last executing test programs: 13m58.910501792s ago: executing program 4 (id=2234): socket$l2tp(0x2, 0x2, 0x73) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000100000000000000004000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c0007"], 0x5c}}, 0x0) 13m58.744473897s ago: executing program 4 (id=2238): socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)={@cgroup=r0, r0, 0x2f, 0x34, 0x4}, 0x20) 13m58.515807273s ago: executing program 4 (id=2241): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1948}, 0x10020, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x105e40, 0x102, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)={0x14, 0x3, 0x3, 0x201, 0x70bd2c, 0x25dfdbfd, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4044050}, 0x20000000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x592}}, 0x30) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x2c000010) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffdef) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x86746a41eb401dd8}, 0x24000080) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0xf, 0x37}, 0x11efa, 0x4, 0x98, 0x0, 0x0, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 13m58.262212857s ago: executing program 4 (id=2242): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x4, 0x0, 0x40, 0x0, 0x0, 0x6}, r1, 0x0, 0xffffffffffffffff, 0x7) 13m58.049304289s ago: executing program 4 (id=2245): socket$netlink(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x81ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x33, 0x107, 0xfffffffe, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24048000}, 0x8010) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r3) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x30d344d, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x2, 0x1, 0x84) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x40028, 0x0) 13m55.44602141s ago: executing program 4 (id=2271): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = getpid() r1 = perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$sock(r3, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x20000000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r3, 0x1, 0x1d, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000002c6f160b000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000880}, 0x40000) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="1400000010000100000000001b0000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a300000000048000480440001800b000100657874686472000034000280080001400000000b080004400000001908000340000000f905000200830000000800064000000002"], 0xf8}}, 0x6044040) sendmsg$nl_route_sched(r5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x400, 0x6, 0xfffffffe, 0x9, 0x0, 0xfffffffd}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r7 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r7, 0x0, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) 13m40.373022806s ago: executing program 32 (id=2271): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = getpid() r1 = perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$sock(r3, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x20000000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r3, 0x1, 0x1d, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000002c6f160b000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000880}, 0x40000) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="1400000010000100000000001b0000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a300000000048000480440001800b000100657874686472000034000280080001400000000b080004400000001908000340000000f905000200830000000800064000000002"], 0xf8}}, 0x6044040) sendmsg$nl_route_sched(r5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x400, 0x6, 0xfffffffe, 0x9, 0x0, 0xfffffffd}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r7 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r7, 0x0, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) 6m38.003955172s ago: executing program 1 (id=4817): syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x3, 0x8, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x10002000}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0xa}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x10) r0 = socket$key(0xf, 0x3, 0x2) sendmsg(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b00)=[{0x0}], 0x1}, 0x800) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001700)={0xffffffffffffffff, 0xe0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001440)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001480), &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc6, &(0x7f0000001500)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001540), &(0x7f0000001880), 0x8, 0xab, 0x8, 0x8, &(0x7f00000015c0)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001740)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x50) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x2) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r1, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r2, 0x4) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[], 0x31) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001780)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xcd, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m36.725899321s ago: executing program 1 (id=4825): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x4, 0x8, 0x2c, 0x5, 0x0, 0x1, 0x24210, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x20000000005691, 0x8}, 0xc0, 0x9, 0x9, 0x9, 0x0, 0x0, 0xfff, 0x0, 0x7ff, 0x0, 0x9}, 0x0, 0x40003, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) (fail_nth: 3) 6m36.27306201s ago: executing program 1 (id=4826): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='GPL\x00'}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000a80), 0x0}, 0x20) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x14, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x1, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) 6m36.003782423s ago: executing program 1 (id=4830): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) socket$nl_generic(0x10, 0x3, 0x10) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) r0 = perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x9, 0x7, 0x7, 0x2, 0x0, 0x1ff, 0x1000, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f54, 0x1, @perf_config_ext={0x0, 0x80000001}, 0x100, 0x4, 0xba, 0x9, 0x9, 0x8, 0xfffd, 0x0, 0x3, 0x0, 0x100000000}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0xb4, 0x1, 0x81, 0xe, 0x0, 0x7fffffff, 0xe81, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={&(0x7f0000000100)}, 0x1, 0x7, 0xcc, 0x0, 0x1, 0x6, 0x0, 0x0, 0x102000}, 0x0, 0x4, r0, 0x1) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 6m35.828500055s ago: executing program 1 (id=4833): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_config_ext={0x5, 0x7ff}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x400c000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000), 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{}, 0x0, &(0x7f0000000000)='%pS \x00'}, 0x20) socket$kcm(0x2b, 0x1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x99, 0x2, 0x0, 0x0, 0x0, 0x4000000002, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x220, 0x0, 0x0, 0x4, 0x2, 0x3}, 0x0, 0xffffffffffffefff, 0xffffffffffffffff, 0x2) socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x440}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff00000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20242, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x90}, 0x101) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x100002, 0x0) 6m35.573269295s ago: executing program 1 (id=4837): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9f1}, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x9}, 0x6018, 0x0, 0x2, 0x0, 0x3fe, 0x7ffffffc, 0x7, 0x0, 0x0, 0x0, 0x1ffffffffd}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x28}, 0x2160) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 6m34.710478014s ago: executing program 33 (id=4837): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9f1}, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x9}, 0x6018, 0x0, 0x2, 0x0, 0x3fe, 0x7ffffffc, 0x7, 0x0, 0x0, 0x0, 0x1ffffffffd}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x28}, 0x2160) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 3m35.929376706s ago: executing program 5 (id=5751): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="05000000000000007111a800000000008510000002000000850000000700000095000000000000009500a50500000000f24303abae4e2e7068e37362f97b9e009d4bb3b99a98e3a9978ba7f4dc250115"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 3m35.820746344s ago: executing program 5 (id=5754): socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8931, &(0x7f0000000080)) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="ff00000047000707feffffffffffffff027c00003e4de1fbc8b01515"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x1ff, 0xa892, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x8000000000032, 0xfffffbff, 0x3, 0x9, 0x0, 0x5, 0x0, 0xffffffff, 0x0, 0x20000000000000}, 0x0, 0x9, 0xffffffffffffffff, 0x9) recvmsg$unix(r4, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r7, 0x1, 0x41, &(0x7f0000000040)=r6, 0x4) sendmsg$kcm(r7, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @loopback, 0x9}, 0x80, 0x0}, 0x4000080) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x44, 0x18, 0x1, 0x70bdac, 0x25dfdbfc, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44010}, 0x20040844) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x33fe0) recvmsg(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=""/136, 0x88}, 0x12000) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)={0x104, 0x0, 0x1, 0x401, 0x0, 0x0, {0xd, 0x0, 0x6}, [@CTA_MARK_MASK={0x8}, @CTA_TUPLE_MASTER={0x44, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xf}}, {0x8, 0x2, @rand_addr=0x64010100}}}]}, @CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xd}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x101}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}]}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xb579}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7f}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8000}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xffff}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xa16f}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xa}]}]}, 0x104}}, 0x4804) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8890}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r11) socket(0x15, 0x3, 0xff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 3m35.506433064s ago: executing program 5 (id=5758): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2122) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000002a80)=ANY=[@ANYBLOB="e0000000150000082cbd7000fddbdf256d6f7275633634302d73736532000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002400"/224], 0xe0}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x3a, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r2, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x1c, &(0x7f0000002980)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ldst={0x2, 0x7, 0x6, 0x0, 0x2, 0x9089450340429b09, 0x1}, @tail_call, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @ldst={0x3, 0x1, 0x4, 0xb, 0x4, 0x0, 0x8}, @map_fd={0x18, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @ringbuf_query], &(0x7f00000003c0)='syzkaller\x00', 0x10000, 0x95, &(0x7f00000006c0)=""/149, 0x41000, 0xd, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000004c0)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x12950, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500)=[{0x4001, 0x1, 0x6, 0x7}, {0x0, 0x2, 0x3, 0x4}, {0x5, 0x3, 0xd, 0x2}, {0x2, 0x3, 0x2}, {0x0, 0x1, 0x6, 0x4}, {0x2, 0x5, 0x9, 0x7}, {0x5, 0x100002, 0x8, 0x8}, {0x1, 0x1, 0x1, 0x4}], 0x10, 0x7f}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xd132}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES64], 0x6e8a) 3m35.417328075s ago: executing program 5 (id=5760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a3000000000480000000b0a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30"], 0xf0}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0xc1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000007c0)={r1, 0xffffffffffffffff, 0x1, 0x0, @val=@tracing={0x0, 0x8}}, 0x20) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 3m35.367109762s ago: executing program 5 (id=5762): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xe4, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}, @typed={0x4, 0x1d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 3m35.039115452s ago: executing program 5 (id=5766): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m34.784161551s ago: executing program 34 (id=5766): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 25.620746707s ago: executing program 6 (id=7190): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x2b, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() r3 = perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r1}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x4808, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="d8000000120081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e1208001d0040001101a8001200053f014006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bba020017cbec040000000000000000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e5dbf66f282ac027812cfbd3f1aeb4edbb57a7025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0xc000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) 25.201236863s ago: executing program 6 (id=7197): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x3b, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c, 0xf0ff}}, 0x14}}, 0xc000) 25.033739616s ago: executing program 6 (id=7199): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000000000000100000000000200000a140000001100010009"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001600730027b570f8ffffffff1a7c00000c00018008"], 0x20}, 0x1, 0x0, 0x0, 0x40090}, 0x94) 24.904318773s ago: executing program 6 (id=7201): socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random='\v\x00'}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="2000000076001f03000000000800000008000100ffffffff08000a"], 0x20}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket$kcm(0x2, 0xa, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x40}, 0x40000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x11040) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000100)='bm\xf3dz\xa9\xbf$D\xc5\v\xf9MX\x9d\xd2i4A\xee\xb6w\xa2\xbb\xbdM`I\x8dK\xe6\xb5o\xf6\xbaO\xe7\f\xf8\r\x05~\xa6\x9as\xab\t+5\xdc\xec\xc6\xbc\xfc\xcc\x04\x9a\x886\xd8\xaf\xb6C\xe5\xe4T8\x81\xf4/\xf2=/\x0f>\x14\xa6\xe4\xf3\x99_\xe2P\x18\r') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000000000000100000000000200000a140000001100010009"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001600730027b570f8ffffffff1a7c00000c00018008"], 0x20}, 0x1, 0x0, 0x0, 0x40090}, 0x94) 24.760895574s ago: executing program 6 (id=7203): socket(0xa, 0x5, 0x0) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x21, 0x0, 0x0, 0x4, 0x2, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r2, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000012000100040000000000010002"], 0x54}}, 0x200040c4) 24.343817716s ago: executing program 6 (id=7207): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0b0000000500000000040000"], 0x48) r1 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/pid_for_children\x00') ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061120c00000000009521000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0xc90, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffff, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x0, 0xfc, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x2}, 0x40, 0x8, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0xe1, 0x0, 0x200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, r1, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x53, &(0x7f0000000000), 0x4) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x9f1}, 0x100080, 0x100000, 0x4, 0x1}, 0x0, 0xffff7ffdffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) 24.128115537s ago: executing program 35 (id=7207): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0b0000000500000000040000"], 0x48) r1 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/pid_for_children\x00') ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061120c00000000009521000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0xc90, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffff, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x0, 0xfc, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x2}, 0x40, 0x8, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0xe1, 0x0, 0x200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, r1, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x53, &(0x7f0000000000), 0x4) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x9f1}, 0x100080, 0x100000, 0x4, 0x1}, 0x0, 0xffff7ffdffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) 5.620889502s ago: executing program 7 (id=7403): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_clone(0x2200100, &(0x7f0000000000)="ecb43bb3ba6cf3e13d6cbf8fe0a2a6ce430e7150a525051d1f18fa54fd4c8da069e5a82ecaf7437ab57d7797559178af001a99708e6bef534b8e799e5ec2546543bd55b17a995f396ed35b0d6ea67b0a49df8f287a968d6e76c3d05798b7266428e736093c48388a2e6e2b6a57531643697d01", 0x73, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000440)="61deee689358ad6b20def2ca9508588a23c2fc34c7cc0dc49955cc996d235aa71d9052692815fc743451435891e11ded82e389b3b9990f637f1b06dc0c52bbf754099b5610df81acd2f439718fc3e450a62301f2bed5c06deb22b513364bcff7989191df8723001ed9895af9065acfcafd26d65702ffe44f1c267f8fb6e56c1ccde0dcca4fde361902f944796cb5ea83c8c15bb4ef1467a6b8d543a21e6e9406b978ec65628c014243ecd51ca5dd19f58689e2eb27c6de636fe8808addc27c2aac5ddbacca1ab5f13df884773e55882cfbacb9a655") perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x4001ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x2020}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a300000000005000500020000000500010006000000cc4105e5a491b6f47cd5712b7c126b34a8efb655ccca273aced8839288604d7c01923258d0963c772a03369602f77f5dff30a23944ad99e0de4ae8c1316a810bf74e37e0aebebe472744549e8d537b6d6e0244313e37769920f2abe2602b2c4139b872610ca0"], 0x4c}}, 0x0) r6 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r6, 0x88, 0xa, &(0x7f00000002c0), 0x4) sendmsg$inet(r6, &(0x7f0000000300)={&(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="e2", 0x1}], 0x1}, 0x4040000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000340)={0x28, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x28}, [@NFULA_CFG_MODE={0xa, 0x2, {0x8000}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80450c0}, 0x4000808) 2.947884391s ago: executing program 7 (id=7406): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) getpid() r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 2.94145835s ago: executing program 2 (id=7407): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8902, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000001a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x11, 0xb, 0x800000, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) sendmsg$AUDIT_GET(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3e8, 0x4, 0x70bd2c, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x20004810) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x26, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x54}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @alu={0x4, 0x0, 0xd, 0x4, 0xb, 0xc, 0x1}, @map_fd, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @alu={0x7, 0x1, 0x0, 0x4, 0xb, 0xfffffffffffffffc, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd24d}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffdfffd}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x1c, &(0x7f0000000240)=""/28, 0x41100, 0x22, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x4, 0x4, 0x80000000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000340)=[{0x5, 0x3, 0x8, 0xb}, {0x4, 0x3, 0x5, 0x5}, {0x5, 0x3, 0x10, 0x2}, {0x0, 0x3, 0xa, 0x4}, {0x5, 0x5, 0xf, 0xa}, {0x1, 0x1, 0xb, 0x6}, {0x4, 0x1, 0x9, 0x3}, {0x1, 0x5, 0x6, 0x5}], 0x10, 0x9}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000003, 0x41cb1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x48, 0x5, 0x0, 0x0, 0xc, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x8050, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x1, 0x80106, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1, 0x7}, 0x600, 0x94a8, 0x0, 0x4, 0x3fb, 0x1, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4000}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x15, &(0x7f0000000200)=@raw=[@func, @func, @func, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @func, @snprintf, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000000780)='GPL\x00'}, 0x90) 2.711131553s ago: executing program 2 (id=7412): socket$kcm(0x2, 0x1000000000000002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2, 0xffffffffffffffff}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r1}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)="0400000098d1db1ba91d3305a782", 0x0, 0x973, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000e6ab42244f844d6100000000000a1c0000e3100001000000000000e08dca6d801657"], 0x28}, 0x1, 0x1000000}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x800, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000003800ff07000200000015b0be8c0000000000000000a39784a9ca4b56e4f1e1900bc7c0ef148e1f839fae759167af37e909ea49ac18"], 0x1c}, 0x1, 0x0, 0x0, 0x404c051}, 0x4008094) r8 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x6, 0x13, 0x0, 0x0) r9 = socket$kcm(0xa, 0x3, 0x73) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="a51ab64805000000840000000400000009000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r11}, 0xc) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x5411, &(0x7f00000013c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x70bd25, 0xfffffffc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x48030) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380)=0x20000, &(0x7f00000003c0)=r1}, 0x20) 2.409148944s ago: executing program 2 (id=7414): socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8931, &(0x7f0000000080)) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x1ff, 0xa892, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x8000000000032, 0xfffffbff, 0x3, 0x9, 0x0, 0x5, 0x0, 0xffffffff, 0x0, 0x20000000000000}, 0x0, 0x9, 0xffffffffffffffff, 0x9) recvmsg$unix(r4, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r7, 0x1, 0x41, &(0x7f0000000040)=r6, 0x4) sendmsg$kcm(r7, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @loopback, 0x9}, 0x80, 0x0}, 0x4000080) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x44, 0x18, 0x1, 0x70bdac, 0x25dfdbfc, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44010}, 0x20040844) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x33fe0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)={0x104, 0x0, 0x1, 0x401, 0x0, 0x0, {0xd, 0x0, 0x6}, [@CTA_MARK_MASK={0x8}, @CTA_TUPLE_MASTER={0x44, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xf}}, {0x8, 0x2, @rand_addr=0x64010100}}}]}, @CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xd}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x101}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}]}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xb579}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7f}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8000}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xffff}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xa16f}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xa}]}]}, 0x104}}, 0x4804) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8890}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r11) socket(0x15, 0x3, 0xff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 2.391247038s ago: executing program 3 (id=7416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000002c0)={'geneve0\x00', 0xc00}) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = getpid() r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0xfcc9}, r2, 0x10, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x2a, 0xa, 0x9, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="120000000a000000080000000200004d3d3cda00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000480), &(0x7f0000000280)=@udp=r6, 0x1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r5, &(0x7f0000000380), 0x0}, 0x20) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0xb, &(0x7f0000000a40)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2e}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000400)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f0000000040)=0x2000000000009237, 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x43) socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x2004fc10) close(r10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x2) 2.234375303s ago: executing program 0 (id=7418): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x2b, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() r3 = perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r1}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x4808, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="d8000000120081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e1208001d0040001101a8001200053f014006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bba020017cbec040000000000000000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e5dbf66f282ac027812cfbd3f1aeb4edbb57a7025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0xc000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) 2.038236626s ago: executing program 8 (id=7419): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000004, 0x200000008}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c01000003200070101000000fcdbdf25047c0000ac100180a71001"], 0x10c0}}, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8844a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x100, 0x7, 0x0, 0x0, 0x1, 0x0, 0xfffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x89f4, &(0x7f0000000900)={'ip_vti0\x00'}) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x3f8, 0x20, 0x70bd25, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040000}, 0x24008894) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800001c00dba261250644a5be239f27a67ecf0000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$ITER_CREATE(0xb, 0x0, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="bc02000001020101"], 0x2bc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.010453633s ago: executing program 3 (id=7420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x20, {0x3}}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 1.909899115s ago: executing program 3 (id=7421): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}, @typed={0x4, 0x1d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1.544646402s ago: executing program 7 (id=7422): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback={0x7000000}, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, 0x0, 0x0, 0x4855}, 0x24000052) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x6, 0x7, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, 0x0, 0x400000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24044010) r3 = getpid() r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x4d18aa27, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x73fc}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) getpid() sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES8=r1, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES64=r1], 0xf0}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) 1.473140301s ago: executing program 2 (id=7423): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002d80)=""/178, 0xb2}, {&(0x7f00000002c0)=""/240, 0xf0}, {&(0x7f0000001d80)=""/4047, 0xfcf}, {&(0x7f0000002e40)=""/4118, 0x1016}, {&(0x7f00000001c0)=""/204, 0xcc}, {0x0}], 0x6}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 1.449149951s ago: executing program 0 (id=7424): bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x2, 0x82248, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4a, 0x8, 0x99a, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r2 = socket(0x2b, 0xa, 0x9) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="100000001014000026357a00fddbdf25154a8afa681a8c9d"], 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x1) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0xa0, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x1}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r3, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46f6a89e3da7c562, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c085) r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x7}, 0x0, 0x94a8, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x410}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NFT_BATCH(r1, 0x0, 0x4000000) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071105300000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket$kcm(0x1e, 0x1, 0x0) recvmsg(r7, 0x0, 0x10100) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) 1.389697433s ago: executing program 7 (id=7425): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000feffffff0000000009000001000020756c2500000000002020207b1af8ff00000000bfa100000000000007016dab0f44e2c4b68f000008000000b703000529cca70000000085000000170000009500000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xffffffffffffffa0, 0x0, &(0x7f0000000280)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0xf, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r3], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x90}, 0x10) fstat(r6, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)={r8, r1}) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000780)={0x34, 0x0, 0x7, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0xffffffffffffffac, 0x1, 0x1, 0x0, 0xff}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040804}, 0x20008095) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000002a000701fcffffff00000000537c0000314cdf556a6aa9df00935002051ffd0a3fdb70857f245aa3c74009afd8d7f4872ea5d31092db399441ef3208324ff031f5052b54ceda73d4f612eaf6bc5bf58c4ee3e1876aeee6e558584f2369c4fbb926759d007554381ddcac5ea580e2e87bb44a38a1c03d14a3a54452521e71f7a6eaba01b0f6bda3975033de160e6e3065cbd30f0a1cd0ae4ba65fdd4d19f3a2902bb222fc754ab0a50bf55221b1cc6ee29c6fd4789fa28e28ccf410664f7e7e306452d1"], 0x14}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r9, 0x40086602, 0x110e22fff2) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=ANY=[@ANYBLOB="140000000a0a01010000000000bc000007000008"], 0x14}, 0x1, 0x0, 0x0, 0x30000010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000500)="1c0000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a1", 0x1c}], 0x1}, 0x4) sendmsg$inet(r10, 0x0, 0x0) r12 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r12, 0x110, 0x5, 0x0, 0x4) 1.386883684s ago: executing program 8 (id=7426): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x88}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0xfffffffd, 0x7, 0x3, 0x24a4, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x4, 0x1}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x6) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000500)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000080)={'full', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) socket$key(0xf, 0x3, 0x2) r3 = getpid() r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x4208, 0x0, 0x6, 0x7fff, 0x7fffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0) close(0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x26, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1b2fd2c5}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.336209635s ago: executing program 3 (id=7427): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x2c0c0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000c40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0xb, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xc}, @IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x8040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) socket$nl_audit(0x10, 0x3, 0x9) 1.324260652s ago: executing program 2 (id=7428): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1, 0x7}, 0x114905, 0x4, 0x0, 0x1, 0x6, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x6, 0x7fffffff, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$nl_route(0x10, 0x3, 0x0) close(r1) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x3a) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1}, 0x94) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, 0x0, 0x9a) 1.174965365s ago: executing program 0 (id=7429): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x46, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x8880) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000007cc38af8ffa0000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073117e000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000030000001801000020756c1700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000b000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.033561429s ago: executing program 7 (id=7430): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0xfc, 0x0, 0x0, 0x7fff, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x409}, 0x0, 0x0, 0x0, 0x1, 0x8003, 0x7fffffff, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0xa, 0x2, 0x3a) write$cgroup_subtree(r0, 0x0, 0x1e) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x701c40, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94) r3 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x3f6}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x4934f, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x81ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)=ANY=[], 0x48) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xb, 0x7, 0x10001, 0x3, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000100)={r8, &(0x7f0000000080), &(0x7f0000000200)=""/167}, 0x20) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x9, 0x1, 0x0, 0x1000, r6, 0x9c3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x1d, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xae}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @alu={0x4, 0x0, 0xd, 0x8, 0x8, 0x30, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x61}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @alu={0x7, 0x0, 0x7, 0x6, 0xb, 0x0, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0xbc, &(0x7f00000005c0)=""/188, 0x41100, 0xa, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x3, 0x9, 0x4bcc76e7, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[r10, 0xffffffffffffffff], &(0x7f0000000800)=[{0x5, 0x5, 0x4, 0x8}], 0x10, 0x200}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r11, @ANYRES32=r4, @ANYRES32=r9], 0x10) close(0x3) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r12, &(0x7f0000000800)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x54, 0x5, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040880}, 0x40040) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876cff0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a70d251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={r8, 0x58, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x9, 0x1d, &(0x7f0000001980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0xf3, 0x6, 0x3, 0x800}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000900)='GPL\x00', 0x100, 0x0, 0x0, 0x40f00, 0x10, '\x00', r14, @cgroup_sock=0xc, r9, 0x8, &(0x7f0000001b00)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000001b40)={0x4, 0xe, 0xddb, 0x2}, 0x10, 0xffffffffffffffff, r4, 0x5, 0x0, &(0x7f0000001b80)=[{0x3, 0x2, 0x0, 0x5}, {0x5, 0x3, 0x8, 0xa}, {0x4, 0x2, 0x4, 0x9}, {0x0, 0x5, 0x0, 0x3}, {0x4, 0x5, 0xf, 0x4}], 0x10, 0x3}, 0x94) recvmsg$kcm(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000600)=""/254, 0xfe}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2}, 0x20) sendmsg$NFQNL_MSG_VERDICT_BATCH(r12, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x6c, 0x3, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x1}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8d4}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x6}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x2}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x9}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x7}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000010) close(r5) 1.033259395s ago: executing program 3 (id=7431): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x20000000, 0x0, 0x8, 0x4, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000010100080400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="0800028004003380"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 975.855557ms ago: executing program 8 (id=7432): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0xd732828148db4cd2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x900, &(0x7f0000000140)={&(0x7f0000000b80)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x5}, [@generic]}, 0x14}}, 0x0) 497.440781ms ago: executing program 0 (id=7433): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xfffffffffffffdfe, &(0x7f00000000c0)=[{&(0x7f0000000100)="d80000002000811f4e81f782db44b90402000000e8fe55a11800150e0600142603600e1209000a0000000401a8001600e8cc5c330a00114006000020036010fab94dcf5c0468c1d67f6f94007134056ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d360db70100000040fad95667e006d8df96db3ef35ee3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701000400"/220, 0xdc}], 0x1}, 0x4040) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0xfffffdf4) 293.784297ms ago: executing program 8 (id=7434): r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001500)=@bpf_tracing={0x1a, 0x17, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0xb, 0x9, 0xa, 0x20, 0x1}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000800)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000009c0)={0x2, 0x8000007, 0x591a, 0x1}, 0x10, 0x30bec, 0xffffffffffffffff, 0x2, &(0x7f0000000d80)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000014c0)=[{0x2, 0x5, 0x7, 0x5}, {0x0, 0x1, 0x8, 0x8}], 0x10, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x40050) mount$bpf(0x0, 0x0, 0x0, 0x200401, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) write$cgroup_type(r5, &(0x7f0000000280), 0xfffffeed) 268.079688ms ago: executing program 7 (id=7435): socket$kcm(0x10, 0x2, 0x4) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20008080) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000020000000000000c02000000000000000000000d0000000000000000000000020100000000005f"], 0x0, 0x40}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x4c0, 0x5, 0xfffffffe, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5c2f, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200, 0x10000}, 0x120e, 0x0, 0x2, 0x9, 0x101, 0xfffffffe, 0x0, 0x0, 0x473}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000853}, 0x44040) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=ANY=[@ANYBLOB="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"], 0x1128}}, 0x20048000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000300)='cpu.idle\x00', 0x2, 0x0) syz_clone(0x0, &(0x7f0000001980)="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", 0x400, 0x0, &(0x7f0000000300), &(0x7f0000000340)="90d49a507c02751b767d01a53b24e73aa4c65cbebc739b3d09efd9e606bdae4a698068fd130a136d981c6a1921d9aff5c62aab2a6aa54614e45e022f") bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="85000000070000006a0a00ff030000000c0000000000000018", @ANYRES32=0x1, @ANYRES32], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) 188.820949ms ago: executing program 0 (id=7436): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000500)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, 0x0, 0x0) 177.098285ms ago: executing program 2 (id=7437): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xda53, 0x0, 0x3, 0xffffdf00, 0x5}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x0, 0x2, 0x4, 0x8}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x48, 0x32, 0xffff, 0xfffffffe, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00'}, 0x18) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0), 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r4, r5, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r6, r4, 0x4, r4}, 0x6) r7 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef9}, 0x11ad9, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x1}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000451000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e62367581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r11, 0xffffff79, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r12, {0x0, 0x7}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x101}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x18014005}, 0x800) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETVNETHDRSZ(r9, 0x400454d8, &(0x7f0000000100)=0x2) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x6, 0x3, "91e5"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x84}}, 0x0) 149.810459ms ago: executing program 0 (id=7438): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002d80)=""/178, 0xb2}, {&(0x7f00000002c0)=""/240, 0xf0}, {&(0x7f0000001d80)=""/4047, 0xfcf}, {&(0x7f0000002e40)=""/4118, 0x1016}, {&(0x7f00000001c0)=""/204, 0xcc}, {0x0}], 0x6}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 129.676395ms ago: executing program 3 (id=7439): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2e, 0x2, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x7}}, @qdisc_kind_options=@q_mq={0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x80000001, 0x1, 0x6, 0x5, 0x1, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x4, 0x1, 0x6}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0xfffffffd}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}, @typed={0x4, 0x1d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 116.401032ms ago: executing program 8 (id=7440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0xf00, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0xd, 0x9847, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x1], &(0x7f0000000380), 0x10, 0x80000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x20040050) socket$kcm(0xa, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x4000018) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x128, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0xe4, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x70, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x2c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x150}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) 0s ago: executing program 8 (id=7441): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="120000"], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000004, 0x200000008}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x2) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89b0, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5 1 [ 1013.380887][T22513] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1013.389625][T22513] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1013.398803][T22513] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1013.407003][T22513] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1013.523600][ T7309] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.759168][T23547] lo speed is unknown, defaulting to 1000 [ 1014.150144][ T7309] bridge_slave_1: left allmulticast mode [ 1014.162116][ T7309] bridge_slave_1: left promiscuous mode [ 1014.172470][ T7309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.194051][ T7309] bridge_slave_0: left allmulticast mode [ 1014.199918][ T7309] bridge_slave_0: left promiscuous mode [ 1014.215009][ T7309] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.282474][T23571] blkio.reset_stats is deprecated [ 1014.376076][T23577] __nla_validate_parse: 8 callbacks suppressed [ 1014.376101][T23577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5784'. [ 1014.544001][ T7309] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1014.613529][ T7309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1014.627847][ T7309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1014.639683][ T7309] bond0 (unregistering): Released all slaves [ 1015.074106][T23589] netlink: 108 bytes leftover after parsing attributes in process `syz.6.5787'. [ 1015.325374][T23596] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5789'. [ 1015.490052][T23605] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5791'. [ 1015.503395][T22513] Bluetooth: hci3: command tx timeout [ 1015.607388][T23609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5794'. [ 1015.669769][T23616] IPv6: NLM_F_CREATE should be specified when creating new route [ 1015.683675][T23616] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1015.691088][T23616] IPv6: NLM_F_CREATE should be set when creating new route [ 1015.726867][T23617] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1015.801336][T23547] chnl_net:caif_netlink_parms(): no params data found [ 1016.427984][T23547] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.458524][T23547] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.491535][T23547] bridge_slave_0: entered allmulticast mode [ 1016.520139][T23547] bridge_slave_0: entered promiscuous mode [ 1016.633856][T23641] netlink: 'syz.2.5800': attribute type 1 has an invalid length. [ 1016.641964][T23641] netlink: 280 bytes leftover after parsing attributes in process `syz.2.5800'. [ 1017.575481][T22513] Bluetooth: hci3: command tx timeout [ 1019.339150][T23636] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5799'. [ 1019.378969][T23547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.404004][T23547] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.423234][T23547] bridge_slave_1: entered allmulticast mode [ 1019.430962][T23547] bridge_slave_1: entered promiscuous mode [ 1019.629121][T22513] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11 [ 1019.653541][T22513] Bluetooth: hci3: command tx timeout [ 1019.752788][T23547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1019.770467][T23547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1019.958738][T23547] team0: Port device team_slave_0 added [ 1019.983779][T23547] team0: Port device team_slave_1 added [ 1020.169156][T23547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1020.184197][T23547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1020.214363][T23547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1020.256198][T23547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1020.284018][T23547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1020.467440][T23547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1021.739449][T22513] Bluetooth: hci3: command tx timeout [ 1021.987867][T23547] hsr_slave_0: entered promiscuous mode [ 1022.030015][T23547] hsr_slave_1: entered promiscuous mode [ 1022.440930][T23685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5811'. [ 1022.472405][T22513] Bluetooth: hci4: unexpected event 0x03 length: 15 > 11 [ 1022.483500][T23685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5811'. [ 1023.163837][T23727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5821'. [ 1023.195453][T23727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5821'. [ 1023.304321][T23547] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1023.491465][T23547] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1023.639118][T23547] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1024.034987][T23547] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1024.175673][T23743] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5828'. [ 1024.449570][T23761] netlink: 'syz.0.5831': attribute type 1 has an invalid length. [ 1024.495898][T23761] netlink: 280 bytes leftover after parsing attributes in process `syz.0.5831'. [ 1025.245322][T23547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1025.300389][T23547] 8021q: adding VLAN 0 to HW filter on device team0 [ 1025.348684][ T6544] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.355926][ T6544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1025.481113][T14759] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.488380][T14759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1025.697404][ T7309] hsr_slave_0: left promiscuous mode [ 1025.724007][ T7309] hsr_slave_1: left promiscuous mode [ 1025.731512][ T7309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1025.795703][ T7309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1025.835136][ T7309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1025.842889][ T7309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1025.865988][T23797] netlink: 'syz.3.5838': attribute type 21 has an invalid length. [ 1025.916774][T23797] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5838'. [ 1025.953201][ T7309] veth1_macvtap: left promiscuous mode [ 1025.969291][ T7309] veth0_macvtap: left promiscuous mode [ 1026.000265][T23803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5838'. [ 1026.023499][ T7309] veth1_vlan: left promiscuous mode [ 1026.043407][ T7309] veth0_vlan: left promiscuous mode [ 1026.945548][ T7309] team0 (unregistering): Port device team_slave_1 removed [ 1026.972760][ T7309] team0 (unregistering): Port device team_slave_0 removed [ 1027.080485][T23797] netlink: 'syz.3.5838': attribute type 5 has an invalid length. [ 1027.089772][T23797] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5838'. [ 1027.330456][T23834] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 1027.388231][T23547] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1027.407042][T23834] netlink: 'syz.3.5846': attribute type 10 has an invalid length. [ 1029.094862][T23547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1029.170353][T22513] Bluetooth: hci1: unexpected event 0x06 length: 151 > 3 [ 1029.441532][T23885] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5860'. [ 1029.701368][T23547] veth0_vlan: entered promiscuous mode [ 1029.737244][T23547] veth1_vlan: entered promiscuous mode [ 1029.840277][T23901] netlink: 'syz.6.5866': attribute type 10 has an invalid length. [ 1029.908764][T23547] veth0_macvtap: entered promiscuous mode [ 1029.920471][T23547] veth1_macvtap: entered promiscuous mode [ 1029.949312][T23547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1029.986016][T23547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1030.005724][ T570] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.019713][ T570] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.056988][ T570] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.084451][ T570] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.501528][ T570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1030.526805][ T570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1030.725686][ T570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1030.789780][ T570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1030.917454][T23924] netlink: 2 bytes leftover after parsing attributes in process `syz.7.5768'. [ 1030.946390][T23924] netlink: 'syz.7.5768': attribute type 39 has an invalid length. [ 1031.918430][T22513] Bluetooth: hci1: unexpected event 0x06 length: 151 > 3 [ 1032.035690][T23950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5884'. [ 1032.056256][T23950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5884'. [ 1032.751915][T23971] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5891'. [ 1032.802116][T23974] netlink: 'syz.6.5893': attribute type 10 has an invalid length. [ 1032.823455][T23974] team0: Device vxcan1 is of different type [ 1033.209791][T23990] netlink: 164 bytes leftover after parsing attributes in process `syz.6.5895'. [ 1033.562663][T23994] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.5898'. [ 1033.664466][T24009] netlink: 'syz.2.5904': attribute type 1 has an invalid length. [ 1033.667945][T24012] netlink: 'syz.0.5906': attribute type 10 has an invalid length. [ 1033.672865][T24009] netlink: 280 bytes leftover after parsing attributes in process `syz.2.5904'. [ 1033.716407][T24012] team0: Device vxcan1 is of different type [ 1033.822595][T24011] netlink: 'syz.7.5905': attribute type 10 has an invalid length. [ 1033.838459][T24011] netlink: 156 bytes leftover after parsing attributes in process `syz.7.5905'. [ 1033.883331][T24020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5907'. [ 1034.906348][T24037] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5914'. [ 1035.178120][T24041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5916'. [ 1035.290543][T24043] netlink: 'syz.7.5917': attribute type 10 has an invalid length. [ 1035.342229][T24047] netlink: 'syz.3.5919': attribute type 1 has an invalid length. [ 1035.366047][T24043] team0: Device vxcan1 is of different type [ 1035.376006][T24047] netlink: 280 bytes leftover after parsing attributes in process `syz.3.5919'. [ 1036.022223][T24055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5922'. [ 1036.159331][T24055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5922'. [ 1036.262426][T24065] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5920'. [ 1038.818506][T24115] netlink: 'syz.3.5935': attribute type 1 has an invalid length. [ 1038.829851][T24114] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5932'. [ 1038.833183][T24115] netlink: 280 bytes leftover after parsing attributes in process `syz.3.5935'. [ 1038.895406][T24106] FAULT_INJECTION: forcing a failure. [ 1038.895406][T24106] name failslab, interval 1, probability 0, space 0, times 0 [ 1038.915047][T24106] CPU: 1 UID: 0 PID: 24106 Comm: syz.6.5934 Not tainted syzkaller #0 PREEMPT(full) [ 1038.915072][T24106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1038.915083][T24106] Call Trace: [ 1038.915090][T24106] [ 1038.915097][T24106] dump_stack_lvl+0xe8/0x150 [ 1038.915128][T24106] should_fail_ex+0x412/0x560 [ 1038.915155][T24106] should_failslab+0xa8/0x100 [ 1038.915199][T24106] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1038.915220][T24106] ? __alloc_skb+0x186/0x7d0 [ 1038.915241][T24106] ? __alloc_skb+0x1d0/0x7d0 [ 1038.915261][T24106] ? __local_bh_enable_ip+0xd0/0x130 [ 1038.915288][T24106] __alloc_skb+0x1d0/0x7d0 [ 1038.915310][T24106] ? netlink_ack_tlv_len+0x6c/0x210 [ 1038.915333][T24106] netlink_ack+0x146/0xa50 [ 1038.915358][T24106] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1038.915383][T24106] nfnetlink_rcv+0x2517/0x27b0 [ 1038.915434][T24106] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1038.915467][T24106] ? ref_tracker_free+0x693/0x840 [ 1038.915517][T24106] ? __netlink_deliver_tap+0x807/0x850 [ 1038.915539][T24106] ? netlink_deliver_tap+0x2e/0x1b0 [ 1038.915574][T24106] netlink_unicast+0x80f/0x9b0 [ 1038.915600][T24106] ? __pfx_netlink_unicast+0x10/0x10 [ 1038.915622][T24106] ? netlink_sendmsg+0x650/0xb40 [ 1038.915642][T24106] ? skb_put+0x11b/0x210 [ 1038.915669][T24106] netlink_sendmsg+0x813/0xb40 [ 1038.915700][T24106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1038.915723][T24106] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1038.915746][T24106] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1038.915767][T24106] ____sys_sendmsg+0x972/0x9f0 [ 1038.915791][T24106] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1038.915815][T24106] ? import_iovec+0x73/0xa0 [ 1038.915842][T24106] ___sys_sendmsg+0x2a5/0x360 [ 1038.915864][T24106] ? __pfx____sys_sendmsg+0x10/0x10 [ 1038.915910][T24106] ? __fget_files+0x2a/0x420 [ 1038.915933][T24106] ? __fget_files+0x3a0/0x420 [ 1038.915966][T24106] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1038.915986][T24106] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1038.916010][T24106] ? __pfx_ksys_write+0x10/0x10 [ 1038.916038][T24106] do_syscall_64+0x14d/0xf80 [ 1038.916054][T24106] ? trace_irq_disable+0x3b/0x150 [ 1038.916075][T24106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.916089][T24106] ? clear_bhb_loop+0x40/0x90 [ 1038.916109][T24106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.916124][T24106] RIP: 0033:0x7fb0ca19c799 [ 1038.916139][T24106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1038.916151][T24106] RSP: 002b:00007fb0cafe4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1038.916167][T24106] RAX: ffffffffffffffda RBX: 00007fb0ca415fa0 RCX: 00007fb0ca19c799 [ 1038.916177][T24106] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1038.916187][T24106] RBP: 00007fb0cafe4090 R08: 0000000000000000 R09: 0000000000000000 [ 1038.916196][T24106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1038.916204][T24106] R13: 00007fb0ca416038 R14: 00007fb0ca415fa0 R15: 00007fff82517c38 [ 1038.916226][T24106] [ 1039.389036][T24124] netlink: 680 bytes leftover after parsing attributes in process `syz.7.5936'. [ 1039.592803][T24127] netlink: 424 bytes leftover after parsing attributes in process `syz.6.5937'. [ 1040.110461][T24150] __nla_validate_parse: 1 callbacks suppressed [ 1040.110496][T24150] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5942'. [ 1040.768414][T24163] netlink: 'syz.7.5948': attribute type 1 has an invalid length. [ 1040.806327][T24163] netlink: 280 bytes leftover after parsing attributes in process `syz.7.5948'. [ 1040.999214][T24169] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5949'. [ 1041.551717][T24182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5954'. [ 1041.640765][T24182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5954'. [ 1042.183047][T24207] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5961'. [ 1042.407430][T24221] netlink: 2 bytes leftover after parsing attributes in process `syz.6.5964'. [ 1042.440173][T24221] netlink: 'syz.6.5964': attribute type 39 has an invalid length. [ 1042.806805][T24228] netlink: 'syz.2.5965': attribute type 10 has an invalid length. [ 1042.820172][T24228] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5965'. [ 1043.058689][T24234] netlink: 'syz.7.5967': attribute type 2 has an invalid length. [ 1043.088250][T24234] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5967'. [ 1043.160804][T24242] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚Y‡°”õÅí [ 1043.160804][T24242] 3ìUH†5rô¹Bnœæ [ 1043.357966][T24253] netlink: 'syz.0.5973': attribute type 1 has an invalid length. [ 1043.437971][T24253] netlink: 680 bytes leftover after parsing attributes in process `syz.0.5973'. [ 1043.528318][T24261] netlink: 'syz.7.5975': attribute type 11 has an invalid length. [ 1044.914269][T24282] netlink: 'syz.2.5983': attribute type 10 has an invalid length. [ 1044.959274][T24282] net_ratelimit: 6 callbacks suppressed [ 1044.959309][T24282] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1045.506015][T24294] netlink: 'syz.6.5988': attribute type 3 has an invalid length. [ 1045.530399][T24294] __nla_validate_parse: 4 callbacks suppressed [ 1045.530420][T24294] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5988'. [ 1045.769613][T24299] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5989'. [ 1045.791865][T24299] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5989'. [ 1046.018530][T24310] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5993'. [ 1046.036549][T24314] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5995'. [ 1046.058280][T24308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5992'. [ 1046.067530][T24308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5992'. [ 1046.197743][T24315] netlink: 164 bytes leftover after parsing attributes in process `syz.7.5994'. [ 1046.398861][T24321] netlink: 'syz.0.5997': attribute type 10 has an invalid length. [ 1046.439746][T24321] team0: Device xfrm0 is of different type [ 1046.495229][T24327] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6000'. [ 1046.520758][T24327] netlink: 'syz.2.6000': attribute type 39 has an invalid length. [ 1046.540295][T24330] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6001'. [ 1047.977604][T24358] netlink: 'syz.2.6012': attribute type 10 has an invalid length. [ 1048.018118][T24358] team0: Device vxcan1 is of different type [ 1048.102361][T24361] netlink: 'syz.3.6013': attribute type 10 has an invalid length. [ 1048.141117][T24361] team0: Device ipvlan1 failed to register rx_handler [ 1052.468519][T24431] __nla_validate_parse: 19 callbacks suppressed [ 1052.468542][T24431] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6038'. [ 1052.594102][T24437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6037'. [ 1053.048248][T24451] netlink: 'syz.7.6042': attribute type 10 has an invalid length. [ 1053.079300][T24451] team0: Device vxcan1 is of different type [ 1054.465961][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.472784][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.132383][T24475] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6048'. [ 1056.185261][T24478] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6047'. [ 1056.289592][T24481] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6049'. [ 1056.309721][T24481] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6049'. [ 1059.133972][T24487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6052'. [ 1059.928564][T24505] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6059'. [ 1059.954546][T24505] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6059'. [ 1060.136874][T24514] netlink: 'syz.2.6062': attribute type 10 has an invalid length. [ 1060.180951][T24514] team0: Device vxcan1 is of different type [ 1060.209408][T24520] netlink: 'syz.6.6065': attribute type 10 has an invalid length. [ 1060.271315][T24523] netlink: 164 bytes leftover after parsing attributes in process `syz.7.6064'. [ 1060.302321][T24520] team0: Device ipvlan1 failed to register rx_handler [ 1060.343560][T24530] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6063'. [ 1060.614185][T24534] netlink: 'syz.6.6068': attribute type 10 has an invalid length. [ 1060.636201][T24533] netlink: 680 bytes leftover after parsing attributes in process `syz.2.6067'. [ 1060.645931][T24534] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6068'. [ 1063.353404][T24541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6071'. [ 1063.368393][T24545] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6070'. [ 1063.383433][T24543] netlink: 'syz.3.6072': attribute type 10 has an invalid length. [ 1063.410300][T24541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6071'. [ 1063.459841][T24552] netlink: 'syz.7.6073': attribute type 10 has an invalid length. [ 1063.735682][T24564] netlink: 'syz.6.6078': attribute type 10 has an invalid length. [ 1063.757004][T24564] team0: Device ipvlan1 failed to register rx_handler [ 1063.888941][T24571] netlink: 'syz.6.6081': attribute type 10 has an invalid length. [ 1063.909623][T24572] sctp: [Deprecated]: syz.0.6080 (pid 24572) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1063.909623][T24572] Use struct sctp_sack_info instead [ 1064.301698][T24584] netlink: 'syz.2.6085': attribute type 10 has an invalid length. [ 1064.331090][T24584] team0: Device vxcan1 is of different type [ 1067.205571][T24594] IPv6: NLM_F_CREATE should be specified when creating new route [ 1067.223730][T24594] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1067.231122][T24594] IPv6: NLM_F_CREATE should be set when creating new route [ 1067.258821][T24601] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1067.261814][T24596] __nla_validate_parse: 6 callbacks suppressed [ 1067.261832][T24596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6088'. [ 1067.318553][T24603] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6090'. [ 1067.344343][T24603] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6090'. [ 1067.411533][T24603] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6090'. [ 1067.419008][T24607] netlink: 'syz.7.6092': attribute type 10 has an invalid length. [ 1067.443984][T24607] team0: Device ipvlan1 failed to register rx_handler [ 1067.705786][T24619] siw: device registration error -23 [ 1067.716326][T24619] netlink: 'syz.0.6097': attribute type 9 has an invalid length. [ 1067.798644][T24625] sctp: [Deprecated]: syz.6.6098 (pid 24625) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1067.798644][T24625] Use struct sctp_sack_info instead [ 1068.770899][T24633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6101'. [ 1068.895599][T24631] netlink: 108 bytes leftover after parsing attributes in process `syz.7.6100'. [ 1069.029972][T24642] netlink: 'syz.0.6104': attribute type 10 has an invalid length. [ 1070.066968][T24667] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6114'. [ 1070.076592][T24667] openvswitch: netlink: Key 0 has unexpected len 12 expected 0 [ 1070.158734][T24672] netlink: 'syz.7.6116': attribute type 11 has an invalid length. [ 1070.179557][T24672] netlink: 199828 bytes leftover after parsing attributes in process `syz.7.6116'. [ 1070.327889][T24681] netlink: 2 bytes leftover after parsing attributes in process `syz.7.6119'. [ 1070.341916][T24681] netlink: 'syz.7.6119': attribute type 39 has an invalid length. [ 1070.345808][T24675] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6117'. [ 1071.175114][T24690] netlink: 'syz.6.6121': attribute type 10 has an invalid length. [ 1071.200126][T24690] team0: Device vxcan1 is of different type [ 1071.743889][T24717] openvswitch: netlink: Key 0 has unexpected len 12 expected 0 [ 1071.985718][T24730] netlink: 'syz.3.6130': attribute type 10 has an invalid length. [ 1072.024251][T24728] netlink: 'syz.2.6134': attribute type 10 has an invalid length. [ 1075.186853][T24739] __nla_validate_parse: 6 callbacks suppressed [ 1075.186876][T24739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6136'. [ 1075.219303][T24738] netlink: 'syz.6.6137': attribute type 10 has an invalid length. [ 1075.734170][T24751] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6140'. [ 1075.771228][T24738] team0: Device vxcan1 is of different type [ 1076.227841][T24764] netlink: 164 bytes leftover after parsing attributes in process `syz.6.6143'. [ 1076.684832][T24778] netlink: 'syz.2.6148': attribute type 21 has an invalid length. [ 1076.692721][T24778] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6148'. [ 1076.753253][T24778] netlink: 'syz.2.6148': attribute type 5 has an invalid length. [ 1076.761052][T24778] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6148'. [ 1076.974473][T24788] netlink: 'syz.6.6153': attribute type 10 has an invalid length. [ 1076.996770][T24788] team0: Device vxcan1 is of different type [ 1077.614669][T24812] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6161'. [ 1077.874388][T24810] delete_channel: no stack [ 1077.969489][T24821] netlink: 680 bytes leftover after parsing attributes in process `syz.2.6165'. [ 1078.043956][T24827] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6168'. [ 1078.171561][T24832] sctp: [Deprecated]: syz.0.6169 (pid 24832) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1078.171561][T24832] Use struct sctp_sack_info instead [ 1078.258766][T24832] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6169'. [ 1078.957514][T24852] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6177'. [ 1079.309323][T24852] netlink: 'syz.2.6177': attribute type 29 has an invalid length. [ 1079.339743][T24852] netlink: 'syz.2.6177': attribute type 29 has an invalid length. [ 1079.376030][T24852] netlink: 'syz.2.6177': attribute type 29 has an invalid length. [ 1079.397609][T24867] FAULT_INJECTION: forcing a failure. [ 1079.397609][T24867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1079.427485][T24867] CPU: 1 UID: 0 PID: 24867 Comm: syz.6.6183 Not tainted syzkaller #0 PREEMPT(full) [ 1079.427511][T24867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1079.427522][T24867] Call Trace: [ 1079.427530][T24867] [ 1079.427538][T24867] dump_stack_lvl+0xe8/0x150 [ 1079.427570][T24867] should_fail_ex+0x412/0x560 [ 1079.427601][T24867] _copy_from_user+0x2d/0xb0 [ 1079.427628][T24867] __sys_bpf+0x229/0x950 [ 1079.427659][T24867] ? __pfx___sys_bpf+0x10/0x10 [ 1079.427704][T24867] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1079.427730][T24867] ? ksys_write+0x242/0x270 [ 1079.427754][T24867] ? __pfx_ksys_write+0x10/0x10 [ 1079.427785][T24867] __x64_sys_bpf+0x7c/0x90 [ 1079.427811][T24867] do_syscall_64+0x14d/0xf80 [ 1079.427829][T24867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.427847][T24867] ? clear_bhb_loop+0x40/0x90 [ 1079.427870][T24867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.427889][T24867] RIP: 0033:0x7fb0ca19c799 [ 1079.427907][T24867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1079.427922][T24867] RSP: 002b:00007fb0cafe4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1079.427941][T24867] RAX: ffffffffffffffda RBX: 00007fb0ca415fa0 RCX: 00007fb0ca19c799 [ 1079.427954][T24867] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 1079.427966][T24867] RBP: 00007fb0cafe4090 R08: 0000000000000000 R09: 0000000000000000 [ 1079.427976][T24867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1079.427986][T24867] R13: 00007fb0ca416038 R14: 00007fb0ca415fa0 R15: 00007fff82517c38 [ 1079.428027][T24867] [ 1080.513491][T24899] netlink: 'syz.7.6197': attribute type 21 has an invalid length. [ 1080.521374][T24899] __nla_validate_parse: 4 callbacks suppressed [ 1080.521394][T24899] netlink: 128 bytes leftover after parsing attributes in process `syz.7.6197'. [ 1080.561306][T24899] netlink: 'syz.7.6197': attribute type 5 has an invalid length. [ 1080.577379][T24899] netlink: 3 bytes leftover after parsing attributes in process `syz.7.6197'. [ 1080.606036][T24901] netlink: 'syz.6.6198': attribute type 10 has an invalid length. [ 1080.630028][T24901] team0: Device ipvlan1 failed to register rx_handler [ 1081.145057][T24913] tun0: tun_chr_ioctl cmd 1074025675 [ 1081.150589][T24913] tun0: persist enabled [ 1081.158317][T24920] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6206'. [ 1081.234770][T24916] tun0: tun_chr_ioctl cmd 1074025675 [ 1081.240115][T24916] tun0: persist disabled [ 1081.282131][T24922] tun0: tun_chr_ioctl cmd 1074025675 [ 1081.287700][T24922] tun0: persist disabled [ 1081.376559][T24927] netlink: 'syz.0.6208': attribute type 10 has an invalid length. [ 1081.386111][T24927] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6208'. [ 1081.559097][T24937] netlink: 164 bytes leftover after parsing attributes in process `syz.7.6209'. [ 1082.685820][T24971] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6223'. [ 1082.741358][T24964] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6221'. [ 1082.781988][T24966] netlink: 'syz.0.6222': attribute type 10 has an invalid length. [ 1082.812900][T24966] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6222'. [ 1083.131872][T24995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6232'. [ 1083.141545][T24996] FAULT_INJECTION: forcing a failure. [ 1083.141545][T24996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1083.163067][T24996] CPU: 1 UID: 0 PID: 24996 Comm: syz.2.6234 Not tainted syzkaller #0 PREEMPT(full) [ 1083.163092][T24996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1083.163102][T24996] Call Trace: [ 1083.163108][T24996] [ 1083.163115][T24996] dump_stack_lvl+0xe8/0x150 [ 1083.163172][T24996] should_fail_ex+0x412/0x560 [ 1083.163224][T24996] _copy_from_iter+0x1d3/0x1670 [ 1083.163262][T24996] ? rcu_is_watching+0x15/0xb0 [ 1083.163299][T24996] ? __pfx__copy_from_iter+0x10/0x10 [ 1083.163320][T24996] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 1083.163362][T24996] ? netlink_sendmsg+0x650/0xb40 [ 1083.163392][T24996] ? skb_put+0x11b/0x210 [ 1083.163419][T24996] netlink_sendmsg+0x6c0/0xb40 [ 1083.163449][T24996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1083.163475][T24996] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1083.163497][T24996] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1083.163520][T24996] ____sys_sendmsg+0x972/0x9f0 [ 1083.163545][T24996] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1083.163567][T24996] ? import_iovec+0x73/0xa0 [ 1083.163593][T24996] ___sys_sendmsg+0x2a5/0x360 [ 1083.163615][T24996] ? __pfx____sys_sendmsg+0x10/0x10 [ 1083.163660][T24996] ? __fget_files+0x2a/0x420 [ 1083.163683][T24996] ? __fget_files+0x3a0/0x420 [ 1083.163715][T24996] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1083.163731][T24996] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1083.163745][T24996] ? perf_trace_preemptirq_template+0xb2/0x350 [ 1083.163778][T24996] ? __pfx_ksys_write+0x10/0x10 [ 1083.163808][T24996] do_syscall_64+0x14d/0xf80 [ 1083.163824][T24996] ? trace_irq_disable+0x3b/0x150 [ 1083.163845][T24996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.163861][T24996] ? clear_bhb_loop+0x40/0x90 [ 1083.163881][T24996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.163895][T24996] RIP: 0033:0x7f8cec59c799 [ 1083.163911][T24996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1083.163926][T24996] RSP: 002b:00007f8ced3c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1083.163946][T24996] RAX: ffffffffffffffda RBX: 00007f8cec815fa0 RCX: 00007f8cec59c799 [ 1083.163959][T24996] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1083.163969][T24996] RBP: 00007f8ced3c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1083.163978][T24996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1083.163987][T24996] R13: 00007f8cec816038 R14: 00007f8cec815fa0 R15: 00007ffd35af9528 [ 1083.164012][T24996] [ 1083.546409][T25012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1083.567724][T25012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1083.790777][T25018] netlink: 'syz.0.6242': attribute type 10 has an invalid length. [ 1083.804736][T25018] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6242'. [ 1083.895604][T25020] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 1083.937299][T25022] netlink: 'syz.7.6245': attribute type 2 has an invalid length. [ 1084.928811][T25059] netlink: 'syz.6.6259': attribute type 39 has an invalid length. [ 1085.714738][T25085] __nla_validate_parse: 5 callbacks suppressed [ 1085.714771][T25085] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6264'. [ 1086.156661][T25104] syzkaller0: entered promiscuous mode [ 1086.162196][T25104] syzkaller0: entered allmulticast mode [ 1086.525031][T25120] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6278'. [ 1086.592668][T25124] netlink: 'syz.6.6281': attribute type 10 has an invalid length. [ 1086.609734][T25124] team0: Device vxcan1 is of different type [ 1087.984111][T25148] netlink: 'syz.2.6288': attribute type 1 has an invalid length. [ 1088.010710][T25148] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6288'. [ 1088.032192][T25148] netlink: 'syz.2.6288': attribute type 29 has an invalid length. [ 1088.043374][T25148] netlink: 'syz.2.6288': attribute type 29 has an invalid length. [ 1088.100907][T25147] delete_channel: no stack [ 1088.136189][T25152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6290'. [ 1088.457108][T25159] netlink: 164 bytes leftover after parsing attributes in process `syz.6.6293'. [ 1088.712827][T25169] netlink: 'syz.7.6295': attribute type 10 has an invalid length. [ 1088.740898][T25169] team0: Device vxcan1 is of different type [ 1088.754161][T25171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6297'. [ 1088.903675][T25176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6294'. [ 1088.923936][T25176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6294'. [ 1089.064915][T25181] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6299'. [ 1089.085032][T25181] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6299'. [ 1089.840675][T25194] FAULT_INJECTION: forcing a failure. [ 1089.840675][T25194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1089.905791][T25194] CPU: 0 UID: 0 PID: 25194 Comm: syz.3.6303 Not tainted syzkaller #0 PREEMPT(full) [ 1089.905818][T25194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1089.905830][T25194] Call Trace: [ 1089.905840][T25194] [ 1089.905851][T25194] dump_stack_lvl+0xe8/0x150 [ 1089.905897][T25194] should_fail_ex+0x412/0x560 [ 1089.905955][T25194] _copy_from_user+0x2d/0xb0 [ 1089.905996][T25194] __sys_bpf+0x229/0x950 [ 1089.906046][T25194] ? __pfx___sys_bpf+0x10/0x10 [ 1089.906159][T25194] ? ksys_write+0x242/0x270 [ 1089.906201][T25194] ? __pfx_ksys_write+0x10/0x10 [ 1089.906266][T25194] __x64_sys_bpf+0x7c/0x90 [ 1089.906307][T25194] do_syscall_64+0x14d/0xf80 [ 1089.906329][T25194] ? trace_irq_disable+0x3b/0x150 [ 1089.906356][T25194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.906381][T25194] ? clear_bhb_loop+0x40/0x90 [ 1089.906423][T25194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.906446][T25194] RIP: 0033:0x7fde3d99c799 [ 1089.906472][T25194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1089.906487][T25194] RSP: 002b:00007fde3e8fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1089.906507][T25194] RAX: ffffffffffffffda RBX: 00007fde3dc16090 RCX: 00007fde3d99c799 [ 1089.906526][T25194] RDX: 0000000000000020 RSI: 0000200000000d00 RDI: 0000000000000004 [ 1089.906538][T25194] RBP: 00007fde3e8fc090 R08: 0000000000000000 R09: 0000000000000000 [ 1089.906549][T25194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1089.906560][T25194] R13: 00007fde3dc16128 R14: 00007fde3dc16090 R15: 00007ffd38c48f78 [ 1089.906655][T25194] [ 1090.461684][T25206] netlink: 'syz.6.6308': attribute type 10 has an invalid length. [ 1090.478635][T25206] team0: Device vxcan1 is of different type [ 1090.669095][T25216] netlink: 'syz.3.6307': attribute type 10 has an invalid length. [ 1090.884626][T25224] __nla_validate_parse: 2 callbacks suppressed [ 1090.884644][T25224] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6313'. [ 1090.915653][T25224] netlink: 'syz.0.6313': attribute type 39 has an invalid length. [ 1091.238629][T25235] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6318'. [ 1091.276912][T25235] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6318'. [ 1091.291275][T22513] Bluetooth: hci4: unexpected event 0x03 length: 15 > 11 [ 1091.440400][T25244] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6321'. [ 1091.459378][T25244] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6321'. [ 1091.613966][T25256] netlink: 'syz.6.6323': attribute type 10 has an invalid length. [ 1092.307346][T25265] openvswitch: netlink: Flow key attr not present in new flow. [ 1092.456162][T25274] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6330'. [ 1092.676065][T25278] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6331'. [ 1092.726486][T25278] netlink: 'syz.0.6331': attribute type 39 has an invalid length. [ 1092.760445][T22513] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11 [ 1094.028112][T25313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6344'. [ 1094.050068][T25313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6344'. [ 1094.067430][T25313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6344'. [ 1094.628898][T25327] netlink: 'syz.7.6350': attribute type 39 has an invalid length. [ 1094.826485][T25338] FAULT_INJECTION: forcing a failure. [ 1094.826485][T25338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1094.859286][T25338] CPU: 0 UID: 0 PID: 25338 Comm: syz.2.6354 Not tainted syzkaller #0 PREEMPT(full) [ 1094.859313][T25338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1094.859324][T25338] Call Trace: [ 1094.859331][T25338] [ 1094.859339][T25338] dump_stack_lvl+0xe8/0x150 [ 1094.859369][T25338] should_fail_ex+0x412/0x560 [ 1094.859397][T25338] _copy_from_user+0x2d/0xb0 [ 1094.859433][T25338] __sys_bpf+0x229/0x950 [ 1094.859461][T25338] ? __pfx___sys_bpf+0x10/0x10 [ 1094.859501][T25338] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1094.859527][T25338] ? ksys_write+0x242/0x270 [ 1094.859549][T25338] ? __pfx_ksys_write+0x10/0x10 [ 1094.859575][T25338] __x64_sys_bpf+0x7c/0x90 [ 1094.859599][T25338] do_syscall_64+0x14d/0xf80 [ 1094.859616][T25338] ? trace_irq_disable+0x3b/0x150 [ 1094.859640][T25338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.859658][T25338] ? clear_bhb_loop+0x40/0x90 [ 1094.859680][T25338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.859696][T25338] RIP: 0033:0x7f8cec59c799 [ 1094.859713][T25338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1094.859727][T25338] RSP: 002b:00007f8ced3a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1094.859746][T25338] RAX: ffffffffffffffda RBX: 00007f8cec816090 RCX: 00007f8cec59c799 [ 1094.859757][T25338] RDX: 0000000000000020 RSI: 0000200000000d00 RDI: 0000000000000004 [ 1094.859768][T25338] RBP: 00007f8ced3a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1094.859779][T25338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1094.859790][T25338] R13: 00007f8cec816128 R14: 00007f8cec816090 R15: 00007ffd35af9528 [ 1094.859818][T25338] [ 1095.636791][T25359] netlink: 'syz.6.6361': attribute type 10 has an invalid length. [ 1095.782281][T25371] netlink: 'syz.6.6367': attribute type 10 has an invalid length. [ 1095.800961][T25371] team0: Device vxcan1 is of different type [ 1096.151877][T25386] __nla_validate_parse: 4 callbacks suppressed [ 1096.151896][T25386] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6373'. [ 1096.453145][T25393] netlink: 'syz.2.6377': attribute type 10 has an invalid length. [ 1096.461109][T25393] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6377'. [ 1096.614360][T25401] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6376'. [ 1096.725678][T25395] netlink: 'syz.6.6378': attribute type 2 has an invalid length. [ 1096.918819][T25411] netlink: 'syz.0.6382': attribute type 1 has an invalid length. [ 1096.972424][T22513] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1097.031345][T25411] netlink: 680 bytes leftover after parsing attributes in process `syz.0.6382'. [ 1097.260742][T25420] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6388'. [ 1097.295975][T25421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6387'. [ 1097.352553][T25417] netlink: 'syz.0.6386': attribute type 10 has an invalid length. [ 1097.374078][T25417] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6386'. [ 1097.390464][T25425] netlink: 'syz.6.6391': attribute type 10 has an invalid length. [ 1097.403817][T25421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6387'. [ 1097.410942][T25425] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6391'. [ 1097.459364][T25426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6387'. [ 1098.486243][T25456] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1098.498270][T25455] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1098.524190][T25456] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1098.897559][T25463] syzkaller0: entered promiscuous mode [ 1098.973113][T25463] syzkaller0: entered allmulticast mode [ 1099.327025][T25482] netlink: 'syz.6.6408': attribute type 10 has an invalid length. [ 1100.167525][T22513] Bluetooth: hci1: unexpected event 0x12 length: 151 > 8 [ 1100.781719][T25509] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1100.802116][T25509] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1102.007846][T25514] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 1102.298073][T25526] netlink: 'syz.2.6420': attribute type 10 has an invalid length. [ 1102.707965][T22513] Bluetooth: hci1: unexpected event 0x12 length: 151 > 8 [ 1103.485979][T25558] __nla_validate_parse: 6 callbacks suppressed [ 1103.486011][T25558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6432'. [ 1103.977440][T22513] Bluetooth: hci1: unexpected event 0x12 length: 151 > 8 [ 1104.068729][T25571] netlink: 596 bytes leftover after parsing attributes in process `syz.7.6438'. [ 1104.400944][T25591] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1104.430986][T25592] sctp: [Deprecated]: syz.2.6443 (pid 25592) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1104.430986][T25592] Use struct sctp_sack_info instead [ 1104.451127][T25591] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1104.523182][T25592] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6443'. [ 1104.547415][T25598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6444'. [ 1104.549686][T25580] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6439'. [ 1104.858589][T25607] netlink: 596 bytes leftover after parsing attributes in process `syz.7.6449'. [ 1105.436866][T25620] FAULT_INJECTION: forcing a failure. [ 1105.436866][T25620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1105.470582][T25620] CPU: 0 UID: 0 PID: 25620 Comm: syz.2.6453 Not tainted syzkaller #0 PREEMPT(full) [ 1105.470609][T25620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1105.470620][T25620] Call Trace: [ 1105.470627][T25620] [ 1105.470636][T25620] dump_stack_lvl+0xe8/0x150 [ 1105.470668][T25620] should_fail_ex+0x412/0x560 [ 1105.470701][T25620] _copy_from_user+0x2d/0xb0 [ 1105.470731][T25620] __copy_msghdr+0x3c5/0x5b0 [ 1105.470758][T25620] ___sys_sendmsg+0x213/0x360 [ 1105.470788][T25620] ? __pfx____sys_sendmsg+0x10/0x10 [ 1105.470844][T25620] ? __fget_files+0x2a/0x420 [ 1105.470888][T25620] ? __fget_files+0x2a/0x420 [ 1105.470913][T25620] ? __fget_files+0x3a0/0x420 [ 1105.470954][T25620] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1105.470979][T25620] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1105.471014][T25620] ? __pfx_ksys_write+0x10/0x10 [ 1105.471055][T25620] do_syscall_64+0x14d/0xf80 [ 1105.471072][T25620] ? trace_irq_disable+0x3b/0x150 [ 1105.471096][T25620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.471115][T25620] ? clear_bhb_loop+0x40/0x90 [ 1105.471141][T25620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.471159][T25620] RIP: 0033:0x7f8cec59c799 [ 1105.471178][T25620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1105.471192][T25620] RSP: 002b:00007f8ced3c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1105.471211][T25620] RAX: ffffffffffffffda RBX: 00007f8cec815fa0 RCX: 00007f8cec59c799 [ 1105.471224][T25620] RDX: 0000000000008cc4 RSI: 0000200000000640 RDI: 0000000000000003 [ 1105.471236][T25620] RBP: 00007f8ced3c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1105.471247][T25620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1105.471258][T25620] R13: 00007f8cec816038 R14: 00007f8cec815fa0 R15: 00007ffd35af9528 [ 1105.471299][T25620] [ 1108.832908][T25654] sctp: [Deprecated]: syz.2.6464 (pid 25654) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1108.832908][T25654] Use struct sctp_sack_info instead [ 1108.921053][T25658] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6465'. [ 1108.973925][T25654] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6464'. [ 1109.049133][T25664] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6468'. [ 1109.331671][T25674] netlink: 'syz.7.6472': attribute type 10 has an invalid length. [ 1109.388793][T25674] team0: Device vxcan1 is of different type [ 1109.755776][T25693] netlink: 'syz.2.6479': attribute type 11 has an invalid length. [ 1109.803557][T25693] netlink: 172320 bytes leftover after parsing attributes in process `syz.2.6479'. [ 1110.467919][T25711] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6486'. [ 1110.493014][T25711] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6486'. [ 1110.523253][T25711] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6486'. [ 1110.647941][T25711] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6486'. [ 1110.667254][T25711] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6486'. [ 1110.679702][T25711] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6486'. [ 1110.747100][T25724] sctp: [Deprecated]: syz.3.6489 (pid 25724) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1110.747100][T25724] Use struct sctp_sack_info instead [ 1111.229954][T25739] netlink: 'syz.0.6495': attribute type 10 has an invalid length. [ 1111.268927][T25739] team0: Device vxcan1 is of different type [ 1112.494703][T25764] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1112.507532][T25764] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1112.527970][T22513] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1114.027564][T25824] __nla_validate_parse: 14 callbacks suppressed [ 1114.027586][T25824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6529'. [ 1114.050684][T25824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6529'. [ 1114.061197][T25824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6529'. [ 1114.228648][T25824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6529'. [ 1114.241974][T25824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6529'. [ 1114.264488][T25824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6529'. [ 1114.290576][T25830] netlink: 'syz.2.6531': attribute type 1 has an invalid length. [ 1114.316655][T25827] netlink: 680 bytes leftover after parsing attributes in process `syz.6.6530'. [ 1114.326129][T25830] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6531'. [ 1114.338286][T25830] netlink: 'syz.2.6531': attribute type 29 has an invalid length. [ 1114.349835][T25830] netlink: 596 bytes leftover after parsing attributes in process `syz.2.6531'. [ 1114.381793][T25824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6529'. [ 1115.056543][T25852] netlink: 'syz.2.6538': attribute type 39 has an invalid length. [ 1115.369209][T22513] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1115.898148][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.915367][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.956627][T25866] netlink: 'syz.0.6545': attribute type 1 has an invalid length. [ 1115.994540][T25866] netlink: 'syz.0.6545': attribute type 29 has an invalid length. [ 1117.026687][T25901] netlink: 'syz.0.6553': attribute type 39 has an invalid length. [ 1117.213763][T25910] FAULT_INJECTION: forcing a failure. [ 1117.213763][T25910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1117.241712][T25910] CPU: 1 UID: 0 PID: 25910 Comm: syz.2.6556 Not tainted syzkaller #0 PREEMPT(full) [ 1117.241739][T25910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1117.241751][T25910] Call Trace: [ 1117.241758][T25910] [ 1117.241767][T25910] dump_stack_lvl+0xe8/0x150 [ 1117.241798][T25910] should_fail_ex+0x412/0x560 [ 1117.241829][T25910] _copy_from_user+0x2d/0xb0 [ 1117.241858][T25910] vmemdup_user+0x5e/0xd0 [ 1117.241883][T25910] map_get_next_key+0x1c3/0x620 [ 1117.241913][T25910] ? bpf_lsm_bpf+0x9/0x20 [ 1117.241935][T25910] ? security_bpf+0x7e/0x2d0 [ 1117.241960][T25910] __sys_bpf+0x768/0x950 [ 1117.241990][T25910] ? __pfx___sys_bpf+0x10/0x10 [ 1117.242036][T25910] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1117.242062][T25910] ? ksys_write+0x242/0x270 [ 1117.242085][T25910] ? __pfx_ksys_write+0x10/0x10 [ 1117.242115][T25910] __x64_sys_bpf+0x7c/0x90 [ 1117.242141][T25910] do_syscall_64+0x14d/0xf80 [ 1117.242158][T25910] ? trace_irq_disable+0x3b/0x150 [ 1117.242182][T25910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.242201][T25910] ? clear_bhb_loop+0x40/0x90 [ 1117.242225][T25910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.242242][T25910] RIP: 0033:0x7f8cec59c799 [ 1117.242261][T25910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.242276][T25910] RSP: 002b:00007f8ced3a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1117.242296][T25910] RAX: ffffffffffffffda RBX: 00007f8cec816090 RCX: 00007f8cec59c799 [ 1117.242308][T25910] RDX: 0000000000000020 RSI: 0000200000000d00 RDI: 0000000000000004 [ 1117.242320][T25910] RBP: 00007f8ced3a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1117.242330][T25910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1117.242341][T25910] R13: 00007f8cec816128 R14: 00007f8cec816090 R15: 00007ffd35af9528 [ 1117.242382][T25910] [ 1118.148149][T25932] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1118.166843][T25932] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1118.615946][T25946] bridge0: port 3(ip6gretap0) entered blocking state [ 1118.632358][T25946] bridge0: port 3(ip6gretap0) entered disabled state [ 1118.639748][T25946] ip6gretap0: entered allmulticast mode [ 1118.658290][T25946] ip6gretap0: entered promiscuous mode [ 1118.676238][T25946] bridge0: port 3(ip6gretap0) entered blocking state [ 1118.683374][T25946] bridge0: port 3(ip6gretap0) entered forwarding state [ 1118.968527][T25969] openvswitch: netlink: Flow key attr not present in new flow. [ 1119.310593][T25978] __nla_validate_parse: 25 callbacks suppressed [ 1119.310696][T25978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6582'. [ 1120.529575][T25978] : entered promiscuous mode [ 1120.706529][T25991] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6586'. [ 1120.731991][T25991] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6586'. [ 1121.805595][T26020] netlink: 'syz.2.6601': attribute type 11 has an invalid length. [ 1121.830921][T26020] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.6601'. [ 1121.885954][T26025] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6602'. [ 1121.898729][T26025] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6602'. [ 1121.916171][T26024] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6603'. [ 1121.933651][T26024] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6603'. [ 1121.975044][T26024] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6603'. [ 1122.662492][T26042] FAULT_INJECTION: forcing a failure. [ 1122.662492][T26042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1122.712437][T26042] CPU: 1 UID: 0 PID: 26042 Comm: syz.6.6609 Not tainted syzkaller #0 PREEMPT(full) [ 1122.712465][T26042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1122.712475][T26042] Call Trace: [ 1122.712483][T26042] [ 1122.712490][T26042] dump_stack_lvl+0xe8/0x150 [ 1122.712520][T26042] should_fail_ex+0x412/0x560 [ 1122.712548][T26042] _copy_from_iter+0x1d3/0x1670 [ 1122.712576][T26042] ? rcu_is_watching+0x15/0xb0 [ 1122.712606][T26042] ? __pfx__copy_from_iter+0x10/0x10 [ 1122.712638][T26042] ? netlink_sendmsg+0x650/0xb40 [ 1122.712667][T26042] ? skb_put+0x11b/0x210 [ 1122.712695][T26042] netlink_sendmsg+0x6c0/0xb40 [ 1122.712733][T26042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1122.712763][T26042] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1122.712785][T26042] ____sys_sendmsg+0x972/0x9f0 [ 1122.712803][T26042] ? __pfx_perf_trace_lock+0x10/0x10 [ 1122.712831][T26042] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1122.712855][T26042] ? import_iovec+0x73/0xa0 [ 1122.712883][T26042] ___sys_sendmsg+0x2a5/0x360 [ 1122.712904][T26042] ? __pfx____sys_sendmsg+0x10/0x10 [ 1122.712938][T26042] ? __fget_files+0x2a/0x420 [ 1122.712970][T26042] ? __fget_files+0x2a/0x420 [ 1122.712993][T26042] ? __fget_files+0x3a0/0x420 [ 1122.713026][T26042] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1122.713046][T26042] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1122.713075][T26042] ? __might_fault+0xaf/0x130 [ 1122.713092][T26042] ? rcu_is_watching+0x15/0xb0 [ 1122.713120][T26042] do_syscall_64+0x14d/0xf80 [ 1122.713137][T26042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.713154][T26042] ? clear_bhb_loop+0x40/0x90 [ 1122.713176][T26042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.713194][T26042] RIP: 0033:0x7fb0ca19c799 [ 1122.713212][T26042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1122.713226][T26042] RSP: 002b:00007fb0cafe4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1122.713244][T26042] RAX: ffffffffffffffda RBX: 00007fb0ca415fa0 RCX: 00007fb0ca19c799 [ 1122.713257][T26042] RDX: 0000000006044040 RSI: 00002000000000c0 RDI: 0000000000000009 [ 1122.713268][T26042] RBP: 00007fb0cafe4090 R08: 0000000000000000 R09: 0000000000000000 [ 1122.713278][T26042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1122.713289][T26042] R13: 00007fb0ca416038 R14: 00007fb0ca415fa0 R15: 00007fff82517c38 [ 1122.713316][T26042] [ 1123.044095][T26050] sctp: [Deprecated]: syz.3.6611 (pid 26050) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1123.044095][T26050] Use struct sctp_sack_info instead [ 1123.121355][T26057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6615'. [ 1123.132359][T26056] netlink: 'syz.0.6614': attribute type 11 has an invalid length. [ 1124.696358][T26104] sctp: [Deprecated]: syz.2.6632 (pid 26104) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1124.696358][T26104] Use struct sctp_sack_info instead [ 1124.867056][T26104] __nla_validate_parse: 10 callbacks suppressed [ 1124.867076][T26104] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6632'. [ 1125.519616][T26128] netlink: 'syz.6.6642': attribute type 10 has an invalid length. [ 1125.529945][T26128] team0: Device vxcan1 is of different type [ 1125.531599][T26120] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6639'. [ 1125.639147][T26127] netlink: 'syz.3.6643': attribute type 6 has an invalid length. [ 1125.841197][T26138] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6646'. [ 1126.116821][T26154] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6652'. [ 1126.161733][T26154] netlink: 'syz.0.6652': attribute type 39 has an invalid length. [ 1126.293017][T26162] sctp: [Deprecated]: syz.7.6654 (pid 26162) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1126.293017][T26162] Use struct sctp_sack_info instead [ 1126.395457][T26163] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6654'. [ 1127.171910][T26174] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6659'. [ 1127.333696][T26182] netlink: 'syz.7.6662': attribute type 2 has an invalid length. [ 1127.342055][T26182] netlink: 'syz.7.6662': attribute type 8 has an invalid length. [ 1127.374087][T26182] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6662'. [ 1127.411713][T26170] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6657'. [ 1127.581046][T26189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6665'. [ 1127.638796][T26191] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6666'. [ 1127.656742][T26191] netlink: 'syz.0.6666': attribute type 39 has an invalid length. [ 1128.526492][T26217] sctp: [Deprecated]: syz.0.6672 (pid 26217) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1128.526492][T26217] Use struct sctp_sack_info instead [ 1128.786854][T26224] netlink: 'syz.3.6675': attribute type 1 has an invalid length. [ 1131.608217][T26243] __nla_validate_parse: 6 callbacks suppressed [ 1131.608239][T26243] netlink: 2 bytes leftover after parsing attributes in process `syz.7.6680'. [ 1131.661003][T26233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6677'. [ 1131.665604][T26237] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6678'. [ 1131.670473][T26233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6677'. [ 1131.894064][T26254] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6683'. [ 1131.941312][T26258] netlink: 'syz.7.6686': attribute type 1 has an invalid length. [ 1131.949645][T26258] netlink: 256 bytes leftover after parsing attributes in process `syz.7.6686'. [ 1132.117559][T26266] netlink: 164 bytes leftover after parsing attributes in process `syz.7.6688'. [ 1132.117947][T26265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6687'. [ 1132.285107][T26274] sctp: [Deprecated]: syz.0.6689 (pid 26274) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1132.285107][T26274] Use struct sctp_sack_info instead [ 1132.312903][T26272] netlink: 'syz.6.6690': attribute type 10 has an invalid length. [ 1132.435435][T26274] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6689'. [ 1132.459703][T26272] team0: Device vxcan1 is of different type [ 1133.045125][T26286] FAULT_INJECTION: forcing a failure. [ 1133.045125][T26286] name failslab, interval 1, probability 0, space 0, times 0 [ 1133.063160][T26286] CPU: 0 UID: 0 PID: 26286 Comm: syz.2.6694 Not tainted syzkaller #0 PREEMPT(full) [ 1133.063187][T26286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1133.063197][T26286] Call Trace: [ 1133.063204][T26286] [ 1133.063211][T26286] dump_stack_lvl+0xe8/0x150 [ 1133.063241][T26286] should_fail_ex+0x412/0x560 [ 1133.063268][T26286] should_failslab+0xa8/0x100 [ 1133.063292][T26286] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1133.063324][T26286] ? __alloc_skb+0x186/0x7d0 [ 1133.063348][T26286] ? __alloc_skb+0x1d0/0x7d0 [ 1133.063370][T26286] ? __local_bh_enable_ip+0xd0/0x130 [ 1133.063400][T26286] __alloc_skb+0x1d0/0x7d0 [ 1133.063432][T26286] netlink_sendmsg+0x5d4/0xb40 [ 1133.063469][T26286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1133.063498][T26286] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1133.063524][T26286] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1133.063550][T26286] ____sys_sendmsg+0x972/0x9f0 [ 1133.063568][T26286] ? __pfx_perf_trace_lock+0x10/0x10 [ 1133.063603][T26286] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1133.063633][T26286] ? import_iovec+0x73/0xa0 [ 1133.063666][T26286] ___sys_sendmsg+0x2a5/0x360 [ 1133.063693][T26286] ? __pfx____sys_sendmsg+0x10/0x10 [ 1133.063738][T26286] ? __fget_files+0x2a/0x420 [ 1133.063778][T26286] ? __fget_files+0x2a/0x420 [ 1133.063801][T26286] ? __fget_files+0x3a0/0x420 [ 1133.063840][T26286] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1133.063864][T26286] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1133.063880][T26286] ? perf_trace_preemptirq_template+0xb2/0x350 [ 1133.063920][T26286] ? __pfx_ksys_write+0x10/0x10 [ 1133.063957][T26286] do_syscall_64+0x14d/0xf80 [ 1133.063974][T26286] ? trace_irq_disable+0x3b/0x150 [ 1133.063997][T26286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.064016][T26286] ? clear_bhb_loop+0x40/0x90 [ 1133.064040][T26286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.064059][T26286] RIP: 0033:0x7f8cec59c799 [ 1133.064078][T26286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1133.064093][T26286] RSP: 002b:00007f8ced3c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1133.064113][T26286] RAX: ffffffffffffffda RBX: 00007f8cec815fa0 RCX: 00007f8cec59c799 [ 1133.064126][T26286] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003 [ 1133.064138][T26286] RBP: 00007f8ced3c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1133.064149][T26286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1133.064160][T26286] R13: 00007f8cec816038 R14: 00007f8cec815fa0 R15: 00007ffd35af9528 [ 1133.064196][T26286] [ 1133.362485][T26290] netlink: 2 bytes leftover after parsing attributes in process `syz.7.6696'. [ 1134.190851][T26311] netlink: 'syz.3.6703': attribute type 10 has an invalid length. [ 1134.848313][T26328] sctp: [Deprecated]: syz.6.6707 (pid 26328) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1134.848313][T26328] Use struct sctp_sack_info instead [ 1136.127042][T26370] netlink: 'syz.6.6727': attribute type 39 has an invalid length. [ 1136.627813][T26385] sctp: [Deprecated]: syz.6.6732 (pid 26385) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1136.627813][T26385] Use struct sctp_sack_info instead [ 1136.679553][T26389] __nla_validate_parse: 9 callbacks suppressed [ 1136.679571][T26389] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6733'. [ 1136.711051][T26391] netlink: 'syz.3.6735': attribute type 10 has an invalid length. [ 1136.764571][T26388] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6734'. [ 1136.774487][T26385] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6732'. [ 1136.790274][T26388] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6734'. [ 1136.830306][T26396] netlink: 'syz.2.6736': attribute type 10 has an invalid length. [ 1136.888736][T26396] team0: Device vxcan1 is of different type [ 1137.111989][T26410] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6742'. [ 1137.170653][T26410] netlink: 'syz.3.6742': attribute type 39 has an invalid length. [ 1137.198444][T26407] netlink: 164 bytes leftover after parsing attributes in process `syz.7.6740'. [ 1137.478264][T26416] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6743'. [ 1137.490038][T26413] netlink: 306 bytes leftover after parsing attributes in process `syz.0.6741'. [ 1137.957279][T26443] netlink: 424 bytes leftover after parsing attributes in process `syz.6.6753'. [ 1137.969557][T26443] netlink: 424 bytes leftover after parsing attributes in process `syz.6.6753'. [ 1137.981198][T26443] FAULT_INJECTION: forcing a failure. [ 1137.981198][T26443] name failslab, interval 1, probability 0, space 0, times 0 [ 1137.994341][T26443] CPU: 1 UID: 0 PID: 26443 Comm: syz.6.6753 Not tainted syzkaller #0 PREEMPT(full) [ 1137.994368][T26443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1137.994379][T26443] Call Trace: [ 1137.994387][T26443] [ 1137.994395][T26443] dump_stack_lvl+0xe8/0x150 [ 1137.994426][T26443] should_fail_ex+0x412/0x560 [ 1137.994453][T26443] should_failslab+0xa8/0x100 [ 1137.994477][T26443] __kmalloc_noprof+0xe8/0x760 [ 1137.994494][T26443] ? __pfx_nft_data_init+0x10/0x10 [ 1137.994517][T26443] ? nft_pernet+0x23/0x240 [ 1137.994532][T26443] ? nft_set_elem_init+0xa8/0x7e0 [ 1137.994557][T26443] nft_set_elem_init+0xa8/0x7e0 [ 1137.994585][T26443] nf_tables_newsetelem+0x2377/0x4450 [ 1137.994604][T26443] ? do_trace_netlink_extack+0x80/0x200 [ 1137.994658][T26443] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 1137.994675][T26443] ? __lock_acquire+0x6b5/0x2cf0 [ 1137.994711][T26443] ? nla_validate_array+0xfc/0x260 [ 1137.994757][T26443] ? __pfx___nla_validate_parse+0x10/0x10 [ 1137.994796][T26443] ? nfnetlink_rcv+0x8ba/0x27b0 [ 1137.994822][T26443] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1137.994847][T26443] ? nfnl_pernet+0x23/0x240 [ 1137.994877][T26443] ? __nla_parse+0x40/0x60 [ 1137.994906][T26443] nfnetlink_rcv+0x1240/0x27b0 [ 1137.994962][T26443] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1137.995000][T26443] ? ref_tracker_free+0x693/0x840 [ 1137.995050][T26443] ? __netlink_deliver_tap+0x807/0x850 [ 1137.995075][T26443] ? netlink_deliver_tap+0x2e/0x1b0 [ 1137.995116][T26443] netlink_unicast+0x80f/0x9b0 [ 1137.995146][T26443] ? __pfx_netlink_unicast+0x10/0x10 [ 1137.995170][T26443] ? netlink_sendmsg+0x650/0xb40 [ 1137.995192][T26443] ? skb_put+0x11b/0x210 [ 1137.995230][T26443] netlink_sendmsg+0x813/0xb40 [ 1137.995264][T26443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1137.995330][T26443] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1137.995359][T26443] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1137.995382][T26443] ____sys_sendmsg+0x972/0x9f0 [ 1137.995412][T26443] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1137.995440][T26443] ? import_iovec+0x73/0xa0 [ 1137.995471][T26443] ___sys_sendmsg+0x2a5/0x360 [ 1137.995496][T26443] ? __pfx____sys_sendmsg+0x10/0x10 [ 1137.995550][T26443] ? __fget_files+0x2a/0x420 [ 1137.995576][T26443] ? __fget_files+0x3a0/0x420 [ 1137.995611][T26443] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1137.995632][T26443] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1137.995660][T26443] ? __pfx_ksys_write+0x10/0x10 [ 1137.995698][T26443] do_syscall_64+0x14d/0xf80 [ 1137.995715][T26443] ? trace_irq_disable+0x3b/0x150 [ 1137.995738][T26443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.995755][T26443] ? clear_bhb_loop+0x40/0x90 [ 1137.995778][T26443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.995797][T26443] RIP: 0033:0x7fb0ca19c799 [ 1137.995815][T26443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1137.995830][T26443] RSP: 002b:00007fb0cafe4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1137.995851][T26443] RAX: ffffffffffffffda RBX: 00007fb0ca415fa0 RCX: 00007fb0ca19c799 [ 1137.995865][T26443] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1137.995877][T26443] RBP: 00007fb0cafe4090 R08: 0000000000000000 R09: 0000000000000000 [ 1137.995890][T26443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1137.995901][T26443] R13: 00007fb0ca416038 R14: 00007fb0ca415fa0 R15: 00007fff82517c38 [ 1137.995932][T26443] [ 1138.336514][T26447] sctp: [Deprecated]: syz.2.6754 (pid 26447) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1138.336514][T26447] Use struct sctp_sack_info instead [ 1138.470204][ T5829] Bluetooth: hci3: command 0x0406 tx timeout [ 1138.805446][T26472] netlink: 'syz.6.6760': attribute type 39 has an invalid length. [ 1139.378385][T26488] netlink: 'syz.7.6766': attribute type 10 has an invalid length. [ 1139.406394][T26488] geneve0: entered promiscuous mode [ 1139.422720][T26488] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1139.569755][T26497] FAULT_INJECTION: forcing a failure. [ 1139.569755][T26497] name failslab, interval 1, probability 0, space 0, times 0 [ 1139.589737][T26497] CPU: 1 UID: 0 PID: 26497 Comm: syz.3.6768 Not tainted syzkaller #0 PREEMPT(full) [ 1139.589765][T26497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1139.589777][T26497] Call Trace: [ 1139.589787][T26497] [ 1139.589798][T26497] dump_stack_lvl+0xe8/0x150 [ 1139.589837][T26497] should_fail_ex+0x412/0x560 [ 1139.589883][T26497] should_failslab+0xa8/0x100 [ 1139.589918][T26497] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1139.589945][T26497] ? __alloc_skb+0x186/0x7d0 [ 1139.589974][T26497] ? __alloc_skb+0x1d0/0x7d0 [ 1139.589998][T26497] ? __local_bh_enable_ip+0xd0/0x130 [ 1139.590041][T26497] __alloc_skb+0x1d0/0x7d0 [ 1139.590087][T26497] netlink_sendmsg+0x5d4/0xb40 [ 1139.590145][T26497] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1139.590184][T26497] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1139.590219][T26497] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1139.590253][T26497] ____sys_sendmsg+0x972/0x9f0 [ 1139.590277][T26497] ? __pfx_perf_trace_lock+0x10/0x10 [ 1139.590327][T26497] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1139.590380][T26497] ? import_iovec+0x73/0xa0 [ 1139.590424][T26497] ___sys_sendmsg+0x2a5/0x360 [ 1139.590448][T26497] ? perf_trace_run_bpf_submit+0xee/0x170 [ 1139.590481][T26497] ? __pfx____sys_sendmsg+0x10/0x10 [ 1139.590568][T26497] ? __fget_files+0x2a/0x420 [ 1139.590631][T26497] ? __fget_files+0x2a/0x420 [ 1139.590658][T26497] ? __fget_files+0x3a0/0x420 [ 1139.590727][T26497] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1139.590760][T26497] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1139.590813][T26497] ? __pfx_ksys_write+0x10/0x10 [ 1139.590873][T26497] do_syscall_64+0x14d/0xf80 [ 1139.590893][T26497] ? trace_irq_disable+0x3b/0x150 [ 1139.590920][T26497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.590943][T26497] ? clear_bhb_loop+0x40/0x90 [ 1139.590977][T26497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.590997][T26497] RIP: 0033:0x7fde3d99c799 [ 1139.591021][T26497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1139.591038][T26497] RSP: 002b:00007fde3e91d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1139.591058][T26497] RAX: ffffffffffffffda RBX: 00007fde3dc15fa0 RCX: 00007fde3d99c799 [ 1139.591072][T26497] RDX: 0000000000000840 RSI: 0000200000000340 RDI: 0000000000000004 [ 1139.591084][T26497] RBP: 00007fde3e91d090 R08: 0000000000000000 R09: 0000000000000000 [ 1139.591096][T26497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1139.591107][T26497] R13: 00007fde3dc16038 R14: 00007fde3dc15fa0 R15: 00007ffd38c48f78 [ 1139.591172][T26497] [ 1140.066768][T26511] sctp: [Deprecated]: syz.3.6773 (pid 26511) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1140.066768][T26511] Use struct sctp_sack_info instead [ 1144.700998][T26550] __nla_validate_parse: 10 callbacks suppressed [ 1144.701022][T26550] netlink: 306 bytes leftover after parsing attributes in process `syz.0.6787'. [ 1144.807583][T26554] netlink: 'syz.3.6791': attribute type 10 has an invalid length. [ 1144.891212][T26554] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6791'. [ 1145.047319][T26559] netlink: 'syz.0.6792': attribute type 2 has an invalid length. [ 1145.059100][T26559] netlink: 4056 bytes leftover after parsing attributes in process `syz.0.6792'. [ 1145.280925][ T30] audit: type=1107 audit(1773414327.146:3): pid=26566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1145.346881][T26569] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6797'. [ 1145.535091][T26572] netlink: 680 bytes leftover after parsing attributes in process `syz.3.6798'. [ 1145.752594][T26586] netlink: 'syz.0.6803': attribute type 16 has an invalid length. [ 1145.793024][T26586] netlink: 'syz.0.6803': attribute type 17 has an invalid length. [ 1145.810599][T26586] lo: entered promiscuous mode [ 1145.826285][T26586] tunl0: entered promiscuous mode [ 1145.844142][T26586] gre0: entered promiscuous mode [ 1145.857170][T26586] gretap0: entered promiscuous mode [ 1145.900054][T26586] ip_vti0: entered promiscuous mode [ 1145.923385][T26586] ip6_vti0: entered promiscuous mode [ 1145.951146][T26586] sit0: entered promiscuous mode [ 1145.979897][T26586] ip6tnl0: entered promiscuous mode [ 1145.999400][T26586] ip6gre0: entered promiscuous mode [ 1146.015547][T26586] syz_tun: entered promiscuous mode [ 1146.146995][T26586] ip6gretap0: entered promiscuous mode [ 1146.154884][T26586] bridge0: port 3(erspan0) entered blocking state [ 1146.161475][T26586] bridge0: port 3(erspan0) entered forwarding state [ 1146.251149][T26586] bridge0: entered promiscuous mode [ 1146.276382][T26586] vcan0: entered promiscuous mode [ 1146.283537][T26586] team0: entered promiscuous mode [ 1146.288782][T26586] team_slave_1: entered promiscuous mode [ 1146.296476][T26586] 8021q: adding VLAN 0 to HW filter on device team0 [ 1146.304960][T26586] ªªªªª4: entered promiscuous mode [ 1146.313408][T26586] nlmon0: entered promiscuous mode [ 1148.510462][T26586] caif0: entered promiscuous mode [ 1148.518074][T26586] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1148.542161][ T5891] lo speed is unknown, defaulting to 1000 [ 1148.551936][ T5891] syz1: Port: 1 Link ACTIVE [ 1148.728752][T26603] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6809'. [ 1148.747433][T26607] netlink: 'syz.3.6810': attribute type 2 has an invalid length. [ 1148.756247][T26607] netlink: 4056 bytes leftover after parsing attributes in process `syz.3.6810'. [ 1148.863536][T26611] netlink: 'syz.2.6811': attribute type 1 has an invalid length. [ 1148.881703][T26611] netlink: 2088 bytes leftover after parsing attributes in process `syz.2.6811'. [ 1148.929157][T26612] lo speed is unknown, defaulting to 1000 [ 1149.087575][T26618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6814'. [ 1149.156756][T26618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6814'. [ 1149.634172][T26625] netlink: 'syz.6.6817': attribute type 11 has an invalid length. [ 1149.642065][T26625] netlink: 'syz.6.6817': attribute type 11 has an invalid length. [ 1149.758651][T26623] __nla_validate_parse: 1 callbacks suppressed [ 1149.758722][T26623] netlink: 306 bytes leftover after parsing attributes in process `syz.0.6816'. [ 1152.962420][T26643] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6823'. [ 1153.152770][T22513] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 1153.171930][T26649] netlink: 'syz.0.6825': attribute type 7 has an invalid length. [ 1153.214359][T26649] netlink: 'syz.0.6825': attribute type 8 has an invalid length. [ 1153.577548][T26657] netlink: 'syz.3.6828': attribute type 2 has an invalid length. [ 1153.599148][T26657] netlink: 4056 bytes leftover after parsing attributes in process `syz.3.6828'. [ 1156.544923][T26670] netlink: 'syz.3.6829': attribute type 39 has an invalid length. [ 1159.797883][T26688] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6836'. [ 1159.898513][T26687] netlink: 306 bytes leftover after parsing attributes in process `syz.2.6835'. [ 1160.042418][T26699] netlink: 'syz.6.6839': attribute type 2 has an invalid length. [ 1160.064397][T26699] netlink: 4056 bytes leftover after parsing attributes in process `syz.6.6839'. [ 1160.107149][T26691] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.6837'. [ 1160.904370][T26712] netlink: 306 bytes leftover after parsing attributes in process `syz.3.6845'. [ 1161.061561][T26719] netlink: 'syz.6.6847': attribute type 1 has an invalid length. [ 1161.072858][T26722] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6849'. [ 1161.091902][T26722] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6849'. [ 1161.166212][T26725] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6850'. [ 1161.239820][T26719] netlink: 680 bytes leftover after parsing attributes in process `syz.6.6847'. [ 1161.341002][T26730] FAULT_INJECTION: forcing a failure. [ 1161.341002][T26730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1161.369809][T26730] CPU: 1 UID: 0 PID: 26730 Comm: syz.3.6851 Not tainted syzkaller #0 PREEMPT(full) [ 1161.369836][T26730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1161.369849][T26730] Call Trace: [ 1161.369857][T26730] [ 1161.369866][T26730] dump_stack_lvl+0xe8/0x150 [ 1161.369897][T26730] should_fail_ex+0x412/0x560 [ 1161.369925][T26730] _copy_from_iter+0x1d3/0x1670 [ 1161.369954][T26730] ? rcu_is_watching+0x15/0xb0 [ 1161.369986][T26730] ? __pfx__copy_from_iter+0x10/0x10 [ 1161.370018][T26730] ? netlink_sendmsg+0x650/0xb40 [ 1161.370041][T26730] ? skb_put+0x11b/0x210 [ 1161.370070][T26730] netlink_sendmsg+0x6c0/0xb40 [ 1161.370100][T26730] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1161.370135][T26730] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1161.370160][T26730] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1161.370186][T26730] ____sys_sendmsg+0x972/0x9f0 [ 1161.370213][T26730] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1161.370239][T26730] ? import_iovec+0x73/0xa0 [ 1161.370268][T26730] ___sys_sendmsg+0x2a5/0x360 [ 1161.370292][T26730] ? __pfx____sys_sendmsg+0x10/0x10 [ 1161.370343][T26730] ? __fget_files+0x2a/0x420 [ 1161.370368][T26730] ? __fget_files+0x3a0/0x420 [ 1161.370403][T26730] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1161.370424][T26730] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1161.370441][T26730] ? perf_trace_preemptirq_template+0xb2/0x350 [ 1161.370477][T26730] ? rcu_is_watching+0x15/0xb0 [ 1161.370513][T26730] do_syscall_64+0x14d/0xf80 [ 1161.370530][T26730] ? trace_irq_disable+0x3b/0x150 [ 1161.370554][T26730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.370573][T26730] ? clear_bhb_loop+0x40/0x90 [ 1161.370596][T26730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.370614][T26730] RIP: 0033:0x7fde3d99c799 [ 1161.370632][T26730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1161.370649][T26730] RSP: 002b:00007fde3e91d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1161.370669][T26730] RAX: ffffffffffffffda RBX: 00007fde3dc15fa0 RCX: 00007fde3d99c799 [ 1161.370683][T26730] RDX: 0000000004000010 RSI: 00002000000007c0 RDI: 0000000000000003 [ 1161.370695][T26730] RBP: 00007fde3e91d090 R08: 0000000000000000 R09: 0000000000000000 [ 1161.370707][T26730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1161.370718][T26730] R13: 00007fde3dc16038 R14: 00007fde3dc15fa0 R15: 00007ffd38c48f78 [ 1161.370747][T26730] [ 1161.751313][T26738] netlink: 306 bytes leftover after parsing attributes in process `syz.2.6853'. [ 1164.237386][T26754] netlink: 'syz.7.6857': attribute type 2 has an invalid length. [ 1164.492756][T26759] netlink: 'syz.3.6859': attribute type 10 has an invalid length. [ 1164.593629][T26766] netem: invalid attributes len -21 [ 1164.608120][T26766] netem: change failed [ 1164.657339][T26766] netlink: 'syz.6.6862': attribute type 1 has an invalid length. [ 1164.790297][T26776] netlink: 'syz.7.6867': attribute type 1 has an invalid length. [ 1164.929002][T26776] __nla_validate_parse: 5 callbacks suppressed [ 1164.929035][T26776] netlink: 680 bytes leftover after parsing attributes in process `syz.7.6867'. [ 1164.965637][T26782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6869'. [ 1167.851777][T26788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6870'. [ 1167.914695][T26788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6870'. [ 1167.957184][T26788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6870'. [ 1168.364251][T26804] netlink: 'syz.7.6877': attribute type 2 has an invalid length. [ 1168.380514][T26804] netlink: 4056 bytes leftover after parsing attributes in process `syz.7.6877'. [ 1168.501442][T26807] netlink: 'syz.0.6878': attribute type 10 has an invalid length. [ 1168.511553][T26807] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6878'. [ 1168.655807][T26811] netlink: 'syz.6.6880': attribute type 13 has an invalid length. [ 1168.689773][T26811] netlink: 164 bytes leftover after parsing attributes in process `syz.6.6880'. [ 1168.708605][T26811] syz_tun: refused to change device tx_queue_len [ 1168.734689][T26817] netlink: 'syz.6.6880': attribute type 2 has an invalid length. [ 1168.784553][T26817] netlink: 'syz.6.6880': attribute type 8 has an invalid length. [ 1168.793666][T26811] netlink: 'syz.6.6880': attribute type 64 has an invalid length. [ 1168.823089][T26817] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6880'. [ 1169.133469][T26828] netlink: 164 bytes leftover after parsing attributes in process `syz.7.6885'. [ 1171.950137][T26845] __nla_validate_parse: 1 callbacks suppressed [ 1171.950156][T26845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6890'. [ 1172.098909][T26849] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6893'. [ 1172.129786][T26853] netlink: 'syz.2.6895': attribute type 2 has an invalid length. [ 1172.130104][T26849] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6893'. [ 1172.142703][T26853] netlink: 4056 bytes leftover after parsing attributes in process `syz.2.6895'. [ 1172.162042][T26847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6892'. [ 1172.181724][T26849] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6893'. [ 1173.137954][T26874] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1173.161572][T26874] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1173.704665][T26889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6905'. [ 1174.016800][T26896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6907'. [ 1174.037204][T26892] netlink: 126588 bytes leftover after parsing attributes in process `syz.7.6906'. [ 1174.341097][T26910] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6911'. [ 1175.084729][T26936] netlink: 'syz.0.6924': attribute type 11 has an invalid length. [ 1175.931077][T26966] sctp: [Deprecated]: syz.6.6936 (pid 26966) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1175.931077][T26966] Use struct sctp_sack_info instead [ 1176.970772][T26991] __nla_validate_parse: 9 callbacks suppressed [ 1176.970792][T26991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6945'. [ 1177.109496][T26987] netlink: 164 bytes leftover after parsing attributes in process `syz.7.6942'. [ 1177.188440][T26983] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6939'. [ 1177.725734][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.732974][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.749808][T26997] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6946'. [ 1178.162769][T27018] sctp: [Deprecated]: syz.0.6953 (pid 27018) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1178.162769][T27018] Use struct sctp_sack_info instead [ 1178.255110][T27018] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6953'. [ 1179.135377][T27030] netlink: 164 bytes leftover after parsing attributes in process `syz.7.6958'. [ 1179.862405][T27062] netlink: 2 bytes leftover after parsing attributes in process `syz.6.6969'. [ 1179.874670][T27062] netlink: 'syz.6.6969': attribute type 39 has an invalid length. [ 1180.100214][T27071] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1180.136474][T27071] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1180.146683][T27074] netlink: 306 bytes leftover after parsing attributes in process `syz.3.6974'. [ 1180.496311][T27083] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6975'. [ 1180.798627][T27094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6981'. [ 1180.919558][T27106] netlink: 'syz.3.6986': attribute type 39 has an invalid length. [ 1180.971370][T27108] netdevsim netdevsim6 : renamed from netdevsim0 (while UP) [ 1181.540494][T27135] netlink: 'syz.7.6993': attribute type 2 has an invalid length. [ 1182.251462][T27143] netlink: 'syz.6.6998': attribute type 10 has an invalid length. [ 1182.261941][T27143] __nla_validate_parse: 5 callbacks suppressed [ 1182.261973][T27143] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6998'. [ 1182.846225][T27165] netlink: 306 bytes leftover after parsing attributes in process `syz.6.7008'. [ 1183.225499][T27177] netlink: 'syz.2.7010': attribute type 10 has an invalid length. [ 1183.240396][T27180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7013'. [ 1183.982189][T27192] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 1184.014981][T27195] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7016'. [ 1184.070307][T27197] netlink: 'syz.6.7017': attribute type 5 has an invalid length. [ 1184.080530][T27197] netlink: 14 bytes leftover after parsing attributes in process `syz.6.7017'. [ 1184.695828][T27224] netlink: 306 bytes leftover after parsing attributes in process `syz.6.7028'. [ 1184.718898][T27226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7029'. [ 1184.737431][T27227] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7027'. [ 1184.803781][T27229] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 1185.062204][T27234] netlink: 'syz.7.7032': attribute type 2 has an invalid length. [ 1185.071986][T27234] netlink: 4056 bytes leftover after parsing attributes in process `syz.7.7032'. [ 1185.117281][T27240] netlink: 'syz.6.7035': attribute type 2 has an invalid length. [ 1185.152602][T27240] netlink: 4056 bytes leftover after parsing attributes in process `syz.6.7035'. [ 1186.739282][T27276] netlink: 'syz.0.7047': attribute type 2 has an invalid length. [ 1187.327818][T27303] netlink: 'syz.2.7055': attribute type 10 has an invalid length. [ 1187.571953][T27309] __nla_validate_parse: 7 callbacks suppressed [ 1187.571978][T27309] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7059'. [ 1187.889595][T27314] netlink: 'syz.7.7061': attribute type 2 has an invalid length. [ 1187.939859][T27314] netlink: 4056 bytes leftover after parsing attributes in process `syz.7.7061'. [ 1188.098813][T27315] netlink: 306 bytes leftover after parsing attributes in process `syz.2.7062'. [ 1189.338014][T27350] netlink: 'syz.2.7073': attribute type 2 has an invalid length. [ 1189.346383][T27350] netlink: 4056 bytes leftover after parsing attributes in process `syz.2.7073'. [ 1190.339071][T27378] sctp: [Deprecated]: syz.2.7081 (pid 27378) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1190.339071][T27378] Use struct sctp_sack_info instead [ 1190.392591][T27378] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7081'. [ 1190.711547][T27388] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.7087'. [ 1190.783742][T27392] netlink: 'syz.0.7089': attribute type 11 has an invalid length. [ 1190.791630][T27392] netlink: 174116 bytes leftover after parsing attributes in process `syz.0.7089'. [ 1191.596326][T27406] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 1192.208220][T27425] netlink: 'syz.6.7102': attribute type 11 has an invalid length. [ 1192.308129][T27425] netlink: 174116 bytes leftover after parsing attributes in process `syz.6.7102'. [ 1192.595208][T27440] sctp: [Deprecated]: syz.6.7106 (pid 27440) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1192.595208][T27440] Use struct sctp_sack_info instead [ 1192.635729][T27436] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 1192.661729][T27440] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7106'. [ 1193.045571][T27456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7115'. [ 1193.060843][T27456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7115'. [ 1193.114689][T27456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7115'. [ 1193.297844][T27460] netlink: 'syz.2.7116': attribute type 11 has an invalid length. [ 1193.328774][T27460] netlink: 174116 bytes leftover after parsing attributes in process `syz.2.7116'. [ 1193.685853][T27473] netlink: 164 bytes leftover after parsing attributes in process `syz.7.7120'. [ 1193.739654][T27476] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 1193.980146][T27482] netlink: 'syz.3.7123': attribute type 10 has an invalid length. [ 1194.217182][T27490] netlink: 'syz.2.7128': attribute type 11 has an invalid length. [ 1194.273516][T27490] netlink: 172320 bytes leftover after parsing attributes in process `syz.2.7128'. [ 1194.587790][T27495] sctp: [Deprecated]: syz.2.7129 (pid 27495) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1194.587790][T27495] Use struct sctp_sack_info instead [ 1194.664981][T27499] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7129'. [ 1194.931316][T27507] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 1194.997595][T27509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7136'. [ 1195.070414][T27509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7136'. [ 1195.331928][T27516] netlink: 'syz.0.7139': attribute type 11 has an invalid length. [ 1195.503443][T27525] netlink: 'syz.7.7141': attribute type 10 has an invalid length. [ 1196.671415][T27547] netlink: 'syz.0.7148': attribute type 10 has an invalid length. [ 1197.361688][T27559] sctp: [Deprecated]: syz.2.7154 (pid 27559) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1197.361688][T27559] Use struct sctp_sack_info instead [ 1197.795971][T27573] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1197.837815][T27573] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1197.856733][T27574] netlink: 'syz.0.7160': attribute type 10 has an invalid length. [ 1198.618059][T27585] __nla_validate_parse: 12 callbacks suppressed [ 1198.618112][T27585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7165'. [ 1198.675923][T27585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7165'. [ 1198.719611][T27585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7165'. [ 1199.095293][T27596] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1199.455704][T27600] FAULT_INJECTION: forcing a failure. [ 1199.455704][T27600] name failslab, interval 1, probability 0, space 0, times 0 [ 1199.525392][T27600] CPU: 1 UID: 0 PID: 27600 Comm: syz.3.7168 Not tainted syzkaller #0 PREEMPT(full) [ 1199.525420][T27600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1199.525432][T27600] Call Trace: [ 1199.525441][T27600] [ 1199.525449][T27600] dump_stack_lvl+0xe8/0x150 [ 1199.525481][T27600] should_fail_ex+0x412/0x560 [ 1199.525511][T27600] should_failslab+0xa8/0x100 [ 1199.525537][T27600] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1199.525558][T27600] ? __alloc_skb+0x186/0x7d0 [ 1199.525582][T27600] ? __alloc_skb+0x1d0/0x7d0 [ 1199.525605][T27600] ? __local_bh_enable_ip+0xd0/0x130 [ 1199.525634][T27600] __alloc_skb+0x1d0/0x7d0 [ 1199.525663][T27600] netlink_sendmsg+0x5d4/0xb40 [ 1199.525697][T27600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1199.525725][T27600] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1199.525750][T27600] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1199.525798][T27600] ____sys_sendmsg+0x972/0x9f0 [ 1199.525817][T27600] ? __pfx_perf_trace_lock+0x10/0x10 [ 1199.525849][T27600] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1199.525882][T27600] ? import_iovec+0x73/0xa0 [ 1199.525913][T27600] ___sys_sendmsg+0x2a5/0x360 [ 1199.525937][T27600] ? __pfx____sys_sendmsg+0x10/0x10 [ 1199.525976][T27600] ? __fget_files+0x2a/0x420 [ 1199.526011][T27600] ? __fget_files+0x2a/0x420 [ 1199.526036][T27600] ? __fget_files+0x3a0/0x420 [ 1199.526071][T27600] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1199.526093][T27600] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1199.526109][T27600] ? perf_trace_preemptirq_template+0xb2/0x350 [ 1199.526145][T27600] ? __pfx_ksys_write+0x10/0x10 [ 1199.526176][T27600] do_syscall_64+0x14d/0xf80 [ 1199.526195][T27600] ? trace_irq_disable+0x3b/0x150 [ 1199.526219][T27600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.526238][T27600] ? clear_bhb_loop+0x40/0x90 [ 1199.526260][T27600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.526279][T27600] RIP: 0033:0x7fde3d99c799 [ 1199.526297][T27600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1199.526314][T27600] RSP: 002b:00007fde3e91d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1199.526334][T27600] RAX: ffffffffffffffda RBX: 00007fde3dc15fa0 RCX: 00007fde3d99c799 [ 1199.526348][T27600] RDX: 0000000000004040 RSI: 0000200000000100 RDI: 0000000000000005 [ 1199.526361][T27600] RBP: 00007fde3e91d090 R08: 0000000000000000 R09: 0000000000000000 [ 1199.526372][T27600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1199.526384][T27600] R13: 00007fde3dc16038 R14: 00007fde3dc15fa0 R15: 00007ffd38c48f78 [ 1199.526417][T27600] [ 1199.982016][T27609] sctp: [Deprecated]: syz.2.7172 (pid 27609) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1199.982016][T27609] Use struct sctp_sack_info instead [ 1200.068861][T27608] netlink: 'syz.0.7173': attribute type 10 has an invalid length. [ 1200.118145][T27609] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7172'. [ 1200.166453][T27614] netlink: 'syz.7.7174': attribute type 10 has an invalid length. [ 1200.851517][T27624] netlink: 'syz.7.7179': attribute type 10 has an invalid length. [ 1200.931683][T27624] netlink: 156 bytes leftover after parsing attributes in process `syz.7.7179'. [ 1201.208454][T27628] netlink: 306 bytes leftover after parsing attributes in process `syz.2.7181'. [ 1201.365374][T27638] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7183'. [ 1201.615322][T27646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7188'. [ 1201.641430][T27648] netlink: 'syz.2.7189': attribute type 1 has an invalid length. [ 1201.649928][T27648] netlink: 'syz.2.7189': attribute type 2 has an invalid length. [ 1201.658880][T27648] netlink: 'syz.2.7189': attribute type 1 has an invalid length. [ 1201.667313][T27648] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7189'. [ 1201.848165][T27658] sctp: [Deprecated]: syz.2.7191 (pid 27658) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1201.848165][T27658] Use struct sctp_sack_info instead [ 1201.864913][T27651] netlink: 164 bytes leftover after parsing attributes in process `syz.6.7190'. [ 1202.916145][T27696] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1202.925078][T27696] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1203.439620][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1203.451719][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1203.460428][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1203.478127][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1203.491350][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1203.580188][T27706] lo speed is unknown, defaulting to 1000 [ 1203.621774][T27711] netlink: 'syz.2.7213': attribute type 10 has an invalid length. [ 1203.638990][T27711] team0: Device vxcan1 is of different type [ 1203.649032][T27715] sctp: [Deprecated]: syz.7.7214 (pid 27715) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1203.649032][T27715] Use struct sctp_sack_info instead [ 1203.737043][T27715] __nla_validate_parse: 4 callbacks suppressed [ 1203.737063][T27715] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7214'. [ 1203.801631][T27719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7215'. [ 1203.956575][T27722] FAULT_INJECTION: forcing a failure. [ 1203.956575][T27722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1203.970150][T27722] CPU: 0 UID: 0 PID: 27722 Comm: syz.3.7217 Not tainted syzkaller #0 PREEMPT(full) [ 1203.970175][T27722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1203.970187][T27722] Call Trace: [ 1203.970196][T27722] [ 1203.970204][T27722] dump_stack_lvl+0xe8/0x150 [ 1203.970237][T27722] should_fail_ex+0x412/0x560 [ 1203.970269][T27722] _copy_from_user+0x2d/0xb0 [ 1203.970298][T27722] sctp_setsockopt+0x1c4/0x12c0 [ 1203.970326][T27722] ? sock_common_setsockopt+0x36/0xc0 [ 1203.970350][T27722] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1203.970377][T27722] do_sock_setsockopt+0x17c/0x1b0 [ 1203.970412][T27722] __x64_sys_setsockopt+0x13d/0x1b0 [ 1203.970454][T27722] do_syscall_64+0x14d/0xf80 [ 1203.970473][T27722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.970493][T27722] ? clear_bhb_loop+0x40/0x90 [ 1203.970518][T27722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.970536][T27722] RIP: 0033:0x7fde3d99c799 [ 1203.970554][T27722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1203.970569][T27722] RSP: 002b:00007fde3e91d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1203.970590][T27722] RAX: ffffffffffffffda RBX: 00007fde3dc15fa0 RCX: 00007fde3d99c799 [ 1203.970604][T27722] RDX: 0000000000000003 RSI: 0000000000000084 RDI: 0000000000000004 [ 1203.970615][T27722] RBP: 00007fde3e91d090 R08: 0000000000000004 R09: 0000000000000000 [ 1203.970628][T27722] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1203.970640][T27722] R13: 00007fde3dc16038 R14: 00007fde3dc15fa0 R15: 00007ffd38c48f78 [ 1203.970676][T27722] [ 1204.371588][T27706] chnl_net:caif_netlink_parms(): no params data found [ 1204.396882][T27730] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7220'. [ 1204.412168][T27734] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1204.422856][T27734] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1205.574589][T22513] Bluetooth: hci1: command tx timeout [ 1205.836124][T27706] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.868417][T27706] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.883269][T27706] bridge_slave_0: entered allmulticast mode [ 1205.891262][T27706] bridge_slave_0: entered promiscuous mode [ 1205.903401][T27706] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.910834][T27706] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.931274][T27706] bridge_slave_1: entered allmulticast mode [ 1205.943184][T27706] bridge_slave_1: entered promiscuous mode [ 1205.996727][T27706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1206.009784][T27706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1206.113708][T27706] team0: Port device team_slave_0 added [ 1206.122357][T27706] team0: Port device team_slave_1 added [ 1206.182503][T27706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1206.192557][T27706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1206.222770][T27706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1206.236185][T27706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1206.251856][T27706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1206.298842][T27706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1206.363531][T27764] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7229'. [ 1206.446702][T27764] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7229'. [ 1206.528786][T27706] hsr_slave_0: entered promiscuous mode [ 1206.548232][T27706] hsr_slave_1: entered promiscuous mode [ 1206.561117][T27706] debugfs: 'hsr0' already exists in 'hsr' [ 1206.571601][T27706] Cannot create hsr debugfs directory [ 1206.651364][T27778] sctp: [Deprecated]: syz.0.7232 (pid 27778) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1206.651364][T27778] Use struct sctp_sack_info instead [ 1206.707454][T27778] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7232'. [ 1206.845783][T27784] FAULT_INJECTION: forcing a failure. [ 1206.845783][T27784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1206.860953][T27784] CPU: 0 UID: 0 PID: 27784 Comm: syz.7.7236 Not tainted syzkaller #0 PREEMPT(full) [ 1206.860979][T27784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1206.860991][T27784] Call Trace: [ 1206.860999][T27784] [ 1206.861008][T27784] dump_stack_lvl+0xe8/0x150 [ 1206.861041][T27784] should_fail_ex+0x412/0x560 [ 1206.861073][T27784] _copy_from_user+0x2d/0xb0 [ 1206.861102][T27784] ___sys_sendmsg+0x1c6/0x360 [ 1206.861139][T27784] ? __pfx____sys_sendmsg+0x10/0x10 [ 1206.861185][T27784] ? __fget_files+0x2a/0x420 [ 1206.861225][T27784] ? __fget_files+0x2a/0x420 [ 1206.861250][T27784] ? __fget_files+0x3a0/0x420 [ 1206.861289][T27784] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1206.861312][T27784] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1206.861343][T27784] ? __pfx_ksys_write+0x10/0x10 [ 1206.861381][T27784] do_syscall_64+0x14d/0xf80 [ 1206.861398][T27784] ? trace_irq_disable+0x3b/0x150 [ 1206.861423][T27784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.861443][T27784] ? clear_bhb_loop+0x40/0x90 [ 1206.861467][T27784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.861486][T27784] RIP: 0033:0x7f005899c799 [ 1206.861504][T27784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1206.861520][T27784] RSP: 002b:00007f0059903028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1206.861541][T27784] RAX: ffffffffffffffda RBX: 00007f0058c15fa0 RCX: 00007f005899c799 [ 1206.861555][T27784] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1206.861567][T27784] RBP: 00007f0059903090 R08: 0000000000000000 R09: 0000000000000000 [ 1206.861579][T27784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1206.861590][T27784] R13: 00007f0058c16038 R14: 00007f0058c15fa0 R15: 00007ffed00c0358 [ 1206.861625][T27784] [ 1207.508983][T27706] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1207.611614][T27706] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1207.627813][T27706] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1207.642448][T27706] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1207.653936][T22513] Bluetooth: hci1: command tx timeout [ 1207.719976][T27805] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7242'. [ 1207.749932][T27805] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7242'. [ 1207.854254][T27810] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1207.888096][T27812] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7241'. [ 1207.905842][T27814] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1208.082586][T27706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1208.192549][T27706] 8021q: adding VLAN 0 to HW filter on device team0 [ 1208.251772][T14759] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.259024][T14759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1208.289276][T14759] bridge0: port 2(bridge_slave_1) entered blocking state [ 1208.296593][T14759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1208.890019][T27706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1209.298172][T27858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7256'. [ 1209.326814][T27857] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7257'. [ 1209.477502][T27706] veth0_vlan: entered promiscuous mode [ 1209.497124][T27871] netlink: 'syz.0.7261': attribute type 11 has an invalid length. [ 1209.498385][T27706] veth1_vlan: entered promiscuous mode [ 1209.515865][T27871] netlink: 'syz.0.7261': attribute type 11 has an invalid length. [ 1209.566476][T27706] veth0_macvtap: entered promiscuous mode [ 1209.580342][T27706] veth1_macvtap: entered promiscuous mode [ 1209.608427][T27706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1209.637096][T27706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1209.667367][ T36] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.677633][ T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.734096][T22513] Bluetooth: hci1: command tx timeout [ 1209.755501][ T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.810557][ T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.913336][T27877] netlink: 6 bytes leftover after parsing attributes in process `syz.0.7263'. [ 1210.120811][T27876] netlink: 'syz.0.7263': attribute type 2 has an invalid length. [ 1210.357964][T27875] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7262'. [ 1210.492784][T27888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7266'. [ 1210.645993][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1210.683653][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1210.690634][T27897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7269'. [ 1210.763752][T27898] netlink: 18187 bytes leftover after parsing attributes in process `syz.3.7270'. [ 1210.793933][T27899] openvswitch: netlink: Message has 16 unknown bytes. [ 1210.828392][T22732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1210.849418][T22732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1211.045597][T27904] netlink: 'syz.0.7272': attribute type 10 has an invalid length. [ 1211.064660][T27904] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7272'. [ 1211.122475][T27906] netlink: 'syz.8.7208': attribute type 10 has an invalid length. [ 1211.168161][T27906] team0: Device vxcan1 is of different type [ 1211.775595][T27924] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7280'. [ 1211.813291][T22513] Bluetooth: hci1: command tx timeout [ 1211.828252][T27926] netlink: 'syz.3.7281': attribute type 1 has an invalid length. [ 1211.928209][T27926] netlink: 680 bytes leftover after parsing attributes in process `syz.3.7281'. [ 1212.955560][T27967] netlink: 'syz.7.7296': attribute type 10 has an invalid length. [ 1213.109000][T27965] netlink: 'syz.2.7298': attribute type 3 has an invalid length. [ 1213.934806][T27987] FAULT_INJECTION: forcing a failure. [ 1213.934806][T27987] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.947670][T27987] CPU: 0 UID: 0 PID: 27987 Comm: syz.3.7304 Not tainted syzkaller #0 PREEMPT(full) [ 1213.947697][T27987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1213.947709][T27987] Call Trace: [ 1213.947717][T27987] [ 1213.947724][T27987] dump_stack_lvl+0xe8/0x150 [ 1213.947771][T27987] should_fail_ex+0x412/0x560 [ 1213.947829][T27987] should_failslab+0xa8/0x100 [ 1213.947869][T27987] __kmalloc_noprof+0xe8/0x760 [ 1213.947903][T27987] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1213.947958][T27987] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1213.948020][T27987] genl_family_rcv_msg_doit+0xd9/0x330 [ 1213.948079][T27987] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1213.948125][T27987] ? __pfx_genl_get_cmd+0x10/0x10 [ 1213.948147][T27987] ? __pfx_ovs_flow_cmd_get+0x10/0x10 [ 1213.948228][T27987] ? __pfx_ovs_flow_cmd_dump+0x10/0x10 [ 1213.948321][T27987] genl_rcv_msg+0x61c/0x7a0 [ 1213.948384][T27987] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1213.948410][T27987] ? __pfx_ovs_flow_cmd_get+0x10/0x10 [ 1213.948446][T27987] ? __lock_acquire+0x6b5/0x2cf0 [ 1213.948537][T27987] netlink_rcv_skb+0x232/0x4b0 [ 1213.948580][T27987] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1213.948619][T27987] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1213.948733][T27987] ? down_read+0x272/0x2e0 [ 1213.948755][T27987] ? genl_rcv+0xd/0x40 [ 1213.948790][T27987] genl_rcv+0x28/0x40 [ 1213.948813][T27987] netlink_unicast+0x80f/0x9b0 [ 1213.948882][T27987] ? __pfx_netlink_unicast+0x10/0x10 [ 1213.948923][T27987] ? netlink_sendmsg+0x650/0xb40 [ 1213.948947][T27987] ? skb_put+0x11b/0x210 [ 1213.949001][T27987] netlink_sendmsg+0x813/0xb40 [ 1213.949076][T27987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1213.949127][T27987] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1213.949169][T27987] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1213.949215][T27987] ____sys_sendmsg+0x972/0x9f0 [ 1213.949244][T27987] ? __pfx_perf_trace_lock+0x10/0x10 [ 1213.949305][T27987] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1213.949376][T27987] ? import_iovec+0x73/0xa0 [ 1213.949432][T27987] ___sys_sendmsg+0x2a5/0x360 [ 1213.949498][T27987] ? __pfx____sys_sendmsg+0x10/0x10 [ 1213.949550][T27987] ? trace_call_bpf+0xc2/0xb70 [ 1213.949652][T27987] ? __fget_files+0x2a/0x420 [ 1213.949738][T27987] ? __fget_files+0x2a/0x420 [ 1213.949768][T27987] ? __fget_files+0x3a0/0x420 [ 1213.949852][T27987] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1213.949895][T27987] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1213.949969][T27987] ? __pfx_ksys_write+0x10/0x10 [ 1213.950055][T27987] do_syscall_64+0x14d/0xf80 [ 1213.950077][T27987] ? trace_irq_disable+0x3b/0x150 [ 1213.950103][T27987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.950128][T27987] ? clear_bhb_loop+0x40/0x90 [ 1213.950170][T27987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.950194][T27987] RIP: 0033:0x7fde3d99c799 [ 1213.950222][T27987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1213.950239][T27987] RSP: 002b:00007fde3e91d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1213.950260][T27987] RAX: ffffffffffffffda RBX: 00007fde3dc15fa0 RCX: 00007fde3d99c799 [ 1213.950274][T27987] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1213.950287][T27987] RBP: 00007fde3e91d090 R08: 0000000000000000 R09: 0000000000000000 [ 1213.950299][T27987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1213.950310][T27987] R13: 00007fde3dc16038 R14: 00007fde3dc15fa0 R15: 00007ffd38c48f78 [ 1213.950433][T27987] [ 1214.911063][T28008] netlink: 'syz.8.7312': attribute type 3 has an invalid length. [ 1214.921520][T28008] __nla_validate_parse: 3 callbacks suppressed [ 1214.921541][T28008] netlink: 132 bytes leftover after parsing attributes in process `syz.8.7312'. [ 1215.176159][T28015] netlink: 'syz.7.7314': attribute type 2 has an invalid length. [ 1215.201887][T28015] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7314'. [ 1215.203087][T28017] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7315'. [ 1215.222312][T28015] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7314'. [ 1215.329435][T28019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7316'. [ 1215.391746][T28021] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7317'. [ 1215.440567][T28025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7318'. [ 1215.858358][T28034] FAULT_INJECTION: forcing a failure. [ 1215.858358][T28034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1215.877654][T28034] CPU: 1 UID: 0 PID: 28034 Comm: syz.7.7322 Not tainted syzkaller #0 PREEMPT(full) [ 1215.877682][T28034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1215.877694][T28034] Call Trace: [ 1215.877702][T28034] [ 1215.877711][T28034] dump_stack_lvl+0xe8/0x150 [ 1215.877740][T28034] should_fail_ex+0x412/0x560 [ 1215.877768][T28034] _copy_from_user+0x2d/0xb0 [ 1215.877796][T28034] generic_map_update_batch+0x648/0x990 [ 1215.877833][T28034] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1215.877856][T28034] ? __fget_files+0x2a/0x420 [ 1215.877889][T28034] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1215.877912][T28034] bpf_map_do_batch+0x39b/0x630 [ 1215.877936][T28034] __sys_bpf+0x7c1/0x950 [ 1215.877965][T28034] ? __pfx___sys_bpf+0x10/0x10 [ 1215.878006][T28034] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1215.878032][T28034] ? ksys_write+0x242/0x270 [ 1215.878055][T28034] ? __pfx_ksys_write+0x10/0x10 [ 1215.878082][T28034] __x64_sys_bpf+0x7c/0x90 [ 1215.878108][T28034] do_syscall_64+0x14d/0xf80 [ 1215.878126][T28034] ? trace_irq_disable+0x3b/0x150 [ 1215.878150][T28034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.878169][T28034] ? clear_bhb_loop+0x40/0x90 [ 1215.878192][T28034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.878211][T28034] RIP: 0033:0x7f005899c799 [ 1215.878229][T28034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1215.878245][T28034] RSP: 002b:00007f0059903028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1215.878265][T28034] RAX: ffffffffffffffda RBX: 00007f0058c15fa0 RCX: 00007f005899c799 [ 1215.878285][T28034] RDX: 0000000000000038 RSI: 0000200000000140 RDI: 000000000000001a [ 1215.878297][T28034] RBP: 00007f0059903090 R08: 0000000000000000 R09: 0000000000000000 [ 1215.878309][T28034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1215.878321][T28034] R13: 00007f0058c16038 R14: 00007f0058c15fa0 R15: 00007ffed00c0358 [ 1215.878352][T28034] [ 1216.132274][T28040] netlink: 'syz.3.7325': attribute type 3 has an invalid length. [ 1216.140771][T28040] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7325'. [ 1216.310019][T28052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7330'. [ 1216.330778][T28047] netlink: 'syz.3.7328': attribute type 10 has an invalid length. [ 1216.338718][T28052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7330'. [ 1216.361730][T28047] netlink: 'syz.3.7328': attribute type 1 has an invalid length. [ 1217.373343][T28075] netlink: 'syz.8.7338': attribute type 3 has an invalid length. [ 1217.808044][T28086] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1217.815461][T28086] IPv6: NLM_F_CREATE should be set when creating new route [ 1217.857410][T28084] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1217.961090][T28091] tap0: tun_chr_ioctl cmd 1074025672 [ 1217.966705][T28091] tap0: ignored: set checksum disabled [ 1218.263455][T28106] netlink: 'syz.8.7351': attribute type 3 has an invalid length. [ 1218.436483][T28116] sctp: [Deprecated]: syz.7.7353 (pid 28116) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1218.436483][T28116] Use struct sctp_sack_info instead [ 1218.516016][T28114] openvswitch: : Dropping previously announced user features [ 1218.906323][T28134] FAULT_INJECTION: forcing a failure. [ 1218.906323][T28134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1218.953561][T28134] CPU: 1 UID: 0 PID: 28134 Comm: syz.3.7361 Not tainted syzkaller #0 PREEMPT(full) [ 1218.953588][T28134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1218.953600][T28134] Call Trace: [ 1218.953609][T28134] [ 1218.953617][T28134] dump_stack_lvl+0xe8/0x150 [ 1218.953650][T28134] should_fail_ex+0x412/0x560 [ 1218.953682][T28134] _copy_from_user+0x2d/0xb0 [ 1218.953712][T28134] ___sys_sendmsg+0x1c6/0x360 [ 1218.953741][T28134] ? __pfx____sys_sendmsg+0x10/0x10 [ 1218.953790][T28134] ? __fget_files+0x2a/0x420 [ 1218.953829][T28134] ? __fget_files+0x2a/0x420 [ 1218.953853][T28134] ? __fget_files+0x3a0/0x420 [ 1218.953888][T28134] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1218.953909][T28134] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1218.953926][T28134] ? perf_trace_preemptirq_template+0xb2/0x350 [ 1218.953966][T28134] ? __pfx_ksys_write+0x10/0x10 [ 1218.954001][T28134] do_syscall_64+0x14d/0xf80 [ 1218.954019][T28134] ? trace_irq_disable+0x3b/0x150 [ 1218.954044][T28134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.954064][T28134] ? clear_bhb_loop+0x40/0x90 [ 1218.954089][T28134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.954108][T28134] RIP: 0033:0x7fde3d99c799 [ 1218.954127][T28134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1218.954142][T28134] RSP: 002b:00007fde3e91d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1218.954162][T28134] RAX: ffffffffffffffda RBX: 00007fde3dc15fa0 RCX: 00007fde3d99c799 [ 1218.954176][T28134] RDX: 0000000006004000 RSI: 0000200000000100 RDI: 0000000000000004 [ 1218.954189][T28134] RBP: 00007fde3e91d090 R08: 0000000000000000 R09: 0000000000000000 [ 1218.954201][T28134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1218.954212][T28134] R13: 00007fde3dc16038 R14: 00007fde3dc15fa0 R15: 00007ffd38c48f78 [ 1218.954247][T28134] [ 1219.165503][T28140] nbd: must specify an index to disconnect [ 1219.312132][T28147] netlink: 'syz.8.7367': attribute type 3 has an invalid length. [ 1219.369362][T28149] openvswitch: : Dropping previously announced user features [ 1220.188755][T28175] netlink: 'syz.3.7378': attribute type 10 has an invalid length. [ 1220.232089][T28175] __nla_validate_parse: 15 callbacks suppressed [ 1220.232102][T28175] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7378'. [ 1220.258954][T28178] netlink: 'syz.7.7380': attribute type 10 has an invalid length. [ 1220.289627][T28183] netlink: 132 bytes leftover after parsing attributes in process `syz.8.7381'. [ 1220.292091][T28178] netlink: 156 bytes leftover after parsing attributes in process `syz.7.7380'. [ 1220.387976][T28186] netlink: 'syz.8.7382': attribute type 3 has an invalid length. [ 1220.403032][T28186] netlink: 132 bytes leftover after parsing attributes in process `syz.8.7382'. [ 1220.541820][T28193] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7385'. [ 1220.953735][T28209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7392'. [ 1221.507315][T28228] netlink: 'syz.7.7398': attribute type 3 has an invalid length. [ 1221.523841][T28228] netlink: 132 bytes leftover after parsing attributes in process `syz.7.7398'. [ 1221.880872][T28252] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7402'. [ 1222.047827][T28258] FAULT_INJECTION: forcing a failure. [ 1222.047827][T28258] name failslab, interval 1, probability 0, space 0, times 0 [ 1222.147324][T28258] CPU: 1 UID: 0 PID: 28258 Comm: syz.8.7405 Not tainted syzkaller #0 PREEMPT(full) [ 1222.147352][T28258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1222.147364][T28258] Call Trace: [ 1222.147372][T28258] [ 1222.147381][T28258] dump_stack_lvl+0xe8/0x150 [ 1222.147413][T28258] should_fail_ex+0x412/0x560 [ 1222.147442][T28258] should_failslab+0xa8/0x100 [ 1222.147468][T28258] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1222.147490][T28258] ? __alloc_skb+0x1d0/0x7d0 [ 1222.147514][T28258] ? __local_bh_enable_ip+0xd0/0x130 [ 1222.147542][T28258] __alloc_skb+0x1d0/0x7d0 [ 1222.147572][T28258] __ip6_append_data+0x2a44/0x3c50 [ 1222.147625][T28258] ? __pfx_raw6_getfrag+0x10/0x10 [ 1222.147667][T28258] ? __pfx___ip6_append_data+0x10/0x10 [ 1222.147694][T28258] ? ip6_setup_cork+0x544/0xf30 [ 1222.147720][T28258] ? ip6_append_data+0x1b7/0x280 [ 1222.147748][T28258] ip6_append_data+0x10f/0x280 [ 1222.147777][T28258] ? __pfx_raw6_getfrag+0x10/0x10 [ 1222.147798][T28258] rawv6_sendmsg+0x12d3/0x18e0 [ 1222.147832][T28258] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1222.147863][T28258] ? aa_sk_perm+0x6d5/0x900 [ 1222.147893][T28258] ? __pfx_aa_sk_perm+0x10/0x10 [ 1222.147919][T28258] ? sock_rps_record_flow+0x19/0x400 [ 1222.147941][T28258] ? inet_sendmsg+0x2f4/0x370 [ 1222.147959][T28258] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1222.147984][T28258] ____sys_sendmsg+0x80a/0x9f0 [ 1222.148012][T28258] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1222.148039][T28258] ? import_iovec+0x73/0xa0 [ 1222.148070][T28258] ___sys_sendmsg+0x2a5/0x360 [ 1222.148094][T28258] ? __pfx____sys_sendmsg+0x10/0x10 [ 1222.148146][T28258] ? __fget_files+0x2a/0x420 [ 1222.148174][T28258] ? __fget_files+0x3a0/0x420 [ 1222.148210][T28258] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1222.148232][T28258] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1222.148249][T28258] ? perf_trace_preemptirq_template+0xb2/0x350 [ 1222.148286][T28258] ? __pfx_ksys_write+0x10/0x10 [ 1222.148318][T28258] do_syscall_64+0x14d/0xf80 [ 1222.148335][T28258] ? trace_irq_disable+0x3b/0x150 [ 1222.148360][T28258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.148379][T28258] ? clear_bhb_loop+0x40/0x90 [ 1222.148402][T28258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.148421][T28258] RIP: 0033:0x7f3f8ad9c799 [ 1222.148439][T28258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1222.148455][T28258] RSP: 002b:00007f3f8bc03028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1222.148475][T28258] RAX: ffffffffffffffda RBX: 00007f3f8b016090 RCX: 00007f3f8ad9c799 [ 1222.148489][T28258] RDX: 0000000000008cc4 RSI: 0000200000000640 RDI: 0000000000000004 [ 1222.148501][T28258] RBP: 00007f3f8bc03090 R08: 0000000000000000 R09: 0000000000000000 [ 1222.148513][T28258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1222.148524][T28258] R13: 00007f3f8b016128 R14: 00007f3f8b016090 R15: 00007ffd77f433d8 [ 1222.148555][T28258] [ 1224.797248][T28274] netlink: 'syz.0.7413': attribute type 10 has an invalid length. [ 1224.831555][T28274] vxcan1: entered promiscuous mode [ 1224.853802][T28274] team0: Device vxcan1 is of different type [ 1224.878564][T28278] netlink: 'syz.8.7411': attribute type 10 has an invalid length. [ 1224.907004][T28278] team0: Device vxcan1 is of different type [ 1225.217139][T28295] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7418'. [ 1225.482242][T28301] netlink: 'syz.8.7419': attribute type 1 has an invalid length. [ 1225.578518][T28300] netlink: 680 bytes leftover after parsing attributes in process `syz.8.7419'. [ 1225.677925][T28305] netlink: 'syz.7.7406': attribute type 1 has an invalid length. [ 1225.686319][T28305] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7406'. [ 1225.931576][T28309] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7423'. [ 1225.943856][T28309] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7423'. [ 1225.953836][T28309] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7423'. [ 1226.718486][ T30] audit: type=1107 audit(1773414408.576:4): pid=28324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1226.807495][T28327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7431'. [ 1227.026298][T28332] netlink: 'syz.0.7433': attribute type 10 has an invalid length. [ 1227.035808][T28332] netlink: 168 bytes leftover after parsing attributes in process `syz.0.7433'. [ 1227.069043][T28327] openvswitch: : Dropping previously announced user features [ 1227.120382][T28335] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7434'. [ 1227.215550][T28337] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 1227.302143][T28344] netlink: 'syz.2.7437': attribute type 4 has an invalid length. [ 1227.322549][T28345] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7438'. [ 1227.402455][T28344] ================================================================== [ 1227.410575][T28344] BUG: KASAN: slab-use-after-free in nf_hook_entry_head+0x1f1/0x2c0 [ 1227.418576][T28344] Read of size 8 at addr ffff88806665c108 by task syz.2.7437/28344 [ 1227.426471][T28344] [ 1227.428812][T28344] CPU: 0 UID: 0 PID: 28344 Comm: syz.2.7437 Not tainted syzkaller #0 PREEMPT(full) [ 1227.428834][T28344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1227.428846][T28344] Call Trace: [ 1227.428855][T28344] [ 1227.428864][T28344] dump_stack_lvl+0xe8/0x150 [ 1227.428893][T28344] print_report+0xba/0x230 [ 1227.428913][T28344] ? nf_hook_entry_head+0x1f1/0x2c0 [ 1227.428939][T28344] kasan_report+0x117/0x150 [ 1227.428962][T28344] ? nf_hook_entry_head+0x1f1/0x2c0 [ 1227.428992][T28344] nf_hook_entry_head+0x1f1/0x2c0 [ 1227.429018][T28344] __nf_unregister_net_hook+0x74/0x6f0 [ 1227.429040][T28344] ? nf_tables_flowtable_notify+0x221/0x450 [ 1227.429071][T28344] nf_tables_commit+0x4270/0xa400 [ 1227.429113][T28344] ? nft_pernet+0x23/0x240 [ 1227.429129][T28344] ? nft_pernet+0x23/0x240 [ 1227.429147][T28344] ? __pfx_nf_tables_commit+0x10/0x10 [ 1227.429172][T28344] ? nft_trans_commit_list_add_tail+0x179/0x520 [ 1227.429194][T28344] ? nft_flush_table+0x1749/0x18e0 [ 1227.429221][T28344] ? nf_tables_deltable+0x678/0xe80 [ 1227.429237][T28344] ? __pfx_perf_trace_lock+0x10/0x10 [ 1227.429264][T28344] ? __pfx_nf_tables_deltable+0x10/0x10 [ 1227.429294][T28344] nfnetlink_rcv+0x1c1b/0x27b0 [ 1227.429312][T28344] ? is_bpf_text_address+0x26/0x2b0 [ 1227.429353][T28344] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1227.429419][T28344] netlink_unicast+0x80f/0x9b0 [ 1227.429445][T28344] ? __pfx_netlink_unicast+0x10/0x10 [ 1227.429466][T28344] ? netlink_sendmsg+0x650/0xb40 [ 1227.429486][T28344] ? skb_put+0x11b/0x210 [ 1227.429513][T28344] netlink_sendmsg+0x813/0xb40 [ 1227.429541][T28344] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1227.429565][T28344] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1227.429588][T28344] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1227.429615][T28344] ____sys_sendmsg+0x972/0x9f0 [ 1227.429631][T28344] ? __pfx_perf_trace_lock+0x10/0x10 [ 1227.429658][T28344] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1227.429681][T28344] ? import_iovec+0x73/0xa0 [ 1227.429709][T28344] ___sys_sendmsg+0x2a5/0x360 [ 1227.429730][T28344] ? __pfx____sys_sendmsg+0x10/0x10 [ 1227.429761][T28344] ? __fget_files+0x2a/0x420 [ 1227.429793][T28344] ? __fget_files+0x2a/0x420 [ 1227.429816][T28344] ? __fget_files+0x3a0/0x420 [ 1227.429846][T28344] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1227.429864][T28344] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1227.429879][T28344] ? perf_trace_preemptirq_template+0xb2/0x350 [ 1227.429910][T28344] ? rcu_is_watching+0x15/0xb0 [ 1227.429941][T28344] do_syscall_64+0x14d/0xf80 [ 1227.429957][T28344] ? trace_irq_disable+0x3b/0x150 [ 1227.429980][T28344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.429996][T28344] ? clear_bhb_loop+0x40/0x90 [ 1227.430016][T28344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.430032][T28344] RIP: 0033:0x7f8cec59c799 [ 1227.430051][T28344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1227.430065][T28344] RSP: 002b:00007f8ced3c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1227.430084][T28344] RAX: ffffffffffffffda RBX: 00007f8cec815fa0 RCX: 00007f8cec59c799 [ 1227.430098][T28344] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 000000000000000d [ 1227.430111][T28344] RBP: 00007f8cec632c99 R08: 0000000000000000 R09: 0000000000000000 [ 1227.430122][T28344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1227.430133][T28344] R13: 00007f8cec816038 R14: 00007f8cec815fa0 R15: 00007ffd35af9528 [ 1227.430158][T28344] [ 1227.430165][T28344] [ 1227.765037][T28344] Allocated by task 14759: [ 1227.769542][T28344] kasan_save_track+0x3e/0x80 [ 1227.774218][T28344] __kasan_kmalloc+0x93/0xb0 [ 1227.778808][T28344] __kmalloc_cache_noprof+0x31c/0x660 [ 1227.784174][T28344] tipc_sub_subscribe+0x118/0x690 [ 1227.789195][T28344] tipc_conn_rcv_sub+0x136/0x350 [ 1227.794131][T28344] tipc_conn_recv_work+0x373/0x500 [ 1227.799245][T28344] process_scheduled_works+0xb02/0x1830 [ 1227.804792][T28344] worker_thread+0xa50/0xfc0 [ 1227.809384][T28344] kthread+0x388/0x470 [ 1227.813449][T28344] ret_from_fork+0x51e/0xb90 [ 1227.818065][T28344] ret_from_fork_asm+0x1a/0x30 [ 1227.822833][T28344] [ 1227.825146][T28344] Freed by task 14759: [ 1227.829372][T28344] kasan_save_track+0x3e/0x80 [ 1227.834044][T28344] kasan_save_free_info+0x46/0x50 [ 1227.839071][T28344] __kasan_slab_free+0x5c/0x80 [ 1227.843838][T28344] kfree+0x1c1/0x630 [ 1227.847735][T28344] tipc_conn_delete_sub+0x163/0x190 [ 1227.852949][T28344] tipc_conn_send_work+0x267/0xa30 [ 1227.858081][T28344] process_scheduled_works+0xb02/0x1830 [ 1227.863631][T28344] worker_thread+0xa50/0xfc0 [ 1227.868218][T28344] kthread+0x388/0x470 [ 1227.872278][T28344] ret_from_fork+0x51e/0xb90 [ 1227.876865][T28344] ret_from_fork_asm+0x1a/0x30 [ 1227.881630][T28344] [ 1227.883941][T28344] The buggy address belongs to the object at ffff88806665c000 [ 1227.883941][T28344] which belongs to the cache kmalloc-512 of size 512 [ 1227.897985][T28344] The buggy address is located 264 bytes inside of [ 1227.897985][T28344] freed 512-byte region [ffff88806665c000, ffff88806665c200) [ 1227.911781][T28344] [ 1227.914099][T28344] The buggy address belongs to the physical page: [ 1227.920517][T28344] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806665cc00 pfn:0x6665c [ 1227.930576][T28344] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1227.939065][T28344] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 1227.947561][T28344] page_type: f5(slab) [ 1227.951537][T28344] raw: 00fff00000000240 ffff88813fea8c80 ffffea00016c7710 ffffea00006ea610 [ 1227.960113][T28344] raw: ffff88806665cc00 000000080010000d 00000000f5000000 0000000000000000 [ 1227.968707][T28344] head: 00fff00000000240 ffff88813fea8c80 ffffea00016c7710 ffffea00006ea610 [ 1227.977376][T28344] head: ffff88806665cc00 000000080010000d 00000000f5000000 0000000000000000 [ 1227.986048][T28344] head: 00fff00000000002 ffffea0001999701 00000000ffffffff 00000000ffffffff [ 1227.994707][T28344] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 1228.003396][T28344] page dumped because: kasan: bad access detected [ 1228.009810][T28344] page_owner tracks the page as allocated [ 1228.015525][T28344] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7309, tgid 7309 (kworker/u8:18), ts 1014291836605, free_ts 1014102892517 [ 1228.037354][T28344] post_alloc_hook+0x231/0x280 [ 1228.042122][T28344] get_page_from_freelist+0x24dc/0x2580 [ 1228.047666][T28344] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1228.053467][T28344] allocate_slab+0x77/0x660 [ 1228.057973][T28344] refill_objects+0x331/0x3c0 [ 1228.062692][T28344] __pcs_replace_empty_main+0x2f9/0x5e0 [ 1228.068242][T28344] __kmalloc_cache_noprof+0x392/0x660 [ 1228.073607][T28344] igmp6_group_dropped+0x740/0x1140 [ 1228.078804][T28344] __ipv6_dev_mc_dec+0x2a8/0x330 [ 1228.083737][T28344] __ipv6_ifa_notify+0x77c/0xc60 [ 1228.088672][T28344] addrconf_ifdown+0xea6/0x1a40 [ 1228.093516][T28344] addrconf_notify+0x1bc/0x1050 [ 1228.098365][T28344] notifier_call_chain+0x1be/0x400 [ 1228.103476][T28344] netif_close_many+0x2ae/0x420 [ 1228.108325][T28344] unregister_netdevice_many_notify+0xb47/0x2370 [ 1228.114649][T28344] ops_undo_list+0x3d3/0x940 [ 1228.119234][T28344] page last free pid 5487 tgid 5487 stack trace: [ 1228.125550][T28344] __free_frozen_pages+0xc2b/0xdb0 [ 1228.130708][T28344] skb_release_data+0x6f0/0x940 [ 1228.135560][T28344] __kfree_skb+0x5d/0x210 [ 1228.139902][T28344] netlink_recvmsg+0x5d6/0xa50 [ 1228.144855][T28344] sock_recvmsg+0x172/0x1b0 [ 1228.149365][T28344] ____sys_recvmsg+0x1e6/0x4a0 [ 1228.154128][T28344] ___sys_recvmsg+0x215/0x590 [ 1228.158807][T28344] __x64_sys_recvmsg+0x1ba/0x2a0 [ 1228.163746][T28344] do_syscall_64+0x14d/0xf80 [ 1228.168331][T28344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.174222][T28344] [ 1228.176532][T28344] Memory state around the buggy address: [ 1228.182156][T28344] ffff88806665c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1228.190207][T28344] ffff88806665c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1228.198260][T28344] >ffff88806665c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1228.206310][T28344] ^ [ 1228.210636][T28344] ffff88806665c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1228.218688][T28344] ffff88806665c200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1228.226736][T28344] ================================================================== [ 1228.283432][T28350] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7438'. [ 1228.295002][T28344] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1228.302240][T28344] CPU: 1 UID: 0 PID: 28344 Comm: syz.2.7437 Not tainted syzkaller #0 PREEMPT(full) [ 1228.311634][T28344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1228.321711][T28344] Call Trace: [ 1228.325020][T28344] [ 1228.327951][T28344] vpanic+0x56c/0xa60 [ 1228.331941][T28344] ? __pfx_vpanic+0x10/0x10 [ 1228.336456][T28344] panic+0xc5/0xd0 [ 1228.340178][T28344] ? __pfx_panic+0x10/0x10 [ 1228.344596][T28344] ? preempt_schedule_thunk+0x16/0x30 [ 1228.349967][T28344] ? nf_hook_entry_head+0x1f1/0x2c0 [ 1228.355168][T28344] ? preempt_schedule_thunk+0x16/0x30 [ 1228.360543][T28344] ? nf_hook_entry_head+0x1f1/0x2c0 [ 1228.365766][T28344] check_panic_on_warn+0x89/0xb0 [ 1228.370710][T28344] ? nf_hook_entry_head+0x1f1/0x2c0 [ 1228.375912][T28344] end_report+0x73/0x180 [ 1228.380155][T28344] ? nf_hook_entry_head+0x1f1/0x2c0 [ 1228.385358][T28344] kasan_report+0x128/0x150 [ 1228.389861][T28344] ? nf_hook_entry_head+0x1f1/0x2c0 [ 1228.395078][T28344] nf_hook_entry_head+0x1f1/0x2c0 [ 1228.400129][T28344] __nf_unregister_net_hook+0x74/0x6f0 [ 1228.405615][T28344] ? nf_tables_flowtable_notify+0x221/0x450 [ 1228.411528][T28344] nf_tables_commit+0x4270/0xa400 [ 1228.416577][T28344] ? nft_pernet+0x23/0x240 [ 1228.420997][T28344] ? nft_pernet+0x23/0x240 [ 1228.425412][T28344] ? __pfx_nf_tables_commit+0x10/0x10 [ 1228.430809][T28344] ? nft_trans_commit_list_add_tail+0x179/0x520 [ 1228.437056][T28344] ? nft_flush_table+0x1749/0x18e0 [ 1228.442188][T28344] ? nf_tables_deltable+0x678/0xe80 [ 1228.447386][T28344] ? __pfx_perf_trace_lock+0x10/0x10 [ 1228.452680][T28344] ? __pfx_nf_tables_deltable+0x10/0x10 [ 1228.458234][T28344] nfnetlink_rcv+0x1c1b/0x27b0 [ 1228.462999][T28344] ? is_bpf_text_address+0x26/0x2b0 [ 1228.468223][T28344] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1228.473386][T28344] netlink_unicast+0x80f/0x9b0 [ 1228.478158][T28344] ? __pfx_netlink_unicast+0x10/0x10 [ 1228.483443][T28344] ? netlink_sendmsg+0x650/0xb40 [ 1228.488383][T28344] ? skb_put+0x11b/0x210 [ 1228.492633][T28344] netlink_sendmsg+0x813/0xb40 [ 1228.497407][T28344] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1228.502701][T28344] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1228.507646][T28344] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1228.512936][T28344] ____sys_sendmsg+0x972/0x9f0 [ 1228.517717][T28344] ? __pfx_perf_trace_lock+0x10/0x10 [ 1228.523009][T28344] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1228.528297][T28344] ? import_iovec+0x73/0xa0 [ 1228.532808][T28344] ___sys_sendmsg+0x2a5/0x360 [ 1228.537485][T28344] ? __pfx____sys_sendmsg+0x10/0x10 [ 1228.542695][T28344] ? __fget_files+0x2a/0x420 [ 1228.547314][T28344] ? __fget_files+0x2a/0x420 [ 1228.551914][T28344] ? __fget_files+0x3a0/0x420 [ 1228.556608][T28344] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1228.561550][T28344] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1228.567009][T28344] ? perf_trace_preemptirq_template+0xb2/0x350 [ 1228.573185][T28344] ? rcu_is_watching+0x15/0xb0 [ 1228.577993][T28344] do_syscall_64+0x14d/0xf80 [ 1228.582612][T28344] ? trace_irq_disable+0x3b/0x150 [ 1228.587644][T28344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.593715][T28344] ? clear_bhb_loop+0x40/0x90 [ 1228.598398][T28344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.604291][T28344] RIP: 0033:0x7f8cec59c799 [ 1228.608710][T28344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1228.628490][T28344] RSP: 002b:00007f8ced3c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1228.636912][T28344] RAX: ffffffffffffffda RBX: 00007f8cec815fa0 RCX: 00007f8cec59c799 [ 1228.644881][T28344] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 000000000000000d [ 1228.652855][T28344] RBP: 00007f8cec632c99 R08: 0000000000000000 R09: 0000000000000000 [ 1228.660838][T28344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1228.668812][T28344] R13: 00007f8cec816038 R14: 00007f8cec815fa0 R15: 00007ffd35af9528 [ 1228.676801][T28344] [ 1228.679974][T28344] Kernel Offset: disabled [ 1228.684323][T28344] Rebooting in 86400 seconds..