last executing test programs: 2m46.416942183s ago: executing program 2 (id=885): perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200}, 0x2000, 0x1ff, 0x4, 0x0, 0x4, 0x4, 0x7ffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001940)=ANY=[@ANYBLOB="142300000001010400000000141a000002000000"], 0x14}}, 0x0) r2 = syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x81ef7}, 0x116da, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7ff7, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000f3ff00010900010073797a300000000020000000030a01020000000000000000020000020900030073797a3200000000140000001100010000000000000000000000000a"], 0x74}}, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket$kcm(0x2b, 0x1, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@delsa={0x28, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {@in=@private=0xa010100, 0x4d4, 0x2, 0x32}}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1efa}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = getpid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000007c0), 0x0, &(0x7f0000000800)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r9}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98, 0x4000040}, 0x40) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340), 0x1002, &(0x7f0000000400)=ANY=[@ANYBLOB='mid=', @ANYRESHEX=0x0, @ANYBLOB=',mode=00000000000000000000011,mode=00000000000000000000002,mode=00000000000000000000265,gid=', @ANYRESHEX=0x0, @ANYBLOB=',mode=00000000000000000003316,mode=00000000000000000000004,gid=', @ANYRESHEX=0x0, @ANYBLOB=',mode=00000000000000000000007,\x00']) setsockopt$sock_attach_bpf(r7, 0x6, 0x1b, &(0x7f0000000100), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES32], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r10) socket$nl_route(0x10, 0x3, 0x0) 2m45.150251419s ago: executing program 2 (id=896): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000005000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000009500"/96], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m44.906233601s ago: executing program 2 (id=900): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000050000000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001040)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x10001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2c004811}, 0x40000) 2m44.763535706s ago: executing program 2 (id=903): r0 = socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1c3) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x98c, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xa}, 0x100004, 0x4, 0x98, 0x0, 0x2, 0x7f, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000940)=""/4117, 0x1015}, {&(0x7f00000039c0)=""/4083, 0xff3}, {&(0x7f00000001c0)=""/235, 0xeb}, {&(0x7f0000000700)=""/219, 0xdb}], 0x4}, 0x40012120) 2m44.425469439s ago: executing program 2 (id=908): r0 = getpid() r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x7}, 0x11efa, 0x4, 0x98, 0x0, 0x4, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x30000, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000003c0001"], 0x14}, 0x1, 0x0, 0x0, 0x4404d}, 0x0) 2m43.99898784s ago: executing program 2 (id=910): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="12000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x34, 0x20, 0x1, 0x70bd25, 0x0, {0x2}, [@typed={0x8, 0x116, 0x0, 0x0, @pid}, @nested={0x18, 0x17, 0x0, 0x1, [@typed={0x2a, 0x2a, 0x0, 0x0, @ipv6=@empty}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40940}, 0x0) 2m43.485900532s ago: executing program 32 (id=910): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="12000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x34, 0x20, 0x1, 0x70bd25, 0x0, {0x2}, [@typed={0x8, 0x116, 0x0, 0x0, @pid}, @nested={0x18, 0x17, 0x0, 0x1, [@typed={0x2a, 0x2a, 0x0, 0x0, @ipv6=@empty}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40940}, 0x0) 2m14.267696202s ago: executing program 3 (id=1073): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x484000000000000b, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x1}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x8001, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0xf4, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0xe0, 0x1, [@m_skbmod={0xdc, 0x16, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x5, 0x3, 0xffffff81, 0xbd6c}, 0x6}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x81, 0x1000, 0x1, 0x5, 0x3b333ca5}, 0xf}}]}, {0x54, 0x6, "f9eec16202424547e2ce0d3a8747cee72198e0c9f244630fadd2805b628072fbba7aa8f0f7d475025337fb1c642867c9ae4e3d99fd76ba6d38843683254e0b953f01711e19d966fdf408c91f964655fc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ec0)=@newtaction={0x48, 0x30, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x21, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x2000c8d0) sendmsg$NFT_MSG_GETSET(r1, 0x0, 0x44000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x28}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0xff, 0x8, 0x1, 0x0, r3, 0x8, '\x00', r4, r1, 0x0, 0x4, 0x1, 0x9}, 0x50) 2m13.839287373s ago: executing program 3 (id=1076): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc12082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[], 0xfdef) write$cgroup_subtree(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000213a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa9f8b26f51b4eef61d9c89908dfdc13c46d1353ef1509eb45c7d7e0af3fe2854d88b446b8ee76e3b3f9222d23747924095072983ea02eb91e989ff79977ba27", @ANYBLOB="a9ba055fe1c6a7af92dbb27c5310ca359c6401de03d9ff01685495592b9042e58b2ff00ab54c264ee3ec94cb2fab9846e99e3869ae0d5d7d9c01c97ebee0eb97c75a4a8f6a5e05704a23ce335f45cda1f647485fffa894cd9f2cd43b5e523fc2", @ANYRES16=r0], 0xfffffffffffffe39) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000021c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r5, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xfa, &(0x7f0000000300)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x5d, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) 2m12.622249436s ago: executing program 3 (id=1082): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0203000009000000000000000000000005001b00002000000a00000000000000fc0200000800000000000000000000000000000000000000020001000000000000000903000000007aa2ab2360cf3864a0b6ffbe71ff16eb368fdd449798eaaac76fb317979848"], 0x48}, 0x1, 0x7}, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x9}, 0x15efa, 0x4, 0x98, 0x5, 0x2, 0xfffff274, 0x9, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x91f, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$unix(r2, &(0x7f0000000840)={&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000440), 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0, r3, r4}}}, @rights={{0x2c, 0x1, 0x1, [r1, r0, r1, r0, 0xffffffffffffffff, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x1c, 0x1, 0x1, [r5, r0, r1]}}], 0x88, 0x48001}, 0x8000) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x13, &(0x7f0000000a00)=ANY=[@ANYBLOB="1802000005000000000000000006000018010000206e6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000001801000020756c25400000001af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000900000085000000060000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup(r6, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) mount$bpf(0x200000000000, 0x0, 0x0, 0x8b7848, 0x0) r9 = socket(0xb, 0x1, 0x62) sendmsg$sock(r9, &(0x7f0000000280)={&(0x7f0000000100)=@nl=@unspec, 0x80, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0x21}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffc}}, @mark={{0x14, 0x1, 0x24, 0x10001}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14}}], 0xc0}, 0x48000) setsockopt$sock_attach_bpf(r8, 0x1, 0x35, &(0x7f0000000040), 0x13) r10 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r10, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x200, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000) r11 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x80, 0xf1, 0x4, 0x7, 0x95, 0x0, 0x1, 0x20000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc283, 0x4, @perf_bp, 0x10800, 0x2, 0xadb, 0x2, 0x3, 0x6647, 0x7, 0x0, 0x7ff, 0x0, 0x101}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f00000000c0)=':{\x00') 2m11.98683668s ago: executing program 3 (id=1086): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x58a8, 0x0, 0x0, 0x6, 0x0, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x3e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0xb, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x66c, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4081, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0, 0x6}, 0x3c0, 0x1d41, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) close(r2) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a0033d4"], 0xfe33) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)}, 0x8045) fstat(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000000140)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0xa400, 0x0) 2m11.362737733s ago: executing program 3 (id=1091): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0xeefd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m10.965894345s ago: executing program 3 (id=1095): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x80, &(0x7f0000002e80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x18}, 0x8080) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan1\x00', @random="0200ac7f7e00"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, 0x0, &(0x7f00000002c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m10.485084772s ago: executing program 33 (id=1095): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x80, &(0x7f0000002e80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x18}, 0x8080) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan1\x00', @random="0200ac7f7e00"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, 0x0, &(0x7f00000002c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.450507739s ago: executing program 6 (id=1891): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b7}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='net_prio.prioidx\x00', 0x0, 0x0) perf_event_open$cgroup(0x0, r1, 0x10, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd32, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xd, [0x0, 0x1, 0x4, 0x1, 0x4, 0x5, 0xb, 0x7, 0x7, 0xa, 0x9, 0x7, 0x4, 0xf, 0xc, 0xfe], 0x20, [0x0, 0x2, 0x6, 0x6, 0x5, 0x7f, 0x7, 0xff1e, 0x8, 0x6, 0x7, 0x3, 0x30, 0x9, 0x2, 0x5], [0xe9, 0x3, 0x3, 0x2, 0x14, 0xfff8, 0xf89b, 0x2427, 0x1, 0x9, 0x78, 0xbd, 0x7f, 0x4, 0x6, 0x3]}}}}]}, 0x88}}, 0x40000) (fail_nth: 9) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x2}]}, 0x0, 0x9d, 0xd3, &(0x7f0000000700)=""/211, 0x41100, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x4, 0x8, 0xf48b, 0x6}, 0x10, 0x12a5d, r0, 0x7, &(0x7f00000008c0)=[r1, r1, r1], &(0x7f0000000900)=[{0x0, 0x2, 0xf, 0x7}, {0x5, 0x2, 0x1, 0x5}, {0x2, 0x5, 0x4, 0xa}, {0x2, 0x3, 0x8, 0x4}, {0x4, 0x4, 0xd, 0xd}, {0x2, 0x5, 0xf, 0x7}, {0x4, 0x2, 0x10, 0x5}]}, 0x94) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x402800, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x9, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 3.038728066s ago: executing program 1 (id=1895): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x116044, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x0, 0x3, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f0, &(0x7f0000000080)) sendmsg(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="ef", 0x1}], 0x1}, 0x40000) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x2, 0xeb, 0xfe, 0x0, 0x5, 0x90400, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0xaedf, 0x345483d}, 0x521, 0x6, 0x7, 0x2, 0x9e, 0x10000, 0xa, 0x0, 0x0, 0x0, 0x4614}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000900000000000000010000003e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc2, &(0x7f000000cf3d)=""/194, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 3.031714949s ago: executing program 6 (id=1896): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x1}], 0x1, 0x0, 0x0, 0xa6820000}, 0x810) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x6}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000002500000a400000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d65b000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x60, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0xf, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) r5 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@cgroup, 0x10, 0x0, 0x40, &(0x7f00000003c0)=[0x0], 0x1, 0x0, &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000500)=[0x0], 0x0}, 0x40) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40305829, &(0x7f0000000040)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@cgroup=r9, r6, 0xa, 0x18, 0x0, @void, @value=r6, @void, @void, r8}, 0x20) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x39, 0x701, 0x0, 0x3, {0xd}}, 0x14}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8923, &(0x7f0000000180)={'hsr0\x00', @random="a8e027a9ff88"}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x5, 0x2, 0x4, 0x30, 0x0, 0xfffffffffffffff7, 0x1000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f00000000c0), 0x3}, 0x200, 0x4, 0xfffffffe, 0x4, 0x25, 0x1561, 0xdce, 0x0, 0xa, 0x0, 0x80000001}, r5, 0x6, r1, 0x4) 2.901085687s ago: executing program 4 (id=1899): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0x3) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5411, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x104101, 0x4, 0xfffffffc, 0x1, 0x200000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000034000703fcffffff0000000003"], 0x14}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)={0x20, 0x3f, 0x107, 0x0, 0x25dfdbfd, {0x2, 0x7c}, [@nested={0xc, 0xc5, 0x0, 0x1, [@typed={0x8, 0x8, 0x0, 0x0, @str='GPL\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c880}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x104101, 0x19, 0x9, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x6, 0x6, 0x6, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000080), 0x619, r5}, 0x38) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 2.83562156s ago: executing program 1 (id=1900): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) fstat(r1, &(0x7f0000000900)) fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), 0x800, &(0x7f0000000600)=ANY=[]) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000038000701fefffffffedbdf25037c00000c000980"], 0x20}, 0x1, 0x0, 0x0, 0x4048091}, 0x4000000) (fail_nth: 7) 2.14270464s ago: executing program 5 (id=1902): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4, 0x8}, 0x2000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') (async) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="190000000400000004000000ef5218c79d1edd0c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, &(0x7f00000004c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x6f, 0x8, 0x0, 0x0}}, 0x10) (async) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x400000000000002, 0x1946}, 0x0, 0x0, 0x1000000, 0x8, 0x7ffd, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_type(r2, &(0x7f0000000080), 0x9) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008004}, 0x20000854) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) close(0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)}], 0x1}, 0x0) (async) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a60846", @ANYRES16=r7], 0xfe33) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000000bfa100000000000007010000f8fffffdb702000008000000b703000000000028850000003e00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfce}, 0x94) 2.114708422s ago: executing program 4 (id=1903): perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x4, 0x7, 0x4, 0x9, 0x0, 0x6, 0x8131, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x3, 0x8}, 0x102601, 0x3, 0x6, 0x0, 0x6, 0x4eaa, 0xf, 0x0, 0x7, 0x0, 0x81}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x13) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000880)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xf7cb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ac0)={0x28, 0x1e, 0x221, 0x0, 0x0, {0x7}, [@nested={0x14, 0x144, 0x0, 0x1, [@nested={0xd, 0x86, 0x0, 0x1, [@generic="4b9ff4aa015bfa28b9"]}]}]}, 0x28}}, 0x4000080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="d8000000100081046881f782db44b904021d080b01000000e8fe55a10700000006001400030000120800040043000000a8001600a400014007000900feffff7fb94dcf5c0461c1d67f3948007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb591643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f0000000180)}, 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x14905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000980)=ANY=[@ANYBLOB="280000000f0001002cbd7000fedbdf250700", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x28}], 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) 1.998482247s ago: executing program 5 (id=1904): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x9, 0x7}, 0x4, 0x0, 0x0, 0x1, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x13d, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}}, 0x0, 0x4a, 0x0, 0x1}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1a, 0x5, &(0x7f0000000980)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYBLOB="f08f225b64a6ae2d40239559df8a9236de8b2e0179f2f5c5220181ffe843063784a5af7376ac7519401e16aac70ea44e18d73dfaab228037f215a53e0a8eefd6215cfb3fb509f8ad8a0e68b6b671818154e6423a8e396b3750b807f98cab4c1a696ed4e69b503a57f0bfc7ae612e58ebf9c1a07e5e137401320d87c1a54a0149c9c968b006b007822fcd288746a5189ce24d7d57d8877da5de54248c79cf2f0a29be6ef5874d1856240871f2e6d9d42341244be20c4793c343c897d1e9c826b245ca79fbf9c82c9cc6f4d552500698c28975b45f30f2"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$kcm(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local, 0x4e21}, {@in=@loopback, 0x4d5, 0x33}, @in=@multicast1, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x22}, 0x70bd27, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0xdde, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8005, 0x3df}, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x5, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="6916000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9ea4318123341cf9d90a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a22a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a19eed87b277be335c75e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436e101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521bc9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d2502000000d9051f22614d1f62734d678039a97d2b74f9e8e97f4e8e7025123e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f23128d743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069f6f24e1e1bc976d965ddabb01085f16bff63a06578d6d184f5de7bfb6aaa75f16996d8d60bd0111a8a237a1536256c02284cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798bbe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e2005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9cde5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde330289d6348d183ed9d3dae3cccf109f7c78e8479a345e805e47dfa82cafc6b64b1f4659834aecbeded44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1b7d5f80c580dc31b0963ff953ce09148e8dfea9d03a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a06bc06e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4d57b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce788c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f709294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b132876159972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0598700130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80014ff11d9dbceba41d8dfce410333a054e82b1d050331ce0aeacb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6bb956fac1ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a8263e9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dd18f6148354df7e60a489dc543ccdee1fff9d8f8d78844de27a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d64100cc000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2ceae70922989f66827fe9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168e32d7bd6800000000a21008b8d26dabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2935d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95badaf8ed85cd5b03a7352a0fb83398566d1bc133582ce2d9f601cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353c959fd965702f1cd5bcb3c16d4b8bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef07b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c3355fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538b011cb3928b430630b8ccc800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee3"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000440), 0x8}, 0x94) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0x8, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x4f}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}, 0x4000, 0x2, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0x3) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000001}, 0x20008000) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa7377206001ba1f848110000005e140602000300000e000a001300000002900000121f", 0x2e}], 0x1}, 0x4008004) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0x200, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0)=r8, 0x4) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'wlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 1.997892661s ago: executing program 1 (id=1905): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000028c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffefffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, 0x0, 0x24040810) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000240)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c00500142603600e1208000f0000000401a8001600a4000140030010db3fb48f8787a06df2b0d49a055d7ca1f211883bcc176626ed2b274452c24ceaa5466be5f448938293e018df", 0x67}, {&(0x7f0000000300)="1df9b50ed80b96fb32b0e04217c32a422f694de6df6498901b99edfc62a07b3fe71d2111b23ad25306534bffc1022428210a4ee473ef87256b93bd9b95a73c91ea7a9e9a47adbd7294edd018e60ecb93039e24c50ad895315723c26854880c8edcb3a12474e55f6ee713ab6504a45e7c84", 0x71}], 0x2}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000001240)=[0x0, 0x0], &(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5a, &(0x7f00000011c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001180), &(0x7f00000012c0), 0x8, 0x89, 0x8, 0x8, &(0x7f0000001300)}}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001480)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001500)={0x8, 0x0}, 0x8) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001540)={0xffffffffffffffff, 0x6, 0x18}, 0xc) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002580)=@o_path={&(0x7f0000001580)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x4018, r3}, 0x18) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000025c0)={0x0, 0xfffffffe, 0x8}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002680)={{0x1, 0xffffffffffffffff}, &(0x7f0000002600), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000002740)={0xe, 0x5, &(0x7f00000010c0)=ANY=[@ANYBLOB="18000007000000186d00001000000000000000010000019500"/40], &(0x7f0000001100)='syzkaller\x00', 0x401, 0x0, &(0x7f0000001140), 0x40f00, 0x52, '\x00', r5, @sk_skb=0x26, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000014c0)={0x3, 0xe, 0x0, 0x6}, 0x10, r7, 0xffffffffffffffff, 0x3, &(0x7f00000026c0)=[r8, r9, 0xffffffffffffffff, r10, r11], &(0x7f0000002700)=[{0x0, 0x2, 0xd, 0x2}, {0x2, 0x1, 0x9, 0x6}, {0x2, 0x5, 0xa, 0x1}], 0x10, 0x9}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x90) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000001280)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r13, &(0x7f0000001040), 0x12) socket$kcm(0x10, 0x3, 0x10) socketpair(0x1d, 0x5, 0x81, &(0x7f0000001080)) r14 = syz_clone(0x0, 0x0, 0x1c, 0x0, 0x0, 0x0) r15 = perf_event_open(&(0x7f0000000640)={0x5, 0x80, 0x6, 0x0, 0x1, 0x0, 0x0, 0x480000000000002b, 0x856a, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x0, 0x4, 0x98, 0x4, 0x4e53, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r14, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r15, 0x40042408, r16) r17 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r17, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005"], 0xfe33) 1.989949107s ago: executing program 6 (id=1906): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xc6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (fail_nth: 3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddbdf250600000b01000a00d3195c9bd51070c12621c4bdbe386596d42ae736c07b7cf67331d0b204ea0716d32048558474a99d954e35348c0b27ecd253929c1eb6e120c8b1816dc5a0a51e887664711bd6c73af0", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x0) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x17, &(0x7f0000000000)=r6, 0x10) r7 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xa, 0x0, &(0x7f0000000000)="259a53f271a76d2688ca", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 1.807666347s ago: executing program 4 (id=1908): bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="10003e0c8426e0d406e38e50c119"], 0x10}, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5c00000015006b02c84e21100af32c6e0a0675f8d34460400006010000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{0x0}], 0x1}, 0x900000000000000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={0x0, r4, 0x4000, r3}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010026bd7000ffdbdfa505000000080001000f000000f188fd41db66d0d6f8ae04a719b18e99f548fcc04d09a17f"], 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0xb, 0x28, &(0x7f00000006c0)=ANY=[], &(0x7f0000000d80)='syzkaller\x00', 0x5, 0xa5, &(0x7f0000000dc0)=""/165, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000f40)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000f80)={0x4, 0x6, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) 1.746524003s ago: executing program 0 (id=1909): r0 = syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x20000076, 0x81ef7}, 0x116da, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7ff7, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000940)=ANY=[@ANYRES16=0x0, @ANYRES64=r4, @ANYRES8=r5, @ANYRES8=r4, @ANYRES32=r3, @ANYRESDEC=r4, @ANYRES64=r3], 0x0, 0xd, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000024000000040000000100000000000000", @ANYRES32=r7], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r8, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r7}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r9, &(0x7f0000000080), 0x0}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000007000000850000001b000000b700000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r10, 0x0, 0x0}, 0x10) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x5, 0x0, r4, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0x4, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffd}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x1}], &(0x7f0000000080)='GPL\x00', 0x7c, 0xdd, &(0x7f00000000c0)=""/221, 0x41100, 0x20, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xfffffffe, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0xf, 0x400, 0x1}, 0x10, 0x0, r10, 0x3, &(0x7f0000000780)=[r11], &(0x7f00000007c0)=[{0x5, 0x2, 0xd, 0x4}, {0x1, 0x3, 0x4, 0x2}, {0x5, 0x2, 0xb, 0x1}], 0x10, 0x200}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0xc) openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x80, 0x30, 0x1, 0xfffffffe, 0x1000, {}, [{0x6c, 0x1, [@m_mpls={0x68, 0x1, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x28e, 0x4, 0x10000000, 0x1f7c, 0xa}, 0x1}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0x1, 0x5, 0x0, 0xff}, 0x4}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0xd4, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x73, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) sendmsg$inet(r3, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="f21391e33cf700cb8a4870bff707b713ad2cbffb10203d8b08188e7c98beaddc9a30452ca8b4fbc61da99056a4f2df9db7f14a", 0x33}], 0x1, &(0x7f00000009c0)=ANY=[@ANYBLOB="140000000000000000000000020000000700000000000000900000000000000000000000070000004414f0500000040100000002000005530000800083139cac1414aaac1414aae0000002ac1414aa443cad13e0000002000000016401010000000002ac1414bb000000007f000001000000090a010101000000077f00000100000200e00000010000006d94040100890f2900000000ac1414bb640101020083073c6401010100001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ffffffff0a010101000000001400000000000000000000000100000008000000000000001c000000000000000000000008000000", @ANYRES32=r13, @ANYBLOB="e000e68eb6e6ec315d3b15de155d854ec70002e0000001000000001c000000000000000000000008000000", @ANYRES32=r14, @ANYBLOB="0a010102e000000200000000"], 0x120}, 0x8000) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4000000043000701fefffffffcdbdf25047c000024000000280001"], 0x40}}, 0xc000) 1.745149068s ago: executing program 5 (id=1910): socket(0xa, 0x3, 0xff) 1.643612702s ago: executing program 6 (id=1911): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x15, 0xff, 0x5, 0x7, 0x0, 0x70bd29, 0x25dfdbfb, [@sadb_address={0x5, 0x17, 0x6c, 0xe0, 0x0, @in6={0xa, 0x4e23, 0x8, @loopback, 0x1}}]}, 0x38}}, 0x40) 1.458358664s ago: executing program 5 (id=1912): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x100, 0x80}, 0x114895, 0x4, 0xfffffffd, 0x1, 0x0, 0x40, 0x1, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="30000000110001002dbd7000fcffffff100000000c"], 0x30}], 0x1}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80"], 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x5}, 0x104101, 0x4, 0x9, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 1.426916543s ago: executing program 1 (id=1913): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0x3) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5411, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x104101, 0x4, 0xfffffffc, 0x1, 0x200000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000034000703fcffffff0000000003"], 0x14}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)={0x20, 0x3f, 0x107, 0x0, 0x25dfdbfd, {0x2, 0x7c}, [@nested={0xc, 0xc5, 0x0, 0x1, [@typed={0x8, 0x8, 0x0, 0x0, @str='GPL\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c880}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x104101, 0x19, 0x9, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x6, 0x6, 0x6, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000080), 0x619, r5}, 0x38) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 1.384556242s ago: executing program 0 (id=1914): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="8000000002090500000000000000000003000009300002001400018008000100"], 0x80}}, 0x20044000) 1.338201908s ago: executing program 4 (id=1915): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0xfeff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac094fe3c51c268811000096859fc57a00000000000000002571cd53b985", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000940)=""/4033, 0xfc1}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f00000000c0)=""/231, 0xe7}, {&(0x7f00000019c0)=""/4085, 0xff5}, {&(0x7f00000002c0)=""/242, 0xf2}, {&(0x7f0000000480)=""/52, 0x34}], 0x6}, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5a1c, 0x12001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb1, 0x5, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xa, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000d4c860f706000000fbff0000002300009500000000000400"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1a3803, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x200}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 1.262140061s ago: executing program 6 (id=1916): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0xfffffffffffffffd, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="2100000000000000090000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000f7ffffff1100"/25, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fdffffff0200"/28], 0x50) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r2, @ANYRESOCT, @ANYRES32=r1, @ANYRES32=r0, @ANYRESOCT=r4, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="5c00000014006b03000000d86e6c1d000a117ea6e070d6060000000000004e2325000a000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f62a64c9f4d49346d88037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) setsockopt$sock_attach_bpf(r4, 0x10f, 0x88, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x104905, 0x4, 0x0, 0x4, 0x3, 0xac5, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x2000, &(0x7f0000000040), 0x3b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000354000000120a01010000000000000000020000000900010073797a30000000000900020073797a30000000000800034000000007200004"], 0xa4}}, 0x0) 888.923287ms ago: executing program 0 (id=1917): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000047000701ec560dbbffffffff017c000008"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x80) 742.411573ms ago: executing program 4 (id=1918): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0xe, 0x0, 0x0, 0x0, 0x800b, 0x1109, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x5, 0xfffffffffffffffe}, 0x0, 0x6, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$kcm(0xa, 0x1, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "f0"}]}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000001b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a010100"], 0x3c}, 0x1, 0x0, 0x0, 0x2000000}, 0x20000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001cc0)=[{0x10, 0x1, 0x2}], 0x10}, 0x5) setsockopt$sock_attach_bpf(r1, 0x29, 0x4e, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000380), &(0x7f0000000000), 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet6(r0, &(0x7f0000000540)={&(0x7f00000005c0)={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x63}, 0xa}, 0x1c, 0x0}, 0x8000) 679.187375ms ago: executing program 5 (id=1919): perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x4, 0x7, 0x4, 0x9, 0x0, 0x6, 0x8131, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x3, 0x8}, 0x102601, 0x3, 0x6, 0x0, 0x6, 0x4eaa, 0xf, 0x0, 0x7, 0x0, 0x81}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x13) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000880)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xf7cb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ac0)={0x28, 0x1e, 0x221, 0x0, 0x0, {0x7}, [@nested={0x14, 0x144, 0x0, 0x1, [@nested={0xd, 0x86, 0x0, 0x1, [@generic="4b9ff4aa015bfa28b9"]}]}]}, 0x28}}, 0x4000080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x14, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="d8000000100081046881f782db44b904021d080b01000000e8fe55a10700000006001400030000120800040043000000a8001600a400014007000900feffff7fb94dcf5c0461c1d67f3948007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb591643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f0000000180)}, 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x14905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000980)=ANY=[@ANYBLOB="280000000f0001002cbd7000fedbdf250700", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x28}], 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) 637.814262ms ago: executing program 0 (id=1920): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0xe, 0x0, 0x0, 0x0, 0x800b, 0x1109, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x5, 0xfffffffffffffffe}, 0x0, 0x6, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "f0"}]}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000001b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a010100"], 0x3c}, 0x1, 0x0, 0x0, 0x2000000}, 0x20000000) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001cc0)=[{0x10, 0x1, 0x2}], 0x10}, 0x5) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000380), &(0x7f0000000000), 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet6(r0, &(0x7f0000000540)={&(0x7f00000005c0)={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x63}, 0xa}, 0x1c, 0x0}, 0x8000) 535.069345ms ago: executing program 6 (id=1921): r0 = socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x4100, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) close(r1) setsockopt$sock_attach_bpf(r0, 0x29, 0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_clone(0x40008200, &(0x7f0000000740)="d7d9027c207ae9734d95cb37f80b9848a1a71f2788b40d9bde8ea72a490bb1fa831918dafc9d7dc79b13cf27a3403072b70f841923647ced04ccd1d40569759eaf15f582521239d0478e70b7066d1337b209b0312c9dd8a612b03e379a196a6c", 0x60, &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)="6e41bec2b61663b9876c15cb05c713ad9c2513defbac665a2519f5328114e4c5e4319d6eafbb7279e04bc6ead06508b14ec318a0077c596d454bc14cec5736fd29d0dd4d9e32d6254cd76f3b32f4c46956029e3766da20c0f798b4271626b1a9cda9db") perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00'}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f00000001c0), &(0x7f0000000380)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff00000000000000001000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffff0a010100000004d63c"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$inet(r6, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f0000000000)=r3}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffff}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9eb8}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20002000}, 0x4004844) 494.255574ms ago: executing program 1 (id=1922): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000009c0)) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)=ANY=[@ANYBLOB="28000000150a0103"], 0x28}}, 0x0) 434.09821ms ago: executing program 4 (id=1923): bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002e00090025bd7000ffd3df250100000008000100", @ANYRES32=r0, @ANYBLOB="0c0c9b571c27c4c9a2e7988583c676d234d29dd77e3cf60bd705dcceaf67043f57d5bdcd208e82e4f0fdcd78e1f7a486c60be0e05c3391dd83ef700949"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="10003e0c8426e0d406e38e50c119"], 0x10}, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5c00000015006b02c84e21100af32c6e0a0675f8d34460400006000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{0x0}], 0x1}, 0x900000000000000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) socket$nl_generic(0x10, 0x3, 0x10) bpf$ITER_CREATE(0xb, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x3, 0x2, 0xfffff271, 0xffff, 0x0, 0x0, 0x0, 0x23}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000002b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xadc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000440)) bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) 226.362444ms ago: executing program 5 (id=1924): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0x36, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd4b3547f2cbfad47001bd34d04351caf1f9a07be047c25d7670ea4a41b8a6800c0de87b6f8e6a7256", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x66, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6f0e}, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4040) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0xfff, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0x1103, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x1) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000003c0)={r3, 0x0, 0x7, 0x0, &(0x7f0000000200)="f25c816c1d2910", 0x0, 0x0, 0x0, 0x98, 0x0, &(0x7f0000000300)="733b559cb04e65c247cf12684ddc1859365c19a265319f418459d60ceebed1d9b41888c9da465d7dea92cf05f764c5e81230e43e0718c42adb174405df6ad750d44d0d0bd71b0ab229f0e490a8003c2fe0c713aaed004bad3874ea40e881d47e06c67211ac8779fae472a156c234382d2c70ffdbc32ea0b50cb6abf094ac2ba651cfd1d4b8dfd3743dc40c9236e3eadff699f332e9fc6049", 0x0, 0x2, 0x0, 0x4}, 0x50) setsockopt$sock_attach_bpf(r5, 0x1, 0x35, &(0x7f0000000440), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x4}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10004}, 0x0) 219.185946ms ago: executing program 0 (id=1925): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001cc0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000002440)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x50, 0x29, 0x32}}, @ip_pktinfo={{0x0, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x6d}, 0x0) 3.632621ms ago: executing program 1 (id=1926): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x15, 0xff, 0x5, 0x7, 0x0, 0x70bd29, 0x25dfdbfb, [@sadb_address={0x5, 0x17, 0x6c, 0xe0, 0x0, @in6={0xa, 0x4e23, 0x8, @loopback, 0x1}}]}, 0x38}}, 0x40) 0s ago: executing program 0 (id=1927): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a320000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000100), 0x0}, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100066, 0x2, 0xdffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0xa, 0x8, 0x3d, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd30, 0x25dfdbfe, {0x0, 0x0, 0x12, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "00000000000000050000000000000500"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x404c840}, 0x4000010) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffff2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x890c, &(0x7f0000000100)) kernel console output (not intermixed with test programs): envswitch: netlink: nsh attr 251 is out of range max 3 [ 226.865682][ T9105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.788'. [ 226.890887][ T9095] netlink: 44 bytes leftover after parsing attributes in process `syz.2.784'. [ 227.155738][ T9110] netlink: 'syz.1.789': attribute type 1 has an invalid length. [ 227.615431][ T9113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.279077][ T9136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.794'. [ 228.761067][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.797'. [ 228.853766][ T9160] FAULT_INJECTION: forcing a failure. [ 228.853766][ T9160] name failslab, interval 1, probability 0, space 0, times 0 [ 228.887407][ T9160] CPU: 0 UID: 0 PID: 9160 Comm: syz.2.798 Not tainted syzkaller #0 PREEMPT(full) [ 228.887433][ T9160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 228.887445][ T9160] Call Trace: [ 228.887453][ T9160] [ 228.887461][ T9160] dump_stack_lvl+0xe8/0x150 [ 228.887497][ T9160] should_fail_ex+0x40c/0x560 [ 228.887529][ T9160] should_failslab+0xa8/0x100 [ 228.887551][ T9160] __kmalloc_noprof+0xfe/0x720 [ 228.887581][ T9160] ? sock_kmalloc+0xd6/0x160 [ 228.887618][ T9160] ? sock_kmalloc+0xd6/0x160 [ 228.887650][ T9160] sock_kmalloc+0xd6/0x160 [ 228.887677][ T9160] ____sys_sendmsg+0x1be/0x850 [ 228.887707][ T9160] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.887741][ T9160] ? import_iovec+0x73/0xa0 [ 228.887765][ T9160] ___sys_sendmsg+0x2a5/0x360 [ 228.887788][ T9160] ? __lock_acquire+0x683/0x2cf0 [ 228.887822][ T9160] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.887888][ T9160] ? __fget_files+0x2a/0x420 [ 228.887916][ T9160] ? __fget_files+0x3a2/0x420 [ 228.887953][ T9160] __x64_sys_sendmsg+0x1b1/0x290 [ 228.887975][ T9160] ? perf_trace_preemptirq_template+0x26f/0x350 [ 228.888003][ T9160] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 228.888043][ T9160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.888063][ T9160] do_syscall_64+0x174/0x580 [ 228.888088][ T9160] ? clear_bhb_loop+0x40/0x90 [ 228.888117][ T9160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.888136][ T9160] RIP: 0033:0x7efde4b9e019 [ 228.888153][ T9160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.888169][ T9160] RSP: 002b:00007efde59dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.888188][ T9160] RAX: ffffffffffffffda RBX: 00007efde4e25fa0 RCX: 00007efde4b9e019 [ 228.888203][ T9160] RDX: 000000000000fc40 RSI: 0000200000000080 RDI: 0000000000000009 [ 228.888214][ T9160] RBP: 00007efde59dd090 R08: 0000000000000000 R09: 0000000000000000 [ 228.888227][ T9160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.888238][ T9160] R13: 00007efde4e26038 R14: 00007efde4e25fa0 R15: 00007fffce10bcf8 [ 228.888269][ T9160] [ 230.473523][ T9173] netlink: 'syz.3.802': attribute type 1 has an invalid length. [ 231.373582][ T9205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.809'. [ 231.571192][ T9212] FAULT_INJECTION: forcing a failure. [ 231.571192][ T9212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.588120][ T9212] CPU: 0 UID: 0 PID: 9212 Comm: syz.0.810 Not tainted syzkaller #0 PREEMPT(full) [ 231.588148][ T9212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 231.588161][ T9212] Call Trace: [ 231.588170][ T9212] [ 231.588178][ T9212] dump_stack_lvl+0xe8/0x150 [ 231.588216][ T9212] should_fail_ex+0x40c/0x560 [ 231.588250][ T9212] _copy_to_user+0x31/0xb0 [ 231.588276][ T9212] simple_read_from_buffer+0xe1/0x170 [ 231.588316][ T9212] proc_fail_nth_read+0x1bb/0x230 [ 231.588364][ T9212] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 231.588403][ T9212] ? rw_verify_area+0x24a/0x4c0 [ 231.588426][ T9212] ? apparmor_capable+0x126/0x170 [ 231.588459][ T9212] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 231.588492][ T9212] vfs_read+0x213/0xa80 [ 231.588521][ T9212] ? __pfx___mutex_lock+0x10/0x10 [ 231.588551][ T9212] ? __pfx_vfs_read+0x10/0x10 [ 231.588576][ T9212] ? __fget_files+0x2a/0x420 [ 231.588615][ T9212] ? __fget_files+0x3a2/0x420 [ 231.588645][ T9212] ? __fget_files+0x2a/0x420 [ 231.588687][ T9212] ksys_read+0x150/0x270 [ 231.588710][ T9212] ? __pfx_ksys_read+0x10/0x10 [ 231.588741][ T9212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.588767][ T9212] do_syscall_64+0x174/0x580 [ 231.588792][ T9212] ? trace_irq_disable+0x3b/0x140 [ 231.588823][ T9212] ? clear_bhb_loop+0x40/0x90 [ 231.588851][ T9212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.588883][ T9212] RIP: 0033:0x7fcca055e84e [ 231.588905][ T9212] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 231.588924][ T9212] RSP: 002b:00007fcca1450fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 231.588949][ T9212] RAX: ffffffffffffffda RBX: 00007fcca14516c0 RCX: 00007fcca055e84e [ 231.588966][ T9212] RDX: 000000000000000f RSI: 00007fcca14510a0 RDI: 000000000000000e [ 231.588980][ T9212] RBP: 00007fcca1451090 R08: 0000000000000000 R09: 0000000000000000 [ 231.588994][ T9212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.589008][ T9212] R13: 00007fcca0826128 R14: 00007fcca0826090 R15: 00007ffe20d7f228 [ 231.589043][ T9212] [ 231.808050][ T9210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.813'. [ 232.137310][ T9233] netlink: 32 bytes leftover after parsing attributes in process `syz.3.815'. [ 232.219295][ T9235] netlink: 20 bytes leftover after parsing attributes in process `syz.4.814'. [ 232.253249][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.815'. [ 232.783370][ T9241] netlink: 'syz.4.819': attribute type 1 has an invalid length. [ 233.686572][ T9272] netlink: 48 bytes leftover after parsing attributes in process `syz.3.826'. [ 233.860538][ T9280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.830'. [ 233.912647][ T9281] netlink: 'syz.0.831': attribute type 10 has an invalid length. [ 233.921140][ T9281] netlink: 'syz.0.831': attribute type 8 has an invalid length. [ 234.137745][ T9288] netlink: 'syz.4.834': attribute type 1 has an invalid length. [ 234.193989][ T9286] netlink: 'syz.2.833': attribute type 1 has an invalid length. [ 234.860489][ T9307] netlink: 28 bytes leftover after parsing attributes in process `syz.0.840'. [ 235.140721][ T9319] netlink: 28 bytes leftover after parsing attributes in process `syz.0.844'. [ 235.834186][ T9345] netlink: 'syz.0.851': attribute type 1 has an invalid length. [ 235.904899][ T9341] netlink: 'syz.3.852': attribute type 1 has an invalid length. [ 236.281942][ T9348] netlink: 'syz.4.853': attribute type 46 has an invalid length. [ 236.463758][ T9363] FAULT_INJECTION: forcing a failure. [ 236.463758][ T9363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.525535][ T9363] CPU: 0 UID: 0 PID: 9363 Comm: syz.0.858 Not tainted syzkaller #0 PREEMPT(full) [ 236.525561][ T9363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.525572][ T9363] Call Trace: [ 236.525580][ T9363] [ 236.525588][ T9363] dump_stack_lvl+0xe8/0x150 [ 236.525622][ T9363] should_fail_ex+0x40c/0x560 [ 236.525654][ T9363] _copy_from_iter+0x1d3/0x1660 [ 236.525685][ T9363] ? irqentry_exit+0x218/0x8f0 [ 236.525708][ T9363] ? lockdep_hardirqs_on+0x7a/0x110 [ 236.525730][ T9363] ? trace_irq_disable+0x3b/0x140 [ 236.525760][ T9363] ? __pfx__copy_from_iter+0x10/0x10 [ 236.525800][ T9363] ? skb_put+0x112/0x210 [ 236.525824][ T9363] netlink_sendmsg+0x6c0/0xb40 [ 236.525860][ T9363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.525890][ T9363] ? aa_sock_msg_perm+0xf1/0x1b0 [ 236.525920][ T9363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.525942][ T9363] sock_sendmsg_nosec+0x13a/0x180 [ 236.525973][ T9363] ____sys_sendmsg+0x54e/0x850 [ 236.526003][ T9363] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.526038][ T9363] ? import_iovec+0x73/0xa0 [ 236.526063][ T9363] ___sys_sendmsg+0x2a5/0x360 [ 236.526094][ T9363] ? __lock_acquire+0x683/0x2cf0 [ 236.526127][ T9363] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.526178][ T9363] ? __fget_files+0x2a/0x420 [ 236.526219][ T9363] ? __fget_files+0x2a/0x420 [ 236.526245][ T9363] ? __fget_files+0x3a2/0x420 [ 236.526285][ T9363] __x64_sys_sendmsg+0x1b1/0x290 [ 236.526312][ T9363] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 236.526359][ T9363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.526380][ T9363] do_syscall_64+0x174/0x580 [ 236.526405][ T9363] ? clear_bhb_loop+0x40/0x90 [ 236.526430][ T9363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.526449][ T9363] RIP: 0033:0x7fcca059e019 [ 236.526467][ T9363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.526483][ T9363] RSP: 002b:00007fcca1472028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.526503][ T9363] RAX: ffffffffffffffda RBX: 00007fcca0825fa0 RCX: 00007fcca059e019 [ 236.526517][ T9363] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000005 [ 236.526529][ T9363] RBP: 00007fcca1472090 R08: 0000000000000000 R09: 0000000000000000 [ 236.526541][ T9363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.526552][ T9363] R13: 00007fcca0826038 R14: 00007fcca0825fa0 R15: 00007ffe20d7f228 [ 236.526587][ T9363] [ 236.911606][ T9377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.862'. [ 237.608987][ T9380] FAULT_INJECTION: forcing a failure. [ 237.608987][ T9380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.622808][ T9382] netlink: 830 bytes leftover after parsing attributes in process `syz.0.864'. [ 237.681927][ T9380] CPU: 0 UID: 0 PID: 9380 Comm: syz.1.863 Not tainted syzkaller #0 PREEMPT(full) [ 237.681951][ T9380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.681962][ T9380] Call Trace: [ 237.681969][ T9380] [ 237.681977][ T9380] dump_stack_lvl+0xe8/0x150 [ 237.682009][ T9380] should_fail_ex+0x40c/0x560 [ 237.682039][ T9380] _copy_from_user+0x2d/0xb0 [ 237.682060][ T9380] __sys_bpf+0x2e7/0xd90 [ 237.682094][ T9380] ? __pfx___sys_bpf+0x10/0x10 [ 237.682117][ T9380] ? lock_acquire+0x106/0x350 [ 237.682153][ T9380] ? ktime_get+0x45/0x220 [ 237.682193][ T9380] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 237.682232][ T9380] __x64_sys_bpf+0xba/0xd0 [ 237.682256][ T9380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.682276][ T9380] do_syscall_64+0x174/0x580 [ 237.682300][ T9380] ? clear_bhb_loop+0x40/0x90 [ 237.682323][ T9380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.682341][ T9380] RIP: 0033:0x7ff9ab99e019 [ 237.682358][ T9380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.682374][ T9380] RSP: 002b:00007ff9ac8cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 237.682394][ T9380] RAX: ffffffffffffffda RBX: 00007ff9abc25fa0 RCX: 00007ff9ab99e019 [ 237.682408][ T9380] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 237.682420][ T9380] RBP: 00007ff9ac8cf090 R08: 0000000000000000 R09: 0000000000000000 [ 237.682432][ T9380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.682443][ T9380] R13: 00007ff9abc26038 R14: 00007ff9abc25fa0 R15: 00007ffd528fc148 [ 237.682472][ T9380] [ 237.907099][ T9382] netlink: 'syz.0.864': attribute type 63 has an invalid length. [ 237.969367][ T9397] netlink: 'syz.2.866': attribute type 7 has an invalid length. [ 239.888089][ T9471] FAULT_INJECTION: forcing a failure. [ 239.888089][ T9471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.906790][ T9471] CPU: 0 UID: 0 PID: 9471 Comm: syz.3.890 Not tainted syzkaller #0 PREEMPT(full) [ 239.906813][ T9471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 239.906831][ T9471] Call Trace: [ 239.906839][ T9471] [ 239.906846][ T9471] dump_stack_lvl+0xe8/0x150 [ 239.906880][ T9471] should_fail_ex+0x40c/0x560 [ 239.906912][ T9471] _copy_from_iter+0x1d3/0x1660 [ 239.906939][ T9471] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 239.906966][ T9471] ? rcu_is_watching+0x15/0xb0 [ 239.906985][ T9471] ? trace_kmem_cache_alloc+0x29/0xe0 [ 239.907012][ T9471] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 239.907037][ T9471] ? __pfx__copy_from_iter+0x10/0x10 [ 239.907065][ T9471] ? __alloc_skb+0x276/0x7a0 [ 239.907083][ T9471] ? __alloc_skb+0x276/0x7a0 [ 239.907108][ T9471] ? netlink_sendmsg+0x650/0xb40 [ 239.907132][ T9471] ? skb_put+0x112/0x210 [ 239.907156][ T9471] netlink_sendmsg+0x6c0/0xb40 [ 239.907192][ T9471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.907221][ T9471] ? aa_sock_msg_perm+0xf1/0x1b0 [ 239.907251][ T9471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.907274][ T9471] sock_sendmsg_nosec+0x13a/0x180 [ 239.907305][ T9471] ____sys_sendmsg+0x54e/0x850 [ 239.907334][ T9471] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.907368][ T9471] ? import_iovec+0x73/0xa0 [ 239.907392][ T9471] ___sys_sendmsg+0x2a5/0x360 [ 239.907413][ T9471] ? __lock_acquire+0x683/0x2cf0 [ 239.907446][ T9471] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.907495][ T9471] ? __fget_files+0x2a/0x420 [ 239.907536][ T9471] ? __fget_files+0x2a/0x420 [ 239.907561][ T9471] ? __fget_files+0x3a2/0x420 [ 239.907602][ T9471] __x64_sys_sendmsg+0x1b1/0x290 [ 239.907637][ T9471] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 239.907683][ T9471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.907706][ T9471] do_syscall_64+0x174/0x580 [ 239.907728][ T9471] ? trace_irq_disable+0x3b/0x140 [ 239.907754][ T9471] ? clear_bhb_loop+0x40/0x90 [ 239.907779][ T9471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.907798][ T9471] RIP: 0033:0x7f9f8b79e019 [ 239.907816][ T9471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.907832][ T9471] RSP: 002b:00007f9f8c70a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.907851][ T9471] RAX: ffffffffffffffda RBX: 00007f9f8ba25fa0 RCX: 00007f9f8b79e019 [ 239.907865][ T9471] RDX: 0000000000040000 RSI: 0000200000000a80 RDI: 0000000000000003 [ 239.907877][ T9471] RBP: 00007f9f8c70a090 R08: 0000000000000000 R09: 0000000000000000 [ 239.907888][ T9471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.907899][ T9471] R13: 00007f9f8ba26038 R14: 00007f9f8ba25fa0 R15: 00007ffe3cc45be8 [ 239.907935][ T9471] [ 240.327117][ T9476] netlink: 36 bytes leftover after parsing attributes in process `syz.1.892'. [ 240.379275][ T9480] netlink: 108 bytes leftover after parsing attributes in process `syz.0.893'. [ 240.446053][ T4942] Bluetooth: hci3: unexpected event 0x34 length: 15 > 6 [ 240.553346][ T9486] option changes via remount are deprecated (pid=9484 comm=syz.2.896) [ 240.780038][ T9500] openvswitch: netlink: Flow key attribute not present in set flow. [ 240.921511][ T9504] netlink: 60 bytes leftover after parsing attributes in process `syz.2.903'. [ 240.971052][ T9504] netlink: 60 bytes leftover after parsing attributes in process `syz.2.903'. [ 241.147844][ T9516] netlink: 36 bytes leftover after parsing attributes in process `syz.1.907'. [ 241.170272][ T9516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.907'. [ 241.251783][ T9516] siw: device registration error -23 [ 241.268345][ T9518] netlink: 108 bytes leftover after parsing attributes in process `syz.4.909'. [ 241.773333][ T5908] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.176279][ T9528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.912'. [ 242.266566][ T5908] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.366090][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 242.377838][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 242.387952][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 242.397912][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 242.405876][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 242.470761][ T5908] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.668806][ T9546] Illegal XDP return value 4294967282 on prog (id 567) dev N/A, expect packet loss! [ 242.779857][ T5908] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.032844][ T9558] syzkaller0: entered promiscuous mode [ 243.080465][ T9558] syzkaller0: entered allmulticast mode [ 243.437737][ T9560] netlink: 'syz.3.923': attribute type 1 has an invalid length. [ 243.543859][ T9534] wlan0 speed is unknown, defaulting to 1000 [ 243.987336][ T9573] siw: device registration error -23 [ 244.103066][ T5908] bridge_slave_1: left allmulticast mode [ 244.123850][ T5908] bridge_slave_1: left promiscuous mode [ 244.136950][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.203394][ T5908] bridge_slave_0: left allmulticast mode [ 244.232894][ T5908] bridge_slave_0: left promiscuous mode [ 244.261051][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.439476][ T9589] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.928'. [ 244.504845][ T5626] Bluetooth: hci1: command tx timeout [ 244.567767][ T9594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.929'. [ 244.727506][ T5908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.750193][ T5908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.760727][ T5908] bond0 (unregistering): Released all slaves [ 245.455969][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 245.676274][ T9619] netlink: 'syz.3.935': attribute type 9 has an invalid length. [ 245.912369][ T5908] hsr_slave_0: left promiscuous mode [ 245.949133][ T5908] hsr_slave_1: left promiscuous mode [ 245.979931][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.010526][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.043345][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.076263][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.101127][ T5908] batman_adv: batadv0: Interface deactivated: dummy0 [ 246.120426][ T5908] batman_adv: batadv0: Removing interface: dummy0 [ 246.207982][ T5908] veth1_macvtap: left promiscuous mode [ 246.227163][ T5908] veth0_macvtap: left promiscuous mode [ 246.239632][ T5908] veth1_vlan: left promiscuous mode [ 246.250591][ T5908] veth0_vlan: left promiscuous mode [ 246.595032][ T5626] Bluetooth: hci1: command tx timeout [ 247.223390][ T5908] team0 (unregistering): Port device team_slave_1 removed [ 247.261458][ T5908] team0 (unregistering): Port device team_slave_0 removed [ 247.388887][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 247.683914][ T9534] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.691453][ T9534] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.698768][ T9534] bridge_slave_0: entered allmulticast mode [ 247.708658][ T9534] bridge_slave_0: entered promiscuous mode [ 247.718830][ T9534] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.734951][ T9534] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.752505][ T9534] bridge_slave_1: entered allmulticast mode [ 247.788744][ T9534] bridge_slave_1: entered promiscuous mode [ 247.797917][ T9669] netlink: 224 bytes leftover after parsing attributes in process `syz.1.947'. [ 247.827753][ T9670] netlink: 'syz.0.944': attribute type 21 has an invalid length. [ 247.863155][ T9670] netlink: 128 bytes leftover after parsing attributes in process `syz.0.944'. [ 247.968310][ T9672] siw: device registration error -23 [ 248.007496][ T9670] netlink: 'syz.0.944': attribute type 5 has an invalid length. [ 248.028111][ T9670] netlink: 'syz.0.944': attribute type 6 has an invalid length. [ 248.053113][ T9670] netlink: 3 bytes leftover after parsing attributes in process `syz.0.944'. [ 248.129142][ T9534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.157542][ T9534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.277667][ T9534] team0: Port device team_slave_0 added [ 248.323250][ T9534] team0: Port device team_slave_1 added [ 248.356387][ T9674] xt_hashlimit: size too large, truncated to 1048576 [ 248.418203][ T9534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.488147][ T9534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.595093][ T9534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.617608][ T9534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.624662][ T9534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.665569][ T5626] Bluetooth: hci1: command tx timeout [ 248.742267][ T9534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.109592][ T9534] hsr_slave_0: entered promiscuous mode [ 249.127472][ T9534] hsr_slave_1: entered promiscuous mode [ 249.269352][ T9704] netlink: 'syz.4.956': attribute type 10 has an invalid length. [ 249.351264][ T9704] macvlan1: entered promiscuous mode [ 249.371516][ T9704] macvlan1: entered allmulticast mode [ 249.492404][ T9704] veth1_vlan: entered allmulticast mode [ 249.571145][ T9704] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 249.928880][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 250.321267][ T9534] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 250.347634][ T9534] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 250.357971][ T9534] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 250.446517][ T9534] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 250.455551][ T9534] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 250.573266][ T9534] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 250.598585][ T9534] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 250.615877][ T9534] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 250.744768][ T5626] Bluetooth: hci1: command tx timeout [ 250.951013][ T9534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.046445][ T9534] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.087060][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.094291][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.134952][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.142122][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.059311][ T9777] syzkaller0: entered promiscuous mode [ 252.073735][ T9777] syzkaller0: entered allmulticast mode [ 252.090824][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 252.314785][ T9786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.973'. [ 252.325037][ T9786] netlink: 20 bytes leftover after parsing attributes in process `syz.1.973'. [ 252.363703][ T9786] netlink: 40 bytes leftover after parsing attributes in process `syz.1.973'. [ 253.978680][ T9534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.502958][ T9817] netlink: 'syz.0.980': attribute type 10 has an invalid length. [ 254.706563][ T9811] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.913450][ T9817] batman_adv: batadv0: Adding interface: dummy0 [ 254.921400][ T9817] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.956596][ T9817] batman_adv: batadv0: Interface activated: dummy0 [ 255.100160][ T9534] veth0_vlan: entered promiscuous mode [ 255.138086][ T9827] netlink: 'syz.4.984': attribute type 10 has an invalid length. [ 255.162277][ T9534] veth1_vlan: entered promiscuous mode [ 255.181027][ T9827] netlink: 40 bytes leftover after parsing attributes in process `syz.4.984'. [ 255.214141][ T9827] batadv0: entered promiscuous mode [ 255.226493][ T9827] batadv0: entered allmulticast mode [ 255.238125][ T9827] bridge0: port 4(batadv0) entered blocking state [ 255.248233][ T9827] bridge0: port 4(batadv0) entered disabled state [ 255.273415][ T9827] bridge0: port 4(batadv0) entered blocking state [ 255.280031][ T9827] bridge0: port 4(batadv0) entered forwarding state [ 255.315935][ T160] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 255.325866][ T160] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 255.364142][ T9534] veth0_macvtap: entered promiscuous mode [ 255.419202][ T9534] veth1_macvtap: entered promiscuous mode [ 255.508138][ T9534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.547299][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.557518][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.571773][ T9534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.643723][ T6148] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.684731][ T6148] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.721573][ T6148] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.767926][ T6148] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.916937][ T5907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.937372][ T5907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.024129][ T5908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.046204][ T5908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.948194][ T5288] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 257.418933][ T9878] netlink: 'syz.5.911': attribute type 10 has an invalid length. [ 257.445306][ T9878] batman_adv: batadv0: Adding interface: dummy0 [ 257.460050][ T9878] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.487955][ T9880] netlink: 'syz.1.998': attribute type 10 has an invalid length. [ 257.515090][ T9878] batman_adv: batadv0: Interface activated: dummy0 [ 257.528836][ T9880] netlink: 40 bytes leftover after parsing attributes in process `syz.1.998'. [ 257.569991][ T9880] batadv0: entered promiscuous mode [ 257.587618][ T9880] batadv0: entered allmulticast mode [ 257.606793][ T9880] bridge0: port 3(batadv0) entered blocking state [ 257.627744][ T9880] bridge0: port 3(batadv0) entered disabled state [ 257.650862][ T9880] bridge0: port 3(batadv0) entered blocking state [ 257.657449][ T9880] bridge0: port 3(batadv0) entered forwarding state [ 257.796158][ T9888] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1002'. [ 257.875113][ T5907] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 257.884393][ T5907] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 258.009042][ T9893] netlink: 'syz.5.1004': attribute type 10 has an invalid length. [ 258.010408][ T9898] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1006'. [ 258.094701][ T9893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.105657][ T9893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.171090][ T9904] netlink: 'syz.1.1009': attribute type 9 has an invalid length. [ 258.446185][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1010'. [ 258.664351][ T9914] xt_NFQUEUE: number of total queues is 0 [ 259.066583][ T9920] netlink: 'syz.1.1010': attribute type 21 has an invalid length. [ 259.109105][ T9920] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1010'. [ 259.129475][ T9893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.143220][ T9893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.317927][ T9893] batman_adv: batadv0: Interface deactivated: dummy0 [ 259.360313][ T9893] batman_adv: batadv0: Removing interface: dummy0 [ 259.555534][ T9929] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.1012'. [ 259.592423][ T9928] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1011'. [ 259.617981][ T9918] pim6reg1: tun_chr_ioctl cmd 1074812118 [ 259.650966][ T9920] netlink: 'syz.1.1010': attribute type 5 has an invalid length. [ 259.678262][ T9920] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1010'. [ 259.719773][ T9921] syzkaller0: entered promiscuous mode [ 259.735409][ T9921] syzkaller0: entered allmulticast mode [ 259.789740][ T9933] netlink: 'syz.0.1013': attribute type 16 has an invalid length. [ 259.797678][ T9933] netlink: 'syz.0.1013': attribute type 3 has an invalid length. [ 259.805625][ T9933] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1013'. [ 259.852565][ T9931] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1011'. [ 259.908101][ T9931] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 260.649808][ T9949] netlink: 'syz.3.1019': attribute type 10 has an invalid length. [ 261.346492][ T9958] netlink: 'syz.5.1021': attribute type 4 has an invalid length. [ 261.372422][ T9958] netlink: 'syz.5.1021': attribute type 1 has an invalid length. [ 261.923269][ T9966] netlink: 'syz.5.1025': attribute type 46 has an invalid length. [ 261.973151][ T9971] netlink: 'syz.1.1026': attribute type 10 has an invalid length. [ 262.665670][ T9999] FAULT_INJECTION: forcing a failure. [ 262.665670][ T9999] name failslab, interval 1, probability 0, space 0, times 0 [ 262.682950][ T9995] netlink: 'syz.5.1034': attribute type 10 has an invalid length. [ 262.714018][ T9999] CPU: 0 UID: 0 PID: 9999 Comm: syz.3.1036 Not tainted syzkaller #0 PREEMPT(full) [ 262.714041][ T9999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 262.714052][ T9999] Call Trace: [ 262.714060][ T9999] [ 262.714068][ T9999] dump_stack_lvl+0xe8/0x150 [ 262.714102][ T9999] should_fail_ex+0x40c/0x560 [ 262.714135][ T9999] should_failslab+0xa8/0x100 [ 262.714157][ T9999] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 262.714184][ T9999] ? skb_clone+0x212/0x3a0 [ 262.714203][ T9999] ? skb_clone+0x212/0x3a0 [ 262.714230][ T9999] skb_clone+0x212/0x3a0 [ 262.714256][ T9999] __netlink_deliver_tap+0x413/0x860 [ 262.714289][ T9999] ? netlink_deliver_tap+0x2e/0x1b0 [ 262.714314][ T9999] netlink_deliver_tap+0x19c/0x1b0 [ 262.714338][ T9999] netlink_unicast+0x77f/0x940 [ 262.714372][ T9999] netlink_sendmsg+0x813/0xb40 [ 262.714408][ T9999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.714438][ T9999] ? aa_sock_msg_perm+0xf1/0x1b0 [ 262.714469][ T9999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.714493][ T9999] sock_sendmsg_nosec+0x13a/0x180 [ 262.714525][ T9999] ____sys_sendmsg+0x54e/0x850 [ 262.714563][ T9999] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.714599][ T9999] ? import_iovec+0x73/0xa0 [ 262.714624][ T9999] ___sys_sendmsg+0x2a5/0x360 [ 262.714645][ T9999] ? __lock_acquire+0x683/0x2cf0 [ 262.714678][ T9999] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.714730][ T9999] ? __fget_files+0x2a/0x420 [ 262.714772][ T9999] ? __fget_files+0x2a/0x420 [ 262.714798][ T9999] ? __fget_files+0x3a2/0x420 [ 262.714839][ T9999] __x64_sys_sendmsg+0x1b1/0x290 [ 262.714865][ T9999] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 262.714910][ T9999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.714932][ T9999] do_syscall_64+0x174/0x580 [ 262.714955][ T9999] ? trace_irq_disable+0x3b/0x140 [ 262.714981][ T9999] ? clear_bhb_loop+0x40/0x90 [ 262.715006][ T9999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.715026][ T9999] RIP: 0033:0x7f9f8b79e019 [ 262.715044][ T9999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.715061][ T9999] RSP: 002b:00007f9f8c70a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.715081][ T9999] RAX: ffffffffffffffda RBX: 00007f9f8ba25fa0 RCX: 00007f9f8b79e019 [ 262.715095][ T9999] RDX: 0000000000040000 RSI: 0000200000000a80 RDI: 0000000000000003 [ 262.715107][ T9999] RBP: 00007f9f8c70a090 R08: 0000000000000000 R09: 0000000000000000 [ 262.715119][ T9999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.715130][ T9999] R13: 00007f9f8ba26038 R14: 00007f9f8ba25fa0 R15: 00007ffe3cc45be8 [ 262.715167][ T9999] [ 263.344176][T10012] __nla_validate_parse: 5 callbacks suppressed [ 263.344193][T10012] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1042'. [ 263.391179][T10014] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1042'. [ 263.458320][T10013] syzkaller0: entered promiscuous mode [ 263.463848][T10013] syzkaller0: entered allmulticast mode [ 263.475840][T10018] FAULT_INJECTION: forcing a failure. [ 263.475840][T10018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.496650][T10018] CPU: 0 UID: 0 PID: 10018 Comm: syz.0.1041 Not tainted syzkaller #0 PREEMPT(full) [ 263.496674][T10018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 263.496687][T10018] Call Trace: [ 263.496694][T10018] [ 263.496703][T10018] dump_stack_lvl+0xe8/0x150 [ 263.496738][T10018] should_fail_ex+0x40c/0x560 [ 263.496772][T10018] _copy_to_user+0x31/0xb0 [ 263.496796][T10018] simple_read_from_buffer+0xe1/0x170 [ 263.496833][T10018] proc_fail_nth_read+0x1bb/0x230 [ 263.496868][T10018] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 263.496903][T10018] ? rw_verify_area+0x24a/0x4c0 [ 263.496927][T10018] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 263.496957][T10018] vfs_read+0x213/0xa80 [ 263.496992][T10018] ? __pfx___mutex_lock+0x10/0x10 [ 263.497018][T10018] ? __pfx_vfs_read+0x10/0x10 [ 263.497041][T10018] ? __fget_files+0x2a/0x420 [ 263.497076][T10018] ? __fget_files+0x3a2/0x420 [ 263.497103][T10018] ? __fget_files+0x2a/0x420 [ 263.497144][T10018] ksys_read+0x150/0x270 [ 263.497168][T10018] ? __pfx_ksys_read+0x10/0x10 [ 263.497200][T10018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.497223][T10018] do_syscall_64+0x174/0x580 [ 263.497246][T10018] ? trace_irq_disable+0x3b/0x140 [ 263.497273][T10018] ? clear_bhb_loop+0x40/0x90 [ 263.497298][T10018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.497319][T10018] RIP: 0033:0x7fcca055e84e [ 263.497338][T10018] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 263.497355][T10018] RSP: 002b:00007fcca1450fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 263.497375][T10018] RAX: ffffffffffffffda RBX: 00007fcca14516c0 RCX: 00007fcca055e84e [ 263.497389][T10018] RDX: 000000000000000f RSI: 00007fcca14510a0 RDI: 0000000000000007 [ 263.497401][T10018] RBP: 00007fcca1451090 R08: 0000000000000000 R09: 0000000000000000 [ 263.497414][T10018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.497425][T10018] R13: 00007fcca0826128 R14: 00007fcca0826090 R15: 00007ffe20d7f228 [ 263.497462][T10018] [ 263.888865][T10023] netlink: 'syz.5.1043': attribute type 16 has an invalid length. [ 264.682971][T10036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1046'. [ 264.723059][T10037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1045'. [ 265.032260][T10037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1045'. [ 265.283505][T10037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1045'. [ 265.543436][T10062] validate_nla: 1 callbacks suppressed [ 265.543467][T10062] netlink: 'syz.1.1050': attribute type 10 has an invalid length. [ 266.748484][T10062] batman_adv: batadv0: Adding interface: dummy0 [ 266.790487][T10062] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.824862][T10062] batman_adv: batadv0: Interface activated: dummy0 [ 266.892264][T10052] wlan0 speed is unknown, defaulting to 1000 [ 267.116057][T10086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1054'. [ 268.091388][T10108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1058'. [ 268.476491][T10114] syzkaller0: entered promiscuous mode [ 268.497730][T10114] syzkaller0: entered allmulticast mode [ 268.511075][T10121] netlink: 'syz.0.1062': attribute type 32 has an invalid length. [ 268.591390][T10121] netlink: 'syz.0.1062': attribute type 9 has an invalid length. [ 268.633093][T10118] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1061'. [ 268.648091][T10121] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1062'. [ 269.288502][T10135] FAULT_INJECTION: forcing a failure. [ 269.288502][T10135] name failslab, interval 1, probability 0, space 0, times 0 [ 269.322005][T10135] CPU: 0 UID: 0 PID: 10135 Comm: syz.4.1068 Not tainted syzkaller #0 PREEMPT(full) [ 269.322029][T10135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 269.322040][T10135] Call Trace: [ 269.322052][T10135] [ 269.322063][T10135] dump_stack_lvl+0xe8/0x150 [ 269.322124][T10135] should_fail_ex+0x40c/0x560 [ 269.322193][T10135] should_failslab+0xa8/0x100 [ 269.322235][T10135] __kmalloc_noprof+0xfe/0x720 [ 269.322283][T10135] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 269.322318][T10135] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 269.322399][T10135] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 269.322483][T10135] genl_family_rcv_msg_doit+0xda/0x340 [ 269.322561][T10135] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 269.322645][T10135] ? apparmor_capable+0x126/0x170 [ 269.322697][T10135] ? bpf_lsm_capable+0x9/0x20 [ 269.322726][T10135] ? security_capable+0x7e/0x2c0 [ 269.322796][T10135] genl_rcv_msg+0x614/0x7a0 [ 269.322876][T10135] ? __pfx_genl_rcv_msg+0x10/0x10 [ 269.322915][T10135] ? __pfx_smc_pnet_flush+0x10/0x10 [ 269.322970][T10135] ? perf_trace_run_bpf_submit+0x100/0x170 [ 269.323054][T10135] netlink_rcv_skb+0x226/0x4a0 [ 269.323105][T10135] ? __pfx_genl_rcv_msg+0x10/0x10 [ 269.323157][T10135] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 269.323281][T10135] ? down_read+0x2be/0x330 [ 269.323342][T10135] genl_rcv+0x28/0x40 [ 269.323379][T10135] netlink_unicast+0x7bb/0x940 [ 269.323478][T10135] netlink_sendmsg+0x813/0xb40 [ 269.323515][T10135] ? __pfx_trace_call_bpf+0x10/0x10 [ 269.323584][T10135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.323645][T10135] ? aa_sock_msg_perm+0xf1/0x1b0 [ 269.323712][T10135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.323743][T10135] sock_sendmsg_nosec+0x13a/0x180 [ 269.323802][T10135] ____sys_sendmsg+0x54e/0x850 [ 269.323872][T10135] ? __pfx_____sys_sendmsg+0x10/0x10 [ 269.323975][T10135] ? import_iovec+0x73/0xa0 [ 269.324031][T10135] ___sys_sendmsg+0x2a5/0x360 [ 269.324108][T10135] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.324270][T10135] ? __fget_files+0x2a/0x420 [ 269.324369][T10135] ? __fget_files+0x2a/0x420 [ 269.324403][T10135] ? __fget_files+0x3a2/0x420 [ 269.324502][T10135] __x64_sys_sendmsg+0x1b1/0x290 [ 269.324556][T10135] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 269.324693][T10135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.324729][T10135] do_syscall_64+0x174/0x580 [ 269.324770][T10135] ? clear_bhb_loop+0x40/0x90 [ 269.324819][T10135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.324844][T10135] RIP: 0033:0x7f708459e019 [ 269.324872][T10135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.324888][T10135] RSP: 002b:00007f7085546028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.324908][T10135] RAX: ffffffffffffffda RBX: 00007f7084825fa0 RCX: 00007f708459e019 [ 269.324922][T10135] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 269.324934][T10135] RBP: 00007f7085546090 R08: 0000000000000000 R09: 0000000000000000 [ 269.324946][T10135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.324957][T10135] R13: 00007f7084826038 R14: 00007f7084825fa0 R15: 00007fff6f92c3d8 [ 269.325069][T10135] [ 270.161774][T10125] netlink: 'syz.3.1064': attribute type 17 has an invalid length. [ 270.378806][T10140] netlink: 'syz.1.1069': attribute type 16 has an invalid length. [ 270.386739][T10140] netlink: 'syz.1.1069': attribute type 17 has an invalid length. [ 270.734193][T10140] bridge0: port 3(batadv0) entered disabled state [ 270.801575][T10140] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.857369][T10140] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.010214][ T133] ip6_tunnel: ÿ xmit: Local address not yet configured! [ 272.392661][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1075'. [ 272.555268][T10185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1077'. [ 272.641774][T10179] pim6reg1: tun_chr_ioctl cmd 1074812118 [ 272.677191][T10176] netlink: 'syz.0.1075': attribute type 21 has an invalid length. [ 272.697527][T10176] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1075'. [ 272.726380][T10176] netlink: 'syz.0.1075': attribute type 5 has an invalid length. [ 272.743730][T10176] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1075'. [ 273.012821][T10214] netlink: 'syz.3.1082': attribute type 10 has an invalid length. [ 273.060072][T10214] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.148952][T10214] bond0: (slave team0): Enslaving as an active interface with an up link [ 273.320079][T10223] netlink: 'syz.0.1083': attribute type 10 has an invalid length. [ 274.718456][ T5908] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.830330][ T5908] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.984582][ C1] ip6_tunnel: ÿ xmit: Local address not yet configured! [ 275.025029][ T5908] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.197622][ T5908] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.420580][ T4942] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 275.432957][ T4942] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 275.441030][ T4942] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 275.453766][ T4942] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 275.465893][ T4942] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 275.841775][ T5908] bridge_slave_1: left allmulticast mode [ 275.871070][ T5908] bridge_slave_1: left promiscuous mode [ 275.898892][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.962523][ T5908] bridge_slave_0: left allmulticast mode [ 275.977283][ T5908] bridge_slave_0: left promiscuous mode [ 275.993335][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.198636][T10319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1107'. [ 277.240562][ T5908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.260361][ T5908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.281389][T10352] netlink: 'syz.4.1110': attribute type 11 has an invalid length. [ 277.309715][ T5908] bond0 (unregistering): (slave team0): Releasing backup interface [ 277.317786][T10352] netlink: 448 bytes leftover after parsing attributes in process `syz.4.1110'. [ 277.339806][ T5908] bond0 (unregistering): Released all slaves [ 277.479857][ T5288] 8021q: adding VLAN 0 to HW filter on device eth5 [ 277.544465][ T5626] Bluetooth: hci3: command tx timeout [ 277.614073][ T5908] : left promiscuous mode [ 278.441932][T10289] wlan0 speed is unknown, defaulting to 1000 [ 278.562873][ T5908] hsr_slave_0: left promiscuous mode [ 278.585607][ T5908] hsr_slave_1: left promiscuous mode [ 278.601966][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.629237][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.674142][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.705323][T10402] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1123'. [ 278.722481][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.751969][ T5908] batman_adv: batadv0: Interface deactivated: dummy0 [ 278.774336][ T5908] batman_adv: batadv0: Removing interface: dummy0 [ 278.865556][ T5908] veth1_macvtap: left promiscuous mode [ 278.889459][ T5908] veth0_macvtap: left promiscuous mode [ 278.904308][ T5908] veth1_vlan: left promiscuous mode [ 278.926294][ T5908] veth0_vlan: left promiscuous mode [ 279.624602][ T5626] Bluetooth: hci3: command tx timeout [ 279.641093][ T5908] team0 (unregistering): Port device team_slave_1 removed [ 279.689443][ T5908] team0 (unregistering): Port device team_slave_0 removed [ 279.902710][ T5288] 8021q: adding VLAN 0 to HW filter on device eth6 [ 280.229212][T10434] netlink: 'syz.1.1131': attribute type 2 has an invalid length. [ 280.244517][T10434] netlink: 'syz.1.1131': attribute type 11 has an invalid length. [ 280.258210][T10430] netlink: 'syz.0.1127': attribute type 10 has an invalid length. [ 280.264220][T10434] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1131'. [ 280.339120][T10436] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1130'. [ 280.503547][T10440] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1131'. [ 280.852178][T10457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1135'. [ 281.040856][T10289] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.052897][T10289] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.064868][T10289] bridge_slave_0: entered allmulticast mode [ 281.076498][T10289] bridge_slave_0: entered promiscuous mode [ 281.095753][T10289] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.114675][T10289] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.126613][T10289] bridge_slave_1: entered allmulticast mode [ 281.143892][T10289] bridge_slave_1: entered promiscuous mode [ 281.221303][T10289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.242197][T10289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.338751][T10289] team0: Port device team_slave_0 added [ 281.360409][T10289] team0: Port device team_slave_1 added [ 281.457184][T10289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.471250][T10289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.514401][T10289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.546762][T10289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.571075][T10289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.603232][T10289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.711096][ T5626] Bluetooth: hci3: command tx timeout [ 281.738736][ T5288] 8021q: adding VLAN 0 to HW filter on device eth7 [ 281.879407][T10289] hsr_slave_0: entered promiscuous mode [ 281.913555][T10289] hsr_slave_1: entered promiscuous mode [ 281.935353][T10289] debugfs: 'hsr0' already exists in 'hsr' [ 281.951325][T10289] Cannot create hsr debugfs directory [ 282.301022][T10493] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1141'. [ 282.313044][T10494] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1142'. [ 283.654898][T10289] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 283.669428][T10289] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 283.680917][T10289] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 283.752231][T10289] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 283.784521][ T5626] Bluetooth: hci3: command tx timeout [ 283.794189][T10289] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 283.841270][T10289] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 283.856909][ T5288] 8021q: adding VLAN 0 to HW filter on device eth8 [ 283.907806][T10289] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 283.940908][T10289] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 284.017466][T10539] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1153'. [ 284.271265][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1155'. [ 284.308864][T10289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.521209][T10561] netlink: 'syz.0.1158': attribute type 21 has an invalid length. [ 284.595412][T10561] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1158'. [ 284.643858][T10289] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.661631][T10551] pim6reg1: tun_chr_ioctl cmd 1074812118 [ 284.712086][ T5908] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.719312][ T5908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.750593][ T5908] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.757760][ T5908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.927215][T10570] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1160'. [ 284.966329][T10570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1160'. [ 285.006035][T10575] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1161'. [ 285.491218][T10594] netlink: 'syz.4.1166': attribute type 10 has an invalid length. [ 285.543132][T10594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.574126][T10594] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.615925][T10594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.636030][T10594] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.666760][T10594] batman_adv: batadv0: Interface deactivated: dummy0 [ 285.678122][T10594] batman_adv: batadv0: Removing interface: dummy0 [ 285.701283][T10594] bridge0: port 4(batadv0) entered disabled state [ 285.730351][T10594] bridge0: port 4(batadv0) entered disabled state [ 285.941338][T10603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1170'. [ 286.217141][T10603] pim6reg1: tun_chr_ioctl cmd 1074812118 [ 286.245221][T10603] netlink: 'syz.1.1170': attribute type 21 has an invalid length. [ 286.258695][T10603] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1170'. [ 286.289436][T10289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.349721][T10604] netlink: 'syz.5.1169': attribute type 1 has an invalid length. [ 286.404013][T10603] netlink: 'syz.1.1170': attribute type 5 has an invalid length. [ 286.860511][ T30] audit: type=1107 audit(1785719707.342:2): pid=10614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Nf:4Þmá­©ÐçÈn×Zšía xLˆæ®®:~)|'ª¥ÙsüÍù†r‚gÅ`ðb®A_Mr—' [ 287.277981][T10639] netlink: 'syz.0.1179': attribute type 10 has an invalid length. [ 287.304961][T10639] batadv0: entered promiscuous mode [ 287.315540][T10639] batadv0: entered allmulticast mode [ 287.328094][T10639] bridge0: port 3(batadv0) entered blocking state [ 287.351760][T10639] bridge0: port 3(batadv0) entered disabled state [ 287.369082][T10639] bridge0: port 3(batadv0) entered blocking state [ 287.375869][T10639] bridge0: port 3(batadv0) entered forwarding state [ 287.393986][T10289] veth0_vlan: entered promiscuous mode [ 287.417533][T10645] __nla_validate_parse: 2 callbacks suppressed [ 287.417577][T10645] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1180'. [ 287.461866][T10289] veth1_vlan: entered promiscuous mode [ 287.462246][T10647] netlink: 'syz.1.1181': attribute type 32 has an invalid length. [ 287.490605][T10647] netlink: 'syz.1.1181': attribute type 9 has an invalid length. [ 287.521442][T10647] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1181'. [ 287.575645][T10289] veth0_macvtap: entered promiscuous mode [ 287.586194][T10289] veth1_macvtap: entered promiscuous mode [ 287.610164][T10289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.624008][T10289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.645500][ T5907] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.669531][ T5907] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.695421][ T133] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 287.704867][ T133] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 287.718913][ T5907] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.732320][ T5907] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.862121][ T6151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.882698][ T6151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.952974][T10654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1183'. [ 287.967611][T10651] netlink: 'syz.5.1185': attribute type 10 has an invalid length. [ 287.996036][ T5907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.015594][ T5907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.300616][T10666] netlink: 'syz.4.1190': attribute type 10 has an invalid length. [ 288.352863][T10671] bridge0: port 3(batadv0) entered disabled state [ 288.363992][T10671] bridge_slave_1: left allmulticast mode [ 288.369678][T10671] bridge_slave_1: left promiscuous mode [ 288.376107][T10671] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.387135][T10671] bridge_slave_0: left allmulticast mode [ 288.392809][T10671] bridge_slave_0: left promiscuous mode [ 288.398562][T10671] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.574133][T10682] syzkaller0: entered promiscuous mode [ 288.581912][T10683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1194'. [ 288.597843][T10682] syzkaller0: entered allmulticast mode [ 288.685629][T10683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1194'. [ 288.744298][T10691] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1195'. [ 288.889974][T10683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1194'. [ 289.663907][T10702] netlink: 'syz.4.1197': attribute type 11 has an invalid length. [ 289.704884][T10702] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1197'. [ 289.888933][T10717] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1203'. [ 290.137865][T10722] FAULT_INJECTION: forcing a failure. [ 290.137865][T10722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.150955][T10722] CPU: 0 UID: 0 PID: 10722 Comm: syz.4.1204 Not tainted syzkaller #0 PREEMPT(full) [ 290.150978][T10722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 290.150990][T10722] Call Trace: [ 290.151000][T10722] [ 290.151009][T10722] dump_stack_lvl+0xe8/0x150 [ 290.151053][T10722] should_fail_ex+0x40c/0x560 [ 290.151103][T10722] _copy_from_user+0x2d/0xb0 [ 290.151132][T10722] __copy_msghdr+0x390/0x590 [ 290.151178][T10722] ___sys_sendmsg+0x213/0x360 [ 290.151207][T10722] ? perf_trace_run_bpf_submit+0xee/0x170 [ 290.151246][T10722] ? __pfx____sys_sendmsg+0x10/0x10 [ 290.151346][T10722] ? __fget_files+0x2a/0x420 [ 290.151415][T10722] ? __fget_files+0x2a/0x420 [ 290.151445][T10722] ? __fget_files+0x3a2/0x420 [ 290.151510][T10722] __x64_sys_sendmsg+0x1b1/0x290 [ 290.151557][T10722] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 290.151641][T10722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.151670][T10722] do_syscall_64+0x174/0x580 [ 290.151695][T10722] ? trace_irq_disable+0x3b/0x140 [ 290.151726][T10722] ? clear_bhb_loop+0x40/0x90 [ 290.151762][T10722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.151784][T10722] RIP: 0033:0x7f708459e019 [ 290.151807][T10722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.151823][T10722] RSP: 002b:00007f7085525028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.151843][T10722] RAX: ffffffffffffffda RBX: 00007f7084826090 RCX: 00007f708459e019 [ 290.151857][T10722] RDX: 0000000000004040 RSI: 0000200000000540 RDI: 0000000000000003 [ 290.151869][T10722] RBP: 00007f7085525090 R08: 0000000000000000 R09: 0000000000000000 [ 290.151881][T10722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.151892][T10722] R13: 00007f7084826128 R14: 00007f7084826090 R15: 00007fff6f92c3d8 [ 290.151961][T10722] [ 290.551171][T10742] FAULT_INJECTION: forcing a failure. [ 290.551171][T10742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.564964][T10742] CPU: 0 UID: 0 PID: 10742 Comm: syz.1.1208 Not tainted syzkaller #0 PREEMPT(full) [ 290.564988][T10742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 290.565000][T10742] Call Trace: [ 290.565007][T10742] [ 290.565015][T10742] dump_stack_lvl+0xe8/0x150 [ 290.565047][T10742] should_fail_ex+0x40c/0x560 [ 290.565077][T10742] _copy_to_user+0x31/0xb0 [ 290.565099][T10742] simple_read_from_buffer+0xe1/0x170 [ 290.565131][T10742] proc_fail_nth_read+0x1bb/0x230 [ 290.565163][T10742] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.565212][T10742] ? rw_verify_area+0x24a/0x4c0 [ 290.565237][T10742] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.565270][T10742] vfs_read+0x213/0xa80 [ 290.565298][T10742] ? __pfx___mutex_lock+0x10/0x10 [ 290.565326][T10742] ? __pfx_vfs_read+0x10/0x10 [ 290.565350][T10742] ? __fget_files+0x2a/0x420 [ 290.565387][T10742] ? __fget_files+0x3a2/0x420 [ 290.565418][T10742] ? __fget_files+0x2a/0x420 [ 290.565459][T10742] ksys_read+0x150/0x270 [ 290.565485][T10742] ? __pfx_ksys_read+0x10/0x10 [ 290.565525][T10742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.565549][T10742] do_syscall_64+0x174/0x580 [ 290.565575][T10742] ? trace_irq_disable+0x3b/0x140 [ 290.565604][T10742] ? clear_bhb_loop+0x40/0x90 [ 290.565632][T10742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.565654][T10742] RIP: 0033:0x7ff9ab95e84e [ 290.565674][T10742] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 290.565692][T10742] RSP: 002b:00007ff9ac8cefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 290.565716][T10742] RAX: ffffffffffffffda RBX: 00007ff9ac8cf6c0 RCX: 00007ff9ab95e84e [ 290.565732][T10742] RDX: 000000000000000f RSI: 00007ff9ac8cf0a0 RDI: 0000000000000004 [ 290.565745][T10742] RBP: 00007ff9ac8cf090 R08: 0000000000000000 R09: 0000000000000000 [ 290.565759][T10742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.565772][T10742] R13: 00007ff9abc26038 R14: 00007ff9abc25fa0 R15: 00007ffd528fc148 [ 290.565808][T10742] [ 290.867907][T10748] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1209'. [ 291.228619][T10764] validate_nla: 1 callbacks suppressed [ 291.228650][T10764] netlink: 'syz.5.1216': attribute type 21 has an invalid length. [ 291.268005][T10768] netlink: 'syz.1.1215': attribute type 2 has an invalid length. [ 291.314280][T10768] : entered promiscuous mode [ 292.998791][T10809] __nla_validate_parse: 4 callbacks suppressed [ 292.998825][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1231'. [ 293.053831][T10811] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1232'. [ 293.078294][T10808] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1230'. [ 293.091694][T10808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.815027][T10834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1237'. [ 293.980511][T10837] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1237'. [ 294.474710][T10848] netlink: 'syz.0.1241': attribute type 29 has an invalid length. [ 294.586672][T10848] netlink: 'syz.0.1241': attribute type 29 has an invalid length. [ 294.799966][T10860] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1247'. [ 294.861035][T10865] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1249'. [ 296.167942][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1256'. [ 297.377897][T10904] syzkaller0: entered promiscuous mode [ 297.391970][T10904] syzkaller0: entered allmulticast mode [ 297.726550][T10943] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1263'. [ 297.824020][T10947] netlink: 'syz.4.1265': attribute type 32 has an invalid length. [ 297.846239][T10949] netlink: 'syz.0.1266': attribute type 29 has an invalid length. [ 297.855507][T10949] netlink: 'syz.0.1266': attribute type 29 has an invalid length. [ 297.897804][T10951] netlink: 'syz.4.1265': attribute type 9 has an invalid length. [ 298.090239][T10947] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1265'. [ 299.345392][T10995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1277'. [ 299.621499][T11006] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1280'. [ 299.683428][T11010] FAULT_INJECTION: forcing a failure. [ 299.683428][T11010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.752270][T11010] CPU: 1 UID: 0 PID: 11010 Comm: syz.4.1282 Not tainted syzkaller #0 PREEMPT(full) [ 299.752308][T11010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 299.752326][T11010] Call Trace: [ 299.752335][T11010] [ 299.752344][T11010] dump_stack_lvl+0xe8/0x150 [ 299.752378][T11010] should_fail_ex+0x40c/0x560 [ 299.752410][T11010] _copy_from_user+0x2d/0xb0 [ 299.752432][T11010] ___sys_sendmsg+0x1c6/0x360 [ 299.752455][T11010] ? __lock_acquire+0x683/0x2cf0 [ 299.752488][T11010] ? __pfx____sys_sendmsg+0x10/0x10 [ 299.752538][T11010] ? __fget_files+0x2a/0x420 [ 299.752579][T11010] ? __fget_files+0x2a/0x420 [ 299.752606][T11010] ? __fget_files+0x3a2/0x420 [ 299.752645][T11010] __x64_sys_sendmsg+0x1b1/0x290 [ 299.752672][T11010] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 299.752717][T11010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.752744][T11010] do_syscall_64+0x174/0x580 [ 299.752766][T11010] ? trace_irq_disable+0x3b/0x140 [ 299.752791][T11010] ? clear_bhb_loop+0x40/0x90 [ 299.752816][T11010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.752835][T11010] RIP: 0033:0x7f708459e019 [ 299.752853][T11010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.752869][T11010] RSP: 002b:00007f7085546028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.752889][T11010] RAX: ffffffffffffffda RBX: 00007f7084825fa0 RCX: 00007f708459e019 [ 299.752902][T11010] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 299.752914][T11010] RBP: 00007f7085546090 R08: 0000000000000000 R09: 0000000000000000 [ 299.752925][T11010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.752936][T11010] R13: 00007f7084826038 R14: 00007f7084825fa0 R15: 00007fff6f92c3d8 [ 299.752971][T11010] [ 299.897566][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1282'. [ 301.013021][T11037] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1286'. [ 301.842234][T11059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1291'. [ 302.060665][T11069] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1294'. [ 302.081597][T11063] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1292'. [ 302.905954][T11085] syzkaller0: entered promiscuous mode [ 302.920334][T11085] syzkaller0: entered allmulticast mode [ 303.860532][T11131] syzkaller0: entered promiscuous mode [ 303.866660][T11131] syzkaller0: entered allmulticast mode [ 305.268471][T11165] netlink: 'syz.4.1316': attribute type 11 has an invalid length. [ 305.299318][T11165] netlink: 448 bytes leftover after parsing attributes in process `syz.4.1316'. [ 305.655021][T11180] netlink: 'syz.0.1320': attribute type 10 has an invalid length. [ 306.007250][T11192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1324'. [ 306.016189][T11192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1324'. [ 306.025232][T11192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1324'. [ 306.294062][T11195] netlink: 'syz.4.1325': attribute type 29 has an invalid length. [ 306.325163][T11195] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1325'. [ 306.411900][T11195] netlink: 'syz.4.1325': attribute type 29 has an invalid length. [ 307.104687][T11212] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1326'. [ 307.128352][T11215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1326'. [ 307.227249][T11218] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1328'. [ 307.240084][T11219] netlink: 144 bytes leftover after parsing attributes in process `syz.6.1327'. [ 307.898824][T11231] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1330'. [ 307.930285][T11233] netlink: 'syz.1.1332': attribute type 21 has an invalid length. [ 308.262747][T11252] netlink: 'syz.4.1338': attribute type 8 has an invalid length. [ 310.309713][T11305] __nla_validate_parse: 3 callbacks suppressed [ 310.309746][T11305] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1346'. [ 310.338592][T11305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1346'. [ 310.414630][T11313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1349'. [ 310.601546][T11322] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1352'. [ 310.688504][T11326] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1354'. [ 311.664909][T11334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1357'. [ 312.079771][T11343] wlan0 speed is unknown, defaulting to 1000 [ 312.107792][T11358] netlink: 'syz.4.1363': attribute type 10 has an invalid length. [ 312.486541][T11367] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.1365'. [ 313.272058][T11395] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1369'. [ 315.032013][T11420] smbdirect: ib_dev[syi1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 315.059715][T11420] smbdirect: ib_dev[syi1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 315.110771][T11420] smbdirect: ib_dev[syi1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 315.275014][T11420] infiniband syi1: RDMA CMA: cma_listen_on_dev, error -98 [ 315.588316][T11441] netlink: 'syz.5.1381': attribute type 32 has an invalid length. [ 315.609978][T11441] netlink: 'syz.5.1381': attribute type 9 has an invalid length. [ 315.983596][T11428] smbdirect: ib_dev[syi1] renamed to [syz2] [ 316.007541][T11443] siw: device registration error -23 [ 317.001506][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.007918][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.117097][T11456] netlink: 'syz.0.1385': attribute type 21 has an invalid length. [ 317.237471][T11456] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1385'. [ 317.292363][T11464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1388'. [ 319.371297][T11498] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1397'. [ 319.439536][T11499] netlink: 'syz.5.1397': attribute type 21 has an invalid length. [ 319.448013][T11499] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1397'. [ 319.562121][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1399'. [ 319.840178][T11509] netlink: 'syz.0.1401': attribute type 21 has an invalid length. [ 320.444211][T11474] syzkaller0: entered promiscuous mode [ 320.450054][T11474] syzkaller0: entered allmulticast mode [ 320.457248][T11499] netlink: 'syz.5.1397': attribute type 5 has an invalid length. [ 320.465081][T11499] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1397'. [ 320.484039][T11509] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1401'. [ 321.083115][T11532] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1410'. [ 321.717784][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1421'. [ 321.762422][T11561] wlan0 speed is unknown, defaulting to 1000 [ 321.978096][T11578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1422'. [ 322.351302][T11591] netlink: 'syz.1.1427': attribute type 1 has an invalid length. [ 322.728423][T11601] netlink: 'syz.6.1431': attribute type 32 has an invalid length. [ 322.751875][T11601] netlink: 'syz.6.1431': attribute type 9 has an invalid length. [ 323.100309][T11609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1435'. [ 323.110299][T11609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1435'. [ 323.127539][T11609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1435'. [ 323.172212][T11612] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1436'. [ 323.319797][T11616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1437'. [ 323.702601][T11629] FAULT_INJECTION: forcing a failure. [ 323.702601][T11629] name failslab, interval 1, probability 0, space 0, times 0 [ 323.726580][T11629] CPU: 0 UID: 0 PID: 11629 Comm: syz.0.1444 Not tainted syzkaller #0 PREEMPT(full) [ 323.726607][T11629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 323.726621][T11629] Call Trace: [ 323.726639][T11629] [ 323.726670][T11629] dump_stack_lvl+0xe8/0x150 [ 323.726758][T11629] should_fail_ex+0x40c/0x560 [ 323.726867][T11629] should_failslab+0xa8/0x100 [ 323.726930][T11629] __kmalloc_noprof+0xfe/0x720 [ 323.726991][T11629] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 323.727029][T11629] ? tomoyo_encode+0x2ad/0x570 [ 323.727058][T11629] ? tomoyo_encode+0x2ad/0x570 [ 323.727177][T11629] tomoyo_encode+0x2ad/0x570 [ 323.727291][T11629] tomoyo_mount_permission+0x3a4/0x9e0 [ 323.727333][T11629] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 323.727427][T11629] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 323.727456][T11629] ? kasan_save_track+0x4f/0x80 [ 323.728016][T11629] ? kasan_quarantine_put+0xbb/0x1f0 [ 323.728098][T11629] security_sb_mount+0xe4/0x320 [ 323.728188][T11629] path_mount+0xbc/0x1040 [ 323.728290][T11629] ? user_path_at+0xd4/0x160 [ 323.728362][T11629] __se_sys_mount+0x31d/0x420 [ 323.728481][T11629] ? __pfx___se_sys_mount+0x10/0x10 [ 323.728604][T11629] ? __x64_sys_mount+0x20/0xc0 [ 323.728653][T11629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.728705][T11629] do_syscall_64+0x174/0x580 [ 323.728739][T11629] ? trace_irq_disable+0x3b/0x140 [ 323.728787][T11629] ? clear_bhb_loop+0x40/0x90 [ 323.728863][T11629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.728894][T11629] RIP: 0033:0x7fcca059e019 [ 323.728935][T11629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.728951][T11629] RSP: 002b:00007fcca1472028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 323.728971][T11629] RAX: ffffffffffffffda RBX: 00007fcca0825fa0 RCX: 00007fcca059e019 [ 323.728990][T11629] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000200000000000 [ 323.729002][T11629] RBP: 00007fcca1472090 R08: 0000000000000000 R09: 0000000000000000 [ 323.729014][T11629] R10: 0000000000989046 R11: 0000000000000246 R12: 0000000000000001 [ 323.729025][T11629] R13: 00007fcca0826038 R14: 00007fcca0825fa0 R15: 00007ffe20d7f228 [ 323.729229][T11629] [ 323.984775][T11633] netlink: 'syz.4.1446': attribute type 10 has an invalid length. [ 324.166087][T11646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1448'. [ 324.179003][T11646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1448'. [ 324.188296][T11646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1448'. [ 324.991406][T11679] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1460'. [ 325.000906][T11680] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1461'. [ 325.218345][T11688] netlink: 'syz.1.1465': attribute type 21 has an invalid length. [ 326.417499][T11727] netlink: 'syz.5.1479': attribute type 32 has an invalid length. [ 326.455816][T11727] netlink: 'syz.5.1479': attribute type 9 has an invalid length. [ 326.687418][T11733] netlink: 'syz.5.1483': attribute type 10 has an invalid length. [ 326.814026][T11734] syzkaller0: entered promiscuous mode [ 326.819592][T11734] syzkaller0: entered allmulticast mode [ 329.359664][T11799] __nla_validate_parse: 13 callbacks suppressed [ 329.359686][T11799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1504'. [ 329.733438][T11815] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1512'. [ 329.871563][T11818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1513'. [ 330.036804][T11818] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 330.039121][T11818] netlink: 'syz.4.1513': attribute type 3 has an invalid length. [ 330.126897][T11818] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1513'. [ 330.161782][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1516'. [ 330.374834][T11829] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1518'. [ 330.399202][T11829] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1518'. [ 330.526493][T11835] netlink: 'syz.0.1521': attribute type 29 has an invalid length. [ 330.571848][T11835] netlink: 'syz.0.1521': attribute type 29 has an invalid length. [ 330.908788][T11859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.964648][T11856] netlink: 'syz.5.1530': attribute type 21 has an invalid length. [ 330.972638][T11856] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1530'. [ 331.200568][T11861] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1532'. [ 331.252793][T11861] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1532'. [ 331.758865][T11870] netlink: 'syz.1.1535': attribute type 6 has an invalid length. [ 332.038455][T11882] netlink: 'syz.4.1540': attribute type 21 has an invalid length. [ 332.272525][T11890] siw: device registration error -23 [ 332.540638][T11896] netlink: 'syz.0.1546': attribute type 1 has an invalid length. [ 332.561634][T11896] netlink: 'syz.0.1546': attribute type 3 has an invalid length. [ 332.593055][T11896] netlink: 'syz.0.1546': attribute type 27 has an invalid length. [ 333.107999][T11882] syz.4.1540 (11882) used greatest stack depth: 17576 bytes left [ 334.085657][T11947] FAULT_INJECTION: forcing a failure. [ 334.085657][T11947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.147529][T11947] CPU: 1 UID: 0 PID: 11947 Comm: syz.6.1564 Not tainted syzkaller #0 PREEMPT(full) [ 334.147553][T11947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 334.147564][T11947] Call Trace: [ 334.147575][T11947] [ 334.147586][T11947] dump_stack_lvl+0xe8/0x150 [ 334.147636][T11947] should_fail_ex+0x40c/0x560 [ 334.147697][T11947] _copy_from_user+0x2d/0xb0 [ 334.147732][T11947] kstrtouint_from_user+0xd6/0x180 [ 334.147785][T11947] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 334.147900][T11947] proc_fail_nth_write+0x8e/0x210 [ 334.147941][T11947] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 334.148022][T11947] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 334.148066][T11947] vfs_write+0x296/0xba0 [ 334.148141][T11947] ? __pfx_vfs_write+0x10/0x10 [ 334.148183][T11947] ? __fget_files+0x2a/0x420 [ 334.148242][T11947] ? __fget_files+0x3a2/0x420 [ 334.148274][T11947] ? __fget_files+0x2a/0x420 [ 334.148354][T11947] ksys_write+0x150/0x270 [ 334.148398][T11947] ? __pfx_ksys_write+0x10/0x10 [ 334.148471][T11947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.148504][T11947] do_syscall_64+0x174/0x580 [ 334.148530][T11947] ? trace_irq_disable+0x3b/0x140 [ 334.148566][T11947] ? clear_bhb_loop+0x40/0x90 [ 334.148611][T11947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.148634][T11947] RIP: 0033:0x7f314855e84e [ 334.148661][T11947] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 334.148678][T11947] RSP: 002b:00007f31493d0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 334.148698][T11947] RAX: ffffffffffffffda RBX: 00007f31493d16c0 RCX: 00007f314855e84e [ 334.148712][T11947] RDX: 0000000000000001 RSI: 00007f31493d10a0 RDI: 0000000000000004 [ 334.148723][T11947] RBP: 00007f31493d1090 R08: 0000000000000000 R09: 0000000000000000 [ 334.148734][T11947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.148746][T11947] R13: 00007f3148826038 R14: 00007f3148825fa0 R15: 00007ffdc1e24cc8 [ 334.148845][T11947] [ 334.641633][T11957] netlink: 'syz.5.1568': attribute type 9 has an invalid length. [ 335.147263][T11975] netlink: 'syz.1.1575': attribute type 10 has an invalid length. [ 335.159391][T11975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.171484][T11975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.193385][T11979] FAULT_INJECTION: forcing a failure. [ 335.193385][T11979] name failslab, interval 1, probability 0, space 0, times 0 [ 335.223678][T11975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.244581][T11979] CPU: 0 UID: 0 PID: 11979 Comm: syz.5.1577 Not tainted syzkaller #0 PREEMPT(full) [ 335.244606][T11979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 335.244618][T11979] Call Trace: [ 335.244626][T11979] [ 335.244634][T11979] dump_stack_lvl+0xe8/0x150 [ 335.244671][T11979] should_fail_ex+0x40c/0x560 [ 335.244707][T11979] should_failslab+0xa8/0x100 [ 335.244730][T11979] __kmalloc_noprof+0xfe/0x720 [ 335.244757][T11979] ? rcu_is_watching+0x15/0xb0 [ 335.244778][T11979] ? tomoyo_realpath_from_path+0xef/0x640 [ 335.244803][T11979] ? tomoyo_realpath_from_path+0xef/0x640 [ 335.244838][T11979] tomoyo_realpath_from_path+0xef/0x640 [ 335.244877][T11979] ? tomoyo_path_number_perm+0x219/0x5f0 [ 335.244899][T11979] tomoyo_path_number_perm+0x246/0x5f0 [ 335.244935][T11979] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 335.244954][T11979] ? __lock_acquire+0x683/0x2cf0 [ 335.244986][T11979] ? ksys_write+0x1e6/0x270 [ 335.245018][T11979] ? hook_file_ioctl+0x1f0/0x5f0 [ 335.245065][T11979] ? __fget_files+0x2a/0x420 [ 335.245098][T11979] ? __fget_files+0x2a/0x420 [ 335.245123][T11979] ? __fget_files+0x3a2/0x420 [ 335.245150][T11979] ? __fget_files+0x2a/0x420 [ 335.245183][T11979] security_file_ioctl+0xc3/0x2a0 [ 335.245215][T11979] __se_sys_ioctl+0x47/0x170 [ 335.245237][T11979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.245259][T11979] do_syscall_64+0x174/0x580 [ 335.245281][T11979] ? trace_irq_disable+0x3b/0x140 [ 335.245306][T11979] ? clear_bhb_loop+0x40/0x90 [ 335.245331][T11979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.245350][T11979] RIP: 0033:0x7f140199e019 [ 335.245368][T11979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.245385][T11979] RSP: 002b:00007f1402821028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 335.245410][T11979] RAX: ffffffffffffffda RBX: 00007f1401c25fa0 RCX: 00007f140199e019 [ 335.245423][T11979] RDX: 0000200000000080 RSI: 0000000000008994 RDI: 0000000000000005 [ 335.245435][T11979] RBP: 00007f1402821090 R08: 0000000000000000 R09: 0000000000000000 [ 335.245447][T11979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.245458][T11979] R13: 00007f1401c26038 R14: 00007f1401c25fa0 R15: 00007ffee2ea6478 [ 335.245493][T11979] [ 335.245502][T11979] ERROR: Out of memory at tomoyo_realpath_from_path. [ 335.273461][T11975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.560691][T11975] batman_adv: batadv0: Interface deactivated: dummy0 [ 335.581366][T11975] batman_adv: batadv0: Removing interface: dummy0 [ 335.623545][T11987] xt_NFQUEUE: number of total queues is 0 [ 335.707943][T11975] bridge0: port 3(batadv0) entered disabled state [ 335.747667][T11975] bridge0: port 3(batadv0) entered disabled state [ 336.091312][T12002] __nla_validate_parse: 12 callbacks suppressed [ 336.091346][T12002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1583'. [ 336.145260][T11999] netlink: 'syz.5.1582': attribute type 21 has an invalid length. [ 336.153144][T11999] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1582'. [ 336.217525][T12002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1583'. [ 336.371461][T12002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1583'. [ 336.771999][T12020] netlink: 'syz.1.1588': attribute type 29 has an invalid length. [ 336.993200][T12028] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1592'. [ 337.028526][T12028] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1592'. [ 337.469502][T12048] netlink: 'syz.1.1598': attribute type 21 has an invalid length. [ 337.502142][T12048] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1598'. [ 337.759429][T12052] netlink: 'syz.4.1599': attribute type 1 has an invalid length. [ 337.782728][T12052] netlink: 'syz.4.1599': attribute type 2 has an invalid length. [ 337.818237][T12052] netlink: 'syz.4.1599': attribute type 2 has an invalid length. [ 338.211690][T12063] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1604'. [ 338.793431][T12085] netlink: 'syz.0.1610': attribute type 29 has an invalid length. [ 338.845895][T12085] netlink: 'syz.0.1610': attribute type 29 has an invalid length. [ 339.486629][T12097] netlink: 'syz.6.1616': attribute type 1 has an invalid length. [ 340.181514][T12123] netlink: 184 bytes leftover after parsing attributes in process `syz.6.1625'. [ 340.211070][T12123] team0: entered allmulticast mode [ 340.234664][T12123] team_slave_0: entered allmulticast mode [ 340.251608][T12123] team_slave_1: entered allmulticast mode [ 341.960695][T12172] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1641'. [ 342.053936][T12176] FAULT_INJECTION: forcing a failure. [ 342.053936][T12176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.074081][T12176] CPU: 1 UID: 0 PID: 12176 Comm: syz.5.1643 Not tainted syzkaller #0 PREEMPT(full) [ 342.074104][T12176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 342.074114][T12176] Call Trace: [ 342.074121][T12176] [ 342.074129][T12176] dump_stack_lvl+0xe8/0x150 [ 342.074162][T12176] should_fail_ex+0x40c/0x560 [ 342.074192][T12176] _copy_from_user+0x2d/0xb0 [ 342.074213][T12176] ___sys_sendmsg+0x1c6/0x360 [ 342.074234][T12176] ? __lock_acquire+0x683/0x2cf0 [ 342.074266][T12176] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.074319][T12176] ? __fget_files+0x2a/0x420 [ 342.074346][T12176] ? __fget_files+0x3a2/0x420 [ 342.074382][T12176] __x64_sys_sendmsg+0x1b1/0x290 [ 342.074407][T12176] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 342.074446][T12176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.074467][T12176] do_syscall_64+0x174/0x580 [ 342.074491][T12176] ? clear_bhb_loop+0x40/0x90 [ 342.074514][T12176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.074533][T12176] RIP: 0033:0x7f140199e019 [ 342.074550][T12176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.074566][T12176] RSP: 002b:00007f1402821028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.074586][T12176] RAX: ffffffffffffffda RBX: 00007f1401c25fa0 RCX: 00007f140199e019 [ 342.074600][T12176] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000006 [ 342.074612][T12176] RBP: 00007f1402821090 R08: 0000000000000000 R09: 0000000000000000 [ 342.074623][T12176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.074634][T12176] R13: 00007f1401c26038 R14: 00007f1401c25fa0 R15: 00007ffee2ea6478 [ 342.074665][T12176] [ 342.454786][ T5758] page_pool_release_retry() stalled pool shutdown: id 102, 1 inflight 60 sec [ 342.717967][T12172] team0: entered allmulticast mode [ 342.723362][T12172] team_slave_0: entered allmulticast mode [ 342.730670][T12172] žÿ: entered allmulticast mode [ 342.768574][T12182] ¨à'©ÿˆ: renamed from hsr0 (while UP) [ 343.510923][T12213] netlink: 'syz.4.1656': attribute type 11 has an invalid length. [ 343.530103][T12213] FAULT_INJECTION: forcing a failure. [ 343.530103][T12213] name failslab, interval 1, probability 0, space 0, times 0 [ 343.546966][T12213] CPU: 0 UID: 0 PID: 12213 Comm: syz.4.1656 Not tainted syzkaller #0 PREEMPT(full) [ 343.546988][T12213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 343.546999][T12213] Call Trace: [ 343.547007][T12213] [ 343.547014][T12213] dump_stack_lvl+0xe8/0x150 [ 343.547047][T12213] should_fail_ex+0x40c/0x560 [ 343.547078][T12213] should_failslab+0xa8/0x100 [ 343.547098][T12213] __kmalloc_cache_noprof+0xa8/0x660 [ 343.547126][T12213] ? nf_tables_newchain+0x1e10/0x28b0 [ 343.547146][T12213] ? nf_tables_newchain+0x1e10/0x28b0 [ 343.547170][T12213] nf_tables_newchain+0x1e10/0x28b0 [ 343.547203][T12213] ? __pfx_nf_tables_newchain+0x10/0x10 [ 343.547259][T12213] ? nfnl_pernet+0x23/0x240 [ 343.547280][T12213] ? nfnl_pernet+0x23/0x240 [ 343.547309][T12213] ? __nla_parse+0x40/0x60 [ 343.547341][T12213] nfnetlink_rcv+0x1288/0x28c0 [ 343.547394][T12213] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 343.547429][T12213] ? ref_tracker_free+0x689/0x830 [ 343.547477][T12213] ? skb_clone+0x246/0x3a0 [ 343.547504][T12213] ? __netlink_deliver_tap+0x811/0x860 [ 343.547534][T12213] ? netlink_deliver_tap+0x2e/0x1b0 [ 343.547557][T12213] ? netlink_deliver_tap+0x2e/0x1b0 [ 343.547585][T12213] netlink_unicast+0x7bb/0x940 [ 343.547616][T12213] netlink_sendmsg+0x813/0xb40 [ 343.547648][T12213] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.547676][T12213] ? aa_sock_msg_perm+0xf1/0x1b0 [ 343.547710][T12213] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.547733][T12213] sock_sendmsg_nosec+0x13a/0x180 [ 343.547763][T12213] ____sys_sendmsg+0x54e/0x850 [ 343.547791][T12213] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.547822][T12213] ? import_iovec+0x73/0xa0 [ 343.547844][T12213] ___sys_sendmsg+0x2a5/0x360 [ 343.547866][T12213] ? __lock_acquire+0x683/0x2cf0 [ 343.547897][T12213] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.547952][T12213] ? __fget_files+0x2a/0x420 [ 343.547978][T12213] ? __fget_files+0x3a2/0x420 [ 343.548015][T12213] __x64_sys_sendmsg+0x1b1/0x290 [ 343.548040][T12213] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 343.548079][T12213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.548100][T12213] do_syscall_64+0x174/0x580 [ 343.548122][T12213] ? trace_irq_disable+0x3b/0x140 [ 343.548146][T12213] ? clear_bhb_loop+0x40/0x90 [ 343.548169][T12213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.548188][T12213] RIP: 0033:0x7f708459e019 [ 343.548206][T12213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.548223][T12213] RSP: 002b:00007f7085546028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.548243][T12213] RAX: ffffffffffffffda RBX: 00007f7084825fa0 RCX: 00007f708459e019 [ 343.548256][T12213] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 343.548268][T12213] RBP: 00007f7085546090 R08: 0000000000000000 R09: 0000000000000000 [ 343.548279][T12213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 343.548291][T12213] R13: 00007f7084826038 R14: 00007f7084825fa0 R15: 00007fff6f92c3d8 [ 343.548320][T12213] [ 344.138272][T12221] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1659'. [ 344.173371][T12219] netlink: 'syz.1.1658': attribute type 4 has an invalid length. [ 344.226201][T12221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1659'. [ 344.502873][T12234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1664'. [ 344.738030][T12240] netlink: 'syz.1.1666': attribute type 3 has an invalid length. [ 344.765946][T12240] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1666'. [ 345.355728][T12257] siw: device registration error -23 [ 345.510458][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1672'. [ 345.885203][T12277] netlink: 'syz.4.1680': attribute type 3 has an invalid length. [ 345.894066][T12277] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1680'. [ 345.916228][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1679'. [ 346.291811][T12291] FAULT_INJECTION: forcing a failure. [ 346.291811][T12291] name failslab, interval 1, probability 0, space 0, times 0 [ 346.326915][T12291] CPU: 1 UID: 0 PID: 12291 Comm: syz.0.1686 Not tainted syzkaller #0 PREEMPT(full) [ 346.326941][T12291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 346.326952][T12291] Call Trace: [ 346.326959][T12291] [ 346.326967][T12291] dump_stack_lvl+0xe8/0x150 [ 346.327000][T12291] should_fail_ex+0x40c/0x560 [ 346.327029][T12291] should_failslab+0xa8/0x100 [ 346.327049][T12291] __kmalloc_cache_node_noprof+0xaa/0x630 [ 346.327076][T12291] ? __pfx_perf_trace_lock+0x10/0x10 [ 346.327106][T12291] ? __get_vm_area_node+0x136/0x300 [ 346.327127][T12291] ? __get_vm_area_node+0x136/0x300 [ 346.327151][T12291] ? lock_acquire+0x106/0x350 [ 346.327180][T12291] __get_vm_area_node+0x136/0x300 [ 346.327207][T12291] __vmalloc_node_range_noprof+0x358/0x1730 [ 346.327233][T12291] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 346.327262][T12291] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 346.327308][T12291] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 346.327335][T12291] ? irqentry_exit+0x218/0x8f0 [ 346.327357][T12291] ? lockdep_hardirqs_on+0x7a/0x110 [ 346.327379][T12291] ? irqentry_exit+0x218/0x8f0 [ 346.327405][T12291] ? trace_irq_disable+0x3b/0x140 [ 346.327432][T12291] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 346.327457][T12291] __vmalloc_noprof+0xd2/0x120 [ 346.327481][T12291] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 346.327509][T12291] bpf_prog_alloc_no_stats+0x47/0x560 [ 346.327534][T12291] ? bpf_prog_alloc+0x2a/0x1a0 [ 346.327562][T12291] bpf_prog_alloc+0x3c/0x1a0 [ 346.327590][T12291] bpf_prog_load+0x7f8/0x1c20 [ 346.327626][T12291] ? __pfx_bpf_prog_load+0x10/0x10 [ 346.327674][T12291] __sys_bpf+0xd0d/0xd90 [ 346.327707][T12291] ? __pfx___sys_bpf+0x10/0x10 [ 346.327730][T12291] ? lock_acquire+0x106/0x350 [ 346.327757][T12291] ? ktime_get+0x45/0x220 [ 346.327784][T12291] ? ktime_get+0x45/0x220 [ 346.327823][T12291] ? __pfx_clockevents_program_event+0x10/0x10 [ 346.327854][T12291] __x64_sys_bpf+0xba/0xd0 [ 346.327878][T12291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.327898][T12291] do_syscall_64+0x174/0x580 [ 346.327921][T12291] ? clear_bhb_loop+0x40/0x90 [ 346.327944][T12291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.327963][T12291] RIP: 0033:0x7fcca059e019 [ 346.327981][T12291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.327997][T12291] RSP: 002b:00007fcca1472028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 346.328016][T12291] RAX: ffffffffffffffda RBX: 00007fcca0825fa0 RCX: 00007fcca059e019 [ 346.328030][T12291] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 346.328042][T12291] RBP: 00007fcca1472090 R08: 0000000000000000 R09: 0000000000000000 [ 346.328053][T12291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.328065][T12291] R13: 00007fcca0826038 R14: 00007fcca0825fa0 R15: 00007ffe20d7f228 [ 346.328094][T12291] [ 346.328121][T12291] syz.0.1686: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 346.631868][T12297] netlink: 'syz.6.1687': attribute type 2 has an invalid length. [ 346.695160][T12291] ,cpuset=/,mems_allowed=0-1 [ 346.706885][T12291] CPU: 1 UID: 0 PID: 12291 Comm: syz.0.1686 Not tainted syzkaller #0 PREEMPT(full) [ 346.706908][T12291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 346.706920][T12291] Call Trace: [ 346.706928][T12291] [ 346.706935][T12291] dump_stack_lvl+0xe8/0x150 [ 346.706968][T12291] warn_alloc+0x24c/0x270 [ 346.706995][T12291] ? __kasan_kmalloc+0x22/0xb0 [ 346.707025][T12291] ? __pfx_warn_alloc+0x10/0x10 [ 346.707060][T12291] ? __get_vm_area_node+0x2af/0x300 [ 346.707089][T12291] __vmalloc_node_range_noprof+0x37d/0x1730 [ 346.707115][T12291] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 346.707162][T12291] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 346.707189][T12291] ? irqentry_exit+0x218/0x8f0 [ 346.707211][T12291] ? lockdep_hardirqs_on+0x7a/0x110 [ 346.707232][T12291] ? irqentry_exit+0x218/0x8f0 [ 346.707251][T12291] ? trace_irq_disable+0x3b/0x140 [ 346.707278][T12291] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 346.707303][T12291] __vmalloc_noprof+0xd2/0x120 [ 346.707327][T12291] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 346.707355][T12291] bpf_prog_alloc_no_stats+0x47/0x560 [ 346.707388][T12291] ? bpf_prog_alloc+0x2a/0x1a0 [ 346.707415][T12291] bpf_prog_alloc+0x3c/0x1a0 [ 346.707443][T12291] bpf_prog_load+0x7f8/0x1c20 [ 346.707481][T12291] ? __pfx_bpf_prog_load+0x10/0x10 [ 346.707529][T12291] __sys_bpf+0xd0d/0xd90 [ 346.707561][T12291] ? __pfx___sys_bpf+0x10/0x10 [ 346.707584][T12291] ? lock_acquire+0x106/0x350 [ 346.707612][T12291] ? ktime_get+0x45/0x220 [ 346.707640][T12291] ? ktime_get+0x45/0x220 [ 346.707680][T12291] ? __pfx_clockevents_program_event+0x10/0x10 [ 346.707712][T12291] __x64_sys_bpf+0xba/0xd0 [ 346.707735][T12291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.707756][T12291] do_syscall_64+0x174/0x580 [ 346.707779][T12291] ? clear_bhb_loop+0x40/0x90 [ 346.707803][T12291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.707821][T12291] RIP: 0033:0x7fcca059e019 [ 346.707838][T12291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.707854][T12291] RSP: 002b:00007fcca1472028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 346.707873][T12291] RAX: ffffffffffffffda RBX: 00007fcca0825fa0 RCX: 00007fcca059e019 [ 346.707887][T12291] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 346.707899][T12291] RBP: 00007fcca1472090 R08: 0000000000000000 R09: 0000000000000000 [ 346.707911][T12291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.707922][T12291] R13: 00007fcca0826038 R14: 00007fcca0825fa0 R15: 00007ffe20d7f228 [ 346.707951][T12291] [ 346.707975][T12291] Mem-Info: [ 346.977654][T12291] active_anon:6410 inactive_anon:0 isolated_anon:0 [ 346.977654][T12291] active_file:128 inactive_file:59750 isolated_file:0 [ 346.977654][T12291] unevictable:768 dirty:323 writeback:0 [ 346.977654][T12291] slab_reclaimable:10736 slab_unreclaimable:97859 [ 346.977654][T12291] mapped:30048 shmem:1299 pagetables:1416 [ 346.977654][T12291] sec_pagetables:0 bounce:0 [ 346.977654][T12291] kernel_misc_reclaimable:0 [ 346.977654][T12291] free:1313614 free_pcp:9530 free_cma:0 [ 347.027745][T12291] Node 0 active_anon:25640kB inactive_anon:0kB active_file:512kB inactive_file:238796kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120192kB dirty:1288kB writeback:0kB shmem:3660kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12920kB pagetables:5604kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 347.064956][T12291] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 347.105985][T12291] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 347.153663][T12291] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 347.160681][T12291] Node 0 DMA32 free:1290140kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25740kB inactive_anon:0kB active_file:512kB inactive_file:238796kB unevictable:1536kB writepending:1288kB zspages:0kB present:3129332kB managed:2548536kB mlocked:0kB bounce:0kB free_pcp:37780kB local_pcp:17976kB free_cma:0kB [ 347.218770][T12306] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1692'. [ 347.325685][T12291] lowmem_reserve[]: 0 0 0 0 0 [ 347.341771][T12291] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 347.393755][T12291] lowmem_reserve[]: 0 0 0 0 0 [ 347.401871][T12291] Node 1 Normal free:3948828kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 347.483170][T12291] lowmem_reserve[]: 0 0 0 0 0 [ 347.503248][T12291] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 347.516068][T12291] Node 0 DMA32: 3569*4kB (UM) 2685*8kB (UME) 1265*16kB (UM) 717*32kB (UM) 558*64kB (UM) 473*128kB (UM) 276*256kB (UME) 150*512kB (UME) 60*1024kB (UM) 26*2048kB (UM) 208*4096kB (UM) = 1289308kB [ 347.561042][T12291] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 347.572836][T12291] Node 1 Normal: 1*4kB (M) 5*8kB (UM) 7*16kB (UM) 10*32kB (UM) 5*64kB (UM) 4*128kB (UM) 2*256kB (M) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 962*4096kB (UM) = 3948828kB [ 347.589940][T12291] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 347.599517][T12291] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 347.638490][T12291] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 347.648512][T12291] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 347.658866][T12291] 61173 total pagecache pages [ 347.663580][T12291] 0 pages in swap cache [ 347.667762][T12291] Free swap = 124996kB [ 347.671945][T12291] Total swap = 124996kB [ 347.676126][T12291] 2097051 pages RAM [ 347.679956][T12291] 0 pages HighMem/MovableOnly [ 347.684658][T12291] 428237 pages reserved [ 347.691565][T12291] 0 pages cma reserved [ 348.034310][T12316] netlink: 416 bytes leftover after parsing attributes in process `syz.1.1697'. [ 348.177108][T12322] netlink: 'syz.5.1699': attribute type 10 has an invalid length. [ 348.403155][T12331] openvswitch: netlink: IPv6 tunnel dst address is zero [ 349.396946][T12348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1709'. [ 349.486896][T12351] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1710'. [ 353.905849][T12402] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1728'. [ 353.923768][T12402] openvswitch: netlink: Missing key (keys=40, expected=80) [ 354.033284][T12408] netlink: 'syz.5.1728': attribute type 10 has an invalid length. [ 354.059274][T12408] team0: Device vxcan0 is of different type [ 354.122182][T12399] syzkaller0: entered promiscuous mode [ 354.128460][T12399] syzkaller0: entered allmulticast mode [ 354.519101][T12426] netlink: 'syz.6.1734': attribute type 4 has an invalid length. [ 354.547989][T12426] netlink: 'syz.6.1734': attribute type 1 has an invalid length. [ 354.622560][T12430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.730393][T12441] netlink: 'syz.4.1742': attribute type 3 has an invalid length. [ 358.757707][T12441] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1742'. [ 358.988130][T12448] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1744'. [ 359.239635][T12454] syzkaller0: entered promiscuous mode [ 359.245130][T12454] syzkaller0: entered allmulticast mode [ 365.154665][ T4942] Bluetooth: hci1: command 0x0406 tx timeout [ 378.427764][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.436508][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.595697][T12470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1752'. [ 383.631332][T12465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1748'. [ 383.955389][T12488] netlink: 'syz.0.1757': attribute type 3 has an invalid length. [ 383.965175][T12488] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1757'. [ 383.978910][T12489] siw: device registration error -23 [ 384.005390][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1754'. [ 384.025463][T12490] netlink: 'syz.6.1756': attribute type 1 has an invalid length. [ 384.687901][T12504] ±ÿ: renamed from lo [ 384.899089][T12512] netlink: 'syz.5.1764': attribute type 46 has an invalid length. [ 384.915807][T12512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1764'. [ 384.997798][T12512] netlink: 'syz.5.1764': attribute type 11 has an invalid length. [ 385.005902][T12512] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1764'. [ 385.132426][T12520] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1769'. [ 385.163471][T12520] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1769'. [ 385.165193][T12518] siw: device registration error -23 [ 385.709222][T12541] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1777'. [ 386.058147][T12553] netlink: 'syz.0.1782': attribute type 21 has an invalid length. [ 386.073747][T12553] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1782'. [ 386.390982][T12565] siw: device registration error -23 [ 386.566796][T12570] netlink: 'syz.0.1786': attribute type 21 has an invalid length. [ 386.577086][T12570] netlink: 'syz.0.1786': attribute type 5 has an invalid length. [ 387.231734][T12577] netlink: 'syz.5.1787': attribute type 16 has an invalid length. [ 387.239993][T12577] netlink: 'syz.5.1787': attribute type 17 has an invalid length. [ 387.301605][T12577] lo: entered promiscuous mode [ 387.367662][T12577] tunl0: entered promiscuous mode [ 387.380229][T12577] gre0: entered promiscuous mode [ 387.391476][T12577] gretap0: entered promiscuous mode [ 387.398635][T12577] erspan0: entered promiscuous mode [ 387.406208][T12577] ip_vti0: entered promiscuous mode [ 387.417351][T12577] ip6_vti0: entered promiscuous mode [ 387.432254][T12577] sit0: entered promiscuous mode [ 387.441298][T12577] ip6tnl0: entered promiscuous mode [ 387.457274][T12577] ip6gre0: entered promiscuous mode [ 387.466576][T12577] syz_tun: entered promiscuous mode [ 387.475550][T12577] bridge0: entered promiscuous mode [ 387.484007][T12577] vcan0: entered promiscuous mode [ 387.492321][T12577] bond0: entered promiscuous mode [ 387.498334][T12577] bond_slave_0: entered promiscuous mode [ 387.506189][T12577] bond_slave_1: entered promiscuous mode [ 387.517478][T12577] team0: entered promiscuous mode [ 387.522765][T12577] team_slave_0: entered promiscuous mode [ 387.530129][T12577] team_slave_1: entered promiscuous mode [ 387.541840][T12577] dummy0: entered promiscuous mode [ 387.570803][T12577] nlmon0: entered promiscuous mode [ 387.579382][T12577] vxcan0: entered promiscuous mode [ 387.593599][T12577] vxcan1: entered promiscuous mode [ 387.601860][T12577] veth0: entered promiscuous mode [ 387.610085][T12577] veth1: entered promiscuous mode [ 387.618595][T12577] wg0: entered promiscuous mode [ 387.627250][T12577] wg1: entered promiscuous mode [ 387.636487][T12577] wg2: entered promiscuous mode [ 387.644102][T12577] veth0_to_bridge: entered promiscuous mode [ 387.663618][T12577] veth1_to_bridge: entered promiscuous mode [ 387.676518][T12577] veth0_to_bond: entered promiscuous mode [ 387.690046][T12577] veth1_to_bond: entered promiscuous mode [ 387.702568][T12577] veth0_to_team: entered promiscuous mode [ 387.717787][T12577] veth1_to_team: entered promiscuous mode [ 387.729955][T12577] veth0_to_batadv: entered promiscuous mode [ 387.740733][T12577] batadv_slave_0: entered promiscuous mode [ 387.756516][T12577] veth1_to_batadv: entered promiscuous mode [ 387.763088][T12577] batadv_slave_1: entered promiscuous mode [ 387.769583][T12577] xfrm0: entered promiscuous mode [ 387.775427][T12577] veth0_to_hsr: entered promiscuous mode [ 387.782409][T12577] veth1_to_hsr: entered promiscuous mode [ 387.789357][T12577] ¨à'©ÿˆ: entered promiscuous mode [ 387.795302][T12577] veth1_virt_wifi: entered promiscuous mode [ 387.801839][T12577] veth0_virt_wifi: entered promiscuous mode [ 387.808847][T12577] virt_wifi0: entered promiscuous mode [ 387.822733][T12577] vlan0: entered promiscuous mode [ 387.828726][T12577] vlan1: entered promiscuous mode [ 387.835996][T12577] macvlan0: entered promiscuous mode [ 387.842229][T12577] macvlan1: entered promiscuous mode [ 387.848672][T12577] ipvlan0: entered promiscuous mode [ 387.895926][T12577] macvtap0: entered promiscuous mode [ 387.916113][T12577] macsec0: entered promiscuous mode [ 387.933010][T12577] geneve0: entered promiscuous mode [ 387.953503][T12577] geneve1: entered promiscuous mode [ 387.978384][T12577] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 387.988787][T12577] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 387.998906][T12577] netdevsim netdevsim5 netdevsim2: entered promiscuous mode [ 388.009996][T12577] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 388.019814][T12577] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 388.029211][T12577] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 388.037596][T12577] ÿ: entered promiscuous mode [ 388.225704][ T5907] ip6_tunnel: ÿ xmit: Local address not yet configured! [ 388.243744][ T5907] ip6_tunnel: ÿ xmit: Local address not yet configured! [ 388.270991][ T5730] ip6_tunnel: ÿ xmit: Local address not yet configured! [ 388.333153][T12611] FAULT_INJECTION: forcing a failure. [ 388.333153][T12611] name failslab, interval 1, probability 0, space 0, times 0 [ 388.371297][T12611] CPU: 1 UID: 0 PID: 12611 Comm: syz.5.1796 Not tainted syzkaller #0 PREEMPT(full) [ 388.371320][T12611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 388.371338][T12611] Call Trace: [ 388.371345][T12611] [ 388.371353][T12611] dump_stack_lvl+0xe8/0x150 [ 388.371387][T12611] should_fail_ex+0x40c/0x560 [ 388.371418][T12611] should_failslab+0xa8/0x100 [ 388.371438][T12611] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 388.371481][T12611] ? skb_clone+0x212/0x3a0 [ 388.371505][T12611] ? skb_clone+0x212/0x3a0 [ 388.371534][T12611] skb_clone+0x212/0x3a0 [ 388.371574][T12611] __netlink_deliver_tap+0x413/0x860 [ 388.371612][T12611] ? netlink_deliver_tap+0x2e/0x1b0 [ 388.371638][T12611] netlink_deliver_tap+0x19c/0x1b0 [ 388.371664][T12611] netlink_sendskb+0x68/0x140 [ 388.371689][T12611] netlink_rcv_skb+0x2a4/0x4a0 [ 388.371713][T12611] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 388.371738][T12611] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 388.371774][T12611] ? bpf_lsm_capable+0x9/0x20 [ 388.371801][T12611] ? security_capable+0x7e/0x2c0 [ 388.371840][T12611] nfnetlink_rcv+0x2b9/0x28c0 [ 388.371864][T12611] ? __dev_queue_xmit+0x29b/0x3820 [ 388.371892][T12611] ? __local_bh_enable_ip+0xd0/0x130 [ 388.371914][T12611] ? lockdep_hardirqs_on+0x7a/0x110 [ 388.371936][T12611] ? __dev_queue_xmit+0x29b/0x3820 [ 388.371958][T12611] ? __local_bh_enable_ip+0xd0/0x130 [ 388.371978][T12611] ? __dev_queue_xmit+0x29b/0x3820 [ 388.372001][T12611] ? __dev_queue_xmit+0x1edc/0x3820 [ 388.372023][T12611] ? do_syscall_64+0x174/0x580 [ 388.372043][T12611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.372074][T12611] ? __dev_queue_xmit+0x29b/0x3820 [ 388.372099][T12611] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 388.372125][T12611] ? __pfx___dev_queue_xmit+0x10/0x10 [ 388.372157][T12611] ? ref_tracker_free+0x689/0x830 [ 388.372187][T12611] ? __pfx_ref_tracker_free+0x10/0x10 [ 388.372212][T12611] ? __asan_memcpy+0x40/0x70 [ 388.372238][T12611] ? __skb_clone+0x5c/0x6c0 [ 388.372264][T12611] ? __skb_clone+0x449/0x6c0 [ 388.372292][T12611] ? skb_clone+0x246/0x3a0 [ 388.372318][T12611] ? __netlink_deliver_tap+0x811/0x860 [ 388.372340][T12611] ? netlink_deliver_tap+0x2e/0x1b0 [ 388.372368][T12611] ? netlink_deliver_tap+0x2e/0x1b0 [ 388.372390][T12611] ? netlink_deliver_tap+0x2e/0x1b0 [ 388.372417][T12611] netlink_unicast+0x7bb/0x940 [ 388.372447][T12611] netlink_sendmsg+0x813/0xb40 [ 388.372478][T12611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.372504][T12611] ? aa_sock_msg_perm+0xf1/0x1b0 [ 388.372531][T12611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.372552][T12611] sock_sendmsg_nosec+0x13a/0x180 [ 388.372588][T12611] ____sys_sendmsg+0x54e/0x850 [ 388.372614][T12611] ? __pfx_____sys_sendmsg+0x10/0x10 [ 388.372644][T12611] ? import_iovec+0x73/0xa0 [ 388.372666][T12611] ___sys_sendmsg+0x2a5/0x360 [ 388.372686][T12611] ? __lock_acquire+0x683/0x2cf0 [ 388.372716][T12611] ? __pfx____sys_sendmsg+0x10/0x10 [ 388.372768][T12611] ? __fget_files+0x2a/0x420 [ 388.372793][T12611] ? __fget_files+0x3a2/0x420 [ 388.372829][T12611] __x64_sys_sendmsg+0x1b1/0x290 [ 388.372853][T12611] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 388.372890][T12611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.372910][T12611] do_syscall_64+0x174/0x580 [ 388.372930][T12611] ? trace_irq_disable+0x3b/0x140 [ 388.372953][T12611] ? clear_bhb_loop+0x40/0x90 [ 388.372975][T12611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.372994][T12611] RIP: 0033:0x7f140199e019 [ 388.373011][T12611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.373025][T12611] RSP: 002b:00007f1402821028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.373056][T12611] RAX: ffffffffffffffda RBX: 00007f1401c25fa0 RCX: 00007f140199e019 [ 388.373069][T12611] RDX: 0000000000040000 RSI: 0000200000000a80 RDI: 0000000000000003 [ 388.373081][T12611] RBP: 00007f1402821090 R08: 0000000000000000 R09: 0000000000000000 [ 388.373092][T12611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.373103][T12611] R13: 00007f1401c26038 R14: 00007f1401c25fa0 R15: 00007ffee2ea6478 [ 388.373132][T12611] [ 388.776354][ T5730] ip6_tunnel: ÿ xmit: Local address not yet configured! [ 388.800063][T12619] netlink: 'syz.1.1795': attribute type 10 has an invalid length. [ 388.857196][ T5824] ip6_tunnel: ÿ xmit: Local address not yet configured! [ 388.923537][T12622] __nla_validate_parse: 4 callbacks suppressed [ 388.923554][T12622] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1799'. [ 389.483181][T12629] tmpfs: Bad value for 'uid' [ 389.488718][T12629] tmpfs: Bad value for 'uid' [ 389.512292][T12627] ¨à'©ÿˆ: renamed from hsr0 (while UP) [ 389.824948][T12645] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1806'. [ 389.974022][T12648] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1807'. [ 390.253579][T12658] netlink: 'syz.4.1811': attribute type 10 has an invalid length. [ 390.363624][T12662] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1813'. [ 390.584244][T12664] netlink: 'syz.1.1814': attribute type 10 has an invalid length. [ 390.653354][T12665] netlink: 'syz.1.1814': attribute type 10 has an invalid length. [ 390.707455][T12664] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 390.728301][T12664] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 390.738640][T12664] team0: Port device netdevsim1 added [ 390.919794][T12675] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1818'. [ 390.982782][T12671] siw: device registration error -23 [ 391.001762][T12671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1816'. [ 391.090592][T12667] syzkaller0: entered promiscuous mode [ 391.177403][T12667] syzkaller0: entered allmulticast mode [ 391.333000][T12684] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1821'. [ 391.352204][T12684] netlink: 728 bytes leftover after parsing attributes in process `syz.6.1821'. [ 391.665519][T12696] netlink: 'syz.4.1825': attribute type 10 has an invalid length. [ 392.504561][ C0] ip6_tunnel: ÿ xmit: Local address not yet configured! [ 392.839250][T12712] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1830'. [ 392.856359][T12714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1831'. [ 393.568135][T12741] smbdirect: ib_dev[syi1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 393.584129][T12741] smbdirect: ib_dev[syi1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 393.622897][T12741] smbdirect: ib_dev[syi1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 393.736543][T12741] infiniband syi1: RDMA CMA: cma_listen_on_dev, error -98 [ 394.360938][T12749] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.1843'. [ 394.604073][T12754] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.1846'. [ 394.786946][T12747] syzkaller0: entered promiscuous mode [ 394.792903][T12747] syzkaller0: entered allmulticast mode [ 394.853391][T12763] sit0: entered promiscuous mode [ 394.860557][T12763] sit0: entered allmulticast mode [ 394.867694][T12763] netlink: ct family unspecified [ 394.872670][T12763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.985318][T12768] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1851'. [ 395.106078][T12771] netlink: 'syz.1.1853': attribute type 10 has an invalid length. [ 395.488392][T12784] siw: device registration error -23 [ 395.528154][T12780] xt_NFQUEUE: number of total queues is 0 [ 396.271757][T12797] netlink: 'syz.4.1863': attribute type 39 has an invalid length. [ 396.959538][T12797] hsr_slave_0: left promiscuous mode [ 396.980227][T12797] hsr_slave_1: left promiscuous mode [ 397.132861][T12817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1870'. [ 397.152153][T12815] netlink: 416 bytes leftover after parsing attributes in process `syz.5.1868'. [ 397.261663][T12819] netlink: 'syz.1.1871': attribute type 21 has an invalid length. [ 397.290162][T12819] netlink: 'syz.1.1871': attribute type 1 has an invalid length. [ 397.307076][T12819] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1871'. [ 397.318019][T12819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1871'. [ 397.328836][T12819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1871'. [ 397.718061][T12836] netlink: 'syz.6.1876': attribute type 10 has an invalid length. [ 397.728703][T12836] batman_adv: batadv0: Adding interface: dummy0 [ 397.734988][T12836] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.760202][T12836] batman_adv: batadv0: Interface activated: dummy0 [ 400.812886][T12841] netlink: 'syz.5.1877': attribute type 16 has an invalid length. [ 400.824493][ C0] ip6_tunnel: ÿ xmit: Local address not yet configured! [ 400.849376][T12841] netlink: 'syz.5.1877': attribute type 17 has an invalid length. [ 400.952190][T12841] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.973094][T12841] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.068234][ T5626] Bluetooth: hci3: command 0x0406 tx timeout [ 401.364992][T12852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1881'. [ 401.849377][T12869] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1884'. [ 402.113518][T12879] netlink: 'syz.4.1889': attribute type 10 has an invalid length. [ 402.188859][T12885] FAULT_INJECTION: forcing a failure. [ 402.188859][T12885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.197721][T12887] netlink: 'syz.0.1893': attribute type 21 has an invalid length. [ 402.197889][T12887] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1893'. [ 402.239603][T12885] CPU: 1 UID: 0 PID: 12885 Comm: syz.6.1891 Not tainted syzkaller #0 PREEMPT(full) [ 402.239627][T12885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 402.239638][T12885] Call Trace: [ 402.239646][T12885] [ 402.239654][T12885] dump_stack_lvl+0xe8/0x150 [ 402.239687][T12885] should_fail_ex+0x40c/0x560 [ 402.239718][T12885] _copy_from_user+0x2d/0xb0 [ 402.239738][T12885] kstrtouint_from_user+0xd6/0x180 [ 402.239767][T12885] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 402.239809][T12885] proc_fail_nth_write+0x8e/0x210 [ 402.239839][T12885] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 402.239875][T12885] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 402.239903][T12885] vfs_write+0x296/0xba0 [ 402.239931][T12885] ? __pfx_vfs_write+0x10/0x10 [ 402.239952][T12885] ? __fget_files+0x2a/0x420 [ 402.239984][T12885] ? __fget_files+0x3a2/0x420 [ 402.240009][T12885] ? __fget_files+0x2a/0x420 [ 402.240044][T12885] ksys_write+0x150/0x270 [ 402.240066][T12885] ? __pfx_ksys_write+0x10/0x10 [ 402.240094][T12885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.240116][T12885] do_syscall_64+0x174/0x580 [ 402.240142][T12885] ? clear_bhb_loop+0x40/0x90 [ 402.240167][T12885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.240187][T12885] RIP: 0033:0x7f314855e84e [ 402.240204][T12885] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 402.240220][T12885] RSP: 002b:00007f31493d0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 402.240240][T12885] RAX: ffffffffffffffda RBX: 00007f31493d16c0 RCX: 00007f314855e84e [ 402.240254][T12885] RDX: 0000000000000001 RSI: 00007f31493d10a0 RDI: 0000000000000008 [ 402.240266][T12885] RBP: 00007f31493d1090 R08: 0000000000000000 R09: 0000000000000000 [ 402.240278][T12885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.240289][T12885] R13: 00007f3148826038 R14: 00007f3148825fa0 R15: 00007ffdc1e24cc8 [ 402.240330][T12885] [ 402.968626][T12906] netlink: 'syz.1.1900': attribute type 9 has an invalid length. [ 403.001251][T12906] FAULT_INJECTION: forcing a failure. [ 403.001251][T12906] name failslab, interval 1, probability 0, space 0, times 0 [ 403.049149][T12906] CPU: 1 UID: 0 PID: 12906 Comm: syz.1.1900 Not tainted syzkaller #0 PREEMPT(full) [ 403.049172][T12906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 403.049183][T12906] Call Trace: [ 403.049192][T12906] [ 403.049201][T12906] dump_stack_lvl+0xe8/0x150 [ 403.049253][T12906] should_fail_ex+0x40c/0x560 [ 403.049302][T12906] should_failslab+0xa8/0x100 [ 403.049331][T12906] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 403.049359][T12906] ? local_lock_release+0x9c/0x160 [ 403.049388][T12906] ? __alloc_skb+0x1d7/0x7a0 [ 403.049406][T12906] ? __alloc_skb+0x1d7/0x7a0 [ 403.049450][T12906] __alloc_skb+0x1d7/0x7a0 [ 403.049488][T12906] netlink_ack+0x136/0xb30 [ 403.049511][T12906] ? __pfx_genl_rcv_msg+0x10/0x10 [ 403.049593][T12906] netlink_rcv_skb+0x2a4/0x4a0 [ 403.049626][T12906] ? __pfx_genl_rcv_msg+0x10/0x10 [ 403.049665][T12906] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 403.049739][T12906] ? down_read+0x2be/0x330 [ 403.049781][T12906] genl_rcv+0x28/0x40 [ 403.049812][T12906] netlink_unicast+0x7bb/0x940 [ 403.049873][T12906] netlink_sendmsg+0x813/0xb40 [ 403.049929][T12906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.049972][T12906] ? aa_sock_msg_perm+0xf1/0x1b0 [ 403.050018][T12906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.050044][T12906] sock_sendmsg_nosec+0x13a/0x180 [ 403.050087][T12906] ____sys_sendmsg+0x54e/0x850 [ 403.050132][T12906] ? __pfx_____sys_sendmsg+0x10/0x10 [ 403.050189][T12906] ? import_iovec+0x73/0xa0 [ 403.050233][T12906] ___sys_sendmsg+0x2a5/0x360 [ 403.050261][T12906] ? perf_trace_run_bpf_submit+0xee/0x170 [ 403.050299][T12906] ? __pfx____sys_sendmsg+0x10/0x10 [ 403.050392][T12906] ? __fget_files+0x2a/0x420 [ 403.050456][T12906] ? __fget_files+0x2a/0x420 [ 403.050485][T12906] ? __fget_files+0x3a2/0x420 [ 403.050556][T12906] __x64_sys_sendmsg+0x1b1/0x290 [ 403.050594][T12906] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 403.050675][T12906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.050704][T12906] do_syscall_64+0x174/0x580 [ 403.050728][T12906] ? trace_irq_disable+0x3b/0x140 [ 403.050757][T12906] ? clear_bhb_loop+0x40/0x90 [ 403.050792][T12906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.050813][T12906] RIP: 0033:0x7ff9ab99e019 [ 403.050836][T12906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.050853][T12906] RSP: 002b:00007ff9ac8cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.050872][T12906] RAX: ffffffffffffffda RBX: 00007ff9abc25fa0 RCX: 00007ff9ab99e019 [ 403.050886][T12906] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 403.050898][T12906] RBP: 00007ff9ac8cf090 R08: 0000000000000000 R09: 0000000000000000 [ 403.050909][T12906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.050920][T12906] R13: 00007ff9abc26038 R14: 00007ff9abc25fa0 R15: 00007ffd528fc148 [ 403.050984][T12906] [ 403.398134][T12909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1901'. [ 403.479731][T12916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1903'. [ 403.560513][T12918] netlink: 'syz.5.1904': attribute type 10 has an invalid length. [ 403.569113][T12918] dummy0: left promiscuous mode [ 403.601852][T12918] mac80211_hwsim hwsim16 wlan0: left promiscuous mode [ 403.621104][T12921] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1906'. [ 403.647952][T12923] netlink: 'syz.1.1905': attribute type 21 has an invalid length. [ 403.812976][T12923] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1905'. [ 403.918876][T12933] netlink: 'syz.0.1909': attribute type 1 has an invalid length. [ 404.364250][T12944] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1914'. [ 404.435875][T12944] netlink: 'syz.0.1914': attribute type 1 has an invalid length. [ 404.464120][T12947] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1915'. [ 404.480123][T12944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1914'. [ 404.898204][T12958] netlink: 'syz.4.1918': attribute type 21 has an invalid length. [ 404.984210][T12963] netlink: 'syz.0.1920': attribute type 21 has an invalid length. [ 405.209800][T12965] wlan0 speed is unknown, defaulting to 1000 [ 405.880217][T12979] [ 405.882674][T12979] ============================================ [ 405.888830][T12979] WARNING: possible recursive locking detected [ 405.894992][T12979] syzkaller #0 Not tainted [ 405.899401][T12979] -------------------------------------------- [ 405.905545][T12979] syz.5.1924/12979 is trying to acquire lock: [ 405.911603][T12979] ffff88807e50c038 (rhashtable_bucket){-.-.}-{0:0}, at: rht_lock+0x8b/0x180 [ 405.920314][T12979] [ 405.920314][T12979] but task is already holding lock: [ 405.927676][T12979] ffff88807b1b8838 (rhashtable_bucket){-.-.}-{0:0}, at: rht_lock+0x8b/0x180 [ 405.936384][T12979] [ 405.936384][T12979] other info that might help us debug this: [ 405.944439][T12979] Possible unsafe locking scenario: [ 405.944439][T12979] [ 405.951885][T12979] CPU0 [ 405.955168][T12979] ---- [ 405.958445][T12979] lock(rhashtable_bucket); [ 405.963048][T12979] lock(rhashtable_bucket); [ 405.967642][T12979] [ 405.967642][T12979] *** DEADLOCK *** [ 405.967642][T12979] [ 405.975791][T12979] May be due to missing lock nesting notation [ 405.975791][T12979] [ 405.984108][T12979] 6 locks held by syz.5.1924/12979: [ 405.989301][T12979] #0: ffff888034168260 (sk_lock-AF_NETLINK){+.+.}-{0:0}, at: netlink_insert+0xcb/0x1360 [ 405.999142][T12979] #1: ffffffff8eb59c20 (rcu_read_lock){....}-{1:3}, at: netlink_insert+0x2b3/0x1360 [ 406.008643][T12979] #2: ffff88807b1b8838 (rhashtable_bucket){-.-.}-{0:0}, at: rht_lock+0x8b/0x180 [ 406.017806][T12979] #3: ffffffff8eb59c20 (rcu_read_lock){....}-{1:3}, at: trace_call_bpf+0xb6/0xb80 [ 406.027129][T12979] #4: ffffffff8eb59c20 (rcu_read_lock){....}-{1:3}, at: rhtab_map_delete_elem+0x21/0x190 [ 406.037065][T12979] #5: ffffffff8eb59c20 (rcu_read_lock){....}-{1:3}, at: rhtab_delete_elem+0x15c/0x1b30 [ 406.046828][T12979] [ 406.046828][T12979] stack backtrace: [ 406.052713][T12979] CPU: 0 UID: 0 PID: 12979 Comm: syz.5.1924 Not tainted syzkaller #0 PREEMPT(full) [ 406.052731][T12979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 406.052741][T12979] Call Trace: [ 406.052748][T12979] [ 406.052755][T12979] dump_stack_lvl+0xe8/0x150 [ 406.052782][T12979] print_deadlock_bug+0x279/0x290 [ 406.052803][T12979] __lock_acquire+0x24df/0x2cf0 [ 406.052832][T12979] ? __lock_acquire+0x683/0x2cf0 [ 406.052855][T12979] ? perf_swevent_get_recursion_context+0xa5/0x100 [ 406.052877][T12979] ? perf_trace_buf_alloc+0x11b/0x280 [ 406.052900][T12979] ? rht_lock+0x8b/0x180 [ 406.052914][T12979] lock_acquire+0x106/0x350 [ 406.052936][T12979] ? rht_lock+0x8b/0x180 [ 406.052960][T12979] ? rhtab_delete_elem+0x15c/0x1b30 [ 406.052983][T12979] rht_lock+0xa3/0x180 [ 406.052998][T12979] ? rht_lock+0x8b/0x180 [ 406.053015][T12979] rhtab_delete_elem+0x404/0x1b30 [ 406.053033][T12979] ? rhtab_lookup_elem+0x29/0xd90 [ 406.053053][T12979] ? rhtab_delete_elem+0x15c/0x1b30 [ 406.053070][T12979] ? rhtab_map_delete_elem+0x21/0x190 [ 406.053093][T12979] ? rhtab_map_delete_elem+0x21/0x190 [ 406.053119][T12979] rhtab_map_delete_elem+0xe2/0x190 [ 406.053146][T12979] bpf_prog_a4f1e23443ac9f8e+0x4e/0x56 [ 406.053163][T12979] trace_call_bpf+0x3f0/0xb80 [ 406.053179][T12979] ? trace_call_bpf+0xb6/0xb80 [ 406.053198][T12979] ? __pfx_trace_call_bpf+0x10/0x10 [ 406.053215][T12979] ? __lock_acquire+0x683/0x2cf0 [ 406.053243][T12979] perf_trace_run_bpf_submit+0x78/0x170 [ 406.053265][T12979] perf_trace_lock+0x32d/0x410 [ 406.053296][T12979] ? __pfx_perf_trace_lock+0x10/0x10 [ 406.053320][T12979] ? lock_acquire+0x106/0x350 [ 406.053343][T12979] ? rht_lock+0x8b/0x180 [ 406.053366][T12979] ? netlink_insert+0x2b3/0x1360 [ 406.053384][T12979] ? netlink_insert+0x2b3/0x1360 [ 406.053400][T12979] ? netlink_insert+0x2b3/0x1360 [ 406.053417][T12979] lock_release+0x38e/0x3c0 [ 406.053446][T12979] netlink_insert+0xa4a/0x1360 [ 406.053472][T12979] ? netlink_insert+0x2b3/0x1360 [ 406.053493][T12979] ? __pfx_netlink_insert+0x10/0x10 [ 406.053509][T12979] ? netlink_autobind+0xda/0x300 [ 406.053535][T12979] ? netlink_autobind+0xda/0x300 [ 406.053559][T12979] ? netlink_autobind+0xda/0x300 [ 406.053578][T12979] netlink_autobind+0x22d/0x300 [ 406.053603][T12979] netlink_sendmsg+0x531/0xb40 [ 406.053624][T12979] ? __pfx_trace_call_bpf+0x10/0x10 [ 406.053644][T12979] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.053668][T12979] ? aa_sock_msg_perm+0xf1/0x1b0 [ 406.053693][T12979] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.053712][T12979] sock_sendmsg_nosec+0x13a/0x180 [ 406.053739][T12979] ____sys_sendmsg+0x54e/0x850 [ 406.053763][T12979] ? __pfx_____sys_sendmsg+0x10/0x10 [ 406.053790][T12979] ? import_iovec+0x73/0xa0 [ 406.053809][T12979] ___sys_sendmsg+0x2a5/0x360 [ 406.053833][T12979] ? __pfx____sys_sendmsg+0x10/0x10 [ 406.053871][T12979] ? __fget_files+0x2a/0x420 [ 406.053904][T12979] ? __fget_files+0x2a/0x420 [ 406.053926][T12979] ? __fget_files+0x3a2/0x420 [ 406.053963][T12979] __x64_sys_sendmsg+0x1b1/0x290 [ 406.053985][T12979] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 406.054020][T12979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.054038][T12979] do_syscall_64+0x174/0x580 [ 406.054057][T12979] ? trace_irq_disable+0x3b/0x140 [ 406.054079][T12979] ? clear_bhb_loop+0x40/0x90 [ 406.054099][T12979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.054115][T12979] RIP: 0033:0x7f140199e019 [ 406.054130][T12979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.054144][T12979] RSP: 002b:00007f14027df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 406.054159][T12979] RAX: ffffffffffffffda RBX: 00007f1401c26180 RCX: 00007f140199e019 [ 406.054172][T12979] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000f [ 406.054182][T12979] RBP: 00007f1401a3500c R08: 0000000000000000 R09: 0000000000000000 [ 406.054192][T12979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.054202][T12979] R13: 00007f1401c26218 R14: 00007f1401c26180 R15: 00007ffee2ea6478 [ 406.054229][T12979]