last executing test programs: 5.055550309s ago: executing program 0 (id=780): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2000001946}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x238}, 0x1, 0x0, 0x0, 0x4048001}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x10, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000002440)=ANY=[@ANYBLOB="6409000001050102000000000000000005000007540201000000000000000080040002000100050073797a3000000000000000000000000000000000000000000000000000000000350d9b4e9d41526a97bfee9dc1b3607a17db222fade81199373987a4aa5836d4d6f10765d3567711f17203e8203466b65ef74be7a9bfa5901b37a1297c8af37a0500ff030000000000000000ff0100cc010000000800000007008000010000006975f74d440d00000200060000000000ff0f0000d6ff09000100000005000000810006000200000001000000ff0002000000000000000000750e0800020000000400000003fe000002000000a3ee0000080009000200000000010000070001800000000009000000000062e0030000000700000000000400030000000100000004000600030000000300000000084f02030000000600000000010500030000000e000000070067970000000003000000018001000100000011ce00008a08090001000000070000006000810003000000070000000700ff0f03000000070000000500000202000000560000000300030000000000df0f0000020009090300000000020000ff7f000001000000ffff000002000104000000000a00000008002f0101000000070000000101070003000000010000000400050000000000100000000000070002000000d10d00000300090003000000090000008e890900030000000d0000000900010102000000070000000100080001000000f2ffffff08000f0036dbabab01000000050001040000000007000000ff0f090000000000400200000010050001000000000001008c1d75d203000000001000008400002c0100000003000000540201000100000005000000000606000001030073797a3000000000000000000000000000000000000000000000000000000000ade7bcb4c06a93a1b3e4df93ff80da80df3aa45e02c29b2b9b0c7f000465a815aad3015fc7dbf79742094fe25d8b8302299dd335b0774ac80972852cec9789bf010403000300000000010000e30b018000000000ffffff7f040009000200000002000000050003000000000079c700000000010001000000040000000700060000000000008000000010920003000000090000000104ff03020000000400000000084915010000008804000005000100020000000000010000100c000300000076000000ff010000030000000100000039020002000000007034e36408007f0000000000020000000800d694010000000100000007000600020000000010000081000100010000000000000040008f0000000000000000000400020002000000000800000c000080010000005e0a00000300000001000000000800007f00070003000000ff0100000700280402000000050000000800910002000000000400000600030002000000020000000200ff030100000002000000fffe3f9f030000004000000040009e00020000000700000001010f00020000004a040000060001040300000001000080400707000200000000f83f0053006f020000000005000000000009000200000004000000030059af03000000050000000100090000000000ffffff7fa6ff383303000000070000000400090002000000070000001599030000000000070000000400020003000000c60600000800ff070200000004000000540201000200000003000000070bffe90000070073797a3100000000000000000000000000000000000000000000000000000000f4df8ad4ff86aa9149f3b3e185f34f5007b3c45572100d288880abf77ce0469a8ce9e8939a76f3f4c8bdcb9cbd050ffdd09b60123e319c3d2d4c6bf6e049f17201000d0001000000f7ffffff0600000000000000cd0e000002009ffa030000007f000000ba00810001000000ff010000040001040300000003000000dc000d00020000007a6000000100000000000000ffffffff04004600000000000e0000000700050003000000030000000c00e70003000000010000008100040003000000ff01000000000180010000000100000007008c170100000008000000fa00000802000000b5dd00000500100c02000000070000000700000003000000ff07000000020e000100000001ffffffff00ed000300000003000000ff03070002000000f7ffffff0400ffff01000000ffff000009000c0000000000080000000400070003000000e3370000ffff050003000000ff000000ff03010003000000000000000900070001000000010000000700800001000000001000000500050001000000ffffffffff7ffeff00000000fbffffff07000400010000000200000092000600020000000200000001000900030000001f0000000200c20903000000ffffffff018003000200000066000000000022970100000003000000000001000200000008000000060009000300000035820000ff000c000000000000000100040007000000000009000000550df16c0903000000060000000900010001000000408e0000540201000300000001000080010b050f4603160073797a310000000000000000000000000000000000000000002bea7eece9e10062de4d4676304cdf77de85b8a5d75cd98ff1e1c49deb561303c8809cde014319e11c395ef4274568dc5c15e078f77d695d6379a916aa621d610500080001000000ff07000004000101000000001000000008000b00000000000f0000001200070001000000030000000900080003000000ff0000008100e9b20200000001000080000000000300000097060000050010000000000026000000700d001001000000fdffffff0000ff0303000000020000000104070002000000e30f00000600070000000000010100000400070003000000050000001000ff00010000000100000002000d000300000008000000000002000200000002000000f3ff7f0003000000f9470000faa90600030000000100000000001c00030000005e000000dd090400030000003d000000070008000300000001000000080009000000000005000000070390000000000000000000f8ff56fe02000000070000000800080003000000ff010000ffff0800030000000c00000000fc020002000000070000000500fdff0100000008000000010003000000000003000000060081000300000003000000ff0700010000000002000000ffff08000200000008000000ff00be6301000000370a00000000030002000000ffffff7fff0f010003000000010000000800000003000000018000000201040000000000f7ffffffff0761035824292300000080000003000100000000000000399102000000000000000000000000c0015717a8b9801da35a895214d01c975b7f2294803da287e9b15ba2a8b35dcc628b493f6a4cce4bd73a6995b1603c089229cf0178d30357c6fb6458f28fefd4b11c6d7625bc0cb2f3ceb8bf083ab49362d3c2778f46723fe5072b5cc2"], 0x964}, 0x1, 0x0, 0x0, 0x4048014}, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 4.586048738s ago: executing program 2 (id=784): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)=' ', 0x1}], 0x1}, 0x1) sendmsg$kcm(r1, &(0x7f0000000540)={0x0, 0xeffd, 0x0}, 0xc0004) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400000400009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x44) 4.563041895s ago: executing program 0 (id=785): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a20fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407030000060000001d440000000000006b0a20fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100)=0x8000000000000000, 0x12) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x12000) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r7 = openat$cgroup_ro(r5, &(0x7f0000001200)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000001240)={'veth0_to_bridge\x00', @broadcast}) setsockopt$sock_attach_bpf(r6, 0x10f, 0x8a, &(0x7f0000000180)=r5, 0x4) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ec0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000e40), &(0x7f0000000e80)='%pI4 \x00'}, 0x20) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f00)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x50) r11 = syz_clone(0x44120000, &(0x7f0000001280), 0x0, &(0x7f00000012c0), &(0x7f0000001300), &(0x7f0000001340)="8ddcb200ab9f6312070c0a5f86cd063def5184e3b44de525d7fb06237471b5c144c4c0b8ea11b213812fc41c87a636d388cb9e54294e5db39ba01d7c1328a7ddc2851cb5be0d4eb502bfd9d7e9f7638187483da779dd7b250158c093366b40b37dda73272fcd5f1a4ceb87ec83a5ce310a3520b47b77049bcfde74819d40c767c6d21bbb") syz_open_procfs$namespace(r11, &(0x7f0000001400)='ns/time_for_children\x00') r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0xb68d, 0x0, 0x4}, 0x50) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)={0x1b, 0x0, 0x0, 0x20000000, 0x0, 0x1, 0xa30, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x8, 0x0, 0x2, 0x10000, 0x1c202, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x14, 0x15, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@jmp={0x5, 0x0, 0x6, 0x6, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c40)='GPL\x00', 0x1, 0xeb, &(0x7f0000000c80)=""/235, 0x40f00, 0x65, '\x00', 0x0, @lirc_mode2=0x10, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d80)={0x0, 0xb, 0x40, 0x9}, 0x10, 0x0, r1, 0x0, &(0x7f0000001100)=[0x1, r8, r9, r10, r12, r13, r14], 0x0, 0x10, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000000002000000000008000000000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) 4.151444414s ago: executing program 4 (id=790): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000340), &(0x7f0000000380)='%pI4 \x00'}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8927, &(0x7f0000000040)='\xd0\xb4\'') r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001040)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x40004}, 0x50) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x2, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="8100"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x11, &(0x7f0000000000)=r4, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x9) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x14, &(0x7f0000000000)=r6, 0x8) 4.057671546s ago: executing program 2 (id=791): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d8000000140081054e81f782db44b9040a1d080243000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7d9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace80ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 3.864430095s ago: executing program 1 (id=792): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2000001946}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x8907, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x30, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) r4 = getpid() r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80031, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x1e1, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000640)=""/213, 0xd5}], 0x1}, 0x40000000) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x1e, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) 3.831381397s ago: executing program 2 (id=793): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2000001946}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x8907, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x30, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) r4 = getpid() r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80031, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x1e1, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000640)=""/213, 0xd5}], 0x1}, 0x40000000) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x1e, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) 3.702839697s ago: executing program 3 (id=794): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2000001946}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x8907, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x30, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) 3.357804368s ago: executing program 3 (id=795): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2000001946}, 0x100, 0x0, 0x0, 0x8, 0x3, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0xa4ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) gettid() socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x4, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ac0)=@polexpire={0xd8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@loopback, @in=@multicast2}, {0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x300, 0x5}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}}, [@sec_ctx={0xc, 0x8, {0x8}}, @mark={0xc, 0x15, {0x0, 0xfffffffa}}]}, 0xd8}}, 0x0) recvmsg$unix(r2, 0x0, 0x1c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000001800010324bd7002fadbdf254e"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.244351255s ago: executing program 3 (id=796): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2000001946}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x238}, 0x1, 0x0, 0x0, 0x4048001}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x10, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000002440)=ANY=[@ANYBLOB="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"], 0x964}, 0x1, 0x0, 0x0, 0x4048014}, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 3.015247583s ago: executing program 4 (id=797): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)={0x28, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x150}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x24}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24048810}, 0x4000804) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x2, 0x104, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xfffffffa}, @CTA_EXPECT_ZONE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x1, 0x4, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}, @NFULA_CFG_MODE={0xa, 0x2, {0x9, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x5}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008040}, 0x8005) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x8}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x13) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="bb204ce418bce1d51ccf970aea9d6c48c7e652", 0x13}], 0x1}, 0x44) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008000100", @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) 2.870972308s ago: executing program 1 (id=798): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2}]}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x9, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) openat$cgroup_type(r1, &(0x7f00000002c0), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x48d5}, 0x8010) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x14, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x5014) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x20, 0x140d, 0x801, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x240400c4}, 0x4050) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)="97", 0x1}], 0x1}, 0x0) 2.771095064s ago: executing program 3 (id=799): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x2, 0x6, 0x404, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x800}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0xc050) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x5, 0x7, 0x6, 0x40404, 0x1, 0x7, '\x00', r5, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x2085, 0x0, 0x0, 0x8, 0x7fff, 0x7ffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) r9 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r9, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)}], 0x1}, 0x4000040) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b609010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.03079803s ago: executing program 1 (id=800): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x22, &(0x7f00000000c0), 0x4) recvmsg(r0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/30, 0x1e}, 0x2120) (async) recvmsg(r0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/30, 0x1e}, 0x2120) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000000000000850000000400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000600)="5bca9741eb", 0x5}], 0x1, &(0x7f0000000680)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x44080}, 0x8800) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x1, 0xeb, 0xf}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27031c00590214000000002f1eafbcf706e105000000894f000f1102ee1680ca8286cee844000000000019b0fb0bba00"/65, 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x4}, 0x0) 1.983157474s ago: executing program 2 (id=801): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) perf_event_open(0x0, r0, 0x5, r3, 0xb) r4 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) sendmsg$nl_generic(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000380025082db97000fbdbdf2508"], 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x40010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb380018000000000000007c000000d600000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000080000000000900000000000000000000000902"], 0x0, 0x96}, 0x20) fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001800000000000000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@delpolicy={0x68, 0x14, 0x1, 0x70bd2b, 0x25dfdbfb, {{@in=@multicast1, @in6=@loopback, 0x0, 0x80, 0x7}}, [@sec_ctx={0xc, 0x8, {0x2}}, @mark={0xc, 0x15, {0x0, 0x100}}]}, 0x68}}, 0x4004000) r8 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8cffffffffffffff}, 0x3b35}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r6) gettid() r9 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r9, 0x0, 0x12, 0x0, 0x0) 1.887484562s ago: executing program 1 (id=802): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2000001946}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x8907, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) 1.886063293s ago: executing program 4 (id=803): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a00030700000026bd7000fbdbdf2505001a00ac14141c0000e000000200000000000000000000000003000410fe2e22dd979f34292aec"], 0x38}}, 0x20000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$kcm(0x10, 0x2, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000001c0)="581f9239658ea95ed371ea3dd361", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) socket$nl_xfrm(0x10, 0x3, 0x6) 1.722378697s ago: executing program 0 (id=804): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2000000008, 0x800}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 2) 1.63619127s ago: executing program 3 (id=805): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x557, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x18) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xbe, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8002}, 0x0, 0x2e, 0xfffffbfb, 0x3, 0x4, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) close(r3) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000880)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xa8403, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x78, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0x3a, 0x8, "d46909071166897c3643176bcd32ff9ca062b619a11d126857bb0f3fcdf32f99d813886c9a3d7b26bfdcfab5bb891e48adb289a11dc5"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$TUNGETVNETLE(r3, 0xc008744c, &(0x7f0000000180)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190a01889b00000000000000020000000900020073797a3200000000090001"], 0x2c}}, 0x8004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 1.598757257s ago: executing program 1 (id=806): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7c, 0x4}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xa00000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x20000000000a, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002214000000110001"], 0xd8}}, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r5, &(0x7f0000000080)='ns/pid\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x2, 0xfffffffe, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x2) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b18, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000040)="56f3e4aaa9bd555c9e040a000000", 0x0, 0x200, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 1.519684681s ago: executing program 2 (id=807): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = getpid() r1 = perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x4, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000040000000000000000019500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r4, r3, 0x0, r4}, 0x10) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x40000000000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0xa, 0x5, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000001000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r6], 0xc4}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) 1.202263046s ago: executing program 4 (id=808): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7c, 0x4}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xa00000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xd, 0x0, &(0x7f0000000280)="63ec33c9e9b986000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x6421, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xee, 0x9}, 0x4000, 0x2, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x8}, 0x6018, 0x0, 0x2, 0x6, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000b8933ff928779eb57409bd3cd8b73a151220a60989be2a998906ede0edb193894be30ed2632760d6f445e041a978d74446e085f707e9229d2027b87581f26ddec5fffebf27e784f745f6e6c728406e89730aca1e0f6caa270f5d28ab3ff7fb2c59c32ebcc900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18002000000000000000000000950000000000000013050031d690faba4d0158f4fb837686b060798cd3f6393c080a5b4d86347bcf3e7f7990f7d86a03adcec5e029261f4eb7a951497f8eb3fa584af014a703e99ec9c6bd611511406327fd156e"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r1}, 0x18) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}}, 0x0) 1.075530152s ago: executing program 0 (id=809): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7c, 0x4}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xa00000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xd, 0x0, &(0x7f0000000280)="63ec33c9e9b986000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x6421, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xee, 0x9}, 0x4000, 0x2, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x8}, 0x6018, 0x0, 0x2, 0x6, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000b8933ff928779eb57409bd3cd8b73a151220a60989be2a998906ede0edb193894be30ed2632760d6f445e041a978d74446e085f707e9229d2027b87581f26ddec5fffebf27e784f745f6e6c728406e89730aca1e0f6caa270f5d28ab3ff7fb2c59c32ebcc900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18002000000000000000000000950000000000000013050031d690faba4d0158f4fb837686b060798cd3f6393c080a5b4d86347bcf3e7f7990f7d86a03adcec5e029261f4eb7a951497f8eb3fa584af014a703e99ec9c6bd611511406327fd156e"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r1}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}}, 0x0) 947.254997ms ago: executing program 0 (id=810): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32, @ANYRES8=r0], 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xf, 0x0, &(0x7f0000000300)="3d25ab555b19c4cbd0017085080040", 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x4, 0xa, 0xf6, 0xd, 0x0, 0x3, 0x420, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xa}, 0x4000, 0x7, 0x7, 0x8, 0x1, 0x6, 0x6, 0x0, 0xe0f, 0x0, 0x7fff}, r2, 0x5, r5, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0xfffff3c9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x50) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x1}, 0x4080000) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x34, &(0x7f0000000040), 0x4) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d8000000140081054e81f782db44b9040a1d080243000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7d9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace80ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 869.063092ms ago: executing program 4 (id=811): socketpair(0x1, 0x3, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000a00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0xc100c80}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x30, 0x2, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xb7e}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40cc091}, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x1d28321e40d9a28b, r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x23, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000000800000000000000050000009500000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000185a0000713dd88b32c67a430faebbc0da6d7641c3bb24b713500c000000000000000000000018410000f8ffff0300002000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fe0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYRES32=r3], &(0x7f0000000580)='syzkaller\x00', 0x8, 0xec, &(0x7f0000000680)=""/236, 0x41000, 0x76, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0xf, 0x7f6, 0x80}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000880), &(0x7f00000008c0)=[{0x5, 0x3, 0x0, 0x3}], 0x10, 0x3}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local, 0x0, 0x0, 0x4e22, 0x0, 0x0, 0x20, 0x20}, {@in6=@mcast2, 0x4d6, 0x33}, @in=@rand_addr=0x64010100, {0x0, 0x7}, {0x0, 0x0, 0x0, 0x8000004}, {0x4, 0xd45f, 0x1}, 0x201, 0x0, 0xa}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "a356f3222e417b7e7f2f277cd86927b2"}}, @extra_flags={0x8, 0x18, 0x8}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000}, 0x4008804) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r7, 0x29, 0x2a, 0x0, 0xfcd8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000f00000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000001b000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb0}, [@jmp={0x5, 0x0, 0xb, 0x1, 0x7, 0xffffffffffffffe0, 0xfffffffffffffff0}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0xf0, &(0x7f0000000200)=""/240, 0x41100, 0x2, '\x00', 0x0, 0x19, r0, 0x8, &(0x7f0000000340)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0xa, 0x7f, 0xa46e}, 0x10, 0x2dacd, 0xffffffffffffffff, 0x5, &(0x7f0000000400)=[r1, r4, 0x1, r6, r8, r9], &(0x7f0000000440)=[{0x1, 0x5, 0x10, 0x2}, {0x0, 0x3, 0x7}, {0x3, 0x5, 0xe}, {0x0, 0x5, 0x8, 0x6}, {0x1, 0x1, 0x7, 0x7}], 0x10, 0x4}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x6, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/../file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 824.37842ms ago: executing program 2 (id=812): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2000001946}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x8907, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x30, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) r4 = getpid() r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80031, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x1e1, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000640)=""/213, 0xd5}], 0x1}, 0x40000000) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x1e, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) 796.623007ms ago: executing program 3 (id=813): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8890}, 0x4014850) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x6, 0x7fff, 0x7fffffff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r6}) setsockopt$sock_attach_bpf(r6, 0x1, 0x7, &(0x7f0000000000), 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000000c0)=0xba) r7 = socket$kcm(0x25, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001600010000000000000000000a0000030000000014000100ff010000000000000000000000000001150002"], 0x44}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x14, 0x2, 0x0, 0x1, [@nested={0xd, 0x14, 0x0, 0x1, [@typed={0x4, 0xd, 0x0, 0x0, @binary}, @nested={0x4, 0x18}, @generic=')']}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4000880) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) 619.522355ms ago: executing program 0 (id=814): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x100, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$pptp(0x18, 0x1, 0x2) (fail_nth: 5) 330.506906ms ago: executing program 1 (id=815): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2000001946}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1000, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000004000000000000000300000018150000", @ANYRES32, @ANYBLOB="0000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000060000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000009c0)="b9ff5742c5a47ce5521c94590300600d698c", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 0s ago: executing program 4 (id=816): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x2, 0x6, 0x404, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x800}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0xc050) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x5, 0x7, 0x6, 0x40404, 0x1, 0x7, '\x00', r5, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x2085, 0x0, 0x0, 0x8, 0x7fff, 0x7ffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) r9 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r9, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)}], 0x1}, 0x4000040) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b609010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 5.821077][ T6199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 95.821095][ T6199] Call Trace: [ 95.821106][ T6199] [ 95.821114][ T6199] dump_stack_lvl+0x189/0x250 [ 95.821156][ T6199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.821196][ T6199] should_fail_ex+0x414/0x560 [ 95.821222][ T6199] _copy_from_iter+0x1cd/0x1630 [ 95.821248][ T6199] ? __build_skb_around+0x22d/0x3c0 [ 95.821278][ T6199] ? __pfx__copy_from_iter+0x10/0x10 [ 95.821295][ T6199] ? __alloc_skb+0x2f1/0x430 [ 95.821319][ T6199] ? __pfx___alloc_skb+0x10/0x10 [ 95.821339][ T6199] ? netlink_autobind+0x2af/0x300 [ 95.821358][ T6199] ? netlink_sendmsg+0x642/0xb30 [ 95.821373][ T6199] ? skb_put+0x11b/0x210 [ 95.821398][ T6199] netlink_sendmsg+0x6b2/0xb30 [ 95.821414][ T6199] ? irqentry_exit+0x5dd/0x660 [ 95.821442][ T6199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.821471][ T6199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.821490][ T6199] __sock_sendmsg+0x21c/0x270 [ 95.821513][ T6199] ____sys_sendmsg+0x505/0x820 [ 95.821544][ T6199] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.821579][ T6199] ? import_iovec+0x74/0xa0 [ 95.821606][ T6199] ___sys_sendmsg+0x21f/0x2a0 [ 95.821626][ T6199] ? __pfx____sys_sendmsg+0x10/0x10 [ 95.821666][ T6199] ? __fget_files+0x2a/0x420 [ 95.821697][ T6199] ? __fget_files+0x2a/0x420 [ 95.821711][ T6199] ? __fget_files+0x3a0/0x420 [ 95.821738][ T6199] __x64_sys_sendmsg+0x19b/0x260 [ 95.821758][ T6199] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 95.821771][ T6199] ? irqentry_exit+0x5dd/0x660 [ 95.821816][ T6199] do_syscall_64+0xfa/0xf80 [ 95.821839][ T6199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.821855][ T6199] ? clear_bhb_loop+0x60/0xb0 [ 95.821876][ T6199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.821891][ T6199] RIP: 0033:0x7f64ab98f749 [ 95.821911][ T6199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.821925][ T6199] RSP: 002b:00007f64ac816038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.821943][ T6199] RAX: ffffffffffffffda RBX: 00007f64abbe5fa0 RCX: 00007f64ab98f749 [ 95.821954][ T6199] RDX: 0000000020004000 RSI: 0000200000000040 RDI: 000000000000000a [ 95.821965][ T6199] RBP: 00007f64ac816090 R08: 0000000000000000 R09: 0000000000000000 [ 95.821974][ T6199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.821984][ T6199] R13: 00007f64abbe6038 R14: 00007f64abbe5fa0 R15: 00007ffd23552bb8 [ 95.822016][ T6199] [ 96.401599][ T6213] netlink: 830 bytes leftover after parsing attributes in process `syz.3.80'. [ 96.935345][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.84'. [ 97.181441][ T6231] netlink: 'syz.1.87': attribute type 13 has an invalid length. [ 97.486350][ T6240] netlink: 544 bytes leftover after parsing attributes in process `syz.3.88'. [ 97.689928][ T6240] netlink: 'syz.3.88': attribute type 13 has an invalid length. [ 98.127168][ T6251] netlink: 52 bytes leftover after parsing attributes in process `syz.0.90'. [ 98.203508][ T6251] unsupported nlmsg_type 40 [ 98.494656][ T5910] lo speed is unknown, defaulting to 1000 [ 98.659540][ T6269] netlink: 'syz.3.99': attribute type 1 has an invalid length. [ 98.676096][ T6269] netlink: 'syz.3.99': attribute type 7 has an invalid length. [ 98.702862][ T6269] netlink: 'syz.3.99': attribute type 8 has an invalid length. [ 98.752170][ T6269] netlink: 132 bytes leftover after parsing attributes in process `syz.3.99'. [ 99.017908][ T6280] netlink: 'syz.1.102': attribute type 13 has an invalid length. [ 99.048858][ T6269] netlink: 48 bytes leftover after parsing attributes in process `syz.3.99'. [ 99.477683][ T6282] netlink: 'syz.2.103': attribute type 13 has an invalid length. [ 99.640450][ T6290] netlink: 'syz.4.104': attribute type 13 has an invalid length. [ 100.078737][ T6301] FAULT_INJECTION: forcing a failure. [ 100.078737][ T6301] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 100.150671][ T6301] CPU: 0 UID: 0 PID: 6301 Comm: syz.1.106 Not tainted syzkaller #0 PREEMPT(full) [ 100.150694][ T6301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 100.150704][ T6301] Call Trace: [ 100.150711][ T6301] [ 100.150718][ T6301] dump_stack_lvl+0x189/0x250 [ 100.150743][ T6301] ? __pfx____ratelimit+0x10/0x10 [ 100.150764][ T6301] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.150781][ T6301] ? __pfx__printk+0x10/0x10 [ 100.150802][ T6301] ? fs_reclaim_acquire+0x7d/0x100 [ 100.150833][ T6301] should_fail_ex+0x414/0x560 [ 100.150858][ T6301] prepare_alloc_pages+0x213/0x610 [ 100.150890][ T6301] __alloc_frozen_pages_noprof+0x123/0x370 [ 100.150913][ T6301] ? is_bpf_text_address+0x26/0x2b0 [ 100.150935][ T6301] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 100.150979][ T6301] alloc_pages_mpol+0x232/0x4a0 [ 100.151009][ T6301] alloc_pages_noprof+0xa9/0x190 [ 100.151032][ T6301] __pmd_alloc+0x3a/0x540 [ 100.151058][ T6301] __handle_mm_fault+0x9ad/0x5420 [ 100.151097][ T6301] ? __pfx___handle_mm_fault+0x10/0x10 [ 100.151141][ T6301] ? find_vma+0xe7/0x160 [ 100.151159][ T6301] ? __pfx_find_vma+0x10/0x10 [ 100.151178][ T6301] handle_mm_fault+0x40a/0x8e0 [ 100.151209][ T6301] do_user_addr_fault+0x764/0x1380 [ 100.151253][ T6301] exc_page_fault+0x82/0x100 [ 100.151275][ T6301] asm_exc_page_fault+0x26/0x30 [ 100.151289][ T6301] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 100.151303][ T6301] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 8d 48 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 100.151315][ T6301] RSP: 0018:ffffc90003657d18 EFLAGS: 00050246 [ 100.151327][ T6301] RAX: 00007ffffffff001 RBX: 0000000000000008 RCX: 0000000000000008 [ 100.151336][ T6301] RDX: 0000000000000001 RSI: 000000110c2300fe RDI: ffffc90003657e10 [ 100.151344][ T6301] RBP: ffffc90003657e98 R08: ffffc90003657e17 R09: 1ffff920006cafc2 [ 100.151353][ T6301] R10: dffffc0000000000 R11: fffff520006cafc3 R12: 000000110c2300fe [ 100.151362][ T6301] R13: ffff8880777bb980 R14: ffffc90003657e10 R15: 000000110c2300fe [ 100.151387][ T6301] _copy_from_user+0x7a/0xb0 [ 100.151405][ T6301] pidfd_ioctl+0x34e/0x32d0 [ 100.151429][ T6301] ? __pfx_pidfd_ioctl+0x10/0x10 [ 100.151455][ T6301] ? __fget_files+0x3a0/0x420 [ 100.151466][ T6301] ? __fget_files+0x2a/0x420 [ 100.151481][ T6301] ? bpf_lsm_file_ioctl+0x9/0x20 [ 100.151493][ T6301] ? __pfx_pidfd_ioctl+0x10/0x10 [ 100.151511][ T6301] __se_sys_ioctl+0xfc/0x170 [ 100.151535][ T6301] do_syscall_64+0xfa/0xf80 [ 100.151552][ T6301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.151564][ T6301] ? clear_bhb_loop+0x60/0xb0 [ 100.151580][ T6301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.151592][ T6301] RIP: 0033:0x7ff47e58f749 [ 100.151604][ T6301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.151613][ T6301] RSP: 002b:00007ff47f49c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.151625][ T6301] RAX: ffffffffffffffda RBX: 00007ff47e7e6090 RCX: 00007ff47e58f749 [ 100.151634][ T6301] RDX: 000000110c2300fe RSI: 00000000c040ff0b RDI: 0000000000000006 [ 100.151642][ T6301] RBP: 00007ff47f49c090 R08: 0000000000000000 R09: 0000000000000000 [ 100.151649][ T6301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.151656][ T6301] R13: 00007ff47e7e6128 R14: 00007ff47e7e6090 R15: 00007ffd6c1d13c8 [ 100.151681][ T6301] [ 100.658417][ T6307] IPv6: NLM_F_CREATE should be specified when creating new route [ 100.728289][ T6313] netlink: 60 bytes leftover after parsing attributes in process `syz.1.113'. [ 100.741367][ T6313] netlink: 60 bytes leftover after parsing attributes in process `syz.1.113'. [ 100.751218][ T6313] netlink: 60 bytes leftover after parsing attributes in process `syz.1.113'. [ 101.000784][ T6323] netlink: 'syz.2.116': attribute type 13 has an invalid length. [ 101.249626][ T6328] netlink: 'syz.4.117': attribute type 1 has an invalid length. [ 101.982793][ T6347] netlink: 156 bytes leftover after parsing attributes in process `syz.3.124'. [ 102.109035][ T6348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.116651][ T6348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.142054][ T6348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.169141][ T6348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.833024][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.131'. [ 102.897039][ T6369] : entered promiscuous mode [ 103.674358][ T6377] netlink: 830 bytes leftover after parsing attributes in process `syz.4.135'. [ 103.754577][ T6383] validate_nla: 2 callbacks suppressed [ 103.754610][ T6383] netlink: 'syz.1.133': attribute type 13 has an invalid length. [ 103.786534][ T6380] netlink: 'syz.2.134': attribute type 10 has an invalid length. [ 103.802880][ T6380] netlink: 40 bytes leftover after parsing attributes in process `syz.2.134'. [ 104.028063][ T6394] netlink: 36 bytes leftover after parsing attributes in process `syz.0.139'. [ 104.044862][ T6380] ipvlan1: entered promiscuous mode [ 104.054354][ T6380] ipvlan1: entered allmulticast mode [ 104.064506][ T6394] netlink: 36 bytes leftover after parsing attributes in process `syz.0.139'. [ 104.077289][ T6380] veth0_vlan: entered allmulticast mode [ 104.130191][ T6380] bridge0: port 3(ipvlan1) entered blocking state [ 104.152208][ T6380] bridge0: port 3(ipvlan1) entered disabled state [ 104.224676][ T6380] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 104.487050][ T6405] netlink: 60 bytes leftover after parsing attributes in process `syz.0.142'. [ 104.554482][ T6405] netlink: 60 bytes leftover after parsing attributes in process `syz.0.142'. [ 104.736293][ T6412] netlink: 40 bytes leftover after parsing attributes in process `syz.2.145'. [ 104.767620][ T6412] netlink: 40 bytes leftover after parsing attributes in process `syz.2.145'. [ 104.796250][ T6412] netlink: 40 bytes leftover after parsing attributes in process `syz.2.145'. [ 104.973277][ T6422] FAULT_INJECTION: forcing a failure. [ 104.973277][ T6422] name failslab, interval 1, probability 0, space 0, times 1 [ 105.006215][ T6422] CPU: 1 UID: 0 PID: 6422 Comm: syz.3.148 Not tainted syzkaller #0 PREEMPT(full) [ 105.006239][ T6422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 105.006250][ T6422] Call Trace: [ 105.006263][ T6422] [ 105.006277][ T6422] dump_stack_lvl+0x189/0x250 [ 105.006324][ T6422] ? __pfx____ratelimit+0x10/0x10 [ 105.006365][ T6422] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.006403][ T6422] ? __pfx__printk+0x10/0x10 [ 105.006471][ T6422] ? __pfx___might_resched+0x10/0x10 [ 105.006502][ T6422] ? fs_reclaim_acquire+0x7d/0x100 [ 105.006584][ T6422] should_fail_ex+0x414/0x560 [ 105.006671][ T6422] should_failslab+0xa8/0x100 [ 105.006726][ T6422] kmem_cache_alloc_node_noprof+0x77/0x710 [ 105.006763][ T6422] ? __alloc_skb+0x255/0x430 [ 105.006790][ T6422] ? napi_skb_cache_get+0x4a5/0x780 [ 105.006810][ T6422] ? napi_skb_cache_get+0x151/0x780 [ 105.006881][ T6422] __alloc_skb+0x255/0x430 [ 105.006948][ T6422] ? __pfx___alloc_skb+0x10/0x10 [ 105.006989][ T6422] ? genl_start+0x51a/0x6c0 [ 105.007094][ T6422] netlink_dump+0x1b7/0xe90 [ 105.007159][ T6422] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 105.007193][ T6422] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 105.007260][ T6422] ? __pfx_netlink_dump+0x10/0x10 [ 105.007453][ T6422] ? genl_start+0x581/0x6c0 [ 105.007563][ T6422] __netlink_dump_start+0x5cb/0x7e0 [ 105.007674][ T6422] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 105.007742][ T6422] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 105.007761][ T6422] ? genl_get_cmd+0x7d9/0x910 [ 105.007822][ T6422] ? __pfx___mutex_lock+0x10/0x10 [ 105.007863][ T6422] ? __pfx_genl_start+0x10/0x10 [ 105.007881][ T6422] ? __pfx_genl_dumpit+0x10/0x10 [ 105.007899][ T6422] ? __pfx_genl_done+0x10/0x10 [ 105.007989][ T6422] ? trace_call_bpf+0xc7/0xb60 [ 105.008081][ T6422] genl_rcv_msg+0x5da/0x790 [ 105.008182][ T6422] ? __pfx_genl_rcv_msg+0x10/0x10 [ 105.008208][ T6422] ? __pfx_tipc_dump_start+0x10/0x10 [ 105.008229][ T6422] ? __pfx_tipc_nl_sk_dump+0x10/0x10 [ 105.008250][ T6422] ? __pfx_tipc_dump_done+0x10/0x10 [ 105.008421][ T6422] netlink_rcv_skb+0x208/0x470 [ 105.008467][ T6422] ? __pfx_genl_rcv_msg+0x10/0x10 [ 105.008522][ T6422] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 105.008719][ T6422] ? down_read+0x274/0x2e0 [ 105.008740][ T6422] ? genl_rcv+0xd/0x40 [ 105.008800][ T6422] genl_rcv+0x28/0x40 [ 105.008829][ T6422] netlink_unicast+0x82f/0x9e0 [ 105.008950][ T6422] ? __pfx_netlink_unicast+0x10/0x10 [ 105.009015][ T6422] ? netlink_sendmsg+0x642/0xb30 [ 105.009030][ T6422] ? skb_put+0x11b/0x210 [ 105.009107][ T6422] netlink_sendmsg+0x805/0xb30 [ 105.009227][ T6422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.009279][ T6422] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 105.009312][ T6422] ? aa_sock_msg_perm+0xf1/0x1b0 [ 105.009364][ T6422] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 105.009392][ T6422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.009436][ T6422] __sock_sendmsg+0x21c/0x270 [ 105.009508][ T6422] ____sys_sendmsg+0x505/0x820 [ 105.009606][ T6422] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.009736][ T6422] ? import_iovec+0x74/0xa0 [ 105.009810][ T6422] ___sys_sendmsg+0x21f/0x2a0 [ 105.009872][ T6422] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.010121][ T6422] ? __fget_files+0x2a/0x420 [ 105.010263][ T6422] ? __fget_files+0x2a/0x420 [ 105.010283][ T6422] ? __fget_files+0x3a0/0x420 [ 105.010418][ T6422] __x64_sys_sendmsg+0x19b/0x260 [ 105.010478][ T6422] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 105.010597][ T6422] ? __pfx_ksys_write+0x10/0x10 [ 105.010674][ T6422] ? do_syscall_64+0xbe/0xf80 [ 105.010744][ T6422] do_syscall_64+0xfa/0xf80 [ 105.010788][ T6422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.010811][ T6422] ? clear_bhb_loop+0x60/0xb0 [ 105.010871][ T6422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.010890][ T6422] RIP: 0033:0x7f64ab98f749 [ 105.010919][ T6422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.010933][ T6422] RSP: 002b:00007f64ac816038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.010951][ T6422] RAX: ffffffffffffffda RBX: 00007f64abbe5fa0 RCX: 00007f64ab98f749 [ 105.010963][ T6422] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 105.010973][ T6422] RBP: 00007f64ac816090 R08: 0000000000000000 R09: 0000000000000000 [ 105.010983][ T6422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.010993][ T6422] R13: 00007f64abbe6038 R14: 00007f64abbe5fa0 R15: 00007ffd23552bb8 [ 105.011169][ T6422] [ 105.917780][ T6441] netlink: 'syz.1.154': attribute type 13 has an invalid length. [ 106.406978][ T6433] ======================================================= [ 106.406978][ T6433] WARNING: The mand mount option has been deprecated and [ 106.406978][ T6433] and is ignored by this kernel. Remove the mand [ 106.406978][ T6433] option from the mount to silence this warning. [ 106.406978][ T6433] ======================================================= [ 106.943987][ T6450] netlink: 60 bytes leftover after parsing attributes in process `syz.1.157'. [ 108.426989][ T6469] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.855560][ T6481] FAULT_INJECTION: forcing a failure. [ 108.855560][ T6481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.905035][ T6481] CPU: 1 UID: 0 PID: 6481 Comm: syz.0.168 Not tainted syzkaller #0 PREEMPT(full) [ 108.905059][ T6481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 108.905070][ T6481] Call Trace: [ 108.905077][ T6481] [ 108.905085][ T6481] dump_stack_lvl+0x189/0x250 [ 108.905108][ T6481] ? __pfx____ratelimit+0x10/0x10 [ 108.905129][ T6481] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.905148][ T6481] ? __pfx__printk+0x10/0x10 [ 108.905170][ T6481] ? __might_fault+0xb0/0x130 [ 108.905194][ T6481] ? __might_fault+0xb0/0x130 [ 108.905220][ T6481] should_fail_ex+0x414/0x560 [ 108.905245][ T6481] _copy_from_iter+0x1cd/0x1630 [ 108.905271][ T6481] ? __build_skb_around+0x22d/0x3c0 [ 108.905300][ T6481] ? __pfx__copy_from_iter+0x10/0x10 [ 108.905318][ T6481] ? __alloc_skb+0x2f1/0x430 [ 108.905343][ T6481] ? __pfx___alloc_skb+0x10/0x10 [ 108.905368][ T6481] ? netlink_sendmsg+0x642/0xb30 [ 108.905382][ T6481] ? skb_put+0x11b/0x210 [ 108.905408][ T6481] netlink_sendmsg+0x6b2/0xb30 [ 108.905438][ T6481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.905459][ T6481] ? aa_sock_msg_perm+0xf1/0x1b0 [ 108.905480][ T6481] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 108.905502][ T6481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.905521][ T6481] __sock_sendmsg+0x21c/0x270 [ 108.905545][ T6481] ____sys_sendmsg+0x505/0x820 [ 108.905577][ T6481] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.905613][ T6481] ? import_iovec+0x74/0xa0 [ 108.905638][ T6481] ___sys_sendmsg+0x21f/0x2a0 [ 108.905654][ T6481] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.905695][ T6481] ? __fget_files+0x2a/0x420 [ 108.905725][ T6481] ? __fget_files+0x2a/0x420 [ 108.905739][ T6481] ? __fget_files+0x3a0/0x420 [ 108.905769][ T6481] __x64_sys_sendmsg+0x19b/0x260 [ 108.905789][ T6481] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 108.905815][ T6481] ? __pfx_ksys_write+0x10/0x10 [ 108.905856][ T6481] ? do_syscall_64+0xbe/0xf80 [ 108.905882][ T6481] do_syscall_64+0xfa/0xf80 [ 108.905904][ T6481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.905920][ T6481] ? clear_bhb_loop+0x60/0xb0 [ 108.905947][ T6481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.905963][ T6481] RIP: 0033:0x7f617ed8f749 [ 108.905978][ T6481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.905991][ T6481] RSP: 002b:00007f617fb6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.906008][ T6481] RAX: ffffffffffffffda RBX: 00007f617efe5fa0 RCX: 00007f617ed8f749 [ 108.906020][ T6481] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 108.906029][ T6481] RBP: 00007f617fb6f090 R08: 0000000000000000 R09: 0000000000000000 [ 108.906039][ T6481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.906048][ T6481] R13: 00007f617efe6038 R14: 00007f617efe5fa0 R15: 00007ffd4afc4998 [ 108.906081][ T6481] [ 110.143665][ T6518] FAULT_INJECTION: forcing a failure. [ 110.143665][ T6518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.192497][ T6520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.221730][ T6518] CPU: 1 UID: 0 PID: 6518 Comm: syz.2.178 Not tainted syzkaller #0 PREEMPT(full) [ 110.221756][ T6518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 110.221766][ T6518] Call Trace: [ 110.221773][ T6518] [ 110.221780][ T6518] dump_stack_lvl+0x189/0x250 [ 110.221804][ T6518] ? __pfx____ratelimit+0x10/0x10 [ 110.221824][ T6518] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.221841][ T6518] ? __pfx__printk+0x10/0x10 [ 110.221863][ T6518] ? __might_fault+0xb0/0x130 [ 110.221893][ T6518] should_fail_ex+0x414/0x560 [ 110.221920][ T6518] _copy_from_iter+0x1cd/0x1630 [ 110.221944][ T6518] ? __build_skb_around+0x22d/0x3c0 [ 110.221972][ T6518] ? __pfx__copy_from_iter+0x10/0x10 [ 110.221989][ T6518] ? __alloc_skb+0x2f1/0x430 [ 110.222013][ T6518] ? __pfx___alloc_skb+0x10/0x10 [ 110.222037][ T6518] ? skb_put+0x11b/0x210 [ 110.222062][ T6518] pfkey_sendmsg+0x230/0x1090 [ 110.222091][ T6518] ? __pfx___might_resched+0x10/0x10 [ 110.222114][ T6518] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 110.222138][ T6518] ? aa_sk_perm+0x15f/0x920 [ 110.222163][ T6518] ? aa_sk_perm+0x7ee/0x920 [ 110.222188][ T6518] ? __lock_acquire+0x6b6/0x2cf0 [ 110.222203][ T6518] ? __pfx_aa_sk_perm+0x10/0x10 [ 110.222223][ T6518] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 110.222246][ T6518] ? aa_sock_msg_perm+0xf1/0x1b0 [ 110.222264][ T6518] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 110.222285][ T6518] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 110.222307][ T6518] __sock_sendmsg+0x21c/0x270 [ 110.222330][ T6518] ____sys_sendmsg+0x505/0x820 [ 110.222359][ T6518] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.222391][ T6518] ? import_iovec+0x74/0xa0 [ 110.222416][ T6518] ___sys_sendmsg+0x21f/0x2a0 [ 110.222434][ T6518] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.222455][ T6518] ? rcu_read_lock_any_held+0xb3/0x120 [ 110.222500][ T6518] ? __fget_files+0x2a/0x420 [ 110.222514][ T6518] ? __fget_files+0x3a0/0x420 [ 110.222539][ T6518] __x64_sys_sendmsg+0x19b/0x260 [ 110.222557][ T6518] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 110.222588][ T6518] ? __pfx_ksys_write+0x10/0x10 [ 110.222612][ T6518] ? do_syscall_64+0xbe/0xf80 [ 110.222636][ T6518] do_syscall_64+0xfa/0xf80 [ 110.222657][ T6518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.222673][ T6518] ? clear_bhb_loop+0x60/0xb0 [ 110.222692][ T6518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.222708][ T6518] RIP: 0033:0x7f110b78f749 [ 110.222722][ T6518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.222736][ T6518] RSP: 002b:00007f110c643038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.222754][ T6518] RAX: ffffffffffffffda RBX: 00007f110b9e6090 RCX: 00007f110b78f749 [ 110.222765][ T6518] RDX: 0000000000000000 RSI: 00002000000011c0 RDI: 0000000000000005 [ 110.222775][ T6518] RBP: 00007f110c643090 R08: 0000000000000000 R09: 0000000000000000 [ 110.222785][ T6518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.222794][ T6518] R13: 00007f110b9e6128 R14: 00007f110b9e6090 R15: 00007ffcf491c468 [ 110.222822][ T6518] [ 111.022698][ T6529] FAULT_INJECTION: forcing a failure. [ 111.022698][ T6529] name failslab, interval 1, probability 0, space 0, times 0 [ 111.040111][ T6529] CPU: 0 UID: 0 PID: 6529 Comm: syz.2.181 Not tainted syzkaller #0 PREEMPT(full) [ 111.040127][ T6529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 111.040132][ T6529] Call Trace: [ 111.040137][ T6529] [ 111.040142][ T6529] dump_stack_lvl+0x189/0x250 [ 111.040157][ T6529] ? __pfx____ratelimit+0x10/0x10 [ 111.040169][ T6529] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.040179][ T6529] ? __pfx__printk+0x10/0x10 [ 111.040194][ T6529] ? __netlink_lookup+0xbd/0x8a0 [ 111.040210][ T6529] should_fail_ex+0x414/0x560 [ 111.040223][ T6529] should_failslab+0xa8/0x100 [ 111.040247][ T6529] kmem_cache_alloc_noprof+0x74/0x6f0 [ 111.040266][ T6529] ? skb_clone+0x212/0x3a0 [ 111.040285][ T6529] skb_clone+0x212/0x3a0 [ 111.040304][ T6529] __netlink_deliver_tap+0x404/0x850 [ 111.040331][ T6529] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.040347][ T6529] netlink_deliver_tap+0x19c/0x1b0 [ 111.040363][ T6529] netlink_unicast+0x7fa/0x9e0 [ 111.040392][ T6529] ? __pfx_netlink_unicast+0x10/0x10 [ 111.040407][ T6529] ? netlink_sendmsg+0x642/0xb30 [ 111.040415][ T6529] ? skb_put+0x11b/0x210 [ 111.040435][ T6529] netlink_sendmsg+0x805/0xb30 [ 111.040467][ T6529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.040488][ T6529] ? aa_sock_msg_perm+0xf1/0x1b0 [ 111.040507][ T6529] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 111.040522][ T6529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.040532][ T6529] __sock_sendmsg+0x21c/0x270 [ 111.040545][ T6529] ____sys_sendmsg+0x505/0x820 [ 111.040562][ T6529] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.040581][ T6529] ? import_iovec+0x74/0xa0 [ 111.040596][ T6529] ___sys_sendmsg+0x21f/0x2a0 [ 111.040606][ T6529] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.040633][ T6529] ? __fget_files+0x2a/0x420 [ 111.040641][ T6529] ? __fget_files+0x3a0/0x420 [ 111.040655][ T6529] __x64_sys_sendmsg+0x19b/0x260 [ 111.040665][ T6529] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 111.040679][ T6529] ? __pfx_ksys_write+0x10/0x10 [ 111.040693][ T6529] ? do_syscall_64+0xbe/0xf80 [ 111.040710][ T6529] do_syscall_64+0xfa/0xf80 [ 111.040722][ T6529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.040731][ T6529] ? clear_bhb_loop+0x60/0xb0 [ 111.040742][ T6529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.040751][ T6529] RIP: 0033:0x7f110b78f749 [ 111.040761][ T6529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.040769][ T6529] RSP: 002b:00007f110c664038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.040779][ T6529] RAX: ffffffffffffffda RBX: 00007f110b9e5fa0 RCX: 00007f110b78f749 [ 111.040786][ T6529] RDX: 0000000004004000 RSI: 0000200000000180 RDI: 0000000000000007 [ 111.040792][ T6529] RBP: 00007f110c664090 R08: 0000000000000000 R09: 0000000000000000 [ 111.040797][ T6529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.040802][ T6529] R13: 00007f110b9e6038 R14: 00007f110b9e5fa0 R15: 00007ffcf491c468 [ 111.040818][ T6529] [ 111.040906][ T6529] __nla_validate_parse: 1 callbacks suppressed [ 111.040928][ T6529] netlink: 180 bytes leftover after parsing attributes in process `syz.2.181'. [ 111.595358][ T6543] netlink: 180 bytes leftover after parsing attributes in process `syz.2.185'. [ 111.999807][ T6556] netlink: 'syz.1.189': attribute type 10 has an invalid length. [ 112.044531][ T6556] netlink: 40 bytes leftover after parsing attributes in process `syz.1.189'. [ 112.097398][ T6556] bridge0: port 3(ipvlan1) entered blocking state [ 112.151228][ T6556] bridge0: port 3(ipvlan1) entered disabled state [ 112.173524][ T6548] netlink: 1816 bytes leftover after parsing attributes in process `syz.4.186'. [ 112.234500][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.190'. [ 112.282945][ T6556] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 113.063286][ T6563] : entered promiscuous mode [ 113.135096][ T6572] netlink: 830 bytes leftover after parsing attributes in process `syz.1.193'. [ 113.971706][ T6604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.202'. [ 114.274859][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.205'. [ 114.680177][ T6625] netlink: 830 bytes leftover after parsing attributes in process `syz.2.210'. [ 115.022808][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.211'. [ 115.313386][ T6633] FAULT_INJECTION: forcing a failure. [ 115.313386][ T6633] name failslab, interval 1, probability 0, space 0, times 0 [ 115.337946][ T5845] Bluetooth: hci2: unexpected event 0x05 length: 151 > 4 [ 115.360468][ T6633] CPU: 1 UID: 0 PID: 6633 Comm: syz.2.213 Not tainted syzkaller #0 PREEMPT(full) [ 115.360495][ T6633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.360505][ T6633] Call Trace: [ 115.360515][ T6633] [ 115.360526][ T6633] dump_stack_lvl+0x189/0x250 [ 115.360555][ T6633] ? __pfx____ratelimit+0x10/0x10 [ 115.360585][ T6633] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.360611][ T6633] ? __pfx__printk+0x10/0x10 [ 115.360669][ T6633] ? __pfx___might_resched+0x10/0x10 [ 115.360721][ T6633] should_fail_ex+0x414/0x560 [ 115.360772][ T6633] should_failslab+0xa8/0x100 [ 115.360811][ T6633] kmem_cache_alloc_noprof+0x74/0x6f0 [ 115.360843][ T6633] ? security_inode_alloc+0x39/0x330 [ 115.360891][ T6633] security_inode_alloc+0x39/0x330 [ 115.360926][ T6633] inode_init_always_gfp+0x9ed/0xdc0 [ 115.360985][ T6633] ? __pfx_sock_alloc_inode+0x10/0x10 [ 115.361006][ T6633] alloc_inode+0x82/0x1b0 [ 115.361045][ T6633] __sock_create+0x12d/0x9d0 [ 115.361072][ T6633] ? __pfx_trace_call_bpf+0x10/0x10 [ 115.361134][ T6633] mptcp_subflow_create_socket+0xf0/0x7d0 [ 115.361172][ T6633] ? perf_trace_run_bpf_submit+0x100/0x170 [ 115.361234][ T6633] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 115.361256][ T6633] ? perf_trace_preemptirq_template+0xa3/0x340 [ 115.361279][ T6633] ? __local_bh_enable_ip+0x12d/0x1c0 [ 115.361308][ T6633] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 115.361355][ T6633] __mptcp_nmpc_sk+0x148/0x760 [ 115.361424][ T6633] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 115.361444][ T6633] ? __local_bh_enable_ip+0x12d/0x1c0 [ 115.361466][ T6633] ? lockdep_hardirqs_on+0x98/0x140 [ 115.361507][ T6633] ? __local_bh_enable_ip+0x12d/0x1c0 [ 115.361542][ T6633] mptcp_sendmsg_fastopen+0xd4/0x580 [ 115.361607][ T6633] mptcp_sendmsg+0x1774/0x1980 [ 115.361634][ T6633] ? __pfx___might_resched+0x10/0x10 [ 115.361712][ T6633] ? __pfx_trace_call_bpf+0x10/0x10 [ 115.361736][ T6633] ? aa_sk_perm+0x15f/0x920 [ 115.361779][ T6633] ? aa_sk_perm+0x7ee/0x920 [ 115.361835][ T6633] ? __pfx_aa_sk_perm+0x10/0x10 [ 115.361866][ T6633] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 115.361930][ T6633] ? inet6_sendmsg+0x101/0x120 [ 115.361970][ T6633] __sock_sendmsg+0xe5/0x270 [ 115.362013][ T6633] ____sys_sendmsg+0x505/0x820 [ 115.362072][ T6633] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.362143][ T6633] ? import_iovec+0x74/0xa0 [ 115.362188][ T6633] ___sys_sendmsg+0x21f/0x2a0 [ 115.362225][ T6633] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.362344][ T6633] ? __fget_files+0x2a/0x420 [ 115.362427][ T6633] ? __fget_files+0x2a/0x420 [ 115.362444][ T6633] ? __fget_files+0x3a0/0x420 [ 115.362514][ T6633] __x64_sys_sendmsg+0x19b/0x260 [ 115.362555][ T6633] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 115.362569][ T6633] ? perf_trace_preemptirq_template+0xa3/0x340 [ 115.362637][ T6633] ? __pfx_ksys_write+0x10/0x10 [ 115.362684][ T6633] ? do_syscall_64+0xbe/0xf80 [ 115.362728][ T6633] do_syscall_64+0xfa/0xf80 [ 115.362759][ T6633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.362778][ T6633] ? clear_bhb_loop+0x60/0xb0 [ 115.362816][ T6633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.362833][ T6633] RIP: 0033:0x7f110b78f749 [ 115.362855][ T6633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.362869][ T6633] RSP: 002b:00007f110c664038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.362887][ T6633] RAX: ffffffffffffffda RBX: 00007f110b9e5fa0 RCX: 00007f110b78f749 [ 115.362899][ T6633] RDX: e07e872420dfefca RSI: 0000200000000780 RDI: 0000000000000003 [ 115.362910][ T6633] RBP: 00007f110c664090 R08: 0000000000000000 R09: 0000000000000000 [ 115.362920][ T6633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.362929][ T6633] R13: 00007f110b9e6038 R14: 00007f110b9e5fa0 R15: 00007ffcf491c468 [ 115.363028][ T6633] [ 115.832226][ T6633] socket: no more sockets [ 116.192970][ T6641] FAULT_INJECTION: forcing a failure. [ 116.192970][ T6641] name failslab, interval 1, probability 0, space 0, times 0 [ 116.208640][ T6641] CPU: 0 UID: 0 PID: 6641 Comm: syz.1.216 Not tainted syzkaller #0 PREEMPT(full) [ 116.208664][ T6641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 116.208674][ T6641] Call Trace: [ 116.208681][ T6641] [ 116.208689][ T6641] dump_stack_lvl+0x189/0x250 [ 116.208712][ T6641] ? __pfx____ratelimit+0x10/0x10 [ 116.208733][ T6641] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.208751][ T6641] ? __pfx__printk+0x10/0x10 [ 116.208776][ T6641] ? __pfx___might_resched+0x10/0x10 [ 116.208794][ T6641] ? fs_reclaim_acquire+0x7d/0x100 [ 116.208822][ T6641] should_fail_ex+0x414/0x560 [ 116.208848][ T6641] should_failslab+0xa8/0x100 [ 116.208874][ T6641] __kmalloc_node_track_caller_noprof+0xcd/0x810 [ 116.208896][ T6641] ? kobject_set_name_vargs+0x61/0x110 [ 116.208953][ T6641] kvasprintf+0xdc/0x190 [ 116.208980][ T6641] ? __pfx_kvasprintf+0x10/0x10 [ 116.209014][ T6641] ? kvasprintf_const+0xe1/0x240 [ 116.209040][ T6641] kobject_set_name_vargs+0x61/0x110 [ 116.209066][ T6641] dev_set_name+0xd4/0x120 [ 116.209093][ T6641] ? __pfx_dev_set_name+0x10/0x10 [ 116.209116][ T6641] ? trace_kmalloc+0x1f/0xb0 [ 116.209133][ T6641] ? __kmalloc_noprof+0x432/0x800 [ 116.209151][ T6641] ? wiphy_new_nm+0x625/0x19e0 [ 116.209175][ T6641] wiphy_new_nm+0x7a1/0x19e0 [ 116.209191][ T6641] ? ieee80211_alloc_hw_nm+0x912/0x1f60 [ 116.209217][ T6641] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 116.209238][ T6641] ieee80211_alloc_hw_nm+0x3f3/0x1f60 [ 116.209262][ T6641] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 116.209293][ T6641] mac80211_hwsim_new_radio+0x1eb/0x5240 [ 116.209332][ T6641] ? stack_depot_save_flags+0x40/0x850 [ 116.209353][ T6641] ? kasan_save_track+0x4f/0x80 [ 116.209378][ T6641] ? kasan_save_track+0x4f/0x80 [ 116.209397][ T6641] ? kasan_save_track+0x3e/0x80 [ 116.209419][ T6641] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 116.209441][ T6641] ? __nla_validate_parse+0x2400/0x2d40 [ 116.209461][ T6641] ? __x64_sys_sendmsg+0x19b/0x260 [ 116.209488][ T6641] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 116.209517][ T6641] ? __pfx___nla_validate_parse+0x10/0x10 [ 116.209555][ T6641] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 116.209588][ T6641] ? rcu_is_watching+0x15/0xb0 [ 116.209611][ T6641] ? __nla_parse+0x40/0x60 [ 116.209636][ T6641] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 116.209667][ T6641] genl_family_rcv_msg_doit+0x215/0x300 [ 116.209697][ T6641] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 116.209734][ T6641] ? bpf_lsm_capable+0x9/0x20 [ 116.209750][ T6641] ? security_capable+0x7e/0x2e0 [ 116.209781][ T6641] genl_rcv_msg+0x60e/0x790 [ 116.209810][ T6641] ? __pfx_genl_rcv_msg+0x10/0x10 [ 116.209830][ T6641] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 116.209868][ T6641] netlink_rcv_skb+0x208/0x470 [ 116.209887][ T6641] ? __pfx_genl_rcv_msg+0x10/0x10 [ 116.209910][ T6641] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 116.209956][ T6641] ? down_read+0x274/0x2e0 [ 116.209976][ T6641] ? genl_rcv+0xd/0x40 [ 116.209998][ T6641] genl_rcv+0x28/0x40 [ 116.210016][ T6641] netlink_unicast+0x82f/0x9e0 [ 116.210051][ T6641] ? __pfx_netlink_unicast+0x10/0x10 [ 116.210077][ T6641] ? netlink_sendmsg+0x642/0xb30 [ 116.210091][ T6641] ? skb_put+0x11b/0x210 [ 116.210118][ T6641] netlink_sendmsg+0x805/0xb30 [ 116.210148][ T6641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.210170][ T6641] ? aa_sock_msg_perm+0xf1/0x1b0 [ 116.210189][ T6641] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 116.210209][ T6641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.210228][ T6641] __sock_sendmsg+0x21c/0x270 [ 116.210252][ T6641] ____sys_sendmsg+0x505/0x820 [ 116.210283][ T6641] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.210319][ T6641] ? import_iovec+0x74/0xa0 [ 116.210346][ T6641] ___sys_sendmsg+0x21f/0x2a0 [ 116.210365][ T6641] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.210408][ T6641] ? __fget_files+0x2a/0x420 [ 116.210439][ T6641] ? __fget_files+0x2a/0x420 [ 116.210453][ T6641] ? __fget_files+0x3a0/0x420 [ 116.210482][ T6641] __x64_sys_sendmsg+0x19b/0x260 [ 116.210502][ T6641] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 116.210516][ T6641] ? perf_trace_preemptirq_template+0xa3/0x340 [ 116.210548][ T6641] ? __pfx_ksys_write+0x10/0x10 [ 116.210574][ T6641] ? do_syscall_64+0xbe/0xf80 [ 116.210599][ T6641] do_syscall_64+0xfa/0xf80 [ 116.210621][ T6641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.210637][ T6641] ? clear_bhb_loop+0x60/0xb0 [ 116.210658][ T6641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.210673][ T6641] RIP: 0033:0x7ff47e58f749 [ 116.210690][ T6641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.210703][ T6641] RSP: 002b:00007ff47f4bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.210721][ T6641] RAX: ffffffffffffffda RBX: 00007ff47e7e5fa0 RCX: 00007ff47e58f749 [ 116.210733][ T6641] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 116.210743][ T6641] RBP: 00007ff47f4bd090 R08: 0000000000000000 R09: 0000000000000000 [ 116.210752][ T6641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.210762][ T6641] R13: 00007ff47e7e6038 R14: 00007ff47e7e5fa0 R15: 00007ffd6c1d13c8 [ 116.210796][ T6641] [ 116.932703][ T6646] Illegal XDP return value 4294967294 on prog (id 185) dev N/A, expect packet loss! [ 117.064485][ T6656] netlink: 'syz.3.222': attribute type 10 has an invalid length. [ 117.073336][ T6656] netlink: 40 bytes leftover after parsing attributes in process `syz.3.222'. [ 117.107228][ T6656] ipvlan1: entered promiscuous mode [ 117.119162][ T6656] ipvlan1: entered allmulticast mode [ 117.136210][ T6656] veth0_vlan: entered allmulticast mode [ 117.160460][ T6656] bridge0: port 3(ipvlan1) entered blocking state [ 117.168633][ T6656] bridge0: port 3(ipvlan1) entered disabled state [ 117.190478][ T6656] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 117.228982][ T6660] netlink: 830 bytes leftover after parsing attributes in process `syz.4.223'. [ 117.275005][ T6663] FAULT_INJECTION: forcing a failure. [ 117.275005][ T6663] name failslab, interval 1, probability 0, space 0, times 0 [ 117.305774][ T6663] CPU: 0 UID: 0 PID: 6663 Comm: syz.0.224 Not tainted syzkaller #0 PREEMPT(full) [ 117.305798][ T6663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.305808][ T6663] Call Trace: [ 117.305814][ T6663] [ 117.305822][ T6663] dump_stack_lvl+0x189/0x250 [ 117.305843][ T6663] ? __pfx____ratelimit+0x10/0x10 [ 117.305861][ T6663] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.305878][ T6663] ? __pfx__printk+0x10/0x10 [ 117.305900][ T6663] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 117.305922][ T6663] ? __pfx___might_resched+0x10/0x10 [ 117.305945][ T6663] should_fail_ex+0x414/0x560 [ 117.305969][ T6663] should_failslab+0xa8/0x100 [ 117.305994][ T6663] __kmalloc_cache_node_noprof+0x74/0x6f0 [ 117.306016][ T6663] ? page_pool_create_percpu+0x76/0xb80 [ 117.306042][ T6663] page_pool_create_percpu+0x76/0xb80 [ 117.306060][ T6663] ? bpf_test_run_xdp_live+0x1ba/0x1b20 [ 117.306084][ T6663] bpf_test_run_xdp_live+0x1cf/0x1b20 [ 117.306101][ T6663] ? bpf_dispatcher_change_prog+0xb35/0xc90 [ 117.306125][ T6663] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 117.306167][ T6663] ? synchronize_rcu+0x11a/0x310 [ 117.306188][ T6663] ? __pfx_synchronize_rcu+0x10/0x10 [ 117.306210][ T6663] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 117.306229][ T6663] ? 0xffffffffa02057c0 [ 117.306260][ T6663] ? 0xffffffffa02030c8 [ 117.306300][ T6663] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 117.306328][ T6663] ? _copy_from_user+0x94/0xb0 [ 117.306350][ T6663] ? bpf_test_init+0x113/0x150 [ 117.306364][ T6663] ? xdp_convert_md_to_buff+0x5b/0x330 [ 117.306383][ T6663] bpf_prog_test_run_xdp+0x7c0/0x10e0 [ 117.306415][ T6663] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 117.306437][ T6663] ? __fget_files+0x2a/0x420 [ 117.306457][ T6663] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 117.306475][ T6663] bpf_prog_test_run+0x2c7/0x340 [ 117.306499][ T6663] __sys_bpf+0x5ee/0x8a0 [ 117.306519][ T6663] ? __pfx___sys_bpf+0x10/0x10 [ 117.306559][ T6663] __x64_sys_bpf+0x7c/0x90 [ 117.306577][ T6663] do_syscall_64+0xfa/0xf80 [ 117.306598][ T6663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.306614][ T6663] ? clear_bhb_loop+0x60/0xb0 [ 117.306631][ T6663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.306645][ T6663] RIP: 0033:0x7f617ed8f749 [ 117.306660][ T6663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.306673][ T6663] RSP: 002b:00007f617fb6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 117.306689][ T6663] RAX: ffffffffffffffda RBX: 00007f617efe5fa0 RCX: 00007f617ed8f749 [ 117.306701][ T6663] RDX: 0000000000000050 RSI: 0000200000000900 RDI: 000000000000000a [ 117.306709][ T6663] RBP: 00007f617fb6f090 R08: 0000000000000000 R09: 0000000000000000 [ 117.306717][ T6663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.306724][ T6663] R13: 00007f617efe6038 R14: 00007f617efe5fa0 R15: 00007ffd4afc4998 [ 117.306750][ T6663] [ 118.873907][ T6678] FAULT_INJECTION: forcing a failure. [ 118.873907][ T6678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.914203][ T6678] CPU: 0 UID: 0 PID: 6678 Comm: syz.4.228 Not tainted syzkaller #0 PREEMPT(full) [ 118.914228][ T6678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 118.914239][ T6678] Call Trace: [ 118.914245][ T6678] [ 118.914253][ T6678] dump_stack_lvl+0x189/0x250 [ 118.914276][ T6678] ? __pfx____ratelimit+0x10/0x10 [ 118.914296][ T6678] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.914313][ T6678] ? __pfx__printk+0x10/0x10 [ 118.914334][ T6678] ? __might_fault+0xb0/0x130 [ 118.914364][ T6678] should_fail_ex+0x414/0x560 [ 118.914389][ T6678] _copy_from_iter+0x1cd/0x1630 [ 118.914413][ T6678] ? __build_skb_around+0x22d/0x3c0 [ 118.914440][ T6678] ? __pfx__copy_from_iter+0x10/0x10 [ 118.914458][ T6678] ? __alloc_skb+0x2f1/0x430 [ 118.914481][ T6678] ? __pfx___alloc_skb+0x10/0x10 [ 118.914504][ T6678] ? netlink_sendmsg+0x642/0xb30 [ 118.914519][ T6678] ? skb_put+0x11b/0x210 [ 118.914544][ T6678] netlink_sendmsg+0x6b2/0xb30 [ 118.914569][ T6678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.914589][ T6678] ? aa_sock_msg_perm+0xf1/0x1b0 [ 118.914608][ T6678] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 118.914629][ T6678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.914647][ T6678] __sock_sendmsg+0x21c/0x270 [ 118.914670][ T6678] ____sys_sendmsg+0x505/0x820 [ 118.914699][ T6678] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.914730][ T6678] ? import_iovec+0x74/0xa0 [ 118.914755][ T6678] ___sys_sendmsg+0x21f/0x2a0 [ 118.914773][ T6678] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.914795][ T6678] ? rcu_read_lock_any_held+0xb3/0x120 [ 118.914839][ T6678] ? __fget_files+0x2a/0x420 [ 118.914854][ T6678] ? __fget_files+0x3a0/0x420 [ 118.914879][ T6678] __x64_sys_sendmsg+0x19b/0x260 [ 118.914898][ T6678] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 118.914932][ T6678] ? __pfx_ksys_write+0x10/0x10 [ 118.914956][ T6678] ? do_syscall_64+0xbe/0xf80 [ 118.914985][ T6678] do_syscall_64+0xfa/0xf80 [ 118.915006][ T6678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.915022][ T6678] ? clear_bhb_loop+0x60/0xb0 [ 118.915041][ T6678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.915057][ T6678] RIP: 0033:0x7f2e6fd8f749 [ 118.915072][ T6678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.915085][ T6678] RSP: 002b:00007f2e70bca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.915104][ T6678] RAX: ffffffffffffffda RBX: 00007f2e6ffe6090 RCX: 00007f2e6fd8f749 [ 118.915115][ T6678] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 118.915126][ T6678] RBP: 00007f2e70bca090 R08: 0000000000000000 R09: 0000000000000000 [ 118.915135][ T6678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.915144][ T6678] R13: 00007f2e6ffe6128 R14: 00007f2e6ffe6090 R15: 00007ffe6cb02e58 [ 118.915172][ T6678] [ 119.803974][ T6710] netlink: 'syz.3.236': attribute type 10 has an invalid length. [ 119.813359][ T6710] netlink: 40 bytes leftover after parsing attributes in process `syz.3.236'. [ 119.817968][ T6711] netlink: 544 bytes leftover after parsing attributes in process `syz.0.237'. [ 119.823844][ T6710] bridge0: port 3(ipvlan1) entered blocking state [ 119.841170][ T6710] bridge0: port 3(ipvlan1) entered disabled state [ 119.872215][ T6704] netlink: 'syz.0.237': attribute type 13 has an invalid length. [ 119.878281][ T6710] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 120.393010][ T6723] netlink: 164 bytes leftover after parsing attributes in process `syz.4.242'. [ 121.081124][ T6730] netlink: 40 bytes leftover after parsing attributes in process `syz.3.244'. [ 121.090611][ T6731] netlink: 40 bytes leftover after parsing attributes in process `syz.3.244'. [ 121.103029][ T6730] netlink: 40 bytes leftover after parsing attributes in process `syz.3.244'. [ 121.114402][ T6731] netlink: 40 bytes leftover after parsing attributes in process `syz.3.244'. [ 121.236252][ T6731] netlink: 'syz.3.244': attribute type 11 has an invalid length. [ 121.440488][ T6742] netlink: 60 bytes leftover after parsing attributes in process `syz.0.246'. [ 121.619365][ T6749] netlink: 'syz.1.249': attribute type 10 has an invalid length. [ 121.769442][ T6754] : entered promiscuous mode [ 122.266216][ T6766] __nla_validate_parse: 5 callbacks suppressed [ 122.266247][ T6766] netlink: 180 bytes leftover after parsing attributes in process `syz.4.254'. [ 122.684490][ T6773] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 122.896834][ T6785] netlink: 'syz.0.259': attribute type 1 has an invalid length. [ 123.290130][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.263'. [ 123.500905][ T6801] netlink: 132 bytes leftover after parsing attributes in process `syz.1.265'. [ 123.584779][ T6803] netlink: 132 bytes leftover after parsing attributes in process `syz.4.266'. [ 123.608666][ T6803] netlink: 'syz.4.266': attribute type 10 has an invalid length. [ 123.845388][ T6803] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 123.965224][ T6812] netlink: 830 bytes leftover after parsing attributes in process `syz.1.267'. [ 124.676928][ T6826] FAULT_INJECTION: forcing a failure. [ 124.676928][ T6826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.700393][ T6826] CPU: 1 UID: 0 PID: 6826 Comm: syz.4.271 Not tainted syzkaller #0 PREEMPT(full) [ 124.700419][ T6826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 124.700429][ T6826] Call Trace: [ 124.700435][ T6826] [ 124.700443][ T6826] dump_stack_lvl+0x189/0x250 [ 124.700467][ T6826] ? __pfx____ratelimit+0x10/0x10 [ 124.700487][ T6826] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.700505][ T6826] ? __pfx__printk+0x10/0x10 [ 124.700526][ T6826] ? __might_fault+0xb0/0x130 [ 124.700555][ T6826] should_fail_ex+0x414/0x560 [ 124.700580][ T6826] _copy_from_user+0x2d/0xb0 [ 124.700603][ T6826] ___sys_sendmsg+0x158/0x2a0 [ 124.700622][ T6826] ? __pfx____sys_sendmsg+0x10/0x10 [ 124.700644][ T6826] ? rcu_read_lock_any_held+0xb3/0x120 [ 124.700686][ T6826] ? __fget_files+0x2a/0x420 [ 124.700699][ T6826] ? __fget_files+0x3a0/0x420 [ 124.700722][ T6826] __x64_sys_sendmsg+0x19b/0x260 [ 124.700739][ T6826] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 124.700761][ T6826] ? __pfx_ksys_write+0x10/0x10 [ 124.700782][ T6826] ? do_syscall_64+0xbe/0xf80 [ 124.700803][ T6826] do_syscall_64+0xfa/0xf80 [ 124.700824][ T6826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.700838][ T6826] ? clear_bhb_loop+0x60/0xb0 [ 124.700856][ T6826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.700870][ T6826] RIP: 0033:0x7f2e6fd8f749 [ 124.700885][ T6826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.700897][ T6826] RSP: 002b:00007f2e70ba9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.700914][ T6826] RAX: ffffffffffffffda RBX: 00007f2e6ffe6180 RCX: 00007f2e6fd8f749 [ 124.700925][ T6826] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000008 [ 124.700934][ T6826] RBP: 00007f2e70ba9090 R08: 0000000000000000 R09: 0000000000000000 [ 124.700943][ T6826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.700952][ T6826] R13: 00007f2e6ffe6218 R14: 00007f2e6ffe6180 R15: 00007ffe6cb02e58 [ 124.700978][ T6826] [ 125.225723][ T6837] FAULT_INJECTION: forcing a failure. [ 125.225723][ T6837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.239233][ T6837] CPU: 0 UID: 0 PID: 6837 Comm: syz.0.275 Not tainted syzkaller #0 PREEMPT(full) [ 125.239255][ T6837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 125.239265][ T6837] Call Trace: [ 125.239271][ T6837] [ 125.239279][ T6837] dump_stack_lvl+0x189/0x250 [ 125.239302][ T6837] ? __pfx____ratelimit+0x10/0x10 [ 125.239322][ T6837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.239340][ T6837] ? __pfx__printk+0x10/0x10 [ 125.239361][ T6837] ? __might_fault+0xb0/0x130 [ 125.239390][ T6837] should_fail_ex+0x414/0x560 [ 125.239420][ T6837] _copy_from_user+0x2d/0xb0 [ 125.239443][ T6837] ___sys_sendmsg+0x158/0x2a0 [ 125.239462][ T6837] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.239485][ T6837] ? rcu_read_lock_any_held+0xb3/0x120 [ 125.239531][ T6837] ? __fget_files+0x2a/0x420 [ 125.239545][ T6837] ? __fget_files+0x3a0/0x420 [ 125.239570][ T6837] __x64_sys_sendmsg+0x19b/0x260 [ 125.239589][ T6837] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 125.239603][ T6837] ? perf_trace_preemptirq_template+0xa3/0x340 [ 125.239632][ T6837] ? __pfx_ksys_write+0x10/0x10 [ 125.239656][ T6837] ? do_syscall_64+0xbe/0xf80 [ 125.239680][ T6837] do_syscall_64+0xfa/0xf80 [ 125.239700][ T6837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.239716][ T6837] ? clear_bhb_loop+0x60/0xb0 [ 125.239736][ T6837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.239751][ T6837] RIP: 0033:0x7f617ed8f749 [ 125.239767][ T6837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.239780][ T6837] RSP: 002b:00007f617fb6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.239798][ T6837] RAX: ffffffffffffffda RBX: 00007f617efe5fa0 RCX: 00007f617ed8f749 [ 125.239809][ T6837] RDX: 0000000000000044 RSI: 0000200000000240 RDI: 0000000000000005 [ 125.239819][ T6837] RBP: 00007f617fb6f090 R08: 0000000000000000 R09: 0000000000000000 [ 125.239829][ T6837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.239838][ T6837] R13: 00007f617efe6038 R14: 00007f617efe5fa0 R15: 00007ffd4afc4998 [ 125.239868][ T6837] [ 125.608391][ T6841] netlink: 132 bytes leftover after parsing attributes in process `syz.4.278'. [ 125.708620][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 126.023989][ T6866] netlink: 36 bytes leftover after parsing attributes in process `syz.0.283'. [ 126.058856][ T6866] netlink: 36 bytes leftover after parsing attributes in process `syz.0.283'. [ 126.073828][ T6866] netlink: 36 bytes leftover after parsing attributes in process `syz.0.283'. [ 126.097620][ T6863] netlink: 'syz.1.284': attribute type 13 has an invalid length. [ 126.613577][ T6880] netlink: 'syz.2.287': attribute type 13 has an invalid length. [ 127.812495][ T6904] __nla_validate_parse: 10 callbacks suppressed [ 127.812513][ T6904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.293'. [ 127.839898][ T6903] FAULT_INJECTION: forcing a failure. [ 127.839898][ T6903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.877616][ T6903] CPU: 0 UID: 0 PID: 6903 Comm: syz.2.292 Not tainted syzkaller #0 PREEMPT(full) [ 127.877642][ T6903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.877652][ T6903] Call Trace: [ 127.877658][ T6903] [ 127.877666][ T6903] dump_stack_lvl+0x189/0x250 [ 127.877690][ T6903] ? __pfx____ratelimit+0x10/0x10 [ 127.877711][ T6903] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.877729][ T6903] ? __pfx__printk+0x10/0x10 [ 127.877751][ T6903] ? __might_fault+0xb0/0x130 [ 127.877773][ T6903] ? __might_fault+0xb0/0x130 [ 127.877797][ T6903] should_fail_ex+0x414/0x560 [ 127.877823][ T6903] _copy_from_user+0x2d/0xb0 [ 127.877847][ T6903] __sys_bpf+0x1f2/0x8a0 [ 127.877870][ T6903] ? __pfx___sys_bpf+0x10/0x10 [ 127.877904][ T6903] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 127.877921][ T6903] ? ksys_write+0x22a/0x250 [ 127.877944][ T6903] ? __pfx_ksys_write+0x10/0x10 [ 127.877968][ T6903] __x64_sys_bpf+0x7c/0x90 [ 127.877985][ T6903] do_syscall_64+0xfa/0xf80 [ 127.878007][ T6903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.878021][ T6903] ? clear_bhb_loop+0x60/0xb0 [ 127.878041][ T6903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.878057][ T6903] RIP: 0033:0x7f110b78f749 [ 127.878073][ T6903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.878084][ T6903] RSP: 002b:00007f110c664038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 127.878101][ T6903] RAX: ffffffffffffffda RBX: 00007f110b9e5fa0 RCX: 00007f110b78f749 [ 127.878111][ T6903] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 127.878120][ T6903] RBP: 00007f110c664090 R08: 0000000000000000 R09: 0000000000000000 [ 127.878130][ T6903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.878145][ T6903] R13: 00007f110b9e6038 R14: 00007f110b9e5fa0 R15: 00007ffcf491c468 [ 127.878177][ T6903] [ 129.397232][ T6933] netlink: 128 bytes leftover after parsing attributes in process `syz.3.303'. [ 129.417980][ T6933] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 129.711071][ T6947] netlink: 'syz.2.306': attribute type 13 has an invalid length. [ 129.802211][ T6949] netlink: 'syz.0.308': attribute type 10 has an invalid length. [ 129.847497][ T6949] netlink: 40 bytes leftover after parsing attributes in process `syz.0.308'. [ 129.863412][ T6955] netlink: 'syz.1.309': attribute type 13 has an invalid length. [ 129.889941][ T6957] netlink: 64 bytes leftover after parsing attributes in process `syz.4.310'. [ 129.900010][ T6957] FAULT_INJECTION: forcing a failure. [ 129.900010][ T6957] name failslab, interval 1, probability 0, space 0, times 0 [ 129.913030][ T6957] CPU: 1 UID: 0 PID: 6957 Comm: syz.4.310 Not tainted syzkaller #0 PREEMPT(full) [ 129.913054][ T6957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 129.913064][ T6957] Call Trace: [ 129.913071][ T6957] [ 129.913079][ T6957] dump_stack_lvl+0x189/0x250 [ 129.913102][ T6957] ? __pfx____ratelimit+0x10/0x10 [ 129.913123][ T6957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.913141][ T6957] ? __pfx__printk+0x10/0x10 [ 129.913174][ T6957] should_fail_ex+0x414/0x560 [ 129.913199][ T6957] should_failslab+0xa8/0x100 [ 129.913223][ T6957] kmem_cache_alloc_node_noprof+0x77/0x710 [ 129.913243][ T6957] ? __alloc_skb+0x255/0x430 [ 129.913263][ T6957] ? napi_skb_cache_get+0x4a5/0x780 [ 129.913282][ T6957] ? napi_skb_cache_get+0x151/0x780 [ 129.913306][ T6957] __alloc_skb+0x255/0x430 [ 129.913332][ T6957] ? __pfx___alloc_skb+0x10/0x10 [ 129.913356][ T6957] ? xfrm_get_translator+0x1b/0x240 [ 129.913384][ T6957] xfrm_alloc_compat+0x1a6/0x16f0 [ 129.913413][ T6957] ? xfrm_get_translator+0x1b/0x240 [ 129.913434][ T6957] ? __pfx_xfrm_alloc_compat+0x10/0x10 [ 129.913457][ T6957] xfrm_nlmsg_multicast+0xda/0x1f0 [ 129.913479][ T6957] xfrm_send_state_notify+0x11f1/0x18b0 [ 129.913501][ T6957] ? km_state_notify+0x25/0x1f0 [ 129.913521][ T6957] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 129.913536][ T6957] ? km_state_notify+0x25/0x1f0 [ 129.913562][ T6957] ? km_state_notify+0x25/0x1f0 [ 129.913579][ T6957] ? km_state_notify+0x25/0x1f0 [ 129.913595][ T6957] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 129.913614][ T6957] km_state_notify+0x110/0x1f0 [ 129.913637][ T6957] km_state_expired+0xaa/0xf0 [ 129.913654][ T6957] ? __pfx_km_state_expired+0x10/0x10 [ 129.913687][ T6957] ? xfrm_add_sa_expire+0x1b6/0x4b0 [ 129.913709][ T6957] xfrm_add_sa_expire+0x241/0x4b0 [ 129.913735][ T6957] ? __pfx_xfrm_add_sa_expire+0x10/0x10 [ 129.913773][ T6957] ? __nla_parse+0x40/0x60 [ 129.913795][ T6957] xfrm_user_rcv_msg+0x7a3/0xab0 [ 129.913818][ T6957] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 129.913866][ T6957] ? __pfx___mutex_trylock_common+0x10/0x10 [ 129.913888][ T6957] ? rcu_is_watching+0x15/0xb0 [ 129.913906][ T6957] ? trace_contention_end+0x39/0x100 [ 129.913923][ T6957] ? __mutex_lock+0x335/0x1350 [ 129.913949][ T6957] netlink_rcv_skb+0x208/0x470 [ 129.913966][ T6957] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 129.913988][ T6957] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 129.914016][ T6957] ? netlink_deliver_tap+0x2e/0x1b0 [ 129.914030][ T6957] ? netlink_deliver_tap+0x2e/0x1b0 [ 129.914047][ T6957] xfrm_netlink_rcv+0x79/0x90 [ 129.914065][ T6957] netlink_unicast+0x82f/0x9e0 [ 129.914094][ T6957] ? __pfx_netlink_unicast+0x10/0x10 [ 129.914119][ T6957] ? netlink_sendmsg+0x642/0xb30 [ 129.914133][ T6957] ? skb_put+0x11b/0x210 [ 129.914158][ T6957] netlink_sendmsg+0x805/0xb30 [ 129.914183][ T6957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.914203][ T6957] ? aa_sock_msg_perm+0xf1/0x1b0 [ 129.914220][ T6957] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 129.914242][ T6957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.914258][ T6957] __sock_sendmsg+0x21c/0x270 [ 129.914281][ T6957] ____sys_sendmsg+0x505/0x820 [ 129.914311][ T6957] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.914343][ T6957] ? import_iovec+0x74/0xa0 [ 129.914369][ T6957] ___sys_sendmsg+0x21f/0x2a0 [ 129.914387][ T6957] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.914440][ T6957] ? __fget_files+0x2a/0x420 [ 129.914454][ T6957] ? __fget_files+0x3a0/0x420 [ 129.914480][ T6957] __x64_sys_sendmsg+0x19b/0x260 [ 129.914499][ T6957] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 129.914511][ T6957] ? perf_trace_preemptirq_template+0xa3/0x340 [ 129.914541][ T6957] ? __pfx_ksys_write+0x10/0x10 [ 129.914565][ T6957] ? do_syscall_64+0xbe/0xf80 [ 129.914588][ T6957] do_syscall_64+0xfa/0xf80 [ 129.914608][ T6957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.914623][ T6957] ? clear_bhb_loop+0x60/0xb0 [ 129.914643][ T6957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.914665][ T6957] RIP: 0033:0x7f2e6fd8f749 [ 129.914681][ T6957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.914693][ T6957] RSP: 002b:00007f2e70beb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.914711][ T6957] RAX: ffffffffffffffda RBX: 00007f2e6ffe5fa0 RCX: 00007f2e6fd8f749 [ 129.914723][ T6957] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 129.914731][ T6957] RBP: 00007f2e70beb090 R08: 0000000000000000 R09: 0000000000000000 [ 129.914741][ T6957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.914750][ T6957] R13: 00007f2e6ffe6038 R14: 00007f2e6ffe5fa0 R15: 00007ffe6cb02e58 [ 129.914780][ T6957] [ 130.506643][ T6962] netlink: 292 bytes leftover after parsing attributes in process `syz.4.311'. [ 130.641775][ T6949] ipvlan1: entered promiscuous mode [ 130.650147][ T6949] ipvlan1: entered allmulticast mode [ 130.655556][ T6949] veth0_vlan: entered allmulticast mode [ 130.671716][ T6949] bridge0: port 3(ipvlan1) entered blocking state [ 130.678859][ T6949] bridge0: port 3(ipvlan1) entered disabled state [ 130.689036][ T6949] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 131.529846][ T6997] sctp: [Deprecated]: syz.0.319 (pid 6997) Use of struct sctp_assoc_value in delayed_ack socket option. [ 131.529846][ T6997] Use struct sctp_sack_info instead [ 131.560929][ T7002] netlink: 830 bytes leftover after parsing attributes in process `syz.3.322'. [ 131.696436][ T7010] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 131.800233][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.325'. [ 131.822008][ T7013] netlink: 'syz.4.324': attribute type 10 has an invalid length. [ 131.833834][ T7013] netlink: 40 bytes leftover after parsing attributes in process `syz.4.324'. [ 131.855953][ T7013] ipvlan1: entered promiscuous mode [ 131.861507][ T7013] ipvlan1: entered allmulticast mode [ 131.872883][ T7013] veth0_vlan: entered allmulticast mode [ 131.898710][ T7013] bridge0: port 3(ipvlan1) entered blocking state [ 131.943036][ T7013] bridge0: port 3(ipvlan1) entered disabled state [ 132.000770][ T7013] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 132.111058][ T7020] wg1 speed is unknown, defaulting to 1000 [ 132.153996][ T7020] wg1 speed is unknown, defaulting to 1000 [ 132.191155][ T7020] wg1 speed is unknown, defaulting to 1000 [ 132.294838][ T7028] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.330'. [ 132.326455][ T7028] xt_l2tp: missing protocol rule (udp|l2tpip) [ 132.846804][ T7020] infiniband syz1: set active [ 132.852356][ T7020] infiniband syz1: added wg1 [ 132.902107][ T7036] netlink: 36 bytes leftover after parsing attributes in process `syz.0.331'. [ 132.913803][ T7020] RDS/IB: syz1: added [ 132.921354][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.932090][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.943228][ T7020] smc: adding ib device syz1 with port count 1 [ 132.949519][ T7020] smc: ib device syz1 port 1 has no pnetid [ 134.992358][ T6448] wg1 speed is unknown, defaulting to 1000 [ 135.006696][ T5953] wg1 speed is unknown, defaulting to 1000 [ 135.012907][ T7020] wg1 speed is unknown, defaulting to 1000 [ 135.430762][ T7020] wg1 speed is unknown, defaulting to 1000 [ 135.693344][ T7056] netlink: 96 bytes leftover after parsing attributes in process `syz.4.338'. [ 135.807135][ T7056] netlink: 36 bytes leftover after parsing attributes in process `syz.4.338'. [ 135.818610][ T7056] netlink: 36 bytes leftover after parsing attributes in process `syz.4.338'. [ 135.830028][ T7056] netlink: 36 bytes leftover after parsing attributes in process `syz.4.338'. [ 135.980572][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.340'. [ 136.000396][ T7056] netlink: 36 bytes leftover after parsing attributes in process `syz.4.338'. [ 136.038406][ T7056] netlink: 36 bytes leftover after parsing attributes in process `syz.4.338'. [ 136.048072][ T7056] netlink: 36 bytes leftover after parsing attributes in process `syz.4.338'. [ 136.184973][ T7020] wg1 speed is unknown, defaulting to 1000 [ 136.312735][ T7075] netlink: 'syz.1.342': attribute type 3 has an invalid length. [ 136.320705][ T7075] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.342'. [ 136.915351][ T7092] netlink: 'syz.4.344': attribute type 13 has an invalid length. [ 137.670671][ T7020] wg1 speed is unknown, defaulting to 1000 [ 137.711419][ T7101] delete_channel: no stack [ 137.722339][ T7101] delete_channel: no stack [ 138.238690][ T7020] wg1 speed is unknown, defaulting to 1000 [ 138.499214][ T7131] FAULT_INJECTION: forcing a failure. [ 138.499214][ T7131] name failslab, interval 1, probability 0, space 0, times 0 [ 138.513798][ T7131] CPU: 0 UID: 0 PID: 7131 Comm: syz.1.357 Not tainted syzkaller #0 PREEMPT(full) [ 138.513822][ T7131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 138.513832][ T7131] Call Trace: [ 138.513839][ T7131] [ 138.513846][ T7131] dump_stack_lvl+0x189/0x250 [ 138.513879][ T7131] ? __pfx____ratelimit+0x10/0x10 [ 138.513900][ T7131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.513919][ T7131] ? __pfx__printk+0x10/0x10 [ 138.513949][ T7131] ? __pfx___might_resched+0x10/0x10 [ 138.513973][ T7131] should_fail_ex+0x414/0x560 [ 138.514000][ T7131] should_failslab+0xa8/0x100 [ 138.514025][ T7131] __kmalloc_cache_noprof+0x6f/0x6f0 [ 138.514046][ T7131] ? dev_ingress_queue_create+0xfe/0x190 [ 138.514075][ T7131] dev_ingress_queue_create+0xfe/0x190 [ 138.514098][ T7131] tc_modify_qdisc+0x5b8/0x2020 [ 138.514119][ T7131] ? trace_contention_end+0x39/0x100 [ 138.514152][ T7131] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 138.514212][ T7131] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 138.514232][ T7131] rtnetlink_rcv_msg+0x77c/0xb70 [ 138.514261][ T7131] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 138.514282][ T7131] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 138.514302][ T7131] ? ref_tracker_free+0x63a/0x7d0 [ 138.514323][ T7131] ? __asan_memcpy+0x40/0x70 [ 138.514341][ T7131] ? __pfx_ref_tracker_free+0x10/0x10 [ 138.514358][ T7131] ? __skb_clone+0x63/0x7a0 [ 138.514388][ T7131] netlink_rcv_skb+0x208/0x470 [ 138.514407][ T7131] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 138.514432][ T7131] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 138.514462][ T7131] ? netlink_deliver_tap+0x2e/0x1b0 [ 138.514487][ T7131] netlink_unicast+0x82f/0x9e0 [ 138.514518][ T7131] ? __pfx_netlink_unicast+0x10/0x10 [ 138.514543][ T7131] ? netlink_sendmsg+0x642/0xb30 [ 138.514558][ T7131] ? skb_put+0x11b/0x210 [ 138.514585][ T7131] netlink_sendmsg+0x805/0xb30 [ 138.514616][ T7131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.514638][ T7131] ? aa_sock_msg_perm+0xf1/0x1b0 [ 138.514658][ T7131] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 138.514680][ T7131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.514699][ T7131] __sock_sendmsg+0x21c/0x270 [ 138.514723][ T7131] ____sys_sendmsg+0x505/0x820 [ 138.514755][ T7131] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.514792][ T7131] ? import_iovec+0x74/0xa0 [ 138.514820][ T7131] ___sys_sendmsg+0x21f/0x2a0 [ 138.514839][ T7131] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.514872][ T7131] ? rcu_read_lock_any_held+0xb3/0x120 [ 138.514928][ T7131] ? __fget_files+0x2a/0x420 [ 138.514943][ T7131] ? __fget_files+0x3a0/0x420 [ 138.514973][ T7131] __x64_sys_sendmsg+0x19b/0x260 [ 138.514994][ T7131] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 138.515007][ T7131] ? perf_trace_preemptirq_template+0xa3/0x340 [ 138.515041][ T7131] ? __pfx_ksys_write+0x10/0x10 [ 138.515067][ T7131] ? do_syscall_64+0xbe/0xf80 [ 138.515093][ T7131] do_syscall_64+0xfa/0xf80 [ 138.515115][ T7131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.515131][ T7131] ? clear_bhb_loop+0x60/0xb0 [ 138.515158][ T7131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.515174][ T7131] RIP: 0033:0x7ff47e58f749 [ 138.515190][ T7131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.515203][ T7131] RSP: 002b:00007ff47f4bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.515221][ T7131] RAX: ffffffffffffffda RBX: 00007ff47e7e5fa0 RCX: 00007ff47e58f749 [ 138.515233][ T7131] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003 [ 138.515248][ T7131] RBP: 00007ff47f4bd090 R08: 0000000000000000 R09: 0000000000000000 [ 138.515257][ T7131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.515267][ T7131] R13: 00007ff47e7e6038 R14: 00007ff47e7e5fa0 R15: 00007ffd6c1d13c8 [ 138.515303][ T7131] [ 138.522817][ T7132] netlink: 'syz.3.356': attribute type 39 has an invalid length. [ 138.727330][ T7134] __nla_validate_parse: 4 callbacks suppressed [ 138.727348][ T7134] netlink: 48 bytes leftover after parsing attributes in process `syz.1.358'. [ 138.946511][ T7132] veth0_macvtap: left promiscuous mode [ 139.754621][ T7176] netlink: 'syz.3.373': attribute type 2 has an invalid length. [ 139.845043][ T7176] : entered promiscuous mode [ 140.061334][ T7183] FAULT_INJECTION: forcing a failure. [ 140.061334][ T7183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.092972][ T7183] CPU: 1 UID: 0 PID: 7183 Comm: syz.4.375 Not tainted syzkaller #0 PREEMPT(full) [ 140.092996][ T7183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 140.093006][ T7183] Call Trace: [ 140.093013][ T7183] [ 140.093020][ T7183] dump_stack_lvl+0x189/0x250 [ 140.093043][ T7183] ? __pfx____ratelimit+0x10/0x10 [ 140.093064][ T7183] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.093080][ T7183] ? __pfx__printk+0x10/0x10 [ 140.093113][ T7183] should_fail_ex+0x414/0x560 [ 140.093137][ T7183] _copy_from_user+0x2d/0xb0 [ 140.093158][ T7183] __sys_bpf+0x1f2/0x8a0 [ 140.093177][ T7183] ? __pfx___sys_bpf+0x10/0x10 [ 140.093205][ T7183] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 140.093220][ T7183] ? ksys_write+0x22a/0x250 [ 140.093240][ T7183] ? __pfx_ksys_write+0x10/0x10 [ 140.093263][ T7183] __x64_sys_bpf+0x7c/0x90 [ 140.093278][ T7183] do_syscall_64+0xfa/0xf80 [ 140.093297][ T7183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.093313][ T7183] ? clear_bhb_loop+0x60/0xb0 [ 140.093331][ T7183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.093346][ T7183] RIP: 0033:0x7f2e6fd8f749 [ 140.093360][ T7183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.093374][ T7183] RSP: 002b:00007f2e70beb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 140.093390][ T7183] RAX: ffffffffffffffda RBX: 00007f2e6ffe5fa0 RCX: 00007f2e6fd8f749 [ 140.093401][ T7183] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 140.093409][ T7183] RBP: 00007f2e70beb090 R08: 0000000000000000 R09: 0000000000000000 [ 140.093418][ T7183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.093425][ T7183] R13: 00007f2e6ffe6038 R14: 00007f2e6ffe5fa0 R15: 00007ffe6cb02e58 [ 140.093452][ T7183] [ 140.401900][ T7190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.378'. [ 140.519964][ T7194] netlink: 'syz.2.380': attribute type 10 has an invalid length. [ 140.528079][ T7194] netlink: 55 bytes leftover after parsing attributes in process `syz.2.380'. [ 140.628423][ T7197] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 140.752512][ T7196] netlink: 'syz.3.381': attribute type 6 has an invalid length. [ 140.763345][ T7196] netlink: 'syz.3.381': attribute type 4 has an invalid length. [ 140.782111][ T7201] netlink: zone id is out of range [ 140.796816][ T7201] netlink: get zone limit has 4 unknown bytes [ 140.802726][ T7196] netlink: 'syz.3.381': attribute type 6 has an invalid length. [ 140.826377][ T7196] netlink: 'syz.3.381': attribute type 5 has an invalid length. [ 140.850881][ T7196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.381'. [ 141.006483][ T7213] netlink: 'syz.0.385': attribute type 29 has an invalid length. [ 141.216194][ T7219] FAULT_INJECTION: forcing a failure. [ 141.216194][ T7219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.260684][ T7219] CPU: 1 UID: 0 PID: 7219 Comm: syz.0.387 Not tainted syzkaller #0 PREEMPT(full) [ 141.260708][ T7219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 141.260719][ T7219] Call Trace: [ 141.260725][ T7219] [ 141.260733][ T7219] dump_stack_lvl+0x189/0x250 [ 141.260756][ T7219] ? __pfx____ratelimit+0x10/0x10 [ 141.260776][ T7219] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.260793][ T7219] ? __pfx__printk+0x10/0x10 [ 141.260813][ T7219] ? __might_fault+0xb0/0x130 [ 141.260851][ T7219] should_fail_ex+0x414/0x560 [ 141.260876][ T7219] _copy_from_user+0x2d/0xb0 [ 141.260898][ T7219] ___sys_recvmsg+0x12e/0x510 [ 141.260920][ T7219] ? __pfx____sys_recvmsg+0x10/0x10 [ 141.260958][ T7219] ? __fget_files+0x3a0/0x420 [ 141.260985][ T7219] __x64_sys_recvmsg+0x198/0x260 [ 141.261004][ T7219] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 141.261025][ T7219] ? __pfx_ksys_write+0x10/0x10 [ 141.261048][ T7219] ? do_syscall_64+0xbe/0xf80 [ 141.261070][ T7219] do_syscall_64+0xfa/0xf80 [ 141.261089][ T7219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.261105][ T7219] ? clear_bhb_loop+0x60/0xb0 [ 141.261124][ T7219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.261140][ T7219] RIP: 0033:0x7f617ed8f749 [ 141.261155][ T7219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.261168][ T7219] RSP: 002b:00007f617fb6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 141.261185][ T7219] RAX: ffffffffffffffda RBX: 00007f617efe5fa0 RCX: 00007f617ed8f749 [ 141.261196][ T7219] RDX: 0000000040002100 RSI: 0000200000000000 RDI: 0000000000000003 [ 141.261206][ T7219] RBP: 00007f617fb6f090 R08: 0000000000000000 R09: 0000000000000000 [ 141.261216][ T7219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.261226][ T7219] R13: 00007f617efe6038 R14: 00007f617efe5fa0 R15: 00007ffd4afc4998 [ 141.261251][ T7219] [ 141.553222][ T7229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.391'. [ 141.603961][ T7226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.390'. [ 141.620395][ T7220] validate_nla: 2 callbacks suppressed [ 141.620413][ T7220] netlink: 'syz.2.388': attribute type 13 has an invalid length. [ 141.743855][ T10] wg1 speed is unknown, defaulting to 1000 [ 141.975586][ T7246] bridge_slave_1: left allmulticast mode [ 141.983778][ T7246] bridge_slave_1: left promiscuous mode [ 142.018236][ T7245] netlink: 2 bytes leftover after parsing attributes in process `syz.0.396'. [ 142.024345][ T7246] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.089990][ T7246] bridge_slave_0: left allmulticast mode [ 142.096294][ T7246] bridge_slave_0: left promiscuous mode [ 142.108315][ T7246] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.277319][ T7245] batadv_slave_1: entered promiscuous mode [ 142.373006][ T7252] lo speed is unknown, defaulting to 1000 [ 142.412899][ T7259] netlink: 60 bytes leftover after parsing attributes in process `syz.0.401'. [ 142.478139][ T7259] netlink: 60 bytes leftover after parsing attributes in process `syz.0.401'. [ 142.524057][ T7261] netlink: 60 bytes leftover after parsing attributes in process `syz.2.402'. [ 142.545166][ T7262] FAULT_INJECTION: forcing a failure. [ 142.545166][ T7262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.583558][ T7262] CPU: 0 UID: 0 PID: 7262 Comm: syz.2.402 Not tainted syzkaller #0 PREEMPT(full) [ 142.583581][ T7262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 142.583591][ T7262] Call Trace: [ 142.583599][ T7262] [ 142.583606][ T7262] dump_stack_lvl+0x189/0x250 [ 142.583630][ T7262] ? __pfx____ratelimit+0x10/0x10 [ 142.583651][ T7262] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.583668][ T7262] ? __pfx__printk+0x10/0x10 [ 142.583690][ T7262] ? __might_fault+0xb0/0x130 [ 142.583725][ T7262] should_fail_ex+0x414/0x560 [ 142.583750][ T7262] _copy_from_user+0x2d/0xb0 [ 142.583774][ T7262] ___sys_recvmsg+0x12e/0x510 [ 142.583792][ T7262] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 142.583815][ T7262] ? __pfx____sys_recvmsg+0x10/0x10 [ 142.583862][ T7262] ? __fget_files+0x3a0/0x420 [ 142.583891][ T7262] __x64_sys_recvmsg+0x198/0x260 [ 142.583912][ T7262] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 142.583925][ T7262] ? perf_trace_preemptirq_template+0xa3/0x340 [ 142.583954][ T7262] ? __pfx_ksys_write+0x10/0x10 [ 142.583977][ T7262] ? do_syscall_64+0xbe/0xf80 [ 142.584002][ T7262] do_syscall_64+0xfa/0xf80 [ 142.584024][ T7262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.584040][ T7262] ? clear_bhb_loop+0x60/0xb0 [ 142.584061][ T7262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.584077][ T7262] RIP: 0033:0x7f110b78f749 [ 142.584092][ T7262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.584106][ T7262] RSP: 002b:00007f110c643038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 142.584124][ T7262] RAX: ffffffffffffffda RBX: 00007f110b9e6090 RCX: 00007f110b78f749 [ 142.584136][ T7262] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 142.584146][ T7262] RBP: 00007f110c643090 R08: 0000000000000000 R09: 0000000000000000 [ 142.584155][ T7262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.584165][ T7262] R13: 00007f110b9e6128 R14: 00007f110b9e6090 R15: 00007ffcf491c468 [ 142.584198][ T7262] [ 143.000590][ T7272] FAULT_INJECTION: forcing a failure. [ 143.000590][ T7272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.037776][ T7272] CPU: 1 UID: 0 PID: 7272 Comm: syz.2.405 Not tainted syzkaller #0 PREEMPT(full) [ 143.037801][ T7272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 143.037811][ T7272] Call Trace: [ 143.037818][ T7272] [ 143.037826][ T7272] dump_stack_lvl+0x189/0x250 [ 143.037849][ T7272] ? __pfx____ratelimit+0x10/0x10 [ 143.037871][ T7272] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.037889][ T7272] ? __pfx__printk+0x10/0x10 [ 143.037911][ T7272] ? __might_fault+0xb0/0x130 [ 143.037946][ T7272] should_fail_ex+0x414/0x560 [ 143.037972][ T7272] _copy_from_user+0x2d/0xb0 [ 143.037995][ T7272] ___sys_sendmsg+0x158/0x2a0 [ 143.038016][ T7272] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.038041][ T7272] ? rcu_read_lock_any_held+0xb3/0x120 [ 143.038089][ T7272] ? __fget_files+0x2a/0x420 [ 143.038103][ T7272] ? __fget_files+0x3a0/0x420 [ 143.038126][ T7272] __x64_sys_sendmsg+0x19b/0x260 [ 143.038144][ T7272] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 143.038157][ T7272] ? perf_trace_preemptirq_template+0xa3/0x340 [ 143.038189][ T7272] ? __pfx_ksys_write+0x10/0x10 [ 143.038215][ T7272] ? do_syscall_64+0xbe/0xf80 [ 143.038240][ T7272] do_syscall_64+0xfa/0xf80 [ 143.038262][ T7272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.038278][ T7272] ? clear_bhb_loop+0x60/0xb0 [ 143.038299][ T7272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.038315][ T7272] RIP: 0033:0x7f110b78f749 [ 143.038330][ T7272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.038344][ T7272] RSP: 002b:00007f110c643038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.038362][ T7272] RAX: ffffffffffffffda RBX: 00007f110b9e6090 RCX: 00007f110b78f749 [ 143.038372][ T7272] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 143.038381][ T7272] RBP: 00007f110c643090 R08: 0000000000000000 R09: 0000000000000000 [ 143.038390][ T7272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.038407][ T7272] R13: 00007f110b9e6128 R14: 00007f110b9e6090 R15: 00007ffcf491c468 [ 143.038437][ T7272] [ 143.097258][ T7252] wg1 speed is unknown, defaulting to 1000 [ 143.634933][ T7287] netlink: 'syz.2.408': attribute type 13 has an invalid length. [ 144.282392][ T7299] __nla_validate_parse: 1 callbacks suppressed [ 144.282425][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.412'. [ 144.289753][ T7301] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 144.351122][ T7301] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 144.361273][ T7302] netlink: 32 bytes leftover after parsing attributes in process `syz.2.412'. [ 144.442932][ T7309] FAULT_INJECTION: forcing a failure. [ 144.442932][ T7309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.516422][ T7309] CPU: 1 UID: 0 PID: 7309 Comm: syz.0.415 Not tainted syzkaller #0 PREEMPT(full) [ 144.516445][ T7309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 144.516455][ T7309] Call Trace: [ 144.516462][ T7309] [ 144.516470][ T7309] dump_stack_lvl+0x189/0x250 [ 144.516493][ T7309] ? __pfx____ratelimit+0x10/0x10 [ 144.516521][ T7309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.516539][ T7309] ? __pfx__printk+0x10/0x10 [ 144.516563][ T7309] ? __might_fault+0xb0/0x130 [ 144.516587][ T7309] ? __might_fault+0xb0/0x130 [ 144.516615][ T7309] should_fail_ex+0x414/0x560 [ 144.516642][ T7309] _copy_from_user+0x2d/0xb0 [ 144.516667][ T7309] ___sys_sendmsg+0x158/0x2a0 [ 144.516688][ T7309] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.516737][ T7309] ? __fget_files+0x2a/0x420 [ 144.516771][ T7309] ? __fget_files+0x2a/0x420 [ 144.516785][ T7309] ? __fget_files+0x3a0/0x420 [ 144.516816][ T7309] __x64_sys_sendmsg+0x19b/0x260 [ 144.516831][ T7309] ? lockdep_hardirqs_on+0x98/0x140 [ 144.516853][ T7309] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 144.516897][ T7309] do_syscall_64+0xfa/0xf80 [ 144.516917][ T7309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.516932][ T7309] ? clear_bhb_loop+0x60/0xb0 [ 144.516953][ T7309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.516968][ T7309] RIP: 0033:0x7f617ed8f749 [ 144.516982][ T7309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.516991][ T7309] RSP: 002b:00007f617fb6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.517005][ T7309] RAX: ffffffffffffffda RBX: 00007f617efe5fa0 RCX: 00007f617ed8f749 [ 144.517013][ T7309] RDX: 0000000000008000 RSI: 00002000000007c0 RDI: 0000000000000007 [ 144.517021][ T7309] RBP: 00007f617fb6f090 R08: 0000000000000000 R09: 0000000000000000 [ 144.517028][ T7309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.517034][ T7309] R13: 00007f617efe6038 R14: 00007f617efe5fa0 R15: 00007ffd4afc4998 [ 144.517062][ T7309] [ 145.247317][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.418'. [ 145.947749][ T7340] netlink: 84 bytes leftover after parsing attributes in process `syz.0.423'. [ 145.969059][ T7337] netlink: 'syz.4.422': attribute type 13 has an invalid length. [ 146.095417][ T7340] netlink: 'syz.0.423': attribute type 21 has an invalid length. [ 146.188152][ T7340] netlink: 128 bytes leftover after parsing attributes in process `syz.0.423'. [ 146.253899][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.423'. [ 146.442228][ T7340] netlink: 'syz.0.423': attribute type 4 has an invalid length. [ 146.696448][ T7354] netlink: 2060 bytes leftover after parsing attributes in process `syz.3.427'. [ 146.775158][ T7354] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.427'. [ 147.397075][ T7365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.432'. [ 147.602939][ T7372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.434'. [ 149.536597][ T7386] syz.1.438 uses obsolete (PF_INET,SOCK_PACKET) [ 149.651475][ T7390] netlink: 132 bytes leftover after parsing attributes in process `syz.2.439'. [ 149.687181][ T7390] FAULT_INJECTION: forcing a failure. [ 149.687181][ T7390] name failslab, interval 1, probability 0, space 0, times 0 [ 149.713769][ T7393] netlink: 'syz.3.441': attribute type 2 has an invalid length. [ 149.716331][ T7390] CPU: 1 UID: 0 PID: 7390 Comm: syz.2.439 Not tainted syzkaller #0 PREEMPT(full) [ 149.716353][ T7390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 149.716363][ T7390] Call Trace: [ 149.716369][ T7390] [ 149.716376][ T7390] dump_stack_lvl+0x189/0x250 [ 149.716399][ T7390] ? __pfx____ratelimit+0x10/0x10 [ 149.716420][ T7390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.716437][ T7390] ? __pfx__printk+0x10/0x10 [ 149.716469][ T7390] should_fail_ex+0x414/0x560 [ 149.716493][ T7390] should_failslab+0xa8/0x100 [ 149.716518][ T7390] kmem_cache_alloc_noprof+0x74/0x6f0 [ 149.716537][ T7390] ? skb_clone+0x212/0x3a0 [ 149.716559][ T7390] skb_clone+0x212/0x3a0 [ 149.716577][ T7390] __netlink_deliver_tap+0x404/0x850 [ 149.716606][ T7390] ? netlink_deliver_tap+0x2e/0x1b0 [ 149.716623][ T7390] netlink_deliver_tap+0x19c/0x1b0 [ 149.716640][ T7390] netlink_sendskb+0x68/0x140 [ 149.716664][ T7390] netlink_unicast+0x397/0x9e0 [ 149.716683][ T7390] ? __asan_memcpy+0x40/0x70 [ 149.716709][ T7390] ? __pfx_netlink_unicast+0x10/0x10 [ 149.716740][ T7390] netlink_rcv_skb+0x28c/0x470 [ 149.716756][ T7390] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 149.716780][ T7390] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 149.716806][ T7390] ? netlink_deliver_tap+0x2e/0x1b0 [ 149.716830][ T7390] netlink_unicast+0x82f/0x9e0 [ 149.716861][ T7390] ? __pfx_netlink_unicast+0x10/0x10 [ 149.716883][ T7390] ? netlink_sendmsg+0x642/0xb30 [ 149.716898][ T7390] ? skb_put+0x11b/0x210 [ 149.716922][ T7390] netlink_sendmsg+0x805/0xb30 [ 149.716948][ T7390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.716967][ T7390] ? aa_sock_msg_perm+0xf1/0x1b0 [ 149.716991][ T7390] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 149.717012][ T7390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.717029][ T7390] __sock_sendmsg+0x21c/0x270 [ 149.717051][ T7390] ____sys_sendmsg+0x505/0x820 [ 149.717079][ T7390] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.717111][ T7390] ? import_iovec+0x74/0xa0 [ 149.717136][ T7390] ___sys_sendmsg+0x21f/0x2a0 [ 149.717154][ T7390] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.717175][ T7390] ? rcu_read_lock_any_held+0xb3/0x120 [ 149.717221][ T7390] ? __fget_files+0x2a/0x420 [ 149.717234][ T7390] ? __fget_files+0x3a0/0x420 [ 149.717259][ T7390] __x64_sys_sendmsg+0x19b/0x260 [ 149.717276][ T7390] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 149.717301][ T7390] ? __pfx_ksys_write+0x10/0x10 [ 149.717327][ T7390] ? do_syscall_64+0xbe/0xf80 [ 149.717351][ T7390] do_syscall_64+0xfa/0xf80 [ 149.717371][ T7390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.717386][ T7390] ? clear_bhb_loop+0x60/0xb0 [ 149.717406][ T7390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.717421][ T7390] RIP: 0033:0x7f110b78f749 [ 149.717435][ T7390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.717448][ T7390] RSP: 002b:00007f110c664038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.717465][ T7390] RAX: ffffffffffffffda RBX: 00007f110b9e5fa0 RCX: 00007f110b78f749 [ 149.717475][ T7390] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000008 [ 149.717485][ T7390] RBP: 00007f110c664090 R08: 0000000000000000 R09: 0000000000000000 [ 149.717494][ T7390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.717503][ T7390] R13: 00007f110b9e6038 R14: 00007f110b9e5fa0 R15: 00007ffcf491c468 [ 149.717531][ T7390] [ 150.026921][ T7405] netlink: 763 bytes leftover after parsing attributes in process `syz.2.444'. [ 150.120704][ T7409] IPv6: NLM_F_CREATE should be specified when creating new route [ 150.520913][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.445'. [ 151.186983][ T7428] netlink: 2 bytes leftover after parsing attributes in process `syz.4.451'. [ 151.218165][ T7428] batadv_slave_1: entered promiscuous mode [ 151.281773][ T7431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.449'. [ 151.815497][ T7448] netlink: 'syz.3.456': attribute type 12 has an invalid length. [ 151.842127][ T7449] netlink: 'syz.4.454': attribute type 10 has an invalid length. [ 151.851220][ T7448] netlink: 132 bytes leftover after parsing attributes in process `syz.3.456'. [ 151.863541][ T7449] netlink: 'syz.4.454': attribute type 16 has an invalid length. [ 151.883073][ T7447] netlink: 'syz.0.457': attribute type 2 has an invalid length. [ 151.904301][ T7451] netlink: 68 bytes leftover after parsing attributes in process `syz.0.457'. [ 151.908991][ T7449] netlink: 156 bytes leftover after parsing attributes in process `syz.4.454'. [ 152.474212][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.461'. [ 152.543506][ T7466] FAULT_INJECTION: forcing a failure. [ 152.543506][ T7466] name failslab, interval 1, probability 0, space 0, times 0 [ 152.562660][ T7466] CPU: 1 UID: 0 PID: 7466 Comm: syz.2.462 Not tainted syzkaller #0 PREEMPT(full) [ 152.562684][ T7466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 152.562693][ T7466] Call Trace: [ 152.562705][ T7466] [ 152.562717][ T7466] dump_stack_lvl+0x189/0x250 [ 152.562753][ T7466] ? __pfx____ratelimit+0x10/0x10 [ 152.562790][ T7466] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.562824][ T7466] ? __pfx__printk+0x10/0x10 [ 152.562908][ T7466] ? __pfx___might_resched+0x10/0x10 [ 152.562970][ T7466] should_fail_ex+0x414/0x560 [ 152.563042][ T7466] should_failslab+0xa8/0x100 [ 152.563088][ T7466] kmem_cache_alloc_noprof+0x74/0x6f0 [ 152.563124][ T7466] ? __pmd_alloc+0xc2/0x540 [ 152.563189][ T7466] __pmd_alloc+0xc2/0x540 [ 152.563263][ T7466] __handle_mm_fault+0x9ad/0x5420 [ 152.563412][ T7466] ? __pfx___handle_mm_fault+0x10/0x10 [ 152.563599][ T7466] ? find_vma+0xe7/0x160 [ 152.563629][ T7466] ? __pfx_find_vma+0x10/0x10 [ 152.563680][ T7466] handle_mm_fault+0x40a/0x8e0 [ 152.563792][ T7466] do_user_addr_fault+0x764/0x1380 [ 152.563948][ T7466] exc_page_fault+0x82/0x100 [ 152.564006][ T7466] asm_exc_page_fault+0x26/0x30 [ 152.564025][ T7466] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 152.564041][ T7466] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 8d 48 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 152.564054][ T7466] RSP: 0018:ffffc900036f7d18 EFLAGS: 00050246 [ 152.564070][ T7466] RAX: 00007ffffffff001 RBX: 0000000000000008 RCX: 0000000000000008 [ 152.564081][ T7466] RDX: 0000000000000001 RSI: 000000110c2300fe RDI: ffffc900036f7e10 [ 152.564092][ T7466] RBP: ffffc900036f7e98 R08: ffffc900036f7e17 R09: 1ffff920006defc2 [ 152.564104][ T7466] R10: dffffc0000000000 R11: fffff520006defc3 R12: 000000110c2300fe [ 152.564115][ T7466] R13: ffff888033361680 R14: ffffc900036f7e10 R15: 000000110c2300fe [ 152.564261][ T7466] _copy_from_user+0x7a/0xb0 [ 152.564303][ T7466] pidfd_ioctl+0x34e/0x32d0 [ 152.564389][ T7466] ? __pfx_pidfd_ioctl+0x10/0x10 [ 152.564516][ T7466] ? __fget_files+0x3a0/0x420 [ 152.564537][ T7466] ? __fget_files+0x2a/0x420 [ 152.564593][ T7466] ? bpf_lsm_file_ioctl+0x9/0x20 [ 152.564620][ T7466] ? __pfx_pidfd_ioctl+0x10/0x10 [ 152.564659][ T7466] __se_sys_ioctl+0xfc/0x170 [ 152.564716][ T7466] do_syscall_64+0xfa/0xf80 [ 152.564757][ T7466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.564778][ T7466] ? clear_bhb_loop+0x60/0xb0 [ 152.564831][ T7466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.564850][ T7466] RIP: 0033:0x7f110b78f749 [ 152.564876][ T7466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.564889][ T7466] RSP: 002b:00007f110c664038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.564904][ T7466] RAX: ffffffffffffffda RBX: 00007f110b9e5fa0 RCX: 00007f110b78f749 [ 152.564915][ T7466] RDX: 000000110c2300fe RSI: 00000000c040ff0b RDI: 0000000000000006 [ 152.564926][ T7466] RBP: 00007f110c664090 R08: 0000000000000000 R09: 0000000000000000 [ 152.564935][ T7466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.564944][ T7466] R13: 00007f110b9e6038 R14: 00007f110b9e5fa0 R15: 00007ffcf491c468 [ 152.565096][ T7466] [ 153.054711][ T7472] netlink: 'syz.4.464': attribute type 2 has an invalid length. [ 153.073241][ T7474] netlink: 2 bytes leftover after parsing attributes in process `syz.1.465'. [ 153.135292][ T7472] : entered promiscuous mode [ 153.142115][ T7474] batadv_slave_1: entered promiscuous mode [ 153.714124][ T7507] netlink: 'syz.2.474': attribute type 13 has an invalid length. [ 153.920910][ T7512] FAULT_INJECTION: forcing a failure. [ 153.920910][ T7512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.936425][ T7512] CPU: 0 UID: 0 PID: 7512 Comm: syz.4.478 Not tainted syzkaller #0 PREEMPT(full) [ 153.936449][ T7512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 153.936459][ T7512] Call Trace: [ 153.936465][ T7512] [ 153.936473][ T7512] dump_stack_lvl+0x189/0x250 [ 153.936500][ T7512] ? __pfx____ratelimit+0x10/0x10 [ 153.936521][ T7512] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.936539][ T7512] ? __pfx__printk+0x10/0x10 [ 153.936560][ T7512] ? __might_fault+0xb0/0x130 [ 153.936591][ T7512] should_fail_ex+0x414/0x560 [ 153.936615][ T7512] _copy_from_user+0x2d/0xb0 [ 153.936645][ T7512] sock_do_ioctl+0x182/0x300 [ 153.936664][ T7512] ? irqentry_exit+0x5dd/0x660 [ 153.936686][ T7512] ? __pfx_sock_do_ioctl+0x10/0x10 [ 153.936717][ T7512] ? irqentry_exit+0x5dd/0x660 [ 153.936741][ T7512] sock_ioctl+0x576/0x790 [ 153.936761][ T7512] ? __pfx_sock_ioctl+0x10/0x10 [ 153.936781][ T7512] ? __pfx_sock_ioctl+0x10/0x10 [ 153.936798][ T7512] ? __pfx_sock_ioctl+0x10/0x10 [ 153.936815][ T7512] ? __se_sys_ioctl+0xea/0x170 [ 153.936837][ T7512] ? __pfx_sock_ioctl+0x10/0x10 [ 153.936854][ T7512] __se_sys_ioctl+0xfc/0x170 [ 153.936876][ T7512] do_syscall_64+0xfa/0xf80 [ 153.936898][ T7512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.936914][ T7512] ? clear_bhb_loop+0x60/0xb0 [ 153.936934][ T7512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.936949][ T7512] RIP: 0033:0x7f2e6fd8f749 [ 153.936965][ T7512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.936979][ T7512] RSP: 002b:00007f2e70beb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.936996][ T7512] RAX: ffffffffffffffda RBX: 00007f2e6ffe5fa0 RCX: 00007f2e6fd8f749 [ 153.937008][ T7512] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000030 [ 153.937019][ T7512] RBP: 00007f2e70beb090 R08: 0000000000000000 R09: 0000000000000000 [ 153.937029][ T7512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.937038][ T7512] R13: 00007f2e6ffe6038 R14: 00007f2e6ffe5fa0 R15: 00007ffe6cb02e58 [ 153.937078][ T7512] [ 154.202475][ T7514] netlink: 'syz.3.477': attribute type 4 has an invalid length. [ 155.026747][ T7553] __nla_validate_parse: 5 callbacks suppressed [ 155.026779][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.490'. [ 155.513304][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.494'. [ 155.574244][ T7568] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 155.610223][ T7571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.493'. [ 155.776586][ T7574] netlink: 2 bytes leftover after parsing attributes in process `syz.3.496'. [ 155.792287][ T7574] batadv_slave_1: entered promiscuous mode [ 156.018588][ T7583] FAULT_INJECTION: forcing a failure. [ 156.018588][ T7583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.089610][ T7583] CPU: 1 UID: 0 PID: 7583 Comm: syz.2.498 Not tainted syzkaller #0 PREEMPT(full) [ 156.089633][ T7583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 156.089643][ T7583] Call Trace: [ 156.089652][ T7583] [ 156.089663][ T7583] dump_stack_lvl+0x189/0x250 [ 156.089693][ T7583] ? __pfx____ratelimit+0x10/0x10 [ 156.089722][ T7583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.089749][ T7583] ? __pfx__printk+0x10/0x10 [ 156.089796][ T7583] ? __might_fault+0xb0/0x130 [ 156.089851][ T7583] should_fail_ex+0x414/0x560 [ 156.089902][ T7583] _copy_to_user+0x31/0xb0 [ 156.089942][ T7583] simple_read_from_buffer+0xe1/0x170 [ 156.089995][ T7583] proc_fail_nth_read+0x1b3/0x220 [ 156.090038][ T7583] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 156.090082][ T7583] ? rw_verify_area+0x2a6/0x4d0 [ 156.090107][ T7583] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 156.090144][ T7583] vfs_read+0x200/0xa30 [ 156.090170][ T7583] ? fdget_pos+0x247/0x320 [ 156.090216][ T7583] ? __pfx___mutex_lock+0x10/0x10 [ 156.090246][ T7583] ? __pfx_vfs_read+0x10/0x10 [ 156.090285][ T7583] ? __fget_files+0x2a/0x420 [ 156.090327][ T7583] ? __fget_files+0x3a0/0x420 [ 156.090344][ T7583] ? __fget_files+0x2a/0x420 [ 156.090409][ T7583] ksys_read+0x145/0x250 [ 156.090449][ T7583] ? __pfx_ksys_read+0x10/0x10 [ 156.090495][ T7583] ? do_syscall_64+0xbe/0xf80 [ 156.090540][ T7583] do_syscall_64+0xfa/0xf80 [ 156.090571][ T7583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.090591][ T7583] ? clear_bhb_loop+0x60/0xb0 [ 156.090632][ T7583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.090650][ T7583] RIP: 0033:0x7f110b78e15c [ 156.090671][ T7583] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 156.090684][ T7583] RSP: 002b:00007f110c664030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 156.090702][ T7583] RAX: ffffffffffffffda RBX: 00007f110b9e5fa0 RCX: 00007f110b78e15c [ 156.090714][ T7583] RDX: 000000000000000f RSI: 00007f110c6640a0 RDI: 0000000000000006 [ 156.090724][ T7583] RBP: 00007f110c664090 R08: 0000000000000000 R09: 0000000000000000 [ 156.090734][ T7583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.090744][ T7583] R13: 00007f110b9e6038 R14: 00007f110b9e5fa0 R15: 00007ffcf491c468 [ 156.090840][ T7583] [ 156.557228][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.502'. [ 156.607605][ T7593] netlink: 'syz.4.502': attribute type 1 has an invalid length. [ 156.625790][ T7593] netlink: 'syz.4.502': attribute type 2 has an invalid length. [ 156.719561][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'. [ 156.757806][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'. [ 156.934467][ T7605] netlink: 'syz.1.506': attribute type 10 has an invalid length. [ 156.953810][ T7605] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.966381][ T7605] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.013199][ T7605] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.020992][ T7605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.029660][ T7605] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.037466][ T7605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.103230][ T7605] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 157.838930][ T7622] sock: sock_timestamping_bind_phc: sock not bind to device [ 158.020951][ T7626] netlink: 'syz.3.513': attribute type 2 has an invalid length. [ 158.586278][ T7641] netlink: 80 bytes leftover after parsing attributes in process `syz.4.519'. [ 158.754125][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.522'. [ 159.026136][ T7649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.451656][ T7670] netlink: 'syz.4.529': attribute type 13 has an invalid length. [ 160.259472][ T7683] siw: device registration error -23 [ 160.261976][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.535'. [ 160.277065][ T7687] netlink: 'syz.2.537': attribute type 10 has an invalid length. [ 160.295336][ T7687] netlink: 55 bytes leftover after parsing attributes in process `syz.2.537'. [ 160.305173][ T7688] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 160.495995][ T7700] netlink: 'syz.3.539': attribute type 10 has an invalid length. [ 160.523077][ T7700] netlink: 40 bytes leftover after parsing attributes in process `syz.3.539'. [ 160.580164][ T7700] bridge0: port 3(ipvlan1) entered blocking state [ 160.599280][ T7700] bridge0: port 3(ipvlan1) entered disabled state [ 160.628866][ T7700] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 161.107080][ T7724] netlink: 'syz.1.546': attribute type 1 has an invalid length. [ 161.123809][ T7724] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.546'. [ 161.241382][ T7728] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 161.440357][ T7735] FAULT_INJECTION: forcing a failure. [ 161.440357][ T7735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.516724][ T7735] CPU: 1 UID: 0 PID: 7735 Comm: syz.3.551 Not tainted syzkaller #0 PREEMPT(full) [ 161.516749][ T7735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 161.516759][ T7735] Call Trace: [ 161.516766][ T7735] [ 161.516774][ T7735] dump_stack_lvl+0x189/0x250 [ 161.516799][ T7735] ? __pfx____ratelimit+0x10/0x10 [ 161.516821][ T7735] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.516840][ T7735] ? __pfx__printk+0x10/0x10 [ 161.516863][ T7735] ? __might_fault+0xb0/0x130 [ 161.516888][ T7735] ? __might_fault+0xb0/0x130 [ 161.516915][ T7735] should_fail_ex+0x414/0x560 [ 161.516942][ T7735] _copy_from_iter+0x1cd/0x1630 [ 161.516970][ T7735] ? __build_skb_around+0x22d/0x3c0 [ 161.517001][ T7735] ? __pfx__copy_from_iter+0x10/0x10 [ 161.517019][ T7735] ? __alloc_skb+0x2f1/0x430 [ 161.517045][ T7735] ? __pfx___alloc_skb+0x10/0x10 [ 161.517072][ T7735] ? skb_put+0x11b/0x210 [ 161.517101][ T7735] pfkey_sendmsg+0x230/0x1090 [ 161.517129][ T7735] ? __pfx_perf_trace_lock+0x10/0x10 [ 161.517149][ T7735] ? __pfx___might_resched+0x10/0x10 [ 161.517177][ T7735] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 161.517204][ T7735] ? aa_sk_perm+0x15f/0x920 [ 161.517232][ T7735] ? aa_sk_perm+0x7ee/0x920 [ 161.517260][ T7735] ? __lock_acquire+0x6b6/0x2cf0 [ 161.517276][ T7735] ? __pfx_aa_sk_perm+0x10/0x10 [ 161.517299][ T7735] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 161.517326][ T7735] ? aa_sock_msg_perm+0xf1/0x1b0 [ 161.517347][ T7735] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 161.517369][ T7735] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 161.517394][ T7735] __sock_sendmsg+0x21c/0x270 [ 161.517419][ T7735] ____sys_sendmsg+0x505/0x820 [ 161.517452][ T7735] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.517490][ T7735] ? import_iovec+0x74/0xa0 [ 161.517518][ T7735] ___sys_sendmsg+0x21f/0x2a0 [ 161.517539][ T7735] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.517586][ T7735] ? __fget_files+0x2a/0x420 [ 161.517620][ T7735] ? __fget_files+0x2a/0x420 [ 161.517634][ T7735] ? __fget_files+0x3a0/0x420 [ 161.517671][ T7735] __x64_sys_sendmsg+0x19b/0x260 [ 161.517693][ T7735] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 161.517724][ T7735] ? __pfx_ksys_write+0x10/0x10 [ 161.517751][ T7735] ? do_syscall_64+0xbe/0xf80 [ 161.517779][ T7735] do_syscall_64+0xfa/0xf80 [ 161.517802][ T7735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.517818][ T7735] ? clear_bhb_loop+0x60/0xb0 [ 161.517840][ T7735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.517855][ T7735] RIP: 0033:0x7f64ab98f749 [ 161.517871][ T7735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.517886][ T7735] RSP: 002b:00007f64ac7f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.517904][ T7735] RAX: ffffffffffffffda RBX: 00007f64abbe6090 RCX: 00007f64ab98f749 [ 161.517916][ T7735] RDX: 0000000000000000 RSI: 00002000000011c0 RDI: 0000000000000005 [ 161.517926][ T7735] RBP: 00007f64ac7f5090 R08: 0000000000000000 R09: 0000000000000000 [ 161.517936][ T7735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.517946][ T7735] R13: 00007f64abbe6128 R14: 00007f64abbe6090 R15: 00007ffd23552bb8 [ 161.517984][ T7735] [ 161.941107][ T7739] netlink: 2 bytes leftover after parsing attributes in process `syz.2.552'. [ 161.971243][ T7739] batadv_slave_1: entered promiscuous mode [ 162.428146][ T7746] netlink: 'syz.1.555': attribute type 10 has an invalid length. [ 162.447641][ T7746] netlink: 40 bytes leftover after parsing attributes in process `syz.1.555'. [ 162.523917][ T7746] bridge0: port 3(ipvlan1) entered blocking state [ 162.556509][ T7746] bridge0: port 3(ipvlan1) entered disabled state [ 162.661622][ T7746] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 162.681998][ T7754] netlink: 'syz.0.559': attribute type 21 has an invalid length. [ 162.806993][ T7760] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 163.310985][ T7769] netlink: 830 bytes leftover after parsing attributes in process `syz.1.562'. [ 163.470614][ T7780] netlink: 'syz.0.567': attribute type 6 has an invalid length. [ 163.888191][ T7790] netlink: 'syz.4.572': attribute type 10 has an invalid length. [ 163.901206][ T7790] netlink: 40 bytes leftover after parsing attributes in process `syz.4.572'. [ 163.971807][ T7790] bridge0: port 3(ipvlan1) entered blocking state [ 163.993163][ T7790] bridge0: port 3(ipvlan1) entered disabled state [ 164.160538][ T7790] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 166.303676][ T7802] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 168.550718][ T7842] netlink: 'syz.4.587': attribute type 10 has an invalid length. [ 168.551314][ T7840] netlink: 'syz.2.584': attribute type 13 has an invalid length. [ 168.587489][ T7842] macvlan0: entered promiscuous mode [ 168.603062][ T7842] macvlan0: entered allmulticast mode [ 168.638210][ T7842] veth1_vlan: entered allmulticast mode [ 168.647506][ T7842] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 168.761898][ T7850] sock: sock_timestamping_bind_phc: sock not bind to device [ 168.907694][ T7855] netlink: 2 bytes leftover after parsing attributes in process `syz.1.592'. [ 168.995176][ T7861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.593'. [ 169.183012][ T7858] netlink: 'syz.3.593': attribute type 1 has an invalid length. [ 169.595443][ T7881] FAULT_INJECTION: forcing a failure. [ 169.595443][ T7881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.619430][ T7881] CPU: 1 UID: 0 PID: 7881 Comm: syz.1.601 Not tainted syzkaller #0 PREEMPT(full) [ 169.619455][ T7881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 169.619466][ T7881] Call Trace: [ 169.619473][ T7881] [ 169.619480][ T7881] dump_stack_lvl+0x189/0x250 [ 169.619504][ T7881] ? __pfx____ratelimit+0x10/0x10 [ 169.619525][ T7881] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.619543][ T7881] ? __pfx__printk+0x10/0x10 [ 169.619571][ T7881] ? __might_fault+0xb0/0x130 [ 169.619598][ T7881] should_fail_ex+0x414/0x560 [ 169.619624][ T7881] _copy_from_user+0x2d/0xb0 [ 169.619648][ T7881] __copy_msghdr+0x3c5/0x5b0 [ 169.619677][ T7881] ___sys_sendmsg+0x1a5/0x2a0 [ 169.619697][ T7881] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.619738][ T7881] ? __fget_files+0x2a/0x420 [ 169.619769][ T7881] ? __fget_files+0x2a/0x420 [ 169.619784][ T7881] ? __fget_files+0x3a0/0x420 [ 169.619812][ T7881] __x64_sys_sendmsg+0x19b/0x260 [ 169.619839][ T7881] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 169.619853][ T7881] ? perf_trace_preemptirq_template+0xa3/0x340 [ 169.619894][ T7881] ? do_syscall_64+0xbe/0xf80 [ 169.619920][ T7881] do_syscall_64+0xfa/0xf80 [ 169.619942][ T7881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.619958][ T7881] ? clear_bhb_loop+0x60/0xb0 [ 169.619979][ T7881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.619995][ T7881] RIP: 0033:0x7ff47e58f749 [ 169.620011][ T7881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.620025][ T7881] RSP: 002b:00007ff47f4bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.620043][ T7881] RAX: ffffffffffffffda RBX: 00007ff47e7e5fa0 RCX: 00007ff47e58f749 [ 169.620055][ T7881] RDX: 9cdc2384056b48b8 RSI: 0000200000000080 RDI: 0000000000000006 [ 169.620067][ T7881] RBP: 00007ff47f4bd090 R08: 0000000000000000 R09: 0000000000000000 [ 169.620077][ T7881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.620086][ T7881] R13: 00007ff47e7e6038 R14: 00007ff47e7e5fa0 R15: 00007ffd6c1d13c8 [ 169.620119][ T7881] [ 171.113435][ T36] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.496992][ T7918] syz.4.614 (7918) used greatest stack depth: 16560 bytes left [ 171.834220][ T7943] netlink: 'syz.4.621': attribute type 13 has an invalid length. [ 172.121462][ T7950] sock: sock_timestamping_bind_phc: sock not bind to device [ 172.711845][ T7976] netlink: 'syz.0.635': attribute type 10 has an invalid length. [ 172.755811][ T7976] netlink: 40 bytes leftover after parsing attributes in process `syz.0.635'. [ 174.026907][ T7976] bridge0: port 3(ipvlan1) entered blocking state [ 174.033561][ T7976] bridge0: port 3(ipvlan1) entered disabled state [ 174.042313][ T7976] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 174.397465][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.642'. [ 174.488373][ T8014] netlink: 'syz.0.645': attribute type 21 has an invalid length. [ 174.540238][ T8017] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 174.568097][ T8017] pim6reg1: linktype set to 774 [ 174.747934][ T8021] netlink: 'syz.1.648': attribute type 10 has an invalid length. [ 174.773732][ T8023] netlink: 'syz.4.649': attribute type 10 has an invalid length. [ 174.781969][ T8023] netlink: 40 bytes leftover after parsing attributes in process `syz.4.649'. [ 174.791070][ T8021] netlink: 40 bytes leftover after parsing attributes in process `syz.1.648'. [ 174.791853][ T8021] bridge0: port 3(ipvlan1) entered blocking state [ 174.826440][ T8021] bridge0: port 3(ipvlan1) entered disabled state [ 174.888088][ T8021] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 174.912939][ T8023] bridge0: port 3(ipvlan1) entered blocking state [ 174.932689][ T8023] bridge0: port 3(ipvlan1) entered disabled state [ 174.995346][ T8023] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 179.199464][ T8084] netlink: 'syz.0.671': attribute type 10 has an invalid length. [ 179.235901][ T8084] netlink: 40 bytes leftover after parsing attributes in process `syz.0.671'. [ 179.288610][ T8084] bridge0: port 3(ipvlan1) entered blocking state [ 179.308512][ T8084] bridge0: port 3(ipvlan1) entered disabled state [ 179.408640][ T8084] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 179.459846][ T8088] netlink: 'syz.4.673': attribute type 10 has an invalid length. [ 179.497253][ T8088] netlink: 40 bytes leftover after parsing attributes in process `syz.4.673'. [ 179.521538][ T8088] bridge0: port 3(ipvlan1) entered blocking state [ 179.546389][ T8088] bridge0: port 3(ipvlan1) entered disabled state [ 179.589568][ T8093] FAULT_INJECTION: forcing a failure. [ 179.589568][ T8093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.590448][ T8088] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 179.605878][ T8093] CPU: 0 UID: 0 PID: 8093 Comm: syz.0.675 Not tainted syzkaller #0 PREEMPT(full) [ 179.605902][ T8093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.605912][ T8093] Call Trace: [ 179.605919][ T8093] [ 179.605926][ T8093] dump_stack_lvl+0x189/0x250 [ 179.605952][ T8093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.605987][ T8093] should_fail_ex+0x414/0x560 [ 179.606010][ T8093] _copy_from_user+0x2d/0xb0 [ 179.606032][ T8093] sock_do_ioctl+0x182/0x300 [ 179.606054][ T8093] ? __pfx_sock_do_ioctl+0x10/0x10 [ 179.606087][ T8093] sock_ioctl+0x576/0x790 [ 179.606106][ T8093] ? __pfx_sock_ioctl+0x10/0x10 [ 179.606126][ T8093] ? __fget_files+0x3a0/0x420 [ 179.606140][ T8093] ? __fget_files+0x2a/0x420 [ 179.606158][ T8093] ? bpf_lsm_file_ioctl+0x9/0x20 [ 179.606174][ T8093] ? __pfx_sock_ioctl+0x10/0x10 [ 179.606191][ T8093] __se_sys_ioctl+0xfc/0x170 [ 179.606213][ T8093] do_syscall_64+0xfa/0xf80 [ 179.606233][ T8093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.606249][ T8093] ? clear_bhb_loop+0x60/0xb0 [ 179.606269][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.606284][ T8093] RIP: 0033:0x7f617ed8f749 [ 179.606300][ T8093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.606313][ T8093] RSP: 002b:00007f617fb6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.606331][ T8093] RAX: ffffffffffffffda RBX: 00007f617efe5fa0 RCX: 00007f617ed8f749 [ 179.606343][ T8093] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000002f [ 179.606353][ T8093] RBP: 00007f617fb6f090 R08: 0000000000000000 R09: 0000000000000000 [ 179.606363][ T8093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.606373][ T8093] R13: 00007f617efe6038 R14: 00007f617efe5fa0 R15: 00007ffd4afc4998 [ 179.606401][ T8093] [ 180.061623][ T8107] sock: sock_timestamping_bind_phc: sock not bind to device [ 181.118874][ T8128] netlink: 'syz.3.685': attribute type 10 has an invalid length. [ 181.127164][ T8128] netlink: 40 bytes leftover after parsing attributes in process `syz.3.685'. [ 181.136842][ T8128] bridge0: port 3(ipvlan1) entered blocking state [ 181.208973][ T8128] bridge0: port 3(ipvlan1) entered disabled state [ 181.233720][ T8128] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 181.562452][ T8139] netlink: 2 bytes leftover after parsing attributes in process `syz.3.690'. [ 181.584584][ T8137] netlink: 830 bytes leftover after parsing attributes in process `syz.4.691'. [ 181.731000][ T8141] sock: sock_timestamping_bind_phc: sock not bind to device [ 183.086375][ T8168] netlink: 'syz.4.700': attribute type 10 has an invalid length. [ 183.105506][ T8168] netlink: 40 bytes leftover after parsing attributes in process `syz.4.700'. [ 183.117621][ T8168] bridge0: port 3(ipvlan1) entered blocking state [ 183.124617][ T8168] bridge0: port 3(ipvlan1) entered disabled state [ 183.178348][ T8168] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 183.477390][ T8182] netlink: 830 bytes leftover after parsing attributes in process `syz.0.704'. [ 183.643607][ T8193] netlink: 'syz.2.707': attribute type 3 has an invalid length. [ 183.665775][ T8193] netlink: 132 bytes leftover after parsing attributes in process `syz.2.707'. [ 183.965467][ T8200] bond0: Caught tx_queue_len zero misconfig [ 184.975474][ T8206] netlink: 'syz.3.711': attribute type 13 has an invalid length. [ 185.050423][ T8211] netlink: 'syz.1.715': attribute type 1 has an invalid length. [ 185.074735][ T8211] netlink: 'syz.1.715': attribute type 1 has an invalid length. [ 185.142874][ T8214] FAULT_INJECTION: forcing a failure. [ 185.142874][ T8214] name failslab, interval 1, probability 0, space 0, times 0 [ 185.170759][ T8215] netlink: 'syz.0.714': attribute type 10 has an invalid length. [ 185.187319][ T8215] netlink: 40 bytes leftover after parsing attributes in process `syz.0.714'. [ 185.196947][ T8214] CPU: 1 UID: 0 PID: 8214 Comm: syz.4.713 Not tainted syzkaller #0 PREEMPT(full) [ 185.196970][ T8214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 185.196980][ T8214] Call Trace: [ 185.196987][ T8214] [ 185.196994][ T8214] dump_stack_lvl+0x189/0x250 [ 185.197028][ T8214] ? __pfx____ratelimit+0x10/0x10 [ 185.197049][ T8214] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.197066][ T8214] ? __pfx__printk+0x10/0x10 [ 185.197093][ T8214] ? __pfx___might_resched+0x10/0x10 [ 185.197109][ T8214] ? fs_reclaim_acquire+0x7d/0x100 [ 185.197136][ T8214] should_fail_ex+0x414/0x560 [ 185.197160][ T8214] should_failslab+0xa8/0x100 [ 185.197184][ T8214] kmem_cache_alloc_noprof+0x74/0x6f0 [ 185.197205][ T8214] ? getname_flags+0xb8/0x540 [ 185.197227][ T8214] ? __fget_files+0x3a0/0x420 [ 185.197246][ T8214] getname_flags+0xb8/0x540 [ 185.197274][ T8214] start_creating_user_path+0x23/0x50 [ 185.197294][ T8214] bpf_obj_pin_user+0x132/0x390 [ 185.197315][ T8214] ? __pfx_bpf_obj_pin_user+0x10/0x10 [ 185.197341][ T8214] __sys_bpf+0x7d8/0x8a0 [ 185.197366][ T8214] ? __pfx___sys_bpf+0x10/0x10 [ 185.197399][ T8214] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 185.197418][ T8214] ? ksys_write+0x22a/0x250 [ 185.197441][ T8214] ? __pfx_ksys_write+0x10/0x10 [ 185.197466][ T8214] __x64_sys_bpf+0x7c/0x90 [ 185.197485][ T8214] do_syscall_64+0xfa/0xf80 [ 185.197507][ T8214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.197523][ T8214] ? clear_bhb_loop+0x60/0xb0 [ 185.197552][ T8214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.197568][ T8214] RIP: 0033:0x7f2e6fd8f749 [ 185.197587][ T8214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.197602][ T8214] RSP: 002b:00007f2e70beb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 185.197627][ T8214] RAX: ffffffffffffffda RBX: 00007f2e6ffe5fa0 RCX: 00007f2e6fd8f749 [ 185.197639][ T8214] RDX: 0000000000000018 RSI: 0000200000000240 RDI: 0000000000000006 [ 185.197649][ T8214] RBP: 00007f2e70beb090 R08: 0000000000000000 R09: 0000000000000000 [ 185.197659][ T8214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.197668][ T8214] R13: 00007f2e6ffe6038 R14: 00007f2e6ffe5fa0 R15: 00007ffe6cb02e58 [ 185.197698][ T8214] [ 185.207386][ T8215] bridge0: port 3(ipvlan1) entered blocking state [ 185.448604][ T8215] bridge0: port 3(ipvlan1) entered disabled state [ 185.464403][ T8215] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 185.497083][ T8224] netlink: 830 bytes leftover after parsing attributes in process `syz.4.718'. [ 185.702531][ T8229] netlink: 830 bytes leftover after parsing attributes in process `syz.3.719'. [ 186.565942][ T8267] netlink: 'syz.1.731': attribute type 10 has an invalid length. [ 186.606026][ T8267] netlink: 40 bytes leftover after parsing attributes in process `syz.1.731'. [ 186.619665][ T8267] bridge0: port 3(ipvlan1) entered blocking state [ 186.629511][ T8267] bridge0: port 3(ipvlan1) entered disabled state [ 186.702930][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.732'. [ 186.731456][ T8267] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 187.420709][ T8300] netlink: 'syz.2.742': attribute type 13 has an invalid length. [ 187.449860][ T8310] netlink: 344 bytes leftover after parsing attributes in process `syz.3.743'. [ 187.838149][ T8322] netlink: 830 bytes leftover after parsing attributes in process `syz.4.747'. [ 187.999367][ T8327] netlink: 830 bytes leftover after parsing attributes in process `syz.3.749'. [ 188.681616][ T8355] netlink: 64 bytes leftover after parsing attributes in process `syz.3.758'. [ 188.843488][ T8360] netlink: 248 bytes leftover after parsing attributes in process `syz.2.761'. [ 189.099949][ T8363] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 189.403040][ T8376] netlink: 'syz.0.763': attribute type 13 has an invalid length. [ 189.916051][ T8394] netlink: 'syz.2.768': attribute type 13 has an invalid length. [ 190.184875][ T8404] lo speed is unknown, defaulting to 1000 [ 190.609650][ T8404] wg1 speed is unknown, defaulting to 1000 [ 191.161860][ T8432] __nla_validate_parse: 1 callbacks suppressed [ 191.161878][ T8432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.779'. [ 191.179633][ T8433] netlink: 'syz.0.780': attribute type 13 has an invalid length. [ 191.217615][ T8426] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 191.473482][ T8440] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 192.047458][ T8459] netlink: 60 bytes leftover after parsing attributes in process `syz.3.789'. [ 192.237573][ T8455] lo speed is unknown, defaulting to 1000 [ 192.825294][ T8455] wg1 speed is unknown, defaulting to 1000 [ 192.985144][ T8483] netlink: 'syz.3.796': attribute type 13 has an invalid length. [ 194.355297][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.366006][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.548891][ T8515] FAULT_INJECTION: forcing a failure. [ 194.548891][ T8515] name failslab, interval 1, probability 0, space 0, times 0 [ 194.606242][ T8515] CPU: 0 UID: 0 PID: 8515 Comm: syz.0.804 Not tainted syzkaller #0 PREEMPT(full) [ 194.606262][ T8515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 194.606270][ T8515] Call Trace: [ 194.606276][ T8515] [ 194.606283][ T8515] dump_stack_lvl+0x189/0x250 [ 194.606302][ T8515] ? __pfx____ratelimit+0x10/0x10 [ 194.606318][ T8515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.606331][ T8515] ? __pfx__printk+0x10/0x10 [ 194.606350][ T8515] ? __pfx___might_resched+0x10/0x10 [ 194.606364][ T8515] ? fs_reclaim_acquire+0x7d/0x100 [ 194.606384][ T8515] should_fail_ex+0x414/0x560 [ 194.606402][ T8515] should_failslab+0xa8/0x100 [ 194.606422][ T8515] __kmalloc_noprof+0xcb/0x800 [ 194.606437][ T8515] ? perf_trace_run_bpf_submit+0xee/0x170 [ 194.606453][ T8515] ? bpf_test_init+0x9f/0x150 [ 194.606469][ T8515] bpf_test_init+0x9f/0x150 [ 194.606484][ T8515] bpf_prog_test_run_xdp+0x503/0x10e0 [ 194.606509][ T8515] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 194.606526][ T8515] ? __fget_files+0x2a/0x420 [ 194.606542][ T8515] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 194.606556][ T8515] bpf_prog_test_run+0x2c7/0x340 [ 194.606575][ T8515] __sys_bpf+0x5ee/0x8a0 [ 194.606591][ T8515] ? __pfx___sys_bpf+0x10/0x10 [ 194.606623][ T8515] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 194.606649][ T8515] __x64_sys_bpf+0x7c/0x90 [ 194.606663][ T8515] do_syscall_64+0xfa/0xf80 [ 194.606680][ T8515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.606693][ T8515] ? clear_bhb_loop+0x60/0xb0 [ 194.606714][ T8515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.606727][ T8515] RIP: 0033:0x7f617ed8f749 [ 194.606739][ T8515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.606751][ T8515] RSP: 002b:00007f617fb6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 194.606765][ T8515] RAX: ffffffffffffffda RBX: 00007f617efe5fa0 RCX: 00007f617ed8f749 [ 194.606775][ T8515] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 194.606783][ T8515] RBP: 00007f617fb6f090 R08: 0000000000000000 R09: 0000000000000000 [ 194.606790][ T8515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.606798][ T8515] R13: 00007f617efe6038 R14: 00007f617efe5fa0 R15: 00007ffd4afc4998 [ 194.606820][ T8515] [ 195.189299][ T8535] netlink: 830 bytes leftover after parsing attributes in process `syz.0.810'. [ 195.433067][ T8539] netlink: 'syz.4.811': attribute type 10 has an invalid length. [ 195.441173][ T8539] netlink: 40 bytes leftover after parsing attributes in process `syz.4.811'. [ 195.518002][ T8543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.537187][ T8539] bridge0: port 3(ipvlan1) entered blocking state [ 195.596208][ T8539] bridge0: port 3(ipvlan1) entered disabled state [ 195.654150][ T8546] FAULT_INJECTION: forcing a failure. [ 195.654150][ T8546] name failslab, interval 1, probability 0, space 0, times 0 [ 195.699351][ T8539] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 195.767241][ T8546] CPU: 0 UID: 0 PID: 8546 Comm: syz.0.814 Not tainted syzkaller #0 PREEMPT(full) [ 195.767266][ T8546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.767277][ T8546] Call Trace: [ 195.767290][ T8546] [ 195.767304][ T8546] dump_stack_lvl+0x189/0x250 [ 195.767341][ T8546] ? __pfx____ratelimit+0x10/0x10 [ 195.767387][ T8546] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.767422][ T8546] ? __pfx__printk+0x10/0x10 [ 195.767511][ T8546] ? __pfx___might_resched+0x10/0x10 [ 195.767592][ T8546] should_fail_ex+0x414/0x560 [ 195.767670][ T8546] should_failslab+0xa8/0x100 [ 195.767721][ T8546] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 195.767744][ T8546] ? perf_trace_lock+0x2f8/0x3b0 [ 195.767766][ T8546] ? __d_alloc+0x37/0x6f0 [ 195.767846][ T8546] __d_alloc+0x37/0x6f0 [ 195.767935][ T8546] d_alloc_pseudo+0x21/0xc0 [ 195.767980][ T8546] alloc_file_pseudo+0xcc/0x210 [ 195.768037][ T8546] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 195.768122][ T8546] ? alloc_fd+0x64c/0x6c0 [ 195.768206][ T8546] sock_alloc_file+0xb8/0x2e0 [ 195.768228][ T8546] ? __sys_socket+0x12e/0x320 [ 195.768284][ T8546] __sys_socket+0x13e/0x320 [ 195.768362][ T8546] __x64_sys_socket+0x7a/0x90 [ 195.768409][ T8546] do_syscall_64+0xfa/0xf80 [ 195.768450][ T8546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.768473][ T8546] ? clear_bhb_loop+0x60/0xb0 [ 195.768528][ T8546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.768547][ T8546] RIP: 0033:0x7f617ed8f749 [ 195.768576][ T8546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.768590][ T8546] RSP: 002b:00007f617fb6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 195.768608][ T8546] RAX: ffffffffffffffda RBX: 00007f617efe5fa0 RCX: 00007f617ed8f749 [ 195.768620][ T8546] RDX: 0000000000000002 RSI: 0000000000000001 RDI: 0000000000000018 [ 195.768630][ T8546] RBP: 00007f617fb6f090 R08: 0000000000000000 R09: 0000000000000000 [ 195.768640][ T8546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.768650][ T8546] R13: 00007f617efe6038 R14: 00007f617efe5fa0 R15: 00007ffd4afc4998 [ 195.768807][ T8546] [ 196.114986][ T8546] VFS_BUG_ON_INODE(inode_state_read_once(inode) & I_CLEAR) encountered for inode ffff8880115a5700 [ 196.114986][ T8546] fs sockfs mode 140777 opflags 0x8 flags 0x0 state 0x300 count 0 [ 196.134153][ T8546] ------------[ cut here ]------------ [ 196.139954][ T8546] kernel BUG at fs/inode.c:1971! [ 196.145262][ T8546] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 196.151553][ T8546] CPU: 0 UID: 0 PID: 8546 Comm: syz.0.814 Not tainted syzkaller #0 PREEMPT(full) [ 196.160787][ T8546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 196.170895][ T8546] RIP: 0010:iput+0xfc9/0x1030 [ 196.175623][ T8546] Code: 8b 7c 24 18 48 c7 c6 e0 df 79 8b e8 b1 4d e8 fe 90 0f 0b e8 b9 60 81 ff 48 8b 7c 24 18 48 c7 c6 80 df 79 8b e8 98 4d e8 fe 90 <0f> 0b 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fb ff ff 4c 89 ef [ 196.195265][ T8546] RSP: 0018:ffffc9000c137de8 EFLAGS: 00010282 [ 196.201363][ T8546] RAX: 000000000000009f RBX: dffffc0000000000 RCX: 82be10c5b6dffb00 [ 196.209346][ T8546] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 196.217325][ T8546] RBP: 1ffffffff1ed61f6 R08: ffffc9000c137aa7 R09: 1ffff92001826f54 [ 196.225303][ T8546] R10: dffffc0000000000 R11: fffff52001826f55 R12: 1ffff110022b4b20 [ 196.233282][ T8546] R13: ffff8880115a5900 R14: 0000000000000200 R15: 1ffffffff1f01172 [ 196.241395][ T8546] FS: 00007f617fb6f6c0(0000) GS:ffff8881260b0000(0000) knlGS:0000000000000000 [ 196.250448][ T8546] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.257048][ T8546] CR2: 00007f2e6ffe20c0 CR3: 000000003301e000 CR4: 00000000003526f0 [ 196.265037][ T8546] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 196.273016][ T8546] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 196.281031][ T8546] Call Trace: [ 196.284348][ T8546] [ 196.287321][ T8546] ? do_raw_spin_unlock+0x122/0x240 [ 196.292574][ T8546] __sys_socket+0x2bf/0x320 [ 196.297141][ T8546] __x64_sys_socket+0x7a/0x90 [ 196.301860][ T8546] do_syscall_64+0xfa/0xf80 [ 196.306399][ T8546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.312488][ T8546] ? clear_bhb_loop+0x60/0xb0 [ 196.317567][ T8546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.323482][ T8546] RIP: 0033:0x7f617ed8f749 [ 196.327926][ T8546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.347567][ T8546] RSP: 002b:00007f617fb6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 196.356014][ T8546] RAX: ffffffffffffffda RBX: 00007f617efe5fa0 RCX: 00007f617ed8f749 [ 196.364132][ T8546] RDX: 0000000000000002 RSI: 0000000000000001 RDI: 0000000000000018 [ 196.372140][ T8546] RBP: 00007f617fb6f090 R08: 0000000000000000 R09: 0000000000000000 [ 196.380150][ T8546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.388151][ T8546] R13: 00007f617efe6038 R14: 00007f617efe5fa0 R15: 00007ffd4afc4998 [ 196.396274][ T8546] [ 196.399343][ T8546] Modules linked in: [ 196.407025][ T8546] ---[ end trace 0000000000000000 ]--- [ 196.415901][ T8546] RIP: 0010:iput+0xfc9/0x1030 [ 196.420805][ T8546] Code: 8b 7c 24 18 48 c7 c6 e0 df 79 8b e8 b1 4d e8 fe 90 0f 0b e8 b9 60 81 ff 48 8b 7c 24 18 48 c7 c6 80 df 79 8b e8 98 4d e8 fe 90 <0f> 0b 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fb ff ff 4c 89 ef [ 196.444926][ T8546] RSP: 0018:ffffc9000c137de8 EFLAGS: 00010282 [ 196.455268][ T8546] RAX: 000000000000009f RBX: dffffc0000000000 RCX: 82be10c5b6dffb00 [ 196.463838][ T8546] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 196.472435][ T8546] RBP: 1ffffffff1ed61f6 R08: ffffc9000c137aa7 R09: 1ffff92001826f54 [ 196.481257][ T8541] lo speed is unknown, defaulting to 1000 [ 196.482961][ T8546] R10: dffffc0000000000 R11: fffff52001826f55 R12: 1ffff110022b4b20 [ 196.510943][ T8546] R13: ffff8880115a5900 R14: 0000000000000200 R15: 1ffffffff1f01172 [ 196.522430][ T8546] FS: 00007f617fb6f6c0(0000) GS:ffff8881261b0000(0000) knlGS:0000000000000000 [ 196.533324][ T8546] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.552275][ T8546] CR2: 0000000000000004 CR3: 000000003301e000 CR4: 00000000003526f0 [ 196.560738][ T8546] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 196.569732][ T8546] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 196.578203][ T8546] Kernel panic - not syncing: Fatal exception [ 196.584937][ T8546] Kernel Offset: disabled [ 196.589251][ T8546] Rebooting in 86400 seconds..