last executing test programs: 1m19.633205227s ago: executing program 4 (id=906): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, &(0x7f0000000000)="25e02f8f6a43e8705ea461eb9b4fe628dcad43618be79b6480b0fe3da0a9b55cfaf238ce51634c11a854efd7fcf204b0c3fcf6b5706db627bbd3d639e32f6307e84a1f283a08f499c97ffa0d227e5f2fc7342f", &(0x7f0000000080)=""/56, 0x4}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m18.638483624s ago: executing program 4 (id=910): r0 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(r0, &(0x7f0000003080)={0x0, 0x0, 0x0}, 0x2404c0c5) setsockopt$sock_attach_bpf(r0, 0x1, 0xc, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000004300)=[{&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f00000040c0)=""/200, 0xc8}, {&(0x7f00000041c0)=""/209, 0xd1}, {&(0x7f00000042c0)=""/5, 0x5}], 0x4, 0x0, 0x119e}, 0x40001100) 1m18.432123617s ago: executing program 4 (id=912): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x300}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m18.298156069s ago: executing program 4 (id=913): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x3, 0x0}, 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r0, 0x4) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0xe02a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@cgroup=0xffffffffffffffff, 0x20, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@map=0x1, r3, 0x12, 0x2000, 0x0, @value, @void, @void, @void, r5}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x8}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xd8e, 0x6, 0x5, 0x4}, 0x1}}]}, {0xfffffffffffffd08}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x2, 0x0, 0x0, 0x800, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0x1}, 0x0, 0x10000, 0xffffffff, 0x0, 0xfffd, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xfff2, 0xe}, {0xfff3, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740)={0x0, r2}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r9, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000a80)=[0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3c, &(0x7f0000000b00)=[{}], 0x8, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0xec, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000640)=ANY=[@ANYRES8=r4, @ANYBLOB="584381ce78a54539895d24ad49f313beff68788aac9114883d7d5673c6d6bb41f7f98984d9f6dc61a67e63a860669f167cb83fa4d2da778d43c42dda917820a0ae929b3fb78d395983aadb056dde41cd84433bd842b4a00b1a3f4ce6bb243be429212a6f8d3d08d44e5a0b63d2f932e93fc9eb0050d0d5f5a6376ab98361b1f9ac5439e6993cb9effce138bdd1f2191985e7084cc28f7b52119ecd50a1d5ecbafd971701047f39f43c977508d58696c1a82a82ce6e78f8dcc3c43e1ff5b3f7cbaed98dde", @ANYRES16=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r11 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r11) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x58, 0x3, 0x8, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0xf}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x48a}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x80f3}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x201}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48) ioctl$SIOCSIFHWADDR(r11, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) socketpair(0x11, 0x1, 0x0, &(0x7f0000000280)={0x0, 0x0}) socket$kcm(0x29, 0x7, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70500000000000061106c0000000000dc0500002000000095000000000000009abb1723bf24203831c9545b21c751ee40249f9808837203000000000000c2d182c7a3221481f5009edaf5f5ac058299e10e790a198f42a715b99fb3d2a73dd025848710155ad1efd7d991408000000000000085a0db0401fa29e075b7ab0408a0d8cfceeb23465bb027ee1151c02af21d8f9aa57e673a6724441d08087aff070eda8abef22b3a806c8226f5a2886c93bd29b37252ba4a6e9cc5f69e75680c431aa855e487ae513abd6c4ee973fce29a26018ed5e0780f8778a602a3533a3dac7da4fe491edf3abfa7bf871c58848ac46ada6776bd9b85df01e626026a59ddfa7a9c879acbfb0bf426785dec7d8611dc850df49ed8633bdb83dd505fb20649f53841a0e200c91f5bf1bb186ed87efc7b6f8859d029c8376ca19265e281fea0a6fd2222f8850c8445758503ede0ce1b3f73ecd8989e8c53c5e679b13802bddf80f3b1d07d6d68bfa12ab34697d40ac1150a842f8bb381344b994c19642a10eb30845a993daaa8bd4aebc595475feb3475d8e802498382e73edb98fcf2df96ab3c870490c40000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc1, &(0x7f0000000300)=""/193, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, r0}, 0x94) 1m17.548631278s ago: executing program 4 (id=917): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40010020) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)=@can, 0x80, 0x0, 0x3, 0x0, 0x0, 0x68000000}, 0x40400d1) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x814) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f0000002d40)}, 0x48010) socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0xb33328a401cad7d9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49, 0x0}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8f3c48, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x104000, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80", @ANYRESDEC=r3, @ANYRES8=r3, @ANYRES64=r4, @ANYRESHEX=r0, @ANYBLOB="7815a949716333d0db226a6563abeb6bd3b1caa55525f3df07f36cd5c1198c300f04231f108fb697abfa2889930aace1375f52cc28a2b04034439d327100087b1f28a8eed18766e362ef032f8f9bd9ddeea017d7a59a1050dbbabda627ce156eb76c812e2c1bfc6f8f59f9cef059fcda2509ee11c6d0ad3722e069257226842abe1ae00a439bd63e1e19defee9e4e95b8332a7796ae0aaec31f6b20f373aa2fc15aa6047d60a52cfa42610f526a4f45fa166acf18acf3523aa04526c81024aff7a1ff8918d96f258075a8b5d16104c2a41fe3f422dea7e51c3fb2653f0943a81a194534e8a78f00d6940"], 0xfe33) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18, r5}, 0x18) r7 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r7, 0x0, 0x48890) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000f10d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES64, @ANYRES32=r3, @ANYRESHEX=r6, @ANYRES32=0x0, @ANYRES32, @ANYRES16], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000061195400000000009500000000000000e19965647add7830313d76a999eb7226cd471e1a223e095a4d3257c4b9c1a9"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000007ff2673f22f8bdfc0000850000000e00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000200000085000000330000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r10, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) setsockopt$sock_attach_bpf(r2, 0x84, 0x1f, &(0x7f0000000100)=r8, 0x129) 1m16.424935748s ago: executing program 4 (id=926): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000, 0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_clone(0x8226900, &(0x7f0000000000)="86fe99011395c77f49bb9f4955c43441c134e1fe370f6902", 0x18, &(0x7f0000000640), &(0x7f0000000080), &(0x7f00000000c0)='1') syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/pid_for_children\x00') r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a19c9d8714060014000000001208000a0043000040a80012001200014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f661", 0x6e}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db", 0x6a}], 0x2}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x102, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x8cb7}, 0x2000, 0x2, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0xd, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x21, 0xfffffffffffffffe, 0x0, 0x4, 0x2, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r3, &(0x7f00000001c0)=ANY=[], 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) r5 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x266, 0x4, 0x8, 0x7ffd, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r0, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000500)='cpu!=0||!\xfa\x8e?\xcb\xca\x84\xadTt\x0f\xd8\xb6\xfd\x1co.6\xcf/\xa1\x99T\xa7\xa2g\x92\xd6H\xcf\xb3[\x87\xc1\xa5%\x15\xa9\x84\x95@X:\x14\xa9\x17\xa0\xad5\xce\x83\x8fH\xce\x8cIgY\xe9%\xeb\xc4l\n\fs\x8b\x84\xfe\x11\xb0\xb1\f\xe7\xcf\x85\xbd\x8ebvg\x8c\xb0\xbe\xf9^0\xa5 s\x81=\\') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x98}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{}], 0x1}, 0x90) 1m1.355505675s ago: executing program 32 (id=926): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000, 0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_clone(0x8226900, &(0x7f0000000000)="86fe99011395c77f49bb9f4955c43441c134e1fe370f6902", 0x18, &(0x7f0000000640), &(0x7f0000000080), &(0x7f00000000c0)='1') syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/pid_for_children\x00') r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a19c9d8714060014000000001208000a0043000040a80012001200014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f661", 0x6e}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db", 0x6a}], 0x2}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x102, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x8cb7}, 0x2000, 0x2, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0xd, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x21, 0xfffffffffffffffe, 0x0, 0x4, 0x2, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r3, &(0x7f00000001c0)=ANY=[], 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) r5 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x266, 0x4, 0x8, 0x7ffd, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r0, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000500)='cpu!=0||!\xfa\x8e?\xcb\xca\x84\xadTt\x0f\xd8\xb6\xfd\x1co.6\xcf/\xa1\x99T\xa7\xa2g\x92\xd6H\xcf\xb3[\x87\xc1\xa5%\x15\xa9\x84\x95@X:\x14\xa9\x17\xa0\xad5\xce\x83\x8fH\xce\x8cIgY\xe9%\xeb\xc4l\n\fs\x8b\x84\xfe\x11\xb0\xb1\f\xe7\xcf\x85\xbd\x8ebvg\x8c\xb0\xbe\xf9^0\xa5 s\x81=\\') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x98}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{}], 0x1}, 0x90) 6.222805661s ago: executing program 2 (id=1399): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000008e00001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004072}, 0x40890) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYRES8=r3], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0xc4, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) close(r4) 5.850220749s ago: executing program 2 (id=1404): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8c182, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200005245855db7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf020000000000008500000084000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc070, 0x0, 0x0, 0x6, 0x0, 0x12}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000880)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000400)={0x434, 0x3f3, 0x400, 0x70bd29, 0x25dfdbfd, {0x10, 0x1, 0x20, [0x6, 0xffffff8b, 0x8, 0x4, 0x3078, 0xf1, 0x0, 0xffffffff, 0x5, 0x9, 0x3, 0x8, 0x9, 0x7, 0x80000000, 0x4, 0x6, 0x6, 0x7, 0x3, 0xfffffff9, 0x7fffffff, 0x0, 0x4, 0x1, 0x1000, 0x4, 0x0, 0x6, 0x1800, 0x7, 0x7, 0x7f, 0xffffff49, 0x14, 0x9, 0x5, 0x3, 0x9, 0x4, 0x101, 0x8, 0x7, 0x8, 0x0, 0x81, 0x101, 0x8001, 0xfffffffd, 0x7fffffff, 0x6c7, 0x9, 0x3, 0x8001, 0x10, 0x6, 0x80, 0x0, 0x6, 0x3, 0xe5, 0x1847720d, 0xa4, 0x5], [0x5, 0x5, 0x2, 0x5, 0xf, 0x7, 0x8, 0xfffffffb, 0xd7, 0x7fffffff, 0x7, 0x7768, 0xfff, 0x2, 0x0, 0x4, 0x5, 0x10, 0x7, 0x3, 0x3ff, 0x0, 0x3, 0x5, 0x0, 0x7, 0x34, 0x4c, 0x4, 0x9, 0x4, 0x95, 0x6, 0x1ff, 0x93d, 0x41, 0x0, 0x101, 0x1, 0x4, 0x8, 0x66000000, 0x8, 0x8, 0x4, 0x5, 0x7, 0x0, 0x9, 0x81, 0x1000, 0x2, 0x9, 0x1, 0x80000000, 0xb, 0x5, 0x2, 0x3, 0x8001, 0xfffffffa, 0x0, 0x1, 0xfd30], [0x0, 0x200, 0x40, 0x0, 0xe1a2, 0x672bea8c, 0x5, 0xffffff24, 0x4, 0x4, 0xaca, 0x4, 0x2, 0x4, 0x80000000, 0x4, 0x8, 0x2, 0x6, 0x3, 0x5, 0x0, 0x0, 0x401, 0x4, 0x100, 0xf, 0x8, 0x1, 0x4, 0x3, 0x4, 0xd, 0x7ff, 0x5, 0x80000001, 0x2, 0x8, 0xcfe9, 0x6a37, 0x40002, 0xeb, 0x4, 0x101, 0xfff, 0x7e01, 0xfff, 0x7, 0x1, 0xdc7, 0x101, 0xff, 0x9, 0x2, 0xb, 0x5, 0x1, 0x6, 0xfffffff7, 0xc5d8, 0x1, 0x3, 0xf52, 0x200], [0x408, 0x7, 0x3, 0x1cb, 0xffffff97, 0xe27d, 0x6, 0xfffffe4e, 0x8, 0x8, 0x22, 0x2, 0x3, 0x10000, 0x6, 0x2, 0xffff, 0x3, 0xe, 0x2, 0x2, 0x6, 0x2, 0x3, 0x10001, 0x7, 0x0, 0x0, 0xf, 0x9, 0x9, 0x80, 0x5, 0x6, 0x4, 0xfffffffc, 0x1, 0x4, 0x14, 0x22, 0x400, 0x4, 0xd, 0x1, 0x6, 0x10001, 0x9, 0x12ee, 0x63, 0x55c, 0x2, 0x0, 0x6c9, 0x2, 0x0, 0x0, 0x8, 0x0, 0x9, 0x1, 0x8000, 0x9, 0x1, 0x9], 0x14, ['\x00', '\x00', ')\x00', '&)\x00', '-^\x00', '\x00', ')),*\x00', ']\x00', '/\x00']}, [""]}, 0x434}, 0x1, 0x0, 0x0, 0xc8}, 0x4000804) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x4e7c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x201}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0xfffffffe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0x4004010) socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x4040) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001600756b494e70ff00000000017c000004000180080002"], 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004080) fstat(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80800, &(0x7f0000000600)={[{@gid={'gid', 0x3d, r6}}]}) ioctl$TUNSETGROUP(r1, 0x400454ce, r6) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x1c, 0x52, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000000cf2e84589430000", @ANYRES32], 0x50) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000980)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x50, 0x2, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x4}, 0x0, 0xac5e, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.876609917s ago: executing program 5 (id=1410): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000000000000, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0xf, 0x3, 0x2) write$cgroup_devices(r1, 0x0, 0xfefb) r2 = socket$kcm(0x2, 0xa, 0x2) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x4e7c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x1800, 0xffffffffffffffff, 0x4}, 0x50) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000300)) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x31}, 0x20008888) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8918, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) close(r0) close(r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) 2.744215471s ago: executing program 1 (id=1411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/30], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x7c}}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="12000000050000000800000002"], 0x50) r9 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x84102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x6, 0x1}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, r9, 0xa) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0x8}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="280000001e0021800000000000000000070000000500ff0f000000000a0005"], 0x28}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r11}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x1e, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r8, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)=r7}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r12, &(0x7f0000000280)='8 ', 0x0}, 0x20) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x2, 0x3, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20048004}, 0x2000400c) recvmsg$unix(r4, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x4c, &(0x7f00000000c0), 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000001200000000000000000a20000000000a03000000000000000000070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e736574000008000340000001"], 0xd4}}, 0x20000000) 2.689017471s ago: executing program 5 (id=1412): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x1411, 0x8, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x2800c100) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000000f14010029bd7000ffdbdf25a7681a8e72646d615f636d0008000100000000000800030004000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20040050}, 0x4004050) 2.609455567s ago: executing program 2 (id=1413): r0 = socket$kcm(0x2, 0x922000000001, 0x106) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x7aa, 0x0, 0x7, 0x0, 0x0, 0xfffe, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000001040)=ANY=[], 0x31) r5 = syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x40}, 0xa420, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r7}, &(0x7f00000000c0), &(0x7f0000000100)=r6}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r6, @ANYBLOB="05000000002700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000010000000500"/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7}, &(0x7f00000002c0), &(0x7f0000000300)=r6}, 0x20) r8 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0xfc, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x81ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000bc0)=ANY=[@ANYBLOB="2b0300000000000000202b68756765746c62202b706572665f6576656e74202d637075616363742000706572665f6576656e7420"], 0x34) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000020601010000000000000000000000000900020073797a300000000005000100060000000500050000000000050004000000000014000780080011400000000005001500288537350d000300686173683a6d"], 0x5c}}, 0x4005800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003080)={0x0, 0x0, 0x0}, 0x2404c0c5) setsockopt$sock_attach_bpf(r0, 0x1, 0xc, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x5, 0x14}, 0xc) 2.514127868s ago: executing program 5 (id=1416): r0 = socket$kcm(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)=""/20, 0xc}, {&(0x7f0000002f00)=""/4095, 0xa83}, {&(0x7f0000000400)=""/199, 0xc7}, {&(0x7f0000000900)=""/204, 0xcc}, {&(0x7f0000000140)=""/108, 0x6c}, {&(0x7f0000000ac0)=""/246, 0x140}, {&(0x7f00000001c0)=""/170, 0xaa}, {&(0x7f0000000540)=""/234, 0xdb}, {&(0x7f0000000700)=""/171}, {&(0x7f0000000800)=""/206}, {&(0x7f0000000280)=""/124}], 0x8}, 0x102) 2.217484276s ago: executing program 1 (id=1418): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0xf, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x40, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x8a1d) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, 0x0, 0x4008041) fstat(r2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYRES16=r0], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xffff0000, 0xc, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49d", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000002a000701fcfffffffdffffff037c0000cb8e0dc3c3033f0c835436be98e80011d80acf0d1fa9f94fa5e9d3e9b9689b6066a00cc07a520300f4af2486b52cd931ec6d04dac49af7979cf0f14ee8051f873ef713ebe8970f45384a1acf706568f3674421274784d6a64d6edf2879a3332efad57e1c0600550de8e30a02fbeec4ebf33ddedb11888a61534987bc265ee6e820b500000000000000ffdf252e2f28316dc3a32220dbbec4"], 0x14}, 0x1, 0x0, 0x0, 0x8cc4}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xfffffffe, 0xc, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000fe8000000000000000000000000000bbac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000000000000000000000000000000000001000600000000004400050000000000000000000000ffff0a010101000000003c00000002000000ac1414aa0000000000000000000000000600000004030000000000000000000000000000a1d3e053a8344ed342ac680353bdb74a78e5ee3ea9f7c0c6e996c6f586e1794ac1d1a2c3fa671d"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x3, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x7, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020180000080beb0df080159308d919f8b2f90fbc3af93b0087aae195980110d25cff1ed56ab4a54ff156e5442540d5a90735702b6733fc51053b5f097dc588f545238e66e6c24549817cffa2748c4fca52ebd1786e1e5cc2baea9bd16a34a86302a0b7f6e2ae1207071c23c526c93e17e205693ce0fa4b0e090a8a962d3b7ec97b6825910236829ce1716162c6f99df5fd76229ff4f4bd200"/162, @ANYRES32=0x0, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000e3ea6e470000000000000700000000615f30000000"], 0x0, 0x1f, 0x0, 0x1, 0x3}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r6, 0x2c}, 0x10) r7 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r7, &(0x7f0000000100)={&(0x7f0000000000)=@in={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000080)="1b", 0x1}], 0x1, &(0x7f00000001c0)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x30, 0x4855}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)={0x60, 0x1403, 0x1, 0x70bd29, 0x25dfdbfd}, 0x60}, 0x1, 0x0, 0x0, 0x81}, 0x4000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 2.216710922s ago: executing program 5 (id=1419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_DELSETELEM={0xda8, 0xe, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xd8c, 0x3, 0x0, 0x1, [{0x780, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x14}]}}}]}, @NFTA_SET_ELEM_DATA={0x13c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4e, 0x1, "2504c636766253f654e6cb32ddd4b9aa2624da0a390e454d66779203f19907f68b7d976ddbfa15c35caaaa873572061d5f076dba352682cdd8a7b481332851e465d43221469ab224bf4c"}, @NFTA_DATA_VALUE={0x95, 0x1, "ea44712eb6ff3532e157c0fd02b7007607f1e38ed503f595a11f518c451c93b18d400d054440f2fcd8d263c4ea560d4d1688d470e521537dab8a3930af8457024f11ad490c4f74c6772483a4f9dca63e14daff44e1da8237a0b50bb17fd6c340c66b6927bd8249cc7c58af068198021d8b88d88a3132d2958ecd70fba8a192ac85a5cd63fbba7ee7f9551c6dc554de2f09"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xd46}, @NFTA_SET_ELEM_EXPR={0x5e8, 0x7, 0x0, 0x1, @range={{0xa}, @val={0x5d8, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x32c, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xd39f7c50c6c50af2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xfd, 0x1, "bdcb76779ae74a9390f74e5d3ca3f7927711dc0696a7a1ec601482f76d6b0a4d72cb0900d78855c5a3c34a45ce76ca8ed38007c311780ecf1dbe0b2a94bc6ba096589d769d85bea284a00ce02e3e5a82558a466ceb0196a7c0e9f448d3c7b96ef0d1a41d5acbf669242594b023b32dbfbc92f90cbf2bdc2f740bf8cd7b53825689b113aeefc902d569118dd978fec63c73254ef74f9a8983661f4b13e53304b2dc8cfeb4e0eedb8d8dc807696e0ae9fac994caf5856c502e7acdfcfb05d3e02c874682d8c3153a301bbb2c7c366c013a4d7e7c5001e525f65275b93fb127b43e0b9167b08754f38a679830ec990d0e55998255f671428478ba"}, @NFTA_DATA_VALUE={0x91, 0x1, "b13087c9654f5db48af104a8de8b224caeace18bc346d3e2343322e193ce6a59f7c8aaf334c794a958edd71c74dafc410d43086c295163cd725854508b52d4ba0b80cf58da26d66365dd6bd593ff04a18df4130328afcd3543f987ef1d8e784aaaf61b026af08ffb724dfffdcf4718a993f0277259280b4bcd2c65eb00194b71af08880e52bcc5ac7531929781"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xfe, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_TO_DATA={0x298, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6b, 0x1, "f0dc59a4163870f77a4bc44f40c8c22ab3f1355fcbc5bf319371ea5b70ea171f5582c1eb1cc0eebc75834ace5c3afa244e1a5e9956038de3e5037753cc7b429805a90e582a3a8357b8aa07a930dfbde5ab4a6a9d6b5251671924305ebe22818eaa26c23c3c2e5e"}, @NFTA_DATA_VALUE={0x5e, 0x1, "e32e4972c9b48b1a815c85416afccfd1cc733b3d2d708eb2fbc4a4bb920f12678750c54ff9e6c0aa41e42ed170f22e95e71bdcb3961a7dd36daf08e92dbaea6934a344d1687c60a924cc2479adaff02943e103fd8e31ef5a1589"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xcd, 0x1, "285898e8ac8c456c0ef6610ecd3478501765bd68b6555ff5d18feab61a26e4634550d1c8be07139d14fa0b7a047ade15214d339dc8a83583fec3c43917b6d74e7930881a4666efcb6f543596b473c5051a3281bfde821ab054cea20a0fa59628c8f12efb2aca92d04ae466f72c43c3f32067689c3615c33fbe1056234d08e1f3ac66bcaa156ecd486a68d0649031f05a7234a734a3d0fc2e2fb217bb96c15823393adca0f6e3e019eab1c7b875d40df33fa22105e8c60d60eb06e87b6738f3f49cd1c56db36fd544e5"}, @NFTA_DATA_VALUE={0x84, 0x1, "be46fa6db0d858fade69ce303ef705baadfe3e0d615ad0625f530b497e67298ca77d4a16fda481163161797b12a2fec846f821542cbae6e51f05f942f3e74d3a9c94f3ed621be94971aa209d7c1c94c956b7f4f3b4ad2b4c2566d3ee38c11beeed09f0b3f19015e611eac30d8404c1f456077e8f081657a553c006f72aa58f23"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}}}]}, {0x3d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x3d4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xa4, 0x1, "963927aa1271566ac3a2af3e3c50550cd438281e4ad7508fdb80db348c1ef16da24976ac16f66e881ceb173175d53835803248c6e79aded925366e2342f4a7127d6f9ce9e2ae37e89d097038ac93c1235f9823b805a389bf38ab2c830e0153157a33e1bdd163227f43a2d086a787aa0d6511563c0d26e006112500d797da44a7fe427be6babc6fbd341921584cc3d3d4580e0e9dddd609d7c680477582a40f47"}, @NFTA_DATA_VALUE={0x61, 0x1, "8b404994b4331c7a6b7a0ba6f9defde35e86d4fd96302187aa08ff6d0cb539d41e55c263fd2a66f77e3e00f015247627270f746f6419a3db8639bc592f100b771ca35f27a410f0647665c2645548bc6fa6a41a46aac7a69cf4071b92ac"}, @NFTA_DATA_VALUE={0xe3, 0x1, "0bdfb76a9c1b42b605066f157b42bafaf49209b070f88aafa535574dfdee0b259cd8ff6dc6fa9164862a9096c7bd26fdf0f80a7118f63e1d463fa8b2ee825a405e2a62bf14b914c6ed45e0cfbdbfddd3368a2e7ea70072fbb8930122d4d3c8b63e65da814d0fb5704a964110dcaca1e66c2f7704f19da8b2e728889e87a2f2a80fee47cfb92e7062e4289becb4fe63a48154bded40b036f041578048fd7486f45b4a9d2c7798c4f563640dfd524bc4026482a13c0d2e5c0b218c0ac9c0f0e38a95f1ed389f16b31e57135f753fcc49fb5187676453a3000731bff5cc402073"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x8f, 0x1, "6d89c77c4714f69a3ecd1be5fc00631caad42a3828fb0e15cf9cccd617e7f4260e5d487ac99561abf3855a3dd6ef1d27621c49161dbdbb43e34b21f94e1326f366686be919d227eb010593cf3efc91e7e55e9d2dcc56947c338301899db1acbd27211694640a29cd206755ec8bad98bd1eb6afbd3c21f9a925b42476e7cf07b8991dc98be21904d38b234f"}]}]}, {0x218, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x184, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7a, 0x1, "128c2537775e627ae17b25dac87d894a2192dfb7f3041f3728768d74f5a562b986080fbd437b446419a460fea5d6a2265379f245f48b939a25de9dc8080170d2f64238a851215fc861151c31f69a73ea97fb60a6ae35fd5d8d1831111dc1b8fc964af01bc78fcd7b96e9fb22d29d6f11f7d23d43f6ed"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x67, 0x1, "9f44054e9cd82e9b45c166d1923c0d8981ff1b8add6a145181027a622fbf3b0fd1392ff44d9a508547fd72d5bf4b0c283996970f6dd9b7168858fc2fdd47d12ab6b33430b3a0ebbbb6a279bad877b37f2b2ea742b23a4afa44da81327e30c3f08a81f3"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x2c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 2.204315111s ago: executing program 0 (id=1420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000030605000000000000000000020000050900020073797a3100000000050001000700"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x14) 2.034164968s ago: executing program 5 (id=1421): socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[], 0x80}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x392c752946104b2a}, 0x40) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="000000000000950040000100000600000000000000000000e0d5cf545b42cea4ec93cdd2b8bb4589d831472464"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x4c}}, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) gettid() r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x4, 0x0, r2, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000007c0)={&(0x7f00000002c0)="06acbd1f800128ccb80b8a4ab9221d58a82224723f31179c30fa921b3e2845cf45019aa221cb82ca67c37aaf33ded9583f960da93abc456c89b9fb7d0da19b791a96a27febd813d9a219defc025386da1d19c71f53cba5ba9b8e1531c7884a779d600907afb9d572a9638c0d6eeada4fe265f447e828ce9cf5", &(0x7f0000000540)=""/71, &(0x7f00000005c0)="3ec76fef7476", &(0x7f0000000680)="f8c0e760f4f54fa0c25793ef6116fc4c35d11c22d05812ece65499f1", 0x80000000, r5, 0x4}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x20, 0x6, 0x7, 0x4, 0x24, 0xffffffffffffffff, 0x9, '\x00', 0x0, r3, 0x0, 0x5, 0x5}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000800)=[{0x0}, {&(0x7f0000002340)="6511cf53509f", 0x5dc}], 0x2}, 0x4000000) 1.946855532s ago: executing program 3 (id=1422): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x212, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0xc, 0x0, 0x8, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e21, 0x1, @dev}, 0x1c, 0x0}, 0xfdff) 1.944605477s ago: executing program 0 (id=1423): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000004c0)=""/97, 0x61}, {&(0x7f0000000580)=""/244, 0xf4}, {&(0x7f0000000000)=""/57, 0x39}, {&(0x7f0000000140)=""/35, 0x23}, {&(0x7f0000002c40)=""/4108, 0x100c}, {&(0x7f0000000280)=""/162, 0xa2}, {&(0x7f00000017c0)=""/78, 0x4e}, {&(0x7f0000000680)=""/106, 0x6a}, {&(0x7f00000000c0)=""/30, 0x1e}, {&(0x7f0000000340)=""/154, 0x9a}], 0xa, 0x0, 0x0, 0x4100}, 0x0) 1.750486332s ago: executing program 1 (id=1424): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x140f, 0x1, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}, 0x1, 0xfcffffff, 0x0, 0x24040004}, 0xc0) 1.74974101s ago: executing program 0 (id=1425): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x34, 0x40, 0x1, 0x7fffc, 0x25dfdbfe, {0x1}, [@nested={0x4, 0xcb}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}, @nested={0x4, 0x10}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.time\x00', 0x26e1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000002e010100000000000000000002000000080003000400010004000180"], 0x20}}, 0x8000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x480d0) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfe33) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80d4}, 0x24048000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x5) close(r5) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d35, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x405, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0) close(r3) socket$kcm(0x21, 0x2, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0xe, 0x5, 0x1, 0xd, 0x5, 0x9, 0x4, 0xa, 0x3, 0xd, 0x8, 0x7, 0xe, 0xa, 0x3, 0xe], 0x1, [0x200, 0xfff7, 0x7, 0xc66, 0x3, 0x1ff, 0x9, 0x2, 0x6, 0x1, 0xe8, 0xc, 0xa, 0xfffe, 0x2, 0x9], [0xc00, 0x5, 0xfff, 0x5, 0xfffb, 0x6, 0x4, 0x7, 0xbce, 0x6, 0x2, 0x2, 0x6, 0x101, 0x29d0, 0x2]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) 1.74517697s ago: executing program 2 (id=1426): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900"], 0x7c}}, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4044810}, 0x20040000) sendmsg$kcm(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002", @ANYBLOB], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) 1.602397179s ago: executing program 3 (id=1427): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)='%-5lx \x00'}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x109, 0x109, 0x4, [@typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @struct={0x9, 0x1, 0x0, 0x4, 0x0, 0x7, [{0xe, 0x1, 0xffffffff}]}, @struct={0xa, 0x1, 0x0, 0x4, 0x1, 0x7, [{0xe, 0x4, 0xfffffffa}]}, @restrict={0x0, 0x0, 0x0, 0xb, 0x5}, @datasec={0x3, 0xa, 0x0, 0xf, 0x1, [{0x2, 0xf5, 0x2}, {0x2, 0x0, 0xf}, {0x4, 0x4, 0x3}, {0x3, 0x9, 0x91e}, {0x5, 0x0, 0x9}, {0x4, 0x4, 0x3}, {0x2, 0x40, 0xfff}, {0x3, 0x81e, 0x3}, {0x1, 0x2, 0x8}, {0x2, 0x132cfe95, 0x4}], "8c"}, @struct={0x10, 0x4, 0x0, 0x4, 0x1, 0x6, [{0x9, 0x1, 0x800000}, {0xf, 0x4, 0xffffffff}, {0xf, 0x2, 0x6e2f}, {0x1, 0x1, 0x7fffffff}]}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000480)=""/138, 0x128, 0x8a, 0x1, 0x44ab02ca, 0x10000}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x653, '\x00', 0x0, r1, 0x0, 0x4, 0x2}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x140f, 0x1, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040004}, 0xc0) 1.552062196s ago: executing program 1 (id=1428): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000a00)=ANY=[@ANYBLOB="18010000070a0101"], 0x118}, 0x1, 0x0, 0x0, 0x20080010}, 0x24000082) 1.44066659s ago: executing program 3 (id=1429): bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000006800000068000000020000000c000000060000060400000004000000040000000b000000e9ff00000100000042b700000900000b0800000004000000030000000900000040000000040400000000000e0100000002000000030000000000000b0b52474f3f00000000000001000000005a0030030000"], 0x0, 0x82, 0x0, 0x0, 0x4, 0x10000}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r1) (async) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'vlan0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x1, 0x106) (async) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x30000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x4, 0xffffff7e, 0x8, 0x8, 0xb3, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x30000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x4, 0xffffff7e, 0x8, 0x8, 0xb3, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) (async) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000100)='./file0/../file0\x00', 0x40) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) 1.410099973s ago: executing program 2 (id=1430): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000008e00001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004072}, 0x40890) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0xc4, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4) close(r3) 1.191446154s ago: executing program 1 (id=1431): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8000000000000001, 0x10001}, 0x114905, 0x4, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.self_freezing\x00', 0x26e1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x1d, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2bdc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @generic={0x28, 0x2, 0x8, 0x1, 0x1}, @cb_func={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x3}, @map_val={0x18, 0x5, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xfffffffc}, @alu={0x4, 0x1, 0x5, 0xa, 0xb, 0xfffffffffffffff4, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x7}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @ldst={0x0, 0x3, 0x0, 0xa, 0xea7b064eba9bbb06, 0x18, 0x8}]}, &(0x7f0000000500)='GPL\x00', 0x9, 0x0, &(0x7f0000000540), 0x40f00, 0x4, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000580)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x10, 0x9, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r3], 0x0, 0x10, 0x1}, 0xfffffd5b) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r5}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x2, '\x00', r7, r3, 0x2, 0x5, 0x1}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@map=r3, 0x24, 0x0, 0xffff0001, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000740)=[0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r1, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000008c0)=[0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0], 0x0, 0xf7, &(0x7f0000000940)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x6f, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)={@map=r3, r4, 0x14, 0x30, 0x0, @void, @void, @void, @value=r9, r8}, 0x20) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000240)=r3, 0x4) sendmsg$inet6(r2, &(0x7f0000003100)={&(0x7f0000000180)={0xa, 0x4e21, 0x1, @mcast1, 0xfffffff9}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000200)="8000e859667fbc13", 0x8}], 0x1}, 0x8050) 1.053827354s ago: executing program 0 (id=1432): socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x6}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x2a, &(0x7f0000000300), 0x4) 972.775813ms ago: executing program 3 (id=1433): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x1, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x8c}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x6e, &(0x7f0000000080)=""/110, 0x41100, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0xb, 0x1, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x1], &(0x7f00000001c0)=[{0x4, 0x2, 0x7, 0x6}, {0x2, 0x2, 0x10, 0x6}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0x49, 0xd7, &(0x7f00000002c0)="b13e8a37a77408afb431a7b93c9faf1407d176826f2fe2384ad3fcd6bcb21783a7935d0276a49bcd963fd7b8a99d949ec5be7f23bdf7df7df25b70fb7bdb85addc9586d234e6c6d12b", &(0x7f0000000340)=""/215, 0x7, 0x0, 0x69, 0xb7, &(0x7f0000000440)="9da2b8366adc4170dcb3f60304d1efbebf3a6a393bbcd2a754d786e67701aca68343a5d1ac571b815f2d38f59a5f95d342869ae96b65f06345266bcab7b755308a14839c953d5b4c74db44c14c8aaa07e75d4d903dd17166470d7000b75a31e076a155694d70090b0e", &(0x7f00000004c0)="d928290c49530588c05350bfb2120ab62ea07f8dda62d69b2e5407ffc81f9b1091d636f84bfebd69166f7364e3b9575641ccc1169e3b35ea361c03dbaf69f22e40c908160d718f0a36cf0fb9061b9420030f07c0457cb440c1b43d98d0fbe58117a6048c76c029e552118fe9846e9e4b852b4f35f655231bd191220ae7f5412d9f657ee9857976a97119573ad6c292f4ffa0c41166651af3fc55212a3b7da280a82232908ccfa62f263e431492b520684402c65a1c348a", 0x1, 0x0, 0x874}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000640)=[0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0], 0x0, 0x8c, &(0x7f00000006c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x55, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x20, &(0x7f0000000a00)={&(0x7f0000000900)=""/189, 0xbd, 0x0, &(0x7f00000009c0)}}, 0x10) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={r0, r1, 0x25, 0x14, @val=@target_btf_id=r2}, 0x14) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b00)=@o_path={&(0x7f0000000ac0)='./file0\x00', 0x0, 0x10, r3}, 0x18) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000c80)={r4, &(0x7f0000000b40)="2a761ce49f0ef609d75b869b92a502f1c812e0e8b9c81ae1db029142df64f8416c2a613b4f57df35bc05fc8179a99ac8", &(0x7f0000000b80)=""/217}, 0x20) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000cc0)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000d00)={r0, r5, 0x8, 0x0, @val=@tracing={r2, 0x1}}, 0x20) (async) openat$cgroup_devices(r5, &(0x7f0000000d40)='devices.deny\x00', 0x2, 0x0) r6 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000001800)={&(0x7f0000000d80)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x80000000}}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000e00)="9eaa72fc39b8e8f7d9651d8459388dd11c7fb55808ea00654e9bbe94440c21cee912d53232cf42490ac2cebd0948c349bd3967f0c1fab4773f3eef71e569acc29a3e4985842fbcf3e4856c8c80e3c04d9c0394d4761da7dabbf5367fb8300ef4d23384153f9a7c1a5b7837e71c9cfa40d77f78b0efe803af0d00ba4c97c2e1f1272a2e07190233b4b7f37f341869f0d76c0f1edb98afcdb19a90a9", 0x9b}, {&(0x7f0000000ec0)="d3561072ec474e2d1e2d949e15252809b3b5ad30d573cd6af067fad63c9662acda5d674e28b8b43fe9e5a001a5525166eaadfe70776c1c2f7de5c7cdd64c5c445d8c060f7429a104ef09e4be896f8f52cf5f0c561ef3dca1e93e19ab3df8905adec327f6b92dd09f14102306099ef524c96eac04108cf0360e092214e3bf04015ac061a94f5b872e284379e050dffd890ee828064660b702bcd157d0e8a83c893adf43ed88e5b64fb9000764de6b3fea808401b1b23142e84b4b20efa7bf8c0896a15f3b", 0xc4}, {&(0x7f0000000fc0)="9afb65e559363fcf975b6090992b189bb6fdea10919b09a9b9b3b064216fc60d4ba6e17046ef8899c489ddb512c5f25f1c8472fad9a8ab3d0fd56857bde9a745161e4d0cd5878ddf348f1f7dd82048f3f6214f570abafac43600bd8c08b77006726ce1300cb6244f2bc7bb3969e06b9818382a51ca63e1a1a9452069036cf9e5c5c9466f86a709497c5d847a91f48bd85b34ab65b190505684ea61f94b3851c640c01011bde0a909e5ab1f7a519fc347a6860e9be1376c7a9b62f46a64df7e5698640be489ef10778c7bf3746265013a0128635e4a251d830c606eb1f9c716b8d31180190e33a32181c7ab1ffa15b6e06f38e94614660494", 0xf8}, {&(0x7f00000010c0)="2f73adecea2adf24b03e7401f71ad9b3211594defef8ff4a01a3ee7b4bf165", 0x1f}, {&(0x7f0000001100)="cb5ee8dd0008adde4ea4516c0270eacc1130c0c2c2e51f60b8d4f14687241cff974a211b0f69f86666298ffd5c726bec925fc4edf0d94342543fbeed29615202ee5fe36f117dc78ff2d796be76d73d04b9a65909217ae2ea594de7311defe66771f96ecbccef", 0x66}, {&(0x7f0000001180)="7b4a9280b12f88df05a8b27663d618e092ce1dd36df666d942b8f789c84a7bd7b85a0a399892cebf05bbb6a7bbe64d544256e343126da30a5403318b2610413389d364496064e2d1fbadd47d2bd9bad64b55d4188202e98b06062a0b0d22e7b9b570536c6dc4cfeca4b7a1122b2c5707c4feff44efa1d827e656f5805cf04fb35c295e59322340009e22f833023993fd780351da3b5d70701b0d263c792b5183ec045ada8e4bb9c68360a4af57d895878b2d8c4c465e73b2c77f7ac2ca4afecbf7bf72cb88d5cf30d9326c6630589f25f231269ebcad41008bfac052d5337a8224d6194eb9fb7e1a8a16e05a210f62989b90496fdbf8accbc7f1ffeb92c1d1", 0xff}, {&(0x7f0000001280)="700fd201ac5ad016f23ec7c8c67c3c8b20", 0x11}, {&(0x7f00000012c0)="192f251bc70082395ea5bfc75e3c514517aecc39da46e0d305759bee5ac7c6a1493fc6782898d7c79d72a46e1d9f7c7b4e0fa26d3b5bddf17322d4321985b264d1dbb6c1771aedb281c420c8b2599213f77464623ad570beb23810395bb465b9fd20b3e478b223e80d0010aaa91ebe", 0x6f}], 0x8, &(0x7f00000013c0)=[{0x108, 0x107, 0x9, "8b53c39703be56378704188c28a374047f454f9dc271ab1d368a9bc3506f06f965c88b8813d07f567225c9660b39a80cf5376b40732a9237b86409deb00360e14592fbfb83bb1a041291176ecca11d0d0adac0d2421ffe84fa0b547922f5cd163c5fc11fc7dc026716e807005d06ea0893ba5aa80adc8b89b4e40bf379a6643999952cd199f67bec255b362d2eef0b39e89266c40179f4120ca043c58e9e63adf1bf8e533476923b4a570d70c5dc0b5a653104ca5aef98cf9aa37ac120eb59d58b0d85e4ed487d6e392a7aaef1ee6d66b3cbb43b43d6846937daf1059213933d9c1f4ff8ec3a2d5ceb031feb956a921b72f347347803dc6a"}, {0xd0, 0x1, 0x2, "8c624a959fa01803135d70b18f9241ecb7a569ff6b2ab4b3ded26273f9491d01483829c977d52843ac827d05e05a65d38d5a74b78721699e52206dd037a850e4d944685a8087b7155458910c2cbf3b78b53bfc22de133714cbab6c45a46ee8453730425d2d25c07336a6fc0efa28f0cbaa7be64a3da7176ec19d87e9347754d918ce5ad25c064c7e2e0abf7166d704216bfb027329e85356b4d652212032d8a540a8c58c73b465e2d3bd47b3757dfbaabb0c6ebe8d73966c667009"}, {0xd0, 0x10a, 0x8, "2d644c3414fdcae55d0f313ebe5e70ad01f2402a2e7a8d618b3ace6a68f24b6aba144faa52dbf17aed6566a7b87308a2ccd624603159ede2389490733e7b040363fb36e3e1be75936a37da71ed03dbfcf6f5877f45e4a817f350898020c0e245a2655f97833caba2af153fad8e2bb2aa99025eba8e3f3b0fcb8c8a7b289b00d38d875f217e7ae1c70f241ae0d7e75c8bd3527c15be04b812fe10b9f95359651750a0f34fe14a23b438e2f9a2ee7b63af5b378715030760f17b53bd"}, {0xc0, 0x104, 0xfffffff9, "c0198cf8ec09146a555ddf0e2053ac69001cefb61c773c7a6ac48178702e2b0c997782c8c3106ebfb95bf6b315c9b2dcbdca82e97126a35b9d6cc477f469ff1024e9348d21ab957cc621def3994d9660112fa828baaa84cbe42e213036686320c8503b475e7bfeebad7fa2ee0e00ccb1084099dd39f4be5fb03c9c006c8bbf1ee703ef800b0e16a87e251c213db74982194e2522ee5b3d0676a4e676edac9773cc2f935f048af8bd36a7f8732ac1"}, {0xc8, 0x107, 0x800, "2e56ff058d579326346bfec4af7872689c53716eb0807700609f31c32da45146a5c9a47ab8657e0e19f6230367482a6725fc700cc31ac3a4a65cdeb48df65d6d337ed6c874d3860a4e1f01429d0dd8450e880481e77874c12abeaeefeb3adf8e251f3b19119530af51451531c61dde177043cabae0f5e9d1e1f65f5804ad3eba7d8738b1cc26183d111c3af4adac6bbdd828f24406e927f814abd1e050597152b7cb0c311c51a3fdda80bb814251684108"}], 0x430}, 0x0) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b80)={&(0x7f0000001a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x5, [@fwd={0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5}}, @const={0x2, 0x0, 0x0, 0xa, 0x3}, @union={0x2, 0x2, 0x0, 0x5, 0x1, 0x101, [{0x2, 0x5, 0xfffffff8}, {0xe, 0x5}]}]}, {0x0, [0x5f, 0x5f, 0x2e]}}, &(0x7f0000001a80)=""/241, 0x71, 0xf1, 0x1, 0x1}, 0x28) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001d00)=@bpf_lsm={0x1d, 0xa, &(0x7f0000001840)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0xaf}], &(0x7f00000018c0)='GPL\x00', 0x9, 0xe3, &(0x7f0000001900)=""/227, 0x41100, 0x0, '\x00', r1, 0x1b, r7, 0x8, &(0x7f0000001bc0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000001c00)={0x2, 0xa, 0x7, 0x1}, 0x10, 0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000001c40)=[{0x4, 0x1, 0xc, 0x7}, {0x4, 0x5, 0x6}, {0x2, 0x5, 0x9, 0xc}, {0x2, 0x3, 0x8, 0x5}, {0x5, 0x3, 0x3, 0x6}, {0x3, 0x2, 0x0, 0xb}, {0x3, 0x4, 0x8, 0x7}, {0x5, 0x1, 0xe, 0x8}, {0x2, 0x2, 0x3, 0x9}, {0x1, 0x1, 0x6, 0x7}], 0x10, 0x9}, 0x94) r9 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001f80)={0x0, r6}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001f40)={&(0x7f0000001dc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb6, 0xb6, 0x3, [@enum={0x1, 0x3, 0x0, 0x6, 0x4, [{0xf, 0x6}, {0x7, 0x7}, {0x8, 0x2}]}, @const={0x7, 0x0, 0x0, 0xa, 0x3}, @datasec={0xb, 0x3, 0x0, 0xf, 0x2, [{0x4, 0x4, 0x1000}, {0x1, 0xfffffe01, 0x2}, {0x2, 0xffffffff, 0x4}], "30c1"}, @union={0xa, 0x3, 0x0, 0x5, 0x0, 0x9, [{0x5, 0x5, 0x5}, {0xf, 0x5, 0x4}, {0x0, 0x3, 0x7ff}]}, @fwd={0xf}, @union={0x10, 0x1, 0x0, 0x5, 0x0, 0x8, [{0x4, 0x1, 0xe67}]}]}, {0x0, [0x5f]}}, &(0x7f0000001ec0)=""/84, 0xd3, 0x54, 0x1, 0x3, 0x10000, @value=r9}, 0x28) sendmsg$tipc(r4, &(0x7f0000002280)={&(0x7f0000001fc0)=@name={0x1e, 0x2, 0x1, {{0x1, 0x3}, 0x1}}, 0x10, &(0x7f00000021c0)=[{&(0x7f0000002000)="a0b03e626f95f7a18ecae425cc1f314280c342aec8fd9ffdfa9791a8363bdef76bd85baf9b758a6fcde1b5994157b0fbfd54b6bb564af30b0e34cdc747b75098a54e20500a3817f95f877aeb57d413295dbf093170832c999e54f959745a737ab6f824305fc76316fd23759cd917c07f6f7be6a6810a5ec2c4bf5ec94fdc7fd97ff5d61200e7338afd55fce9e9c84d070e0132bda595b2dc1a1f9a9002bb99ce9e396f452ee5f3280e9ea68df111645c44af680566c63d8f1f52f7f298a0f5994f1e8552e2f252dbab3f1cf81bfdf0cba7a12123f9", 0xd5}, {&(0x7f0000002100)="aec5006224ac4dbb046637c5ffdfcd5c2712493cb12ebad6d52e326e724f752daf56a49c3c18a0af2634d1a9eb046cf9f2c18148f2c8e37c0e5ccf64c6fccf3c46b210df92fba4412535cf0e110e39b863ca03c5633f92a4e3f6b7075989d1c3de8b3fb0e0cb084d075586b2c95014caf955c80720fcd9f2cedf262ab07060750c0a691cf7de97de4b7a231b127aff0ec199b3fb", 0x94}], 0x2, &(0x7f0000002200)="ab78287fd2ca18f030c0f0e36adc9dc4f9889fbd252bcd77c248004ce35ed222b691dee63aa8f1daab75be1f9493d2ed0c2ac269251ed64e655472fab2abbaa190e4fefb0ba6", 0x46}, 0x4) (async) openat$cgroup_netprio_ifpriomap(r5, &(0x7f00000022c0), 0x2, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002300)={0xffffffffffffffff, r5, 0x2f, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000002340)={r11, r0, 0x4, r8}, 0x10) fstat(r9, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r10, &(0x7f0000002600)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002440)={0x17c, 0x18, 0x400, 0x70bd2d, 0x25dfdbfd, {0x8}, [@typed={0x8, 0xb5, 0x0, 0x0, @fd=r5}, @nested={0x129, 0xfc, 0x0, 0x1, [@nested={0x4, 0xdb}, @generic="37a31aa21e0727c3f45c3ae6d2e559323a1bd89b18b043f5081837dbac900f470333f77870d7e2e81f51a15061256016f3a7bd2fad165b33ed51b775a25fade6552626709ab5145dc36ebd2b915212e84c5bc7cbea24985a07f70607408ef432753c5019d9c43b5d143612008074bbdae6fc8196bb285c56b359172f543cdc04d4415b17f165effcc345e7fed21086c3bb75d0cca094a1d8ca49e552a1b704c68487e74bdebcd5eee84436a172f036ece36e337aad9a512f020acf5c71576979f4dda65f9e8860382e32af7d2b20e19f716eb86caa2a5c5d86296417f51e5e60352f1054c7e49133f9", @nested={0x4, 0x43}, @typed={0x14, 0xf1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @nested={0x4, 0xce}, @typed={0x12, 0x3, 0x0, 0x0, @str='./cgroup/syz1\x00'}, @nested={0x4, 0x24}, @nested={0x4, 0x65}]}, @nested={0x24, 0x9e, 0x0, 0x1, [@nested={0x4, 0xfd}, @typed={0x8, 0x136, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0x139, 0x0, 0x0, @uid=r12}, @typed={0x8, 0x102, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0xba}]}, @typed={0x8, 0x82, 0x0, 0x0, @fd=r10}, @typed={0x8, 0x26, 0x0, 0x0, @ipv4=@local}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4}, 0xc850) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002740)={@fallback=r11, 0xc, 0x1, 0x1, &(0x7f0000002640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000002680)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000026c0)=[0x0, 0x0, 0x0], &(0x7f0000002700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) r15 = openat$cgroup(r5, &(0x7f00000027c0)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002780)={@cgroup=r15, r8, 0x29, 0x2, r8, @void, @value=r0, @void, @void, r14}, 0x20) (async) socketpair(0x2a, 0x6, 0x8787, &(0x7f0000002800)) r16 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002880)=@generic={&(0x7f0000002840)='./file0\x00', 0x0, 0x20}, 0x18) close(r16) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003a40)={r13, 0x0, 0x94, 0x23, &(0x7f00000028c0)="ae8478455261858600f86829f7df1c392afec28567e4c60077aaf5f8b2970a1adb2dea8778967ccc03adc1c2c8c49177b38d7a0385e4b1cc06603c4af1139cad94c86f8c3e53eab84541bdee343ccf966161525e3b3f2bf16948e193eb1acb5bb838f56355ac809d605a6c8c98f286d6d61bd077da9af72c3b45a2c0531fc30e56704d325fed5cee97330db89a8900abaee5f669", &(0x7f0000002980)=""/35, 0x7, 0x0, 0x62, 0x1000, &(0x7f00000029c0)="7b34436a80b2b2017e76d6d3a4c308b9efe18ff28ecbba304f1867e020fa488e55b03d262e4a117c349268d5885e6c34a60da237a4b71923a9e83fd5f67500c94d09c74c03907b9c92375814135a6da1eb644b7e47480d5c95e4fe44259f021f4662", &(0x7f0000002a40)="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", 0x2, 0x0, 0x1}, 0x50) 964.026251ms ago: executing program 1 (id=1434): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x118339, 0x4, 0x1, 0x4, 0x1002, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0xa2f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) close(r1) r2 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x4b, &(0x7f0000000100), 0x4) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) r4 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_bp={0x0, 0x1}, 0x10d626, 0x1, 0xfffffffe, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xa, 0x3, 0xff, &(0x7f0000000180)) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r5, 0x0, 0x8400) recvmsg$kcm(r5, 0x0, 0x12077) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r6, 0x0, 0x40) ioctl$TUNSETQUEUE(r0, 0x5450, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa00000000000071101a000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 843.811182ms ago: executing program 2 (id=1435): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x8}, 0x1000, 0x4, 0xffffff7e, 0x8, 0x4, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x10, 0xffffffffffffffff, 0xb) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c00000009000000000000000600000d0000000006000000020000000400000002000000010000000200000002000000000000000200000002000000030000000000000000000000000000061e"], 0x0, 0x8d, 0x0, 0x1, 0x80000001}, 0x28) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r1}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0x8, 0x8}]}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) close(r8) recvmsg$unix(r6, &(0x7f00000036c0)={0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/130, 0x82}, {&(0x7f0000002540)=""/1, 0x1}, {&(0x7f0000002580)=""/4096, 0x1000}], 0x4, &(0x7f00000035c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x22) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x10, &(0x7f0000000240)=r9, 0x8) close(0xffffffffffffffff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r3, {0x3, 0x2}, {0xffff, 0xffff}, {0x2, 0x9}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0x17b}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x1}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x8000000}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x9}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0xc011}, 0x4000090) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$TUNSETTXFILTER(r10, 0x400454d1, &(0x7f0000000340)={0x1, 0x7, [@remote, @link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @remote]}) 747.204607ms ago: executing program 0 (id=1436): r0 = getpid() r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [], {0x95, 0x0, 0x0, 0x20000000}}, &(0x7f0000000180)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 695.529333ms ago: executing program 3 (id=1437): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000b00)=""/223, 0xdf}, {&(0x7f0000000580)=""/255, 0xff}, {&(0x7f00000024c0)=""/4047, 0xfcf}, {&(0x7f0000000dc0)=""/202, 0xca}, {&(0x7f00000003c0)=""/186, 0xba}, {&(0x7f0000001080)=""/262, 0x106}, {&(0x7f0000000900)=""/170, 0xaa}, {&(0x7f0000000240)=""/130, 0x82}, {&(0x7f0000000f80)=""/234, 0xea}, {&(0x7f0000000300)=""/161, 0xa1}, {&(0x7f00000009c0)=""/203, 0xcb}], 0xb, 0x0, 0x0, 0x4100}, 0x0) 445.743916ms ago: executing program 0 (id=1438): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8931, &(0x7f0000000000)={'netdevsim0\x00'}) (fail_nth: 6) 287.114283ms ago: executing program 5 (id=1439): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000081010102000000000000000000000001040001800c0019800800010044060000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={0x0, 0xd}, 0x11eea, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x40000020}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x97}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7ffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4000000) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r6) r7 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10, 0x0}, 0x3000c085) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x6, 0x13, &(0x7f0000000200)=r10, 0x4) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x14}}, 0x40081) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x18, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) write$cgroup_type(r6, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40305829, &(0x7f0000000040)) bpf$ITER_CREATE(0x21, 0x0, 0x0) 0s ago: executing program 3 (id=1440): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x7, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000180), &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r0}, 0x38) (fail_nth: 7) kernel console output (not intermixed with test programs): omiscuous mode [ 129.265521][ T6522] team0: Device veth0_vlan failed to register rx_handler [ 130.145981][ T48] wlan1: Trigger new scan to find an IBSS to join [ 130.264380][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.204'. [ 130.384200][ T6532] syzkaller0: entered promiscuous mode [ 130.409011][ T6532] syzkaller0: entered allmulticast mode [ 130.445793][ T6562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.206'. [ 130.983756][ T6581] netlink: 52 bytes leftover after parsing attributes in process `syz.4.216'. [ 132.900327][ T6604] netlink: 'syz.2.226': attribute type 7 has an invalid length. [ 132.966941][ T6610] netlink: 'syz.0.228': attribute type 10 has an invalid length. [ 132.991254][ T6610] netlink: 152 bytes leftover after parsing attributes in process `syz.0.228'. [ 133.091731][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.101205][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.119232][ T6610] team0: Port device bond0 removed [ 133.140812][ T6610] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 133.254792][ T6617] netlink: 'syz.4.232': attribute type 10 has an invalid length. [ 133.425817][ T6622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.234'. [ 133.499546][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.234'. [ 133.576852][ T6617] team0: Device veth0_macvtap failed to register rx_handler [ 133.911573][ T6635] netlink: 16 bytes leftover after parsing attributes in process `syz.1.241'. [ 134.315731][ T6654] netlink: 'syz.2.250': attribute type 10 has an invalid length. [ 134.323888][ T6654] veth0_macvtap: left promiscuous mode [ 134.380432][ T6658] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 134.399767][ T6659] netlink: 76 bytes leftover after parsing attributes in process `syz.1.252'. [ 134.427206][ T6654] team0: Device veth0_macvtap failed to register rx_handler [ 134.510173][ T6661] netlink: 28 bytes leftover after parsing attributes in process `syz.4.253'. [ 135.086358][ T129] wlan1: Trigger new scan to find an IBSS to join [ 136.071636][ T3316] wlan1: Creating new IBSS network, BSSID 4a:6b:4e:a0:1b:81 [ 136.433068][ T6718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.279'. [ 136.443357][ T6718] netlink: 24 bytes leftover after parsing attributes in process `syz.1.279'. [ 136.454786][ T6718] netlink: 716 bytes leftover after parsing attributes in process `syz.1.279'. [ 136.464287][ T6718] netlink: 24 bytes leftover after parsing attributes in process `syz.1.279'. [ 136.638587][ T6720] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 136.749764][ T6722] netlink: 20 bytes leftover after parsing attributes in process `syz.1.281'. [ 137.008644][ T6726] netlink: 'syz.4.282': attribute type 10 has an invalid length. [ 137.354994][ T6739] netlink: 'syz.2.283': attribute type 2 has an invalid length. [ 137.424160][ T6739] netlink: 'syz.2.283': attribute type 2 has an invalid length. [ 137.437692][ T6726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.621009][ T6726] team0: Port device bond0 added [ 138.690458][ T6767] m1I: entered promiscuous mode [ 139.117177][ T6787] netlink: 'syz.2.301': attribute type 2 has an invalid length. [ 139.135562][ T6787] netlink: 'syz.2.301': attribute type 2 has an invalid length. [ 139.877579][ T6774] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 140.119902][ T6802] netlink: 'syz.0.306': attribute type 2 has an invalid length. [ 140.183684][ T6802] netlink: 51 bytes leftover after parsing attributes in process `syz.0.306'. [ 140.303124][ T6802] netlink: 822 bytes leftover after parsing attributes in process `syz.0.306'. [ 141.799519][ T6831] syzkaller0: entered promiscuous mode [ 141.821902][ T6831] syzkaller0: entered allmulticast mode [ 142.703718][ T6845] netlink: 'syz.2.318': attribute type 2 has an invalid length. [ 142.730134][ T6845] netlink: 'syz.2.318': attribute type 2 has an invalid length. [ 142.880804][ T6848] netlink: 'syz.0.321': attribute type 2 has an invalid length. [ 142.899264][ T6848] netlink: 'syz.0.321': attribute type 2 has an invalid length. [ 143.038048][ T6857] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.166928][ T6857] bridge_slave_0 (unregistering): left allmulticast mode [ 143.206356][ T6857] bridge_slave_0 (unregistering): left promiscuous mode [ 143.232522][ T6857] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.366022][ T6862] netlink: 72 bytes leftover after parsing attributes in process `syz.0.325'. [ 143.391292][ T6862] netlink: 88 bytes leftover after parsing attributes in process `syz.0.325'. [ 143.662732][ T6870] netlink: 260 bytes leftover after parsing attributes in process `syz.2.327'. [ 143.719009][ T6873] netlink: 128 bytes leftover after parsing attributes in process `syz.3.330'. [ 143.764899][ T6873] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 145.032631][ T6892] netlink: 'syz.3.337': attribute type 39 has an invalid length. [ 146.314862][ T6914] netlink: 64679 bytes leftover after parsing attributes in process `syz.1.345'. [ 146.393436][ T6920] sch_tbf: peakrate 3 is lower than or equals to rate 183 ! [ 146.683197][ T6919] netlink: 'syz.3.348': attribute type 25 has an invalid length. [ 146.700468][ T6919] netlink: 'syz.3.348': attribute type 3 has an invalid length. [ 146.722465][ T6919] netlink: 132 bytes leftover after parsing attributes in process `syz.3.348'. [ 147.664875][ T6941] netlink: 'syz.2.355': attribute type 10 has an invalid length. [ 147.768039][ T6941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.866440][ T6941] team0: Port device bond0 added [ 147.882432][ T6952] netlink: 'syz.0.358': attribute type 10 has an invalid length. [ 147.892267][ T6952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.899956][ T6952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.925205][ T6952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.941338][ T6952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.185577][ T6959] openvswitch: netlink: ct_state flags 00000180 unsupported [ 148.758392][ T6974] netlink: 'syz.0.368': attribute type 10 has an invalid length. [ 148.777925][ T6974] netlink: 152 bytes leftover after parsing attributes in process `syz.0.368'. [ 148.964846][ T6980] netlink: 'syz.4.369': attribute type 10 has an invalid length. [ 149.427754][ T7001] netlink: 'syz.3.378': attribute type 29 has an invalid length. [ 149.467950][ T7001] netlink: 'syz.3.378': attribute type 29 has an invalid length. [ 149.725424][ T5636] Bluetooth: hci0: ISO packet for unknown connection handle 3 [ 149.874140][ T7006] netlink: 822 bytes leftover after parsing attributes in process `syz.0.380'. [ 149.930845][ T7006] bond_slave_0: invalid flags given to default FDB implementation [ 150.402435][ T7023] : port 1(ip6gretap0) entered blocking state [ 150.451831][ T7023] : port 1(ip6gretap0) entered disabled state [ 150.518142][ T7023] ip6gretap0: entered allmulticast mode [ 150.547687][ T7023] ip6gretap0: entered promiscuous mode [ 150.618601][ T7017] ip6gretap0: left allmulticast mode [ 150.645092][ T7017] ip6gretap0: left promiscuous mode [ 150.785477][ T7017] : port 1(ip6gretap0) entered disabled state [ 151.255496][ T7049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.394'. [ 151.353046][ T7053] netlink: 'syz.3.396': attribute type 21 has an invalid length. [ 151.366311][ T7053] netlink: 'syz.3.396': attribute type 1 has an invalid length. [ 151.539708][ T7055] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.397'. [ 151.591335][ T7055] netlink: 'syz.1.397': attribute type 2 has an invalid length. [ 151.607624][ T7055] netlink: 'syz.1.397': attribute type 8 has an invalid length. [ 151.623423][ T7055] netlink: 132 bytes leftover after parsing attributes in process `syz.1.397'. [ 151.653745][ T7064] netlink: 'syz.0.399': attribute type 2 has an invalid length. [ 151.676032][ T7064] netlink: 'syz.0.399': attribute type 8 has an invalid length. [ 151.695095][ T7064] netlink: 132 bytes leftover after parsing attributes in process `syz.0.399'. [ 151.778488][ T7058] syzkaller0: entered promiscuous mode [ 151.793686][ T7058] syzkaller0: entered allmulticast mode [ 151.816469][ T7059] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.399'. [ 151.893052][ T7074] netlink: 5252 bytes leftover after parsing attributes in process `syz.3.405'. [ 152.257631][ T7087] netlink: 'syz.2.408': attribute type 2 has an invalid length. [ 152.278102][ T7089] netlink: 'syz.0.410': attribute type 1 has an invalid length. [ 152.290439][ T7087] netlink: 'syz.2.408': attribute type 8 has an invalid length. [ 152.304740][ T7087] netlink: 132 bytes leftover after parsing attributes in process `syz.2.408'. [ 152.316125][ T7089] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.410'. [ 152.333134][ T7089] netlink: Conntrack attr has 4 unknown bytes [ 153.173911][ T7101] netlink: 'syz.1.416': attribute type 2 has an invalid length. [ 154.154947][ T7082] __nla_validate_parse: 1 callbacks suppressed [ 154.154966][ T7082] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.408'. [ 154.173045][ T7100] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.416'. [ 154.492457][ T5636] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11 [ 155.120255][ T7133] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.429'. [ 155.260327][ T7133] netlink: 132 bytes leftover after parsing attributes in process `syz.0.429'. [ 155.440687][ T7139] syzkaller0: entered promiscuous mode [ 155.449349][ T7139] syzkaller0: entered allmulticast mode [ 155.506060][ T7142] netlink: 24 bytes leftover after parsing attributes in process `syz.2.432'. [ 156.476997][ T7158] netlink: 20 bytes leftover after parsing attributes in process `syz.0.436'. [ 156.790914][ T7166] validate_nla: 3 callbacks suppressed [ 156.790934][ T7166] netlink: 'syz.0.437': attribute type 2 has an invalid length. [ 156.809413][ T7166] netlink: 'syz.0.437': attribute type 8 has an invalid length. [ 156.817779][ T7166] netlink: 132 bytes leftover after parsing attributes in process `syz.0.437'. [ 156.845518][ T7162] netlink: 'syz.0.437': attribute type 2 has an invalid length. [ 156.863221][ T7162] netlink: 'syz.0.437': attribute type 8 has an invalid length. [ 156.892715][ T7162] netlink: 132 bytes leftover after parsing attributes in process `syz.0.437'. [ 159.944907][ T7167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.437'. [ 160.334487][ T7194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.447'. [ 162.114067][ T7229] netlink: 'syz.3.459': attribute type 39 has an invalid length. [ 162.194827][ T7230] netlink: 44 bytes leftover after parsing attributes in process `syz.3.459'. [ 162.293739][ T7231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.459'. [ 162.444233][ T7234] netlink: 20 bytes leftover after parsing attributes in process `syz.2.460'. [ 163.127931][ T7216] syzkaller0: entered promiscuous mode [ 163.133484][ T7216] syzkaller0: entered allmulticast mode [ 163.142127][ T7231] netlink: 24 bytes leftover after parsing attributes in process `syz.3.459'. [ 163.555328][ T7243] netlink: 'syz.3.463': attribute type 2 has an invalid length. [ 163.581761][ T7243] netlink: 'syz.3.463': attribute type 8 has an invalid length. [ 163.589495][ T7243] netlink: 132 bytes leftover after parsing attributes in process `syz.3.463'. [ 163.601507][ T7252] netlink: 'syz.2.464': attribute type 2 has an invalid length. [ 163.609234][ T7252] netlink: 'syz.2.464': attribute type 8 has an invalid length. [ 163.675327][ T7252] netlink: 132 bytes leftover after parsing attributes in process `syz.2.464'. [ 163.686147][ T7250] netlink: 'syz.3.463': attribute type 2 has an invalid length. [ 163.713269][ T7250] netlink: 'syz.3.463': attribute type 8 has an invalid length. [ 163.723738][ T7256] netlink: 'syz.2.464': attribute type 2 has an invalid length. [ 163.771070][ T7256] netlink: 'syz.2.464': attribute type 8 has an invalid length. [ 163.783299][ T7250] netlink: 132 bytes leftover after parsing attributes in process `syz.3.463'. [ 163.804412][ T7256] netlink: 132 bytes leftover after parsing attributes in process `syz.2.464'. [ 166.154353][ T129] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 166.571446][ T7257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.463'. [ 166.584961][ T7247] netlink: 12 bytes leftover after parsing attributes in process `syz.2.464'. [ 166.606275][ T7265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.467'. [ 166.841397][ T7271] netlink: 'syz.3.468': attribute type 1 has an invalid length. [ 166.843617][ T7277] netlink: 20 bytes leftover after parsing attributes in process `syz.2.471'. [ 166.862284][ T7271] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.468'. [ 167.008382][ T7281] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 167.015462][ T7281] syzkaller1: linktype set to 805 [ 167.037424][ T7281] netlink: 14 bytes leftover after parsing attributes in process `syz.4.472'. [ 167.294833][ T7285] netlink: 40 bytes leftover after parsing attributes in process `syz.0.473'. [ 168.382531][ T7305] validate_nla: 1 callbacks suppressed [ 168.382553][ T7305] netlink: 'syz.3.481': attribute type 2 has an invalid length. [ 168.414128][ T7305] netlink: 'syz.3.481': attribute type 8 has an invalid length. [ 168.446718][ T7305] netlink: 132 bytes leftover after parsing attributes in process `syz.3.481'. [ 168.454115][ T7304] netlink: 'syz.3.481': attribute type 2 has an invalid length. [ 168.488436][ T7304] netlink: 'syz.3.481': attribute type 8 has an invalid length. [ 168.549872][ T7305] netlink: 12 bytes leftover after parsing attributes in process `syz.3.481'. [ 169.461644][ T7304] netlink: 132 bytes leftover after parsing attributes in process `syz.3.481'. [ 170.014422][ T7338] FAULT_INJECTION: forcing a failure. [ 170.014422][ T7338] name failslab, interval 1, probability 0, space 0, times 0 [ 170.095002][ T7338] CPU: 0 UID: 0 PID: 7338 Comm: syz.1.492 Not tainted syzkaller #0 PREEMPT(full) [ 170.095031][ T7338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 170.095045][ T7338] Call Trace: [ 170.095053][ T7338] [ 170.095062][ T7338] dump_stack_lvl+0xe8/0x150 [ 170.095095][ T7338] should_fail_ex+0x412/0x560 [ 170.095134][ T7338] should_failslab+0xa8/0x100 [ 170.095163][ T7338] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 170.095198][ T7338] ? __alloc_skb+0x186/0x7d0 [ 170.095231][ T7338] ? __alloc_skb+0x1d0/0x7d0 [ 170.095260][ T7338] ? __local_bh_enable_ip+0xd0/0x130 [ 170.095288][ T7338] __alloc_skb+0x1d0/0x7d0 [ 170.095329][ T7338] ? netlink_ack_tlv_len+0x6c/0x210 [ 170.095353][ T7338] netlink_ack+0x146/0xa50 [ 170.095379][ T7338] ? __pfx___up_read+0x10/0x10 [ 170.095422][ T7338] rdma_nl_rcv+0x3ee/0xa10 [ 170.095467][ T7338] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 170.095521][ T7338] ? netlink_deliver_tap+0x2e/0x1b0 [ 170.095545][ T7338] ? netlink_deliver_tap+0x2e/0x1b0 [ 170.095573][ T7338] netlink_unicast+0x75c/0x8e0 [ 170.095622][ T7338] netlink_sendmsg+0x813/0xb40 [ 170.095661][ T7338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.095688][ T7338] ? aa_sock_msg_perm+0xf1/0x1b0 [ 170.095725][ T7338] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 170.095751][ T7338] ____sys_sendmsg+0x972/0x9f0 [ 170.095774][ T7338] ? __might_fault+0xaf/0x130 [ 170.095813][ T7338] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.095844][ T7338] ? import_iovec+0x73/0xa0 [ 170.095872][ T7338] ___sys_sendmsg+0x2a5/0x360 [ 170.095899][ T7338] ? __lock_acquire+0x6b5/0x2cf0 [ 170.095928][ T7338] ? __pfx____sys_sendmsg+0x10/0x10 [ 170.095989][ T7338] ? __fget_files+0x2a/0x420 [ 170.096020][ T7338] ? __fget_files+0x3a0/0x420 [ 170.096063][ T7338] __x64_sys_sendmsg+0x1bd/0x2a0 [ 170.096090][ T7338] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 170.096124][ T7338] ? __pfx_ksys_write+0x10/0x10 [ 170.096157][ T7338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.096181][ T7338] do_syscall_64+0x15f/0xf80 [ 170.096205][ T7338] ? trace_irq_disable+0x3b/0x140 [ 170.096239][ T7338] ? clear_bhb_loop+0x40/0x90 [ 170.096266][ T7338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.096288][ T7338] RIP: 0033:0x7f103959ce59 [ 170.096320][ T7338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.096338][ T7338] RSP: 002b:00007f103a4ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.096361][ T7338] RAX: ffffffffffffffda RBX: 00007f1039815fa0 RCX: 00007f103959ce59 [ 170.096377][ T7338] RDX: 0000000020044080 RSI: 0000200000000cc0 RDI: 0000000000000003 [ 170.096390][ T7338] RBP: 00007f103a4ea090 R08: 0000000000000000 R09: 0000000000000000 [ 170.096403][ T7338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.096415][ T7338] R13: 00007f1039816038 R14: 00007f1039815fa0 R15: 00007ffcf7f46ff8 [ 170.096450][ T7338] [ 170.644663][ T7352] netlink: 'syz.3.497': attribute type 21 has an invalid length. [ 170.712880][ T7352] netlink: 'syz.3.497': attribute type 4 has an invalid length. [ 170.739635][ T7352] netlink: 'syz.3.497': attribute type 5 has an invalid length. [ 174.377350][ T7384] netlink: 'syz.2.509': attribute type 2 has an invalid length. [ 174.393406][ T7384] netlink: 'syz.2.509': attribute type 2 has an invalid length. [ 174.427031][ T7376] __nla_validate_parse: 3 callbacks suppressed [ 174.427073][ T7376] netlink: 220 bytes leftover after parsing attributes in process `syz.4.506'. [ 175.528257][ T7411] FAULT_INJECTION: forcing a failure. [ 175.528257][ T7411] name failslab, interval 1, probability 0, space 0, times 0 [ 175.604333][ T7411] CPU: 0 UID: 0 PID: 7411 Comm: syz.1.517 Not tainted syzkaller #0 PREEMPT(full) [ 175.604364][ T7411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 175.604377][ T7411] Call Trace: [ 175.604395][ T7411] [ 175.604413][ T7411] dump_stack_lvl+0xe8/0x150 [ 175.604495][ T7411] should_fail_ex+0x412/0x560 [ 175.604628][ T7411] should_failslab+0xa8/0x100 [ 175.604715][ T7411] __kmalloc_cache_noprof+0x88/0x660 [ 175.604782][ T7411] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 175.604911][ T7411] tcp_sendmsg_fastopen+0x1de/0x5e0 [ 175.605059][ T7411] mptcp_sendmsg_fastopen+0x17d/0x580 [ 175.605213][ T7411] mptcp_sendmsg+0x1b0c/0x1dc0 [ 175.605466][ T7411] ? aa_sk_perm+0x6d5/0x900 [ 175.605647][ T7411] ? __pfx_aa_sk_perm+0x10/0x10 [ 175.605723][ T7411] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 175.605877][ T7411] ? inet6_sendmsg+0x101/0x120 [ 175.605972][ T7411] ____sys_sendmsg+0x5c7/0x9f0 [ 175.606137][ T7411] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.606308][ T7411] ? import_iovec+0x73/0xa0 [ 175.606421][ T7411] ___sys_sendmsg+0x2a5/0x360 [ 175.606468][ T7411] ? __lock_acquire+0x6b5/0x2cf0 [ 175.606579][ T7411] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.607016][ T7411] ? __fget_files+0x2a/0x420 [ 175.607232][ T7411] ? __fget_files+0x2a/0x420 [ 175.607285][ T7411] ? __fget_files+0x3a0/0x420 [ 175.607474][ T7411] __x64_sys_sendmsg+0x1bd/0x2a0 [ 175.607574][ T7411] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 175.607654][ T7411] ? perf_trace_preemptirq_template+0xb2/0x350 [ 175.607852][ T7411] ? __pfx_ksys_write+0x10/0x10 [ 175.608022][ T7411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.608083][ T7411] do_syscall_64+0x15f/0xf80 [ 175.608122][ T7411] ? trace_irq_disable+0x3b/0x140 [ 175.608182][ T7411] ? clear_bhb_loop+0x40/0x90 [ 175.608274][ T7411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.608311][ T7411] RIP: 0033:0x7f103959ce59 [ 175.608360][ T7411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.608378][ T7411] RSP: 002b:00007f103a4ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.608400][ T7411] RAX: ffffffffffffffda RBX: 00007f1039815fa0 RCX: 00007f103959ce59 [ 175.608415][ T7411] RDX: e07e872424df6f0e RSI: 0000200000000780 RDI: 0000000000000004 [ 175.608429][ T7411] RBP: 00007f103a4ea090 R08: 0000000000000000 R09: 0000000000000000 [ 175.608441][ T7411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.608453][ T7411] R13: 00007f1039816038 R14: 00007f1039815fa0 R15: 00007ffcf7f46ff8 [ 175.608706][ T7411] [ 177.245445][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.523'. [ 177.502731][ T7435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.525'. [ 177.536699][ T7435] IPv6: NLM_F_CREATE should be specified when creating new route [ 178.121144][ T7444] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.528'. [ 178.133939][ T7444] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.528'. [ 178.669441][ T7459] FAULT_INJECTION: forcing a failure. [ 178.669441][ T7459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.710991][ T7461] netlink: 52 bytes leftover after parsing attributes in process `syz.1.534'. [ 178.752613][ T7459] CPU: 1 UID: 0 PID: 7459 Comm: syz.0.533 Not tainted syzkaller #0 PREEMPT(full) [ 178.752644][ T7459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 178.752671][ T7459] Call Trace: [ 178.752680][ T7459] [ 178.752694][ T7459] dump_stack_lvl+0xe8/0x150 [ 178.752737][ T7459] should_fail_ex+0x412/0x560 [ 178.752780][ T7459] _copy_to_user+0x31/0xb0 [ 178.752808][ T7459] simple_read_from_buffer+0xe1/0x170 [ 178.752849][ T7459] proc_fail_nth_read+0x1bb/0x230 [ 178.752887][ T7459] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.752927][ T7459] ? rw_verify_area+0x2a6/0x4d0 [ 178.752950][ T7459] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.752986][ T7459] vfs_read+0x20c/0xa70 [ 178.753017][ T7459] ? __pfx___mutex_lock+0x10/0x10 [ 178.753044][ T7459] ? __pfx_vfs_read+0x10/0x10 [ 178.753070][ T7459] ? __fget_files+0x2a/0x420 [ 178.753109][ T7459] ? __fget_files+0x3a0/0x420 [ 178.753139][ T7459] ? __fget_files+0x2a/0x420 [ 178.753185][ T7459] ksys_read+0x150/0x270 [ 178.753212][ T7459] ? __pfx_ksys_read+0x10/0x10 [ 178.753249][ T7459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.753274][ T7459] do_syscall_64+0x15f/0xf80 [ 178.753296][ T7459] ? trace_irq_disable+0x3b/0x140 [ 178.753335][ T7459] ? clear_bhb_loop+0x40/0x90 [ 178.753364][ T7459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.753390][ T7459] RIP: 0033:0x7ff59bd5d68e [ 178.753410][ T7459] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 178.753427][ T7459] RSP: 002b:00007ff59cb89fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 178.753449][ T7459] RAX: ffffffffffffffda RBX: 00007ff59cb8a6c0 RCX: 00007ff59bd5d68e [ 178.753464][ T7459] RDX: 000000000000000f RSI: 00007ff59cb8a0a0 RDI: 0000000000000005 [ 178.753476][ T7459] RBP: 00007ff59cb8a090 R08: 0000000000000000 R09: 0000000000000000 [ 178.753489][ T7459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.753501][ T7459] R13: 00007ff59c016038 R14: 00007ff59c015fa0 R15: 00007ffd866997e8 [ 178.753543][ T7459] [ 180.050744][ T7489] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.540'. [ 180.063320][ T7489] netlink: 'syz.3.540': attribute type 2 has an invalid length. [ 180.136626][ T7489] netlink: 'syz.3.540': attribute type 8 has an invalid length. [ 180.180953][ T7489] netlink: 132 bytes leftover after parsing attributes in process `syz.3.540'. [ 182.284167][ T7524] netlink: 32 bytes leftover after parsing attributes in process `syz.3.551'. [ 183.195068][ T7539] netlink: 20 bytes leftover after parsing attributes in process `syz.3.557'. [ 183.979880][ T7554] netlink: 'syz.2.559': attribute type 2 has an invalid length. [ 184.027267][ T7554] netlink: 'syz.2.559': attribute type 8 has an invalid length. [ 184.040138][ T7554] netlink: 132 bytes leftover after parsing attributes in process `syz.2.559'. [ 184.066162][ T7554] netlink: 'syz.2.559': attribute type 2 has an invalid length. [ 184.094688][ T7554] netlink: 'syz.2.559': attribute type 8 has an invalid length. [ 184.145676][ T7554] netlink: 132 bytes leftover after parsing attributes in process `syz.2.559'. [ 184.161794][ T7560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.559'. [ 184.548484][ T7565] netlink: 'syz.3.562': attribute type 29 has an invalid length. [ 184.570222][ T7565] netlink: 'syz.3.562': attribute type 29 has an invalid length. [ 184.586165][ T7565] netlink: 'syz.3.562': attribute type 29 has an invalid length. [ 184.817686][ T7576] netlink: 64 bytes leftover after parsing attributes in process `syz.4.565'. [ 184.899433][ T7573] openvswitch: netlink: ct_state flags 00000180 unsupported [ 185.288479][ T7590] netlink: 32 bytes leftover after parsing attributes in process `syz.1.567'. [ 185.450210][ T7596] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.572'. [ 185.616908][ T7596] netlink: 'syz.0.572': attribute type 2 has an invalid length. [ 185.650979][ T7596] netlink: 'syz.0.572': attribute type 8 has an invalid length. [ 185.680918][ T7596] netlink: 132 bytes leftover after parsing attributes in process `syz.0.572'. [ 185.832813][ T7610] netlink: 'syz.4.574': attribute type 2 has an invalid length. [ 185.876170][ T7610] netlink: 'syz.4.574': attribute type 8 has an invalid length. [ 185.889045][ T7610] netlink: 132 bytes leftover after parsing attributes in process `syz.4.574'. [ 185.909668][ T7611] netlink: 'syz.4.574': attribute type 2 has an invalid length. [ 185.919831][ T7611] netlink: 'syz.4.574': attribute type 8 has an invalid length. [ 185.929230][ T7611] netlink: 132 bytes leftover after parsing attributes in process `syz.4.574'. [ 186.360044][ T7612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.574'. [ 186.984056][ T7621] netlink: 'syz.4.578': attribute type 1 has an invalid length. [ 187.626124][ T7639] netlink: 60 bytes leftover after parsing attributes in process `syz.2.582'. [ 187.662868][ T7638] netlink: 60 bytes leftover after parsing attributes in process `syz.2.582'. [ 188.260869][ T7648] ref_ctr_offset mismatch. inode: 0x248 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 188.313811][ T7647] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.586'. [ 188.455083][ T7644] lo speed is unknown, defaulting to 1000 [ 188.500397][ T7654] netlink: 'syz.3.588': attribute type 2 has an invalid length. [ 188.510177][ T7654] netlink: 'syz.3.588': attribute type 8 has an invalid length. [ 188.518277][ T7654] netlink: 132 bytes leftover after parsing attributes in process `syz.3.588'. [ 188.531148][ T7654] netlink: 'syz.3.588': attribute type 2 has an invalid length. [ 188.560696][ T7644] lo speed is unknown, defaulting to 1000 [ 188.830490][ T7644] lo speed is unknown, defaulting to 1000 [ 188.948748][ T7644] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 189.007485][ T7644] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 189.054263][ T7644] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 189.398660][ T7644] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 189.731077][ T7644] lo speed is unknown, defaulting to 1000 [ 189.751879][ T7644] lo speed is unknown, defaulting to 1000 [ 189.774456][ T7644] lo speed is unknown, defaulting to 1000 [ 189.875289][ T7644] lo speed is unknown, defaulting to 1000 [ 189.905425][ T7644] lo speed is unknown, defaulting to 1000 [ 189.971610][ T7674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.160637][ T7674] syzkaller0: entered promiscuous mode [ 190.166200][ T7674] syzkaller0: entered allmulticast mode [ 191.222203][ T7693] validate_nla: 4 callbacks suppressed [ 191.222223][ T7693] netlink: 'syz.1.600': attribute type 2 has an invalid length. [ 191.257633][ T7693] netlink: 'syz.1.600': attribute type 8 has an invalid length. [ 191.265601][ T7693] __nla_validate_parse: 6 callbacks suppressed [ 191.265620][ T7693] netlink: 132 bytes leftover after parsing attributes in process `syz.1.600'. [ 191.288388][ T7690] netlink: 'syz.1.600': attribute type 2 has an invalid length. [ 191.296640][ T7690] netlink: 'syz.1.600': attribute type 8 has an invalid length. [ 191.304665][ T7690] netlink: 132 bytes leftover after parsing attributes in process `syz.1.600'. [ 192.849241][ T7699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.600'. [ 193.423867][ T7722] netlink: 32 bytes leftover after parsing attributes in process `syz.0.608'. [ 193.720042][ T7731] netlink: 4068 bytes leftover after parsing attributes in process `syz.4.613'. [ 193.732810][ T7730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.614'. [ 193.744208][ T7734] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.615'. [ 193.838511][ T7734] netlink: 'syz.1.615': attribute type 2 has an invalid length. [ 193.853037][ T7734] netlink: 'syz.1.615': attribute type 8 has an invalid length. [ 193.902105][ T7734] netlink: 132 bytes leftover after parsing attributes in process `syz.1.615'. [ 194.676787][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.685105][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.723996][ T7756] FAULT_INJECTION: forcing a failure. [ 194.723996][ T7756] name failslab, interval 1, probability 0, space 0, times 0 [ 194.739651][ T7756] CPU: 1 UID: 0 PID: 7756 Comm: syz.4.620 Not tainted syzkaller #0 PREEMPT(full) [ 194.739680][ T7756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 194.739693][ T7756] Call Trace: [ 194.739702][ T7756] [ 194.739711][ T7756] dump_stack_lvl+0xe8/0x150 [ 194.739744][ T7756] should_fail_ex+0x412/0x560 [ 194.739786][ T7756] should_failslab+0xa8/0x100 [ 194.739813][ T7756] ? skb_clone+0x212/0x3a0 [ 194.739838][ T7756] kmem_cache_alloc_noprof+0x87/0x650 [ 194.739874][ T7756] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 194.739912][ T7756] skb_clone+0x212/0x3a0 [ 194.739943][ T7756] __netlink_deliver_tap+0x404/0x850 [ 194.739984][ T7756] ? netlink_deliver_tap+0x2e/0x1b0 [ 194.740011][ T7756] netlink_deliver_tap+0x19c/0x1b0 [ 194.740035][ T7756] netlink_unicast+0x730/0x8e0 [ 194.740085][ T7756] netlink_sendmsg+0x813/0xb40 [ 194.740122][ T7756] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.740152][ T7756] ? aa_sock_msg_perm+0xf1/0x1b0 [ 194.740189][ T7756] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 194.740217][ T7756] ____sys_sendmsg+0x972/0x9f0 [ 194.740252][ T7756] ? __might_fault+0xaf/0x130 [ 194.740296][ T7756] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.740334][ T7756] ? import_iovec+0x73/0xa0 [ 194.740365][ T7756] ___sys_sendmsg+0x2a5/0x360 [ 194.740387][ T7756] ? __lock_acquire+0x6b5/0x2cf0 [ 194.740419][ T7756] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.740495][ T7756] ? __fget_files+0x2a/0x420 [ 194.740526][ T7756] ? __fget_files+0x3a0/0x420 [ 194.740574][ T7756] __x64_sys_sendmsg+0x1bd/0x2a0 [ 194.740603][ T7756] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 194.740643][ T7756] ? __pfx_ksys_write+0x10/0x10 [ 194.740680][ T7756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.740705][ T7756] do_syscall_64+0x15f/0xf80 [ 194.740728][ T7756] ? trace_irq_disable+0x3b/0x140 [ 194.740761][ T7756] ? clear_bhb_loop+0x40/0x90 [ 194.740794][ T7756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.740816][ T7756] RIP: 0033:0x7f0368d9ce59 [ 194.740838][ T7756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.740855][ T7756] RSP: 002b:00007f0369cd4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.740877][ T7756] RAX: ffffffffffffffda RBX: 00007f0369015fa0 RCX: 00007f0368d9ce59 [ 194.740892][ T7756] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 194.740905][ T7756] RBP: 00007f0369cd4090 R08: 0000000000000000 R09: 0000000000000000 [ 194.740917][ T7756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.740929][ T7756] R13: 00007f0369016038 R14: 00007f0369015fa0 R15: 00007fff82ae35f8 [ 194.740970][ T7756] [ 194.741129][ T7756] netlink: 'syz.4.620': attribute type 10 has an invalid length. [ 195.052646][ T7756] team0: Port device vlan0 added [ 195.550076][ T7765] FAULT_INJECTION: forcing a failure. [ 195.550076][ T7765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.588565][ T7765] CPU: 1 UID: 0 PID: 7765 Comm: syz.3.624 Not tainted syzkaller #0 PREEMPT(full) [ 195.588594][ T7765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 195.588607][ T7765] Call Trace: [ 195.588616][ T7765] [ 195.588625][ T7765] dump_stack_lvl+0xe8/0x150 [ 195.588655][ T7765] should_fail_ex+0x412/0x560 [ 195.588698][ T7765] _copy_from_user+0x2d/0xb0 [ 195.588723][ T7765] generic_map_update_batch+0x69a/0x990 [ 195.588762][ T7765] ? __pfx_generic_map_update_batch+0x10/0x10 [ 195.588789][ T7765] ? __fget_files+0x2a/0x420 [ 195.588827][ T7765] ? __pfx_generic_map_update_batch+0x10/0x10 [ 195.588854][ T7765] bpf_map_do_batch+0x39b/0x630 [ 195.588882][ T7765] __sys_bpf+0xbe3/0xd90 [ 195.588921][ T7765] ? __pfx___sys_bpf+0x10/0x10 [ 195.588957][ T7765] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 195.589007][ T7765] ? ksys_write+0x242/0x270 [ 195.589032][ T7765] ? __pfx_ksys_write+0x10/0x10 [ 195.589059][ T7765] __x64_sys_bpf+0xba/0xd0 [ 195.589088][ T7765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.589112][ T7765] do_syscall_64+0x15f/0xf80 [ 195.589134][ T7765] ? trace_irq_disable+0x3b/0x140 [ 195.589165][ T7765] ? clear_bhb_loop+0x40/0x90 [ 195.589197][ T7765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.589219][ T7765] RIP: 0033:0x7fea03d9ce59 [ 195.589239][ T7765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.589256][ T7765] RSP: 002b:00007fea04d2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 195.589285][ T7765] RAX: ffffffffffffffda RBX: 00007fea04015fa0 RCX: 00007fea03d9ce59 [ 195.589306][ T7765] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 195.589319][ T7765] RBP: 00007fea04d2e090 R08: 0000000000000000 R09: 0000000000000000 [ 195.589336][ T7765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.589347][ T7765] R13: 00007fea04016038 R14: 00007fea04015fa0 R15: 00007ffc9ce10138 [ 195.589384][ T7765] [ 196.156845][ T7777] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 196.192281][ T7782] netlink: 'syz.2.631': attribute type 1 has an invalid length. [ 196.204254][ T7782] netlink: 96 bytes leftover after parsing attributes in process `syz.2.631'. [ 196.266154][ T7782] netlink: 658 bytes leftover after parsing attributes in process `syz.2.631'. [ 196.301606][ T7782] netlink: 1 bytes leftover after parsing attributes in process `syz.2.631'. [ 196.389410][ T7787] netlink: 'syz.4.634': attribute type 6 has an invalid length. [ 196.430639][ T7787] netlink: 232 bytes leftover after parsing attributes in process `syz.4.634'. [ 197.268672][ T129] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 197.777467][ T7800] syzkaller0: entered promiscuous mode [ 197.814311][ T7800] syzkaller0: entered allmulticast mode [ 197.917334][ T7810] syzkaller0: entered promiscuous mode [ 197.942960][ T7810] syzkaller0: entered allmulticast mode [ 198.116650][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.643'. [ 198.868166][ T7816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.642'. [ 200.139956][ T13] wlan1: Trigger new scan to find an IBSS to join [ 200.996777][ T7824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.646'. [ 201.436900][ T7835] FAULT_INJECTION: forcing a failure. [ 201.436900][ T7835] name failslab, interval 1, probability 0, space 0, times 0 [ 201.451346][ T7835] CPU: 1 UID: 0 PID: 7835 Comm: syz.2.651 Not tainted syzkaller #0 PREEMPT(full) [ 201.451374][ T7835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 201.451387][ T7835] Call Trace: [ 201.451401][ T7835] [ 201.451416][ T7835] dump_stack_lvl+0xe8/0x150 [ 201.451473][ T7835] should_fail_ex+0x412/0x560 [ 201.451534][ T7835] should_failslab+0xa8/0x100 [ 201.451576][ T7835] __kmalloc_noprof+0xe8/0x760 [ 201.451607][ T7835] ? bpf_prog_array_copy+0x198/0x370 [ 201.451662][ T7835] bpf_prog_array_copy+0x198/0x370 [ 201.451726][ T7835] perf_event_attach_bpf_prog+0x204/0x380 [ 201.451788][ T7835] ? __pfx_perf_event_attach_bpf_prog+0x10/0x10 [ 201.451870][ T7835] perf_ioctl+0x9a8/0x20c0 [ 201.451900][ T7835] ? do_vfs_ioctl+0x1166/0x1530 [ 201.451948][ T7835] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 201.452004][ T7835] ? __pfx_perf_ioctl+0x10/0x10 [ 201.452194][ T7835] ? __fget_files+0x2a/0x420 [ 201.452264][ T7835] ? __fget_files+0x2a/0x420 [ 201.452305][ T7835] ? __fget_files+0x3a0/0x420 [ 201.452345][ T7835] ? __fget_files+0x2a/0x420 [ 201.452395][ T7835] ? bpf_lsm_file_ioctl+0x9/0x20 [ 201.452422][ T7835] ? __pfx_perf_ioctl+0x10/0x10 [ 201.452451][ T7835] __se_sys_ioctl+0xfc/0x170 [ 201.452478][ T7835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.452507][ T7835] do_syscall_64+0x15f/0xf80 [ 201.452528][ T7835] ? trace_irq_disable+0x3b/0x140 [ 201.452559][ T7835] ? clear_bhb_loop+0x40/0x90 [ 201.452598][ T7835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.452619][ T7835] RIP: 0033:0x7f630d99ce59 [ 201.452643][ T7835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.452656][ T7835] RSP: 002b:00007f630e856028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 201.452674][ T7835] RAX: ffffffffffffffda RBX: 00007f630dc15fa0 RCX: 00007f630d99ce59 [ 201.452686][ T7835] RDX: 0000000000000006 RSI: 0000000040042408 RDI: 0000000000000005 [ 201.452695][ T7835] RBP: 00007f630e856090 R08: 0000000000000000 R09: 0000000000000000 [ 201.452704][ T7835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.452712][ T7835] R13: 00007f630dc16038 R14: 00007f630dc15fa0 R15: 00007ffd5d5906d8 [ 201.452807][ T7835] [ 203.168224][ T1099] wlan1: Trigger new scan to find an IBSS to join [ 203.770164][ T7852] syz.3.656 uses obsolete (PF_INET,SOCK_PACKET) [ 204.112739][ T1099] wlan1: Creating new IBSS network, BSSID 8a:8f:b6:fe:3b:49 [ 204.604991][ T7849] netlink: 'syz.2.655': attribute type 29 has an invalid length. [ 205.336553][ T7881] netlink: 'syz.0.665': attribute type 2 has an invalid length. [ 205.407552][ T7881] netlink: 'syz.0.665': attribute type 1 has an invalid length. [ 205.415955][ T7881] netlink: 132 bytes leftover after parsing attributes in process `syz.0.665'. [ 205.939828][ T7893] netlink: 'syz.0.667': attribute type 5 has an invalid length. [ 206.274990][ T7896] FAULT_INJECTION: forcing a failure. [ 206.274990][ T7896] name failslab, interval 1, probability 0, space 0, times 0 [ 206.328398][ T7896] CPU: 1 UID: 0 PID: 7896 Comm: syz.4.669 Not tainted syzkaller #0 PREEMPT(full) [ 206.328428][ T7896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 206.328441][ T7896] Call Trace: [ 206.328450][ T7896] [ 206.328460][ T7896] dump_stack_lvl+0xe8/0x150 [ 206.328493][ T7896] should_fail_ex+0x412/0x560 [ 206.328536][ T7896] should_failslab+0xa8/0x100 [ 206.328562][ T7896] ? skb_clone+0x212/0x3a0 [ 206.328596][ T7896] kmem_cache_alloc_noprof+0x87/0x650 [ 206.328632][ T7896] ? __pfx_perf_trace_lock+0x10/0x10 [ 206.328668][ T7896] skb_clone+0x212/0x3a0 [ 206.328699][ T7896] __netlink_deliver_tap+0x404/0x850 [ 206.328741][ T7896] ? netlink_deliver_tap+0x2e/0x1b0 [ 206.328776][ T7896] netlink_deliver_tap+0x19c/0x1b0 [ 206.328801][ T7896] netlink_unicast+0x730/0x8e0 [ 206.328855][ T7896] netlink_sendmsg+0x813/0xb40 [ 206.328892][ T7896] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.328921][ T7896] ? aa_sock_msg_perm+0xf1/0x1b0 [ 206.328959][ T7896] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 206.328986][ T7896] ____sys_sendmsg+0x972/0x9f0 [ 206.329010][ T7896] ? __pfx_perf_trace_lock+0x10/0x10 [ 206.329047][ T7896] ? __pfx_____sys_sendmsg+0x10/0x10 [ 206.329084][ T7896] ? import_iovec+0x73/0xa0 [ 206.329115][ T7896] ___sys_sendmsg+0x2a5/0x360 [ 206.329137][ T7896] ? __lock_acquire+0x6b5/0x2cf0 [ 206.329169][ T7896] ? __pfx____sys_sendmsg+0x10/0x10 [ 206.329227][ T7896] ? __fget_files+0x2a/0x420 [ 206.329275][ T7896] ? __fget_files+0x2a/0x420 [ 206.329305][ T7896] ? __fget_files+0x3a0/0x420 [ 206.329352][ T7896] __x64_sys_sendmsg+0x1bd/0x2a0 [ 206.329381][ T7896] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 206.329420][ T7896] ? __pfx_ksys_write+0x10/0x10 [ 206.329457][ T7896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.329482][ T7896] do_syscall_64+0x15f/0xf80 [ 206.329505][ T7896] ? trace_irq_disable+0x3b/0x140 [ 206.329539][ T7896] ? clear_bhb_loop+0x40/0x90 [ 206.329568][ T7896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.329598][ T7896] RIP: 0033:0x7f0368d9ce59 [ 206.329619][ T7896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.329636][ T7896] RSP: 002b:00007f0369cd4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.329659][ T7896] RAX: ffffffffffffffda RBX: 00007f0369015fa0 RCX: 00007f0368d9ce59 [ 206.329674][ T7896] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 206.329687][ T7896] RBP: 00007f0369cd4090 R08: 0000000000000000 R09: 0000000000000000 [ 206.329699][ T7896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.329710][ T7896] R13: 00007f0369016038 R14: 00007f0369015fa0 R15: 00007fff82ae35f8 [ 206.329750][ T7896] [ 208.948892][ T7927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.680'. [ 211.378124][ T7977] FAULT_INJECTION: forcing a failure. [ 211.378124][ T7977] name failslab, interval 1, probability 0, space 0, times 0 [ 211.394202][ T7977] CPU: 0 UID: 0 PID: 7977 Comm: syz.2.695 Not tainted syzkaller #0 PREEMPT(full) [ 211.394232][ T7977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 211.394245][ T7977] Call Trace: [ 211.394253][ T7977] [ 211.394262][ T7977] dump_stack_lvl+0xe8/0x150 [ 211.394295][ T7977] should_fail_ex+0x412/0x560 [ 211.394337][ T7977] should_failslab+0xa8/0x100 [ 211.394364][ T7977] ? skb_clone+0x212/0x3a0 [ 211.394388][ T7977] kmem_cache_alloc_noprof+0x87/0x650 [ 211.394422][ T7977] ? apparmor_capable+0x126/0x170 [ 211.394459][ T7977] skb_clone+0x212/0x3a0 [ 211.394482][ T7977] ? nfnetlink_rcv+0x4b0/0x27b0 [ 211.394520][ T7977] nfnetlink_rcv+0x4de/0x27b0 [ 211.394557][ T7977] ? kernel_text_address+0xa5/0xe0 [ 211.394591][ T7977] ? __kernel_text_address+0xd/0x30 [ 211.394626][ T7977] ? arch_stack_walk+0xfb/0x150 [ 211.394676][ T7977] ? stack_trace_save+0xa9/0x100 [ 211.394723][ T7977] ? __lock_acquire+0x6b5/0x2cf0 [ 211.394748][ T7977] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 211.394810][ T7977] ? __lock_acquire+0x6b5/0x2cf0 [ 211.394839][ T7977] ? perf_trace_lock+0xff/0x410 [ 211.394863][ T7977] ? __netlink_lookup+0xc6/0x8b0 [ 211.394891][ T7977] ? perf_trace_lock+0xff/0x410 [ 211.394916][ T7977] ? __pfx_perf_trace_lock+0x10/0x10 [ 211.394948][ T7977] ? __pfx_perf_trace_lock+0x10/0x10 [ 211.394979][ T7977] ? netlink_deliver_tap+0x2e/0x1b0 [ 211.395006][ T7977] ? netlink_deliver_tap+0x2e/0x1b0 [ 211.395042][ T7977] ? netlink_deliver_tap+0x2e/0x1b0 [ 211.395064][ T7977] ? netlink_deliver_tap+0x2e/0x1b0 [ 211.395095][ T7977] netlink_unicast+0x75c/0x8e0 [ 211.395149][ T7977] netlink_sendmsg+0x813/0xb40 [ 211.395186][ T7977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.395214][ T7977] ? aa_sock_msg_perm+0xf1/0x1b0 [ 211.395250][ T7977] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 211.395277][ T7977] ____sys_sendmsg+0x972/0x9f0 [ 211.395301][ T7977] ? __pfx_perf_trace_lock+0x10/0x10 [ 211.395337][ T7977] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.395374][ T7977] ? import_iovec+0x73/0xa0 [ 211.395404][ T7977] ___sys_sendmsg+0x2a5/0x360 [ 211.395426][ T7977] ? __lock_acquire+0x6b5/0x2cf0 [ 211.395456][ T7977] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.395513][ T7977] ? __fget_files+0x2a/0x420 [ 211.395559][ T7977] ? __fget_files+0x2a/0x420 [ 211.395589][ T7977] ? __fget_files+0x3a0/0x420 [ 211.395636][ T7977] __x64_sys_sendmsg+0x1bd/0x2a0 [ 211.395664][ T7977] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 211.395685][ T7977] ? perf_trace_preemptirq_template+0xb2/0x350 [ 211.395733][ T7977] ? __pfx_ksys_write+0x10/0x10 [ 211.395769][ T7977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.395792][ T7977] do_syscall_64+0x15f/0xf80 [ 211.395814][ T7977] ? trace_irq_disable+0x3b/0x140 [ 211.395845][ T7977] ? clear_bhb_loop+0x40/0x90 [ 211.395872][ T7977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.395893][ T7977] RIP: 0033:0x7f630d99ce59 [ 211.395913][ T7977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.395929][ T7977] RSP: 002b:00007f630e856028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.395950][ T7977] RAX: ffffffffffffffda RBX: 00007f630dc15fa0 RCX: 00007f630d99ce59 [ 211.395965][ T7977] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 211.395977][ T7977] RBP: 00007f630e856090 R08: 0000000000000000 R09: 0000000000000000 [ 211.395989][ T7977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.396000][ T7977] R13: 00007f630dc16038 R14: 00007f630dc15fa0 R15: 00007ffd5d5906d8 [ 211.396046][ T7977] [ 211.778921][ T7970] lo speed is unknown, defaulting to 1000 [ 212.046236][ T5646] Bluetooth: hci0: command 0x0406 tx timeout [ 212.055170][ T5646] Bluetooth: hci2: command 0x0406 tx timeout [ 212.061886][ T5646] Bluetooth: hci4: command 0x0406 tx timeout [ 212.070168][ T5646] Bluetooth: hci1: command 0x0406 tx timeout [ 212.078175][ T5646] Bluetooth: hci3: command 0x0406 tx timeout [ 215.012273][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.321113][ T8034] netlink: 36 bytes leftover after parsing attributes in process `syz.1.716'. [ 215.572944][ T8031] syzkaller0: entered promiscuous mode [ 215.621645][ T8031] syzkaller0: entered allmulticast mode [ 216.932036][ T8059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.724'. [ 217.305472][ T8075] netlink: 104 bytes leftover after parsing attributes in process `syz.2.730'. [ 219.282153][ T8062] netlink: 'syz.3.726': attribute type 29 has an invalid length. [ 219.963145][ T8108] openvswitch: netlink: ct_state flags 00000180 unsupported [ 220.400207][ T8111] syzkaller0: entered promiscuous mode [ 220.416255][ T8111] syzkaller0: entered allmulticast mode [ 220.469327][ T8127] netlink: 'syz.0.742': attribute type 22 has an invalid length. [ 220.477146][ T8127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.742'. [ 220.989610][ T8139] netlink: 68 bytes leftover after parsing attributes in process `syz.3.746'. [ 221.912533][ T8147] openvswitch: netlink: Message has 176 unknown bytes. [ 222.023007][ T8150] netlink: 1045 bytes leftover after parsing attributes in process `syz.4.751'. [ 222.621008][ T8162] openvswitch: netlink: ct_state flags 00000180 unsupported [ 223.111492][ T8170] FAULT_INJECTION: forcing a failure. [ 223.111492][ T8170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.127144][ T8170] CPU: 1 UID: 0 PID: 8170 Comm: syz.3.758 Not tainted syzkaller #0 PREEMPT(full) [ 223.127169][ T8170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 223.127180][ T8170] Call Trace: [ 223.127188][ T8170] [ 223.127196][ T8170] dump_stack_lvl+0xe8/0x150 [ 223.127226][ T8170] should_fail_ex+0x412/0x560 [ 223.127264][ T8170] _copy_from_user+0x2d/0xb0 [ 223.127287][ T8170] kstrtouint_from_user+0xd6/0x180 [ 223.127320][ T8170] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 223.127375][ T8170] proc_fail_nth_write+0x8e/0x210 [ 223.127406][ T8170] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 223.127443][ T8170] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 223.127475][ T8170] vfs_write+0x29a/0xb90 [ 223.127510][ T8170] ? __pfx_vfs_write+0x10/0x10 [ 223.127534][ T8170] ? __fget_files+0x2a/0x420 [ 223.127568][ T8170] ? __fget_files+0x3a0/0x420 [ 223.127594][ T8170] ? __fget_files+0x2a/0x420 [ 223.127634][ T8170] ksys_write+0x150/0x270 [ 223.127659][ T8170] ? __pfx_ksys_write+0x10/0x10 [ 223.127693][ T8170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.127714][ T8170] do_syscall_64+0x15f/0xf80 [ 223.127734][ T8170] ? trace_irq_disable+0x3b/0x140 [ 223.127763][ T8170] ? clear_bhb_loop+0x40/0x90 [ 223.127788][ T8170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.127807][ T8170] RIP: 0033:0x7fea03d5d68e [ 223.127826][ T8170] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 223.127840][ T8170] RSP: 002b:00007fea04d2dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 223.127859][ T8170] RAX: ffffffffffffffda RBX: 00007fea04d2e6c0 RCX: 00007fea03d5d68e [ 223.127871][ T8170] RDX: 0000000000000001 RSI: 00007fea04d2e0a0 RDI: 0000000000000004 [ 223.127888][ T8170] RBP: 00007fea04d2e090 R08: 0000000000000000 R09: 0000000000000000 [ 223.127898][ T8170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 223.127907][ T8170] R13: 00007fea04016038 R14: 00007fea04015fa0 R15: 00007ffc9ce10138 [ 223.127961][ T8170] [ 224.649784][ T8145] syzkaller0: entered promiscuous mode [ 224.655302][ T8145] syzkaller0: entered allmulticast mode [ 226.589606][ T8172] netlink: 'syz.3.759': attribute type 29 has an invalid length. [ 227.320378][ T8194] openvswitch: netlink: ct_state flags 00000180 unsupported [ 227.344359][ T8193] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.767'. [ 227.401827][ T8193] netlink: 'syz.2.767': attribute type 2 has an invalid length. [ 227.435229][ T8193] netlink: 'syz.2.767': attribute type 8 has an invalid length. [ 227.458628][ T8193] netlink: 132 bytes leftover after parsing attributes in process `syz.2.767'. [ 227.570511][ T8197] FAULT_INJECTION: forcing a failure. [ 227.570511][ T8197] name failslab, interval 1, probability 0, space 0, times 0 [ 227.626063][ T8197] CPU: 0 UID: 0 PID: 8197 Comm: syz.0.768 Not tainted syzkaller #0 PREEMPT(full) [ 227.626092][ T8197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 227.626106][ T8197] Call Trace: [ 227.626114][ T8197] [ 227.626124][ T8197] dump_stack_lvl+0xe8/0x150 [ 227.626157][ T8197] should_fail_ex+0x412/0x560 [ 227.626199][ T8197] should_failslab+0xa8/0x100 [ 227.626226][ T8197] ? skb_clone+0x212/0x3a0 [ 227.626251][ T8197] kmem_cache_alloc_noprof+0x87/0x650 [ 227.626287][ T8197] ? __pfx_perf_trace_lock+0x10/0x10 [ 227.626323][ T8197] skb_clone+0x212/0x3a0 [ 227.626353][ T8197] __netlink_deliver_tap+0x404/0x850 [ 227.626394][ T8197] ? netlink_deliver_tap+0x2e/0x1b0 [ 227.626419][ T8197] netlink_deliver_tap+0x19c/0x1b0 [ 227.626444][ T8197] netlink_unicast+0x730/0x8e0 [ 227.626493][ T8197] netlink_sendmsg+0x813/0xb40 [ 227.626531][ T8197] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.626559][ T8197] ? aa_sock_msg_perm+0xf1/0x1b0 [ 227.626596][ T8197] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 227.626623][ T8197] ____sys_sendmsg+0x972/0x9f0 [ 227.626647][ T8197] ? __pfx_perf_trace_lock+0x10/0x10 [ 227.626684][ T8197] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.626721][ T8197] ? import_iovec+0x73/0xa0 [ 227.626751][ T8197] ___sys_sendmsg+0x2a5/0x360 [ 227.626774][ T8197] ? __lock_acquire+0x6b5/0x2cf0 [ 227.626804][ T8197] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.626862][ T8197] ? __fget_files+0x2a/0x420 [ 227.626911][ T8197] ? __fget_files+0x2a/0x420 [ 227.626940][ T8197] ? __fget_files+0x3a0/0x420 [ 227.626988][ T8197] __x64_sys_sendmsg+0x1bd/0x2a0 [ 227.627028][ T8197] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 227.627068][ T8197] ? __pfx_ksys_write+0x10/0x10 [ 227.627105][ T8197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.627129][ T8197] do_syscall_64+0x15f/0xf80 [ 227.627153][ T8197] ? trace_irq_disable+0x3b/0x140 [ 227.627186][ T8197] ? clear_bhb_loop+0x40/0x90 [ 227.627215][ T8197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.627237][ T8197] RIP: 0033:0x7ff59bd9ce59 [ 227.627258][ T8197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.627275][ T8197] RSP: 002b:00007ff59cb8a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.627297][ T8197] RAX: ffffffffffffffda RBX: 00007ff59c015fa0 RCX: 00007ff59bd9ce59 [ 227.627312][ T8197] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 227.627324][ T8197] RBP: 00007ff59cb8a090 R08: 0000000000000000 R09: 0000000000000000 [ 227.627336][ T8197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.627348][ T8197] R13: 00007ff59c016038 R14: 00007ff59c015fa0 R15: 00007ffd866997e8 [ 227.627389][ T8197] [ 228.291617][ T8207] netlink: 'syz.3.772': attribute type 29 has an invalid length. [ 228.302321][ T8207] netlink: 'syz.3.772': attribute type 29 has an invalid length. [ 228.448096][ T8209] netlink: 'syz.1.773': attribute type 10 has an invalid length. [ 228.483436][ T8209] netlink: 164 bytes leftover after parsing attributes in process `syz.1.773'. [ 229.022811][ T1148] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 229.120973][ T8224] openvswitch: netlink: ct_state flags 00000180 unsupported [ 229.176033][ T8220] syzkaller0: entered promiscuous mode [ 229.196757][ T8220] syzkaller0: entered allmulticast mode [ 229.414792][ T8231] netlink: 'syz.1.780': attribute type 10 has an invalid length. [ 229.423567][ T8231] netlink: 40 bytes leftover after parsing attributes in process `syz.1.780'. [ 229.681164][ T8237] netlink: zone id is out of range [ 229.914919][ T8244] netlink: 20 bytes leftover after parsing attributes in process `syz.3.784'. [ 229.924852][ T8244] netlink: 24 bytes leftover after parsing attributes in process `syz.3.784'. [ 229.960493][ T8245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.785'. [ 230.974350][ T8264] netlink: 'syz.2.788': attribute type 2 has an invalid length. [ 231.017288][ T8264] netlink: 'syz.2.788': attribute type 8 has an invalid length. [ 231.025660][ T8264] netlink: 132 bytes leftover after parsing attributes in process `syz.2.788'. [ 231.081090][ T8265] netlink: 'syz.2.788': attribute type 2 has an invalid length. [ 231.099851][ T8265] netlink: 132 bytes leftover after parsing attributes in process `syz.2.788'. [ 231.905226][ T8272] openvswitch: netlink: ct_state flags 00000180 unsupported [ 232.798852][ T8231] dummy0: entered promiscuous mode [ 232.804975][ T8231] dummy0: entered allmulticast mode [ 232.812335][ T8231] bridge0: port 3(dummy0) entered blocking state [ 232.819182][ T8231] bridge0: port 3(dummy0) entered disabled state [ 232.829552][ T8231] bridge0: port 3(dummy0) entered blocking state [ 232.836054][ T8231] bridge0: port 3(dummy0) entered forwarding state [ 232.856053][ T8266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.788'. [ 232.879296][ T8276] netlink: 818 bytes leftover after parsing attributes in process `syz.4.792'. [ 233.200893][ T8288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.796'. [ 233.216592][ T8288] validate_nla: 1 callbacks suppressed [ 233.216630][ T8288] netlink: 'syz.4.796': attribute type 2 has an invalid length. [ 233.239940][ T8286] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.797'. [ 233.575047][ T8298] netlink: 'syz.2.799': attribute type 4 has an invalid length. [ 233.682327][ T8298] netlink: 152 bytes leftover after parsing attributes in process `syz.2.799'. [ 234.113480][ T8308] syzkaller0: entered promiscuous mode [ 234.132909][ T8308] syzkaller0: entered allmulticast mode [ 234.339026][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.805'. [ 234.412085][ T8310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.317480][ T8314] netlink: 'syz.4.806': attribute type 3 has an invalid length. [ 236.619281][ T8341] lo speed is unknown, defaulting to 1000 [ 236.829879][ T8350] netlink: 'syz.3.817': attribute type 2 has an invalid length. [ 236.860390][ T8350] netlink: 'syz.3.817': attribute type 8 has an invalid length. [ 236.869867][ T8350] netlink: 132 bytes leftover after parsing attributes in process `syz.3.817'. [ 236.886677][ T8357] netlink: 'syz.3.817': attribute type 2 has an invalid length. [ 236.936952][ T8360] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.819'. [ 236.953307][ T8357] netlink: 'syz.3.817': attribute type 8 has an invalid length. [ 236.972720][ T8357] netlink: 132 bytes leftover after parsing attributes in process `syz.3.817'. [ 236.995040][ T8361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.817'. [ 237.128219][ T8360] netlink: 'syz.4.819': attribute type 2 has an invalid length. [ 237.152222][ T8360] netlink: 'syz.4.819': attribute type 8 has an invalid length. [ 237.676332][ T8377] : renamed from lo [ 237.926427][ T8379] syzkaller0: entered promiscuous mode [ 237.958764][ T8379] syzkaller0: entered allmulticast mode [ 238.109144][ T8391] sch_fq: defrate 181 ignored. [ 238.691080][ T8405] netlink: 'syz.0.833': attribute type 23 has an invalid length. [ 238.947568][ T8404] netlink: 'syz.2.835': attribute type 2 has an invalid length. [ 238.955286][ T8404] netlink: 'syz.2.835': attribute type 8 has an invalid length. [ 238.992297][ T8404] __nla_validate_parse: 1 callbacks suppressed [ 238.992367][ T8404] netlink: 132 bytes leftover after parsing attributes in process `syz.2.835'. [ 238.999602][ T8407] netlink: 'syz.2.835': attribute type 2 has an invalid length. [ 239.048770][ T8407] netlink: 'syz.2.835': attribute type 8 has an invalid length. [ 239.076862][ T8407] netlink: 132 bytes leftover after parsing attributes in process `syz.2.835'. [ 239.138806][ T8405] netlink: 'syz.0.833': attribute type 10 has an invalid length. [ 240.723557][ T8410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.835'. [ 240.942556][ T8420] nftables ruleset with unbound chain [ 241.175732][ T8422] netlink: 128 bytes leftover after parsing attributes in process `syz.1.839'. [ 241.246513][ T8430] netlink: 36 bytes leftover after parsing attributes in process `syz.2.842'. [ 241.602229][ T8449] netlink: 24 bytes leftover after parsing attributes in process `syz.3.847'. [ 241.749346][ T8452] TCP: TCP_TX_DELAY enabled [ 242.482336][ T8464] syzkaller0: entered promiscuous mode [ 242.488439][ T8464] syzkaller0: entered allmulticast mode [ 242.882329][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.858'. [ 242.920997][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.858'. [ 245.057285][ T8514] sit0: entered allmulticast mode [ 245.068957][ T8516] sit0: entered promiscuous mode [ 245.357956][ T8535] netlink: 288 bytes leftover after parsing attributes in process `syz.0.872'. [ 246.391681][ T8561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.878'. [ 246.428483][ T8561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.878'. [ 246.437362][ T8561] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 246.448783][ T8565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.878'. [ 247.028066][ T8581] FAULT_INJECTION: forcing a failure. [ 247.028066][ T8581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.068283][ T8581] CPU: 0 UID: 0 PID: 8581 Comm: syz.3.884 Not tainted syzkaller #0 PREEMPT(full) [ 247.068312][ T8581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 247.068332][ T8581] Call Trace: [ 247.068341][ T8581] [ 247.068350][ T8581] dump_stack_lvl+0xe8/0x150 [ 247.068383][ T8581] should_fail_ex+0x412/0x560 [ 247.068422][ T8581] _copy_to_user+0x31/0xb0 [ 247.068449][ T8581] bpf_test_finish+0x53c/0x6b0 [ 247.068487][ T8581] ? __pfx_bpf_test_finish+0x10/0x10 [ 247.068516][ T8581] ? _copy_from_user+0x94/0xb0 [ 247.068539][ T8581] ? bpf_test_init+0x113/0x150 [ 247.068562][ T8581] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 247.068604][ T8581] ? irqentry_exit+0x218/0x760 [ 247.068628][ T8581] ? trace_irq_disable+0x3b/0x140 [ 247.068663][ T8581] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 247.068701][ T8581] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 247.068726][ T8581] bpf_prog_test_run+0x2c7/0x340 [ 247.068753][ T8581] __sys_bpf+0xa20/0xd90 [ 247.068796][ T8581] ? __pfx___sys_bpf+0x10/0x10 [ 247.068830][ T8581] ? perf_trace_preemptirq_template+0xb2/0x350 [ 247.068864][ T8581] ? irqentry_exit+0x218/0x760 [ 247.068923][ T8581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.068952][ T8581] __x64_sys_bpf+0xba/0xd0 [ 247.068983][ T8581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.069007][ T8581] do_syscall_64+0x15f/0xf80 [ 247.069031][ T8581] ? clear_bhb_loop+0x40/0x90 [ 247.069058][ T8581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.069080][ T8581] RIP: 0033:0x7fea03d9ce59 [ 247.069100][ T8581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.069117][ T8581] RSP: 002b:00007fea04d2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 247.069140][ T8581] RAX: ffffffffffffffda RBX: 00007fea04015fa0 RCX: 00007fea03d9ce59 [ 247.069156][ T8581] RDX: 0000000000000050 RSI: 00002000000009c0 RDI: 000000000000000a [ 247.069169][ T8581] RBP: 00007fea04d2e090 R08: 0000000000000000 R09: 0000000000000000 [ 247.069182][ T8581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.069194][ T8581] R13: 00007fea04016038 R14: 00007fea04015fa0 R15: 00007ffc9ce10138 [ 247.069229][ T8581] [ 247.202419][ T8584] openvswitch: netlink: ct_state flags 00000180 unsupported [ 247.414937][ T8591] netlink: 112 bytes leftover after parsing attributes in process `syz.4.887'. [ 247.757812][ T8597] netlink: 'syz.0.890': attribute type 8 has an invalid length. [ 247.811453][ T8597] netlink: 1108 bytes leftover after parsing attributes in process `syz.0.890'. [ 247.903413][ T8597] openvswitch: netlink: Flow key attr not present in new flow. [ 247.990998][ T8607] netlink: 20 bytes leftover after parsing attributes in process `syz.4.891'. [ 248.082494][ T8607] netlink: 24 bytes leftover after parsing attributes in process `syz.4.891'. [ 249.724450][ T8641] netlink: 'syz.4.898': attribute type 10 has an invalid length. [ 250.117329][ T8643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.899'. [ 250.360288][ T8660] ref_ctr_offset mismatch. inode: 0x386 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 250.448997][ T8660] FAULT_INJECTION: forcing a failure. [ 250.448997][ T8660] name failslab, interval 1, probability 0, space 0, times 0 [ 250.504832][ T8660] CPU: 1 UID: 0 PID: 8660 Comm: syz.1.903 Not tainted syzkaller #0 PREEMPT(full) [ 250.504859][ T8660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 250.504872][ T8660] Call Trace: [ 250.504885][ T8660] [ 250.504897][ T8660] dump_stack_lvl+0xe8/0x150 [ 250.504948][ T8660] should_fail_ex+0x412/0x560 [ 250.505025][ T8660] should_failslab+0xa8/0x100 [ 250.505073][ T8660] __kmalloc_cache_noprof+0x88/0x660 [ 250.505114][ T8660] ? rdma_restrack_init+0x4f/0x520 [ 250.505181][ T8660] rdma_restrack_init+0x4f/0x520 [ 250.505222][ T8660] _ib_alloc_device+0x53/0x680 [ 250.505284][ T8660] siw_newlink+0xea/0xde0 [ 250.505354][ T8660] nldev_newlink+0x5bc/0x650 [ 250.505415][ T8660] ? __pfx_nldev_newlink+0x10/0x10 [ 250.506121][ T8660] ? bpf_lsm_capable+0x9/0x20 [ 250.506155][ T8660] ? security_capable+0x7e/0x2c0 [ 250.506217][ T8660] ? __pfx_nldev_newlink+0x10/0x10 [ 250.506269][ T8660] rdma_nl_rcv+0x6d1/0xa10 [ 250.506394][ T8660] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 250.506454][ T8660] ? __pfx_perf_trace_lock+0x10/0x10 [ 250.506587][ T8660] ? netlink_deliver_tap+0x2e/0x1b0 [ 250.506621][ T8660] ? netlink_deliver_tap+0x2e/0x1b0 [ 250.506689][ T8660] netlink_unicast+0x75c/0x8e0 [ 250.506803][ T8660] netlink_sendmsg+0x813/0xb40 [ 250.506893][ T8660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.506950][ T8660] ? aa_sock_msg_perm+0xf1/0x1b0 [ 250.507008][ T8660] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 250.507060][ T8660] ____sys_sendmsg+0x972/0x9f0 [ 250.507097][ T8660] ? __pfx_perf_trace_lock+0x10/0x10 [ 250.507175][ T8660] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.507268][ T8660] ? import_iovec+0x73/0xa0 [ 250.507348][ T8660] ___sys_sendmsg+0x2a5/0x360 [ 250.507385][ T8660] ? perf_trace_run_bpf_submit+0xee/0x170 [ 250.507453][ T8660] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.507623][ T8660] ? __fget_files+0x2a/0x420 [ 250.507724][ T8660] ? __fget_files+0x2a/0x420 [ 250.507768][ T8660] ? __fget_files+0x3a0/0x420 [ 250.507869][ T8660] __x64_sys_sendmsg+0x1bd/0x2a0 [ 250.507964][ T8660] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 250.508055][ T8660] ? __pfx_ksys_write+0x10/0x10 [ 250.508145][ T8660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.508184][ T8660] do_syscall_64+0x15f/0xf80 [ 250.508212][ T8660] ? trace_irq_disable+0x3b/0x140 [ 250.508255][ T8660] ? clear_bhb_loop+0x40/0x90 [ 250.508314][ T8660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.508341][ T8660] RIP: 0033:0x7f103959ce59 [ 250.508373][ T8660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.508390][ T8660] RSP: 002b:00007f103a4ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.508412][ T8660] RAX: ffffffffffffffda RBX: 00007f1039815fa0 RCX: 00007f103959ce59 [ 250.508427][ T8660] RDX: 0000000000004000 RSI: 0000200000000180 RDI: 000000000000000f [ 250.508440][ T8660] RBP: 00007f103a4ea090 R08: 0000000000000000 R09: 0000000000000000 [ 250.508452][ T8660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.508464][ T8660] R13: 00007f1039816038 R14: 00007f1039815fa0 R15: 00007ffcf7f46ff8 [ 250.508577][ T8660] [ 250.887796][ T8674] FAULT_INJECTION: forcing a failure. [ 250.887796][ T8674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.901174][ T8674] CPU: 1 UID: 0 PID: 8674 Comm: syz.0.905 Not tainted syzkaller #0 PREEMPT(full) [ 250.901201][ T8674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 250.901214][ T8674] Call Trace: [ 250.901224][ T8674] [ 250.901234][ T8674] dump_stack_lvl+0xe8/0x150 [ 250.901284][ T8674] should_fail_ex+0x412/0x560 [ 250.901346][ T8674] _copy_from_user+0x2d/0xb0 [ 250.901379][ T8674] generic_map_update_batch+0x648/0x990 [ 250.901449][ T8674] ? __pfx_generic_map_update_batch+0x10/0x10 [ 250.901484][ T8674] ? __fget_files+0x2a/0x420 [ 250.901545][ T8674] ? __pfx_generic_map_update_batch+0x10/0x10 [ 250.901579][ T8674] bpf_map_do_batch+0x39b/0x630 [ 250.901624][ T8674] __sys_bpf+0xbe3/0xd90 [ 250.901695][ T8674] ? __pfx___sys_bpf+0x10/0x10 [ 250.901750][ T8674] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 250.901872][ T8674] ? ksys_write+0x242/0x270 [ 250.901913][ T8674] ? __pfx_ksys_write+0x10/0x10 [ 250.901962][ T8674] __x64_sys_bpf+0xba/0xd0 [ 250.902002][ T8674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.902035][ T8674] do_syscall_64+0x15f/0xf80 [ 250.902061][ T8674] ? trace_irq_disable+0x3b/0x140 [ 250.902099][ T8674] ? clear_bhb_loop+0x40/0x90 [ 250.902138][ T8674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.902163][ T8674] RIP: 0033:0x7ff59bd9ce59 [ 250.902188][ T8674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.902205][ T8674] RSP: 002b:00007ff59cb8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 250.902228][ T8674] RAX: ffffffffffffffda RBX: 00007ff59c015fa0 RCX: 00007ff59bd9ce59 [ 250.902243][ T8674] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 250.902264][ T8674] RBP: 00007ff59cb8a090 R08: 0000000000000000 R09: 0000000000000000 [ 250.902283][ T8674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 250.902295][ T8674] R13: 00007ff59c016038 R14: 00007ff59c015fa0 R15: 00007ffd866997e8 [ 250.902377][ T8674] [ 251.495001][ T8688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.908'. [ 251.565959][ T8688] netlink: 24 bytes leftover after parsing attributes in process `syz.0.908'. [ 251.965822][ T8707] netlink: 28 bytes leftover after parsing attributes in process `syz.4.913'. [ 251.974891][ T8707] netlink: 28 bytes leftover after parsing attributes in process `syz.4.913'. [ 252.699467][ T8727] netlink: 'syz.2.918': attribute type 10 has an invalid length. [ 252.735155][ T8727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.836067][ T8727] bond0: (slave batadv_slave_1): Enslaving as an active interface with an up link [ 254.344010][ T8759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.925'. [ 255.519460][ T8783] netlink: 20 bytes leftover after parsing attributes in process `syz.0.931'. [ 255.565496][ T8783] netlink: 24 bytes leftover after parsing attributes in process `syz.0.931'. [ 255.972932][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.982972][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.776858][ T8807] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.935'. [ 256.884580][ T8807] netlink: 'syz.0.935': attribute type 2 has an invalid length. [ 256.903145][ T8807] netlink: 'syz.0.935': attribute type 8 has an invalid length. [ 256.920277][ T8807] netlink: 132 bytes leftover after parsing attributes in process `syz.0.935'. [ 257.235721][ T8821] netlink: 56 bytes leftover after parsing attributes in process `syz.0.937'. [ 257.680065][ T8827] netlink: 28 bytes leftover after parsing attributes in process `syz.1.940'. [ 257.720351][ T8827] veth0_macvtap: left promiscuous mode [ 259.715950][ T8871] netlink: 'syz.3.951': attribute type 1 has an invalid length. [ 260.096676][ T8871] netlink: 'syz.3.951': attribute type 21 has an invalid length. [ 260.131329][ T8871] netlink: 168 bytes leftover after parsing attributes in process `syz.3.951'. [ 260.239251][ T8878] netlink: 260 bytes leftover after parsing attributes in process `syz.3.951'. [ 260.358798][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 261.649033][ T5289] veth0_macvtap: entered promiscuous mode [ 261.796974][ T8912] netlink: 16 bytes leftover after parsing attributes in process `syz.1.960'. [ 261.857338][ T8915] netlink: 220 bytes leftover after parsing attributes in process `syz.0.961'. [ 261.866377][ T8915] tc_dump_action: action bad kind [ 261.872612][ T8912] netlink: 16 bytes leftover after parsing attributes in process `syz.1.960'. [ 261.898467][ T8915] netlink: 76 bytes leftover after parsing attributes in process `syz.0.961'. [ 263.274575][ T8954] netlink: 40 bytes leftover after parsing attributes in process `syz.2.970'. [ 265.633141][ T9002] netlink: 24 bytes leftover after parsing attributes in process `syz.0.984'. [ 266.781865][ T9019] openvswitch: netlink: Flow key attr not present in new flow. [ 266.816053][ T9017] netlink: 'syz.0.991': attribute type 39 has an invalid length. [ 267.135072][ T9029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.995'. [ 267.213990][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.995'. [ 267.457625][ T9037] FAULT_INJECTION: forcing a failure. [ 267.457625][ T9037] name failslab, interval 1, probability 0, space 0, times 0 [ 267.485915][ T9037] CPU: 1 UID: 0 PID: 9037 Comm: syz.3.997 Not tainted syzkaller #0 PREEMPT(full) [ 267.485945][ T9037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 267.485959][ T9037] Call Trace: [ 267.485969][ T9037] [ 267.485978][ T9037] dump_stack_lvl+0xe8/0x150 [ 267.486012][ T9037] should_fail_ex+0x412/0x560 [ 267.486059][ T9037] should_failslab+0xa8/0x100 [ 267.486097][ T9037] __kmalloc_cache_noprof+0x88/0x660 [ 267.486121][ T9037] ? nft_pernet+0x23/0x240 [ 267.486152][ T9037] ? nf_tables_newtable+0x435/0x1910 [ 267.486190][ T9037] nf_tables_newtable+0x435/0x1910 [ 267.486250][ T9037] nfnetlink_rcv+0x123e/0x27b0 [ 267.486337][ T9037] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 267.486439][ T9037] ? lockdep_hardirqs_on+0x7a/0x110 [ 267.486481][ T9037] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 267.486536][ T9037] ? rcu_preempt_deferred_qs_irqrestore+0x7b9/0xbc0 [ 267.486605][ T9037] netlink_unicast+0x75c/0x8e0 [ 267.486656][ T9037] netlink_sendmsg+0x813/0xb40 [ 267.486695][ T9037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.486725][ T9037] ? aa_sock_msg_perm+0xf1/0x1b0 [ 267.486764][ T9037] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 267.486792][ T9037] ____sys_sendmsg+0x972/0x9f0 [ 267.486818][ T9037] ? __pfx_perf_trace_lock+0x10/0x10 [ 267.486857][ T9037] ? __pfx_____sys_sendmsg+0x10/0x10 [ 267.486897][ T9037] ? import_iovec+0x73/0xa0 [ 267.486928][ T9037] ___sys_sendmsg+0x2a5/0x360 [ 267.486951][ T9037] ? __lock_acquire+0x6b5/0x2cf0 [ 267.486984][ T9037] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.487043][ T9037] ? __fget_files+0x2a/0x420 [ 267.487107][ T9037] ? __fget_files+0x2a/0x420 [ 267.487138][ T9037] ? __fget_files+0x3a0/0x420 [ 267.487185][ T9037] __x64_sys_sendmsg+0x1bd/0x2a0 [ 267.487215][ T9037] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 267.487253][ T9037] ? __pfx_ksys_write+0x10/0x10 [ 267.487291][ T9037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.487316][ T9037] do_syscall_64+0x15f/0xf80 [ 267.487340][ T9037] ? trace_irq_disable+0x3b/0x140 [ 267.487373][ T9037] ? clear_bhb_loop+0x40/0x90 [ 267.487404][ T9037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.487426][ T9037] RIP: 0033:0x7fea03d9ce59 [ 267.487449][ T9037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.487468][ T9037] RSP: 002b:00007fea04d2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.487491][ T9037] RAX: ffffffffffffffda RBX: 00007fea04015fa0 RCX: 00007fea03d9ce59 [ 267.487507][ T9037] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 267.487521][ T9037] RBP: 00007fea04d2e090 R08: 0000000000000000 R09: 0000000000000000 [ 267.487535][ T9037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.487548][ T9037] R13: 00007fea04016038 R14: 00007fea04015fa0 R15: 00007ffc9ce10138 [ 267.487590][ T9037] [ 267.881303][ T9028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.995'. [ 268.230898][ T9043] netlink: 'syz.1.998': attribute type 23 has an invalid length. [ 269.127405][ T5636] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 269.141186][ T5636] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 269.152109][ T5636] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 269.160620][ T5636] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 269.171115][ T5636] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 269.259930][ T9071] openvswitch: netlink: ct_state flags 00000180 unsupported [ 269.655465][ T9078] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1010'. [ 269.813099][ T9082] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1010'. [ 270.097474][ T9085] syzkaller0: entered promiscuous mode [ 270.110973][ T9085] syzkaller0: entered allmulticast mode [ 270.267209][ T9099] netlink: 'syz.0.1016': attribute type 6 has an invalid length. [ 270.303881][ T9099] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1016'. [ 270.372270][ T9103] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1017'. [ 271.250271][ T5634] Bluetooth: hci5: command tx timeout [ 271.592592][ T9133] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1029'. [ 271.613254][ T9135] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1030'. [ 271.623679][ T9135] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1030'. [ 272.066857][ T9144] netlink: 'syz.0.1032': attribute type 41 has an invalid length. [ 273.015341][ T9110] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1020'. [ 273.026929][ T9142] netlink: 'syz.0.1032': attribute type 29 has an invalid length. [ 273.081112][ T9067] lo speed is unknown, defaulting to 1000 [ 273.326015][ T5634] Bluetooth: hci5: command tx timeout [ 274.097159][ T9187] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1041'. [ 274.177720][ T9067] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.186219][ T9067] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.193989][ T9067] bridge_slave_0: entered allmulticast mode [ 274.203127][ T9067] bridge_slave_0: entered promiscuous mode [ 274.218332][ T9067] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.231802][ T9067] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.247421][ T9067] bridge_slave_1: entered allmulticast mode [ 274.309907][ T9067] bridge_slave_1: entered promiscuous mode [ 274.357351][ T9188] netlink: 'syz.2.1042': attribute type 4 has an invalid length. [ 274.397372][ T9188] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1042'. [ 274.867694][ T9067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.919104][ T9194] FAULT_INJECTION: forcing a failure. [ 274.919104][ T9194] name failslab, interval 1, probability 0, space 0, times 0 [ 274.950965][ T9194] CPU: 0 UID: 0 PID: 9194 Comm: syz.0.1044 Not tainted syzkaller #0 PREEMPT(full) [ 274.951017][ T9194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 274.951031][ T9194] Call Trace: [ 274.951039][ T9194] [ 274.951048][ T9194] dump_stack_lvl+0xe8/0x150 [ 274.951079][ T9194] should_fail_ex+0x412/0x560 [ 274.951119][ T9194] should_failslab+0xa8/0x100 [ 274.951144][ T9194] ? skb_clone+0x212/0x3a0 [ 274.951167][ T9194] kmem_cache_alloc_noprof+0x87/0x650 [ 274.951215][ T9194] skb_clone+0x212/0x3a0 [ 274.951244][ T9194] ? netlink_trim+0x166/0x2c0 [ 274.951279][ T9194] netlink_trim+0x17d/0x2c0 [ 274.951314][ T9194] netlink_broadcast_filtered+0x80/0xeb0 [ 274.951351][ T9194] ? tcf_action_dump+0x20a/0x2a0 [ 274.951394][ T9194] nlmsg_notify+0xf0/0x1a0 [ 274.951421][ T9194] tc_ctl_action+0x976/0xc70 [ 274.951451][ T9194] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 274.951494][ T9194] ? __pfx_tc_ctl_action+0x10/0x10 [ 274.951528][ T9194] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 274.951562][ T9194] ? lockdep_hardirqs_on+0x7a/0x110 [ 274.951633][ T9194] ? __pfx_tc_ctl_action+0x10/0x10 [ 274.951662][ T9194] rtnetlink_rcv_msg+0x77e/0xbe0 [ 274.951695][ T9194] ? __pfx_trace_call_bpf+0x10/0x10 [ 274.951721][ T9194] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 274.951752][ T9194] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 274.951782][ T9194] ? ref_tracker_free+0x693/0x840 [ 274.951809][ T9194] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 274.951853][ T9194] netlink_rcv_skb+0x232/0x4b0 [ 274.951876][ T9194] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 274.951910][ T9194] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 274.951952][ T9194] ? netlink_deliver_tap+0x2e/0x1b0 [ 274.951974][ T9194] ? netlink_deliver_tap+0x2e/0x1b0 [ 274.952002][ T9194] netlink_unicast+0x75c/0x8e0 [ 274.952046][ T9194] netlink_sendmsg+0x813/0xb40 [ 274.952097][ T9194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.952124][ T9194] ? aa_sock_msg_perm+0xf1/0x1b0 [ 274.952160][ T9194] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 274.952185][ T9194] ____sys_sendmsg+0x972/0x9f0 [ 274.952208][ T9194] ? __pfx_perf_trace_lock+0x10/0x10 [ 274.952246][ T9194] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.952279][ T9194] ? import_iovec+0x73/0xa0 [ 274.952304][ T9194] ___sys_sendmsg+0x2a5/0x360 [ 274.952333][ T9194] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.952389][ T9194] ? __fget_files+0x2a/0x420 [ 274.952432][ T9194] ? __fget_files+0x2a/0x420 [ 274.952461][ T9194] ? __fget_files+0x3a0/0x420 [ 274.952503][ T9194] __x64_sys_sendmsg+0x1bd/0x2a0 [ 274.952529][ T9194] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 274.952550][ T9194] ? perf_trace_preemptirq_template+0xb2/0x350 [ 274.952594][ T9194] ? __pfx_ksys_write+0x10/0x10 [ 274.952626][ T9194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.952651][ T9194] do_syscall_64+0x15f/0xf80 [ 274.952673][ T9194] ? trace_irq_disable+0x3b/0x140 [ 274.952704][ T9194] ? clear_bhb_loop+0x40/0x90 [ 274.952731][ T9194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.952753][ T9194] RIP: 0033:0x7ff59bd9ce59 [ 274.952773][ T9194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.952792][ T9194] RSP: 002b:00007ff59cb8a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.952814][ T9194] RAX: ffffffffffffffda RBX: 00007ff59c015fa0 RCX: 00007ff59bd9ce59 [ 274.952830][ T9194] RDX: 0000000000008040 RSI: 00002000000002c0 RDI: 0000000000000003 [ 274.952843][ T9194] RBP: 00007ff59cb8a090 R08: 0000000000000000 R09: 0000000000000000 [ 274.952856][ T9194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 274.952868][ T9194] R13: 00007ff59c016038 R14: 00007ff59c015fa0 R15: 00007ffd866997e8 [ 274.952901][ T9194] [ 274.997234][ T9067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.409264][ T5634] Bluetooth: hci5: command tx timeout [ 275.474111][ T9067] team0: Port device team_slave_0 added [ 275.493056][ T9067] team0: Port device team_slave_1 added [ 275.744776][ T9067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.780520][ T9067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.855968][ T9067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.940760][ T9067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.948391][ T9067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.975364][ T9067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.392372][ T9226] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1052'. [ 276.437224][ T9067] hsr_slave_0: entered promiscuous mode [ 276.444560][ T9067] hsr_slave_1: entered promiscuous mode [ 276.451542][ T9067] debugfs: 'hsr0' already exists in 'hsr' [ 276.497047][ T9229] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1053'. [ 276.633452][ T9067] Cannot create hsr debugfs directory [ 276.912590][ T5634] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 277.495920][ T5634] Bluetooth: hci5: command tx timeout [ 277.582780][ T9239] netlink: 'syz.3.1055': attribute type 10 has an invalid length. [ 277.959712][ T9067] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 278.073142][ T9067] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 278.109294][ T9067] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 278.250689][ T9067] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 278.280016][ T9067] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 278.368788][ T9067] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 278.397464][ T9067] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 278.422944][ T9067] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 278.438117][ T9276] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1064'. [ 278.780552][ T9291] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1067'. [ 279.038363][ T9067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.240101][ T9067] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.402636][ T9306] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.1071'. [ 279.571909][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.579271][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.782941][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.790226][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.423277][ T9332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1080'. [ 280.450466][ T9331] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1079'. [ 280.452924][ T9332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1080'. [ 280.703443][ T9331] pim6reg1: tun_chr_ioctl cmd 1074812118 [ 280.818686][ T9342] openvswitch: netlink: ct_state flags 00000180 unsupported [ 281.152530][ T9348] netlink: 5252 bytes leftover after parsing attributes in process `syz.1.1086'. [ 281.200659][ T9348] FAULT_INJECTION: forcing a failure. [ 281.200659][ T9348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.248657][ T9348] CPU: 1 UID: 0 PID: 9348 Comm: syz.1.1086 Not tainted syzkaller #0 PREEMPT(full) [ 281.248691][ T9348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 281.248705][ T9348] Call Trace: [ 281.248714][ T9348] [ 281.248723][ T9348] dump_stack_lvl+0xe8/0x150 [ 281.248754][ T9348] should_fail_ex+0x412/0x560 [ 281.248800][ T9348] _copy_from_iter+0x1d3/0x1670 [ 281.248838][ T9348] ? rcu_is_watching+0x15/0xb0 [ 281.248870][ T9348] ? __pfx__copy_from_iter+0x10/0x10 [ 281.248912][ T9348] ? netlink_sendmsg+0x650/0xb40 [ 281.248934][ T9348] ? skb_put+0x11b/0x210 [ 281.248958][ T9348] netlink_sendmsg+0x6c0/0xb40 [ 281.248991][ T9348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.249017][ T9348] ? aa_sock_msg_perm+0xf1/0x1b0 [ 281.249052][ T9348] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 281.249078][ T9348] ____sys_sendmsg+0x972/0x9f0 [ 281.249100][ T9348] ? __might_fault+0xaf/0x130 [ 281.249139][ T9348] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.249172][ T9348] ? import_iovec+0x73/0xa0 [ 281.249199][ T9348] ___sys_sendmsg+0x2a5/0x360 [ 281.249221][ T9348] ? __lock_acquire+0x6b5/0x2cf0 [ 281.249249][ T9348] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.249310][ T9348] ? __fget_files+0x2a/0x420 [ 281.249339][ T9348] ? __fget_files+0x3a0/0x420 [ 281.249381][ T9348] __x64_sys_sendmsg+0x1bd/0x2a0 [ 281.249407][ T9348] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 281.249442][ T9348] ? __pfx_ksys_write+0x10/0x10 [ 281.249474][ T9348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.249498][ T9348] do_syscall_64+0x15f/0xf80 [ 281.249521][ T9348] ? trace_irq_disable+0x3b/0x140 [ 281.249553][ T9348] ? clear_bhb_loop+0x40/0x90 [ 281.249580][ T9348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.249602][ T9348] RIP: 0033:0x7f103959ce59 [ 281.249622][ T9348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.249640][ T9348] RSP: 002b:00007f103a4ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.249662][ T9348] RAX: ffffffffffffffda RBX: 00007f1039815fa0 RCX: 00007f103959ce59 [ 281.249678][ T9348] RDX: 000000000000c000 RSI: 0000200000000080 RDI: 0000000000000006 [ 281.249692][ T9348] RBP: 00007f103a4ea090 R08: 0000000000000000 R09: 0000000000000000 [ 281.249705][ T9348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.249717][ T9348] R13: 00007f1039816038 R14: 00007f1039815fa0 R15: 00007ffcf7f46ff8 [ 281.249751][ T9348] [ 281.652392][ T9358] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1087'. [ 281.681157][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1089'. [ 281.722098][ T9361] netlink: 'syz.0.1087': attribute type 2 has an invalid length. [ 281.770771][ T9361] netlink: 'syz.0.1087': attribute type 8 has an invalid length. [ 281.817351][ T9361] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1087'. [ 282.329667][ T9067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.962865][ T9067] veth0_vlan: entered promiscuous mode [ 283.005582][ T9067] veth1_vlan: entered promiscuous mode [ 283.074321][ T9067] veth0_macvtap: entered promiscuous mode [ 283.094328][ T9067] veth1_macvtap: entered promiscuous mode [ 283.166464][ T9067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.219463][ T9067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.250584][ T9397] netlink: 'syz.0.1100': attribute type 2 has an invalid length. [ 283.280567][ T129] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.282189][ T9397] netlink: 'syz.0.1100': attribute type 8 has an invalid length. [ 283.301600][ T129] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.345521][ T129] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.371283][ T129] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.667692][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.679620][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.803695][ T3316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.828540][ T3316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.059431][ T9426] __nla_validate_parse: 3 callbacks suppressed [ 284.059481][ T9426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1108'. [ 284.070261][ T9428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1109'. [ 284.145087][ T9428] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1109'. [ 284.240902][ T9430] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1007'. [ 284.259989][ T9432] netlink: 'syz.0.1111': attribute type 29 has an invalid length. [ 284.305504][ T9432] netlink: 'syz.0.1111': attribute type 29 has an invalid length. [ 284.331533][ T9432] netlink: 'syz.0.1111': attribute type 29 has an invalid length. [ 284.645354][ T9444] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1114'. [ 284.698469][ T9444] netlink: 'syz.0.1114': attribute type 2 has an invalid length. [ 284.728389][ T9444] netlink: 'syz.0.1114': attribute type 8 has an invalid length. [ 284.741724][ T9444] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1114'. [ 285.497766][ T9449] netlink: 'syz.1.1115': attribute type 1 has an invalid length. [ 286.235435][ T9472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1122'. [ 286.376967][ T9474] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1123'. [ 286.994745][ T9484] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1127'. [ 288.111378][ T9509] syzkaller0: entered promiscuous mode [ 288.124654][ T9509] syzkaller0: entered allmulticast mode [ 288.314890][ T9516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1137'. [ 289.099884][ T9526] netlink: 'syz.5.1139': attribute type 4 has an invalid length. [ 289.567425][ T9534] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1144'. [ 289.871390][ T9537] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1145'. [ 290.309221][ T9548] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1148'. [ 290.333987][ T9548] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1148'. [ 291.055371][ T9554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1150'. [ 291.392720][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 292.846932][ T9556] lo speed is unknown, defaulting to 1000 [ 292.930075][ T9560] openvswitch: netlink: IPv4 tunnel dst address is zero [ 293.128486][ T9564] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1154'. [ 293.148806][ T9570] netlink: 5192 bytes leftover after parsing attributes in process `syz.1.1152'. [ 293.187415][ T9570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1152'. [ 293.207572][ T9570] block nbd0: Unsupported socket: should be TCP or UNIX. [ 293.527942][ T9574] netlink: 'syz.1.1157': attribute type 10 has an invalid length. [ 293.855055][ T9574] team0: Port device vlan0 added [ 293.900039][ T9587] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1161'. [ 294.165043][ T9592] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1163'. [ 294.183942][ T9590] netlink: 'syz.1.1162': attribute type 10 has an invalid length. [ 294.316842][ T9590] team0: Device veth0_vlan is already a lower device of the team interface [ 294.711798][ T9598] syzkaller0: entered promiscuous mode [ 294.717345][ T9598] syzkaller0: entered allmulticast mode [ 298.312684][ T9629] FAULT_INJECTION: forcing a failure. [ 298.312684][ T9629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.325948][ T9629] CPU: 1 UID: 0 PID: 9629 Comm: syz.5.1175 Not tainted syzkaller #0 PREEMPT(full) [ 298.325977][ T9629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 298.325991][ T9629] Call Trace: [ 298.326003][ T9629] [ 298.326013][ T9629] dump_stack_lvl+0xe8/0x150 [ 298.326045][ T9629] should_fail_ex+0x412/0x560 [ 298.326083][ T9629] _copy_from_iter+0x1d3/0x1670 [ 298.326116][ T9629] ? rcu_is_watching+0x15/0xb0 [ 298.326143][ T9629] ? trace_kmem_cache_alloc+0x29/0xe0 [ 298.326174][ T9629] ? __build_skb+0x62/0x440 [ 298.326207][ T9629] ? __build_skb+0x62/0x440 [ 298.326238][ T9629] ? __pfx__copy_from_iter+0x10/0x10 [ 298.326272][ T9629] ? __build_skb+0x2a2/0x440 [ 298.326305][ T9629] ? netlink_sendmsg+0x650/0xb40 [ 298.326325][ T9629] ? skb_put+0x11b/0x210 [ 298.326349][ T9629] netlink_sendmsg+0x6c0/0xb40 [ 298.326382][ T9629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.326408][ T9629] ? aa_sock_msg_perm+0xf1/0x1b0 [ 298.326442][ T9629] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 298.326464][ T9629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.326485][ T9629] sock_write_iter+0x49b/0x4f0 [ 298.326527][ T9629] ? __pfx_sock_write_iter+0x10/0x10 [ 298.326565][ T9629] ? bpf_lsm_file_permission+0x9/0x20 [ 298.326587][ T9629] ? security_file_permission+0x75/0x260 [ 298.326624][ T9629] vfs_write+0x61d/0xb90 [ 298.326657][ T9629] ? __pfx_vfs_write+0x10/0x10 [ 298.326689][ T9629] ? __fget_files+0x2a/0x420 [ 298.326729][ T9629] ksys_write+0x150/0x270 [ 298.326755][ T9629] ? __pfx_ksys_write+0x10/0x10 [ 298.326786][ T9629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.326812][ T9629] do_syscall_64+0x15f/0xf80 [ 298.326834][ T9629] ? clear_bhb_loop+0x40/0x90 [ 298.326856][ T9629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.326873][ T9629] RIP: 0033:0x7fd2ce79ce59 [ 298.326890][ T9629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.326905][ T9629] RSP: 002b:00007fd2cf61f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 298.326923][ T9629] RAX: ffffffffffffffda RBX: 00007fd2cea15fa0 RCX: 00007fd2ce79ce59 [ 298.326936][ T9629] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 298.326947][ T9629] RBP: 00007fd2cf61f090 R08: 0000000000000000 R09: 0000000000000000 [ 298.326957][ T9629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.326967][ T9629] R13: 00007fd2cea16038 R14: 00007fd2cea15fa0 R15: 00007ffeb5ab6a98 [ 298.326995][ T9629] [ 298.678197][ T9634] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1176'. [ 298.687249][ T9634] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1176'. [ 300.681922][ T9635] netlink: 'syz.5.1177': attribute type 9 has an invalid length. [ 300.950511][ T9660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1187'. [ 301.419594][ T9676] netlink: 'syz.2.1190': attribute type 1 has an invalid length. [ 301.458221][ T9676] netlink: 'syz.2.1190': attribute type 2 has an invalid length. [ 302.498855][ T9704] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1200'. [ 302.886662][ T9715] netlink: 'syz.3.1204': attribute type 10 has an invalid length. [ 302.900936][ T9713] netlink: 'syz.5.1202': attribute type 16 has an invalid length. [ 302.937677][ T9713] netlink: 'syz.5.1202': attribute type 17 has an invalid length. [ 302.969928][ T9715] team0: Cannot enslave team device to itself [ 303.719557][ T9713] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.727571][ T9713] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.993000][ T9713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.012195][ T9713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.170423][ T9740] FAULT_INJECTION: forcing a failure. [ 304.170423][ T9740] name failslab, interval 1, probability 0, space 0, times 0 [ 304.184850][ T9740] CPU: 1 UID: 0 PID: 9740 Comm: syz.3.1214 Not tainted syzkaller #0 PREEMPT(full) [ 304.184879][ T9740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 304.184892][ T9740] Call Trace: [ 304.184900][ T9740] [ 304.184908][ T9740] dump_stack_lvl+0xe8/0x150 [ 304.184941][ T9740] should_fail_ex+0x412/0x560 [ 304.184972][ T9740] should_failslab+0xa8/0x100 [ 304.184993][ T9740] __kmalloc_noprof+0xe8/0x760 [ 304.185009][ T9740] ? iovec_from_user+0x87/0x250 [ 304.185029][ T9740] iovec_from_user+0x87/0x250 [ 304.185049][ T9740] __import_iovec+0x163/0x7e0 [ 304.185075][ T9740] import_iovec+0x73/0xa0 [ 304.185095][ T9740] ___sys_sendmsg+0x255/0x360 [ 304.185111][ T9740] ? __lock_acquire+0x6b5/0x2cf0 [ 304.185131][ T9740] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.185174][ T9740] ? __fget_files+0x2a/0x420 [ 304.185195][ T9740] ? __fget_files+0x3a0/0x420 [ 304.185225][ T9740] __x64_sys_sendmsg+0x1bd/0x2a0 [ 304.185243][ T9740] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 304.185259][ T9740] ? perf_trace_preemptirq_template+0xb2/0x350 [ 304.185290][ T9740] ? __pfx_ksys_write+0x10/0x10 [ 304.185319][ T9740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.185336][ T9740] do_syscall_64+0x15f/0xf80 [ 304.185353][ T9740] ? trace_irq_disable+0x3b/0x140 [ 304.185375][ T9740] ? clear_bhb_loop+0x40/0x90 [ 304.185395][ T9740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.185410][ T9740] RIP: 0033:0x7fea03d9ce59 [ 304.185425][ T9740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.185439][ T9740] RSP: 002b:00007fea04d2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.185455][ T9740] RAX: ffffffffffffffda RBX: 00007fea04015fa0 RCX: 00007fea03d9ce59 [ 304.185467][ T9740] RDX: 0000000060044084 RSI: 0000200000000000 RDI: 0000000000000003 [ 304.185477][ T9740] RBP: 00007fea04d2e090 R08: 0000000000000000 R09: 0000000000000000 [ 304.185486][ T9740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.185495][ T9740] R13: 00007fea04016038 R14: 00007fea04015fa0 R15: 00007ffc9ce10138 [ 304.185519][ T9740] [ 304.499677][ T48] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.551258][ T48] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.959182][ T48] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.975292][ T9755] netlink: 'syz.5.1218': attribute type 2 has an invalid length. [ 304.978898][ T48] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.005371][ T9755] netlink: 'syz.5.1218': attribute type 8 has an invalid length. [ 305.014039][ T9755] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1218'. [ 305.026457][ T9757] netlink: 'syz.3.1219': attribute type 2 has an invalid length. [ 305.036065][ T9757] netlink: 'syz.3.1219': attribute type 8 has an invalid length. [ 305.042117][ T9752] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1218'. [ 305.050095][ T9757] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1219'. [ 305.071739][ T9754] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1219'. [ 305.474209][ T9766] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1223'. [ 306.027170][ T5634] Bluetooth: hci4: unexpected event 0x12 length: 15 > 8 [ 306.034181][ T9782] netlink: 'syz.0.1229': attribute type 2 has an invalid length. [ 306.197048][ T9782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.581443][ T9797] ([haX: renamed from dummy0 (while UP) [ 306.625166][ T9783] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1227'. [ 307.001022][ T9810] netlink: 'syz.3.1238': attribute type 64 has an invalid length. [ 307.746035][ T9832] FAULT_INJECTION: forcing a failure. [ 307.746035][ T9832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.814634][ T9832] CPU: 0 UID: 0 PID: 9832 Comm: syz.2.1246 Not tainted syzkaller #0 PREEMPT(full) [ 307.814665][ T9832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 307.814679][ T9832] Call Trace: [ 307.814687][ T9832] [ 307.814696][ T9832] dump_stack_lvl+0xe8/0x150 [ 307.814729][ T9832] should_fail_ex+0x412/0x560 [ 307.814769][ T9832] _copy_from_iter+0x1d3/0x1670 [ 307.814809][ T9832] ? rcu_is_watching+0x15/0xb0 [ 307.814843][ T9832] ? __pfx__copy_from_iter+0x10/0x10 [ 307.814887][ T9832] ? netlink_sendmsg+0x650/0xb40 [ 307.814909][ T9832] ? skb_put+0x11b/0x210 [ 307.814935][ T9832] netlink_sendmsg+0x6c0/0xb40 [ 307.814969][ T9832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.814996][ T9832] ? aa_sock_msg_perm+0xf1/0x1b0 [ 307.815032][ T9832] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 307.815067][ T9832] ____sys_sendmsg+0x972/0x9f0 [ 307.815091][ T9832] ? __might_fault+0xaf/0x130 [ 307.815132][ T9832] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.815167][ T9832] ? import_iovec+0x73/0xa0 [ 307.815195][ T9832] ___sys_sendmsg+0x2a5/0x360 [ 307.815218][ T9832] ? __lock_acquire+0x6b5/0x2cf0 [ 307.815247][ T9832] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.815268][ T9832] ? perf_trace_preemptirq_template+0xb2/0x350 [ 307.815326][ T9832] ? lockdep_hardirqs_on+0x7a/0x110 [ 307.815382][ T9832] __x64_sys_sendmsg+0x1bd/0x2a0 [ 307.815409][ T9832] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 307.815432][ T9832] ? perf_trace_preemptirq_template+0xb2/0x350 [ 307.815477][ T9832] ? __pfx_ksys_write+0x10/0x10 [ 307.815512][ T9832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.815536][ T9832] do_syscall_64+0x15f/0xf80 [ 307.815559][ T9832] ? trace_irq_disable+0x3b/0x140 [ 307.815591][ T9832] ? clear_bhb_loop+0x40/0x90 [ 307.815619][ T9832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.815641][ T9832] RIP: 0033:0x7f630d99ce59 [ 307.815663][ T9832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.815682][ T9832] RSP: 002b:00007f630e856028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.815705][ T9832] RAX: ffffffffffffffda RBX: 00007f630dc15fa0 RCX: 00007f630d99ce59 [ 307.815721][ T9832] RDX: 0000000000008000 RSI: 0000200000000180 RDI: 0000000000000003 [ 307.815735][ T9832] RBP: 00007f630e856090 R08: 0000000000000000 R09: 0000000000000000 [ 307.815753][ T9832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.815765][ T9832] R13: 00007f630dc16038 R14: 00007f630dc15fa0 R15: 00007ffd5d5906d8 [ 307.815797][ T9832] [ 308.334367][ T9840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1248'. [ 309.452250][ T9861] netlink: 'syz.1.1255': attribute type 1 has an invalid length. [ 309.462095][ T9861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1255'. [ 309.617188][ T9865] FAULT_INJECTION: forcing a failure. [ 309.617188][ T9865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.655728][ T9865] CPU: 0 UID: 0 PID: 9865 Comm: syz.0.1257 Not tainted syzkaller #0 PREEMPT(full) [ 309.655761][ T9865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 309.655773][ T9865] Call Trace: [ 309.655783][ T9865] [ 309.655794][ T9865] dump_stack_lvl+0xe8/0x150 [ 309.655836][ T9865] should_fail_ex+0x412/0x560 [ 309.655893][ T9865] _copy_to_user+0x31/0xb0 [ 309.655933][ T9865] simple_read_from_buffer+0xe1/0x170 [ 309.655989][ T9865] proc_fail_nth_read+0x1bb/0x230 [ 309.656040][ T9865] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 309.656092][ T9865] ? rw_verify_area+0x2a6/0x4d0 [ 309.656120][ T9865] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 309.656166][ T9865] vfs_read+0x20c/0xa70 [ 309.656216][ T9865] ? __pfx___mutex_lock+0x10/0x10 [ 309.656250][ T9865] ? __pfx_vfs_read+0x10/0x10 [ 309.656286][ T9865] ? __fget_files+0x2a/0x420 [ 309.656339][ T9865] ? __fget_files+0x3a0/0x420 [ 309.656373][ T9865] ? __fget_files+0x2a/0x420 [ 309.656440][ T9865] ksys_read+0x150/0x270 [ 309.656480][ T9865] ? __pfx_ksys_read+0x10/0x10 [ 309.656538][ T9865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.656570][ T9865] do_syscall_64+0x15f/0xf80 [ 309.656595][ T9865] ? trace_irq_disable+0x3b/0x140 [ 309.656632][ T9865] ? clear_bhb_loop+0x40/0x90 [ 309.656671][ T9865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.656696][ T9865] RIP: 0033:0x7ff59bd5d68e [ 309.656731][ T9865] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 309.656749][ T9865] RSP: 002b:00007ff59cb89fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 309.656772][ T9865] RAX: ffffffffffffffda RBX: 00007ff59cb8a6c0 RCX: 00007ff59bd5d68e [ 309.656787][ T9865] RDX: 000000000000000f RSI: 00007ff59cb8a0a0 RDI: 0000000000000007 [ 309.656801][ T9865] RBP: 00007ff59cb8a090 R08: 0000000000000000 R09: 0000000000000000 [ 309.656814][ T9865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 309.656827][ T9865] R13: 00007ff59c016038 R14: 00007ff59c015fa0 R15: 00007ffd866997e8 [ 309.656902][ T9865] [ 309.988308][ T9867] sit0: entered allmulticast mode [ 310.065283][ T9867] sit0: entered promiscuous mode [ 310.308770][ T9878] FAULT_INJECTION: forcing a failure. [ 310.308770][ T9878] name failslab, interval 1, probability 0, space 0, times 0 [ 310.330675][ T9884] netlink: 'syz.1.1264': attribute type 29 has an invalid length. [ 310.345530][ T9884] netlink: 'syz.1.1264': attribute type 29 has an invalid length. [ 310.354949][ T9878] CPU: 1 UID: 0 PID: 9878 Comm: syz.3.1263 Not tainted syzkaller #0 PREEMPT(full) [ 310.354978][ T9878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 310.354991][ T9878] Call Trace: [ 310.355002][ T9878] [ 310.355018][ T9878] dump_stack_lvl+0xe8/0x150 [ 310.355062][ T9878] should_fail_ex+0x412/0x560 [ 310.355125][ T9878] should_failslab+0xa8/0x100 [ 310.355157][ T9878] ? skb_clone+0x212/0x3a0 [ 310.355188][ T9878] kmem_cache_alloc_noprof+0x87/0x650 [ 310.355264][ T9878] skb_clone+0x212/0x3a0 [ 310.355310][ T9878] __netlink_deliver_tap+0x404/0x850 [ 310.355382][ T9878] ? netlink_deliver_tap+0x2e/0x1b0 [ 310.355417][ T9878] netlink_deliver_tap+0x19c/0x1b0 [ 310.355451][ T9878] netlink_sendskb+0x68/0x140 [ 310.355503][ T9878] netlink_rcv_skb+0x2b6/0x4b0 [ 310.355536][ T9878] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 310.355580][ T9878] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 310.355670][ T9878] ? netlink_deliver_tap+0x2e/0x1b0 [ 310.355698][ T9878] ? netlink_deliver_tap+0x2e/0x1b0 [ 310.355737][ T9878] xfrm_netlink_rcv+0x79/0x90 [ 310.355774][ T9878] netlink_unicast+0x75c/0x8e0 [ 310.355866][ T9878] netlink_sendmsg+0x813/0xb40 [ 310.355931][ T9878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.355974][ T9878] ? aa_sock_msg_perm+0xf1/0x1b0 [ 310.356023][ T9878] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 310.356064][ T9878] ____sys_sendmsg+0x972/0x9f0 [ 310.356093][ T9878] ? __pfx_perf_trace_lock+0x10/0x10 [ 310.356149][ T9878] ? __pfx_____sys_sendmsg+0x10/0x10 [ 310.356217][ T9878] ? import_iovec+0x73/0xa0 [ 310.356265][ T9878] ___sys_sendmsg+0x2a5/0x360 [ 310.356295][ T9878] ? perf_trace_run_bpf_submit+0xee/0x170 [ 310.356349][ T9878] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.356464][ T9878] ? __fget_files+0x2a/0x420 [ 310.356542][ T9878] ? __fget_files+0x2a/0x420 [ 310.356577][ T9878] ? __fget_files+0x3a0/0x420 [ 310.356655][ T9878] __x64_sys_sendmsg+0x1bd/0x2a0 [ 310.356697][ T9878] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 310.356722][ T9878] ? perf_trace_preemptirq_template+0xb2/0x350 [ 310.356798][ T9878] ? __pfx_ksys_write+0x10/0x10 [ 310.356872][ T9878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.356907][ T9878] do_syscall_64+0x15f/0xf80 [ 310.356934][ T9878] ? trace_irq_disable+0x3b/0x140 [ 310.356972][ T9878] ? clear_bhb_loop+0x40/0x90 [ 310.357015][ T9878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.357041][ T9878] RIP: 0033:0x7fea03d9ce59 [ 310.357068][ T9878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.357086][ T9878] RSP: 002b:00007fea04d2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.357110][ T9878] RAX: ffffffffffffffda RBX: 00007fea04015fa0 RCX: 00007fea03d9ce59 [ 310.357126][ T9878] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 310.357139][ T9878] RBP: 00007fea04d2e090 R08: 0000000000000000 R09: 0000000000000000 [ 310.357151][ T9878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 310.357164][ T9878] R13: 00007fea04016038 R14: 00007fea04015fa0 R15: 00007ffc9ce10138 [ 310.357247][ T9878] [ 311.110079][ T9896] ref_ctr_offset mismatch. inode: 0x58d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 311.444748][ T9917] netlink: 'syz.1.1277': attribute type 5 has an invalid length. [ 312.198260][ T9922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1279'. [ 312.268549][ T9922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1279'. [ 312.376872][ T9929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1281'. [ 312.672220][ T9943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1285'. [ 312.998572][ T9956] siw: device registration error -23 [ 313.412878][ T9946] lo speed is unknown, defaulting to 1000 [ 313.481033][ T9967] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1293'. [ 314.959298][ T9995] netlink: 'syz.0.1301': attribute type 2 has an invalid length. [ 315.035522][ T9995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.205318][T10006] netlink: 'syz.3.1305': attribute type 1 has an invalid length. [ 315.305724][T10008] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1307'. [ 315.488904][T10018] netlink: 774 bytes leftover after parsing attributes in process `syz.3.1310'. [ 315.530553][T10018] netlink: 'syz.3.1310': attribute type 1 has an invalid length. [ 315.841334][T10027] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1314'. [ 316.161876][T10035] netlink: 'syz.2.1316': attribute type 10 has an invalid length. [ 316.173669][T10035] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1316'. [ 316.188570][T10035] team0: entered allmulticast mode [ 316.197204][T10035] team_slave_0: entered allmulticast mode [ 316.209904][T10035] team_slave_1: entered allmulticast mode [ 316.219980][T10035] bond0: entered allmulticast mode [ 316.231127][T10035] bond_slave_0: entered allmulticast mode [ 316.240347][T10035] bond_slave_1: entered allmulticast mode [ 316.260293][T10035] batadv_slave_1: entered allmulticast mode [ 316.309267][T10035] bridge0: port 3(team0) entered blocking state [ 316.342807][T10035] bridge0: port 3(team0) entered disabled state [ 316.402656][T10035] team0: entered promiscuous mode [ 316.407786][T10035] team_slave_0: entered promiscuous mode [ 316.470431][T10035] team_slave_1: entered promiscuous mode [ 316.481699][T10035] bond0: entered promiscuous mode [ 316.533049][T10035] bond_slave_0: entered promiscuous mode [ 316.558660][T10035] bond_slave_1: entered promiscuous mode [ 316.577216][T10035] batadv_slave_1: entered promiscuous mode [ 316.851378][T10054] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1322'. [ 316.936589][T10061] netlink: 'syz.3.1325': attribute type 2 has an invalid length. [ 316.946969][T10061] netlink: 'syz.3.1325': attribute type 8 has an invalid length. [ 317.447570][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.455674][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.675329][T10081] FAULT_INJECTION: forcing a failure. [ 317.675329][T10081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.706806][T10081] CPU: 0 UID: 0 PID: 10081 Comm: syz.3.1330 Not tainted syzkaller #0 PREEMPT(full) [ 317.706837][T10081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 317.706851][T10081] Call Trace: [ 317.706860][T10081] [ 317.706870][T10081] dump_stack_lvl+0xe8/0x150 [ 317.706902][T10081] should_fail_ex+0x412/0x560 [ 317.706944][T10081] _copy_from_user+0x2d/0xb0 [ 317.706971][T10081] generic_map_update_batch+0x69a/0x990 [ 317.707014][T10081] ? __pfx_generic_map_update_batch+0x10/0x10 [ 317.707042][T10081] ? __fget_files+0x2a/0x420 [ 317.707084][T10081] ? __pfx_generic_map_update_batch+0x10/0x10 [ 317.707113][T10081] bpf_map_do_batch+0x39b/0x630 [ 317.707154][T10081] __sys_bpf+0xbe3/0xd90 [ 317.707199][T10081] ? __pfx___sys_bpf+0x10/0x10 [ 317.707239][T10081] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 317.707316][T10081] ? ksys_write+0x242/0x270 [ 317.707344][T10081] ? __pfx_ksys_write+0x10/0x10 [ 317.707376][T10081] __x64_sys_bpf+0xba/0xd0 [ 317.707408][T10081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.707433][T10081] do_syscall_64+0x15f/0xf80 [ 317.707461][T10081] ? trace_irq_disable+0x3b/0x140 [ 317.707495][T10081] ? clear_bhb_loop+0x40/0x90 [ 317.707524][T10081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.707546][T10081] RIP: 0033:0x7fea03d9ce59 [ 317.707567][T10081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.707585][T10081] RSP: 002b:00007fea04d2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 317.707608][T10081] RAX: ffffffffffffffda RBX: 00007fea04015fa0 RCX: 00007fea03d9ce59 [ 317.707624][T10081] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 317.707638][T10081] RBP: 00007fea04d2e090 R08: 0000000000000000 R09: 0000000000000000 [ 317.707651][T10081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 317.707664][T10081] R13: 00007fea04016038 R14: 00007fea04015fa0 R15: 00007ffc9ce10138 [ 317.707704][T10081] [ 318.042392][T10086] netlink: 'syz.2.1333': attribute type 2 has an invalid length. [ 318.159535][T10086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.535739][T10100] __nla_validate_parse: 1 callbacks suppressed [ 318.562062][T10100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1337'. [ 318.611105][T10098] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1336'. [ 318.655318][T10106] netlink: 'syz.5.1338': attribute type 2 has an invalid length. [ 318.663246][T10106] netlink: 'syz.5.1338': attribute type 8 has an invalid length. [ 318.692740][T10106] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1338'. [ 318.903465][T10110] netlink: 'syz.5.1341': attribute type 5 has an invalid length. [ 318.916172][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1342'. [ 319.301765][T10120] netlink: 'syz.1.1345': attribute type 2 has an invalid length. [ 319.374580][T10120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.392190][T10129] netlink: 'syz.3.1348': attribute type 29 has an invalid length. [ 319.671235][T10138] netlink: 'syz.1.1351': attribute type 2 has an invalid length. [ 319.705698][T10138] netlink: 'syz.1.1351': attribute type 8 has an invalid length. [ 319.735942][T10138] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1351'. [ 319.834945][T10143] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1353'. [ 320.278044][T10157] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1356'. [ 320.290800][ T5634] Bluetooth: hci2: ISO packet for unknown connection handle 2366 [ 321.125590][T10178] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1366'. [ 321.230624][T10176] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1365'. [ 321.438668][T10188] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 321.939835][T10200] openvswitch: netlink: ct_state flags 00000180 unsupported [ 322.026886][T10206] validate_nla: 7 callbacks suppressed [ 322.026957][T10206] netlink: 'syz.0.1378': attribute type 5 has an invalid length. [ 322.118585][T10210] netlink: 'syz.1.1379': attribute type 2 has an invalid length. [ 322.159052][T10210] netlink: 'syz.1.1379': attribute type 8 has an invalid length. [ 322.180161][T10210] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1379'. [ 322.409967][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 322.822269][T10234] FAULT_INJECTION: forcing a failure. [ 322.822269][T10234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.858604][T10234] CPU: 1 UID: 0 PID: 10234 Comm: syz.0.1386 Not tainted syzkaller #0 PREEMPT(full) [ 322.858633][T10234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 322.858647][T10234] Call Trace: [ 322.858657][T10234] [ 322.858668][T10234] dump_stack_lvl+0xe8/0x150 [ 322.858710][T10234] should_fail_ex+0x412/0x560 [ 322.858785][T10234] _copy_to_user+0x31/0xb0 [ 322.858824][T10234] simple_read_from_buffer+0xe1/0x170 [ 322.858886][T10234] proc_fail_nth_read+0x1bb/0x230 [ 322.858939][T10234] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 322.858997][T10234] ? rw_verify_area+0x2a6/0x4d0 [ 322.859025][T10234] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 322.859070][T10234] vfs_read+0x20c/0xa70 [ 322.859120][T10234] ? __pfx___mutex_lock+0x10/0x10 [ 322.859154][T10234] ? __pfx_vfs_read+0x10/0x10 [ 322.859191][T10234] ? __fget_files+0x2a/0x420 [ 322.859244][T10234] ? __fget_files+0x3a0/0x420 [ 322.859277][T10234] ? __fget_files+0x2a/0x420 [ 322.859347][T10234] ksys_read+0x150/0x270 [ 322.859387][T10234] ? __pfx_ksys_read+0x10/0x10 [ 322.859446][T10234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.859478][T10234] do_syscall_64+0x15f/0xf80 [ 322.859504][T10234] ? trace_irq_disable+0x3b/0x140 [ 322.859542][T10234] ? clear_bhb_loop+0x40/0x90 [ 322.859583][T10234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.859608][T10234] RIP: 0033:0x7ff59bd5d68e [ 322.859634][T10234] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 322.859652][T10234] RSP: 002b:00007ff59cb89fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 322.859675][T10234] RAX: ffffffffffffffda RBX: 00007ff59cb8a6c0 RCX: 00007ff59bd5d68e [ 322.859691][T10234] RDX: 000000000000000f RSI: 00007ff59cb8a0a0 RDI: 0000000000000005 [ 322.859704][T10234] RBP: 00007ff59cb8a090 R08: 0000000000000000 R09: 0000000000000000 [ 322.859717][T10234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.859729][T10234] R13: 00007ff59c016038 R14: 00007ff59c015fa0 R15: 00007ffd866997e8 [ 322.859807][T10234] [ 323.447005][T10244] openvswitch: netlink: ct_state flags 00000180 unsupported [ 323.511408][T10245] netlink: 'syz.5.1392': attribute type 5 has an invalid length. [ 323.651843][ T29] audit: type=1107 audit(1779199127.642:2): pid=10253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Z#'L=m;DvA$yC&X:%43Jb{ۑ'.hsT|*|] u*7Fp4z9g^=-XBst Iknٌn{S_' [ 324.130490][T10273] __nla_validate_parse: 4 callbacks suppressed [ 324.130515][T10273] netlink: 1176 bytes leftover after parsing attributes in process `syz.1.1402'. [ 324.287419][T10278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1403'. [ 324.321642][T10278] netlink: 'syz.3.1403': attribute type 1 has an invalid length. [ 324.633334][T10286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.643762][T10291] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1408'. [ 327.450087][T10304] netlink: 'syz.1.1411': attribute type 5 has an invalid length. [ 327.460444][T10307] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1412'. [ 327.732393][T10316] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.1416'. [ 327.744230][T10316] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.1416'. [ 328.039705][T10326] nbd: must specify a device to reconfigure [ 328.170330][T10326] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1418'. [ 328.232114][T10334] netlink: 'syz.0.1423': attribute type 29 has an invalid length. [ 328.243500][T10334] netlink: 'syz.0.1423': attribute type 29 has an invalid length. [ 328.443589][T10341] openvswitch: netlink: IPv4 tun info is not correct [ 328.655239][T10347] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1428'. [ 329.534501][T10374] netlink: 'syz.3.1437': attribute type 29 has an invalid length. [ 329.566661][T10374] netlink: 'syz.3.1437': attribute type 29 has an invalid length. [ 329.654749][T10376] sctp: [Deprecated]: syz.2.1435 (pid 10376) Use of struct sctp_assoc_value in delayed_ack socket option. [ 329.654749][T10376] Use struct sctp_sack_info instead [ 329.812106][T10379] FAULT_INJECTION: forcing a failure. [ 329.812106][T10379] name failslab, interval 1, probability 0, space 0, times 0 [ 329.826441][T10379] CPU: 0 UID: 0 PID: 10379 Comm: syz.0.1438 Not tainted syzkaller #0 PREEMPT(full) [ 329.826476][T10379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 329.826491][T10379] Call Trace: [ 329.826500][T10379] [ 329.826509][T10379] dump_stack_lvl+0xe8/0x150 [ 329.826545][T10379] should_fail_ex+0x412/0x560 [ 329.826591][T10379] should_failslab+0xa8/0x100 [ 329.826622][T10379] __kmalloc_cache_noprof+0x88/0x660 [ 329.826649][T10379] ? __hw_addr_create+0x60/0x250 [ 329.826684][T10379] __hw_addr_create+0x60/0x250 [ 329.826716][T10379] __hw_addr_list_snapshot+0x19e/0x750 [ 329.826761][T10379] netif_rx_mode_run+0x931/0x1290 [ 329.826807][T10379] ? __pfx_netif_rx_mode_run+0x10/0x10 [ 329.826842][T10379] ? __pfx_perf_trace_lock+0x10/0x10 [ 329.826876][T10379] ? dev_ifsioc+0xf51/0x1330 [ 329.826907][T10379] ? dev_ioctl+0x7b4/0x1150 [ 329.826936][T10379] ? sock_do_ioctl+0x23e/0x320 [ 329.826972][T10379] ? netif_rx_mode_sync+0x169/0x1e0 [ 329.827004][T10379] ? netif_rx_mode_sync+0x169/0x1e0 [ 329.827038][T10379] ? __local_bh_enable_ip+0xd0/0x130 [ 329.827079][T10379] netif_rx_mode_sync+0x171/0x1e0 [ 329.827114][T10379] dev_ifsioc+0xf51/0x1330 [ 329.827155][T10379] ? dev_load+0x21/0x1f0 [ 329.827192][T10379] dev_ioctl+0x7b4/0x1150 [ 329.827234][T10379] sock_do_ioctl+0x23e/0x320 [ 329.827270][T10379] ? __pfx_sock_do_ioctl+0x10/0x10 [ 329.827332][T10379] sock_ioctl+0x5c6/0x7f0 [ 329.827367][T10379] ? __pfx_sock_ioctl+0x10/0x10 [ 329.827405][T10379] ? __fget_files+0x2a/0x420 [ 329.827437][T10379] ? __fget_files+0x3a0/0x420 [ 329.827469][T10379] ? __fget_files+0x2a/0x420 [ 329.827510][T10379] ? bpf_lsm_file_ioctl+0x9/0x20 [ 329.827537][T10379] ? __pfx_sock_ioctl+0x10/0x10 [ 329.827566][T10379] __se_sys_ioctl+0xfc/0x170 [ 329.827592][T10379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.827619][T10379] do_syscall_64+0x15f/0xf80 [ 329.827643][T10379] ? trace_irq_disable+0x3b/0x140 [ 329.827676][T10379] ? clear_bhb_loop+0x40/0x90 [ 329.827708][T10379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.827730][T10379] RIP: 0033:0x7ff59bd9ce59 [ 329.827753][T10379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.827771][T10379] RSP: 002b:00007ff59cb8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 329.827794][T10379] RAX: ffffffffffffffda RBX: 00007ff59c015fa0 RCX: 00007ff59bd9ce59 [ 329.827810][T10379] RDX: 0000200000000000 RSI: 0000000000008931 RDI: 0000000000000004 [ 329.827824][T10379] RBP: 00007ff59cb8a090 R08: 0000000000000000 R09: 0000000000000000 [ 329.827837][T10379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.827849][T10379] R13: 00007ff59c016038 R14: 00007ff59c015fa0 R15: 00007ffd866997e8 [ 329.827900][T10379] [ 329.827959][T10379] ------------[ cut here ]------------ [ 330.109552][T10379] netdevice: netdevsim0: failed to sync uc/mc addresses [ 330.116609][T10379] WARNING: net/core/dev_addr_lists.c:1278 at netif_rx_mode_run+0xd55/0x1290, CPU#0: syz.0.1438/10379 [ 330.127571][T10379] Modules linked in: [ 330.131979][T10379] CPU: 0 UID: 0 PID: 10379 Comm: syz.0.1438 Not tainted syzkaller #0 PREEMPT(full) [ 330.141905][T10379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 330.152092][T10379] RIP: 0010:netif_rx_mode_run+0xe82/0x1290 [ 330.158067][T10379] Code: 3a 48 c7 c2 a0 ec dd 8c eb 1a e8 89 87 43 f8 48 c7 c2 20 eb dd 8c eb 0c e8 7b 87 43 f8 48 c7 c2 20 ec dd 8c 4c 89 f7 4c 89 fe <67> 48 0f b9 3a 48 8b 5c 24 38 48 8b 7c 24 48 e8 1a bb 29 02 42 c7 [ 330.177953][T10379] RSP: 0018:ffffc900030ff9e0 EFLAGS: 00010293 [ 330.184225][T10379] RAX: ffffffff89824577 RBX: 0000000000000001 RCX: ffff88802dc40000 [ 330.192349][T10379] RDX: ffffffff8cddeb20 RSI: ffff888031a3c120 RDI: ffffffff903fbad0 [ 330.200422][T10379] RBP: ffffc900030ffbb8 R08: ffff88802dc40000 R09: 0000000000000006 [ 330.208608][T10379] R10: 0000000000000005 R11: 0000000000000000 R12: ffff888031a3c120 [ 330.216708][T10379] R13: dffffc0000000000 R14: ffffffff903fbad0 R15: ffff888031a3c120 [ 330.224734][T10379] FS: 00007ff59cb8a6c0(0000) GS:ffff888125288000(0000) knlGS:0000000000000000 [ 330.233776][T10379] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 330.240452][T10379] CR2: 0000001b33f63fff CR3: 00000000790bc000 CR4: 00000000003526f0 [ 330.248547][T10379] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 330.256613][T10379] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 330.264656][T10379] Call Trace: [ 330.268042][T10379] [ 330.271041][T10379] ? __pfx_netif_rx_mode_run+0x10/0x10 [ 330.276643][T10379] ? __pfx_perf_trace_lock+0x10/0x10 [ 330.282089][T10379] ? dev_ifsioc+0xf51/0x1330 [ 330.286871][T10379] ? dev_ioctl+0x7b4/0x1150 [ 330.291443][T10379] ? sock_do_ioctl+0x23e/0x320 [ 330.296492][T10379] ? netif_rx_mode_sync+0x169/0x1e0 [ 330.301755][T10379] ? netif_rx_mode_sync+0x169/0x1e0 [ 330.307052][T10379] ? __local_bh_enable_ip+0xd0/0x130 [ 330.312419][T10379] netif_rx_mode_sync+0x171/0x1e0 [ 330.317590][T10379] dev_ifsioc+0xf51/0x1330 [ 330.322117][T10379] ? dev_load+0x21/0x1f0 [ 330.326476][T10379] dev_ioctl+0x7b4/0x1150 [ 330.330879][T10379] sock_do_ioctl+0x23e/0x320 [ 330.335559][T10379] ? __pfx_sock_do_ioctl+0x10/0x10 [ 330.340901][T10379] sock_ioctl+0x5c6/0x7f0 [ 330.345340][T10379] ? __pfx_sock_ioctl+0x10/0x10 [ 330.350347][T10379] ? __fget_files+0x2a/0x420 [ 330.355089][T10379] ? __fget_files+0x3a0/0x420 [ 330.359876][T10379] ? __fget_files+0x2a/0x420 [ 330.364541][T10379] ? bpf_lsm_file_ioctl+0x9/0x20 [ 330.369577][T10379] ? __pfx_sock_ioctl+0x10/0x10 [ 330.374510][T10379] __se_sys_ioctl+0xfc/0x170 [ 330.379206][T10379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.385335][T10379] do_syscall_64+0x15f/0xf80 [ 330.390031][T10379] ? trace_irq_disable+0x3b/0x140 [ 330.395154][T10379] ? clear_bhb_loop+0x40/0x90 [ 330.399950][T10379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.406575][T10379] RIP: 0033:0x7ff59bd9ce59 [ 330.411055][T10379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.430779][T10379] RSP: 002b:00007ff59cb8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 330.439567][T10379] RAX: ffffffffffffffda RBX: 00007ff59c015fa0 RCX: 00007ff59bd9ce59 [ 330.447632][T10379] RDX: 0000200000000000 RSI: 0000000000008931 RDI: 0000000000000004 [ 330.455677][T10379] RBP: 00007ff59cb8a090 R08: 0000000000000000 R09: 0000000000000000 [ 330.464160][T10379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.472317][T10379] R13: 00007ff59c016038 R14: 00007ff59c015fa0 R15: 00007ffd866997e8 [ 330.480530][T10379] [ 330.483619][T10379] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 330.490950][T10379] CPU: 0 UID: 0 PID: 10379 Comm: syz.0.1438 Not tainted syzkaller #0 PREEMPT(full) [ 330.500380][T10379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 330.510578][T10379] Call Trace: [ 330.513906][T10379] [ 330.516880][T10379] vpanic+0x56c/0xa60 [ 330.520937][T10379] ? __pfx__printk+0x10/0x10 [ 330.525590][T10379] ? __pfx_vpanic+0x10/0x10 [ 330.530153][T10379] ? is_bpf_text_address+0x292/0x2b0 [ 330.535495][T10379] ? is_bpf_text_address+0x26/0x2b0 [ 330.540762][T10379] panic+0xc5/0xd0 [ 330.544575][T10379] ? __pfx_panic+0x10/0x10 [ 330.549080][T10379] __warn+0x315/0x4c0 [ 330.553115][T10379] ? netif_rx_mode_run+0xd55/0x1290 [ 330.558463][T10379] ? netif_rx_mode_run+0xd55/0x1290 [ 330.563728][T10379] __report_bug+0x29a/0x540 [ 330.568332][T10379] ? netif_rx_mode_run+0xd55/0x1290 [ 330.573689][T10379] ? __pfx___report_bug+0x10/0x10 [ 330.578771][T10379] ? perf_trace_lock+0xff/0x410 [ 330.583952][T10379] ? __pfx_perf_trace_lock+0x10/0x10 [ 330.589310][T10379] ? __kfree_rcu_sheaf+0x1f/0x5d0 [ 330.594403][T10379] ? lock_acquire+0x106/0x350 [ 330.599154][T10379] report_bug_entry+0x19a/0x290 [ 330.604071][T10379] ? netif_rx_mode_run+0xe82/0x1290 [ 330.609336][T10379] ? netif_rx_mode_run+0xe87/0x1290 [ 330.614611][T10379] handle_bug+0xce/0x200 [ 330.618923][T10379] exc_invalid_op+0x1a/0x50 [ 330.623497][T10379] asm_exc_invalid_op+0x1a/0x20 [ 330.628414][T10379] RIP: 0010:netif_rx_mode_run+0xe82/0x1290 [ 330.634291][T10379] Code: 3a 48 c7 c2 a0 ec dd 8c eb 1a e8 89 87 43 f8 48 c7 c2 20 eb dd 8c eb 0c e8 7b 87 43 f8 48 c7 c2 20 ec dd 8c 4c 89 f7 4c 89 fe <67> 48 0f b9 3a 48 8b 5c 24 38 48 8b 7c 24 48 e8 1a bb 29 02 42 c7 [ 330.653966][T10379] RSP: 0018:ffffc900030ff9e0 EFLAGS: 00010293 [ 330.660096][T10379] RAX: ffffffff89824577 RBX: 0000000000000001 RCX: ffff88802dc40000 [ 330.668120][T10379] RDX: ffffffff8cddeb20 RSI: ffff888031a3c120 RDI: ffffffff903fbad0 [ 330.676146][T10379] RBP: ffffc900030ffbb8 R08: ffff88802dc40000 R09: 0000000000000006 [ 330.684276][T10379] R10: 0000000000000005 R11: 0000000000000000 R12: ffff888031a3c120 [ 330.692304][T10379] R13: dffffc0000000000 R14: ffffffff903fbad0 R15: ffff888031a3c120 [ 330.700356][T10379] ? netif_rx_mode_run+0xe67/0x1290 [ 330.705649][T10379] ? __pfx_netif_rx_mode_run+0x10/0x10 [ 330.711174][T10379] ? __pfx_perf_trace_lock+0x10/0x10 [ 330.716529][T10379] ? dev_ifsioc+0xf51/0x1330 [ 330.721181][T10379] ? dev_ioctl+0x7b4/0x1150 [ 330.725742][T10379] ? sock_do_ioctl+0x23e/0x320 [ 330.730568][T10379] ? netif_rx_mode_sync+0x169/0x1e0 [ 330.736006][T10379] ? netif_rx_mode_sync+0x169/0x1e0 [ 330.741263][T10379] ? __local_bh_enable_ip+0xd0/0x130 [ 330.746611][T10379] netif_rx_mode_sync+0x171/0x1e0 [ 330.751710][T10379] dev_ifsioc+0xf51/0x1330 [ 330.756201][T10379] ? dev_load+0x21/0x1f0 [ 330.760599][T10379] dev_ioctl+0x7b4/0x1150 [ 330.765095][T10379] sock_do_ioctl+0x23e/0x320 [ 330.769751][T10379] ? __pfx_sock_do_ioctl+0x10/0x10 [ 330.774959][T10379] sock_ioctl+0x5c6/0x7f0 [ 330.779371][T10379] ? __pfx_sock_ioctl+0x10/0x10 [ 330.784375][T10379] ? __fget_files+0x2a/0x420 [ 330.789035][T10379] ? __fget_files+0x3a0/0x420 [ 330.793862][T10379] ? __fget_files+0x2a/0x420 [ 330.798611][T10379] ? bpf_lsm_file_ioctl+0x9/0x20 [ 330.803602][T10379] ? __pfx_sock_ioctl+0x10/0x10 [ 330.808516][T10379] __se_sys_ioctl+0xfc/0x170 [ 330.813283][T10379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.819410][T10379] do_syscall_64+0x15f/0xf80 [ 330.824053][T10379] ? trace_irq_disable+0x3b/0x140 [ 330.829229][T10379] ? clear_bhb_loop+0x40/0x90 [ 330.833965][T10379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.839904][T10379] RIP: 0033:0x7ff59bd9ce59 [ 330.844368][T10379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.864112][T10379] RSP: 002b:00007ff59cb8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 330.872592][T10379] RAX: ffffffffffffffda RBX: 00007ff59c015fa0 RCX: 00007ff59bd9ce59 [ 330.880618][T10379] RDX: 0000200000000000 RSI: 0000000000008931 RDI: 0000000000000004 [ 330.888653][T10379] RBP: 00007ff59cb8a090 R08: 0000000000000000 R09: 0000000000000000 [ 330.897031][T10379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.905150][T10379] R13: 00007ff59c016038 R14: 00007ff59c015fa0 R15: 00007ffd866997e8 [ 330.913464][T10379] [ 330.917397][T10379] Kernel Offset: disabled [ 330.921742][T10379] Rebooting in 86400 seconds..