? __might_fault+0xb0/0x130 [ 582.222169][T15836] should_fail_ex+0x414/0x560 [ 582.222192][T15836] _copy_from_iter+0x1de/0x1790 [ 582.222227][T15836] ? rcu_is_watching+0x15/0xb0 [ 582.222245][T15836] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 582.222270][T15836] ? __pfx__copy_from_iter+0x10/0x10 [ 582.222293][T15836] ? __build_skb_around+0x257/0x3e0 [ 582.222317][T15836] ? netlink_sendmsg+0x642/0xb30 [ 582.222335][T15836] ? skb_put+0x11b/0x210 [ 582.222359][T15836] netlink_sendmsg+0x6b2/0xb30 [ 582.222388][T15836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 582.222417][T15836] ? aa_sock_msg_perm+0xf1/0x1d0 [ 582.222439][T15836] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 582.222458][T15836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 582.222479][T15836] __sock_sendmsg+0x219/0x270 [ 582.222500][T15836] ____sys_sendmsg+0x505/0x830 [ 582.222528][T15836] ? __pfx_____sys_sendmsg+0x10/0x10 [ 582.222559][T15836] ? import_iovec+0x74/0xa0 [ 582.222585][T15836] ___sys_sendmsg+0x21f/0x2a0 [ 582.222610][T15836] ? __pfx____sys_sendmsg+0x10/0x10 [ 582.222667][T15836] ? __fget_files+0x2a/0x420 [ 582.222684][T15836] ? __fget_files+0x3a0/0x420 [ 582.222711][T15836] __x64_sys_sendmsg+0x19b/0x260 [ 582.222736][T15836] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 582.222768][T15836] ? __pfx_ksys_write+0x10/0x10 [ 582.222780][T15836] ? rcu_is_watching+0x15/0xb0 [ 582.222801][T15836] ? do_syscall_64+0xbe/0x3b0 [ 582.222825][T15836] do_syscall_64+0xfa/0x3b0 [ 582.222843][T15836] ? lockdep_hardirqs_on+0x9c/0x150 [ 582.222861][T15836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.222877][T15836] ? clear_bhb_loop+0x60/0xb0 [ 582.222896][T15836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.222911][T15836] RIP: 0033:0x7feed738eec9 [ 582.222926][T15836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.222940][T15836] RSP: 002b:00007feed8272038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 582.222958][T15836] RAX: ffffffffffffffda RBX: 00007feed75e5fa0 RCX: 00007feed738eec9 [ 582.222969][T15836] RDX: 000000002400c084 RSI: 0000200000000900 RDI: 0000000000000003 [ 582.222979][T15836] RBP: 00007feed8272090 R08: 0000000000000000 R09: 0000000000000000 [ 582.222990][T15836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.222999][T15836] R13: 00007feed75e6038 R14: 00007feed75e5fa0 R15: 00007ffc316c8f28 [ 582.223027][T15836] [ 584.299810][T15883] netlink: 'syz.5.2890': attribute type 13 has an invalid length. [ 584.332782][T15883] netlink: 'syz.5.2890': attribute type 17 has an invalid length. [ 584.677228][T15883] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 585.629255][T15898] netlink: 'syz.3.2894': attribute type 13 has an invalid length. [ 585.951906][T15906] FAULT_INJECTION: forcing a failure. [ 585.951906][T15906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.966862][T15906] CPU: 0 UID: 0 PID: 15906 Comm: syz.0.2897 Not tainted syzkaller #0 PREEMPT(full) [ 585.966885][T15906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 585.966895][T15906] Call Trace: [ 585.966902][T15906] [ 585.966909][T15906] dump_stack_lvl+0x189/0x250 [ 585.966932][T15906] ? __pfx____ratelimit+0x10/0x10 [ 585.966953][T15906] ? __pfx_dump_stack_lvl+0x10/0x10 [ 585.966971][T15906] ? __pfx__printk+0x10/0x10 [ 585.966994][T15906] ? __might_fault+0xb0/0x130 [ 585.967028][T15906] should_fail_ex+0x414/0x560 [ 585.967054][T15906] _copy_from_user+0x2d/0xb0 [ 585.967070][T15906] dev_ethtool+0xd0/0x19b0 [ 585.967097][T15906] ? __lock_acquire+0xab9/0xd20 [ 585.967126][T15906] ? __pfx_dev_ethtool+0x10/0x10 [ 585.967160][T15906] ? dev_load+0x21/0x1f0 [ 585.967182][T15906] ? dev_load+0x21/0x1f0 [ 585.967201][T15906] dev_ioctl+0x392/0x1150 [ 585.967226][T15906] sock_do_ioctl+0x22c/0x300 [ 585.967246][T15906] ? __pfx_sock_do_ioctl+0x10/0x10 [ 585.967280][T15906] sock_ioctl+0x576/0x790 [ 585.967297][T15906] ? __pfx_sock_ioctl+0x10/0x10 [ 585.967315][T15906] ? __fget_files+0x2a/0x420 [ 585.967331][T15906] ? __fget_files+0x3a0/0x420 [ 585.967353][T15906] ? __fget_files+0x2a/0x420 [ 585.967375][T15906] ? bpf_lsm_file_ioctl+0x9/0x20 [ 585.967395][T15906] ? __pfx_sock_ioctl+0x10/0x10 [ 585.967410][T15906] __se_sys_ioctl+0xfc/0x170 [ 585.967438][T15906] do_syscall_64+0xfa/0x3b0 [ 585.967460][T15906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.967475][T15906] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 585.967490][T15906] ? clear_bhb_loop+0x60/0xb0 [ 585.967510][T15906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.967524][T15906] RIP: 0033:0x7f41c1f8eec9 [ 585.967539][T15906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 585.967557][T15906] RSP: 002b:00007f41c2e64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 585.967574][T15906] RAX: ffffffffffffffda RBX: 00007f41c21e5fa0 RCX: 00007f41c1f8eec9 [ 585.967586][T15906] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000008 [ 585.967597][T15906] RBP: 00007f41c2e64090 R08: 0000000000000000 R09: 0000000000000000 [ 585.967608][T15906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.967618][T15906] R13: 00007f41c21e6038 R14: 00007f41c21e5fa0 R15: 00007ffd7ddcbd48 [ 585.967651][T15906] [ 586.838715][T15930] netlink: 'syz.0.2901': attribute type 2 has an invalid length. [ 586.849783][T15930] netlink: 'syz.0.2901': attribute type 5 has an invalid length. [ 586.998493][T15898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.033150][T15898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.535902][T15928] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2901'. [ 587.557409][ T78] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.585185][ T78] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.609851][ T78] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.646572][ T78] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.695549][T15945] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2904'. [ 587.707451][T15945] netlink: 'syz.3.2904': attribute type 2 has an invalid length. [ 587.715207][T15945] netlink: 'syz.3.2904': attribute type 5 has an invalid length. [ 587.960245][T15953] netlink: 'syz.3.2907': attribute type 13 has an invalid length. [ 587.972561][T15953] netlink: 'syz.3.2907': attribute type 17 has an invalid length. [ 588.089631][T15955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2908'. [ 588.557521][T15953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.598826][T15953] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.655680][T15953] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 588.995831][T15963] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2911'. [ 589.022213][T15963] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2911'. [ 590.320461][T15996] ksmbd: Unknown IPC event: 3, ignore. [ 590.491331][T16006] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2921'. [ 590.560018][T16009] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2922'. [ 590.827315][T16018] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 591.086961][T16021] netlink: 'syz.0.2925': attribute type 39 has an invalid length. [ 591.306557][T16025] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2927'. [ 591.362275][T16025] netlink: 'syz.3.2927': attribute type 2 has an invalid length. [ 591.463953][T16025] netlink: 'syz.3.2927': attribute type 5 has an invalid length. [ 593.352089][T16038] netlink: 'syz.5.2931': attribute type 11 has an invalid length. [ 593.373469][T16038] netlink: 448 bytes leftover after parsing attributes in process `syz.5.2931'. [ 593.429556][T16039] netlink: 'syz.5.2931': attribute type 10 has an invalid length. [ 595.492081][T16039] bond0: (slave geneve0): Releasing backup interface [ 595.892192][T16047] netlink: 'syz.5.2935': attribute type 10 has an invalid length. [ 595.917112][T16049] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2934'. [ 595.967557][T16047] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2935'. [ 596.147509][T16054] FAULT_INJECTION: forcing a failure. [ 596.147509][T16054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 596.181439][T16054] CPU: 1 UID: 0 PID: 16054 Comm: syz.0.2938 Not tainted syzkaller #0 PREEMPT(full) [ 596.181465][T16054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 596.181475][T16054] Call Trace: [ 596.181482][T16054] [ 596.181490][T16054] dump_stack_lvl+0x189/0x250 [ 596.181515][T16054] ? __pfx____ratelimit+0x10/0x10 [ 596.181535][T16054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 596.181554][T16054] ? __pfx__printk+0x10/0x10 [ 596.181576][T16054] ? __might_fault+0xb0/0x130 [ 596.181604][T16054] should_fail_ex+0x414/0x560 [ 596.181628][T16054] _copy_from_user+0x2d/0xb0 [ 596.181644][T16054] dev_ethtool+0xd0/0x19b0 [ 596.181666][T16054] ? __lock_acquire+0xab9/0xd20 [ 596.181690][T16054] ? __pfx_dev_ethtool+0x10/0x10 [ 596.181724][T16054] ? dev_load+0x21/0x1f0 [ 596.181745][T16054] ? dev_load+0x21/0x1f0 [ 596.181766][T16054] dev_ioctl+0x392/0x1150 [ 596.181790][T16054] sock_do_ioctl+0x22c/0x300 [ 596.181811][T16054] ? __pfx_sock_do_ioctl+0x10/0x10 [ 596.181826][T16054] ? __lock_acquire+0xab9/0xd20 [ 596.181864][T16054] sock_ioctl+0x576/0x790 [ 596.181884][T16054] ? __pfx_sock_ioctl+0x10/0x10 [ 596.181920][T16054] ? __fget_files+0x2a/0x420 [ 596.181937][T16054] ? __fget_files+0x3a0/0x420 [ 596.181954][T16054] ? __fget_files+0x2a/0x420 [ 596.181974][T16054] ? bpf_lsm_file_ioctl+0x9/0x20 [ 596.181997][T16054] ? __pfx_sock_ioctl+0x10/0x10 [ 596.182014][T16054] __se_sys_ioctl+0xfc/0x170 [ 596.182038][T16054] do_syscall_64+0xfa/0x3b0 [ 596.182060][T16054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.182075][T16054] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 596.182092][T16054] ? clear_bhb_loop+0x60/0xb0 [ 596.182111][T16054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.182127][T16054] RIP: 0033:0x7f41c1f8eec9 [ 596.182143][T16054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.182157][T16054] RSP: 002b:00007f41c2e64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 596.182175][T16054] RAX: ffffffffffffffda RBX: 00007f41c21e5fa0 RCX: 00007f41c1f8eec9 [ 596.182188][T16054] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000008 [ 596.182198][T16054] RBP: 00007f41c2e64090 R08: 0000000000000000 R09: 0000000000000000 [ 596.182208][T16054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.182218][T16054] R13: 00007f41c21e6038 R14: 00007f41c21e5fa0 R15: 00007ffd7ddcbd48 [ 596.182246][T16054] [ 596.971370][T16065] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2942'. [ 597.016420][T16065] netlink: 'syz.0.2942': attribute type 2 has an invalid length. [ 597.024362][T16065] netlink: 'syz.0.2942': attribute type 5 has an invalid length. [ 597.226408][T16074] netlink: 'syz.5.2943': attribute type 39 has an invalid length. [ 597.252241][T16074] veth0_macvtap: left promiscuous mode [ 597.629268][T16083] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2947'. [ 598.125637][T16103] netlink: 'syz.4.2951': attribute type 39 has an invalid length. [ 598.193261][T16103] veth0_macvtap: left promiscuous mode [ 598.400354][ T30] audit: type=1107 audit(1759415336.080:4): pid=16104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=',' [ 599.223545][T16127] netlink: 'syz.2.2960': attribute type 10 has an invalid length. [ 599.462014][T16134] netlink: 'syz.0.2962': attribute type 21 has an invalid length. [ 599.634335][T16127] team0 (unregistering): Port device team_slave_0 removed [ 599.645833][T16127] team0 (unregistering): Port device team_slave_1 removed [ 599.670312][T16134] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2962'. [ 599.703081][T16145] tap0: tun_chr_ioctl cmd 2147767507 [ 599.819796][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2967'. [ 600.018345][ T12] wlan1: Trigger new scan to find an IBSS to join [ 600.536721][T16163] netlink: 'syz.4.2973': attribute type 21 has an invalid length. [ 600.715385][T16163] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2973'. [ 600.729650][T16169] FAULT_INJECTION: forcing a failure. [ 600.729650][T16169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 600.757638][T16169] CPU: 1 UID: 0 PID: 16169 Comm: syz.0.2975 Not tainted syzkaller #0 PREEMPT(full) [ 600.757664][T16169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 600.757674][T16169] Call Trace: [ 600.757682][T16169] [ 600.757689][T16169] dump_stack_lvl+0x189/0x250 [ 600.757715][T16169] ? __pfx____ratelimit+0x10/0x10 [ 600.757737][T16169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 600.757756][T16169] ? __pfx__printk+0x10/0x10 [ 600.757779][T16169] ? __might_fault+0xb0/0x130 [ 600.757807][T16169] should_fail_ex+0x414/0x560 [ 600.757830][T16169] _copy_from_user+0x2d/0xb0 [ 600.757847][T16169] ethtool_set_link_ksettings+0x138/0x3c0 [ 600.757871][T16169] ? __pfx_ethtool_set_link_ksettings+0x10/0x10 [ 600.757889][T16169] ? __mutex_lock+0x5bb/0x1350 [ 600.757916][T16169] ? dev_ethtool+0x1d0/0x19b0 [ 600.757954][T16169] ? bpf_lsm_capable+0x9/0x20 [ 600.757969][T16169] ? security_capable+0x7e/0x2e0 [ 600.757996][T16169] dev_ethtool+0x1171/0x19b0 [ 600.758031][T16169] ? __pfx_dev_ethtool+0x10/0x10 [ 600.758055][T16169] ? dev_load+0x21/0x1f0 [ 600.758104][T16169] ? dev_load+0x21/0x1f0 [ 600.758126][T16169] dev_ioctl+0x392/0x1150 [ 600.758150][T16169] sock_do_ioctl+0x22c/0x300 [ 600.758171][T16169] ? __pfx_sock_do_ioctl+0x10/0x10 [ 600.758207][T16169] sock_ioctl+0x576/0x790 [ 600.758226][T16169] ? __pfx_sock_ioctl+0x10/0x10 [ 600.758244][T16169] ? __fget_files+0x2a/0x420 [ 600.758260][T16169] ? __fget_files+0x3a0/0x420 [ 600.758276][T16169] ? __fget_files+0x2a/0x420 [ 600.758297][T16169] ? bpf_lsm_file_ioctl+0x9/0x20 [ 600.758320][T16169] ? __pfx_sock_ioctl+0x10/0x10 [ 600.758336][T16169] __se_sys_ioctl+0xfc/0x170 [ 600.758361][T16169] do_syscall_64+0xfa/0x3b0 [ 600.758381][T16169] ? lockdep_hardirqs_on+0x9c/0x150 [ 600.758406][T16169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.758423][T16169] ? clear_bhb_loop+0x60/0xb0 [ 600.758443][T16169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.758460][T16169] RIP: 0033:0x7f41c1f8eec9 [ 600.758475][T16169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 600.758490][T16169] RSP: 002b:00007f41c2e43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 600.758508][T16169] RAX: ffffffffffffffda RBX: 00007f41c21e6090 RCX: 00007f41c1f8eec9 [ 600.758520][T16169] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000008 [ 600.758530][T16169] RBP: 00007f41c2e43090 R08: 0000000000000000 R09: 0000000000000000 [ 600.758541][T16169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.758551][T16169] R13: 00007f41c21e6128 R14: 00007f41c21e6090 R15: 00007ffd7ddcbd48 [ 600.758579][T16169] [ 601.502694][T16186] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2978'. [ 601.996118][T16188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2980'. [ 603.631481][T16219] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2989'. [ 603.651925][T16219] netlink: 'syz.4.2989': attribute type 2 has an invalid length. [ 603.662122][T16219] netlink: 'syz.4.2989': attribute type 5 has an invalid length. [ 603.825998][T16229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2994'. [ 603.944713][ T5234] udevd[5234]: worker [5867] terminated by signal 33 (Unknown signal 33) [ 603.982331][ T5234] udevd[5234]: worker [5867] failed while handling '/devices/virtual/block/loop4' [ 604.076843][T16235] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2998'. [ 606.019765][ T12] wlan1: Trigger new scan to find an IBSS to join [ 606.105110][T16268] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3007'. [ 606.681459][T16294] netlink: 'syz.3.3016': attribute type 13 has an invalid length. [ 606.764211][T16291] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 606.790148][T16291] syzkaller1: linktype set to 778 [ 607.014476][ T12] wlan1: Creating new IBSS network, BSSID 06:bb:72:8f:e3:ae [ 607.132576][T16306] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3020'. [ 607.142176][T16306] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3020'. [ 607.159851][T16308] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3021'. [ 607.166576][T16306] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3020'. [ 607.199079][T16306] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3020'. [ 607.294515][T16313] FAULT_INJECTION: forcing a failure. [ 607.294515][T16313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.334290][T16313] CPU: 0 UID: 0 PID: 16313 Comm: syz.5.3024 Not tainted syzkaller #0 PREEMPT(full) [ 607.334315][T16313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 607.334327][T16313] Call Trace: [ 607.334333][T16313] [ 607.334342][T16313] dump_stack_lvl+0x189/0x250 [ 607.334366][T16313] ? __pfx____ratelimit+0x10/0x10 [ 607.334387][T16313] ? __pfx_dump_stack_lvl+0x10/0x10 [ 607.334407][T16313] ? __pfx__printk+0x10/0x10 [ 607.334442][T16313] should_fail_ex+0x414/0x560 [ 607.334474][T16313] _copy_to_user+0x31/0xb0 [ 607.334492][T16313] simple_read_from_buffer+0xe1/0x170 [ 607.334515][T16313] proc_fail_nth_read+0x1b3/0x220 [ 607.334540][T16313] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 607.334565][T16313] ? rw_verify_area+0x2a6/0x4d0 [ 607.334586][T16313] ? __lock_acquire+0xab9/0xd20 [ 607.334607][T16313] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 607.334630][T16313] vfs_read+0x200/0xa30 [ 607.334652][T16313] ? fdget_pos+0x247/0x320 [ 607.334675][T16313] ? __pfx___mutex_lock+0x10/0x10 [ 607.334697][T16313] ? __pfx_vfs_read+0x10/0x10 [ 607.334720][T16313] ? __fget_files+0x2a/0x420 [ 607.334742][T16313] ? __fget_files+0x3a0/0x420 [ 607.334758][T16313] ? __fget_files+0x2a/0x420 [ 607.334785][T16313] ksys_read+0x145/0x250 [ 607.334803][T16313] ? __pfx_ksys_read+0x10/0x10 [ 607.334830][T16313] do_syscall_64+0xfa/0x3b0 [ 607.334853][T16313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.334869][T16313] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 607.334884][T16313] ? clear_bhb_loop+0x60/0xb0 [ 607.334905][T16313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.334921][T16313] RIP: 0033:0x7feed738d8dc [ 607.334936][T16313] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 607.334950][T16313] RSP: 002b:00007feed8272030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 607.334969][T16313] RAX: ffffffffffffffda RBX: 00007feed75e5fa0 RCX: 00007feed738d8dc [ 607.334981][T16313] RDX: 000000000000000f RSI: 00007feed82720a0 RDI: 0000000000000009 [ 607.334991][T16313] RBP: 00007feed8272090 R08: 0000000000000000 R09: 0000000000000000 [ 607.335001][T16313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.335011][T16313] R13: 00007feed75e6038 R14: 00007feed75e5fa0 R15: 00007ffc316c8f28 [ 607.335041][T16313] [ 607.990722][T16334] netlink: 'syz.0.3027': attribute type 3 has an invalid length. [ 608.180170][T16343] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3029'. [ 609.124537][T16360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3037'. [ 609.133991][T16360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3037'. [ 609.149743][T16360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3037'. [ 609.340863][T16370] netlink: 'syz.0.3040': attribute type 2 has an invalid length. [ 609.349001][T16370] netlink: 'syz.0.3040': attribute type 5 has an invalid length. [ 610.086754][T16391] netlink: 'syz.0.3047': attribute type 1 has an invalid length. [ 611.038266][T16395] cgroup: fork rejected by pids controller in /syz2 [ 611.235523][T16417] __nla_validate_parse: 6 callbacks suppressed [ 611.235542][T16417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3055'. [ 611.379619][T16418] netlink: 'syz.0.3056': attribute type 13 has an invalid length. [ 611.580311][T16420] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3057'. [ 611.914090][T16426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3060'. [ 612.299803][T16437] netlink: 'syz.3.3063': attribute type 13 has an invalid length. [ 613.314792][ T49] netdevsim netdevsim0 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.323638][ T49] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.359519][T16441] netlink: 'syz.0.3065': attribute type 39 has an invalid length. [ 613.368894][ T49] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.380082][ T49] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.547526][T16445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3067'. [ 613.703902][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.838453][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.996587][T16452] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3070'. [ 614.038737][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.463399][T16461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3073'. [ 614.479578][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.816513][T16474] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 614.830232][T16474] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 614.838735][T16474] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 614.852116][T16474] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 614.878813][T16471] netlink: 'syz.0.3076': attribute type 2 has an invalid length. [ 614.887093][T16471] netlink: 'syz.0.3076': attribute type 5 has an invalid length. [ 614.938954][T16474] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 615.286382][T16483] sock: sock_timestamping_bind_phc: sock not bind to device [ 616.029098][ T49] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 616.091642][T16485] FAULT_INJECTION: forcing a failure. [ 616.091642][T16485] name failslab, interval 1, probability 0, space 0, times 0 [ 616.104905][T16485] CPU: 0 UID: 0 PID: 16485 Comm: syz.3.3080 Not tainted syzkaller #0 PREEMPT(full) [ 616.104942][T16485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 616.104959][T16485] Call Trace: [ 616.104970][T16485] [ 616.104982][T16485] dump_stack_lvl+0x189/0x250 [ 616.105021][T16485] ? __pfx____ratelimit+0x10/0x10 [ 616.105040][T16485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 616.105058][T16485] ? __pfx__printk+0x10/0x10 [ 616.105082][T16485] ? fs_reclaim_acquire+0x7d/0x100 [ 616.105108][T16485] should_fail_ex+0x414/0x560 [ 616.105131][T16485] should_failslab+0xa8/0x100 [ 616.105149][T16485] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 616.105172][T16485] ? __d_alloc+0x36/0x7a0 [ 616.105196][T16485] __d_alloc+0x36/0x7a0 [ 616.105221][T16485] d_alloc_pseudo+0x21/0xc0 [ 616.105242][T16485] alloc_file_pseudo+0xcc/0x210 [ 616.105265][T16485] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 616.105282][T16485] ? do_raw_spin_unlock+0x122/0x240 [ 616.105305][T16485] ? _raw_spin_unlock+0x28/0x50 [ 616.105331][T16485] sock_alloc_file+0xb8/0x2e0 [ 616.105346][T16485] ? __sys_socket+0x12c/0x1b0 [ 616.105367][T16485] __sys_socket+0x13d/0x1b0 [ 616.105385][T16485] __x64_sys_socket+0x7a/0x90 [ 616.105402][T16485] do_syscall_64+0xfa/0x3b0 [ 616.105420][T16485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.105432][T16485] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 616.105446][T16485] ? clear_bhb_loop+0x60/0xb0 [ 616.105524][T16485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.105537][T16485] RIP: 0033:0x7f0bcb38eec9 [ 616.105550][T16485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.105563][T16485] RSP: 002b:00007f0bcc308038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 616.105577][T16485] RAX: ffffffffffffffda RBX: 00007f0bcb5e5fa0 RCX: 00007f0bcb38eec9 [ 616.105588][T16485] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000000a [ 616.105596][T16485] RBP: 00007f0bcc308090 R08: 0000000000000000 R09: 0000000000000000 [ 616.105604][T16485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.105612][T16485] R13: 00007f0bcb5e6038 R14: 00007f0bcb5e5fa0 R15: 00007fff7a6f48c8 [ 616.105635][T16485] [ 616.386134][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 616.468675][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.496007][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.512037][ T49] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 616.513931][T16493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3082'. [ 616.539807][ T49] bond0 (unregistering): Released all slaves [ 616.557649][T16472] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3076'. [ 616.572349][T16490] netlink: 830 bytes leftover after parsing attributes in process `syz.5.3081'. [ 617.077643][ T5868] Bluetooth: hci2: command tx timeout [ 617.110086][T16509] netlink: 'syz.5.3086': attribute type 13 has an invalid length. [ 617.221566][T16510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3087'. [ 617.929921][T16509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.946913][T16509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.098644][ T13] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.135813][ T13] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.148159][ T13] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.320236][ T13] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.455881][T16531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3093'. [ 618.464787][T16473] chnl_net:caif_netlink_parms(): no params data found [ 618.710314][T16473] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.718926][T16473] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.727014][T16473] bridge_slave_0: entered allmulticast mode [ 618.736924][T16473] bridge_slave_0: entered promiscuous mode [ 618.751773][T16473] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.759765][T16473] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.767731][T16473] bridge_slave_1: entered allmulticast mode [ 618.777096][T16473] bridge_slave_1: entered promiscuous mode [ 618.912636][T16473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.000339][T16542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3097'. [ 619.015869][T16473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.136302][ T5868] Bluetooth: hci2: command tx timeout [ 619.327615][T16473] team0: Port device team_slave_0 added [ 619.347130][T16473] team0: Port device team_slave_1 added [ 619.484018][T16473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.492682][T16473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.523779][T16473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.545871][T16473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.555131][T16473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.582120][T16473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.586023][T16562] netlink: 'syz.0.3101': attribute type 13 has an invalid length. [ 619.908585][T16473] hsr_slave_0: entered promiscuous mode [ 619.920157][T16473] hsr_slave_1: entered promiscuous mode [ 619.932339][T16473] debugfs: 'hsr0' already exists in 'hsr' [ 619.943905][T16473] Cannot create hsr debugfs directory [ 620.005494][ T49] hsr_slave_0: left promiscuous mode [ 620.014632][T16576] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3105'. [ 620.049359][ T49] hsr_slave_1: left promiscuous mode [ 620.061421][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 620.073236][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 620.089334][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 620.109671][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 620.154368][ T49] veth0_macvtap: left promiscuous mode [ 620.163396][ T49] veth1_vlan: left promiscuous mode [ 620.178773][ T49] veth0_vlan: left promiscuous mode [ 620.462972][T16578] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3107'. [ 620.989301][T16593] ref_ctr_offset mismatch. inode: 0xae0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 621.226545][ T5868] Bluetooth: hci2: command tx timeout [ 622.443298][T16597] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3112'. [ 622.499557][T16602] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3112'. [ 622.526313][T16602] netlink: zone id is out of range [ 622.532696][T16602] netlink: zone id is out of range [ 622.548763][T16602] netlink: zone id is out of range [ 622.566305][T16602] netlink: zone id is out of range [ 622.593248][T16602] netlink: zone id is out of range [ 622.603402][T16602] netlink: zone id is out of range [ 622.621997][T16602] netlink: zone id is out of range [ 622.636999][T16602] netlink: zone id is out of range [ 622.663523][T16602] netlink: zone id is out of range [ 622.696053][T16602] netlink: zone id is out of range [ 622.739260][T16597] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3112'. [ 623.161116][T16610] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3118'. [ 623.296213][ T5868] Bluetooth: hci2: command tx timeout [ 623.331552][T16612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3117'. [ 623.494008][T16612] netlink: 'syz.3.3117': attribute type 21 has an invalid length. [ 623.585569][T16621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3121'. [ 623.880987][T16473] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 623.935907][T16473] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 623.975944][T16473] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 624.006398][T16473] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 624.232812][T16473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.282232][T16647] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.3125'. [ 624.345625][T16473] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.377637][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.384861][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.429103][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.436325][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.593989][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.601874][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.659725][T16654] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3126'. [ 625.394365][T16473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.719123][T16473] veth0_vlan: entered promiscuous mode [ 625.838643][T16473] veth1_vlan: entered promiscuous mode [ 625.963753][T16473] veth0_macvtap: entered promiscuous mode [ 625.983574][T16473] veth1_macvtap: entered promiscuous mode [ 626.045364][T16473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 626.068350][T16675] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3134'. [ 626.083958][T16473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 626.114987][ T3535] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.133767][ T3535] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.148381][ T3535] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.175298][ T3535] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.425908][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.454666][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.490628][ T3563] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.578302][ T3535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.587653][ T3535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.245546][T16716] netlink: 'syz.2.3068': attribute type 3 has an invalid length. [ 629.044780][T16749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3158'. [ 629.119495][T16753] netlink: 'syz.3.3158': attribute type 21 has an invalid length. [ 629.188555][T16754] netlink: 'syz.4.3157': attribute type 13 has an invalid length. [ 629.437350][T16754] netlink: 'syz.4.3157': attribute type 17 has an invalid length. [ 629.631017][T16758] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3159'. [ 629.669594][T16754] net_ratelimit: 13 callbacks suppressed [ 629.669604][T16754] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 630.032735][T16774] netlink: 'syz.3.3163': attribute type 3 has an invalid length. [ 630.348590][T16783] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3166'. [ 630.918919][T16790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3169'. [ 630.946422][T16790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3169'. [ 631.032203][T16790] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3169'. [ 631.131212][T16790] bridge_slave_0: entered allmulticast mode [ 631.249048][T16790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3169'. [ 631.340018][T16790] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3169'. [ 631.847590][T16819] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3176'. [ 632.201089][T16824] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3178'. [ 632.268340][T16824] netlink: 'syz.5.3178': attribute type 21 has an invalid length. [ 632.281426][T16824] ‚: renamed from bond_slave_0 [ 632.516733][T16838] netlink: 'syz.4.3181': attribute type 3 has an invalid length. [ 632.586442][T16842] netlink: zone id is out of range [ 632.601855][T16842] netlink: zone id is out of range [ 632.620876][T16842] netlink: zone id is out of range [ 632.640652][T16842] netlink: zone id is out of range [ 632.663920][T16842] netlink: zone id is out of range [ 632.694532][T16842] netlink: zone id is out of range [ 632.746304][T16842] netlink: zone id is out of range [ 632.751566][T16842] netlink: zone id is out of range [ 632.767381][T16842] netlink: zone id is out of range [ 633.181493][T16868] netlink: 'syz.0.3192': attribute type 29 has an invalid length. [ 633.199590][T16868] netlink: 'syz.0.3192': attribute type 29 has an invalid length. [ 633.825414][T16882] netlink: 'syz.4.3196': attribute type 6 has an invalid length. [ 633.858519][ T5868] Bluetooth: hci4: ISO packet for unknown connection handle 1033 [ 635.134826][T16899] netlink: 'syz.3.3202': attribute type 13 has an invalid length. [ 636.098657][T16923] netlink: 'syz.3.3210': attribute type 6 has an invalid length. [ 636.128455][T16923] __nla_validate_parse: 3 callbacks suppressed [ 636.128473][T16923] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3210'. [ 636.257742][ T5868] Bluetooth: hci0: ISO packet for unknown connection handle 1033 [ 636.568636][T16928] netlink: 'syz.0.3211': attribute type 21 has an invalid length. [ 636.589744][T16928] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3211'. [ 636.601625][T16930] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3213'. [ 636.636558][T16928] netlink: 'syz.0.3211': attribute type 4 has an invalid length. [ 636.710543][T16934] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3213'. [ 636.726248][T16928] netlink: 'syz.0.3211': attribute type 3 has an invalid length. [ 636.734363][T16928] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3211'. [ 636.745930][T16934] net_ratelimit: 13 callbacks suppressed [ 636.745948][T16934] netlink: zone id is out of range [ 636.745960][T16934] netlink: zone id is out of range [ 636.745968][T16934] netlink: zone id is out of range [ 636.745977][T16934] netlink: zone id is out of range [ 636.745986][T16934] netlink: zone id is out of range [ 636.745994][T16934] netlink: zone id is out of range [ 636.746002][T16934] netlink: zone id is out of range [ 636.746011][T16934] netlink: zone id is out of range [ 636.746020][T16934] netlink: zone id is out of range [ 636.750403][T16934] netlink: zone id is out of range [ 636.845069][T16934] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3213'. [ 636.964746][T16938] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3215'. [ 637.289629][T16950] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3220'. [ 637.397767][T16952] netlink: 'syz.5.3220': attribute type 21 has an invalid length. [ 638.824950][T16991] netlink: 'syz.2.3232': attribute type 64 has an invalid length. [ 638.963542][T16991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3232'. [ 638.979687][T16991] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3232'. [ 639.665493][T17010] netlink: 'syz.0.3240': attribute type 2 has an invalid length. [ 639.681128][T17010] netlink: 'syz.0.3240': attribute type 5 has an invalid length. [ 640.407718][T17029] netlink: 'syz.5.3247': attribute type 6 has an invalid length. [ 640.534537][ T5868] Bluetooth: hci5: ISO packet for unknown connection handle 1033 [ 641.319721][T17068] netlink: 'syz.5.3258': attribute type 13 has an invalid length. [ 642.409201][T17091] netlink: 'syz.2.3266': attribute type 29 has an invalid length. [ 642.429928][T17091] netlink: 'syz.2.3266': attribute type 29 has an invalid length. [ 642.523517][T17101] __nla_validate_parse: 3 callbacks suppressed [ 642.523535][T17101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3274'. [ 642.624550][T17106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3272'. [ 642.638805][T17107] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3273'. [ 642.655126][T17107] netlink: 'syz.3.3273': attribute type 2 has an invalid length. [ 642.690973][T17107] netlink: 'syz.3.3273': attribute type 5 has an invalid length. [ 642.957541][T17117] netlink: 'syz.3.3278': attribute type 10 has an invalid length. [ 642.977907][T17117] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3278'. [ 642.987911][T17117] veth0_vlan: left promiscuous mode [ 642.994235][T17117] veth0_vlan: entered promiscuous mode [ 643.000602][T17117] veth0_vlan: entered allmulticast mode [ 643.017326][T17117] net_ratelimit: 14 callbacks suppressed [ 643.017348][T17117] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 643.706136][T17129] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3282'. [ 643.850852][T17142] netlink: 'syz.5.3284': attribute type 2 has an invalid length. [ 643.864408][T17142] netlink: 'syz.5.3284': attribute type 6 has an invalid length. [ 643.878790][T17142] netlink: 'syz.5.3284': attribute type 7 has an invalid length. [ 643.888964][T17142] netlink: 449 bytes leftover after parsing attributes in process `syz.5.3284'. [ 643.899803][T17142] netlink: 130080 bytes leftover after parsing attributes in process `syz.5.3284'. [ 643.911634][T17142] netlink: 449 bytes leftover after parsing attributes in process `syz.5.3284'. [ 644.037719][T17149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3289'. [ 644.338374][T17146] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3288'. [ 647.009196][T17230] validate_nla: 6 callbacks suppressed [ 647.009215][T17230] netlink: 'syz.3.3322': attribute type 39 has an invalid length. [ 647.043374][T17225] netlink: 'syz.2.3319': attribute type 21 has an invalid length. [ 647.100564][T17233] netlink: 'syz.0.3321': attribute type 13 has an invalid length. [ 647.147922][T17225] ‚: renamed from bond_slave_0 (while UP) [ 648.178121][T17255] __nla_validate_parse: 4 callbacks suppressed [ 648.178138][T17255] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3331'. [ 648.226119][T17259] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3333'. [ 648.245256][T17261] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3332'. [ 648.254989][T17256] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3330'. [ 648.445736][T17268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3336'. [ 648.490982][T17270] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3335'. [ 648.500459][T17270] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3335'. [ 648.621555][T17274] netlink: 'syz.3.3337': attribute type 13 has an invalid length. [ 649.241655][T17287] netlink: 'syz.5.3341': attribute type 13 has an invalid length. [ 649.559483][T17296] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3345'. [ 649.880444][T17303] netlink: 'syz.3.3346': attribute type 13 has an invalid length. [ 650.134128][T17305] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3348'. [ 650.796466][T17313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3351'. [ 653.528048][T17367] __nla_validate_parse: 10 callbacks suppressed [ 653.528067][T17367] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3370'. [ 653.580115][T17369] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3371'. [ 653.687128][T17381] netlink: 'syz.4.3374': attribute type 13 has an invalid length. [ 654.535467][T17396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3380'. [ 654.615464][T17401] netlink: 'syz.3.3380': attribute type 21 has an invalid length. [ 654.825008][T17410] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3383'. [ 654.883665][T17404] netlink: 'syz.2.3381': attribute type 13 has an invalid length. [ 654.954702][T17414] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3385'. [ 655.141453][T17420] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3388'. [ 655.605020][T17404] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.612733][T17404] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.783491][T17404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.803017][T17404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 656.001359][ T3563] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.017842][ T3563] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.046148][ T3563] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.055118][ T3563] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.762048][T17443] netlink: 324 bytes leftover after parsing attributes in process `syz.3.3396'. [ 656.802970][T17443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3396'. [ 656.834624][T17443] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3396'. [ 657.536531][T17458] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3401'. [ 657.557161][T17458] netlink: zone id is out of range [ 657.563183][T17458] netlink: zone id is out of range [ 657.568558][T17458] netlink: zone id is out of range [ 657.573815][T17458] netlink: zone id is out of range [ 657.596269][T17458] netlink: zone id is out of range [ 657.601420][T17458] netlink: zone id is out of range [ 657.628074][T17458] netlink: zone id is out of range [ 657.648198][T17458] netlink: zone id is out of range [ 657.653602][T17458] netlink: zone id is out of range [ 657.673863][T17461] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 657.974662][T17472] netlink: 'syz.5.3407': attribute type 6 has an invalid length. [ 658.072713][T17472] netlink: 'syz.5.3407': attribute type 39 has an invalid length. [ 659.359430][T17503] __nla_validate_parse: 5 callbacks suppressed [ 659.359449][T17503] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3418'. [ 659.556786][T17509] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3421'. [ 659.671088][T17513] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3423'. [ 659.831928][T17519] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3425'. [ 660.049887][T17527] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3428'. [ 660.231737][T17532] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3429'. [ 660.276581][T17532] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3429'. [ 660.534075][T17536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3432'. [ 660.620815][T17542] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3434'. [ 660.633357][T17543] netlink: 'syz.0.3433': attribute type 13 has an invalid length. [ 660.677034][T17542] hsr_slave_0: left promiscuous mode [ 660.707683][T17544] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.3434'. [ 660.739728][T17542] hsr_slave_1: left promiscuous mode [ 660.997169][T17557] netlink: 'syz.2.3436': attribute type 3 has an invalid length. [ 662.298689][T17581] netlink: 'syz.4.3449': attribute type 2 has an invalid length. [ 662.320828][T17581] netlink: 'syz.4.3449': attribute type 5 has an invalid length. [ 663.943675][T17631] net_ratelimit: 102 callbacks suppressed [ 663.943718][T17631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 664.252473][T17642] tmpfs: Bad value for 'gid' [ 664.258485][T17642] tmpfs: Bad value for 'gid' [ 664.732850][T17654] __nla_validate_parse: 13 callbacks suppressed [ 664.732869][T17654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3473'. [ 665.577863][T17675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3483'. [ 665.617832][T17677] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3482'. [ 665.926301][T17690] netlink: 'syz.4.3486': attribute type 2 has an invalid length. [ 665.936489][T17690] netlink: 'syz.4.3486': attribute type 5 has an invalid length. [ 665.989742][T17695] netlink: 'syz.2.3477': attribute type 13 has an invalid length. [ 666.459793][T17699] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3488'. [ 666.878771][T17706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 666.944990][T17716] netlink: 'syz.5.3491': attribute type 39 has an invalid length. [ 666.992785][T17706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.342404][T17724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3496'. [ 667.387706][T17724] netlink: 'syz.4.3496': attribute type 21 has an invalid length. [ 667.442987][T17722] ‚: renamed from bond_slave_0 (while UP) [ 667.639750][T17730] netlink: 'syz.2.3498': attribute type 2 has an invalid length. [ 667.647879][T17730] netlink: 'syz.2.3498': attribute type 5 has an invalid length. [ 667.691808][T17736] netlink: 'syz.5.3500': attribute type 1 has an invalid length. [ 668.033332][T17736] xt_l2tp: v2 sid > 0xffff: 1114112 [ 669.901023][T17774] lo speed is unknown, defaulting to 1000 [ 669.908603][T17774] lo speed is unknown, defaulting to 1000 [ 669.940172][T17774] lo speed is unknown, defaulting to 1000 [ 670.092618][T17774] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 670.271359][T17774] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 670.678005][T17774] lo speed is unknown, defaulting to 1000 [ 670.732542][T17774] lo speed is unknown, defaulting to 1000 [ 670.760197][T17774] lo speed is unknown, defaulting to 1000 [ 670.791065][T17774] lo speed is unknown, defaulting to 1000 [ 670.839291][T17774] lo speed is unknown, defaulting to 1000 [ 670.945697][T17787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3514'. [ 671.143556][T17794] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3517'. [ 671.211209][T17795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3516'. [ 672.169226][T17807] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3522'. [ 672.421614][T17826] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3528'. [ 672.449772][T17825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3527'. [ 672.861628][T17838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3531'. [ 672.883175][T17838] netlink: 'syz.4.3531': attribute type 21 has an invalid length. [ 673.164265][T17850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3536'. [ 673.504722][T17865] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3542'. [ 673.702645][T17874] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3545'. [ 676.290993][T17938] __nla_validate_parse: 4 callbacks suppressed [ 676.291012][T17938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3569'. [ 676.700526][T17950] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3573'. [ 676.745354][T17952] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3574'. [ 677.281503][T17966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3579'. [ 677.375402][T17967] netlink: 'syz.4.3579': attribute type 21 has an invalid length. [ 677.398177][T17969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3581'. [ 677.620353][T17980] tmpfs: Bad value for 'gid' [ 677.625136][T17980] tmpfs: Bad value for 'gid' [ 677.657500][T17980] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3582'. [ 678.381567][T18009] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3594'. [ 678.433619][T18013] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3596'. [ 678.571215][T18019] tmpfs: Bad value for 'gid' [ 678.576356][T18019] tmpfs: Bad value for 'gid' [ 678.588272][T18019] netlink: 10 bytes leftover after parsing attributes in process `syz.5.3598'. [ 678.790320][T18029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3601'. [ 678.986530][T18031] netlink: 'syz.5.3603': attribute type 1 has an invalid length. [ 679.910833][T18073] debugfs: '!' already exists in 'ieee80211' [ 682.440843][T18085] netlink: 'syz.5.3616': attribute type 13 has an invalid length. [ 682.643239][T18089] __nla_validate_parse: 4 callbacks suppressed [ 682.643258][T18089] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3618'. [ 683.224923][T18106] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3624'. [ 684.045991][T18128] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3633'. [ 684.086909][T18128] netlink: 'syz.4.3633': attribute type 2 has an invalid length. [ 684.106471][T18128] netlink: 'syz.4.3633': attribute type 5 has an invalid length. [ 684.474420][T18148] netlink: 'syz.0.3641': attribute type 29 has an invalid length. [ 684.491807][T18148] netlink: 'syz.0.3641': attribute type 29 has an invalid length. [ 684.529686][T18150] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3642'. [ 684.540091][T18150] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3642'. [ 684.551199][T18150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3642'. [ 684.569035][T18148] netlink: 'syz.0.3641': attribute type 29 has an invalid length. [ 684.610875][T18152] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3643'. [ 684.631414][T18152] netlink: 'syz.3.3643': attribute type 2 has an invalid length. [ 684.643506][T18148] netlink: 'syz.0.3641': attribute type 29 has an invalid length. [ 684.651819][T18152] netlink: 'syz.3.3643': attribute type 5 has an invalid length. [ 684.864661][T18161] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3647'. [ 684.904016][T18161] netlink: 'syz.5.3647': attribute type 2 has an invalid length. [ 684.917123][T18161] netlink: 'syz.5.3647': attribute type 5 has an invalid length. [ 685.311153][T18181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3655'. [ 685.351275][T18181] IPv6: NLM_F_CREATE should be specified when creating new route [ 685.591264][T18184] team0: Port device wlan1 added [ 686.020890][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.027727][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.371134][T18211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3665'. [ 689.380801][T18254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 689.409063][T18259] __nla_validate_parse: 2 callbacks suppressed [ 689.409084][T18259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3679'. [ 689.642684][T18266] validate_nla: 4 callbacks suppressed [ 689.642704][T18266] netlink: 'syz.5.3681': attribute type 10 has an invalid length. [ 689.664334][T18266] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3681'. [ 689.673784][T18266] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 690.073428][T18275] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3683'. [ 690.221248][T18280] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 690.246505][T18280] CPU: 1 UID: 0 PID: 18280 Comm: syz.5.3684 Not tainted syzkaller #0 PREEMPT(full) [ 690.246532][T18280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 690.246544][T18280] Call Trace: [ 690.246552][T18280] [ 690.246560][T18280] dump_stack_lvl+0x189/0x250 [ 690.246598][T18280] ? __pfx_dump_stack_lvl+0x10/0x10 [ 690.246620][T18280] ? __pfx__printk+0x10/0x10 [ 690.246651][T18280] ? kernfs_path_from_node+0x2f/0x290 [ 690.246674][T18280] ? kernfs_path_from_node+0x250/0x290 [ 690.246693][T18280] ? kernfs_path_from_node+0x2f/0x290 [ 690.246718][T18280] sysfs_warn_dup+0x8e/0xa0 [ 690.246740][T18280] sysfs_do_create_link_sd+0xc0/0x110 [ 690.246765][T18280] device_add_class_symlinks+0x1cf/0x240 [ 690.246794][T18280] device_add+0x475/0xb50 [ 690.246822][T18280] wiphy_register+0x1ba6/0x28d0 [ 690.246864][T18280] ? __pfx_wiphy_register+0x10/0x10 [ 690.246884][T18280] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 690.246920][T18280] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 690.246951][T18280] ieee80211_register_hw+0x3484/0x4100 [ 690.246985][T18280] ? ieee80211_register_hw+0x1451/0x4100 [ 690.247013][T18280] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 690.247028][T18280] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 690.247054][T18280] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 690.247082][T18280] ? __hrtimer_setup+0x187/0x210 [ 690.247098][T18280] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 690.247123][T18280] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 690.247176][T18280] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 690.247193][T18280] ? trace_kmalloc+0x1f/0xd0 [ 690.247206][T18280] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 690.247223][T18280] ? kstrndup+0xbf/0x160 [ 690.247256][T18280] hwsim_new_radio_nl+0xea4/0x1b10 [ 690.247278][T18280] ? __pfx___nla_validate_parse+0x10/0x10 [ 690.247316][T18280] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 690.247351][T18280] ? __nla_parse+0x40/0x60 [ 690.247377][T18280] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 690.247406][T18280] genl_family_rcv_msg_doit+0x215/0x300 [ 690.247432][T18280] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 690.247465][T18280] ? bpf_lsm_capable+0x9/0x20 [ 690.247481][T18280] ? security_capable+0x7e/0x2e0 [ 690.247509][T18280] genl_rcv_msg+0x60e/0x790 [ 690.247533][T18280] ? __pfx_genl_rcv_msg+0x10/0x10 [ 690.247548][T18280] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 690.247572][T18280] ? irqentry_exit+0x74/0x90 [ 690.247607][T18280] netlink_rcv_skb+0x208/0x470 [ 690.247630][T18280] ? __pfx_genl_rcv_msg+0x10/0x10 [ 690.247646][T18280] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 690.247699][T18280] ? down_read+0x1ad/0x2e0 [ 690.247730][T18280] genl_rcv+0x28/0x40 [ 690.247744][T18280] netlink_unicast+0x82c/0x9e0 [ 690.247775][T18280] ? __pfx_netlink_unicast+0x10/0x10 [ 690.247798][T18280] ? netlink_sendmsg+0x642/0xb30 [ 690.247817][T18280] ? skb_put+0x11b/0x210 [ 690.247844][T18280] netlink_sendmsg+0x805/0xb30 [ 690.247876][T18280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 690.247903][T18280] ? aa_sock_msg_perm+0xf1/0x1d0 [ 690.247926][T18280] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 690.247948][T18280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 690.247971][T18280] __sock_sendmsg+0x219/0x270 [ 690.247994][T18280] ____sys_sendmsg+0x505/0x830 [ 690.248025][T18280] ? __pfx_____sys_sendmsg+0x10/0x10 [ 690.248061][T18280] ? import_iovec+0x74/0xa0 [ 690.248090][T18280] ___sys_sendmsg+0x21f/0x2a0 [ 690.248119][T18280] ? __pfx____sys_sendmsg+0x10/0x10 [ 690.248186][T18280] ? __fget_files+0x2a/0x420 [ 690.248204][T18280] ? __fget_files+0x3a0/0x420 [ 690.248235][T18280] __x64_sys_sendmsg+0x19b/0x260 [ 690.248258][T18280] ? clockevents_program_event+0x24d/0x360 [ 690.248284][T18280] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 690.248329][T18280] ? do_syscall_64+0xbe/0x3b0 [ 690.248354][T18280] do_syscall_64+0xfa/0x3b0 [ 690.248375][T18280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.248391][T18280] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 690.248407][T18280] ? clear_bhb_loop+0x60/0xb0 [ 690.248427][T18280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.248444][T18280] RIP: 0033:0x7feed738eec9 [ 690.248460][T18280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 690.248476][T18280] RSP: 002b:00007feed8251038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 690.248494][T18280] RAX: ffffffffffffffda RBX: 00007feed75e6090 RCX: 00007feed738eec9 [ 690.248505][T18280] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000005 [ 690.248531][T18280] RBP: 00007feed7411f91 R08: 0000000000000000 R09: 0000000000000000 [ 690.248540][T18280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 690.248550][T18280] R13: 00007feed75e6128 R14: 00007feed75e6090 R15: 00007ffc316c8f28 [ 690.248580][T18280] [ 691.379692][T18304] netlink: 'syz.0.3689': attribute type 39 has an invalid length. [ 692.257039][T18327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.100693][T18345] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3708'. [ 693.505366][T18355] debugfs: '!' already exists in 'ieee80211' [ 693.530554][T18359] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3712'. [ 694.796413][T18387] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3721'. [ 695.252275][T18403] netlink: 'syz.4.3727': attribute type 21 has an invalid length. [ 695.362087][T18408] netlink: 'syz.5.3729': attribute type 1 has an invalid length. [ 696.147737][T18428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3736'. [ 697.027047][T18458] tmpfs: Bad value for 'gid' [ 697.031849][T18458] tmpfs: Bad value for 'gid' [ 697.282934][T18466] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3749'. [ 697.295018][T18466] netlink: 'syz.5.3749': attribute type 2 has an invalid length. [ 697.305232][T18464] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3750'. [ 697.307739][T18466] netlink: 'syz.5.3749': attribute type 5 has an invalid length. [ 697.350913][T18438] delete_channel: no stack [ 697.382877][T18471] netlink: 'syz.5.3752': attribute type 29 has an invalid length. [ 697.404226][T18471] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3752'. [ 698.413809][T18492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3760'. [ 698.442706][T18489] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 698.466241][T18489] CPU: 1 UID: 0 PID: 18489 Comm: syz.5.3759 Not tainted syzkaller #0 PREEMPT(full) [ 698.466272][T18489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 698.466283][T18489] Call Trace: [ 698.466292][T18489] [ 698.466302][T18489] dump_stack_lvl+0x189/0x250 [ 698.466334][T18489] ? kernfs_path_from_node+0x2f/0x290 [ 698.466362][T18489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 698.466387][T18489] ? __pfx__printk+0x10/0x10 [ 698.466432][T18489] ? kernfs_path_from_node+0x2f/0x290 [ 698.466455][T18489] ? kernfs_path_from_node+0x250/0x290 [ 698.466475][T18489] ? kernfs_path_from_node+0x2f/0x290 [ 698.466508][T18489] sysfs_warn_dup+0x8e/0xa0 [ 698.466536][T18489] sysfs_do_create_link_sd+0xc0/0x110 [ 698.466571][T18489] device_add_class_symlinks+0x1cf/0x240 [ 698.466612][T18489] device_add+0x475/0xb50 [ 698.466656][T18489] wiphy_register+0x1ba6/0x28d0 [ 698.466743][T18489] ? __pfx_wiphy_register+0x10/0x10 [ 698.466802][T18489] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 698.466848][T18489] ieee80211_register_hw+0x3484/0x4100 [ 698.466915][T18489] ? ieee80211_register_hw+0x1451/0x4100 [ 698.466965][T18489] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 698.466980][T18489] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 698.467015][T18489] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 698.467061][T18489] ? __hrtimer_setup+0x187/0x210 [ 698.467080][T18489] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 698.467115][T18489] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 698.467224][T18489] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 698.467243][T18489] ? trace_kmalloc+0x1f/0xd0 [ 698.467256][T18489] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 698.467276][T18489] ? kstrndup+0xbf/0x160 [ 698.467333][T18489] hwsim_new_radio_nl+0xea4/0x1b10 [ 698.467366][T18489] ? __pfx___nla_validate_parse+0x10/0x10 [ 698.467435][T18489] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 698.467482][T18489] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 698.467517][T18489] ? __nla_parse+0x40/0x60 [ 698.467556][T18489] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 698.467603][T18489] genl_family_rcv_msg_doit+0x215/0x300 [ 698.467666][T18489] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 698.467734][T18489] ? bpf_lsm_capable+0x9/0x20 [ 698.467751][T18489] ? security_capable+0x7e/0x2e0 [ 698.467798][T18489] genl_rcv_msg+0x60e/0x790 [ 698.467843][T18489] ? __pfx_genl_rcv_msg+0x10/0x10 [ 698.467863][T18489] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 698.467893][T18489] ? perf_trace_lock_acquire+0xf5/0x410 [ 698.467947][T18489] netlink_rcv_skb+0x208/0x470 [ 698.467978][T18489] ? __pfx_genl_rcv_msg+0x10/0x10 [ 698.468006][T18489] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 698.468094][T18489] ? down_read+0x1ad/0x2e0 [ 698.468130][T18489] genl_rcv+0x28/0x40 [ 698.468147][T18489] netlink_unicast+0x82c/0x9e0 [ 698.468209][T18489] ? __pfx_netlink_unicast+0x10/0x10 [ 698.468242][T18489] ? netlink_sendmsg+0x642/0xb30 [ 698.468262][T18489] ? skb_put+0x11b/0x210 [ 698.468303][T18489] netlink_sendmsg+0x805/0xb30 [ 698.468361][T18489] ? __pfx_netlink_sendmsg+0x10/0x10 [ 698.468399][T18489] ? aa_sock_msg_perm+0xf1/0x1d0 [ 698.468432][T18489] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 698.468454][T18489] ? __pfx_netlink_sendmsg+0x10/0x10 [ 698.468483][T18489] __sock_sendmsg+0x219/0x270 [ 698.468520][T18489] ____sys_sendmsg+0x505/0x830 [ 698.468568][T18489] ? __pfx_____sys_sendmsg+0x10/0x10 [ 698.468626][T18489] ? import_iovec+0x74/0xa0 [ 698.468666][T18489] ___sys_sendmsg+0x21f/0x2a0 [ 698.468710][T18489] ? __pfx____sys_sendmsg+0x10/0x10 [ 698.468809][T18489] ? __fget_files+0x2a/0x420 [ 698.468875][T18489] ? __fget_files+0x2a/0x420 [ 698.468893][T18489] ? __fget_files+0x3a0/0x420 [ 698.468951][T18489] __x64_sys_sendmsg+0x19b/0x260 [ 698.468990][T18489] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 698.469054][T18489] ? rcu_is_watching+0x15/0xb0 [ 698.469093][T18489] ? do_syscall_64+0xbe/0x3b0 [ 698.469132][T18489] do_syscall_64+0xfa/0x3b0 [ 698.469160][T18489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.469176][T18489] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 698.469193][T18489] ? clear_bhb_loop+0x60/0xb0 [ 698.469224][T18489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.469242][T18489] RIP: 0033:0x7feed738eec9 [ 698.469261][T18489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.469277][T18489] RSP: 002b:00007feed8272038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 698.469296][T18489] RAX: ffffffffffffffda RBX: 00007feed75e5fa0 RCX: 00007feed738eec9 [ 698.469309][T18489] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000005 [ 698.469321][T18489] RBP: 00007feed7411f91 R08: 0000000000000000 R09: 0000000000000000 [ 698.469332][T18489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.469343][T18489] R13: 00007feed75e6038 R14: 00007feed75e5fa0 R15: 00007ffc316c8f28 [ 698.469411][T18489] [ 699.525311][T18487] netlink: 'syz.3.3757': attribute type 6 has an invalid length. [ 699.568425][T18494] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3761'. [ 699.594268][T18487] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3757'. [ 699.641550][ T5868] Bluetooth: hci0: ISO packet for unknown connection handle 521 [ 699.662547][T18505] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3763'. [ 699.674123][T18494] netlink: 'syz.0.3761': attribute type 10 has an invalid length. [ 699.683169][T18487] netlink: 'syz.3.3757': attribute type 39 has an invalid length. [ 699.775681][T18494] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 699.867378][T18483] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 699.914307][T18483] CPU: 1 UID: 0 PID: 18483 Comm: syz.2.3756 Not tainted syzkaller #0 PREEMPT(full) [ 699.914334][T18483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 699.914346][T18483] Call Trace: [ 699.914355][T18483] [ 699.914365][T18483] dump_stack_lvl+0x189/0x250 [ 699.914395][T18483] ? kernfs_path_from_node+0x2f/0x290 [ 699.914425][T18483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 699.914451][T18483] ? __pfx__printk+0x10/0x10 [ 699.914496][T18483] ? kernfs_path_from_node+0x2f/0x290 [ 699.914526][T18483] ? kernfs_path_from_node+0x250/0x290 [ 699.914547][T18483] ? kernfs_path_from_node+0x2f/0x290 [ 699.914585][T18483] sysfs_warn_dup+0x8e/0xa0 [ 699.914612][T18483] sysfs_do_create_link_sd+0xc0/0x110 [ 699.914649][T18483] device_add_class_symlinks+0x1cf/0x240 [ 699.914688][T18483] device_add+0x475/0xb50 [ 699.914731][T18483] wiphy_register+0x1ba6/0x28d0 [ 699.914803][T18483] ? __pfx_wiphy_register+0x10/0x10 [ 699.914878][T18483] ieee80211_register_hw+0x3484/0x4100 [ 699.914947][T18483] ? ieee80211_register_hw+0x1451/0x4100 [ 699.914994][T18483] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 699.915009][T18483] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 699.915045][T18483] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 699.915092][T18483] ? __hrtimer_setup+0x187/0x210 [ 699.915110][T18483] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 699.915143][T18483] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 699.915243][T18483] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 699.915274][T18483] ? kstrndup+0xbf/0x160 [ 699.915332][T18483] hwsim_new_radio_nl+0xea4/0x1b10 [ 699.915366][T18483] ? __pfx___nla_validate_parse+0x10/0x10 [ 699.915431][T18483] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 699.915491][T18483] ? __nla_parse+0x40/0x60 [ 699.915534][T18483] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 699.915578][T18483] genl_family_rcv_msg_doit+0x215/0x300 [ 699.915619][T18483] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 699.915677][T18483] ? bpf_lsm_capable+0x9/0x20 [ 699.915693][T18483] ? security_capable+0x7e/0x2e0 [ 699.915735][T18483] genl_rcv_msg+0x60e/0x790 [ 699.915772][T18483] ? __pfx_genl_rcv_msg+0x10/0x10 [ 699.915787][T18483] ? irqentry_exit+0x74/0x90 [ 699.915808][T18483] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 699.915844][T18483] ? irqentry_exit+0x74/0x90 [ 699.915889][T18483] netlink_rcv_skb+0x208/0x470 [ 699.915909][T18483] ? __lock_acquire+0xab9/0xd20 [ 699.915938][T18483] ? __pfx_genl_rcv_msg+0x10/0x10 [ 699.915964][T18483] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 699.916040][T18483] ? down_read+0x1ad/0x2e0 [ 699.916070][T18483] genl_rcv+0x28/0x40 [ 699.916084][T18483] netlink_unicast+0x82c/0x9e0 [ 699.916131][T18483] ? __pfx_netlink_unicast+0x10/0x10 [ 699.916161][T18483] ? netlink_sendmsg+0x642/0xb30 [ 699.916178][T18483] ? skb_put+0x11b/0x210 [ 699.916212][T18483] netlink_sendmsg+0x805/0xb30 [ 699.916258][T18483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 699.916306][T18483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 699.916335][T18483] __sock_sendmsg+0x219/0x270 [ 699.916368][T18483] ____sys_sendmsg+0x505/0x830 [ 699.916411][T18483] ? __pfx_____sys_sendmsg+0x10/0x10 [ 699.916464][T18483] ? import_iovec+0x74/0xa0 [ 699.916516][T18483] ___sys_sendmsg+0x21f/0x2a0 [ 699.916551][T18483] ? __pfx____sys_sendmsg+0x10/0x10 [ 699.916571][T18483] ? perf_trace_preemptirq_template+0xa3/0x340 [ 699.916649][T18483] ? lockdep_hardirqs_on+0x9c/0x150 [ 699.916715][T18483] ? __fget_files+0x3ae/0x420 [ 699.916761][T18483] __x64_sys_sendmsg+0x19b/0x260 [ 699.916799][T18483] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 699.916894][T18483] do_syscall_64+0xfa/0x3b0 [ 699.916923][T18483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.916939][T18483] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 699.916956][T18483] ? clear_bhb_loop+0x60/0xb0 [ 699.916985][T18483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.917003][T18483] RIP: 0033:0x7ff41df8eec9 [ 699.917022][T18483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 699.917038][T18483] RSP: 002b:00007ff41ee8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 699.917056][T18483] RAX: ffffffffffffffda RBX: 00007ff41e1e5fa0 RCX: 00007ff41df8eec9 [ 699.917068][T18483] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000005 [ 699.917078][T18483] RBP: 00007ff41e011f91 R08: 0000000000000000 R09: 0000000000000000 [ 699.917089][T18483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 699.917099][T18483] R13: 00007ff41e1e6038 R14: 00007ff41e1e5fa0 R15: 00007ffe68ade048 [ 699.917160][T18483] [ 700.593980][T18524] netlink: 'syz.0.3765': attribute type 39 has an invalid length. [ 700.898451][T18539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3772'. [ 701.025347][T18543] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3774'. [ 701.143130][T18550] netlink: 'syz.5.3777': attribute type 6 has an invalid length. [ 701.153417][T18550] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3777'. [ 701.171196][ T5868] Bluetooth: hci5: ISO packet for unknown connection handle 521 [ 701.171853][T18550] netlink: 'syz.5.3777': attribute type 39 has an invalid length. [ 701.973402][T18573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3786'. [ 702.072474][T18577] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3787'. [ 702.142507][T18581] tmpfs: Bad value for 'gid' [ 702.149142][T18581] tmpfs: Bad value for 'gid' [ 702.160891][T18578] delete_channel: no stack [ 702.183251][T18581] netlink: 10 bytes leftover after parsing attributes in process `syz.5.3791'. [ 702.249327][T18585] netlink: 'syz.0.3790': attribute type 6 has an invalid length. [ 702.265891][T18585] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3790'. [ 702.293418][ T5868] Bluetooth: hci1: ISO packet for unknown connection handle 521 [ 702.294164][T18585] netlink: 'syz.0.3790': attribute type 39 has an invalid length. [ 702.581342][T18596] lo speed is unknown, defaulting to 1000 [ 702.641883][T18597] lo speed is unknown, defaulting to 1000 [ 703.028154][T18615] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3801'. [ 703.152347][T18617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3802'. [ 703.185604][T18617] netlink: 'syz.3.3802': attribute type 21 has an invalid length. [ 703.992025][T18641] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3811'. [ 704.012626][T18641] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 704.287771][T18653] netlink: 'syz.0.3815': attribute type 13 has an invalid length. [ 705.983029][T18669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3818'. [ 706.019084][T18688] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3827'. [ 707.187436][T18713] ================================================================== [ 707.195577][T18713] BUG: KASAN: slab-use-after-free in __xfrm_state_insert+0x8af/0x1450 [ 707.203757][T18713] Read of size 1 at addr ffff888059d11870 by task syz.2.3833/18713 [ 707.211657][T18713] [ 707.213980][T18713] CPU: 1 UID: 0 PID: 18713 Comm: syz.2.3833 Not tainted syzkaller #0 PREEMPT(full) [ 707.214003][T18713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 707.214012][T18713] Call Trace: [ 707.214020][T18713] [ 707.214026][T18713] dump_stack_lvl+0x189/0x250 [ 707.214047][T18713] ? __virt_addr_valid+0x1c8/0x5c0 [ 707.214064][T18713] ? rcu_is_watching+0x15/0xb0 [ 707.214079][T18713] ? __pfx_dump_stack_lvl+0x10/0x10 [ 707.214095][T18713] ? rcu_is_watching+0x15/0xb0 [ 707.214106][T18713] ? __virt_addr_valid+0x1c8/0x5c0 [ 707.214123][T18713] ? lock_release+0x4b/0x3e0 [ 707.214142][T18713] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 707.214159][T18713] ? __virt_addr_valid+0x1c8/0x5c0 [ 707.214174][T18713] ? __virt_addr_valid+0x4a5/0x5c0 [ 707.214191][T18713] print_report+0xca/0x240 [ 707.214204][T18713] ? __xfrm_state_insert+0x8af/0x1450 [ 707.214223][T18713] kasan_report+0x118/0x150 [ 707.214239][T18713] ? __xfrm_state_insert+0x8af/0x1450 [ 707.214263][T18713] __xfrm_state_insert+0x8af/0x1450 [ 707.214286][T18713] ? xfrm_state_insert+0x44/0x60 [ 707.214305][T18713] xfrm_state_insert+0x54/0x60 [ 707.214324][T18713] ipcomp6_init_state+0x655/0x900 [ 707.214347][T18713] __xfrm_init_state+0xa76/0x13f0 [ 707.214360][T18713] ? __xfrm_init_state+0x7ef/0x13f0 [ 707.214376][T18713] xfrm_add_sa+0x2f5b/0x4070 [ 707.214394][T18713] ? __pfx_xfrm_add_sa+0x10/0x10 [ 707.214405][T18713] ? apparmor_capable+0x137/0x1b0 [ 707.214428][T18713] ? __nla_parse+0x40/0x60 [ 707.214446][T18713] xfrm_user_rcv_msg+0x7a3/0xab0 [ 707.214462][T18713] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 707.214494][T18713] ? irqentry_exit+0x74/0x90 [ 707.214510][T18713] ? lockdep_hardirqs_on+0x9c/0x150 [ 707.214530][T18713] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 707.214544][T18713] ? netlink_rcv_skb+0x1e0/0x470 [ 707.214565][T18713] netlink_rcv_skb+0x208/0x470 [ 707.214581][T18713] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 707.214595][T18713] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 707.214620][T18713] ? netlink_deliver_tap+0x2e/0x1b0 [ 707.214637][T18713] ? netlink_deliver_tap+0x2e/0x1b0 [ 707.214655][T18713] xfrm_netlink_rcv+0x79/0x90 [ 707.214669][T18713] netlink_unicast+0x82c/0x9e0 [ 707.214690][T18713] ? __pfx_netlink_unicast+0x10/0x10 [ 707.214706][T18713] ? netlink_sendmsg+0x642/0xb30 [ 707.214721][T18713] ? skb_put+0x11b/0x210 [ 707.214740][T18713] netlink_sendmsg+0x805/0xb30 [ 707.214763][T18713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 707.214781][T18713] ? aa_sock_msg_perm+0xf1/0x1d0 [ 707.214796][T18713] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 707.214812][T18713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 707.214829][T18713] __sock_sendmsg+0x219/0x270 [ 707.214845][T18713] ____sys_sendmsg+0x505/0x830 [ 707.214866][T18713] ? __pfx_____sys_sendmsg+0x10/0x10 [ 707.214889][T18713] ? import_iovec+0x74/0xa0 [ 707.214910][T18713] ___sys_sendmsg+0x21f/0x2a0 [ 707.214929][T18713] ? __pfx____sys_sendmsg+0x10/0x10 [ 707.214959][T18713] ? __fget_files+0x2a/0x420 [ 707.214980][T18713] ? __fget_files+0x2a/0x420 [ 707.214999][T18713] ? __fget_files+0x3a0/0x420 [ 707.215018][T18713] __x64_sys_sendmsg+0x19b/0x260 [ 707.215040][T18713] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 707.215073][T18713] do_syscall_64+0xfa/0x3b0 [ 707.215091][T18713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.215104][T18713] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 707.215117][T18713] ? clear_bhb_loop+0x60/0xb0 [ 707.215131][T18713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.215152][T18713] RIP: 0033:0x7ff41df8eec9 [ 707.215166][T18713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 707.215179][T18713] RSP: 002b:00007ff41ee6c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 707.215194][T18713] RAX: ffffffffffffffda RBX: 00007ff41e1e6090 RCX: 00007ff41df8eec9 [ 707.215204][T18713] RDX: 0000000000000000 RSI: 00002000000035c0 RDI: 000000000000000b [ 707.215213][T18713] RBP: 00007ff41e011f91 R08: 0000000000000000 R09: 0000000000000000 [ 707.215221][T18713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 707.215230][T18713] R13: 00007ff41e1e6128 R14: 00007ff41e1e6090 R15: 00007ffe68ade048 [ 707.215250][T18713] [ 707.215254][T18713] [ 707.622278][T18713] Allocated by task 17856: [ 707.626703][T18713] kasan_save_track+0x3e/0x80 [ 707.631399][T18713] __kasan_slab_alloc+0x6c/0x80 [ 707.636280][T18713] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 707.641731][T18713] xfrm_state_alloc+0x24/0x2f0 [ 707.646483][T18713] __find_acq_core+0x8a7/0x1c00 [ 707.651320][T18713] xfrm_find_acq+0x78/0xa0 [ 707.655729][T18713] xfrm_alloc_userspi+0x6b3/0xc90 [ 707.660739][T18713] xfrm_user_rcv_msg+0x7a3/0xab0 [ 707.665654][T18713] netlink_rcv_skb+0x208/0x470 [ 707.670406][T18713] xfrm_netlink_rcv+0x79/0x90 [ 707.675065][T18713] netlink_unicast+0x82c/0x9e0 [ 707.679814][T18713] netlink_sendmsg+0x805/0xb30 [ 707.684572][T18713] __sock_sendmsg+0x219/0x270 [ 707.689845][T18713] ____sys_sendmsg+0x505/0x830 [ 707.694606][T18713] ___sys_sendmsg+0x21f/0x2a0 [ 707.699268][T18713] __x64_sys_sendmsg+0x19b/0x260 [ 707.704287][T18713] do_syscall_64+0xfa/0x3b0 [ 707.708782][T18713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.714685][T18713] [ 707.716994][T18713] Freed by task 15901: [ 707.721037][T18713] kasan_save_track+0x3e/0x80 [ 707.725794][T18713] kasan_save_free_info+0x46/0x50 [ 707.730824][T18713] __kasan_slab_free+0x5b/0x80 [ 707.735675][T18713] kmem_cache_free+0x18f/0x400 [ 707.740425][T18713] xfrm_state_gc_task+0x52d/0x6b0 [ 707.745436][T18713] process_scheduled_works+0xae1/0x17b0 [ 707.750964][T18713] worker_thread+0x8a0/0xda0 [ 707.755547][T18713] kthread+0x70e/0x8a0 [ 707.759599][T18713] ret_from_fork+0x436/0x7d0 [ 707.764170][T18713] ret_from_fork_asm+0x1a/0x30 [ 707.768936][T18713] [ 707.771241][T18713] The buggy address belongs to the object at ffff888059d11540 [ 707.771241][T18713] which belongs to the cache xfrm_state of size 928 [ 707.785189][T18713] The buggy address is located 816 bytes inside of [ 707.785189][T18713] freed 928-byte region [ffff888059d11540, ffff888059d118e0) [ 707.798974][T18713] [ 707.801376][T18713] The buggy address belongs to the physical page: [ 707.807787][T18713] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888059d10880 pfn:0x59d10 [ 707.817840][T18713] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 707.826410][T18713] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 707.834387][T18713] page_type: f5(slab) [ 707.838351][T18713] raw: 00fff00000000040 ffff888142abedc0 0000000000000000 0000000000000001 [ 707.846917][T18713] raw: ffff888059d10880 00000000000f000a 00000000f5000000 0000000000000000 [ 707.855481][T18713] head: 00fff00000000040 ffff888142abedc0 0000000000000000 0000000000000001 [ 707.864155][T18713] head: ffff888059d10880 00000000000f000a 00000000f5000000 0000000000000000 [ 707.872807][T18713] head: 00fff00000000002 ffffea0001674401 00000000ffffffff 00000000ffffffff [ 707.881471][T18713] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 707.890123][T18713] page dumped because: kasan: bad access detected [ 707.896530][T18713] page_owner tracks the page as allocated [ 707.902225][T18713] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6103, tgid 6102 (syz.0.45), ts 90267296353, free_ts 90243623035 [ 707.921141][T18713] post_alloc_hook+0x240/0x2a0 [ 707.925923][T18713] get_page_from_freelist+0x21e4/0x22c0 [ 707.931454][T18713] __alloc_frozen_pages_noprof+0x181/0x370 [ 707.937256][T18713] alloc_pages_mpol+0x232/0x4a0 [ 707.942087][T18713] allocate_slab+0x8a/0x370 [ 707.946574][T18713] ___slab_alloc+0xbeb/0x1420 [ 707.951233][T18713] kmem_cache_alloc_noprof+0x283/0x3c0 [ 707.956676][T18713] xfrm_state_alloc+0x24/0x2f0 [ 707.961428][T18713] xfrm_add_acquire+0xf7/0xb20 [ 707.966173][T18713] xfrm_user_rcv_msg+0x7a3/0xab0 [ 707.971194][T18713] netlink_rcv_skb+0x208/0x470 [ 707.975955][T18713] xfrm_netlink_rcv+0x79/0x90 [ 707.980615][T18713] netlink_unicast+0x82c/0x9e0 [ 707.985369][T18713] netlink_sendmsg+0x805/0xb30 [ 707.990162][T18713] __sock_sendmsg+0x219/0x270 [ 707.994821][T18713] ____sys_sendmsg+0x505/0x830 [ 707.999570][T18713] page last free pid 5867 tgid 5867 stack trace: [ 708.005893][T18713] __free_frozen_pages+0xbc4/0xd30 [ 708.010987][T18713] __put_partials+0x156/0x1a0 [ 708.015649][T18713] put_cpu_partial+0x17c/0x250 [ 708.020394][T18713] __slab_free+0x2d5/0x3c0 [ 708.024795][T18713] qlist_free_all+0x97/0x140 [ 708.029389][T18713] kasan_quarantine_reduce+0x148/0x160 [ 708.034838][T18713] __kasan_slab_alloc+0x22/0x80 [ 708.039676][T18713] __kmalloc_noprof+0x224/0x4f0 [ 708.044506][T18713] tomoyo_realpath_from_path+0xe3/0x5d0 [ 708.050037][T18713] tomoyo_path_number_perm+0x1e8/0x5a0 [ 708.055489][T18713] security_file_ioctl+0xcb/0x2d0 [ 708.060524][T18713] __se_sys_ioctl+0x47/0x170 [ 708.065292][T18713] do_syscall_64+0xfa/0x3b0 [ 708.069784][T18713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.075701][T18713] [ 708.078014][T18713] Memory state around the buggy address: [ 708.083661][T18713] ffff888059d11700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 708.091705][T18713] ffff888059d11780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 708.099753][T18713] >ffff888059d11800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 708.107790][T18713] ^ [ 708.115483][T18713] ffff888059d11880: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 708.123524][T18713] ffff888059d11900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 708.131563][T18713] ================================================================== [ 708.139833][T18713] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 708.147036][T18713] CPU: 1 UID: 0 PID: 18713 Comm: syz.2.3833 Not tainted syzkaller #0 PREEMPT(full) [ 708.156419][T18713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 708.166480][T18713] Call Trace: [ 708.169788][T18713] [ 708.172723][T18713] dump_stack_lvl+0x99/0x250 [ 708.177320][T18713] ? __asan_memcpy+0x40/0x70 [ 708.181924][T18713] ? __pfx_dump_stack_lvl+0x10/0x10 [ 708.187143][T18713] ? __pfx__printk+0x10/0x10 [ 708.191756][T18713] vpanic+0x281/0x750 [ 708.195786][T18713] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 708.202388][T18713] ? __pfx_vpanic+0x10/0x10 [ 708.206896][T18713] ? irqentry_exit+0x74/0x90 [ 708.211541][T18713] panic+0xb9/0xc0 [ 708.215272][T18713] ? __pfx_panic+0x10/0x10 [ 708.219691][T18713] ? __xfrm_state_insert+0x8af/0x1450 [ 708.225093][T18713] ? __pfx_panic+0x10/0x10 [ 708.229523][T18713] ? __xfrm_state_insert+0x8af/0x1450 [ 708.234917][T18713] check_panic_on_warn+0x89/0xb0 [ 708.239874][T18713] ? __xfrm_state_insert+0x8af/0x1450 [ 708.245280][T18713] end_report+0x78/0x160 [ 708.249538][T18713] kasan_report+0x129/0x150 [ 708.254143][T18713] ? __xfrm_state_insert+0x8af/0x1450 [ 708.259581][T18713] __xfrm_state_insert+0x8af/0x1450 [ 708.264856][T18713] ? xfrm_state_insert+0x44/0x60 [ 708.269815][T18713] xfrm_state_insert+0x54/0x60 [ 708.274605][T18713] ipcomp6_init_state+0x655/0x900 [ 708.279650][T18713] __xfrm_init_state+0xa76/0x13f0 [ 708.284686][T18713] ? __xfrm_init_state+0x7ef/0x13f0 [ 708.289894][T18713] xfrm_add_sa+0x2f5b/0x4070 [ 708.294504][T18713] ? __pfx_xfrm_add_sa+0x10/0x10 [ 708.299451][T18713] ? apparmor_capable+0x137/0x1b0 [ 708.304503][T18713] ? __nla_parse+0x40/0x60 [ 708.308955][T18713] xfrm_user_rcv_msg+0x7a3/0xab0 [ 708.313915][T18713] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 708.319420][T18713] ? irqentry_exit+0x74/0x90 [ 708.324025][T18713] ? lockdep_hardirqs_on+0x9c/0x150 [ 708.329246][T18713] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 708.334718][T18713] ? netlink_rcv_skb+0x1e0/0x470 [ 708.339677][T18713] netlink_rcv_skb+0x208/0x470 [ 708.344457][T18713] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 708.349930][T18713] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 708.355245][T18713] ? netlink_deliver_tap+0x2e/0x1b0 [ 708.360455][T18713] ? netlink_deliver_tap+0x2e/0x1b0 [ 708.365679][T18713] xfrm_netlink_rcv+0x79/0x90 [ 708.370365][T18713] netlink_unicast+0x82c/0x9e0 [ 708.375145][T18713] ? __pfx_netlink_unicast+0x10/0x10 [ 708.380447][T18713] ? netlink_sendmsg+0x642/0xb30 [ 708.385391][T18713] ? skb_put+0x11b/0x210 [ 708.389657][T18713] netlink_sendmsg+0x805/0xb30 [ 708.394440][T18713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 708.399742][T18713] ? aa_sock_msg_perm+0xf1/0x1d0 [ 708.404693][T18713] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 708.409988][T18713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 708.415296][T18713] __sock_sendmsg+0x219/0x270 [ 708.419987][T18713] ____sys_sendmsg+0x505/0x830 [ 708.424778][T18713] ? __pfx_____sys_sendmsg+0x10/0x10 [ 708.430097][T18713] ? import_iovec+0x74/0xa0 [ 708.434648][T18713] ___sys_sendmsg+0x21f/0x2a0 [ 708.439344][T18713] ? __pfx____sys_sendmsg+0x10/0x10 [ 708.444574][T18713] ? __fget_files+0x2a/0x420 [ 708.449188][T18713] ? __fget_files+0x2a/0x420 [ 708.453788][T18713] ? __fget_files+0x3a0/0x420 [ 708.458476][T18713] __x64_sys_sendmsg+0x19b/0x260 [ 708.463432][T18713] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 708.468922][T18713] do_syscall_64+0xfa/0x3b0 [ 708.473439][T18713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.479510][T18713] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 708.485674][T18713] ? clear_bhb_loop+0x60/0xb0 [ 708.490360][T18713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.496259][T18713] RIP: 0033:0x7ff41df8eec9 [ 708.500734][T18713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 708.520378][T18713] RSP: 002b:00007ff41ee6c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 708.528818][T18713] RAX: ffffffffffffffda RBX: 00007ff41e1e6090 RCX: 00007ff41df8eec9 [ 708.536890][T18713] RDX: 0000000000000000 RSI: 00002000000035c0 RDI: 000000000000000b [ 708.544872][T18713] RBP: 00007ff41e011f91 R08: 0000000000000000 R09: 0000000000000000 [ 708.552853][T18713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 708.560836][T18713] R13: 00007ff41e1e6128 R14: 00007ff41e1e6090 R15: 00007ffe68ade048 [ 708.568922][T18713] [ 708.572257][T18713] Kernel Offset: disabled [ 708.576580][T18713] Rebooting in 86400 seconds..