last executing test programs: 10.40275651s ago: executing program 1 (id=1320): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x7, @local, 0x7}}, 0x80, 0x0}, 0x48001) setsockopt$sock_attach_bpf(r0, 0x84, 0x84, &(0x7f0000000000), 0x90) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, @perf_config_ext={0x0, 0xffff}, 0x10000, 0x80, 0x4, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0xc, 0x0, 0x7}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000030a03000000000000000000030000000900030073797a31000000000900010073797a300000000014000480080002400000000008000140000000001c0008800c0001"], 0xa4}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000300000000030000000317c8c53adb1b8cb300000000000001"], 0x0, 0x42}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f"], 0xcfa4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 9.357927394s ago: executing program 1 (id=1327): socket$kcm(0x2, 0x1000000000000002, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x6e, 0x4000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x3ebc, 0xd}, 0x0, 0x6, 0x0, 0x1, 0x3fe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000002c0)={0x6, 0x80, 0xfa, 0x28, 0x2, 0x1, 0x0, 0x4, 0x23220, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x30a, 0x4, @perf_bp={&(0x7f0000000040), 0x4}, 0x18000, 0x4, 0x4ac6, 0xc, 0x9, 0x276e, 0x5, 0x0, 0xfffffff8, 0x0, 0x4}) socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000000), 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc0000002100010000000000fefffffffe8000000000000000000000000000aa00000000000000000000000000000000fffe0000000200000a00e080fffffffd", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fc020000000000000000000000000000ff010000000000"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xa, 0x80, 0x3, 0x800000, 0x53}, 0x1}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 8.984728295s ago: executing program 1 (id=1331): perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb, 0x404, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x4, @perf_bp={0x0, 0x5}, 0x0, 0x3, 0x2, 0x7, 0x9, 0x6, 0x8, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0), 0xa}, 0x1000, 0xf, 0x0, 0x0, 0x0, 0x1ff, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 6.370131755s ago: executing program 4 (id=1335): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0xffffffff, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000006"], 0x66) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) (async) r0 = socket$kcm(0x29, 0x0, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={r1, r2}) (async) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x9, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x19}, 0x0, 0xc8, 0x6, 0x0, 0x3, 0x0, 0x400, 0x0, 0xffffffff}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) (async) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000), 0xfdef) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="060000000400000008000000080000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xe, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x300}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) 6.222416221s ago: executing program 3 (id=1337): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xeb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x800000, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x20000, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x24242, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0xa, 0x2, 0x3a) (async) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x38}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) (async) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)) sendmsg$nl_generic(r2, 0x0, 0x200040c4) perf_event_open(0x0, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x3) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000040000703fcffffff00000100037c"], 0x18}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000040000703fcffffff00000100037c"], 0x18}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000) 6.215742086s ago: executing program 1 (id=1338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x2, 0x3, 0x601, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x10}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x6}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x8, 0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x890}, 0x40) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)='%+9llu \x00'}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r2, 0x3, 0x1, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0]}, 0x40) (async) r4 = syz_clone(0x800000, &(0x7f0000000380)="e8d73880c63a13651f5a403a96779f0201a9036cf6cda2f60c9dcde7f8b4b26e23667078dcb4b1f8642b8fc2368c4f36018bac10e0803a6aee960efd815d7d3f54d78db165973eba94e3ca2d2b03b726555ace2104a8c73067e5", 0x5a, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="a01feba044c8b4d7c0b9ede238367cc121c5b96a3b378aff66d6bc402b8c120135d9840aba7f4da0afd027d15d1e50b5456ac1ff1a2b0139aa3316f544973c14f13e4d2a9541f8cb43e6265ba331aaba53e6ec3cefb5b73a39bb1e578a17a184029d") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x18, 0xe09ba0596012eb0d, 0x70bd29, 0x25dfdbff, {0x9}, [@typed={0x8, 0x121, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x127, 0x0, 0x0, @pid=r4}, @typed={0x8, 0x73, 0x0, 0x0, @fd=r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x484) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0xc001}, 0x8000) (async) r5 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000006c0)="2e4ffe732a338ad8db6935c94426c511e997012aeea9f3eebe511dfb7419644fb5b8f4ece28519db18d96aa05c6aa7640370eacb61a28bb0943d89f5b821f4dd609d2a130cf8635764c2c50b2b9e505f32c3e9", 0x53}, {&(0x7f0000000740)="16acad7dc9658285f69cdce89cafe43b74430f6b7cc6cb7749de18b3987a0e236a4fe96f1ab731e808d47d848a9997d449e30e19121407e8a25f153a9c11ca789ba03b4aaf95d097c8f0438e7e38d24b219d93d2da35a3545aff859ceda68632d25abd00a5ea1f2ba337bbd644014c1b1bae10d4e2650cc97151d757cdd59170677277de9aa4d10846f7", 0x8a}, {&(0x7f0000000800)="1f03595657174f5bbae20c24977220a9893e126ac55d514eef39d0e9e7c80a18970ac29724ad288e0f85a58540728990390aa1d28dd9846da2bf11c8bc1d8665e923a25b621225c295d829cb5db3e147b6236ed44fdca3857a80dda512529a7ee74c", 0x62}, {&(0x7f0000000880)="046bca3b5b505faf714467583f10af89adbe91e60fd36680c7173f4b866676b7f17632a1263b72d8d512655dd1a9f5df7f46f57c2da234890aa5c69aafe8a8740968bcbb66020fd9319cd540de019649fd3a1b4bbe3bfe98a3ad77b00309c6c6367c437ad9b6be23947438398bb8375e8d498a146f5f72b1899d3e71a92494b6e2dd8c7f2d9dd7cbdc21ec3245f857443df1aa07d03c75c29132449fcf7e188522b94b8e22c5ace58f7c7dcb74b0feff310dafec596935933e82872591fad36b13d8bfd9a79aebbcdfba", 0xca}], 0x4}, 0x4000142) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000a40)=@o_path={&(0x7f0000000a00)='./file0\x00', r2, 0x4000, r1}, 0x18) (async) recvmsg$kcm(r5, &(0x7f0000000f40)={&(0x7f0000000a80), 0x80, &(0x7f0000000e00)=[{&(0x7f0000000b00)=""/226, 0xe2}, {&(0x7f0000000c00)=""/114, 0x72}, {&(0x7f0000000c80)=""/43, 0x2b}, {&(0x7f0000000cc0)=""/53, 0x35}, {&(0x7f0000000d00)=""/254, 0xfe}], 0x5, &(0x7f0000000e80)=""/139, 0x8b}, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000f80), 0x4) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000010c0)={@fallback=r1, 0x0, 0x0, 0x4, &(0x7f0000000fc0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001040)=[0x0, 0x0, 0x0], &(0x7f0000001080)=[0x0, 0x0, 0x0]}, 0x40) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001100), 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001400)={&(0x7f0000001140)="5b8c93be3b1ab57443ffe2c5ffcf539a0c30241d7500fb47c90a10568cb83d8b6522174d9513747d25fd94bd67367155", &(0x7f0000001180)=""/187, &(0x7f0000001240)="db655e4f05b2f0739b8bfd2d440e186a1f53d0d24f1b25ebb6f0730eb44f17964d92d20c425341b368bb302b290e586355916cb9c3de054bd1a79323bbc06ddc772717211fe8fe860d9419abd316a880c67e8016d8e409755b199ff593902e80e0223acb333d05c35256a3d1aad575c3ce80fcfa761611fb75dcf04739c6097939329aaea2b0db327516188ea9c232", &(0x7f0000001300)="0f618448e7d69202d67eb266d051dc675acba449d087e93d09d87f23b7b63a60b13d6368308ce759d278dcbde75d069da87dcfb9c53c0a51b5ddb4eff1e9cb06ba9da95519508f61489bd81925b1d2a7ea76a1090072a828ad728df6c66adf7a8dbf863df8c04147312bbcc7353d887de6e2b9fac0760fa2f124a79a869dd8d99f799bc3edee0b3f3974dd4817de3055d0134c29d2e40e4a64ac4740074ef4dbdc5c20b1b2b465f2596e9dd332ec1a376ef938f17bdc16adc97f5501b8c421b519c2", 0x1, r3, 0x4}, 0x38) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001480)=@o_path={&(0x7f0000001440)='./file0\x00', 0x0, 0x4008, r1}, 0x18) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f00000014c0)=r7) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000001500)={0x0, 0x80, 0xe6, 0x4, 0x55, 0x9, 0x0, 0xa, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x2, 0x10}, 0x1000, 0x8, 0x4, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x25bd}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000001580), 0x208003, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001880)={0xffffffffffffffff, 0xe0, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000015c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000001600)=[0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x22, &(0x7f0000001680)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000016c0), &(0x7f0000001700), 0x8, 0x46, 0x8, 0x8, &(0x7f0000001740)}}, 0x10) ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f00000018c0)=r9) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001a00)={r2, &(0x7f0000001900)="e559ca34743de9f6bdd9bea14e2c8d087f9027207e237d6c29ab6daa3770f6d138f16f6f244f22eefd7717378f238bbb1e8af9696ccaf9a0e2610770ff39baa95384423c0ae5e907b0baaef6ab0a7a408b742792699caf3e24f0ada60150f65ad56b3bba5d4895d40f16b6802f6dcace54ddcbf7bb6196c4fd84568519f46a498a4a2f48c6ef4c8ecbb02184f3bd31db1134afdde02e60cfa298065ee8e3d8d94746facc", &(0x7f00000019c0)=""/25, 0x4}, 0x20) (async, rerun: 32) ioctl$TUNSETLINK(r6, 0x400454cd, 0x335) (rerun: 32) sendmsg$sock(r6, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001a40)="bcc4f76a9faaa2ed8f28444d4bfc4c880294b9543dd3876d0f535872d832a9262f9cf76d5ded879c68b209d3f24cd13e67ce95f6fd66d7760a14f2cb7279d4b1102b990753516459da40da477860dba0b8e2988fda3caa65e574", 0x5a}, {&(0x7f0000001ac0)="3bbeeaab36947a845316febc8ec6919cfa6a924f09afb825b5ea26d7cb05eec2b65195b05f99c154aae02d11269444fecc78bc504f8862ea8de0ed7116c1b28cbc12a5fa934b4c743703e8e744f2cf2ae471f577c0800ade614556cbe5ffd7ad97fe441d81763458b211c752ec089eb3afc26f30fea19ec9e4a8fde6a5e51128e76cd46977d2b390e8d732753a09edfd04eb30c92099419ac86b55afb77e36ca7024921ecf61acef49409116fd80cffc17ae73d1d4d9e935a602ac9b7133bbfee8f6a7e6e4f35ee4af3fa7", 0xcb}, {&(0x7f0000001bc0)="ad39103f489004707cfd0b53087fff1d3a75915d6dc2883b20518a25d8ee30f1e46491eab7f3b6863ff537d02dfeecb2aab99f7c87cb8daa75d2d4350230998d728622442a0d6416929755b4079b2041588866a250e4d24feb92fb17d38eda6feb478debc6d39a56569a134b2f5a9e2f13d426ecf7e0cdbbb10d5738185e68e8faa3fc2c36f51c", 0x87}, {&(0x7f0000001c80)="8c6e930c72001059244edebf7060636ce6d1458f868e535befd30829078827ee07a8bdd1cd2d9312da412c0be03cc58e768aa94eddffbb7d64a1c91dff4ce1c9476807a040085dcbc8fca7925fe597c5f04e84491a010980fab8ea816a5d2c5d10cd344f47d89103abf58fa231a47c823b05eb90744b7a01f9b5d25c009b72b373d9015e9964b5922206c5d572bcfb6d26ae0c9e015b4b81502f42ff680c5b59ba8c084fc9aaabc3d9eba77bea2026ea97255f554239fda605287f1b84e1e8495a414555", 0xc4}, {&(0x7f0000001d80)="a4304973c705d273801ff21cbaa5f333a459a4091e7ac84c52697221e880a5e1651b3efbf26da1aaa8ff6c266f34e6a874b0c6a4d9795d96eeb8bd1e8c71b3b33562e6d76c8a96059cdb8a2b21d2039c0bc3b69de76f288618560da9109575510aad858468", 0x65}, {&(0x7f0000001e00)="d1cf34bae465112b5f8b97927b934227536f64fcc0108f8c778f099b5c684bc118cd304f4b920f33423cbe7367136ac3f90b46196949f2aea07f3ed66bf89fb6df6fd71f2057e68c41c61a268d43d06d602a39ec91768574616dce1e4a2eb42c5a8ba54e3b688762b97d53d0e66fb357c4d97b5ec31c3726bca5e34e116015fba49a4ba305d099a7c3724dbd7b54d456ccec43c1d089fe38e69cad0f640fe2c698890112b2dc364576e478da783881cf7fd428711bd8df69c502c666925a9a19d777426052d9650a724fd232b278ad96e1782c6a1222dea047f1379232", 0xdd}], 0x6}, 0x4001) openat$cgroup_ro(r6, &(0x7f0000001fc0)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) (async) r10 = perf_event_open(&(0x7f0000002040)={0x4, 0x80, 0x81, 0x9, 0x3a, 0x89, 0x0, 0x8, 0x80000, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000002000), 0xa}, 0x8d1, 0x7, 0x7, 0x6, 0x3, 0x6b9, 0x9, 0x0, 0x5, 0x0, 0x6}, r4, 0xffffffffffffffff, r6, 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r10, 0x2405, r6) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000020c0)) (rerun: 64) 6.15115178s ago: executing program 2 (id=1339): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="6800000042000100000000000000000003010000061400002600010000112233445566778899aabb08004500e4140014000001170000010203040506070800000c00020006000600080000000e00030008000c0004"], 0x68}}, 0x0) socket$netlink(0x10, 0x3, 0x5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0, 0x8}, 0x8200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0xf0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000002061f000000000000000000070000000300078008001140000000000800124000000c8f0500010006000000050005000200000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000"], 0x60}}, 0x20004000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x21140200, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={0x0, 0x2}, 0xa38, 0x0, 0x0, 0x5, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, r2, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) socket$kcm(0x29, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 6.097244823s ago: executing program 4 (id=1340): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x114905, 0x4, 0x0, 0x5, 0x7, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x20000014) r1 = getpid() perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x11c266, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) fstat(r0, &(0x7f00000002c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004, 0x4, @perf_config_ext={0x40, 0x8800000000000004}, 0x0, 0x2, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x114905, 0x80004, 0x7fffffff, 0x1, 0x5, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000009000000090000000180000001690600", @ANYRES32=0x1], 0x50) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="24000000660091"], 0xfe33) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, 0x3d, 0x301, 0x70bd25, 0x25dfdbfd, {0xa}, [@typed={0x8, 0x3, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xb, 0x805, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}}], {0x14}}, 0x5c}}, 0x200000d4) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x1c, 0x26, 0x1, 0x870bd22, 0xfffffff9, {0x41}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000c953}, 0x0) 5.388267967s ago: executing program 1 (id=1343): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc144, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x1, @perf_bp={0x0, 0x4}, 0x116104, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xa}, 0x50, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x5, 0x0, 0x0, 0x0, 0x15b76fa0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000814000780080011400000000005001500060000000500010006000000050005000a20000005000400000000000900020073797a320000000010200300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x2, 0x0, 0x0) syz_clone(0x41811180, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xb89046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x106d4c8, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r2, &(0x7f0000000580)={&(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x24000840) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='r', 0x200420}], 0x1}, 0x48000) sendmsg$kcm(r3, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x4010) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20004885) syz_clone(0x4400, 0x0, 0xf4ff, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000002030500000000000000000003000000080001000300002a090002000000000400000000080005400000000c08000540000000100800010003000023af8cb13f061d8b98466a7a657b579039c211955fa49cde1638205ec3864bdda6bdd20060fec05d64c614e5828e13bf5371efa2a6e9605548a0065b9734f49818a15860f15b531e97c5b280a498281b65c591a0bb5a371b8ac413140ffee35c5e2381937fa286f64bb54ff453bc9e68a7d5f3c859004b52c236f5df920a87201aa781ed672871f70733adcc85"], 0x40}, 0x1, 0x0, 0x0, 0x2004c041}, 0x814) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="4400000030000506010000000000000000000000300001802c0001800900010067617465000000001c00028018000200"/68, 0x44}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40000180) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) 4.94700042s ago: executing program 0 (id=1344): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x20208, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x78, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff276, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x1e, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x101d0) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0x12, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x1000000}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) 4.893254262s ago: executing program 4 (id=1345): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x6, 0x44, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x1}, 0x104b07, 0x4, 0x0, 0x4, 0x8, 0x4000, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x7f}, 0x200, 0x6, 0x75, 0x5, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0xb) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2e, 0xfffffffc, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0xd}}, [@TCA_RATE={0x6, 0x5, {0x8b, 0x6}}, @qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xf4, 0xe, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002002000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x8, r8}, 0x38) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x4, 0x3a43}, 0x1015ae, 0x0, 0x0, 0x1, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x16, 0x4, &(0x7f0000000a40)=ANY=[@ANYRES32=0x0, @ANYRES8=r6, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r9, 0x11}, 0xa) 4.818945207s ago: executing program 3 (id=1346): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3fb, 0x8, 0x70bd2a, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x20044850) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$pptp(0x18, 0x1, 0x2) sendmsg$kcm(r1, &(0x7f00000041c0)={0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000000240)="0781774537c1c3749ca81e9da5229562b277b50cc56e7a860cd901883edffb6d538a720a0018726998346f98843b74bd940488863123a2103767c0db4ecd6f0aee2096fa94e496400132d3d17c532dc96083c11139c699bbb85f213bb1e6f22fb53635f059", 0x65}, {&(0x7f00000004c0)="866d661a0e99cc41bed5956c48caa9f9fbcc8d9fb0b659675d330c7cc2d73d42d82fe19dc51260978d9918b56feb87846aded143", 0x34}, {0x0}], 0x3, &(0x7f0000003e40)=ANY=[@ANYBLOB="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"], 0x360}, 0x44) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40000002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000040)={'dummy0\x00', @random='\x00\x00\x00\x00\x00 '}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001340)={0x24, 0x1e, 0x21, 0x70bd2b, 0x0, {0x9}, [@typed={0x5, 0x12c, 0x0, 0x0, @str='\x00'}, @nested={0x8, 0xf, 0x0, 0x1, [@typed={0x4, 0x49}]}]}, 0x24}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffdcb, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd2c, 0x25dfdbfe, {0x1a, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 4.750911269s ago: executing program 2 (id=1347): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd30, 0x25dfdbfe, {0x0, 0x0, 0x12, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "00000000000000000000000000000500"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x404c840}, 0x4000010) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x830d}, 0x0, 0xa57b, 0xfffffffe}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040), 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x4, 0x6, 0x10000, 0x1, 0x2000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r4, r3}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00710000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401c5820, &(0x7f0000000000)=0x818) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x81, 0x0, 0x1, 0x93b7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x6, 0xf5, &(0x7f00000001c0)=""/245, 0x41000, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x4, 0x3, 0x610}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000700)=[{0x2, 0x1, 0x3, 0x9}, {0x1, 0x3, 0x3, 0xc}, {0x1, 0x3, 0x5}, {0x1, 0x3, 0x1, 0x5}, {0x4, 0x1, 0xf, 0x2}, {0x2, 0x4, 0x10, 0x4}, {0x2, 0x2, 0x4, 0xd}, {0x0, 0x2, 0x4, 0x4}, {0x2, 0x4, 0x4, 0x5}, {0x0, 0x3, 0xe, 0xb}], 0x10, 0x6}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd1e, 0x0, 0x0, 0x10, 0xffffff00}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000980)=@newqdisc={0xb0, 0x24, 0xf0b, 0x8070bd2e, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xdc, 0x7a, 0x15e7, 0x0, 0x8, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x5100, 0x7, 0x0, 0xb5]}}, {{0x1c, 0x1, {0x3, 0x2, 0x3, 0x6, 0x0, 0xfffffbff, 0x629a, 0x1}}, {0x6, 0x2, [0x101]}}, {{0x1c, 0x1, {0x3, 0x2, 0x8, 0x9, 0x1, 0xfffffff9, 0xffffff00}}, {0x4}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8044000}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@ifindex=r7, r1, 0x17, 0x8, r1, @void, @value=r1}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00', 0x1}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d8000000140081054e81f782db44b9040a1d080243000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7d9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace80ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x48000) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8924, &(0x7f0000000080)) 4.547627525s ago: executing program 0 (id=1348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x85, 0x0, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_LABELS_MASK={0x18, 0x17, [0x5, 0xb, 0x8, 0x4, 0x4000570]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc044}, 0x8011) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}, 0x1, 0x0, 0x0, 0x200408c1}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x5c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1bd}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1770740284d6ef09}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) r3 = socket$kcm(0x10, 0x2, 0x0) syz_clone(0x0, &(0x7f0000000180)="ecbcf6cf7586e9ce0918b4af869e6700411a3639a0d177811e61ab8a55cb03c30e5679afe6ff39cc346f798174854e70d5dc17f47d7c85ce07dd0b428b7c265bfe2cde983a5b46d9dbe4c0b7451cef0d4588dc7a802cb287c6d6853b4c8bc6b96535a71eb0a15d89b496756128b82bf9c8bdbf1b48a6f56826582b07f87ec66413e62fe0ac5656a28f49e52407335f794e729edb2ba746a0d2e89e56", 0x9c, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="12ef8e8aa7a2e4256ab470c816c336576a0c3bb69e518b48aa3337aa89e5") r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x20, 0x140e, 0x100, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x815) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x4a0f0000}, 0x810) 4.238279833s ago: executing program 2 (id=1349): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x0, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x14, 0x1, 0x3, 0x401, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4004840) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x400, 0x4156, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x10563b, 0x0, 0xfffffffe, 0x6, 0x10000, 0x2, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000) socket$kcm(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x2c, 0x0, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x18}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008831) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0xc080) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) close(0xffffffffffffffff) 3.656385393s ago: executing program 1 (id=1350): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) syz_clone(0x40000000, &(0x7f0000000280), 0x0, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="2334e2d8bb5dd035a773a5857acf71e18a72f6fd4e45781eca685a75a1f777c4b8111ea9b04d1fe2e1c06d8541d1c643e098de16b294ba4cd6ebee25ac73acb55c86faae205052f0fa2bbef79494f257c08efeadc05526d0a84497d291c1be4cca230f0bd1b8622767025a78a04a") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002100090308000000ffdbdf2501000000080008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$nl_generic(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000001500010300000000000000010c00000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async, rerun: 64) r5 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 64) sendmsg$AUDIT_SET_FEATURE(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0x3fa, 0x100, 0x70bd26, 0x25dfdbfd, {0x1, 0x1, 0x1}, ["", ""]}, 0x20}}, 0x40000) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffae, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x114905, 0x4, 0x0, 0x5, 0x7, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000080900010073797a30000000000b00030066696c746572000050000000060a010400000000000000000100000008000b400000000028000480240001800b0001007470726f7879000014000280080001400000000008000340000000180900010073797a30"], 0xc4}, 0x1, 0x0, 0x0, 0x8892}, 0x40000) (async) sendmsg$nl_route_sched_retired(r7, &(0x7f0000000a80)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000840)=@newqdisc={0x1dc, 0x24, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xa, 0xfff1}, {0x9, 0x9}, {0x8, 0x3}}, [@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}]}}, @q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xab}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x56d}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x29}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xd}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfb82}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8001}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xa}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2d}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}]}}, @q_dsmark={{0xb}, {0x44, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8001}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3d84}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}]}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x14008884}, 0x40408a1) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000008c00)=@delchain={0x24, 0x5f, 0x333, 0x8000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x5, 0x2}, {0x324, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4020114}, 0x40000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex, 0x9, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async, rerun: 32) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0x26, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x26, &(0x7f0000000480)=""/38, 0x41000, 0x2, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x6, 0x5, 0x800}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x100}, 0x94) (rerun: 32) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="04"], 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, r6, 0x25, 0x4, @val=@tcx={@void, @value=r10, @void, @void, r9}}, 0x1c) 3.466554346s ago: executing program 4 (id=1351): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x1403, 0x1, 0x70bd28, 0x25dfdbfc}, 0x10}, 0xfe, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x23, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000004a00010000000000000000000a00806e08000000e200000104000180af7ac787a4b997bef92b372d3176012aa004cb449c6594bfdd9545792b286262046655e3bd318446b2678573649aea"], 0x20}}, 0x0) openat$cgroup_procs(r2, 0x0, 0x2, 0x0) mkdir(&(0x7f0000002b80)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x3, 0x8, 0x6, 0x1}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x78, 0xffffffff80000000}, 0x11eea, 0x6, 0x98, 0x0, 0x8, 0x3, 0xffff, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xa, 0xffffffffffffffff, 0x9) r7 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x5}, 0x114905, 0x4, 0x0, 0x4, 0x16, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000a6a32d04d0ffdbdf2505000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x40010) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, 0x0, 0x4000) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r10) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x38, 0x40, 0x107, 0x70ad2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x27, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r11}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r12 = socket$kcm(0xa, 0x5, 0x0) r13 = gettid() sendmsg$nl_netfilter(r3, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x38, 0xa, 0x7, 0x801, 0x70bd25, 0x25dfdbfb, {0x5, 0x0, 0xa}, [@nested={0x24, 0x96, 0x0, 0x1, [@nested={0x4, 0xe2}, @typed={0x8, 0x63, 0x0, 0x0, @uid}, @typed={0xc, 0xa2, 0x0, 0x0, @u64=0x5}, @typed={0x8, 0xc0, 0x0, 0x0, @pid=r13}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$kcm(r12, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000016c0)="83", 0x1}], 0x1}, 0x41) recvmsg$kcm(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/136, 0x88}], 0x1}, 0x160) sendmsg$kcm(r12, &(0x7f00000001c0)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x4, @local, 0x3, 0x4}, 0x80, &(0x7f0000000100)=[{0x0, 0x21}], 0x1}, 0x4804) 3.46215542s ago: executing program 3 (id=1352): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000780)={0x4, 0xfd3467e297dcb8ef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x2, 0x643, 0x7, 0x0, 0x8, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000008c0)=""/195, 0xc3}], 0x1}, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$inet(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="ffbc", 0x2}], 0x1}, 0xc001) r5 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x5452, &(0x7f0000000000)) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x100000001}, 0x4000, 0x2, 0xffffffff, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000001304"], 0x0, 0x26}, 0x28) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0900000004000000040000000200000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0100000001000000000000000029cac39b5000"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r7, 0x7, '\x00', 0x0, r6, 0x0, 0x5}, 0x50) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x408c4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xf, 0x3, 0x2) 3.366167863s ago: executing program 0 (id=1353): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000402000000b00000bc26100000000000bf6720000000000016020000000000016702000007000000360600000ee600f0bf050000000000000f650000180000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 3.249677462s ago: executing program 2 (id=1354): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000000fe010100002d04efe3edb4efff0000000700000108000340000000000800024000000003054f120001000000000008000240000000030800eb3f00000004080003400000000008"], 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40001) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x7ff, 0xfffffffe, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, 0x0, 0x4048000) sendmsg$key(r1, 0x0, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0xc010) sendmsg$inet(r3, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000280)="9745010000002024010000ac", 0xc}], 0x1}, 0x400c804) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0xa, 0x2, 0x73) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f00000000c0), &(0x7f0000000100)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), &(0x7f0000000240)=r6}, 0x20) sendmsg$kcm(r5, &(0x7f0000003d00)={0x0, 0x0, 0x0}, 0x24040890) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000340)=@phonet={0x23, 0x1, 0x8}, 0x80, 0x0}, 0x0) 3.027421641s ago: executing program 0 (id=1355): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xfffffffffffffffb, &(0x7f0000000800)=[{&(0x7f0000000480)=""/159, 0x9c}, {&(0x7f0000000280)=""/212, 0xd0}, {&(0x7f0000001940)=""/4120, 0x9c0}, {&(0x7f0000000940)=""/4048, 0xfd0}, {&(0x7f0000000380)=""/225, 0xe1}, {&(0x7f0000000700)=""/224}], 0x5, 0x0, 0xffffffe3}, 0x120) 2.334637189s ago: executing program 2 (id=1356): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000940)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r5) socket$nl_rdma(0x10, 0x3, 0x14) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x7, 0xfffffffffffffffe}, 0xa38, 0x800001, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local}) (async) fstat(r4, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) fstat(r3, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) fstat(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000a00), 0x80000, &(0x7f0000000c40)={[{@gid}, {@gid}], [{@uid_eq}, {@measure}, {@uid_eq={'uid', 0x3d, r6}}, {@euid_lt={'euid<', r7}}, {@subj_role={'subj_role', 0x3d, 'memory.swap.events\x00'}}, {@dont_appraise}, {@uid_gt={'uid>', r8}}, {@fsname}]}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) (async, rerun: 64) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) (rerun: 64) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c00000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00090009"], 0x48}, 0x1, 0x0, 0x0, 0x4040850}, 0x6040004) (rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r10, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x12, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x72, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) (async, rerun: 32) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) (async, rerun: 64) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) (rerun: 64) setsockopt$sock_attach_bpf(r13, 0x1, 0x41, &(0x7f0000000100)=r14, 0x8) (async, rerun: 32) setsockopt$sock_attach_bpf(r13, 0x1, 0x25, &(0x7f0000000100)=r12, 0x4) (async, rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000180)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff9}, @map_idx_val={0x18, 0xc, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x300000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000000200)='GPL\x00', 0x2, 0xc2, &(0x7f0000000300)=""/194, 0x41000, 0x44, '\x00', r11, 0x1b, r12, 0x8, &(0x7f0000000700)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0x2, 0x4, 0xa}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000780)=[r10, r9, r9, r9, r9, r9, r9, r9], &(0x7f00000007c0)=[{0x3, 0x3, 0x5, 0xa}], 0x10, 0x9b00000}, 0x94) 1.99050791s ago: executing program 4 (id=1357): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r1, &(0x7f0000000580), &(0x7f0000000640)=""/147}, 0x20) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0xe02a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) recvmsg(0xffffffffffffffff, 0x0, 0x22) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1f, 0x1369a, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x8800, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x6) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x7431d567e40ecb09, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1008, 0x2, @perf_config_ext={0x0, 0x2}, 0x5306, 0x1001, 0xfffffffd, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0x1}, 0x7402, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02ff000302000000ff0e020004000001"], 0x10}, 0x1b, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5f}, 0xb4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 1.957334018s ago: executing program 0 (id=1358): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={0x0}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x84102, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x8, 0x3a43}, 0x58a, 0x1, 0x0, 0x1, 0x3fe, 0x1ff, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x130c4, 0x0, 0xfffffffe, 0x2, 0x3fc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x6008890) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x100000000002, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = socket$kcm(0x23, 0x5, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x3, 0xe7, 0x3, 0xa, 0x0, 0x3, 0x10, 0xa, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000000), 0x16}, 0x12400, 0x5, 0xd, 0x8, 0x0, 0x30d6, 0x81, 0x0, 0xffff, 0x0, 0xc}, r4, 0xd, 0xffffffffffffffff, 0xa) sendmsg$kcm(r3, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x80) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$kcm(r3, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x20000000) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x11, 0x0, &(0x7f0000000680)="7993ff011900000000a63b00008f20e94d", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x3f7, 0x8, 0x70bd2a, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x1010}, 0x800) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x2, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1e}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc011}, 0x0) 1.797085929s ago: executing program 3 (id=1359): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x10000, 0x0, 0x4, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001000000"], 0x7c}}, 0x2000c450) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r1}) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001b40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b00)={&(0x7f0000000940)={0x11a8, 0x15, 0x400, 0x70bd25, 0x25dfdbfe, {0x6, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x8f, 0x1, "989e1cd083b5f2c921e1720483b4eaf233578ccdd3616d324257479d2bb64bc96bec0f986792e25ee49ca487f4f1a9f28ef25569e75b0143d8cbf15fea9602e5a4d73e3c8e56daffe1199138c867c45470c46dd00e4bf0d30adfa91c8a86af3c06c624e56446c25c0b513327af3f956de76051df6cfc7bea9e2054d9b6f8491a1f0c6f6d3350372e61b6e2"}, @INET_DIAG_REQ_BYTECODE={0xfe, 0x1, "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"}]}, 0x11a8}, 0x1, 0x0, 0x0, 0x20000008}, 0x20004051) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$kcm(0x10, 0x3, 0x10) r3 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r3, 0x29, 0x1e, 0x0, 0x41) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x35, 0x0, 0x0, 0x2}, 0x50) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x80000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb448, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x5c}}, 0x20084884) 646.151159ms ago: executing program 4 (id=1360): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0xfffffffd, 0x8, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r0, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f00000002c0), 0x0, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xd4, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x37, 0x1, 0x70bd27, 0x4, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042720920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x10}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x97ff, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r5}, &(0x7f0000000440), &(0x7f0000000480)='%pI4 \x00'}, 0x20) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x861c7d40cb19044, @perf_config_ext={0x0, 0xe}, 0x0, 0x0, 0xfffffffc, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) 630.751534ms ago: executing program 2 (id=1361): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x6, 0x44, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x1}, 0x104b07, 0x4, 0x0, 0x4, 0x8, 0x4000, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x7f}, 0x200, 0x6, 0x75, 0x5, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0xb) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2e, 0xfffffffc, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0xd}}, [@TCA_RATE={0x6, 0x5, {0x8b, 0x6}}, @qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xf4, 0xe, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002002000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x8, r8}, 0x38) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x4, 0x3a43}, 0x1015ae, 0x0, 0x0, 0x1, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x16, 0x4, &(0x7f0000000a40)=ANY=[@ANYRES32=0x0, @ANYRES8=r6, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r9, 0x11}, 0xa) 565.59173ms ago: executing program 0 (id=1362): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3fb, 0x8, 0x70bd2a, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x20044850) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$pptp(0x18, 0x1, 0x2) sendmsg$kcm(r1, &(0x7f00000041c0)={0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000000240)="0781774537c1c3749ca81e9da5229562b277b50cc56e7a860cd901883edffb6d538a720a0018726998346f98843b74bd940488863123a2103767c0db4ecd6f0aee2096fa94e496400132d3d17c532dc96083c11139c699bbb85f213bb1e6f22fb53635f059", 0x65}, {&(0x7f00000004c0)="866d661a0e99cc41bed5956c48caa9f9fbcc8d9fb0b659675d330c7cc2d73d42d82fe19dc51260978d9918b56feb87846aded143", 0x34}, {0x0}], 0x3, &(0x7f0000003e40)=ANY=[@ANYBLOB="a80000000000000016010000020000009534d536843f31d276554d3e8a805a26774760199787227a040990bf3a4f4a9cb502c0cf42d1c4329d85738c44c0b20b34f2eea78fe084bf2a556d4465b2fbd75a2a7723719076a2f87182e20e5ff634145ef77a80a129a77041d6fc8d75fd8a43be90d3c107602103f4c3e4d38d4cdcf189e17626a5c078995923065a3959c3efde6418327a2b10bfed63c0cde59fb7745c000000000000c8000000000000003a000000010000002b33bd8f7cc483cf79dfeb688965ae9226efabbde0d2125c0d651c76e31fe9c69cdb5b6d6508dcf34e1470ee5cd186143ca023b99b0af9d425c9cf65eed6384e0400a4b3a92a4821ae808201b33fb473c0cb376f954498f931d8c32a31edb5b52af2559659e7a03f7827c4a010b598bda776c0f17d0cc0664cc5eb76f0a05a4ca70c3c5a0dc3dcd06b50d676b3d94d67fe118dc9e58e0aa36faf400a772c7fc6fa1c61f5f5a41117724c29e62000000070000000000000000b01000009000000dd5fff58fc88853df81925c1dccd9ca9f2185eea95a7b0017235732f31765ac33b369866c0e7afb96b8eb817c26f6ee1d1d594de7a3a76c1d609b047f87bd27afde674fa7f76f70bdd165b7e864ad4e7056883c8fa7b87ee9700000000000000c8000000000000008300000069290000923f451d07de97fd9020e2b39595499644f3abeca20562690a3b06934716b970a4871812275462c7e84ee7ea8c0c9c873815700f42e94a993469b6d139f76fe70c668c9e660d1c8c4e7a48a108416c4d5c5bc639e856ff6f760720c5de"], 0x360}, 0x44) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40000002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000040)={'dummy0\x00', @random='\x00\x00\x00\x00\x00 '}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001340)={0x24, 0x1e, 0x21, 0x70bd2b, 0x0, {0x9}, [@typed={0x5, 0x12c, 0x0, 0x0, @str='\x00'}, @nested={0x8, 0xf, 0x0, 0x1, [@typed={0x4, 0x49}]}]}, 0x24}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffdcb, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd2c, 0x25dfdbfe, {0x1a, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 422.429778ms ago: executing program 3 (id=1363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3100000000140004000800010000000001080002000000000050000000120a01040000000000000000020000000900010073797a30000000000900020073797a3000000000080003000000000a1c0004000600010005b400000500020007000000080003000000000358000000060a01040000000000000000020000000900010073797a3000000000"], 0x130}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x102081, 0x1, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000003160000000000000000020085000000270000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000009b0000009500000000000000fa6d832530271986f4d3645df0f2309d9da97b217370428eb2aa4603e9f09f75ef488a00"], &(0x7f0000000080)='syzkaller\x00'}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 3 (id=1364): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0xff, 0x2, 0x9, 0x1}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x3c}}, 0x20000014) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x4, 0x4, 0xd, 0x0, 0x1, 0xff}, 0x50) getpid() sendmsg$key(0xffffffffffffffff, 0x0, 0x40004) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x11, 0x200000000000003, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$sock(r7, 0x0, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_generic(r7, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x20) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) getpid() sendmsg$inet(0xffffffffffffffff, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30008011) kernel console output (not intermixed with test programs): 9 [ 95.878496][ T5850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.878514][ T5850] RSP: 002b:00007fb1f5905028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 95.878541][ T5850] RAX: ffffffffffffffda RBX: 00007fb1f4c25fa0 RCX: 00007fb1f499e159 [ 95.878558][ T5850] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 95.878572][ T5850] RBP: 00007fb1f5905090 R08: 0000000000000000 R09: 0000000000000000 [ 95.878585][ T5850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.878597][ T5850] R13: 00007fb1f4c26038 R14: 00007fb1f4c25fa0 R15: 00007ffc70b755b8 [ 95.878629][ T5850] [ 96.068796][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.200674][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.232468][ T5858] Zero length message leads to an empty skb [ 96.317911][ T3012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.317973][ T3012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.401714][ T5843] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.401929][ T5843] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.402080][ T5843] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.460693][ T255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.460752][ T255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.640618][ T255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.640660][ T255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.654676][ T3012] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.830353][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.830393][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.995883][ T290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.995937][ T290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.243531][ T255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.243581][ T255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.330619][ T5880] ======================================================= [ 97.330619][ T5880] WARNING: The mand mount option has been deprecated and [ 97.330619][ T5880] and is ignored by this kernel. Remove the mand [ 97.330619][ T5880] option from the mount to silence this warning. [ 97.330619][ T5880] ======================================================= [ 98.157042][ T5897] FAULT_INJECTION: forcing a failure. [ 98.157042][ T5897] name failslab, interval 1, probability 0, space 0, times 1 [ 98.157102][ T5897] CPU: 0 UID: 0 PID: 5897 Comm: syz.2.14 Not tainted syzkaller #0 PREEMPT(full) [ 98.157128][ T5897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.157142][ T5897] Call Trace: [ 98.157150][ T5897] [ 98.157160][ T5897] dump_stack_lvl+0xe8/0x150 [ 98.157199][ T5897] should_fail_ex+0x410/0x560 [ 98.157234][ T5897] should_failslab+0xa8/0x100 [ 98.157373][ T5897] __kmalloc_cache_node_noprof+0xaa/0x620 [ 98.157450][ T5897] ? __get_vm_area_node+0x155/0x2f0 [ 98.157548][ T5897] ? __get_vm_area_node+0x155/0x2f0 [ 98.157661][ T5897] __get_vm_area_node+0x155/0x2f0 [ 98.157773][ T5897] __vmalloc_node_range_noprof+0x343/0x1540 [ 98.157837][ T5897] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 98.157910][ T5897] ? __lock_acquire+0x747/0x2de0 [ 98.158039][ T5897] ? __pfx_perf_trace_lock+0x10/0x10 [ 98.158122][ T5897] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 98.158217][ T5897] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 98.158279][ T5897] __vmalloc_noprof+0xd2/0x120 [ 98.158343][ T5897] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 98.158418][ T5897] bpf_prog_alloc_no_stats+0x47/0x560 [ 98.158488][ T5897] ? bpf_prog_alloc+0x2a/0x1a0 [ 98.158561][ T5897] bpf_prog_alloc+0x3c/0x1a0 [ 98.158642][ T5897] bpf_prog_load+0x7f8/0x1c20 [ 98.158756][ T5897] ? __pfx_bpf_prog_load+0x10/0x10 [ 98.158930][ T5897] __sys_bpf+0xd0d/0xd90 [ 98.159032][ T5897] ? __pfx___sys_bpf+0x10/0x10 [ 98.159114][ T5897] ? __pfx_trace_call_bpf+0x10/0x10 [ 98.159281][ T5897] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 98.159343][ T5897] ? ksys_write+0x242/0x270 [ 98.159415][ T5897] ? __pfx_ksys_write+0x10/0x10 [ 98.159498][ T5897] __x64_sys_bpf+0xba/0xd0 [ 98.159571][ T5897] do_syscall_64+0x166/0x520 [ 98.159634][ T5897] ? trace_irq_disable+0x3b/0x140 [ 98.159694][ T5897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.159749][ T5897] ? clear_bhb_loop+0x70/0xc0 [ 98.159834][ T5897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.159888][ T5897] RIP: 0033:0x7f9107d9e159 [ 98.159948][ T5897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.159991][ T5897] RSP: 002b:00007f9105ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 98.160052][ T5897] RAX: ffffffffffffffda RBX: 00007f9108025fa0 RCX: 00007f9107d9e159 [ 98.160094][ T5897] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 98.160141][ T5897] RBP: 00007f9105ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 98.160179][ T5897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.160218][ T5897] R13: 00007f9108026038 R14: 00007f9108025fa0 R15: 00007ffedd102188 [ 98.160337][ T5897] [ 98.188198][ T5897] syz.2.14: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 98.188687][ T5897] CPU: 0 UID: 0 PID: 5897 Comm: syz.2.14 Not tainted syzkaller #0 PREEMPT(full) [ 98.188750][ T5897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.188770][ T5897] Call Trace: [ 98.188796][ T5897] [ 98.188818][ T5897] dump_stack_lvl+0xe8/0x150 [ 98.188925][ T5897] warn_alloc+0x24d/0x270 [ 98.188992][ T5897] ? __kasan_kmalloc+0x22/0xb0 [ 98.189079][ T5897] ? __pfx_warn_alloc+0x10/0x10 [ 98.189144][ T5897] ? __get_vm_area_node+0x155/0x2f0 [ 98.189266][ T5897] ? __get_vm_area_node+0x2a9/0x2f0 [ 98.189382][ T5897] __vmalloc_node_range_noprof+0x36b/0x1540 [ 98.189444][ T5897] ? __lock_acquire+0x747/0x2de0 [ 98.189572][ T5897] ? __pfx_perf_trace_lock+0x10/0x10 [ 98.189648][ T5897] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 98.189753][ T5897] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 98.189810][ T5897] __vmalloc_noprof+0xd2/0x120 [ 98.189871][ T5897] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 98.189925][ T5897] bpf_prog_alloc_no_stats+0x47/0x560 [ 98.189949][ T5897] ? bpf_prog_alloc+0x2a/0x1a0 [ 98.189977][ T5897] bpf_prog_alloc+0x3c/0x1a0 [ 98.190007][ T5897] bpf_prog_load+0x7f8/0x1c20 [ 98.190049][ T5897] ? __pfx_bpf_prog_load+0x10/0x10 [ 98.190111][ T5897] __sys_bpf+0xd0d/0xd90 [ 98.190149][ T5897] ? __pfx___sys_bpf+0x10/0x10 [ 98.190180][ T5897] ? __pfx_trace_call_bpf+0x10/0x10 [ 98.190366][ T5897] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 98.190436][ T5897] ? ksys_write+0x242/0x270 [ 98.190503][ T5897] ? __pfx_ksys_write+0x10/0x10 [ 98.190586][ T5897] __x64_sys_bpf+0xba/0xd0 [ 98.190653][ T5897] do_syscall_64+0x166/0x520 [ 98.190740][ T5897] ? trace_irq_disable+0x3b/0x140 [ 98.190789][ T5897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.190851][ T5897] ? clear_bhb_loop+0x70/0xc0 [ 98.190926][ T5897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.190988][ T5897] RIP: 0033:0x7f9107d9e159 [ 98.191042][ T5897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.191087][ T5897] RSP: 002b:00007f9105ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 98.191143][ T5897] RAX: ffffffffffffffda RBX: 00007f9108025fa0 RCX: 00007f9107d9e159 [ 98.191184][ T5897] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 98.191225][ T5897] RBP: 00007f9105ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 98.191258][ T5897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.191297][ T5897] R13: 00007f9108026038 R14: 00007f9108025fa0 R15: 00007ffedd102188 [ 98.191395][ T5897] [ 98.262186][ T5897] Mem-Info: [ 98.262246][ T5897] active_anon:6172 inactive_anon:0 isolated_anon:0 [ 98.262246][ T5897] active_file:0 inactive_file:42712 isolated_file:0 [ 98.262246][ T5897] unevictable:0 dirty:1579 writeback:0 [ 98.262246][ T5897] slab_reclaimable:10052 slab_unreclaimable:92558 [ 98.262246][ T5897] mapped:29159 shmem:910 pagetables:1137 [ 98.262246][ T5897] sec_pagetables:0 bounce:0 [ 98.262246][ T5897] kernel_misc_reclaimable:0 [ 98.262246][ T5897] free:1336217 free_pcp:13661 free_cma:0 [ 98.262400][ T5897] Node 0 active_anon:24688kB inactive_anon:0kB active_file:0kB inactive_file:170640kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116636kB dirty:6296kB writeback:0kB shmem:3640kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12224kB pagetables:4388kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 98.262551][ T5897] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:20kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 98.262710][ T5897] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 98.262871][ T5897] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 98.263009][ T5897] Node 0 DMA32 free:1387384kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24688kB inactive_anon:0kB active_file:0kB inactive_file:170640kB unevictable:0kB writepending:6296kB zspages:0kB present:3129332kB managed:2546616kB mlocked:0kB bounce:0kB free_pcp:54396kB local_pcp:25220kB free_cma:0kB [ 98.263183][ T5897] lowmem_reserve[]: 0 0 0 0 0 [ 98.263364][ T5897] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 98.263520][ T5897] lowmem_reserve[]: 0 0 0 0 0 [ 98.263657][ T5897] Node 1 Normal free:3942124kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:20kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 98.263828][ T5897] lowmem_reserve[]: 0 0 0 0 0 [ 98.263892][ T5897] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 98.347927][ T5897] Node 0 DMA32: 1096*4kB (UM) 238*8kB (UM) 75*16kB (UME) 41*32kB (UM) 29*64kB (UM) 14*128kB (ME) 5*256kB (ME) 7*512kB (ME) 6*1024kB (ME) 6*2048kB (ME) 330*4096kB (M) = 1387424kB [ 98.348535][ T5897] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 98.348987][ T5897] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 1*16kB (M) 2*32kB (UM) 6*64kB (UM) 2*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 961*4096kB (M) = 3942124kB [ 98.349547][ T5897] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 98.349598][ T5897] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 98.349666][ T5897] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 98.349717][ T5897] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 98.349834][ T5897] 43622 total pagecache pages [ 98.349876][ T5897] 0 pages in swap cache [ 98.349905][ T5897] Free swap = 124996kB [ 98.349935][ T5897] Total swap = 124996kB [ 98.349971][ T5897] 2097051 pages RAM [ 98.349993][ T5897] 0 pages HighMem/MovableOnly [ 98.350022][ T5897] 428781 pages reserved [ 98.350050][ T5897] 0 pages cma reserved [ 99.444814][ T5896] netlink: 'syz.4.16': attribute type 4 has an invalid length. [ 99.444861][ T5896] netlink: 'syz.4.16': attribute type 17 has an invalid length. [ 99.444896][ T5896] netlink: 'syz.4.16': attribute type 27 has an invalid length. [ 100.083329][ T5919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18'. [ 100.093501][ T5919] netlink: Unknown conntrack attr (0) [ 100.169672][ T5919] netlink: 76 bytes leftover after parsing attributes in process `syz.0.18'. [ 100.192856][ T5907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19'. [ 100.789288][ T5936] netlink: 'syz.1.27': attribute type 10 has an invalid length. [ 100.848692][ T5936] team0: Device vxcan0 is of different type [ 101.614034][ T5962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.31'. [ 101.734659][ T5946] netlink: 132 bytes leftover after parsing attributes in process `syz.2.30'. [ 102.409814][ T5970] netlink: 'syz.1.34': attribute type 21 has an invalid length. [ 102.409867][ T5970] IPv6: NLM_F_CREATE should be specified when creating new route [ 102.498783][ T5972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.35'. [ 102.891044][ T5982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.37'. [ 102.913202][ T5982] netlink: Unknown conntrack attr (0) [ 103.043470][ T5990] netlink: 76 bytes leftover after parsing attributes in process `syz.0.37'. [ 104.297433][ T6027] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.49'. [ 106.724941][ T6079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.70'. [ 106.725056][ T6079] FAULT_INJECTION: forcing a failure. [ 106.725056][ T6079] name failslab, interval 1, probability 0, space 0, times 0 [ 106.725091][ T6079] CPU: 0 UID: 0 PID: 6079 Comm: syz.2.70 Not tainted syzkaller #0 PREEMPT(full) [ 106.725201][ T6079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.725241][ T6079] Call Trace: [ 106.725263][ T6079] [ 106.725279][ T6079] dump_stack_lvl+0xe8/0x150 [ 106.725438][ T6079] should_fail_ex+0x410/0x560 [ 106.725510][ T6079] should_failslab+0xa8/0x100 [ 106.725592][ T6079] ? ovs_flow_alloc+0x24/0x1f0 [ 106.725678][ T6079] kmem_cache_alloc_noprof+0xa1/0x600 [ 106.725747][ T6079] ? ovs_flow_alloc+0x24/0x1f0 [ 106.725842][ T6079] ovs_flow_alloc+0x24/0x1f0 [ 106.725935][ T6079] ovs_packet_cmd_execute+0x5b6/0xf10 [ 106.726080][ T6079] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 106.726176][ T6079] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 106.726249][ T6079] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 106.726337][ T6079] genl_family_rcv_msg_doit+0x233/0x340 [ 106.726424][ T6079] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 106.726533][ T6079] ? bpf_lsm_capable+0x9/0x20 [ 106.726589][ T6079] ? security_capable+0x7e/0x2c0 [ 106.726699][ T6079] genl_rcv_msg+0x614/0x7a0 [ 106.726792][ T6079] ? __pfx_genl_rcv_msg+0x10/0x10 [ 106.726863][ T6079] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 106.726958][ T6079] ? __asan_memcpy+0x40/0x70 [ 106.727034][ T6079] ? __skb_clone+0x5c/0x6c0 [ 106.727129][ T6079] netlink_rcv_skb+0x226/0x4a0 [ 106.727215][ T6079] ? __pfx_genl_rcv_msg+0x10/0x10 [ 106.727288][ T6079] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 106.727413][ T6079] ? down_read+0x2be/0x330 [ 106.727501][ T6079] genl_rcv+0x28/0x40 [ 106.727563][ T6079] netlink_unicast+0x7bd/0x940 [ 106.727672][ T6079] netlink_sendmsg+0x813/0xb40 [ 106.727792][ T6079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.727901][ T6079] ? apparmor_socket_sendmsg+0x98/0x360 [ 106.727977][ T6079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.728074][ T6079] sock_sendmsg_nosec+0x13a/0x180 [ 106.728152][ T6079] ____sys_sendmsg+0x54e/0x850 [ 106.728248][ T6079] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.728373][ T6079] ? import_iovec+0x73/0xa0 [ 106.728458][ T6079] ___sys_sendmsg+0x2a5/0x360 [ 106.728534][ T6079] ? __lock_acquire+0x747/0x2de0 [ 106.728607][ T6079] ? __pfx____sys_sendmsg+0x10/0x10 [ 106.728784][ T6079] ? __fget_files+0x2a/0x420 [ 106.728831][ T6079] ? __fget_files+0x3a2/0x420 [ 106.728913][ T6079] __x64_sys_sendmsg+0x1b1/0x290 [ 106.729010][ T6079] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 106.729147][ T6079] do_syscall_64+0x166/0x520 [ 106.729217][ T6079] ? trace_irq_disable+0x3b/0x140 [ 106.729272][ T6079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.729334][ T6079] ? clear_bhb_loop+0x70/0xc0 [ 106.729407][ T6079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.729481][ T6079] RIP: 0033:0x7f9107d9e159 [ 106.729537][ T6079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.729580][ T6079] RSP: 002b:00007f9105ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.729642][ T6079] RAX: ffffffffffffffda RBX: 00007f9108025fa0 RCX: 00007f9107d9e159 [ 106.729687][ T6079] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 106.729728][ T6079] RBP: 00007f9105ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 106.729760][ T6079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.729793][ T6079] R13: 00007f9108026038 R14: 00007f9108025fa0 R15: 00007ffedd102188 [ 106.729879][ T6079] [ 108.666751][ T6091] syz.1.71 uses obsolete (PF_INET,SOCK_PACKET) [ 109.730272][ T6099] erspan0: entered promiscuous mode [ 109.766423][ T6099] syz.2.74 (6099) used obsolete PPPIOCDETACH ioctl [ 110.550546][ T6124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.81'. [ 110.561663][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.79'. [ 110.992966][ T6122] netlink: 'syz.4.81': attribute type 10 has an invalid length. [ 111.026168][ T6122] geneve1: entered promiscuous mode [ 111.085043][ T6122] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 111.332376][ T6138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.84'. [ 111.332573][ T6138] FAULT_INJECTION: forcing a failure. [ 111.332573][ T6138] name failslab, interval 1, probability 0, space 0, times 0 [ 111.332651][ T6138] CPU: 0 UID: 0 PID: 6138 Comm: syz.0.84 Not tainted syzkaller #0 PREEMPT(full) [ 111.332767][ T6138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.332809][ T6138] Call Trace: [ 111.332831][ T6138] [ 111.332853][ T6138] dump_stack_lvl+0xe8/0x150 [ 111.332957][ T6138] should_fail_ex+0x410/0x560 [ 111.333034][ T6138] ? ovs_flow_alloc+0x103/0x1f0 [ 111.333109][ T6138] should_failslab+0xa8/0x100 [ 111.333188][ T6138] ? ovs_flow_alloc+0x103/0x1f0 [ 111.333260][ T6138] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 111.333310][ T6138] ? ovs_flow_alloc+0x24/0x1f0 [ 111.333383][ T6138] ? kmem_cache_alloc_noprof+0x156/0x600 [ 111.333447][ T6138] ? ovs_flow_alloc+0x103/0x1f0 [ 111.333544][ T6138] ovs_flow_alloc+0x103/0x1f0 [ 111.333629][ T6138] ovs_packet_cmd_execute+0x5b6/0xf10 [ 111.333742][ T6138] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 111.333856][ T6138] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 111.333929][ T6138] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 111.334030][ T6138] genl_family_rcv_msg_doit+0x233/0x340 [ 111.334136][ T6138] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 111.334236][ T6138] ? bpf_lsm_capable+0x9/0x20 [ 111.334283][ T6138] ? security_capable+0x7e/0x2c0 [ 111.334377][ T6138] genl_rcv_msg+0x614/0x7a0 [ 111.334463][ T6138] ? __pfx_genl_rcv_msg+0x10/0x10 [ 111.334527][ T6138] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 111.334652][ T6138] netlink_rcv_skb+0x226/0x4a0 [ 111.334737][ T6138] ? __pfx_genl_rcv_msg+0x10/0x10 [ 111.334811][ T6138] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.334939][ T6138] ? down_read+0x2be/0x330 [ 111.335025][ T6138] genl_rcv+0x28/0x40 [ 111.335087][ T6138] netlink_unicast+0x7bd/0x940 [ 111.335198][ T6138] netlink_sendmsg+0x813/0xb40 [ 111.335308][ T6138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.335435][ T6138] ? apparmor_socket_sendmsg+0x98/0x360 [ 111.335524][ T6138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.335608][ T6138] sock_sendmsg_nosec+0x13a/0x180 [ 111.335681][ T6138] ____sys_sendmsg+0x54e/0x850 [ 111.335768][ T6138] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.335873][ T6138] ? import_iovec+0x73/0xa0 [ 111.335946][ T6138] ___sys_sendmsg+0x2a5/0x360 [ 111.336006][ T6138] ? __lock_acquire+0x747/0x2de0 [ 111.336072][ T6138] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.336256][ T6138] ? __fget_files+0x2a/0x420 [ 111.336312][ T6138] ? __fget_files+0x3a2/0x420 [ 111.336393][ T6138] __x64_sys_sendmsg+0x1b1/0x290 [ 111.336489][ T6138] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 111.336625][ T6138] do_syscall_64+0x166/0x520 [ 111.336688][ T6138] ? trace_irq_disable+0x3b/0x140 [ 111.336750][ T6138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.336828][ T6138] ? clear_bhb_loop+0x70/0xc0 [ 111.336914][ T6138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.336969][ T6138] RIP: 0033:0x7fb6d499e159 [ 111.337022][ T6138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.337076][ T6138] RSP: 002b:00007fb6d586d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.337139][ T6138] RAX: ffffffffffffffda RBX: 00007fb6d4c25fa0 RCX: 00007fb6d499e159 [ 111.337183][ T6138] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 111.337223][ T6138] RBP: 00007fb6d586d090 R08: 0000000000000000 R09: 0000000000000000 [ 111.337250][ T6138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 111.337275][ T6138] R13: 00007fb6d4c26038 R14: 00007fb6d4c25fa0 R15: 00007fff1ae83e98 [ 111.337358][ T6138] [ 111.635249][ T6143] netlink: 76 bytes leftover after parsing attributes in process `syz.0.84'. [ 116.547012][ T6203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.101'. [ 116.794333][ T6207] netlink: 'syz.2.101': attribute type 10 has an invalid length. [ 116.794382][ T6207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.794424][ T6207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.832360][ T6207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.843938][ T6207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.398956][ C0] Illegal XDP return value 83886082 on prog (id 47) dev bridge0, expect packet loss! [ 120.986891][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.110'. [ 121.500188][ T6255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.587385][ T6261] netlink: 76 bytes leftover after parsing attributes in process `syz.0.114'. [ 121.785877][ T6264] netlink: 156916 bytes leftover after parsing attributes in process `syz.3.117'. [ 121.785928][ T6264] ksmbd: Unknown IPC event: 4, ignore. [ 121.807169][ T6259] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 126.921774][ T6317] netlink: 64 bytes leftover after parsing attributes in process `syz.4.130'. [ 126.953003][ T6320] netlink: 204 bytes leftover after parsing attributes in process `syz.4.130'. [ 127.063028][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.131'. [ 127.324377][ T6331] netlink: 76 bytes leftover after parsing attributes in process `syz.0.132'. [ 127.749354][ T6338] warning: `syz.1.135' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 128.558123][ T6353] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.078443][ T6375] netlink: 'syz.0.146': attribute type 7 has an invalid length. [ 130.078520][ T6375] netlink: 'syz.0.146': attribute type 7 has an invalid length. [ 130.084427][ T6378] netlink: 8772 bytes leftover after parsing attributes in process `syz.2.144'. [ 130.396640][ T6377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.147'. [ 130.591299][ T6379] can: request_module (can-proto-5) failed. [ 130.819876][ T6390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.150'. [ 130.829398][ T6390] netlink: Unknown conntrack attr (0) [ 130.893483][ T6390] netlink: 76 bytes leftover after parsing attributes in process `syz.4.150'. [ 133.253314][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.253438][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.267382][ T6419] netlink: 16 bytes leftover after parsing attributes in process `syz.0.157'. [ 133.410352][ T6420] netlink: 68 bytes leftover after parsing attributes in process `syz.0.157'. [ 133.576975][ T6419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.157'. [ 133.578045][ T6419] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 135.226332][ T6439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.162'. [ 135.226773][ T6439] netlink: Unknown conntrack attr (0) [ 135.234345][ T6438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.335859][ T6441] netlink: 76 bytes leftover after parsing attributes in process `syz.1.162'. [ 136.288538][ T6469] netlink: 44 bytes leftover after parsing attributes in process `syz.3.173'. [ 136.327001][ T6471] netlink: 48 bytes leftover after parsing attributes in process `syz.1.170'. [ 137.510764][ T6488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.177'. [ 137.520379][ T6488] netlink: Unknown conntrack attr (0) [ 137.609095][ T6492] netlink: 76 bytes leftover after parsing attributes in process `syz.4.177'. [ 137.749442][ T6494] netlink: 'syz.3.179': attribute type 29 has an invalid length. [ 137.837498][ T6498] netlink: 'syz.3.179': attribute type 29 has an invalid length. [ 137.849882][ T6494] netlink: 'syz.3.179': attribute type 29 has an invalid length. [ 138.227690][ T6506] netlink: 'syz.3.179': attribute type 10 has an invalid length. [ 140.665911][ T6562] netlink: 28 bytes leftover after parsing attributes in process `syz.2.202'. [ 142.135966][ T6592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'. [ 144.104524][ T6634] netlink: 72 bytes leftover after parsing attributes in process `syz.0.217'. [ 145.053319][ T6660] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 145.733264][ T6676] netlink: 'syz.0.228': attribute type 10 has an invalid length. [ 146.467940][ T6676] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 146.500214][ T6676] team0: Port device netdevsim1 added [ 148.199557][ T31] audit: type=1800 audit(1790112621.328:2): pid=6691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.232" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 148.239989][ T6691] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 148.240068][ T6691] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 148.240169][ T6691] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 148.446307][ T6691] syz.0.232 (6691) used greatest stack depth: 16688 bytes left [ 148.721048][ T6714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.239'. [ 148.791133][ T6714] netlink: 44 bytes leftover after parsing attributes in process `syz.3.239'. [ 148.925618][ T6718] netlink: 64 bytes leftover after parsing attributes in process `syz.4.237'. [ 149.601676][ T6729] netlink: 'syz.2.241': attribute type 8 has an invalid length. [ 149.651360][ T6729] netlink: 'syz.2.241': attribute type 16 has an invalid length. [ 149.651451][ T6729] netlink: 'syz.2.241': attribute type 17 has an invalid length. [ 149.817230][ T6741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.244'. [ 149.817386][ T6741] netlink: Unknown conntrack attr (0) [ 150.977057][ T6754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.247'. [ 151.010260][ T6754] netlink: 'syz.2.247': attribute type 10 has an invalid length. [ 151.099451][ T6754] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 151.160378][ T6754] team0: Port device wlan0 added [ 151.171139][ T6751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.420959][ T6761] netlink: 'syz.1.248': attribute type 14 has an invalid length. [ 153.027674][ T6784] netlink: 'syz.1.254': attribute type 39 has an invalid length. [ 153.355728][ T6788] netlink: 164 bytes leftover after parsing attributes in process `syz.4.257'. [ 153.368877][ T6789] netlink: 164 bytes leftover after parsing attributes in process `syz.4.257'. [ 153.509339][ T6790] IPv6: Can't replace route, no match found [ 155.860412][ T6784] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 156.066382][ T6797] FAULT_INJECTION: forcing a failure. [ 156.066382][ T6797] name failslab, interval 1, probability 0, space 0, times 0 [ 156.066462][ T6797] CPU: 1 UID: 0 PID: 6797 Comm: syz.1.261 Not tainted syzkaller #0 PREEMPT(full) [ 156.066489][ T6797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.066504][ T6797] Call Trace: [ 156.066516][ T6797] [ 156.066529][ T6797] dump_stack_lvl+0xe8/0x150 [ 156.066591][ T6797] should_fail_ex+0x410/0x560 [ 156.066644][ T6797] should_failslab+0xa8/0x100 [ 156.066688][ T6797] __kmalloc_cache_node_noprof+0xaa/0x620 [ 156.066724][ T6797] ? tracing_gen_ctx_irq_test+0xc1/0x160 [ 156.066758][ T6797] ? __get_vm_area_node+0x155/0x2f0 [ 156.066792][ T6797] ? __get_vm_area_node+0x155/0x2f0 [ 156.066859][ T6797] __get_vm_area_node+0x155/0x2f0 [ 156.066923][ T6797] __vmalloc_node_range_noprof+0x343/0x1540 [ 156.066955][ T6797] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 156.066989][ T6797] ? __pfx_perf_tp_event+0x10/0x10 [ 156.067128][ T6797] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 156.067195][ T6797] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 156.067222][ T6797] __vmalloc_noprof+0xd2/0x120 [ 156.067253][ T6797] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 156.067296][ T6797] bpf_prog_alloc_no_stats+0x47/0x560 [ 156.067325][ T6797] ? bpf_prog_alloc+0x2a/0x1a0 [ 156.067368][ T6797] bpf_prog_alloc+0x3c/0x1a0 [ 156.067424][ T6797] bpf_prog_load+0x7f8/0x1c20 [ 156.067506][ T6797] ? __pfx_bpf_prog_load+0x10/0x10 [ 156.067636][ T6797] __sys_bpf+0xd0d/0xd90 [ 156.067711][ T6797] ? __pfx___sys_bpf+0x10/0x10 [ 156.067792][ T6797] ? __fget_files+0x2a/0x420 [ 156.067893][ T6797] ? ksys_write+0x242/0x270 [ 156.067936][ T6797] ? __pfx_ksys_write+0x10/0x10 [ 156.067991][ T6797] __x64_sys_bpf+0xba/0xd0 [ 156.068037][ T6797] do_syscall_64+0x166/0x520 [ 156.068071][ T6797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.068099][ T6797] ? clear_bhb_loop+0x70/0xc0 [ 156.068151][ T6797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.068178][ T6797] RIP: 0033:0x7f8e6af9e159 [ 156.068216][ T6797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.068235][ T6797] RSP: 002b:00007f8e6bf05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 156.068266][ T6797] RAX: ffffffffffffffda RBX: 00007f8e6b225fa0 RCX: 00007f8e6af9e159 [ 156.068284][ T6797] RDX: 0000000000000094 RSI: 0000200000000900 RDI: 0000000000000005 [ 156.068300][ T6797] RBP: 00007f8e6bf05090 R08: 0000000000000000 R09: 0000000000000000 [ 156.068314][ T6797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.068329][ T6797] R13: 00007f8e6b226038 R14: 00007f8e6b225fa0 R15: 00007ffe5f048218 [ 156.068414][ T6797] [ 156.204497][ T6797] syz.1.261: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 156.204727][ T6797] CPU: 0 UID: 0 PID: 6797 Comm: syz.1.261 Not tainted syzkaller #0 PREEMPT(full) [ 156.204796][ T6797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.204829][ T6797] Call Trace: [ 156.204859][ T6797] [ 156.204891][ T6797] dump_stack_lvl+0xe8/0x150 [ 156.205018][ T6797] warn_alloc+0x24d/0x270 [ 156.205112][ T6797] ? __kasan_kmalloc+0x22/0xb0 [ 156.205247][ T6797] ? __pfx_warn_alloc+0x10/0x10 [ 156.205323][ T6797] ? __get_vm_area_node+0x155/0x2f0 [ 156.205389][ T6797] ? __get_vm_area_node+0x2a9/0x2f0 [ 156.205605][ T6797] __vmalloc_node_range_noprof+0x36b/0x1540 [ 156.205689][ T6797] ? __pfx_perf_tp_event+0x10/0x10 [ 156.206027][ T6797] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 156.206207][ T6797] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 156.206280][ T6797] __vmalloc_noprof+0xd2/0x120 [ 156.206356][ T6797] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 156.206474][ T6797] bpf_prog_alloc_no_stats+0x47/0x560 [ 156.206551][ T6797] ? bpf_prog_alloc+0x2a/0x1a0 [ 156.206664][ T6797] bpf_prog_alloc+0x3c/0x1a0 [ 156.206779][ T6797] bpf_prog_load+0x7f8/0x1c20 [ 156.207025][ T6797] ? __pfx_bpf_prog_load+0x10/0x10 [ 156.207362][ T6797] __sys_bpf+0xd0d/0xd90 [ 156.207517][ T6797] ? __pfx___sys_bpf+0x10/0x10 [ 156.207704][ T6797] ? __fget_files+0x2a/0x420 [ 156.207940][ T6797] ? ksys_write+0x242/0x270 [ 156.208053][ T6797] ? __pfx_ksys_write+0x10/0x10 [ 156.208191][ T6797] __x64_sys_bpf+0xba/0xd0 [ 156.208323][ T6797] do_syscall_64+0x166/0x520 [ 156.208413][ T6797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.208480][ T6797] ? clear_bhb_loop+0x70/0xc0 [ 156.208610][ T6797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.208676][ T6797] RIP: 0033:0x7f8e6af9e159 [ 156.208750][ T6797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.208801][ T6797] RSP: 002b:00007f8e6bf05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 156.208865][ T6797] RAX: ffffffffffffffda RBX: 00007f8e6b225fa0 RCX: 00007f8e6af9e159 [ 156.208907][ T6797] RDX: 0000000000000094 RSI: 0000200000000900 RDI: 0000000000000005 [ 156.208948][ T6797] RBP: 00007f8e6bf05090 R08: 0000000000000000 R09: 0000000000000000 [ 156.208981][ T6797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.209021][ T6797] R13: 00007f8e6b226038 R14: 00007f8e6b225fa0 R15: 00007ffe5f048218 [ 156.209237][ T6797] [ 156.324471][ T6797] Mem-Info: [ 156.324514][ T6797] active_anon:5689 inactive_anon:0 isolated_anon:0 [ 156.324514][ T6797] active_file:0 inactive_file:53060 isolated_file:0 [ 156.324514][ T6797] unevictable:0 dirty:157 writeback:0 [ 156.324514][ T6797] slab_reclaimable:10168 slab_unreclaimable:93915 [ 156.324514][ T6797] mapped:29308 shmem:520 pagetables:1113 [ 156.324514][ T6797] sec_pagetables:0 bounce:0 [ 156.324514][ T6797] kernel_misc_reclaimable:0 [ 156.324514][ T6797] free:1328768 free_pcp:8729 free_cma:0 [ 156.324697][ T6797] Node 0 active_anon:22756kB inactive_anon:0kB active_file:0kB inactive_file:212032kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117232kB dirty:624kB writeback:0kB shmem:2080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11968kB pagetables:4292kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 156.324858][ T6797] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 156.324993][ T6797] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 156.325168][ T6797] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 156.325302][ T6797] Node 0 DMA32 free:1357340kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22756kB inactive_anon:0kB active_file:0kB inactive_file:212032kB unevictable:0kB writepending:624kB zspages:0kB present:3129332kB managed:2546616kB mlocked:0kB bounce:0kB free_pcp:34916kB local_pcp:19984kB free_cma:0kB [ 156.325469][ T6797] lowmem_reserve[]: 0 0 0 0 0 [ 156.325598][ T6797] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 156.325750][ T6797] lowmem_reserve[]: 0 0 0 0 0 [ 156.344783][ T6797] Node 1 Normal free:3942372kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 156.344959][ T6797] lowmem_reserve[]: 0 0 0 0 0 [ 156.345093][ T6797] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 156.345528][ T6797] Node 0 DMA32: 471*4kB (UME) 890*8kB (UM) 857*16kB (UME) 2179*32kB (UME) 834*64kB (UME) 281*128kB (UME) 118*256kB (UM) 41*512kB (UM) 26*1024kB (UME) 8*2048kB (UME) 264*4096kB (UM) = 1357340kB [ 156.346063][ T6797] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 156.367468][ T6797] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 8*16kB (UM) 6*32kB (UM) 6*64kB (UM) 2*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 961*4096kB (M) = 3942372kB [ 156.368034][ T6797] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 156.368078][ T6797] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 156.368128][ T6797] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 156.368177][ T6797] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 156.368221][ T6797] 53576 total pagecache pages [ 156.368243][ T6797] 0 pages in swap cache [ 156.368264][ T6797] Free swap = 124996kB [ 156.368291][ T6797] Total swap = 124996kB [ 156.368315][ T6797] 2097051 pages RAM [ 156.368336][ T6797] 0 pages HighMem/MovableOnly [ 156.368357][ T6797] 428781 pages reserved [ 156.368378][ T6797] 0 pages cma reserved [ 157.958361][ T6824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.267'. [ 161.849802][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.285'. [ 162.373172][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'. [ 162.373246][ T6905] netlink: 32 bytes leftover after parsing attributes in process `syz.0.290'. [ 162.439335][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'. [ 163.097538][ T5632] Bluetooth: hci3: ISO packet for unknown connection handle 3327 [ 163.420488][ T6927] netlink: 'syz.0.299': attribute type 11 has an invalid length. [ 163.457125][ T6928] netlink: 'syz.0.299': attribute type 11 has an invalid length. [ 163.812211][ T6932] netdevsim netdevsim4 ªªªªªª: renamed from netdevsim0 (while UP) [ 165.277309][ T6960] netlink: 'syz.3.307': attribute type 10 has an invalid length. [ 165.521966][ T6960] team0: Device wg2 is of different type [ 165.945118][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.311'. [ 169.367089][ T6991] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.315'. [ 169.367172][ T6991] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 169.917952][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.322'. [ 170.112853][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.323'. [ 170.536027][ T7030] FAULT_INJECTION: forcing a failure. [ 170.536027][ T7030] name failslab, interval 1, probability 0, space 0, times 0 [ 170.536133][ T7030] CPU: 1 UID: 0 PID: 7030 Comm: syz.3.330 Not tainted syzkaller #0 PREEMPT(full) [ 170.536160][ T7030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.536172][ T7030] Call Trace: [ 170.536181][ T7030] [ 170.536191][ T7030] dump_stack_lvl+0xe8/0x150 [ 170.536228][ T7030] should_fail_ex+0x410/0x560 [ 170.536269][ T7030] should_failslab+0xa8/0x100 [ 170.536303][ T7030] __kmalloc_cache_noprof+0xa3/0x600 [ 170.536330][ T7030] ? __se_sys_mount+0x166/0x420 [ 170.536362][ T7030] ? __se_sys_mount+0x166/0x420 [ 170.536396][ T7030] ? memdup_user+0x99/0xd0 [ 170.536427][ T7030] __se_sys_mount+0x166/0x420 [ 170.536467][ T7030] ? __pfx___se_sys_mount+0x10/0x10 [ 170.536508][ T7030] ? __x64_sys_mount+0x20/0xc0 [ 170.536545][ T7030] do_syscall_64+0x166/0x520 [ 170.536571][ T7030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.536594][ T7030] ? clear_bhb_loop+0x70/0xc0 [ 170.536623][ T7030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.536645][ T7030] RIP: 0033:0x7fb1f499e159 [ 170.536666][ T7030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.536684][ T7030] RSP: 002b:00007fb1f5905028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 170.536708][ T7030] RAX: ffffffffffffffda RBX: 00007fb1f4c25fa0 RCX: 00007fb1f499e159 [ 170.536725][ T7030] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 170.536740][ T7030] RBP: 00007fb1f5905090 R08: 0000200000000580 R09: 0000000000000000 [ 170.536754][ T7030] R10: 000000000320c8d4 R11: 0000000000000246 R12: 0000000000000001 [ 170.536768][ T7030] R13: 00007fb1f4c26038 R14: 00007fb1f4c25fa0 R15: 00007ffc70b755b8 [ 170.536804][ T7030] [ 173.855342][ T7047] netlink: 108 bytes leftover after parsing attributes in process `syz.3.335'. [ 174.772885][ T7070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.342'. [ 174.773030][ T7070] netlink: Unknown conntrack attr (0) [ 174.967609][ T7073] netlink: 76 bytes leftover after parsing attributes in process `syz.4.342'. [ 175.271205][ T7079] syzkaller0: entered promiscuous mode [ 175.287520][ T7079] syzkaller0: entered allmulticast mode [ 179.557947][ T7111] netlink: 36 bytes leftover after parsing attributes in process `syz.0.354'. [ 180.369546][ T7114] FAULT_INJECTION: forcing a failure. [ 180.369546][ T7114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.369640][ T7114] CPU: 0 UID: 0 PID: 7114 Comm: syz.2.355 Not tainted syzkaller #0 PREEMPT(full) [ 180.369667][ T7114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.369680][ T7114] Call Trace: [ 180.369688][ T7114] [ 180.369697][ T7114] dump_stack_lvl+0xe8/0x150 [ 180.369732][ T7114] should_fail_ex+0x410/0x560 [ 180.369762][ T7114] strncpy_from_user+0x36/0x2c0 [ 180.369789][ T7114] do_getname+0x77/0x250 [ 180.369822][ T7114] user_path_at+0x2a/0x160 [ 180.369846][ T7114] __se_sys_mount+0x2dc/0x420 [ 180.369883][ T7114] ? __pfx___se_sys_mount+0x10/0x10 [ 180.369922][ T7114] ? __x64_sys_mount+0x20/0xc0 [ 180.369957][ T7114] do_syscall_64+0x166/0x520 [ 180.369984][ T7114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.370007][ T7114] ? clear_bhb_loop+0x70/0xc0 [ 180.370034][ T7114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.370055][ T7114] RIP: 0033:0x7f9107d9e159 [ 180.370074][ T7114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.370140][ T7114] RSP: 002b:00007f9105ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 180.370214][ T7114] RAX: ffffffffffffffda RBX: 00007f9108025fa0 RCX: 00007f9107d9e159 [ 180.370250][ T7114] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 180.370326][ T7114] RBP: 00007f9105ff6090 R08: 0000200000000580 R09: 0000000000000000 [ 180.370368][ T7114] R10: 000000000320c8d4 R11: 0000000000000246 R12: 0000000000000001 [ 180.370406][ T7114] R13: 00007f9108026038 R14: 00007f9108025fa0 R15: 00007ffedd102188 [ 180.370502][ T7114] [ 183.922316][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 183.971343][ T7136] netlink: 44 bytes leftover after parsing attributes in process `syz.1.363'. [ 184.204245][ T7130] dummy1: entered promiscuous mode [ 184.227699][ T7130] dummy1: entered allmulticast mode [ 187.229515][ T7145] netlink: 76 bytes leftover after parsing attributes in process `syz.2.367'. [ 187.382675][ T7156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.393293][ T7157] netlink: 'syz.4.370': attribute type 11 has an invalid length. [ 187.431188][ T7155] netlink: 24 bytes leftover after parsing attributes in process `syz.4.370'. [ 187.494036][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.370'. [ 187.603021][ T7164] FAULT_INJECTION: forcing a failure. [ 187.603021][ T7164] name failslab, interval 1, probability 0, space 0, times 0 [ 187.604150][ T7164] CPU: 1 UID: 0 PID: 7164 Comm: syz.3.369 Not tainted syzkaller #0 PREEMPT(full) [ 187.604180][ T7164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 187.604194][ T7164] Call Trace: [ 187.604203][ T7164] [ 187.604213][ T7164] dump_stack_lvl+0xe8/0x150 [ 187.604260][ T7164] should_fail_ex+0x410/0x560 [ 187.604293][ T7164] should_failslab+0xa8/0x100 [ 187.604326][ T7164] __kmalloc_noprof+0xfe/0x720 [ 187.604351][ T7164] ? lock_acquire+0x115/0x350 [ 187.604371][ T7164] ? tomoyo_encode+0x2ad/0x570 [ 187.604399][ T7164] ? tomoyo_encode+0x2ad/0x570 [ 187.604436][ T7164] tomoyo_encode+0x2ad/0x570 [ 187.604472][ T7164] tomoyo_mount_permission+0x3a4/0x9e0 [ 187.604502][ T7164] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 187.604536][ T7164] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 187.604563][ T7164] ? kasan_save_track+0x4f/0x80 [ 187.604641][ T7164] ? kasan_quarantine_put+0xbb/0x1f0 [ 187.604670][ T7164] security_sb_mount+0xe4/0x320 [ 187.604704][ T7164] path_mount+0xbc/0x1050 [ 187.604742][ T7164] ? user_path_at+0xd4/0x160 [ 187.604768][ T7164] __se_sys_mount+0x31d/0x420 [ 187.604808][ T7164] ? __pfx___se_sys_mount+0x10/0x10 [ 187.604849][ T7164] ? __x64_sys_mount+0x20/0xc0 [ 187.604885][ T7164] do_syscall_64+0x166/0x520 [ 187.604911][ T7164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.604934][ T7164] ? clear_bhb_loop+0x70/0xc0 [ 187.604962][ T7164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.604984][ T7164] RIP: 0033:0x7fb1f499e159 [ 187.605005][ T7164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.605024][ T7164] RSP: 002b:00007fb1f58e4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 187.605047][ T7164] RAX: ffffffffffffffda RBX: 00007fb1f4c26090 RCX: 00007fb1f499e159 [ 187.605064][ T7164] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 187.605079][ T7164] RBP: 00007fb1f58e4090 R08: 0000200000000580 R09: 0000000000000000 [ 187.605094][ T7164] R10: 000000000320c8d4 R11: 0000000000000246 R12: 0000000000000001 [ 187.605107][ T7164] R13: 00007fb1f4c26128 R14: 00007fb1f4c26090 R15: 00007ffc70b755b8 [ 187.605143][ T7164] [ 188.009830][ T7171] netlink: 32 bytes leftover after parsing attributes in process `syz.2.375'. [ 189.896359][ T7208] netlink: 48 bytes leftover after parsing attributes in process `syz.3.384'. [ 189.979909][ T7208] netlink: 'syz.3.384': attribute type 10 has an invalid length. [ 189.979954][ T7208] netlink: 40 bytes leftover after parsing attributes in process `syz.3.384'. [ 192.487501][ T7208] batadv0: entered promiscuous mode [ 192.487549][ T7208] batadv0: entered allmulticast mode [ 192.488393][ T7208] bridge0: port 3(batadv0) entered blocking state [ 192.488516][ T7208] bridge0: port 3(batadv0) entered disabled state [ 192.528210][ T7208] bridge0: port 3(batadv0) entered blocking state [ 192.528850][ T7208] bridge0: port 3(batadv0) entered forwarding state [ 192.948790][ T7222] netlink: 24 bytes leftover after parsing attributes in process `syz.1.387'. [ 193.023129][ T37] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 193.023175][ T37] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 194.116670][ T7246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.398'. [ 194.635916][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.636000][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.056503][ T7265] netlink: 160 bytes leftover after parsing attributes in process `syz.0.402'. [ 195.467003][ T7279] netlink: 52 bytes leftover after parsing attributes in process `syz.0.406'. [ 196.843982][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.420'. [ 197.226043][ T7328] netlink: 16 bytes leftover after parsing attributes in process `syz.1.424'. [ 199.065386][ T7355] bridge_slave_1: left allmulticast mode [ 199.076051][ T7355] bridge_slave_1: left promiscuous mode [ 199.082486][ T7355] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.228612][ T7355] bridge_slave_0: left allmulticast mode [ 199.228713][ T7355] bridge_slave_0: left promiscuous mode [ 199.236188][ T7355] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.674437][ T7372] netlink: 76 bytes leftover after parsing attributes in process `syz.0.432'. [ 200.695143][ T7383] netlink: 'syz.2.436': attribute type 10 has an invalid length. [ 202.424061][ T7423] FAULT_INJECTION: forcing a failure. [ 202.424061][ T7423] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 202.424137][ T7423] CPU: 1 UID: 0 PID: 7423 Comm: syz.1.448 Not tainted syzkaller #0 PREEMPT(full) [ 202.424165][ T7423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 202.424180][ T7423] Call Trace: [ 202.424192][ T7423] [ 202.424206][ T7423] dump_stack_lvl+0xe8/0x150 [ 202.424258][ T7423] should_fail_ex+0x410/0x560 [ 202.424315][ T7423] prepare_alloc_pages+0x223/0x600 [ 202.424378][ T7423] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 202.424431][ T7423] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 202.424462][ T7423] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 202.424514][ T7423] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 202.424566][ T7423] ? __pfx_policy_nodemask+0x10/0x10 [ 202.424603][ T7423] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 202.424630][ T7423] ? __vmalloc_noprof+0xd2/0x120 [ 202.424672][ T7423] __alloc_pages_noprof+0x10/0x100 [ 202.424715][ T7423] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 202.424784][ T7423] ? alloc_pages_noprof+0x140/0x2b0 [ 202.424842][ T7423] __kasan_populate_vmalloc+0xb7/0x1c0 [ 202.424901][ T7423] alloc_vmap_area+0xd1a/0x1420 [ 202.425012][ T7423] ? __pfx_alloc_vmap_area+0x10/0x10 [ 202.425048][ T7423] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 202.425087][ T7423] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 202.425119][ T7423] ? __get_vm_area_node+0x155/0x2f0 [ 202.425183][ T7423] __get_vm_area_node+0x200/0x2f0 [ 202.425256][ T7423] __vmalloc_node_range_noprof+0x343/0x1540 [ 202.425290][ T7423] ? bpf_check+0x10ee/0x2e40 [ 202.425372][ T7423] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 202.425403][ T7423] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 202.425475][ T7423] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 202.425514][ T7423] ? apparmor_capable+0x126/0x170 [ 202.425573][ T7423] ? bpf_lsm_capable+0x9/0x20 [ 202.425599][ T7423] ? security_capable+0x7e/0x2c0 [ 202.425644][ T7423] ? bpf_check+0x10ee/0x2e40 [ 202.425671][ T7423] __vmalloc_noprof+0xd2/0x120 [ 202.425703][ T7423] ? bpf_check+0x10ee/0x2e40 [ 202.425748][ T7423] bpf_check+0x10ee/0x2e40 [ 202.425854][ T7423] ? __pfx_bpf_check+0x10/0x10 [ 202.425902][ T7423] ? bpf_obj_name_cpy+0x194/0x1e0 [ 202.425993][ T7423] bpf_prog_load+0x14d6/0x1c20 [ 202.426080][ T7423] ? __pfx_bpf_prog_load+0x10/0x10 [ 202.426217][ T7423] __sys_bpf+0xd0d/0xd90 [ 202.426288][ T7423] ? __pfx___sys_bpf+0x10/0x10 [ 202.426336][ T7423] ? __pfx_trace_call_bpf+0x10/0x10 [ 202.426471][ T7423] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 202.426496][ T7423] ? ksys_write+0x242/0x270 [ 202.426539][ T7423] ? __pfx_ksys_write+0x10/0x10 [ 202.426594][ T7423] __x64_sys_bpf+0xba/0xd0 [ 202.426641][ T7423] do_syscall_64+0x166/0x520 [ 202.426679][ T7423] ? trace_irq_disable+0x3b/0x140 [ 202.426705][ T7423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.426735][ T7423] ? clear_bhb_loop+0x70/0xc0 [ 202.426779][ T7423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.426808][ T7423] RIP: 0033:0x7f8e6af9e159 [ 202.426838][ T7423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.426858][ T7423] RSP: 002b:00007f8e6bf05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 202.426886][ T7423] RAX: ffffffffffffffda RBX: 00007f8e6b225fa0 RCX: 00007f8e6af9e159 [ 202.426904][ T7423] RDX: 0000000000000094 RSI: 0000200000000900 RDI: 0000000000000005 [ 202.426920][ T7423] RBP: 00007f8e6bf05090 R08: 0000000000000000 R09: 0000000000000000 [ 202.426936][ T7423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 202.426951][ T7423] R13: 00007f8e6b226038 R14: 00007f8e6b225fa0 R15: 00007ffe5f048218 [ 202.427047][ T7423] [ 202.438955][ T7423] syz.1.448: vmalloc error: size 2448, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 202.439124][ T7423] CPU: 1 UID: 0 PID: 7423 Comm: syz.1.448 Not tainted syzkaller #0 PREEMPT(full) [ 202.439151][ T7423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 202.439166][ T7423] Call Trace: [ 202.439178][ T7423] [ 202.439191][ T7423] dump_stack_lvl+0xe8/0x150 [ 202.439242][ T7423] warn_alloc+0x24d/0x270 [ 202.439284][ T7423] ? lockdep_hardirqs_on+0x7b/0x110 [ 202.439327][ T7423] ? __pfx_warn_alloc+0x10/0x10 [ 202.439360][ T7423] ? kfree+0x1c5/0x650 [ 202.439426][ T7423] ? __get_vm_area_node+0x219/0x2f0 [ 202.439503][ T7423] __vmalloc_node_range_noprof+0x36b/0x1540 [ 202.439609][ T7423] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 202.439641][ T7423] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 202.439717][ T7423] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 202.439755][ T7423] ? apparmor_capable+0x126/0x170 [ 202.439808][ T7423] ? bpf_lsm_capable+0x9/0x20 [ 202.439835][ T7423] ? security_capable+0x7e/0x2c0 [ 202.439878][ T7423] ? bpf_check+0x10ee/0x2e40 [ 202.439905][ T7423] __vmalloc_noprof+0xd2/0x120 [ 202.439937][ T7423] ? bpf_check+0x10ee/0x2e40 [ 202.439988][ T7423] bpf_check+0x10ee/0x2e40 [ 202.440104][ T7423] ? __pfx_bpf_check+0x10/0x10 [ 202.440152][ T7423] ? bpf_obj_name_cpy+0x194/0x1e0 [ 202.440211][ T7423] bpf_prog_load+0x14d6/0x1c20 [ 202.440296][ T7423] ? __pfx_bpf_prog_load+0x10/0x10 [ 202.440434][ T7423] __sys_bpf+0xd0d/0xd90 [ 202.440504][ T7423] ? __pfx___sys_bpf+0x10/0x10 [ 202.440553][ T7423] ? __pfx_trace_call_bpf+0x10/0x10 [ 202.440691][ T7423] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 202.440720][ T7423] ? ksys_write+0x242/0x270 [ 202.440763][ T7423] ? __pfx_ksys_write+0x10/0x10 [ 202.440818][ T7423] __x64_sys_bpf+0xba/0xd0 [ 202.440865][ T7423] do_syscall_64+0x166/0x520 [ 202.440895][ T7423] ? trace_irq_disable+0x3b/0x140 [ 202.440921][ T7423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.440951][ T7423] ? clear_bhb_loop+0x70/0xc0 [ 202.441003][ T7423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.441031][ T7423] RIP: 0033:0x7f8e6af9e159 [ 202.441060][ T7423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.441080][ T7423] RSP: 002b:00007f8e6bf05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 202.441106][ T7423] RAX: ffffffffffffffda RBX: 00007f8e6b225fa0 RCX: 00007f8e6af9e159 [ 202.441124][ T7423] RDX: 0000000000000094 RSI: 0000200000000900 RDI: 0000000000000005 [ 202.441140][ T7423] RBP: 00007f8e6bf05090 R08: 0000000000000000 R09: 0000000000000000 [ 202.441157][ T7423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 202.441171][ T7423] R13: 00007f8e6b226038 R14: 00007f8e6b225fa0 R15: 00007ffe5f048218 [ 202.441264][ T7423] [ 202.450267][ T7423] Mem-Info: [ 202.450296][ T7423] active_anon:5657 inactive_anon:0 isolated_anon:0 [ 202.450296][ T7423] active_file:0 inactive_file:57428 isolated_file:0 [ 202.450296][ T7423] unevictable:0 dirty:257 writeback:0 [ 202.450296][ T7423] slab_reclaimable:10008 slab_unreclaimable:94335 [ 202.450296][ T7423] mapped:29444 shmem:520 pagetables:1144 [ 202.450296][ T7423] sec_pagetables:0 bounce:0 [ 202.450296][ T7423] kernel_misc_reclaimable:0 [ 202.450296][ T7423] free:1311472 free_pcp:21418 free_cma:0 [ 202.450367][ T7423] Node 0 active_anon:22628kB inactive_anon:0kB active_file:0kB inactive_file:229504kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117776kB dirty:1028kB writeback:0kB shmem:2080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12368kB pagetables:4416kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 202.450440][ T7423] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 202.450509][ T7423] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 202.539864][ T7423] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 202.539942][ T7423] Node 0 DMA32 free:1287936kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22628kB inactive_anon:0kB active_file:0kB inactive_file:229504kB unevictable:0kB writepending:1028kB zspages:0kB present:3129332kB managed:2546616kB mlocked:0kB bounce:0kB free_pcp:85656kB local_pcp:58484kB free_cma:0kB [ 202.540024][ T7423] lowmem_reserve[]: 0 0 0 0 0 [ 202.540088][ T7423] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 202.540156][ T7423] lowmem_reserve[]: 0 0 0 0 0 [ 202.540220][ T7423] Node 1 Normal free:3942368kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 202.540292][ T7423] lowmem_reserve[]: 0 0 0 0 0 [ 202.540356][ T7423] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 202.540552][ T7423] Node 0 DMA32: 1093*4kB (UME) 887*8kB (UME) 978*16kB (UM) 2411*32kB (UME) 1042*64kB (UME) 380*128kB (UME) 79*256kB (UM) 15*512kB (UM) 14*1024kB (UME) 5*2048kB (UME) 248*4096kB (M) = 1287884kB [ 202.540824][ T7423] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 202.616771][ T7423] Node 1 Normal: 2*4kB (M) 3*8kB (UM) 8*16kB (UM) 6*32kB (UM) 6*64kB (UM) 2*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 961*4096kB (M) = 3942368kB [ 202.617377][ T7423] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 202.617400][ T7423] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 202.617421][ T7423] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 202.617443][ T7423] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 202.617470][ T7423] 57944 total pagecache pages [ 202.617482][ T7423] 0 pages in swap cache [ 202.617493][ T7423] Free swap = 124996kB [ 202.617505][ T7423] Total swap = 124996kB [ 202.617518][ T7423] 2097051 pages RAM [ 202.617529][ T7423] 0 pages HighMem/MovableOnly [ 202.617539][ T7423] 428781 pages reserved [ 202.617550][ T7423] 0 pages cma reserved [ 203.655228][ T7428] FAULT_INJECTION: forcing a failure. [ 203.655228][ T7428] name failslab, interval 1, probability 0, space 0, times 0 [ 203.655381][ T7428] CPU: 1 UID: 0 PID: 7428 Comm: syz.1.451 Not tainted syzkaller #0 PREEMPT(full) [ 203.655404][ T7428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 203.655415][ T7428] Call Trace: [ 203.655422][ T7428] [ 203.655430][ T7428] dump_stack_lvl+0xe8/0x150 [ 203.655462][ T7428] should_fail_ex+0x410/0x560 [ 203.655491][ T7428] should_failslab+0xa8/0x100 [ 203.655520][ T7428] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 203.655546][ T7428] ? vfs_parse_monolithic_sep+0x21b/0x360 [ 203.655568][ T7428] ? vfs_parse_monolithic_sep+0x21b/0x360 [ 203.655597][ T7428] kmemdup_nul+0x36/0xf0 [ 203.655624][ T7428] vfs_parse_monolithic_sep+0x21b/0x360 [ 203.655644][ T7428] ? bpf_init_fs_context+0x54/0x240 [ 203.655664][ T7428] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 203.655687][ T7428] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 203.655711][ T7428] ? bpf_init_fs_context+0x14d/0x240 [ 203.655732][ T7428] ? alloc_fs_context+0x9b7/0xd00 [ 203.655760][ T7428] do_new_mount+0x2e2/0xdc0 [ 203.655803][ T7428] ? __pfx_do_new_mount+0x10/0x10 [ 203.655834][ T7428] ? ns_capable+0x89/0xe0 [ 203.655862][ T7428] ? path_mount+0x647/0x1050 [ 203.655893][ T7428] ? user_path_at+0xd4/0x160 [ 203.655916][ T7428] __se_sys_mount+0x31d/0x420 [ 203.655950][ T7428] ? __pfx___se_sys_mount+0x10/0x10 [ 203.655986][ T7428] ? __x64_sys_mount+0x20/0xc0 [ 203.656017][ T7428] do_syscall_64+0x166/0x520 [ 203.656039][ T7428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.656059][ T7428] ? clear_bhb_loop+0x70/0xc0 [ 203.656082][ T7428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.656103][ T7428] RIP: 0033:0x7f8e6af9e159 [ 203.656123][ T7428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.656140][ T7428] RSP: 002b:00007f8e6bf05028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 203.656162][ T7428] RAX: ffffffffffffffda RBX: 00007f8e6b225fa0 RCX: 00007f8e6af9e159 [ 203.656176][ T7428] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 203.656188][ T7428] RBP: 00007f8e6bf05090 R08: 0000200000000580 R09: 0000000000000000 [ 203.656201][ T7428] R10: 000000000320c8d4 R11: 0000000000000246 R12: 0000000000000002 [ 203.656213][ T7428] R13: 00007f8e6b226038 R14: 00007f8e6b225fa0 R15: 00007ffe5f048218 [ 203.656245][ T7428] [ 204.405657][ T7446] openvswitch: netlink: IP tunnel TTL not specified. [ 207.478216][ T7473] FAULT_INJECTION: forcing a failure. [ 207.478216][ T7473] name failslab, interval 1, probability 0, space 0, times 0 [ 207.478321][ T7473] CPU: 0 UID: 0 PID: 7473 Comm: syz.2.464 Not tainted syzkaller #0 PREEMPT(full) [ 207.478392][ T7473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 207.478433][ T7473] Call Trace: [ 207.478466][ T7473] [ 207.478488][ T7473] dump_stack_lvl+0xe8/0x150 [ 207.478599][ T7473] should_fail_ex+0x410/0x560 [ 207.478681][ T7473] should_failslab+0xa8/0x100 [ 207.478757][ T7473] __kmalloc_cache_noprof+0xa3/0x600 [ 207.478827][ T7473] ? sget_fc+0x74a/0x1a40 [ 207.478908][ T7473] ? sget_fc+0x74a/0x1a40 [ 207.479012][ T7473] sget_fc+0x74a/0x1a40 [ 207.479129][ T7473] ? __pfx_set_anon_super_fc+0x10/0x10 [ 207.479187][ T7473] ? __pfx_sget_fc+0x10/0x10 [ 207.479261][ T7473] ? irqentry_exit+0x218/0x910 [ 207.479323][ T7473] ? trace_irq_disable+0x3b/0x140 [ 207.479417][ T7473] ? __pfx_bpf_get_tree+0x10/0x10 [ 207.479466][ T7473] ? __pfx_bpf_fill_super+0x10/0x10 [ 207.479528][ T7473] get_tree_nodev+0x2a/0x150 [ 207.479598][ T7473] vfs_get_tree+0x92/0x2a0 [ 207.479670][ T7473] do_new_mount+0x319/0xdc0 [ 207.479770][ T7473] ? __pfx_do_new_mount+0x10/0x10 [ 207.479869][ T7473] ? ns_capable+0x89/0xe0 [ 207.479978][ T7473] ? path_mount+0x647/0x1050 [ 207.480056][ T7473] ? user_path_at+0xd4/0x160 [ 207.480126][ T7473] __se_sys_mount+0x31d/0x420 [ 207.480221][ T7473] ? __pfx___se_sys_mount+0x10/0x10 [ 207.480322][ T7473] ? __x64_sys_mount+0x20/0xc0 [ 207.480406][ T7473] do_syscall_64+0x166/0x520 [ 207.480469][ T7473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.480522][ T7473] ? clear_bhb_loop+0x70/0xc0 [ 207.480594][ T7473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.480648][ T7473] RIP: 0033:0x7f9107d9e159 [ 207.480720][ T7473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.480770][ T7473] RSP: 002b:00007f9105ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 207.480831][ T7473] RAX: ffffffffffffffda RBX: 00007f9108025fa0 RCX: 00007f9107d9e159 [ 207.480873][ T7473] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 207.480906][ T7473] RBP: 00007f9105ff6090 R08: 0000200000000580 R09: 0000000000000000 [ 207.481009][ T7473] R10: 000000000320c8d4 R11: 0000000000000246 R12: 0000000000000002 [ 207.481051][ T7473] R13: 00007f9108026038 R14: 00007f9108025fa0 R15: 00007ffedd102188 [ 207.481138][ T7473] [ 208.910172][ T7504] netlink: 156 bytes leftover after parsing attributes in process `syz.0.473'. [ 209.836272][ T7512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.476'. [ 210.361822][ T7519] netlink: 'syz.4.480': attribute type 2 has an invalid length. [ 210.379784][ T7519] netlink: 'syz.4.480': attribute type 2 has an invalid length. [ 210.522029][ T7521] xt_policy: neither incoming nor outgoing policy selected [ 211.199183][ T7534] netlink: 'syz.1.485': attribute type 17 has an invalid length. [ 212.238850][ T5622] Bluetooth: hci1: command 0x0406 tx timeout [ 212.239106][ T5622] Bluetooth: hci4: command 0x0406 tx timeout [ 212.239497][ T5622] Bluetooth: hci0: command 0x0406 tx timeout [ 212.239528][ T5622] Bluetooth: hci2: command 0x0406 tx timeout [ 212.239552][ T5622] Bluetooth: hci3: command 0x0406 tx timeout [ 212.646646][ T7569] netlink: 'syz.4.492': attribute type 17 has an invalid length. [ 212.661726][ T7570] netlink: 104 bytes leftover after parsing attributes in process `syz.0.497'. [ 213.520347][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.502'. [ 213.533461][ T7589] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 213.546384][ T7589] netlink: 'syz.4.502': attribute type 10 has an invalid length. [ 213.546455][ T7589] netlink: 168 bytes leftover after parsing attributes in process `syz.4.502'. [ 213.569980][ T7589] vlan0: entered allmulticast mode [ 213.570030][ T7589] veth0_vlan: entered allmulticast mode [ 214.454564][ T7596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.503'. [ 214.472815][ T7599] FAULT_INJECTION: forcing a failure. [ 214.472815][ T7599] name failslab, interval 1, probability 0, space 0, times 0 [ 214.508828][ T7599] CPU: 0 UID: 0 PID: 7599 Comm: syz.0.506 Not tainted syzkaller #0 PREEMPT(full) [ 214.508854][ T7599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 214.508864][ T7599] Call Trace: [ 214.508870][ T7599] [ 214.508877][ T7599] dump_stack_lvl+0xe8/0x150 [ 214.508909][ T7599] should_fail_ex+0x410/0x560 [ 214.508933][ T7599] should_failslab+0xa8/0x100 [ 214.508957][ T7599] __kmalloc_noprof+0xfe/0x720 [ 214.508975][ T7599] ? __list_lru_init+0xba/0x5d0 [ 214.509022][ T7599] ? __list_lru_init+0xba/0x5d0 [ 214.509055][ T7599] __list_lru_init+0xba/0x5d0 [ 214.509090][ T7599] sget_fc+0xf09/0x1a40 [ 214.509133][ T7599] ? __pfx_set_anon_super_fc+0x10/0x10 [ 214.509152][ T7599] ? __pfx_sget_fc+0x10/0x10 [ 214.509176][ T7599] ? vfs_parse_monolithic_sep+0x322/0x360 [ 214.509194][ T7599] ? bpf_init_fs_context+0x54/0x240 [ 214.509210][ T7599] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 214.509270][ T7599] ? __pfx_bpf_fill_super+0x10/0x10 [ 214.509296][ T7599] get_tree_nodev+0x2a/0x150 [ 214.509323][ T7599] vfs_get_tree+0x92/0x2a0 [ 214.509351][ T7599] do_new_mount+0x319/0xdc0 [ 214.509395][ T7599] ? __pfx_do_new_mount+0x10/0x10 [ 214.509434][ T7599] ? path_mount+0x230/0x1050 [ 214.509466][ T7599] ? path_mount+0x647/0x1050 [ 214.509491][ T7599] ? user_path_at+0xd4/0x160 [ 214.509509][ T7599] __se_sys_mount+0x31d/0x420 [ 214.509537][ T7599] ? __pfx___se_sys_mount+0x10/0x10 [ 214.509565][ T7599] ? __x64_sys_mount+0x20/0xc0 [ 214.509590][ T7599] do_syscall_64+0x166/0x520 [ 214.509609][ T7599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.509624][ T7599] ? clear_bhb_loop+0x70/0xc0 [ 214.509643][ T7599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.509659][ T7599] RIP: 0033:0x7fb6d499e159 [ 214.509673][ T7599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.509686][ T7599] RSP: 002b:00007fb6d586d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 214.509702][ T7599] RAX: ffffffffffffffda RBX: 00007fb6d4c25fa0 RCX: 00007fb6d499e159 [ 214.509714][ T7599] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 214.509737][ T7599] RBP: 00007fb6d586d090 R08: 0000200000000580 R09: 0000000000000000 [ 214.509747][ T7599] R10: 000000000320c8d4 R11: 0000000000000246 R12: 0000000000000002 [ 214.509757][ T7599] R13: 00007fb6d4c26038 R14: 00007fb6d4c25fa0 R15: 00007fff1ae83e98 [ 214.509782][ T7599] [ 214.780568][ T7603] netlink: 64 bytes leftover after parsing attributes in process `syz.4.507'. [ 214.968723][ T7610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.509'. [ 214.981099][ T7610] netlink: Unknown conntrack attr (0) [ 215.040781][ T7610] netlink: 76 bytes leftover after parsing attributes in process `syz.0.509'. [ 215.275263][ T7614] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 215.311015][ T7618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.511'. [ 215.311088][ T7618] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 215.356870][ T7620] openvswitch: netlink: IP tunnel dst address not specified [ 215.366887][ T7620] netlink: 20 bytes leftover after parsing attributes in process `syz.1.512'. [ 216.712709][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 217.608531][ T7671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.528'. [ 217.608675][ T7671] netlink: Unknown conntrack attr (0) [ 217.698412][ T7676] netlink: 76 bytes leftover after parsing attributes in process `syz.2.528'. [ 217.773695][ T7670] netlink: 'syz.4.529': attribute type 17 has an invalid length. [ 218.019631][ T7681] netlink: 36 bytes leftover after parsing attributes in process `syz.3.531'. [ 220.169536][ T7716] netlink: 228 bytes leftover after parsing attributes in process `syz.0.544'. [ 220.837528][ T7731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.547'. [ 220.862066][ T7714] netlink: 128 bytes leftover after parsing attributes in process `syz.2.543'. [ 221.032121][ T7714] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.215496][ T7736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.549'. [ 221.358918][ T7736] netlink: 11870 bytes leftover after parsing attributes in process `syz.3.549'. [ 221.705042][ T7747] FAULT_INJECTION: forcing a failure. [ 221.705042][ T7747] name failslab, interval 1, probability 0, space 0, times 0 [ 221.719764][ T7747] CPU: 0 UID: 0 PID: 7747 Comm: syz.3.555 Not tainted syzkaller #0 PREEMPT(full) [ 221.719794][ T7747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 221.719808][ T7747] Call Trace: [ 221.719817][ T7747] [ 221.719826][ T7747] dump_stack_lvl+0xe8/0x150 [ 221.719865][ T7747] should_fail_ex+0x410/0x560 [ 221.719901][ T7747] should_failslab+0xa8/0x100 [ 221.719938][ T7747] __kmalloc_node_noprof+0x100/0x720 [ 221.719966][ T7747] ? lock_acquire+0x115/0x350 [ 221.719987][ T7747] ? qdisc_alloc+0x92/0x9d0 [ 221.720016][ T7747] ? qdisc_alloc+0x92/0x9d0 [ 221.720047][ T7747] ? qdisc_create+0x11c/0xf00 [ 221.720080][ T7747] qdisc_alloc+0x92/0x9d0 [ 221.720124][ T7747] qdisc_create+0x12c/0xf00 [ 221.720171][ T7747] tc_modify_qdisc+0x17af/0x2390 [ 221.720220][ T7747] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 221.720292][ T7747] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 221.720319][ T7747] rtnetlink_rcv_msg+0x7b9/0xc00 [ 221.720355][ T7747] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 221.720382][ T7747] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 221.720436][ T7747] netlink_rcv_skb+0x226/0x4a0 [ 221.720473][ T7747] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 221.720504][ T7747] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 221.720555][ T7747] ? netlink_deliver_tap+0x2e/0x1b0 [ 221.720590][ T7747] ? netlink_deliver_tap+0x2e/0x1b0 [ 221.720631][ T7747] netlink_unicast+0x7bd/0x940 [ 221.720681][ T7747] netlink_sendmsg+0x813/0xb40 [ 221.720714][ T7747] ? lockdep_hardirqs_on+0x7b/0x110 [ 221.720755][ T7747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.720799][ T7747] ? security_socket_sendmsg+0x23f/0x280 [ 221.720843][ T7747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.720877][ T7747] sock_sendmsg_nosec+0x13a/0x180 [ 221.720907][ T7747] ____sys_sendmsg+0x54e/0x850 [ 221.720949][ T7747] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.720995][ T7747] ? import_iovec+0x73/0xa0 [ 221.721033][ T7747] ___sys_sendmsg+0x2a5/0x360 [ 221.721074][ T7747] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.721113][ T7747] ? lockdep_hardirqs_on+0x7b/0x110 [ 221.721139][ T7747] ? irqentry_exit+0x218/0x910 [ 221.721211][ T7747] ? __fget_files+0x2a/0x420 [ 221.721231][ T7747] ? __fget_files+0x3a2/0x420 [ 221.721269][ T7747] __x64_sys_sendmsg+0x1b1/0x290 [ 221.721306][ T7747] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 221.721371][ T7747] do_syscall_64+0x166/0x520 [ 221.721398][ T7747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.721422][ T7747] ? clear_bhb_loop+0x70/0xc0 [ 221.721452][ T7747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.721475][ T7747] RIP: 0033:0x7fb1f499e159 [ 221.721498][ T7747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.721517][ T7747] RSP: 002b:00007fb1f5905028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.721541][ T7747] RAX: ffffffffffffffda RBX: 00007fb1f4c25fa0 RCX: 00007fb1f499e159 [ 221.721557][ T7747] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000007 [ 221.721571][ T7747] RBP: 00007fb1f5905090 R08: 0000000000000000 R09: 0000000000000000 [ 221.721585][ T7747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.721598][ T7747] R13: 00007fb1f4c26038 R14: 00007fb1f4c25fa0 R15: 00007ffc70b755b8 [ 221.721640][ T7747] [ 222.428345][ T7758] netlink: 260 bytes leftover after parsing attributes in process `syz.0.557'. [ 222.524876][ T7779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.137248][ T7780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.385455][ T7789] netlink: 'syz.0.562': attribute type 62 has an invalid length. [ 223.442070][ T7796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.562'. [ 223.781077][ T7806] FAULT_INJECTION: forcing a failure. [ 223.781077][ T7806] name failslab, interval 1, probability 0, space 0, times 0 [ 223.781147][ T7806] CPU: 0 UID: 0 PID: 7806 Comm: syz.2.568 Not tainted syzkaller #0 PREEMPT(full) [ 223.781175][ T7806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.781190][ T7806] Call Trace: [ 223.781204][ T7806] [ 223.781220][ T7806] dump_stack_lvl+0xe8/0x150 [ 223.781278][ T7806] should_fail_ex+0x410/0x560 [ 223.781341][ T7806] ? __alloc_skb+0x1db/0x7a0 [ 223.781376][ T7806] should_failslab+0xa8/0x100 [ 223.781425][ T7806] ? __alloc_skb+0x1db/0x7a0 [ 223.781454][ T7806] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 223.781489][ T7806] ? __alloc_skb+0x18d/0x7a0 [ 223.781540][ T7806] ? __alloc_skb+0x1db/0x7a0 [ 223.781617][ T7806] __alloc_skb+0x1db/0x7a0 [ 223.781684][ T7806] netlink_ack+0x136/0xb30 [ 223.781722][ T7806] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 223.781753][ T7806] ? ref_tracker_free+0x689/0x830 [ 223.781819][ T7806] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 223.781914][ T7806] netlink_rcv_skb+0x2a4/0x4a0 [ 223.781970][ T7806] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 223.782023][ T7806] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 223.782146][ T7806] ? netlink_deliver_tap+0x2e/0x1b0 [ 223.782193][ T7806] ? netlink_deliver_tap+0x2e/0x1b0 [ 223.782279][ T7806] netlink_unicast+0x7bd/0x940 [ 223.782390][ T7806] netlink_sendmsg+0x813/0xb40 [ 223.782499][ T7806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.782594][ T7806] ? apparmor_socket_sendmsg+0x98/0x360 [ 223.782626][ T7806] ? perf_trace_lock+0x32e/0x410 [ 223.782672][ T7806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.782718][ T7806] sock_sendmsg_nosec+0x13a/0x180 [ 223.782780][ T7806] ____sys_sendmsg+0x54e/0x850 [ 223.782859][ T7806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.782959][ T7806] ? import_iovec+0x73/0xa0 [ 223.783026][ T7806] ___sys_sendmsg+0x2a5/0x360 [ 223.783106][ T7806] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.783280][ T7806] ? __fget_files+0x2a/0x420 [ 223.783375][ T7806] ? __fget_files+0x2a/0x420 [ 223.783404][ T7806] ? __fget_files+0x3a2/0x420 [ 223.783504][ T7806] __x64_sys_sendmsg+0x1b1/0x290 [ 223.783567][ T7806] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 223.783730][ T7806] do_syscall_64+0x166/0x520 [ 223.783768][ T7806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.783800][ T7806] ? clear_bhb_loop+0x70/0xc0 [ 223.783855][ T7806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.783885][ T7806] RIP: 0033:0x7f9107d9e159 [ 223.783918][ T7806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.783939][ T7806] RSP: 002b:00007f9105ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.783967][ T7806] RAX: ffffffffffffffda RBX: 00007f9108025fa0 RCX: 00007f9107d9e159 [ 223.783985][ T7806] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000007 [ 223.784001][ T7806] RBP: 00007f9105ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 223.784017][ T7806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.784032][ T7806] R13: 00007f9108026038 R14: 00007f9108025fa0 R15: 00007ffedd102188 [ 223.784150][ T7806] [ 224.533770][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.572'. [ 225.515612][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.574'. [ 225.544512][ T7843] netlink: 44 bytes leftover after parsing attributes in process `syz.3.576'. [ 225.554529][ T7843] netlink: 91 bytes leftover after parsing attributes in process `syz.3.576'. [ 225.709919][ T7844] netlink: 132 bytes leftover after parsing attributes in process `syz.3.576'. [ 225.798830][ T7843] netlink: 'syz.3.576': attribute type 16 has an invalid length. [ 225.800147][ T7843] netlink: 'syz.3.576': attribute type 17 has an invalid length. [ 226.523668][ T7843] bridge0: port 3(batadv0) entered disabled state [ 226.539676][ T7843] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.547111][ T7843] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.754012][ T7862] FAULT_INJECTION: forcing a failure. [ 226.754012][ T7862] name failslab, interval 1, probability 0, space 0, times 0 [ 226.767354][ T7862] CPU: 0 UID: 0 PID: 7862 Comm: syz.0.582 Not tainted syzkaller #0 PREEMPT(full) [ 226.767384][ T7862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 226.767398][ T7862] Call Trace: [ 226.767406][ T7862] [ 226.767415][ T7862] dump_stack_lvl+0xe8/0x150 [ 226.767453][ T7862] should_fail_ex+0x410/0x560 [ 226.767482][ T7862] ? __alloc_skb+0x1db/0x7a0 [ 226.767508][ T7862] should_failslab+0xa8/0x100 [ 226.767540][ T7862] ? __alloc_skb+0x1db/0x7a0 [ 226.767564][ T7862] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 226.767587][ T7862] ? __alloc_skb+0x18d/0x7a0 [ 226.767612][ T7862] ? __alloc_skb+0x1db/0x7a0 [ 226.767644][ T7862] __alloc_skb+0x1db/0x7a0 [ 226.767676][ T7862] netlink_ack+0x136/0xb30 [ 226.767706][ T7862] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 226.767731][ T7862] ? ref_tracker_free+0x689/0x830 [ 226.767761][ T7862] ? __pfx_ref_tracker_free+0x10/0x10 [ 226.767799][ T7862] netlink_rcv_skb+0x2a4/0x4a0 [ 226.767835][ T7862] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 226.767864][ T7862] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 226.767908][ T7862] ? netlink_deliver_tap+0x2e/0x1b0 [ 226.767940][ T7862] ? netlink_deliver_tap+0x2e/0x1b0 [ 226.767978][ T7862] netlink_unicast+0x7bd/0x940 [ 226.768020][ T7862] netlink_sendmsg+0x813/0xb40 [ 226.768065][ T7862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.768107][ T7862] ? apparmor_socket_sendmsg+0x98/0x360 [ 226.768136][ T7862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.768169][ T7862] sock_sendmsg_nosec+0x13a/0x180 [ 226.768195][ T7862] ____sys_sendmsg+0x54e/0x850 [ 226.768229][ T7862] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.768272][ T7862] ? __sanitizer_cov_trace_pc+0x49/0x80 [ 226.768310][ T7862] ? import_iovec+0x73/0xa0 [ 226.768342][ T7862] ___sys_sendmsg+0x2a5/0x360 [ 226.768371][ T7862] ? __lock_acquire+0x747/0x2de0 [ 226.768398][ T7862] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.768425][ T7862] ? __lock_acquire+0x747/0x2de0 [ 226.768454][ T7862] ? do_raw_spin_unlock+0xf5/0x200 [ 226.768515][ T7862] ? __fget_files+0x2a/0x420 [ 226.768534][ T7862] ? __fget_files+0x3a2/0x420 [ 226.768565][ T7862] __x64_sys_sendmsg+0x1b1/0x290 [ 226.768599][ T7862] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 226.768651][ T7862] do_syscall_64+0x166/0x520 [ 226.768678][ T7862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.768700][ T7862] ? clear_bhb_loop+0x70/0xc0 [ 226.768728][ T7862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.768750][ T7862] RIP: 0033:0x7fb6d499e159 [ 226.768771][ T7862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.768789][ T7862] RSP: 002b:00007fb6d586d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.768812][ T7862] RAX: ffffffffffffffda RBX: 00007fb6d4c25fa0 RCX: 00007fb6d499e159 [ 226.768828][ T7862] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000007 [ 226.768841][ T7862] RBP: 00007fb6d586d090 R08: 0000000000000000 R09: 0000000000000000 [ 226.768855][ T7862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.768867][ T7862] R13: 00007fb6d4c26038 R14: 00007fb6d4c25fa0 R15: 00007fff1ae83e98 [ 226.768901][ T7862] [ 227.208331][ T7865] FAULT_INJECTION: forcing a failure. [ 227.208331][ T7865] name failslab, interval 1, probability 0, space 0, times 0 [ 227.208455][ T7865] CPU: 1 UID: 0 PID: 7865 Comm: syz.2.583 Not tainted syzkaller #0 PREEMPT(full) [ 227.208479][ T7865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.208552][ T7865] Call Trace: [ 227.208579][ T7865] [ 227.208608][ T7865] dump_stack_lvl+0xe8/0x150 [ 227.208852][ T7865] should_fail_ex+0x410/0x560 [ 227.208967][ T7865] should_failslab+0xa8/0x100 [ 227.209056][ T7865] __kmalloc_cache_noprof+0xa3/0x600 [ 227.209130][ T7865] ? super_dev_alloc+0x4e/0x100 [ 227.209159][ T7865] ? super_dev_alloc+0x4e/0x100 [ 227.209182][ T7865] ? __list_lru_init+0x4fe/0x5d0 [ 227.209257][ T7865] super_dev_alloc+0x4e/0x100 [ 227.209337][ T7865] sget_fc+0xf65/0x1a40 [ 227.209450][ T7865] ? __pfx_set_anon_super_fc+0x10/0x10 [ 227.209514][ T7865] ? __pfx_sget_fc+0x10/0x10 [ 227.209596][ T7865] ? vfs_parse_monolithic_sep+0x322/0x360 [ 227.209905][ T7865] ? bpf_init_fs_context+0x54/0x240 [ 227.209997][ T7865] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 227.210098][ T7865] ? __pfx_bpf_fill_super+0x10/0x10 [ 227.210173][ T7865] get_tree_nodev+0x2a/0x150 [ 227.210288][ T7865] vfs_get_tree+0x92/0x2a0 [ 227.210359][ T7865] do_new_mount+0x319/0xdc0 [ 227.210460][ T7865] ? __pfx_do_new_mount+0x10/0x10 [ 227.210552][ T7865] ? ns_capable+0x89/0xe0 [ 227.210634][ T7865] ? path_mount+0x647/0x1050 [ 227.210694][ T7865] ? user_path_at+0xd4/0x160 [ 227.210765][ T7865] __se_sys_mount+0x31d/0x420 [ 227.210859][ T7865] ? __pfx___se_sys_mount+0x10/0x10 [ 227.210961][ T7865] ? __x64_sys_mount+0x20/0xc0 [ 227.211045][ T7865] do_syscall_64+0x166/0x520 [ 227.211109][ T7865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.211162][ T7865] ? clear_bhb_loop+0x70/0xc0 [ 227.211243][ T7865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.211309][ T7865] RIP: 0033:0x7f9107d9e159 [ 227.211361][ T7865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.211410][ T7865] RSP: 002b:00007f9105ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 227.211484][ T7865] RAX: ffffffffffffffda RBX: 00007f9108025fa0 RCX: 00007f9107d9e159 [ 227.211533][ T7865] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 227.211579][ T7865] RBP: 00007f9105ff6090 R08: 0000200000000580 R09: 0000000000000000 [ 227.211619][ T7865] R10: 000000000320c8d4 R11: 0000000000000246 R12: 0000000000000002 [ 227.211651][ T7865] R13: 00007f9108026038 R14: 00007f9108025fa0 R15: 00007ffedd102188 [ 227.211747][ T7865] [ 228.679433][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.590'. [ 229.874717][ T7899] netlink: 'syz.1.596': attribute type 17 has an invalid length. [ 230.014312][ T7911] netlink: 64915 bytes leftover after parsing attributes in process `syz.2.594'. [ 231.371164][ T7956] netlink: 64915 bytes leftover after parsing attributes in process `syz.1.601'. [ 231.624062][ T7966] netlink: 16 bytes leftover after parsing attributes in process `syz.3.606'. [ 231.725736][ T7968] netlink: 'syz.0.604': attribute type 17 has an invalid length. [ 234.761473][ T7993] netlink: 'syz.0.609': attribute type 4 has an invalid length. [ 236.574049][ T8017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.618'. [ 236.807025][ T8018] netlink: 11774 bytes leftover after parsing attributes in process `syz.1.617'. [ 236.826631][ T8018] netlink: 11774 bytes leftover after parsing attributes in process `syz.1.617'. [ 238.233253][ T8057] netlink: 'syz.2.625': attribute type 21 has an invalid length. [ 238.324320][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.630'. [ 239.383956][ T8088] netlink: 766 bytes leftover after parsing attributes in process `syz.2.639'. [ 239.387216][ T8088] netlink: 'syz.2.639': attribute type 21 has an invalid length. [ 239.388410][ T8088] netlink: 164 bytes leftover after parsing attributes in process `syz.2.639'. [ 239.549911][ T8099] netlink: 'syz.1.641': attribute type 2 has an invalid length. [ 239.575869][ T8099] : entered promiscuous mode [ 240.391774][ T8112] netlink: 'syz.0.645': attribute type 29 has an invalid length. [ 240.412429][ T8112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.645'. [ 240.412494][ T8112] netlink: 1 bytes leftover after parsing attributes in process `syz.0.645'. [ 240.554802][ T8123] netlink: 'syz.3.648': attribute type 2 has an invalid length. [ 240.563539][ T8123] netlink: 'syz.3.648': attribute type 8 has an invalid length. [ 240.572448][ T8123] netlink: 132 bytes leftover after parsing attributes in process `syz.3.648'. [ 242.007591][ T8154] netlink: 'syz.0.656': attribute type 21 has an invalid length. [ 242.860185][ T8191] netlink: 96 bytes leftover after parsing attributes in process `syz.3.664'. [ 243.134623][ T8197] netdevsim netdevsim0 ªªªªªª: renamed from netdevsim0 (while UP) [ 243.754830][ T8208] netlink: 20 bytes leftover after parsing attributes in process `syz.4.667'. [ 243.823232][ T8208] bond0: (slave bond_slave_0): Releasing backup interface [ 244.039158][ T8208] bond_slave_0: entered promiscuous mode [ 244.039212][ T8208] bond_slave_0: entered allmulticast mode [ 245.465832][ T8232] FAULT_INJECTION: forcing a failure. [ 245.465832][ T8232] name failslab, interval 1, probability 0, space 0, times 0 [ 245.465906][ T8232] CPU: 0 UID: 0 PID: 8232 Comm: syz.1.673 Not tainted syzkaller #0 PREEMPT(full) [ 245.465933][ T8232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 245.465949][ T8232] Call Trace: [ 245.465961][ T8232] [ 245.465975][ T8232] dump_stack_lvl+0xe8/0x150 [ 245.466027][ T8232] should_fail_ex+0x410/0x560 [ 245.466085][ T8232] should_failslab+0xa8/0x100 [ 245.466133][ T8232] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 245.466164][ T8232] ? rcu_is_watching+0x16/0xb0 [ 245.466200][ T8232] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 245.466231][ T8232] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 245.466279][ T8232] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 245.466322][ T8232] krealloc_node_align_noprof+0x19a/0x390 [ 245.466359][ T8232] ? bpf_base_func_proto+0x25f/0xb00 [ 245.466410][ T8232] kvrealloc_node_align_noprof+0x7b/0xf0 [ 245.466457][ T8232] bpf_check_cfg+0x2242/0x3850 [ 245.466487][ T8232] ? perf_trace_lock+0x32e/0x410 [ 245.466551][ T8232] ? __pfx_perf_trace_lock+0x10/0x10 [ 245.466611][ T8232] ? lock_acquire+0x115/0x350 [ 245.466651][ T8232] ? __fget_files+0x2a/0x420 [ 245.466715][ T8232] ? __pfx_bpf_check_cfg+0x10/0x10 [ 245.466759][ T8232] ? bpf_map_inc+0x1e/0x30 [ 245.466795][ T8232] ? __add_used_map+0x98c/0x12e0 [ 245.466856][ T8232] ? fput+0xa0/0xd0 [ 245.466900][ T8232] ? add_used_map+0xff/0x110 [ 245.466948][ T8232] ? check_and_resolve_insns+0x1d54/0x21d0 [ 245.467024][ T8232] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 245.467071][ T8232] ? add_kfuncs+0x251/0x2e0 [ 245.467125][ T8232] bpf_check+0x24b6/0x2e40 [ 245.467243][ T8232] ? __pfx_bpf_check+0x10/0x10 [ 245.467296][ T8232] ? bpf_obj_name_cpy+0x194/0x1e0 [ 245.467354][ T8232] bpf_prog_load+0x14d6/0x1c20 [ 245.467437][ T8232] ? __pfx_bpf_prog_load+0x10/0x10 [ 245.467581][ T8232] __sys_bpf+0xd0d/0xd90 [ 245.467652][ T8232] ? __pfx___sys_bpf+0x10/0x10 [ 245.467699][ T8232] ? __pfx_trace_call_bpf+0x10/0x10 [ 245.467837][ T8232] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 245.467866][ T8232] ? ksys_write+0x242/0x270 [ 245.467909][ T8232] ? __pfx_ksys_write+0x10/0x10 [ 245.467963][ T8232] __x64_sys_bpf+0xba/0xd0 [ 245.468011][ T8232] do_syscall_64+0x166/0x520 [ 245.468041][ T8232] ? trace_irq_disable+0x3b/0x140 [ 245.468067][ T8232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.468097][ T8232] ? clear_bhb_loop+0x70/0xc0 [ 245.468142][ T8232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.468169][ T8232] RIP: 0033:0x7f8e6af9e159 [ 245.468198][ T8232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.468218][ T8232] RSP: 002b:00007f8e6bf05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 245.468245][ T8232] RAX: ffffffffffffffda RBX: 00007f8e6b225fa0 RCX: 00007f8e6af9e159 [ 245.468263][ T8232] RDX: 0000000000000094 RSI: 0000200000000900 RDI: 0000000000000005 [ 245.468278][ T8232] RBP: 00007f8e6bf05090 R08: 0000000000000000 R09: 0000000000000000 [ 245.468294][ T8232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 245.468308][ T8232] R13: 00007f8e6b226038 R14: 00007f8e6b225fa0 R15: 00007ffe5f048218 [ 245.468398][ T8232] [ 246.767560][ T8256] netlink: 64 bytes leftover after parsing attributes in process `syz.3.679'. [ 246.967267][ T8267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.683'. [ 246.977873][ T8267] netlink: Unknown conntrack attr (0) [ 247.114239][ T8263] netlink: 'syz.1.681': attribute type 17 has an invalid length. [ 247.140743][ T8269] netlink: 76 bytes leftover after parsing attributes in process `syz.0.683'. [ 247.366155][ T8274] netlink: 'syz.2.685': attribute type 10 has an invalid length. [ 247.366250][ T8274] netlink: 55 bytes leftover after parsing attributes in process `syz.2.685'. [ 248.197104][ T8286] netlink: 'syz.4.686': attribute type 28 has an invalid length. [ 249.351383][ T8319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.695'. [ 249.351458][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.695'. [ 249.950628][ T8325] netlink: 'syz.2.697': attribute type 17 has an invalid length. [ 250.363538][ T308] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.374661][ T7337] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.374724][ T7337] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.374766][ T7337] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.505745][ T8345] netlink: 'syz.3.704': attribute type 10 has an invalid length. [ 250.612303][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.704'. [ 250.793421][ T8345] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 250.847506][ T8345] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 250.983825][ T8346] bridge0: port 3(batadv0) entered disabled state [ 251.249686][ T8346] bridge_slave_1: left allmulticast mode [ 251.270155][ T8346] bridge_slave_1: left promiscuous mode [ 251.270690][ T8346] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.296140][ T8346] bridge_slave_0: left allmulticast mode [ 251.296194][ T8346] bridge_slave_0: left promiscuous mode [ 251.297083][ T8346] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.544083][ T8374] netlink: 64915 bytes leftover after parsing attributes in process `syz.4.708'. [ 251.629917][ T8372] netlink: 156916 bytes leftover after parsing attributes in process `syz.0.709'. [ 251.629968][ T8372] ksmbd: Unknown IPC event: 4, ignore. [ 251.657284][ T8377] netlink: 'syz.3.711': attribute type 12 has an invalid length. [ 251.665499][ T8377] netlink: 132 bytes leftover after parsing attributes in process `syz.3.711'. [ 252.651332][ T8400] netlink: 'syz.2.716': attribute type 17 has an invalid length. [ 253.405674][ T8419] netlink: 16 bytes leftover after parsing attributes in process `syz.2.721'. [ 253.833905][ T8423] netlink: 71 bytes leftover after parsing attributes in process `syz.0.717'. [ 255.028782][ T8440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.726'. [ 255.067722][ T8444] netlink: 156916 bytes leftover after parsing attributes in process `syz.4.727'. [ 255.082582][ T8444] ksmbd: Unknown IPC event: 4, ignore. [ 255.890274][ T8447] netlink: 'syz.3.728': attribute type 17 has an invalid length. [ 256.088186][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.088266][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.139070][ T8465] FAULT_INJECTION: forcing a failure. [ 256.139070][ T8465] name failslab, interval 1, probability 0, space 0, times 0 [ 256.139371][ T8465] CPU: 1 UID: 0 PID: 8465 Comm: syz.1.733 Not tainted syzkaller #0 PREEMPT(full) [ 256.139399][ T8465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 256.139414][ T8465] Call Trace: [ 256.139425][ T8465] [ 256.139438][ T8465] dump_stack_lvl+0xe8/0x150 [ 256.139489][ T8465] should_fail_ex+0x410/0x560 [ 256.139544][ T8465] should_failslab+0xa8/0x100 [ 256.139617][ T8465] __kvmalloc_node_noprof+0x176/0x820 [ 256.139657][ T8465] ? bpf_compute_postorder+0x87c/0x970 [ 256.139693][ T8465] ? bpf_stack_liveness_init+0x29/0x90 [ 256.139723][ T8465] ? bpf_stack_liveness_init+0x29/0x90 [ 256.139785][ T8465] bpf_stack_liveness_init+0x29/0x90 [ 256.139838][ T8465] bpf_check+0x24f6/0x2e40 [ 256.139914][ T8465] ? ktime_get_with_offset+0x93/0x2d0 [ 256.139963][ T8465] ? __pfx_bpf_check+0x10/0x10 [ 256.140009][ T8465] ? bpf_obj_name_cpy+0x194/0x1e0 [ 256.140066][ T8465] bpf_prog_load+0x14d6/0x1c20 [ 256.140165][ T8465] ? __pfx_bpf_prog_load+0x10/0x10 [ 256.140380][ T8465] __sys_bpf+0xd0d/0xd90 [ 256.140593][ T8465] ? __pfx___sys_bpf+0x10/0x10 [ 256.140808][ T8465] ? __fget_files+0x2a/0x420 [ 256.141050][ T8465] ? ksys_write+0x242/0x270 [ 256.141151][ T8465] ? __pfx_ksys_write+0x10/0x10 [ 256.141288][ T8465] __x64_sys_bpf+0xba/0xd0 [ 256.141403][ T8465] do_syscall_64+0x166/0x520 [ 256.141478][ T8465] ? trace_irq_disable+0x3b/0x140 [ 256.141542][ T8465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.141622][ T8465] ? clear_bhb_loop+0x70/0xc0 [ 256.141734][ T8465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.141812][ T8465] RIP: 0033:0x7f8e6af9e159 [ 256.141904][ T8465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.141956][ T8465] RSP: 002b:00007f8e6bf05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 256.142013][ T8465] RAX: ffffffffffffffda RBX: 00007f8e6b225fa0 RCX: 00007f8e6af9e159 [ 256.142056][ T8465] RDX: 0000000000000094 RSI: 0000200000000900 RDI: 0000000000000005 [ 256.142102][ T8465] RBP: 00007f8e6bf05090 R08: 0000000000000000 R09: 0000000000000000 [ 256.142141][ T8465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 256.142175][ T8465] R13: 00007f8e6b226038 R14: 00007f8e6b225fa0 R15: 00007ffe5f048218 [ 256.142398][ T8465] [ 256.420210][ T8463] netlink: 288 bytes leftover after parsing attributes in process `syz.2.732'. [ 256.531921][ T7335] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.531994][ T7335] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.532092][ T7335] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.532351][ T7335] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.875645][ T8487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.739'. [ 257.418139][ T8494] netlink: 156916 bytes leftover after parsing attributes in process `syz.0.741'. [ 257.429023][ T8494] ksmbd: Unknown IPC event: 4, ignore. [ 257.658808][ T8504] netlink: 'syz.1.742': attribute type 2 has an invalid length. [ 257.667580][ T8504] netlink: 'syz.1.742': attribute type 2 has an invalid length. [ 257.933659][ T8498] netlink: 6 bytes leftover after parsing attributes in process `syz.4.744'. [ 257.952535][ T8512] netlink: 'syz.3.746': attribute type 17 has an invalid length. [ 258.298856][ T8521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.750'. [ 259.087022][ T8550] netlink: 'syz.0.755': attribute type 4 has an invalid length. [ 259.087067][ T8550] netlink: 'syz.0.755': attribute type 10 has an invalid length. [ 259.087097][ T8550] netlink: 152 bytes leftover after parsing attributes in process `syz.0.755'. [ 259.116247][ T8549] netlink: 'syz.0.755': attribute type 4 has an invalid length. [ 259.116311][ T8549] netlink: 'syz.0.755': attribute type 10 has an invalid length. [ 259.116343][ T8549] netlink: 152 bytes leftover after parsing attributes in process `syz.0.755'. [ 259.182348][ T8551] netlink: 64915 bytes leftover after parsing attributes in process `syz.2.752'. [ 259.556214][ T8550] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 259.637377][ T8549] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 260.535024][ T8574] netlink: 156916 bytes leftover after parsing attributes in process `syz.0.757'. [ 260.545324][ T8574] ksmbd: Unknown IPC event: 4, ignore. [ 260.938225][ T8580] netlink: 'syz.1.762': attribute type 2 has an invalid length. [ 260.967464][ T8580] veth1_macvtap: left promiscuous mode [ 260.976443][ T8580] macsec0: entered promiscuous mode [ 260.976499][ T8580] macsec0: entered allmulticast mode [ 261.030452][ T8584] netlink: 'syz.4.761': attribute type 2 has an invalid length. [ 261.999824][ T8626] netlink: 64915 bytes leftover after parsing attributes in process `syz.0.767'. [ 263.110672][ T8645] netlink: 156916 bytes leftover after parsing attributes in process `syz.4.773'. [ 263.125573][ T8645] ksmbd: Unknown IPC event: 4, ignore. [ 263.957776][ T8667] netlink: 'syz.1.779': attribute type 17 has an invalid length. [ 264.293402][ T8667] veth1_macvtap: entered promiscuous mode [ 264.293454][ T8667] veth1_macvtap: entered allmulticast mode [ 264.453726][ T8672] macvlan1: entered allmulticast mode [ 265.318935][ T8709] netlink: 'syz.3.788': attribute type 21 has an invalid length. [ 265.328701][ T8709] netlink: 164 bytes leftover after parsing attributes in process `syz.3.788'. [ 266.751834][ T8733] netlink: 'syz.1.794': attribute type 17 has an invalid length. [ 266.868272][ T8728] Cannot find del_set index 14804 as target [ 267.233199][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.798'. [ 267.233439][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.798'. [ 267.593204][ T8751] netlink: 'syz.0.801': attribute type 39 has an invalid length. [ 267.718163][ T8752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.801'. [ 267.729983][ T8752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.801'. [ 267.887190][ T8760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.804'. [ 267.897635][ T8760] netlink: Unknown conntrack attr (0) [ 267.972850][ T8764] netlink: 76 bytes leftover after parsing attributes in process `syz.2.804'. [ 270.266106][ T8751] hsr_slave_0 (unregistering): left promiscuous mode [ 270.696984][ T8779] netlink: 16 bytes leftover after parsing attributes in process `syz.1.808'. [ 271.090325][ T8789] netlink: 64915 bytes leftover after parsing attributes in process `syz.4.805'. [ 271.425803][ T8796] netlink: 'syz.2.810': attribute type 17 has an invalid length. [ 271.736291][ T8796] veth1_vlan: entered allmulticast mode [ 274.306025][ T8830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.817'. [ 274.453767][ T8841] netlink: 'syz.2.819': attribute type 25 has an invalid length. [ 274.453836][ T8841] netlink: 'syz.2.819': attribute type 3 has an invalid length. [ 274.453893][ T8841] netlink: 132 bytes leftover after parsing attributes in process `syz.2.819'. [ 274.920582][ T8848] netlink: 16 bytes leftover after parsing attributes in process `syz.0.821'. [ 275.064462][ T8849] netlink: 'syz.3.822': attribute type 17 has an invalid length. [ 275.398853][ T8854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.823'. [ 275.793615][ T8872] netlink: zone id is out of range [ 275.793656][ T8872] netlink: zone id is out of range [ 275.793825][ T8872] netlink: zone id is out of range [ 275.794607][ T8872] netlink: zone id is out of range [ 275.799972][ T8872] netlink: zone id is out of range [ 275.800679][ T8872] netlink: zone id is out of range [ 275.809000][ T8872] netlink: zone id is out of range [ 275.816269][ T8872] netlink: zone id is out of range [ 275.816364][ T8872] netlink: zone id is out of range [ 275.817276][ T8872] netlink: zone id is out of range [ 277.518375][ T8906] netlink: 'syz.3.836': attribute type 17 has an invalid length. [ 278.303826][ T8932] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.844'. [ 278.533560][ T8944] netlink: 16 bytes leftover after parsing attributes in process `syz.1.847'. [ 278.646167][ T8949] netlink: 104 bytes leftover after parsing attributes in process `syz.3.848'. [ 278.678671][ T8949] netlink: 40 bytes leftover after parsing attributes in process `syz.3.848'. [ 278.759058][ T8953] netlink: 48 bytes leftover after parsing attributes in process `syz.4.851'. [ 278.806205][ T8953] netlink: 'syz.4.851': attribute type 5 has an invalid length. [ 278.887860][ T8959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.854'. [ 278.930818][ T8961] netlink: 'syz.0.853': attribute type 17 has an invalid length. [ 278.962004][ T8961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.136835][ T8995] netlink: 'syz.1.863': attribute type 10 has an invalid length. [ 281.804358][ T8995] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 281.872925][ T8995] team0: Port device wlan0 added [ 285.898221][ T9056] netlink: 'syz.2.883': attribute type 2 has an invalid length. [ 286.542891][ T9056] : entered promiscuous mode [ 286.973637][ T9087] __nla_validate_parse: 2 callbacks suppressed [ 286.973803][ T9087] netlink: 16 bytes leftover after parsing attributes in process `syz.3.893'. [ 287.437520][ T9093] netlink: 'syz.3.895': attribute type 16 has an invalid length. [ 287.447763][ T9093] netlink: 'syz.3.895': attribute type 17 has an invalid length. [ 287.546393][ T9093] batadv0: left promiscuous mode [ 287.552161][ T9093] batadv0: left allmulticast mode [ 287.835259][ T9105] netlink: 24 bytes leftover after parsing attributes in process `syz.4.899'. [ 287.926608][ T9093] dummy1: left promiscuous mode [ 287.936665][ T9093] dummy1: left allmulticast mode [ 288.118496][ T9099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.898'. [ 288.514447][ T9121] netlink: 16 bytes leftover after parsing attributes in process `syz.0.905'. [ 291.122167][ T9177] netlink: 17 bytes leftover after parsing attributes in process `syz.3.919'. [ 292.136663][ T9223] net_ratelimit: 41 callbacks suppressed [ 292.143872][ T9223] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 292.408433][ T9242] netlink: 14 bytes leftover after parsing attributes in process `syz.3.939'. [ 292.642871][ T9246] netlink: 60 bytes leftover after parsing attributes in process `syz.4.936'. [ 292.732431][ T9253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.942'. [ 292.732588][ T9253] netlink: Unknown conntrack attr (0) [ 292.808688][ T9253] netlink: 76 bytes leftover after parsing attributes in process `syz.2.942'. [ 293.421115][ T9268] syz_tun: tun_net_xmit 42 [ 293.471211][ T9270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.948'. [ 294.089930][ T9286] netlink: 14 bytes leftover after parsing attributes in process `syz.4.953'. [ 294.158401][ T9289] netlink: 'syz.1.955': attribute type 2 has an invalid length. [ 294.158444][ T9289] netlink: 'syz.1.955': attribute type 2 has an invalid length. [ 294.254185][ T9286] netlink: 'syz.4.953': attribute type 2 has an invalid length. [ 294.254309][ T9286] netlink: 'syz.4.953': attribute type 2 has an invalid length. [ 294.331045][ T9298] netlink: 'syz.4.953': attribute type 39 has an invalid length. [ 294.471994][ C0] syz_tun: tun_net_xmit 42 [ 294.745364][ T9308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.958'. [ 295.057475][ T9322] netlink: 'syz.0.966': attribute type 17 has an invalid length. [ 295.092450][ T9323] syzkaller0: entered promiscuous mode [ 295.092499][ T9323] syzkaller0: entered allmulticast mode [ 295.516259][ C0] syz_tun: tun_net_xmit 42 [ 297.059310][ T9354] netlink: 16 bytes leftover after parsing attributes in process `syz.0.974'. [ 297.077477][ T9354] netlink: 16 bytes leftover after parsing attributes in process `syz.0.974'. [ 297.607676][ T9369] netlink: 'syz.4.977': attribute type 17 has an invalid length. [ 298.043595][ T9378] netlink: 'syz.0.980': attribute type 4 has an invalid length. [ 299.478508][ T9405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.988'. [ 300.134064][ T9424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.995'. [ 300.403310][ T9434] syz_tun: tun_net_xmit 42 [ 300.796391][ T9442] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 300.796459][ T9442] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 300.796510][ T9442] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 300.879008][ T9442] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 300.948031][ T9442] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 301.109125][ T9450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1002'. [ 301.431658][ C1] syz_tun: tun_net_xmit 42 [ 301.440700][ T9453] netlink: 'syz.0.1003': attribute type 39 has an invalid length. [ 302.486943][ C1] syz_tun: tun_net_xmit 42 [ 304.259006][ T9505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1017'. [ 304.574226][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1020'. [ 304.793935][ T9518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1022'. [ 304.794093][ T9518] netlink: Unknown conntrack attr (0) [ 304.869691][ T9518] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1022'. [ 305.920645][ T9551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1032'. [ 306.569328][ T9562] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1035'. [ 308.738026][ T9566] netlink: 'syz.2.1037': attribute type 17 has an invalid length. [ 308.836645][ T9574] netlink: 'syz.4.1038': attribute type 17 has an invalid length. [ 308.902239][ T30] syz_tun: tun_net_xmit 110 [ 309.330902][ T5748] syz_tun: tun_net_xmit 110 [ 309.831361][ T9604] netlink: 'syz.2.1047': attribute type 3 has an invalid length. [ 309.845589][ T9604] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1047'. [ 309.980934][ T9605] netlink: 'syz.1.1049': attribute type 3 has an invalid length. [ 310.006885][ T9618] netlink: 'syz.2.1047': attribute type 3 has an invalid length. [ 310.006933][ T9618] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1047'. [ 310.198961][ T9623] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1051'. [ 310.318401][ T9626] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1053'. [ 310.563912][ T9633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1055'. [ 310.564105][ T9633] netlink: Unknown conntrack attr (0) [ 310.642675][ T9636] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1055'. [ 311.093157][ T9652] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1060'. [ 311.097751][ T9652] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1060'. [ 311.364323][ T9657] syz_tun: tun_net_xmit 42 [ 311.561337][ T9664] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1064'. [ 311.719013][ T9672] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1066'. [ 312.030860][ T9686] netlink: Unknown conntrack attr (0) [ 312.392980][ C0] syz_tun: tun_net_xmit 42 [ 313.431615][ C0] syz_tun: tun_net_xmit 42 [ 313.826093][ T9733] netlink: Unknown conntrack attr (0) [ 314.213388][ T9742] ksmbd: Unknown IPC event: 4, ignore. [ 314.799039][ T9754] openvswitch: netlink: IP tunnel dst address not specified [ 314.815753][ T9755] openvswitch: netlink: IP tunnel dst address not specified [ 314.913785][ T9752] __nla_validate_parse: 11 callbacks suppressed [ 314.913865][ T9752] netlink: 460 bytes leftover after parsing attributes in process `syz.4.1089'. [ 315.449763][ T9765] netlink: 'syz.1.1094': attribute type 13 has an invalid length. [ 315.489984][ T9768] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1095'. [ 315.512897][ C0] syz_tun: tun_net_xmit 42 [ 315.746325][ T9776] openvswitch: netlink: Invalid VLAN frame [ 316.554162][ C0] syz_tun: tun_net_xmit 42 [ 316.698065][ T9810] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1112'. [ 317.519659][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.519746][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.592817][ C0] syz_tun: tun_net_xmit 42 [ 317.598483][ T9837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1122'. [ 318.154083][ T9852] netlink: 'syz.4.1125': attribute type 2 has an invalid length. [ 318.435036][ T9856] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1126'. [ 318.529477][ T9861] netlink: 1784 bytes leftover after parsing attributes in process `syz.1.1128'. [ 321.498859][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1143'. [ 321.513048][ T9910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1143'. [ 321.522935][ T9910] tc_dump_action: action bad kind [ 321.543862][ T9910] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1143'. [ 321.545203][ T9912] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1144'. [ 321.576622][ T9910] openvswitch: netlink: Actions may not be safe on all matching packets [ 321.688285][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1146'. [ 323.178555][ T9940] netlink: 774 bytes leftover after parsing attributes in process `syz.3.1154'. [ 323.380298][ T9943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1155'. [ 323.380350][ T9943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1155'. [ 323.492907][ T9949] netlink: 15478 bytes leftover after parsing attributes in process `syz.3.1154'. [ 325.016104][ T9987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1168'. [ 326.615330][T10024] __nla_validate_parse: 1 callbacks suppressed [ 326.622371][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1179'. [ 326.651411][T10025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1178'. [ 326.694551][T10021] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 327.040499][T10039] netlink: 4292 bytes leftover after parsing attributes in process `syz.2.1185'. [ 328.537452][T10069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1191'. [ 329.081144][T10088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1198'. [ 329.894194][T10108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1202'. [ 329.894250][T10108] netlink: 'syz.3.1202': attribute type 1 has an invalid length. [ 332.936218][T10131] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1207'. [ 333.069222][T10127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1205'. [ 334.469335][T10172] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1218'. [ 338.102636][T10217] netlink: 'syz.3.1231': attribute type 10 has an invalid length. [ 338.288375][T10225] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1232'. [ 338.342655][T10217] team0 (unregistering): Port device team_slave_0 removed [ 338.384869][T10217] team0 (unregistering): Port device team_slave_1 removed [ 338.893217][T10231] NFSD: Failed to start, no listeners configured. [ 340.539461][T10256] netlink: 'syz.0.1243': attribute type 5 has an invalid length. [ 344.134740][T10288] netlink: 'syz.2.1254': attribute type 17 has an invalid length. [ 344.206496][ T30] syz_tun: tun_net_xmit 110 [ 344.267605][ T30] syz_tun: tun_net_xmit 110 [ 344.669638][T10317] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1264'. [ 344.680037][T10317] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1264'. [ 345.173341][T10329] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1267'. [ 345.190393][T10329] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1267'. [ 345.738092][T10337] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1269'. [ 345.738151][T10337] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 346.622425][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1275'. [ 346.987682][T10359] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1276'. [ 346.992639][T10355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1274'. [ 346.992718][T10355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1274'. [ 347.030201][T10359] netlink: 'syz.2.1276': attribute type 21 has an invalid length. [ 347.516568][T10375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1282'. [ 347.553471][T10375] netlink: 'syz.3.1282': attribute type 2 has an invalid length. [ 350.430341][T10384] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1285'. [ 350.453379][T10384] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 350.657889][T10394] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1290'. [ 350.889682][T10395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1289'. [ 351.297220][T10411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1296'. [ 354.127106][T10417] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1298'. [ 354.168229][T10417] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1298'. [ 354.168271][T10417] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 354.330870][T10423] netlink: 'syz.2.1300': attribute type 29 has an invalid length. [ 354.346722][T10428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1301'. [ 354.572107][T10434] FAULT_INJECTION: forcing a failure. [ 354.572107][T10434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.587300][T10434] CPU: 0 UID: 0 PID: 10434 Comm: syz.0.1303 Not tainted syzkaller #0 PREEMPT(full) [ 354.587329][T10434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 354.587342][T10434] Call Trace: [ 354.587350][T10434] [ 354.587359][T10434] dump_stack_lvl+0xe8/0x150 [ 354.587393][T10434] should_fail_ex+0x410/0x560 [ 354.587422][T10434] _copy_from_user+0x2d/0xb0 [ 354.587450][T10434] ___sys_sendmsg+0x1c6/0x360 [ 354.587478][T10434] ? __lock_acquire+0x747/0x2de0 [ 354.587504][T10434] ? __pfx____sys_sendmsg+0x10/0x10 [ 354.587565][T10434] ? __fget_files+0x2a/0x420 [ 354.587583][T10434] ? __fget_files+0x3a2/0x420 [ 354.587612][T10434] __x64_sys_sendmsg+0x1b1/0x290 [ 354.587642][T10434] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 354.587691][T10434] do_syscall_64+0x166/0x520 [ 354.587726][T10434] ? trace_irq_disable+0x3b/0x140 [ 354.587747][T10434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.587768][T10434] ? clear_bhb_loop+0x70/0xc0 [ 354.587794][T10434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.587814][T10434] RIP: 0033:0x7fb6d499e159 [ 354.587833][T10434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.587851][T10434] RSP: 002b:00007fb6d586d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.587873][T10434] RAX: ffffffffffffffda RBX: 00007fb6d4c25fa0 RCX: 00007fb6d499e159 [ 354.587889][T10434] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 354.587902][T10434] RBP: 00007fb6d586d090 R08: 0000000000000000 R09: 0000000000000000 [ 354.587915][T10434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.587927][T10434] R13: 00007fb6d4c26038 R14: 00007fb6d4c25fa0 R15: 00007fff1ae83e98 [ 354.587959][T10434] [ 355.101057][T10452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1308'. [ 356.324945][T10469] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1315'. [ 356.717971][T10490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1320'. [ 356.748343][T10492] FAULT_INJECTION: forcing a failure. [ 356.748343][T10492] name failslab, interval 1, probability 0, space 0, times 0 [ 356.761328][T10492] CPU: 0 UID: 0 PID: 10492 Comm: syz.4.1319 Not tainted syzkaller #0 PREEMPT(full) [ 356.761359][T10492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 356.761373][T10492] Call Trace: [ 356.761382][T10492] [ 356.761391][T10492] dump_stack_lvl+0xe8/0x150 [ 356.761429][T10492] should_fail_ex+0x410/0x560 [ 356.761462][T10492] ? __alloc_skb+0x1db/0x7a0 [ 356.761487][T10492] should_failslab+0xa8/0x100 [ 356.761518][T10492] ? __alloc_skb+0x1db/0x7a0 [ 356.761541][T10492] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 356.761568][T10492] ? __alloc_skb+0x1db/0x7a0 [ 356.761607][T10492] __alloc_skb+0x1db/0x7a0 [ 356.761638][T10492] netlink_sendmsg+0x5d4/0xb40 [ 356.761680][T10492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.761721][T10492] ? apparmor_socket_sendmsg+0x98/0x360 [ 356.761749][T10492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.761780][T10492] sock_sendmsg_nosec+0x13a/0x180 [ 356.761806][T10492] ____sys_sendmsg+0x54e/0x850 [ 356.761841][T10492] ? __pfx_____sys_sendmsg+0x10/0x10 [ 356.761880][T10492] ? import_iovec+0x73/0xa0 [ 356.761912][T10492] ___sys_sendmsg+0x2a5/0x360 [ 356.761940][T10492] ? __lock_acquire+0x747/0x2de0 [ 356.761967][T10492] ? __pfx____sys_sendmsg+0x10/0x10 [ 356.762033][T10492] ? __fget_files+0x2a/0x420 [ 356.762051][T10492] ? __fget_files+0x3a2/0x420 [ 356.762082][T10492] __x64_sys_sendmsg+0x1b1/0x290 [ 356.762120][T10492] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 356.762189][T10492] do_syscall_64+0x166/0x520 [ 356.762213][T10492] ? trace_irq_disable+0x3b/0x140 [ 356.762235][T10492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.762258][T10492] ? clear_bhb_loop+0x70/0xc0 [ 356.762285][T10492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.762307][T10492] RIP: 0033:0x7f81beb9e159 [ 356.762328][T10492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.762348][T10492] RSP: 002b:00007f81bf9e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.762376][T10492] RAX: ffffffffffffffda RBX: 00007f81bee25fa0 RCX: 00007f81beb9e159 [ 356.762393][T10492] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 356.762408][T10492] RBP: 00007f81bf9e6090 R08: 0000000000000000 R09: 0000000000000000 [ 356.762422][T10492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.762435][T10492] R13: 00007f81bee26038 R14: 00007f81bee25fa0 R15: 00007ffdc4295a58 [ 356.762471][T10492] [ 357.062711][T10497] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1322'. [ 357.088476][T10497] netlink: 'syz.0.1322': attribute type 2 has an invalid length. [ 357.178470][T10493] openvswitch: netlink: IP tunnel TTL not specified. [ 357.649238][T10510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1326'. [ 357.900942][T10517] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1327'. [ 358.228712][T10528] tipc: Enabling of bearer rejected, media not registered [ 358.591536][T10535] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1333'. [ 360.950835][T10552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1339'. [ 360.950970][T10552] netlink: Unknown conntrack attr (0) [ 361.069133][T10560] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1339'. [ 361.867928][T10574] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1343'. [ 364.134429][T10612] netlink: 'syz.4.1351': attribute type 2 has an invalid length. [ 364.661035][T10621] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1355'. [ 364.884481][T10622] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1355'. [ 365.104929][T10627] netlink: Invalid conntrack timeout [ 365.104997][T10627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.118327][T10627] netlink: Invalid conntrack timeout [ 365.118413][T10627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.119682][T10627] netlink: Invalid conntrack timeout [ 365.119755][T10627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.138534][T10627] netlink: Invalid conntrack timeout [ 365.138617][T10627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.153743][T10627] netlink: Invalid conntrack timeout [ 365.872132][T10644] netlink: 'syz.3.1359': attribute type 10 has an invalid length. [ 366.173546][T10640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1359'. [ 366.370111][T10644] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 366.816000][T10655] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1363'. [ 367.228510][ T5623] [ 367.230909][ T5623] ============================================ [ 367.237082][ T5623] WARNING: possible recursive locking detected [ 367.243279][ T5623] syzkaller #0 Not tainted [ 367.247702][ T5623] -------------------------------------------- [ 367.253856][ T5623] kworker/1:3/5623 is trying to acquire lock: [ 367.259930][ T5623] ffff888033e37038 (rhashtable_bucket){..-.}-{0:0}, at: rht_lock+0x8b/0x180 [ 367.268696][ T5623] [ 367.268696][ T5623] but task is already holding lock: [ 367.276073][ T5623] ffff888033e37038 (rhashtable_bucket){..-.}-{0:0}, at: rht_lock+0x8b/0x180 [ 367.284831][ T5623] [ 367.284831][ T5623] other info that might help us debug this: [ 367.292896][ T5623] Possible unsafe locking scenario: [ 367.292896][ T5623] [ 367.300358][ T5623] CPU0 [ 367.303651][ T5623] ---- [ 367.306938][ T5623] lock(rhashtable_bucket); [ 367.311549][ T5623] lock(rhashtable_bucket); [ 367.316154][ T5623] [ 367.316154][ T5623] *** DEADLOCK *** [ 367.316154][ T5623] [ 367.324301][ T5623] May be due to missing lock nesting notation [ 367.324301][ T5623] [ 367.332628][ T5623] locks held by kworker/1:3/5623: 7, last CPU#1: [ 367.338982][ T5623] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.349977][ T5623] #1: ffffc90003f3fc40 ((work_completion)(&ht->run_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.361922][ T5623] #2: ffff88804d922af0 (&ht->mutex#15){+.+.}-{4:4}, at: rht_deferred_worker+0x43/0x2250 [ 367.371781][ T5623] #3: ffff888033e37038 (rhashtable_bucket){..-.}-{0:0}, at: rht_lock+0x8b/0x180 [ 367.380938][ T5623] #4: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: trace_call_bpf+0xb4/0xb80 [ 367.390276][ T5623] #5: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: rhtab_map_delete_elem+0x21/0x190 [ 367.400213][ T5623] #6: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: rhtab_delete_elem+0x15f/0x1b00 [ 367.409982][ T5623] [ 367.409982][ T5623] stack backtrace: [ 367.415881][ T5623] CPU: 1 UID: 0 PID: 5623 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 367.425264][ T5623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 367.435335][ T5623] Workqueue: events rht_deferred_worker [ 367.440901][ T5623] Call Trace: [ 367.444204][ T5623] [ 367.447147][ T5623] dump_stack_lvl+0xe8/0x150 [ 367.451761][ T5623] print_deadlock_bug+0x27a/0x290 [ 367.456805][ T5623] __lock_acquire+0x25db/0x2de0 [ 367.461675][ T5623] ? __lock_acquire+0x747/0x2de0 [ 367.466664][ T5623] ? perf_trace_buf_alloc+0x11b/0x280 [ 367.472081][ T5623] lock_acquire+0x115/0x350 [ 367.476605][ T5623] ? rht_lock+0x8b/0x180 [ 367.480885][ T5623] rht_lock+0xa3/0x180 [ 367.484968][ T5623] ? rht_lock+0x8b/0x180 [ 367.489247][ T5623] rhtab_delete_elem+0x407/0x1b00 [ 367.494296][ T5623] ? rhtab_delete_elem+0x15f/0x1b00 [ 367.499507][ T5623] ? rhtab_map_delete_elem+0x21/0x190 [ 367.504891][ T5623] ? rhtab_map_delete_elem+0x21/0x190 [ 367.510275][ T5623] rhtab_map_delete_elem+0xe2/0x190 [ 367.515497][ T5623] bpf_prog_a4f1e23443ac9f8e+0x4e/0x56 [ 367.520973][ T5623] trace_call_bpf+0x3f1/0xb80 [ 367.525671][ T5623] ? trace_call_bpf+0xb4/0xb80 [ 367.530479][ T5623] ? __pfx_trace_call_bpf+0x10/0x10 [ 367.535698][ T5623] ? __lock_acquire+0x747/0x2de0 [ 367.540671][ T5623] perf_trace_run_bpf_submit+0x78/0x170 [ 367.546242][ T5623] perf_trace_lock+0x32e/0x410 [ 367.551034][ T5623] ? rcu_is_watching+0x16/0xb0 [ 367.555824][ T5623] ? __pfx_perf_trace_lock+0x10/0x10 [ 367.561133][ T5623] ? lock_acquire+0x115/0x350 [ 367.565834][ T5623] ? rht_unlock+0x1e/0x140 [ 367.570259][ T5623] ? rht_unlock+0x1e/0x140 [ 367.574704][ T5623] lock_release+0x396/0x3c0 [ 367.579219][ T5623] ? rcu_is_watching+0x16/0xb0 [ 367.584028][ T5623] rht_unlock+0x26/0x140 [ 367.588290][ T5623] rht_deferred_worker+0x184a/0x2250 [ 367.593629][ T5623] ? process_scheduled_works+0x97a/0x1630 [ 367.599395][ T5623] process_scheduled_works+0xc3d/0x1630 [ 367.605003][ T5623] ? __pfx_process_scheduled_works+0x10/0x10 [ 367.611022][ T5623] ? assign_work+0x3cf/0x5d0 [ 367.615637][ T5623] worker_thread+0xa47/0xfb0 [ 367.620263][ T5623] ? __kthread_parkme+0x71/0x1f0 [ 367.625237][ T5623] kthread+0x38b/0x480 [ 367.629327][ T5623] ? __pfx_worker_thread+0x10/0x10 [ 367.634464][ T5623] ? __pfx_kthread+0x10/0x10 [ 367.639074][ T5623] ret_from_fork+0x514/0xb70 [ 367.643696][ T5623] ? __pfx_ret_from_fork+0x10/0x10 [ 367.648824][ T5623] ? __switch_to+0xc89/0x1420 [ 367.653535][ T5623] ? __pfx_kthread+0x10/0x10 [ 367.658144][ T5623] ret_from_fork_asm+0x1a/0x30 [ 367.662955][ T5623]