last executing test programs: 7.090519402s ago: executing program 2 (id=899): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000700000005000000"], 0x0, 0x37, 0x0, 0x9}, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x8002, 0x0, 0x0, 0x8, 0x43fe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x40, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1d, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xc, 0x62, 0xa, 0xff00}, [@call={0x71, 0x0, 0x408}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x3, 0x3, 0x0, 0x3, 0x0, 0xff, 0xa100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000500), 0x1}, 0x1040, 0x6, 0x4, 0x8, 0x400, 0x62fe10b0, 0x6, 0x0, 0xffffff7f, 0x0, 0x80}, 0xffffffffffffffff, 0x1, r2, 0xb) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000340)={0x3, 0x0, [0x0, 0x0, 0x0]}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0xffffffffffffffff, 0x800ff, 0xfffffffb}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x4, 0xffffff00, 0x7}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x2404c080}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={&(0x7f0000000000)="f6ecf2d478a86eca2e6bea075d1e9d27080c1ea53cd831d365c43ae12da23b0345166f2359", 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f0, &(0x7f0000000080)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r1, &(0x7f0000000240)) sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, 0x34, 0x200, 0x70bd2a, 0x25dfdbff, {0xf}, [@typed={0x8, 0x2a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3a}}]}, 0x1c}}, 0x4010) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x43044) bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) bpf$ITER_CREATE(0x21, &(0x7f00000004c0)={r7}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0xc, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 6.665663527s ago: executing program 4 (id=905): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x14, 0x29, 0x3e}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50, 0x6000}, 0xb00) 6.591285304s ago: executing program 3 (id=906): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x6, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040040) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0xfffffffffffffff5, 0x0, 0x24004005}, 0x8040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x500000000000000, 0x0, 0x4c895}, 0x4044) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0xb6, 0x7fffffff}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = getpid() r8 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x7fff, 0x7fffffff}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r11, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.530805407s ago: executing program 4 (id=908): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x6, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040040) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0xfffffffffffffff5, 0x0, 0x24004005}, 0x8040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x500000000000000, 0x0, 0x4c895}, 0x4044) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0xb6, 0x7fffffff}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = getpid() r8 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x7fff, 0x7fffffff}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) socket$kcm(0x2, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r11, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.504144969s ago: executing program 2 (id=909): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x8, 0x8, 0x3fc, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, 0x0, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x2, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}, {0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x19, 0xa, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x8004) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x2d, &(0x7f0000000a00)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x590}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x26, 0x0, 0x1, 0x61}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0x0, 0x1a, 0x0, 0x1}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xa1}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xfc}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x7, 0xb6, 0x77ffffff}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$unix(0x1, 0x1, 0x0) 6.175735965s ago: executing program 0 (id=910): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000c40)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x8, 0x3fd, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x1000, 0x2, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002540)) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x3f2, 0x200, 0x70bd28, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40040}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) fstat(r1, &(0x7f00000000c0)) r2 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/158, 0x9e}], 0x1}, 0x20) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000940a0000000000000004000000", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000940)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r5, @ANYBLOB="00000000000000000f80220100000000180000000000000000000000000000009500ff000000000095000000000000e0bc7a197f51cac64f0791618100e2dc60fadd6cb1bc4cbacb61df80ae5d962278a47f42886a0253a25b2b449b38e5d9b36720969d150babdcc12fe9c9b91a13c12e84716b2832c216bf6d1c7c000ac41fac2d89f8821a2ccba7fa8f47b314f9c7d252ffd1c0f555429494070e76e08772638aa9fdef7e08acf808d60ad743e65546062ee8b88f9854fddcb0d0e966169e070221a57d31b5d1bd103ddedecb88d17c3389fa9ac366ea906b2e5f7e6d7b5070219de0578a4d972513fc8a3669349ffb88385be7f1cec21d36bed403ff4d5a554a2700bf98337391e3878b"], &(0x7f0000000000)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000000085100050000600000018000000edc60000e7ff0000010000007900830000000000180000000000000000000000000000009500"/80], &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x94) socket$kcm(0x10, 0x2, 0x0) 5.666394841s ago: executing program 1 (id=912): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x5452, &(0x7f0000000a00)={'syz_tun\x00', @random='\x00\x00\x00\r\x00'}) close(0x3) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x20, 0x1411, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x408c}, 0x40040) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r2 = socket$kcm(0x1e, 0x2, 0x0) r3 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000001640)={&(0x7f0000000700)=@in6={0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000006c0)="01cca9", 0x3}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="30000000000000008400000001000000030002000a000000030000000b00000000000000930d00000288b600", @ANYRES32=0x0], 0x30, 0x8000}, 0x2800c055) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000140), 0x4d) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r6 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82240, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0x240, 0x0, 0x0, 0x1, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = socket$kcm(0x2, 0x2, 0x73) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f00000000c0)=@nl=@kern={0x10, 0x0, 0x0, 0x2000}, 0x80, 0x0}, 0x800) fstat(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r6, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000780)={0xf0, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffffb}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x80000000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xfffffffe}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffff7}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) mount$bpf(0x0, &(0x7f0000000300)='./cgroup/../file0\x00', &(0x7f0000000340), 0x80, &(0x7f0000000700)=ANY=[@ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYBLOB=',uid=', @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=r9, @ANYBLOB=',\x00']) r10 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r10, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x1, 0x4}, 0x4}}, 0x80, 0x0}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 3.253511218s ago: executing program 0 (id=913): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x6, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040040) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0xfffffffffffffff5, 0x0, 0x24004005}, 0x8040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x500000000000000, 0x0, 0x4c895}, 0x4044) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0xb6, 0x7fffffff}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = getpid() r8 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x7fff, 0x7fffffff}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x2, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.203596311s ago: executing program 1 (id=914): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2404c080}, 0x0) 3.15451926s ago: executing program 2 (id=915): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x6, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040040) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0xfffffffffffffff5, 0x0, 0x24004005}, 0x8040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x500000000000000, 0x0, 0x4c895}, 0x4044) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0xb6, 0x7fffffff}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = getpid() r8 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x7fff, 0x7fffffff}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x2, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.110019384s ago: executing program 3 (id=916): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x5, 0x0, 0x1, 0x5, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00400000000000001f00000000000000feffffffffffffff02000000fcffffff070000002abd7000043500000a0001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="38010000"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 3.072831887s ago: executing program 4 (id=917): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000001340)={0x2, 0x2, @remote}, 0x10, 0x0}, 0x20048000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a00fffe0900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007000061740014000480080001400000000308000240"], 0xa4}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a00fffe0900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007000061740014000480080001400000000308000240"], 0xa4}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002780)={0xffffffffffffffff, 0x0, 0x0, 0xc9435dac4a28b5ed}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002780)={0xffffffffffffffff, 0x0, 0x0, 0xc9435dac4a28b5ed}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400090000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000010000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a891588d818a0afc0b3116a130974cac0615232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f3ca1664fe2f3ced8416dc180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8070000001fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491d04aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f84e4272d2cc72d4e771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de457f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5bfc182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291a76456cd7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124ee3df3a35e8014d6cb5fd6c054a10bb2146174c1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba5187fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4db5a5df9d62ea6d805dfce568b885a50ed8e2eaf8a932287a1d3bfac17774e58875a63b77e07298e4b4f515189c6fcac3cd35dac9240e633219bb6a5a25865e6ed8e16caa5406b56702afe0befcabbc9a2a772a1a087f0d633d457bceb695b2cba3a1a2daa2dda796373cc0fe0a53236d028fc1076bb746b2717c8b6052f58c91bb8cc19474ab9d4d2160773829f078727f6c684ca749136a7f46ca28b00bb4237695b4"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="b9ff03076044238cb89e14f008000de0ffff00184000632b77fbac14140ce000000562079f4b4d2f87e505ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="b9ff03076044238cb89e14f008000de0ffff00184000632b77fbac14140ce000000562079f4b4d2f87e505ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}}, 0x20050800) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}}, 0x20050800) openat$tun(0xffffffffffffff9c, 0x0, 0x10000, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000e8ff00000000003ed700"/30], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000063ff2100000000008510000002000000850000008800000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x2f9, 0x403d87c21de2ff3f, &(0x7f0000000040)="b90103606989068c3c270040f000009e0ff008001fffffe1ffff8100632f080686dd00017f020001be", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0xd, &(0x7f0000000000), 0x8) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8200088}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02c99600000000080600024003150000"], 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x8004) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8200088}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02c99600000000080600024003150000"], 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x8004) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0x47}], 0x1}, 0x48800) (async) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0x47}], 0x1}, 0x48800) socket$nl_rdma(0x10, 0x3, 0x14) (async) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001540)={&(0x7f00000015c0)=ANY=[@ANYBLOB="38000000121401082bbd7000fbdbdf2508005600"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) 2.954743551s ago: executing program 1 (id=918): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000f3ffffffffffffff000000000085000000a0000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.81704054s ago: executing program 0 (id=919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000c40000000000000200000a20000000000a01080000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000064000000060a010400000000000000000100000008000b40000000003c000480380001800e000100636f6e6e6c696d69740000002400028008000140000003ff0800014000000005080002400000ff0f08000140fffffffd0900010073797a30"], 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x40050) 2.783838228s ago: executing program 1 (id=920): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x491}, 0x20000800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x6421, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xee, 0x9}, 0x4000, 0x2, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x4000, 0x0, 0x0, 0x0, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8927, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001809000000000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x7}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x24}}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r6, 0x0, 0x2800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x23, &(0x7f0000000000), 0x4) r8 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r8, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x5, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x23}, @remote}}}], 0x20}, 0x8000) sendmsg$sock(r8, 0x0, 0x4000004) 2.718373415s ago: executing program 4 (id=921): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x2, [{0xc}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, &(0x7f0000000200)=""/224, 0x3a, 0xe0, 0x1}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x36, 0x0, 0x0, 0x0, 0x1000000000000, 0x10004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x4, 0x400000, 0x2, 0x0, 0x8e, 0x0, 0x8}, 0x0, 0x80000000002, 0xffffffffffffffff, 0x0) recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYRES8=r4, @ANYBLOB="3eca", @ANYRES8=r3], 0x9a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8}, {}, {0x8}, 0x0, 0x0, 0xa, 0x0, 0x2}}}, 0xf8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b80)="d8000000150081044e81f782db44b9040a87080211000000040000a118000200e000000800000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab44dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d1688683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bbfe5a09d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000884) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000140)={r1}) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000780)={0x5c, 0x1, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_EXPECT_MASTER={0x48, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x31}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001000}, 0x40010) 2.705898179s ago: executing program 0 (id=922): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x5, 0x9, 0x7, 0x2, 0x0, 0x80000000, 0x102, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x8000000000000001, 0x2}, 0x8020, 0x10000, 0x3, 0x6, 0x6c6, 0x3, 0x1, 0x0, 0x5, 0x0, 0x3}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x9, 0x0, 0x0, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000000)="80005b020eaa4da2", 0x8}, {0x0}], 0x2, 0x0, 0x0, 0x900}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) perf_event_open(&(0x7f00000003c0)={0x6, 0x80, 0x2, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10c527, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x84) socket$kcm(0x2d, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1b23a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x2, 0x2573, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x4, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x90}, 0x40000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0}, 0x0) 2.369711579s ago: executing program 2 (id=923): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='tlb_flush\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x35, &(0x7f0000000040)=r3, 0x4) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x3, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x0, 0x1946}, 0x17892, 0x0, 0x0, 0x6, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000042000701a11ad1"], 0x1c}, 0x1, 0x0, 0x0, 0x20048808}, 0xc001) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x40000) openat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x44) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'dummy0\x00', 0x4000}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000047000707feff59ffffffffffff027c00"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2.276686967s ago: executing program 3 (id=924): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) 1.653579063s ago: executing program 3 (id=925): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x436002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x4, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7ff, 0x7fffffff, 0xffff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x8, 0x100000830d}, 0x4500, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x72, 0xfe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0xc8, 0x80000}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0xcfa4) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x44) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x10001, 0x4}, 0x864, 0x2, 0x6, 0x4, 0xbb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x6, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="2e00000011008188040f80ec59acbc0413a181003700000001010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 1.609441504s ago: executing program 0 (id=926): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b1c216109c3c2e2ac57c38b405000000000000611034000000000063012c00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b700000000000000"], &(0x7f0000001140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4040086) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x6, 0x4, 0xdd, 0xa}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f00)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x9, 0xb3, &(0x7f0000000280)=""/179, 0x40f00, 0x36, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff80}, 0x94) close(0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000400000004000000f6ffffffffffffff", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0) r9 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r9, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x18, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x14}, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000180)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af36507001ac00400020208000c00ffa1000000000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x400c800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20002cdb7ee903000000000000000000070000000900010073797a3000000000140000001000010000000000000000000a84000a"], 0x48}}, 0x20050800) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=""/152, 0x98}], 0x1}, 0x12162) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@cgroup, 0xffffffffffffffff, 0x1c, 0x24}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) 1.564024938s ago: executing program 2 (id=927): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x6, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040040) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0xfffffffffffffff5, 0x0, 0x24004005}, 0x8040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x500000000000000, 0x0, 0x4c895}, 0x4044) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0xb6, 0x7fffffff}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x7fff, 0x7fffffff}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x2, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.396110506s ago: executing program 1 (id=928): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x800, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xfff3}, {0x2, 0x99c02be4c7d19daf}}}, 0x24}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0xfeffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000040), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1}, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0400000076fb9ea2128011868baf93bb4d6f907c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r3}, &(0x7f0000000400), &(0x7f00000004c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000140), &(0x7f0000000200)=r0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000900000009000000007000000020000000000001010000000000000000000000805000000000000000300000d000000000e00000000000008100000000100000002000000080000000c00000001000004000002000b0000000100000006f1ff000000000000000003000000000100000002000000dd0d0000000000000000000a05000000010000000000000a01000000020000000000000803000000002e302e2e2e00"], &(0x7f0000000500), 0xaf, 0x0, 0x1, 0x5}, 0x28) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000ac0)={0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="20000000bacf0000080000000600000025200000", @ANYRES32=0x1, @ANYBLOB="e10700"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="040000000500000000000000000000000000000000000000000000007a3c760e54a40a2530d1f23dd47c28a51a19c5943cceae56696f47a1299a6dc3e9841834fb55c27c0c3e652f8fe87a73302ff6ed8f7c8055ef09546bb9da41e28b911f48a462c7dc6e0657380864988ec73051366e0e85fb0d6f088ac5"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, 0x0, 0xfe33) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xf07}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x8, 0x10001, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xc, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 1.108121347s ago: executing program 4 (id=929): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x6, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040040) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0xfffffffffffffff5, 0x0, 0x24004005}, 0x8040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x500000000000000, 0x0, 0x4c895}, 0x4044) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0xb6, 0x7fffffff}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = getpid() r8 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x7fff, 0x7fffffff}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x2, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 667.387554ms ago: executing program 3 (id=930): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)="d8000000180081054e81f782db44b904021d005c06007c09e8fed9e40a00154002001426c1e1b8c708000b0000000401a80016000800024009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee7a7cef4090000001fb791643a5ee4ce1b14d6d93059dac7149393cccfbd6761e627d4c12cdfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a502504000000fa09d5e14ace69ed0bffece0b42a9ecbee5d81320344d2f16af094531c7fe95aa049a240db2d68a5b23564b8808b", 0xd8}], 0x1, 0x0, 0x0, 0x2000000}, 0x400a040) 642.991599ms ago: executing program 0 (id=931): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f, 0x4c}, 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2a, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) mkdir(0x0, 0x153) socket$kcm(0xa, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f000fff0024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f00000002c0)="11d6cb557c8496a2fe7a81f38210bfa9b7809dc9", 0x14}], 0x2}, 0x0) 502.055056ms ago: executing program 2 (id=932): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x2, 0x12, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0xfffd, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x7, 0x0, 0xa, 0x0, 0x40000000}, @sadb_address={0x5, 0x5, 0x0, 0x130, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_sa2={0x2, 0x13, 0xbb, 0x0, 0x0, 0x70bd2d, 0x3501}]}, 0x90}, 0x1, 0x7}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x0) socket$kcm(0x2c, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r2, r4, 0x3, 0x0, @val=@perf_event={0x100000001}}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7}, 0x4a88, 0x0, 0xfffffffd, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbca313a181002c000000000400000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) 500.587987ms ago: executing program 3 (id=933): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b1c216109c3c2e2ac57c38b405000000000000611034000000000063012c00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b700000000000000"], &(0x7f0000001140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4040086) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x6, 0x4, 0xdd, 0xa}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f00)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x9, 0xb3, &(0x7f0000000280)=""/179, 0x40f00, 0x36, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff80}, 0x94) close(0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000400000004000000f6ffffffffffffff", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0) r9 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r9, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x18, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x14}, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000180)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af36507001ac00400020208000c00ffa1000000000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x400c800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20002cdb7ee903000000000000000000070000000900010073797a3000000000140000001000010000000000000000000a84000a"], 0x48}}, 0x20050800) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=""/152, 0x98}], 0x1}, 0x12162) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@cgroup, 0xffffffffffffffff, 0x1c, 0x24}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) 116.456816ms ago: executing program 4 (id=934): socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x5, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b001000024000701fefffffffcdbda25037c000092000180080002"], 0x1b0}, 0x1, 0x0, 0x0, 0x240080d1}, 0x8010) (fail_nth: 8) 0s ago: executing program 1 (id=935): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d004852001900193100a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b305900000000bdcf3c717507f1fa7383e76a07000000696d12ae9236435b308fec29731c4119334d9ea57255133e811b542e7a", 0x7e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24050091) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x100) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000700)=""/230, 0xe6}, {&(0x7f00000038c0)=""/4060, 0xfdc}, {&(0x7f0000001880)=""/4105, 0x1009}, {&(0x7f0000003800)=""/174, 0xae}, {&(0x7f0000000140)=""/126, 0x7e}, {&(0x7f00000001c0)=""/120, 0x78}, {&(0x7f0000000000)=""/58, 0x3a}], 0x7}, 0x100) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r2, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20) perf_event_open(0x0, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e80), 0x4) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x13, 0x0, 0xa}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.78' (ED25519) to the list of known hosts. [ 84.753806][ T5819] cgroup: Unknown subsys name 'net' [ 84.907380][ T5819] cgroup: Unknown subsys name 'cpuset' [ 84.916924][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.628473][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.118732][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.127477][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.135499][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.143944][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.151705][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.263909][ T5153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.274248][ T5153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.281816][ T5153] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.294430][ T5153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.302184][ T5153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.394909][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.405378][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.413001][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.423727][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.431372][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.444484][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.496451][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.505544][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.510924][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.514313][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.528576][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.534894][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.543212][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.554766][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.565082][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.944293][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 90.265776][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.274278][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.282029][ T5831] bridge_slave_0: entered allmulticast mode [ 90.311157][ T5831] bridge_slave_0: entered promiscuous mode [ 90.331059][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 90.342948][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.350482][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.358395][ T5831] bridge_slave_1: entered allmulticast mode [ 90.367505][ T5831] bridge_slave_1: entered promiscuous mode [ 90.442251][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 90.474175][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 90.530499][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.561627][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.631750][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 90.700043][ T5831] team0: Port device team_slave_0 added [ 90.739718][ T5831] team0: Port device team_slave_1 added [ 90.769103][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.776360][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.784016][ T5837] bridge_slave_0: entered allmulticast mode [ 90.791152][ T5837] bridge_slave_0: entered promiscuous mode [ 90.840277][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.847659][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.855703][ T5837] bridge_slave_1: entered allmulticast mode [ 90.862886][ T5837] bridge_slave_1: entered promiscuous mode [ 90.898095][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.905370][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.912682][ T5839] bridge_slave_0: entered allmulticast mode [ 90.920009][ T5839] bridge_slave_0: entered promiscuous mode [ 90.940864][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.948038][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.955574][ T5840] bridge_slave_0: entered allmulticast mode [ 90.962689][ T5840] bridge_slave_0: entered promiscuous mode [ 90.972469][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.979485][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.005957][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.026134][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.033303][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.040643][ T5839] bridge_slave_1: entered allmulticast mode [ 91.047961][ T5839] bridge_slave_1: entered promiscuous mode [ 91.067346][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.074559][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.081741][ T5840] bridge_slave_1: entered allmulticast mode [ 91.090798][ T5840] bridge_slave_1: entered promiscuous mode [ 91.098498][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.105525][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.131495][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.182048][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.210539][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.218164][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.225582][ T5845] bridge_slave_0: entered allmulticast mode [ 91.232728][ T5845] bridge_slave_0: entered promiscuous mode [ 91.244153][ T52] Bluetooth: hci0: command tx timeout [ 91.260013][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.281760][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.289733][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.296974][ T5845] bridge_slave_1: entered allmulticast mode [ 91.304642][ T5845] bridge_slave_1: entered promiscuous mode [ 91.314562][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.333456][ T52] Bluetooth: hci1: command tx timeout [ 91.345307][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.358181][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.380660][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.450809][ T5837] team0: Port device team_slave_0 added [ 91.483591][ T52] Bluetooth: hci2: command tx timeout [ 91.484611][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.512982][ T5837] team0: Port device team_slave_1 added [ 91.520466][ T5840] team0: Port device team_slave_0 added [ 91.532059][ T5831] hsr_slave_0: entered promiscuous mode [ 91.538714][ T5831] hsr_slave_1: entered promiscuous mode [ 91.547767][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.558894][ T5839] team0: Port device team_slave_0 added [ 91.574102][ T52] Bluetooth: hci4: command tx timeout [ 91.583007][ T5840] team0: Port device team_slave_1 added [ 91.604420][ T5839] team0: Port device team_slave_1 added [ 91.653954][ T52] Bluetooth: hci3: command tx timeout [ 91.661477][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.668499][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.694557][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.731380][ T5845] team0: Port device team_slave_0 added [ 91.750046][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.757575][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.784307][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.796515][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.803779][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.829761][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.849414][ T5845] team0: Port device team_slave_1 added [ 91.855751][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.862706][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.888873][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.907005][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.914012][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.939923][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.969195][ T10] cfg80211: failed to load regulatory.db [ 91.980644][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.987725][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.014469][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.083480][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.090471][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.117082][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.130313][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.137321][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.163251][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.263671][ T5837] hsr_slave_0: entered promiscuous mode [ 92.270080][ T5837] hsr_slave_1: entered promiscuous mode [ 92.276673][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 92.282487][ T5837] Cannot create hsr debugfs directory [ 92.305524][ T5839] hsr_slave_0: entered promiscuous mode [ 92.311905][ T5839] hsr_slave_1: entered promiscuous mode [ 92.318236][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 92.324091][ T5839] Cannot create hsr debugfs directory [ 92.349712][ T5840] hsr_slave_0: entered promiscuous mode [ 92.356687][ T5840] hsr_slave_1: entered promiscuous mode [ 92.362818][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 92.368626][ T5840] Cannot create hsr debugfs directory [ 92.463296][ T5845] hsr_slave_0: entered promiscuous mode [ 92.471189][ T5845] hsr_slave_1: entered promiscuous mode [ 92.478439][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 92.484246][ T5845] Cannot create hsr debugfs directory [ 92.819784][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.860223][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.898464][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.910426][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.005373][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.020497][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.038333][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.058871][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.126519][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.150951][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.164419][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.180790][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.269825][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.288092][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.299153][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.312721][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.323474][ T52] Bluetooth: hci0: command tx timeout [ 93.404046][ T52] Bluetooth: hci1: command tx timeout [ 93.426587][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.438669][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.455336][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.470121][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.484929][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.562848][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.570569][ T52] Bluetooth: hci2: command tx timeout [ 93.580400][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.612264][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.619543][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.638911][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.646064][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.653799][ T52] Bluetooth: hci4: command tx timeout [ 93.712029][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.724475][ T52] Bluetooth: hci3: command tx timeout [ 93.744070][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.758317][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.765469][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.805677][ T3671] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.812823][ T3671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.855161][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.869444][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.927062][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.934270][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.967244][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.982392][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.989626][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.011745][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.061312][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.068469][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.095454][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.118675][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.125896][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.165443][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.172567][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.182244][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.189382][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.332131][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.549710][ T5831] veth0_vlan: entered promiscuous mode [ 94.611205][ T5831] veth1_vlan: entered promiscuous mode [ 94.668580][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.696957][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.810620][ T5831] veth0_macvtap: entered promiscuous mode [ 94.850558][ T5831] veth1_macvtap: entered promiscuous mode [ 94.887697][ T5837] veth0_vlan: entered promiscuous mode [ 94.914896][ T5839] veth0_vlan: entered promiscuous mode [ 94.929735][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.940477][ T5837] veth1_vlan: entered promiscuous mode [ 94.951574][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.977256][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.000249][ T5839] veth1_vlan: entered promiscuous mode [ 95.020342][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.058728][ T1097] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.080819][ T1097] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.092303][ T1097] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.104811][ T1097] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.216728][ T5837] veth0_macvtap: entered promiscuous mode [ 95.237535][ T5837] veth1_macvtap: entered promiscuous mode [ 95.314810][ T5845] veth0_vlan: entered promiscuous mode [ 95.321587][ T5839] veth0_macvtap: entered promiscuous mode [ 95.352129][ T3671] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.361780][ T5839] veth1_macvtap: entered promiscuous mode [ 95.371548][ T3671] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.400007][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.413600][ T52] Bluetooth: hci0: command tx timeout [ 95.430320][ T5845] veth1_vlan: entered promiscuous mode [ 95.442385][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.462096][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.483225][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.492372][ T3671] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.494683][ T52] Bluetooth: hci1: command tx timeout [ 95.501106][ T3671] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.525488][ T34] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.540916][ T34] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.550470][ T34] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.579182][ T1097] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.601488][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.603733][ T1097] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.636455][ T1097] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.649841][ T1097] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.658887][ T52] Bluetooth: hci2: command tx timeout [ 95.683789][ T1097] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.717571][ T5845] veth0_macvtap: entered promiscuous mode [ 95.724222][ T52] Bluetooth: hci4: command tx timeout [ 95.771541][ T5840] veth0_vlan: entered promiscuous mode [ 95.785752][ T5845] veth1_macvtap: entered promiscuous mode [ 95.804423][ T52] Bluetooth: hci3: command tx timeout [ 95.814114][ T5840] veth1_vlan: entered promiscuous mode [ 95.845185][ T5944] netlink: 'syz.1.2': attribute type 13 has an invalid length. [ 95.961883][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.985989][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.989508][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.052125][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.071800][ T442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.097423][ T442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.112706][ T5840] veth0_macvtap: entered promiscuous mode [ 96.154314][ T5840] veth1_macvtap: entered promiscuous mode [ 96.164093][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.173968][ T442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.181811][ T442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.192128][ T5946] netlink: 'syz.1.6': attribute type 10 has an invalid length. [ 96.232907][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.258801][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.267944][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.280793][ C0] hrtimer: interrupt took 26917 ns [ 96.319476][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.366670][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.388999][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.446938][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.507043][ T442] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.605130][ T442] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.638081][ T442] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.657972][ T442] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.744245][ T5954] FAULT_INJECTION: forcing a failure. [ 96.744245][ T5954] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 96.773090][ T5954] CPU: 1 UID: 0 PID: 5954 Comm: syz.1.8 Not tainted syzkaller #0 PREEMPT(full) [ 96.773118][ T5954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 96.773139][ T5954] Call Trace: [ 96.773152][ T5954] [ 96.773162][ T5954] dump_stack_lvl+0x189/0x250 [ 96.773200][ T5954] ? __pfx____ratelimit+0x10/0x10 [ 96.773229][ T5954] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.773255][ T5954] ? __pfx__printk+0x10/0x10 [ 96.773287][ T5954] ? __might_fault+0xb0/0x130 [ 96.773334][ T5954] should_fail_ex+0x414/0x560 [ 96.773367][ T5954] _copy_from_user+0x2d/0xb0 [ 96.773401][ T5954] ___sys_sendmsg+0x158/0x2a0 [ 96.773438][ T5954] ? __pfx____sys_sendmsg+0x10/0x10 [ 96.773507][ T5954] ? __fget_files+0x2a/0x420 [ 96.773523][ T5954] ? __fget_files+0x3a0/0x420 [ 96.773551][ T5954] __x64_sys_sendmsg+0x19b/0x260 [ 96.773583][ T5954] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 96.773623][ T5954] ? __pfx_ksys_write+0x10/0x10 [ 96.773655][ T5954] ? do_syscall_64+0xbe/0xf80 [ 96.773685][ T5954] do_syscall_64+0xfa/0xf80 [ 96.773712][ T5954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.773742][ T5954] ? clear_bhb_loop+0x60/0xb0 [ 96.773767][ T5954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.773785][ T5954] RIP: 0033:0x7f627078f749 [ 96.773810][ T5954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.773826][ T5954] RSP: 002b:00007f62716c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.773846][ T5954] RAX: ffffffffffffffda RBX: 00007f62709e5fa0 RCX: 00007f627078f749 [ 96.773860][ T5954] RDX: 000000002404c8c1 RSI: 0000200000000480 RDI: 0000000000000003 [ 96.773873][ T5954] RBP: 00007f62716c9090 R08: 0000000000000000 R09: 0000000000000000 [ 96.773884][ T5954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.773895][ T5954] R13: 00007f62709e6038 R14: 00007f62709e5fa0 R15: 00007ffcc13065e8 [ 96.773931][ T5954] [ 96.885128][ T5958] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 97.059824][ T442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.075158][ T442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.149362][ T5958] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 97.207961][ T5960] xt_HMARK: proto mask must be zero with L3 mode [ 97.237977][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.278016][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.300691][ T442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.330598][ T442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.468015][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.483600][ T52] Bluetooth: hci0: command tx timeout [ 97.501344][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.563678][ T52] Bluetooth: hci1: command tx timeout [ 97.724890][ T52] Bluetooth: hci2: command tx timeout [ 97.847256][ T52] Bluetooth: hci4: command tx timeout [ 97.953439][ T52] Bluetooth: hci3: command tx timeout [ 97.966910][ T5979] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14'. [ 99.358215][ T6000] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17'. [ 99.962895][ T6005] Zero length message leads to an empty skb [ 100.092898][ T6010] netlink: 'syz.2.22': attribute type 10 has an invalid length. [ 100.582199][ T6010] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 100.664787][ T6019] netlink: 763 bytes leftover after parsing attributes in process `syz.3.25'. [ 100.726565][ T6021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.25'. [ 100.781497][ T6021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.25'. [ 101.022991][ T52] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 101.462490][ T6043] netlink: 'syz.3.33': attribute type 10 has an invalid length. [ 101.753138][ T6043] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 101.784664][ T6045] sch_tbf: burst 128 is lower than device veth0_to_bridge mtu (1514) ! [ 102.369426][ T6054] netlink: 32 bytes leftover after parsing attributes in process `syz.0.36'. [ 103.084049][ T52] Bluetooth: hci1: command 0x2016 tx timeout [ 103.272235][ T6084] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.289296][ T6082] sch_tbf: burst 128 is lower than device veth0_to_bridge mtu (1514) ! [ 103.384739][ T6084] netlink: 'syz.0.46': attribute type 23 has an invalid length. [ 103.881386][ T6093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.929770][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.995386][ T6093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.040526][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.289778][ T6105] FAULT_INJECTION: forcing a failure. [ 104.289778][ T6105] name failslab, interval 1, probability 0, space 0, times 1 [ 104.322028][ T6105] CPU: 0 UID: 0 PID: 6105 Comm: syz.1.56 Not tainted syzkaller #0 PREEMPT(full) [ 104.322059][ T6105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.322072][ T6105] Call Trace: [ 104.322080][ T6105] [ 104.322089][ T6105] dump_stack_lvl+0x189/0x250 [ 104.322119][ T6105] ? __pfx____ratelimit+0x10/0x10 [ 104.322147][ T6105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.322171][ T6105] ? __pfx__printk+0x10/0x10 [ 104.322197][ T6105] ? kmalloc_reserve+0xbd/0x290 [ 104.322231][ T6105] ? __lock_acquire+0x6b6/0x2cf0 [ 104.322269][ T6105] should_fail_ex+0x414/0x560 [ 104.322299][ T6105] should_failslab+0xa8/0x100 [ 104.322331][ T6105] kmem_cache_alloc_noprof+0x74/0x6f0 [ 104.322368][ T6105] ? skb_clone+0x212/0x3a0 [ 104.322395][ T6105] skb_clone+0x212/0x3a0 [ 104.322419][ T6105] __netlink_deliver_tap+0x404/0x850 [ 104.322455][ T6105] ? netlink_deliver_tap+0x2e/0x1b0 [ 104.322477][ T6105] netlink_deliver_tap+0x19c/0x1b0 [ 104.322502][ T6105] netlink_unicast+0x7fa/0x9e0 [ 104.322541][ T6105] ? __pfx_netlink_unicast+0x10/0x10 [ 104.322573][ T6105] ? netlink_sendmsg+0x642/0xb30 [ 104.322592][ T6105] ? skb_put+0x11b/0x210 [ 104.322625][ T6105] netlink_sendmsg+0x805/0xb30 [ 104.322655][ T6105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.322680][ T6105] ? aa_sock_msg_perm+0xf1/0x1b0 [ 104.322703][ T6105] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 104.322731][ T6105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.322753][ T6105] __sock_sendmsg+0x21c/0x270 [ 104.322781][ T6105] ____sys_sendmsg+0x505/0x820 [ 104.322821][ T6105] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.322862][ T6105] ? import_iovec+0x74/0xa0 [ 104.322897][ T6105] ___sys_sendmsg+0x21f/0x2a0 [ 104.322931][ T6105] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.322970][ T6105] ? rcu_read_lock_any_held+0xb3/0x120 [ 104.323027][ T6105] ? __fget_files+0x2a/0x420 [ 104.323046][ T6105] ? __fget_files+0x3a0/0x420 [ 104.323076][ T6105] __x64_sys_sendmsg+0x19b/0x260 [ 104.323112][ T6105] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 104.323142][ T6105] ? perf_trace_preemptirq_template+0xa3/0x340 [ 104.323180][ T6105] ? __pfx_ksys_write+0x10/0x10 [ 104.323210][ T6105] ? do_syscall_64+0xbe/0xf80 [ 104.323249][ T6105] do_syscall_64+0xfa/0xf80 [ 104.323278][ T6105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.323298][ T6105] ? clear_bhb_loop+0x60/0xb0 [ 104.323324][ T6105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.323344][ T6105] RIP: 0033:0x7f627078f749 [ 104.323362][ T6105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.323380][ T6105] RSP: 002b:00007f62716c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.323402][ T6105] RAX: ffffffffffffffda RBX: 00007f62709e5fa0 RCX: 00007f627078f749 [ 104.323417][ T6105] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003 [ 104.323430][ T6105] RBP: 00007f62716c9090 R08: 0000000000000000 R09: 0000000000000000 [ 104.323442][ T6105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.323453][ T6105] R13: 00007f62709e6038 R14: 00007f62709e5fa0 R15: 00007ffcc13065e8 [ 104.323506][ T6105] [ 104.698478][ T6105] nbd: must specify a size in bytes for the device [ 105.151169][ T6110] sch_tbf: burst 128 is lower than device veth0_to_bridge mtu (1514) ! [ 105.186128][ T52] Bluetooth: hci1: command 0x2016 tx timeout [ 105.342314][ T6122] netlink: 830 bytes leftover after parsing attributes in process `syz.4.61'. [ 105.390473][ T6125] netlink: 16 bytes leftover after parsing attributes in process `syz.3.63'. [ 105.517726][ T6129] netlink: 'syz.1.64': attribute type 10 has an invalid length. [ 107.052952][ T6172] IPv6: NLM_F_CREATE should be specified when creating new route [ 107.619518][ T6179] FAULT_INJECTION: forcing a failure. [ 107.619518][ T6179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.664275][ T6179] CPU: 0 UID: 0 PID: 6179 Comm: syz.1.80 Not tainted syzkaller #0 PREEMPT(full) [ 107.664306][ T6179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 107.664324][ T6179] Call Trace: [ 107.664337][ T6179] [ 107.664351][ T6179] dump_stack_lvl+0x189/0x250 [ 107.664387][ T6179] ? __pfx____ratelimit+0x10/0x10 [ 107.664424][ T6179] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.664459][ T6179] ? __pfx__printk+0x10/0x10 [ 107.664527][ T6179] ? __might_fault+0xb0/0x130 [ 107.664593][ T6179] should_fail_ex+0x414/0x560 [ 107.664665][ T6179] _copy_from_user+0x2d/0xb0 [ 107.664710][ T6179] __copy_msghdr+0x3c5/0x5b0 [ 107.664778][ T6179] ___sys_sendmsg+0x1a5/0x2a0 [ 107.664849][ T6179] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.665001][ T6179] ? __fget_files+0x2a/0x420 [ 107.665093][ T6179] ? __fget_files+0x2a/0x420 [ 107.665115][ T6179] ? __fget_files+0x3a0/0x420 [ 107.665197][ T6179] __x64_sys_sendmsg+0x19b/0x260 [ 107.665256][ T6179] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 107.665287][ T6179] ? perf_trace_preemptirq_template+0xa3/0x340 [ 107.665370][ T6179] ? __pfx_ksys_write+0x10/0x10 [ 107.665428][ T6179] ? do_syscall_64+0xbe/0xf80 [ 107.665482][ T6179] do_syscall_64+0xfa/0xf80 [ 107.665523][ T6179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.665548][ T6179] ? clear_bhb_loop+0x60/0xb0 [ 107.665593][ T6179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.665616][ T6179] RIP: 0033:0x7f627078f749 [ 107.665649][ T6179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.665685][ T6179] RSP: 002b:00007f62716c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.665708][ T6179] RAX: ffffffffffffffda RBX: 00007f62709e5fa0 RCX: 00007f627078f749 [ 107.665724][ T6179] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000013 [ 107.665738][ T6179] RBP: 00007f62716c9090 R08: 0000000000000000 R09: 0000000000000000 [ 107.665751][ T6179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.665764][ T6179] R13: 00007f62709e6038 R14: 00007f62709e5fa0 R15: 00007ffcc13065e8 [ 107.665878][ T6179] [ 108.316605][ T6200] netlink: 'syz.1.87': attribute type 10 has an invalid length. [ 108.338520][ T6201] FAULT_INJECTION: forcing a failure. [ 108.338520][ T6201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.363497][ T6201] CPU: 1 UID: 0 PID: 6201 Comm: syz.0.86 Not tainted syzkaller #0 PREEMPT(full) [ 108.363525][ T6201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 108.363538][ T6201] Call Trace: [ 108.363546][ T6201] [ 108.363555][ T6201] dump_stack_lvl+0x189/0x250 [ 108.363583][ T6201] ? __pfx____ratelimit+0x10/0x10 [ 108.363627][ T6201] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.363652][ T6201] ? __pfx__printk+0x10/0x10 [ 108.363684][ T6201] ? __might_fault+0xb0/0x130 [ 108.363723][ T6201] should_fail_ex+0x414/0x560 [ 108.363758][ T6201] _copy_from_user+0x2d/0xb0 [ 108.363792][ T6201] ___sys_sendmsg+0x158/0x2a0 [ 108.363839][ T6201] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.363882][ T6201] ? rcu_read_lock_any_held+0xb3/0x120 [ 108.363942][ T6201] ? __fget_files+0x2a/0x420 [ 108.363961][ T6201] ? __fget_files+0x3a0/0x420 [ 108.363993][ T6201] __x64_sys_sendmsg+0x19b/0x260 [ 108.364031][ T6201] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 108.364063][ T6201] ? perf_trace_preemptirq_template+0xa3/0x340 [ 108.364102][ T6201] ? __pfx_ksys_write+0x10/0x10 [ 108.364135][ T6201] ? do_syscall_64+0xbe/0xf80 [ 108.364169][ T6201] do_syscall_64+0xfa/0xf80 [ 108.364198][ T6201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.364220][ T6201] ? clear_bhb_loop+0x60/0xb0 [ 108.364247][ T6201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.364268][ T6201] RIP: 0033:0x7f279718f749 [ 108.364288][ T6201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.364306][ T6201] RSP: 002b:00007f2798039038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.364328][ T6201] RAX: ffffffffffffffda RBX: 00007f27973e6090 RCX: 00007f279718f749 [ 108.364344][ T6201] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 108.364358][ T6201] RBP: 00007f2798039090 R08: 0000000000000000 R09: 0000000000000000 [ 108.364371][ T6201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.364383][ T6201] R13: 00007f27973e6128 R14: 00007f27973e6090 R15: 00007ffebdf0ca48 [ 108.364420][ T6201] [ 108.982356][ T6205] netlink: 'syz.1.89': attribute type 13 has an invalid length. [ 108.995895][ T6205] netlink: 'syz.1.89': attribute type 13 has an invalid length. [ 109.142909][ T6211] netlink: 'syz.3.88': attribute type 10 has an invalid length. [ 110.081230][ T6228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.94'. [ 110.113698][ T6228] netlink: 572 bytes leftover after parsing attributes in process `syz.1.94'. [ 110.145870][ T6232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.362719][ T6238] netlink: 'syz.1.97': attribute type 10 has an invalid length. [ 110.469885][ T6242] FAULT_INJECTION: forcing a failure. [ 110.469885][ T6242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.488889][ T6238] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 110.498599][ T6242] CPU: 1 UID: 0 PID: 6242 Comm: syz.3.99 Not tainted syzkaller #0 PREEMPT(full) [ 110.498623][ T6242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 110.498633][ T6242] Call Trace: [ 110.498640][ T6242] [ 110.498647][ T6242] dump_stack_lvl+0x189/0x250 [ 110.498681][ T6242] ? __pfx____ratelimit+0x10/0x10 [ 110.498703][ T6242] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.498721][ T6242] ? __pfx__printk+0x10/0x10 [ 110.498754][ T6242] should_fail_ex+0x414/0x560 [ 110.498778][ T6242] _copy_from_user+0x2d/0xb0 [ 110.498804][ T6242] bpf_test_init+0xd8/0x150 [ 110.498823][ T6242] bpf_prog_test_run_skb+0x376/0x1d50 [ 110.498856][ T6242] ? __fget_files+0x2a/0x420 [ 110.498874][ T6242] ? __fget_files+0x2a/0x420 [ 110.498888][ T6242] ? __fget_files+0x3a0/0x420 [ 110.498902][ T6242] ? __fget_files+0x2a/0x420 [ 110.498922][ T6242] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 110.498953][ T6242] bpf_prog_test_run+0x2c7/0x340 [ 110.498981][ T6242] __sys_bpf+0x562/0x860 [ 110.499005][ T6242] ? __pfx___sys_bpf+0x10/0x10 [ 110.499024][ T6242] ? bpf_trace_run2+0x322/0x4c0 [ 110.499076][ T6242] __x64_sys_bpf+0x7c/0x90 [ 110.499097][ T6242] do_syscall_64+0xfa/0xf80 [ 110.499122][ T6242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.499143][ T6242] ? clear_bhb_loop+0x60/0xb0 [ 110.499168][ T6242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.499188][ T6242] RIP: 0033:0x7fca1898f749 [ 110.499206][ T6242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.499224][ T6242] RSP: 002b:00007fca19859038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 110.499245][ T6242] RAX: ffffffffffffffda RBX: 00007fca18be5fa0 RCX: 00007fca1898f749 [ 110.499261][ T6242] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 110.499274][ T6242] RBP: 00007fca19859090 R08: 0000000000000000 R09: 0000000000000000 [ 110.499286][ T6242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.499298][ T6242] R13: 00007fca18be6038 R14: 00007fca18be5fa0 R15: 00007ffdba330698 [ 110.499332][ T6242] [ 110.891197][ T5842] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 112.414160][ T6276] netlink: 16 bytes leftover after parsing attributes in process `syz.4.109'. [ 112.757933][ T6279] netlink: 'syz.3.110': attribute type 10 has an invalid length. [ 112.768932][ T6289] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.115'. [ 112.800706][ T6289] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 112.856352][ T6289] ======================================================= [ 112.856352][ T6289] WARNING: The mand mount option has been deprecated and [ 112.856352][ T6289] and is ignored by this kernel. Remove the mand [ 112.856352][ T6289] option from the mount to silence this warning. [ 112.856352][ T6289] ======================================================= [ 113.421086][ T6305] netlink: 16 bytes leftover after parsing attributes in process `syz.2.119'. [ 113.904289][ T6316] bridge_slave_1: left allmulticast mode [ 113.941776][ T6316] bridge_slave_1: left promiscuous mode [ 113.982860][ T6316] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.169517][ T6316] bridge_slave_0: left allmulticast mode [ 114.187530][ T6316] bridge_slave_0: left promiscuous mode [ 114.228506][ T6316] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.726789][ T6334] netlink: 'syz.4.127': attribute type 10 has an invalid length. [ 115.572461][ T6334] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 116.937809][ T6375] netlink: 16 bytes leftover after parsing attributes in process `syz.0.143'. [ 117.055541][ T6377] netlink: 'syz.3.144': attribute type 10 has an invalid length. [ 117.799251][ T6398] netlink: 112 bytes leftover after parsing attributes in process `syz.2.152'. [ 117.888453][ T6398] netlink: 'syz.2.152': attribute type 2 has an invalid length. [ 118.020413][ T6395] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 118.051282][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 118.088338][ T6396] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 119.253783][ T6432] netlink: 48 bytes leftover after parsing attributes in process `syz.1.159'. [ 120.379423][ T6442] netlink: 'syz.3.160': attribute type 10 has an invalid length. [ 122.957117][ T6497] netlink: 'syz.2.174': attribute type 10 has an invalid length. [ 123.752832][ T6530] netlink: 'syz.4.186': attribute type 14 has an invalid length. [ 124.084033][ T6539] netlink: 60 bytes leftover after parsing attributes in process `syz.0.190'. [ 124.106861][ T6542] netlink: 60 bytes leftover after parsing attributes in process `syz.0.190'. [ 124.128984][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.190'. [ 124.272933][ T6544] netlink: 'syz.1.191': attribute type 10 has an invalid length. [ 124.339924][ T6546] netlink: 'syz.4.192': attribute type 23 has an invalid length. [ 125.494743][ T6570] netlink: 'syz.1.198': attribute type 46 has an invalid length. [ 126.338148][ T6591] netlink: 284 bytes leftover after parsing attributes in process `syz.3.205'. [ 126.351751][ T6596] netlink: 'syz.2.206': attribute type 10 has an invalid length. [ 126.498351][ T6602] FAULT_INJECTION: forcing a failure. [ 126.498351][ T6602] name failslab, interval 1, probability 0, space 0, times 0 [ 126.513443][ T6602] CPU: 1 UID: 0 PID: 6602 Comm: syz.4.209 Not tainted syzkaller #0 PREEMPT(full) [ 126.513477][ T6602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 126.513490][ T6602] Call Trace: [ 126.513499][ T6602] [ 126.513508][ T6602] dump_stack_lvl+0x189/0x250 [ 126.513538][ T6602] ? __pfx____ratelimit+0x10/0x10 [ 126.513564][ T6602] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.513587][ T6602] ? __pfx__printk+0x10/0x10 [ 126.513613][ T6602] ? kmalloc_reserve+0xbd/0x290 [ 126.513666][ T6602] ? __lock_acquire+0x6b6/0x2cf0 [ 126.513697][ T6602] should_fail_ex+0x414/0x560 [ 126.513728][ T6602] should_failslab+0xa8/0x100 [ 126.513763][ T6602] kmem_cache_alloc_noprof+0x74/0x6f0 [ 126.513790][ T6602] ? skb_clone+0x212/0x3a0 [ 126.513817][ T6602] skb_clone+0x212/0x3a0 [ 126.513843][ T6602] __netlink_deliver_tap+0x404/0x850 [ 126.513879][ T6602] ? netlink_deliver_tap+0x2e/0x1b0 [ 126.513903][ T6602] netlink_deliver_tap+0x19c/0x1b0 [ 126.513926][ T6602] netlink_unicast+0x7fa/0x9e0 [ 126.513969][ T6602] ? __pfx_netlink_unicast+0x10/0x10 [ 126.514003][ T6602] ? netlink_sendmsg+0x642/0xb30 [ 126.514023][ T6602] ? skb_put+0x11b/0x210 [ 126.514058][ T6602] netlink_sendmsg+0x805/0xb30 [ 126.514091][ T6602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.514118][ T6602] ? aa_sock_msg_perm+0xf1/0x1b0 [ 126.514142][ T6602] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 126.514178][ T6602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.514202][ T6602] __sock_sendmsg+0x21c/0x270 [ 126.514232][ T6602] ____sys_sendmsg+0x505/0x820 [ 126.514272][ T6602] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.514317][ T6602] ? import_iovec+0x74/0xa0 [ 126.514352][ T6602] ___sys_sendmsg+0x21f/0x2a0 [ 126.514389][ T6602] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.514464][ T6602] ? __fget_files+0x2a/0x420 [ 126.514483][ T6602] ? __fget_files+0x3a0/0x420 [ 126.514515][ T6602] __x64_sys_sendmsg+0x19b/0x260 [ 126.514552][ T6602] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 126.514598][ T6602] ? __pfx_ksys_write+0x10/0x10 [ 126.514630][ T6602] ? do_syscall_64+0xbe/0xf80 [ 126.514663][ T6602] do_syscall_64+0xfa/0xf80 [ 126.514693][ T6602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.514715][ T6602] ? clear_bhb_loop+0x60/0xb0 [ 126.514741][ T6602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.514762][ T6602] RIP: 0033:0x7f552b18f749 [ 126.514782][ T6602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.514817][ T6602] RSP: 002b:00007f552bfc4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.514839][ T6602] RAX: ffffffffffffffda RBX: 00007f552b3e5fa0 RCX: 00007f552b18f749 [ 126.514855][ T6602] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003 [ 126.514868][ T6602] RBP: 00007f552bfc4090 R08: 0000000000000000 R09: 0000000000000000 [ 126.514881][ T6602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.514893][ T6602] R13: 00007f552b3e6038 R14: 00007f552b3e5fa0 R15: 00007fff6b420198 [ 126.514928][ T6602] [ 127.208661][ T6616] sctp: [Deprecated]: syz.3.211 (pid 6616) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.208661][ T6616] Use struct sctp_sack_info instead [ 127.260234][ T6620] netlink: 16 bytes leftover after parsing attributes in process `syz.4.214'. [ 127.367807][ T6623] netlink: 'syz.2.215': attribute type 10 has an invalid length. [ 127.820406][ T6635] netlink: 'syz.1.220': attribute type 10 has an invalid length. [ 127.863099][ T6642] netlink: 'syz.4.222': attribute type 32 has an invalid length. [ 128.046903][ T6652] netlink: 'syz.0.233': attribute type 10 has an invalid length. [ 128.617716][ T6645] netlink: 'syz.4.222': attribute type 32 has an invalid length. [ 129.286159][ T6694] netlink: 'syz.0.236': attribute type 10 has an invalid length. [ 129.839075][ T6712] FAULT_INJECTION: forcing a failure. [ 129.839075][ T6712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.857077][ T6712] CPU: 0 UID: 0 PID: 6712 Comm: syz.2.243 Not tainted syzkaller #0 PREEMPT(full) [ 129.857119][ T6712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 129.857131][ T6712] Call Trace: [ 129.857139][ T6712] [ 129.857148][ T6712] dump_stack_lvl+0x189/0x250 [ 129.857176][ T6712] ? __pfx____ratelimit+0x10/0x10 [ 129.857202][ T6712] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.857225][ T6712] ? __pfx__printk+0x10/0x10 [ 129.857268][ T6712] should_fail_ex+0x414/0x560 [ 129.857298][ T6712] _copy_to_user+0x31/0xb0 [ 129.857331][ T6712] simple_read_from_buffer+0xe1/0x170 [ 129.857369][ T6712] proc_fail_nth_read+0x1b3/0x220 [ 129.857401][ T6712] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 129.857433][ T6712] ? rw_verify_area+0x2a6/0x4d0 [ 129.857458][ T6712] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 129.857488][ T6712] vfs_read+0x200/0xa30 [ 129.857513][ T6712] ? fdget_pos+0x247/0x320 [ 129.857538][ T6712] ? __pfx___mutex_lock+0x10/0x10 [ 129.857567][ T6712] ? __pfx_vfs_read+0x10/0x10 [ 129.857595][ T6712] ? __fget_files+0x2a/0x420 [ 129.857619][ T6712] ? __fget_files+0x3a0/0x420 [ 129.857637][ T6712] ? __fget_files+0x2a/0x420 [ 129.857673][ T6712] ksys_read+0x145/0x250 [ 129.857703][ T6712] ? __pfx_ksys_read+0x10/0x10 [ 129.857733][ T6712] ? do_syscall_64+0xbe/0xf80 [ 129.857765][ T6712] do_syscall_64+0xfa/0xf80 [ 129.857794][ T6712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.857815][ T6712] ? clear_bhb_loop+0x60/0xb0 [ 129.857841][ T6712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.857862][ T6712] RIP: 0033:0x7f12f318e15c [ 129.857881][ T6712] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 129.857898][ T6712] RSP: 002b:00007f12f410c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 129.857921][ T6712] RAX: ffffffffffffffda RBX: 00007f12f33e5fa0 RCX: 00007f12f318e15c [ 129.857937][ T6712] RDX: 000000000000000f RSI: 00007f12f410c0a0 RDI: 0000000000000014 [ 129.857950][ T6712] RBP: 00007f12f410c090 R08: 0000000000000000 R09: 0000000000000000 [ 129.857963][ T6712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.857975][ T6712] R13: 00007f12f33e6038 R14: 00007f12f33e5fa0 R15: 00007ffd12f81a38 [ 129.858012][ T6712] [ 130.732570][ T6734] netlink: 'syz.0.251': attribute type 10 has an invalid length. [ 131.133579][ T6749] netlink: 'syz.1.254': attribute type 10 has an invalid length. [ 131.189390][ T6749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.221618][ T6749] team0: Port device bond0 added [ 131.350338][ T6747] netlink: 'syz.4.257': attribute type 10 has an invalid length. [ 132.711423][ T6756] syz.2.259 (6756) used greatest stack depth: 17552 bytes left [ 132.736087][ T6783] netlink: 120 bytes leftover after parsing attributes in process `syz.4.264'. [ 133.030781][ T6787] netlink: 'syz.4.266': attribute type 10 has an invalid length. [ 133.597154][ T6809] netlink: 72 bytes leftover after parsing attributes in process `syz.2.273'. [ 133.647282][ T6811] netlink: 188 bytes leftover after parsing attributes in process `syz.0.271'. [ 133.665453][ T6810] netlink: 16 bytes leftover after parsing attributes in process `syz.3.272'. [ 133.678537][ T6810] openvswitch: netlink: Flow actions attr not present in new flow. [ 133.720919][ T6813] netlink: 'syz.2.273': attribute type 10 has an invalid length. [ 133.738318][ T6813] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 133.752242][ T6813] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 133.765243][ T6813] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 133.781127][ T6814] warning: `syz.2.273' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 135.204476][ T6829] netlink: 16 bytes leftover after parsing attributes in process `syz.4.277'. [ 135.473965][ T6838] netlink: 64 bytes leftover after parsing attributes in process `syz.1.281'. [ 138.056328][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.062994][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.644234][ T6860] netlink: 'syz.3.288': attribute type 2 has an invalid length. [ 138.651959][ T6860] netlink: 134 bytes leftover after parsing attributes in process `syz.3.288'. [ 138.684471][ T6860] netlink: 264 bytes leftover after parsing attributes in process `syz.3.288'. [ 138.696954][ T6860] netlink: 'syz.3.288': attribute type 2 has an invalid length. [ 138.706107][ T6860] netlink: 134 bytes leftover after parsing attributes in process `syz.3.288'. [ 139.065852][ T6871] netlink: 120 bytes leftover after parsing attributes in process `syz.1.292'. [ 139.369875][ T6882] netlink: 348 bytes leftover after parsing attributes in process `syz.3.297'. [ 139.490276][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.300'. [ 139.648041][ T6893] netlink: 104 bytes leftover after parsing attributes in process `syz.1.302'. [ 140.294307][ T6912] netlink: 'syz.0.310': attribute type 7 has an invalid length. [ 140.634121][ T6924] FAULT_INJECTION: forcing a failure. [ 140.634121][ T6924] name failslab, interval 1, probability 0, space 0, times 0 [ 140.674464][ T6924] CPU: 1 UID: 0 PID: 6924 Comm: syz.3.317 Not tainted syzkaller #0 PREEMPT(full) [ 140.674493][ T6924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 140.674506][ T6924] Call Trace: [ 140.674514][ T6924] [ 140.674523][ T6924] dump_stack_lvl+0x189/0x250 [ 140.674552][ T6924] ? __pfx____ratelimit+0x10/0x10 [ 140.674579][ T6924] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.674603][ T6924] ? __pfx__printk+0x10/0x10 [ 140.674637][ T6924] ? __pfx___might_resched+0x10/0x10 [ 140.674660][ T6924] ? fs_reclaim_acquire+0x7d/0x100 [ 140.674695][ T6924] should_fail_ex+0x414/0x560 [ 140.674726][ T6924] should_failslab+0xa8/0x100 [ 140.674760][ T6924] __kmalloc_noprof+0xcb/0x800 [ 140.674787][ T6924] ? bpf_test_init+0x9f/0x150 [ 140.674814][ T6924] bpf_test_init+0x9f/0x150 [ 140.674839][ T6924] bpf_prog_test_run_flow_dissector+0x1e1/0x5c0 [ 140.674885][ T6924] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 140.674912][ T6924] ? __fget_files+0x2a/0x420 [ 140.674936][ T6924] ? __fget_files+0x2a/0x420 [ 140.674965][ T6924] ? __fget_files+0x3a0/0x420 [ 140.674982][ T6924] ? __fget_files+0x2a/0x420 [ 140.675007][ T6924] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 140.675031][ T6924] bpf_prog_test_run+0x2c7/0x340 [ 140.675063][ T6924] __sys_bpf+0x562/0x860 [ 140.675090][ T6924] ? __pfx___sys_bpf+0x10/0x10 [ 140.675132][ T6924] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 140.675158][ T6924] ? ksys_write+0x22a/0x250 [ 140.675187][ T6924] ? __pfx_ksys_write+0x10/0x10 [ 140.675220][ T6924] __x64_sys_bpf+0x7c/0x90 [ 140.675243][ T6924] do_syscall_64+0xfa/0xf80 [ 140.675272][ T6924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.675294][ T6924] ? clear_bhb_loop+0x60/0xb0 [ 140.675319][ T6924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.675340][ T6924] RIP: 0033:0x7fca1898f749 [ 140.675358][ T6924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.675375][ T6924] RSP: 002b:00007fca19859038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 140.675397][ T6924] RAX: ffffffffffffffda RBX: 00007fca18be5fa0 RCX: 00007fca1898f749 [ 140.675412][ T6924] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 000000000000000a [ 140.675426][ T6924] RBP: 00007fca19859090 R08: 0000000000000000 R09: 0000000000000000 [ 140.675439][ T6924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.675450][ T6924] R13: 00007fca18be6038 R14: 00007fca18be5fa0 R15: 00007ffdba330698 [ 140.675485][ T6924] [ 140.700944][ T6926] netlink: 68 bytes leftover after parsing attributes in process `syz.4.316'. [ 140.944615][ T6926] netlink: 68 bytes leftover after parsing attributes in process `syz.4.316'. [ 140.959084][ T6931] netlink: 132 bytes leftover after parsing attributes in process `syz.1.319'. [ 141.177777][ T5842] Bluetooth: hci3: unknown advertising packet type: 0x05 [ 142.267998][ T6971] netlink: 'syz.0.331': attribute type 5 has an invalid length. [ 142.396380][ T6980] tc_dump_action: action bad kind [ 142.553514][ T5842] Bluetooth: hci4: unknown advertising packet type: 0x05 [ 143.706739][ T7009] __nla_validate_parse: 4 callbacks suppressed [ 143.706764][ T7009] netlink: 76 bytes leftover after parsing attributes in process `syz.3.345'. [ 143.811553][ T7015] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 144.344182][ T7039] netlink: 'syz.2.355': attribute type 2 has an invalid length. [ 144.567820][ T7044] netlink: 16 bytes leftover after parsing attributes in process `syz.4.358'. [ 144.853145][ T7052] netlink: 48 bytes leftover after parsing attributes in process `syz.4.362'. [ 145.187337][ T5842] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 145.425360][ T7076] netlink: 4380 bytes leftover after parsing attributes in process `syz.0.372'. [ 145.983078][ T7086] sch_tbf: burst 128 is lower than device veth0_to_bridge mtu (1514) ! [ 146.926357][ T7096] netlink: 24 bytes leftover after parsing attributes in process `syz.3.376'. [ 147.912196][ T7146] netlink: 48 bytes leftover after parsing attributes in process `syz.2.393'. [ 148.152399][ T7157] žÿ: renamed from team_slave_1 (while UP) [ 148.494907][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.403'. [ 148.514595][ T7169] netlink: 16 bytes leftover after parsing attributes in process `syz.2.403'. [ 148.886371][ T7185] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.406'. [ 148.953867][ T7188] netlink: 'syz.2.407': attribute type 23 has an invalid length. [ 150.300432][ T7210] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 150.323627][ T7210] sch_tbf: burst 128 is lower than device veth0_to_bridge mtu (1514) ! [ 150.329794][ T7213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.416'. [ 150.341164][ T7213] netlink: 'syz.2.416': attribute type 7 has an invalid length. [ 150.348913][ T7213] netlink: 148 bytes leftover after parsing attributes in process `syz.2.416'. [ 150.507175][ T7215] FAULT_INJECTION: forcing a failure. [ 150.507175][ T7215] name failslab, interval 1, probability 0, space 0, times 0 [ 150.530507][ T7215] CPU: 1 UID: 0 PID: 7215 Comm: syz.4.417 Not tainted syzkaller #0 PREEMPT(full) [ 150.530539][ T7215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 150.530551][ T7215] Call Trace: [ 150.530560][ T7215] [ 150.530569][ T7215] dump_stack_lvl+0x189/0x250 [ 150.530601][ T7215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.530645][ T7215] should_fail_ex+0x414/0x560 [ 150.530675][ T7215] should_failslab+0xa8/0x100 [ 150.530709][ T7215] __kmalloc_noprof+0xcb/0x800 [ 150.530736][ T7215] ? bpf_test_init+0x9f/0x150 [ 150.530763][ T7215] bpf_test_init+0x9f/0x150 [ 150.530787][ T7215] bpf_prog_test_run_skb+0x376/0x1d50 [ 150.530829][ T7215] ? __fget_files+0x2a/0x420 [ 150.530853][ T7215] ? __fget_files+0x2a/0x420 [ 150.530871][ T7215] ? __fget_files+0x3a0/0x420 [ 150.530889][ T7215] ? __fget_files+0x2a/0x420 [ 150.530913][ T7215] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 150.530948][ T7215] bpf_prog_test_run+0x2c7/0x340 [ 150.530982][ T7215] __sys_bpf+0x562/0x860 [ 150.531019][ T7215] ? __pfx___sys_bpf+0x10/0x10 [ 150.531078][ T7215] __x64_sys_bpf+0x7c/0x90 [ 150.531103][ T7215] do_syscall_64+0xfa/0xf80 [ 150.531133][ T7215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.531154][ T7215] ? clear_bhb_loop+0x60/0xb0 [ 150.531180][ T7215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.531201][ T7215] RIP: 0033:0x7f552b18f749 [ 150.531220][ T7215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.531238][ T7215] RSP: 002b:00007f552bfc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 150.531261][ T7215] RAX: ffffffffffffffda RBX: 00007f552b3e5fa0 RCX: 00007f552b18f749 [ 150.531276][ T7215] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 150.531290][ T7215] RBP: 00007f552bfc4090 R08: 0000000000000000 R09: 0000000000000000 [ 150.531303][ T7215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.531315][ T7215] R13: 00007f552b3e6038 R14: 00007f552b3e5fa0 R15: 00007fff6b420198 [ 150.531350][ T7215] [ 150.803906][ T7221] netlink: 14 bytes leftover after parsing attributes in process `syz.0.418'. [ 150.833577][ T7221] hsr_slave_0: left promiscuous mode [ 150.929172][ T7221] hsr_slave_1: left promiscuous mode [ 151.027019][ T7231] netlink: 16 bytes leftover after parsing attributes in process `syz.4.422'. [ 151.426326][ T7233] netlink: 'syz.3.423': attribute type 10 has an invalid length. [ 152.075587][ T5842] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 152.420987][ T7268] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 152.428834][ T7268] IPv6: NLM_F_CREATE should be set when creating new route [ 152.436735][ T7268] IPv6: NLM_F_CREATE should be set when creating new route [ 152.444234][ T7268] IPv6: NLM_F_CREATE should be set when creating new route [ 152.740388][ T7275] netlink: 44 bytes leftover after parsing attributes in process `syz.4.436'. [ 152.833605][ T7275] netlink: 43 bytes leftover after parsing attributes in process `syz.4.436'. [ 152.873419][ T7275] netlink: 'syz.4.436': attribute type 5 has an invalid length. [ 152.927787][ T7275] netlink: 43 bytes leftover after parsing attributes in process `syz.4.436'. [ 153.830862][ T5842] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 154.107863][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.448'. [ 154.156623][ T7307] syz.2.448 uses obsolete (PF_INET,SOCK_PACKET) [ 154.589898][ T7314] netlink: 232 bytes leftover after parsing attributes in process `syz.4.450'. [ 155.609796][ T7337] netlink: 'syz.2.454': attribute type 10 has an invalid length. [ 155.632321][ T7338] netlink: 'syz.1.455': attribute type 10 has an invalid length. [ 155.944864][ T7346] netlink: 56 bytes leftover after parsing attributes in process `syz.3.459'. [ 157.584927][ T7372] netlink: 'syz.0.468': attribute type 10 has an invalid length. [ 157.790999][ T7381] netlink: 'syz.3.471': attribute type 21 has an invalid length. [ 157.822299][ T7381] netlink: 156 bytes leftover after parsing attributes in process `syz.3.471'. [ 157.928704][ T7387] FAULT_INJECTION: forcing a failure. [ 157.928704][ T7387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.959077][ T7387] CPU: 0 UID: 0 PID: 7387 Comm: syz.0.473 Not tainted syzkaller #0 PREEMPT(full) [ 157.959106][ T7387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.959119][ T7387] Call Trace: [ 157.959128][ T7387] [ 157.959137][ T7387] dump_stack_lvl+0x189/0x250 [ 157.959165][ T7387] ? __pfx____ratelimit+0x10/0x10 [ 157.959193][ T7387] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.959216][ T7387] ? __pfx__printk+0x10/0x10 [ 157.959246][ T7387] ? __might_fault+0xb0/0x130 [ 157.959276][ T7387] ? __might_fault+0xb0/0x130 [ 157.959309][ T7387] should_fail_ex+0x414/0x560 [ 157.959347][ T7387] _copy_from_iter+0x1cd/0x1630 [ 157.959381][ T7387] ? __build_skb_around+0x22d/0x3c0 [ 157.959418][ T7387] ? __pfx__copy_from_iter+0x10/0x10 [ 157.959443][ T7387] ? __alloc_skb+0x2f1/0x430 [ 157.959475][ T7387] ? __pfx___alloc_skb+0x10/0x10 [ 157.959508][ T7387] ? netlink_sendmsg+0x642/0xb30 [ 157.959528][ T7387] ? skb_put+0x11b/0x210 [ 157.959563][ T7387] netlink_sendmsg+0x6b2/0xb30 [ 157.959597][ T7387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.959624][ T7387] ? aa_sock_msg_perm+0xf1/0x1b0 [ 157.959648][ T7387] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 157.959678][ T7387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.959701][ T7387] __sock_sendmsg+0x21c/0x270 [ 157.959731][ T7387] ____sys_sendmsg+0x505/0x820 [ 157.959772][ T7387] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.959817][ T7387] ? import_iovec+0x74/0xa0 [ 157.959852][ T7387] ___sys_sendmsg+0x21f/0x2a0 [ 157.959889][ T7387] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.959949][ T7387] ? __fget_files+0x2a/0x420 [ 157.959986][ T7387] ? __fget_files+0x2a/0x420 [ 157.960004][ T7387] ? __fget_files+0x3a0/0x420 [ 157.960037][ T7387] __x64_sys_sendmsg+0x19b/0x260 [ 157.960073][ T7387] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 157.960103][ T7387] ? perf_trace_preemptirq_template+0xa3/0x340 [ 157.960143][ T7387] ? __pfx_ksys_write+0x10/0x10 [ 157.960175][ T7387] ? do_syscall_64+0xbe/0xf80 [ 157.960208][ T7387] do_syscall_64+0xfa/0xf80 [ 157.960237][ T7387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.960258][ T7387] ? clear_bhb_loop+0x60/0xb0 [ 157.960285][ T7387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.960305][ T7387] RIP: 0033:0x7f279718f749 [ 157.960329][ T7387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.960347][ T7387] RSP: 002b:00007f279805a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.960369][ T7387] RAX: ffffffffffffffda RBX: 00007f27973e5fa0 RCX: 00007f279718f749 [ 157.960385][ T7387] RDX: 0000000000080084 RSI: 0000200000000180 RDI: 0000000000000003 [ 157.960398][ T7387] RBP: 00007f279805a090 R08: 0000000000000000 R09: 0000000000000000 [ 157.960411][ T7387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.960423][ T7387] R13: 00007f27973e6038 R14: 00007f27973e5fa0 R15: 00007ffebdf0ca48 [ 157.960461][ T7387] [ 158.703927][ T7405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.480'. [ 158.788103][ T7405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.480'. [ 159.712243][ T7416] netlink: 'syz.4.483': attribute type 10 has an invalid length. [ 161.814796][ T7422] netlink: 20 bytes leftover after parsing attributes in process `syz.1.486'. [ 161.915456][ T7424] netlink: 'syz.4.487': attribute type 2 has an invalid length. [ 161.934174][ T7424] netlink: 134 bytes leftover after parsing attributes in process `syz.4.487'. [ 161.943863][ T7424] netlink: 264 bytes leftover after parsing attributes in process `syz.4.487'. [ 162.101068][ T7424] netlink: 'syz.4.487': attribute type 2 has an invalid length. [ 162.334993][ T7424] netlink: 134 bytes leftover after parsing attributes in process `syz.4.487'. [ 162.553191][ T7429] netlink: 16 bytes leftover after parsing attributes in process `syz.0.490'. [ 162.607729][ T7431] netlink: 'syz.2.489': attribute type 4 has an invalid length. [ 162.626043][ T7431] IPv6: NLM_F_CREATE should be specified when creating new route [ 162.881212][ T7448] block nbd1: not configured, cannot reconfigure [ 164.441097][ T7487] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.506594][ T7515] netlink: 'syz.4.512': attribute type 21 has an invalid length. [ 165.561975][ T7515] netlink: 128 bytes leftover after parsing attributes in process `syz.4.512'. [ 165.596602][ T7515] netlink: 'syz.4.512': attribute type 4 has an invalid length. [ 165.665708][ T7519] netlink: 45 bytes leftover after parsing attributes in process `syz.2.511'. [ 165.791986][ T5842] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 165.800258][ T5842] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 165.810586][ T5842] CPU: 0 UID: 0 PID: 5842 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 165.810612][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 165.810625][ T5842] Workqueue: hci2 hci_rx_work [ 165.810658][ T5842] Call Trace: [ 165.810666][ T5842] [ 165.810675][ T5842] dump_stack_lvl+0x189/0x250 [ 165.810705][ T5842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.810728][ T5842] ? __pfx__printk+0x10/0x10 [ 165.810763][ T5842] ? kernfs_path_from_node+0x250/0x290 [ 165.810796][ T5842] ? kernfs_path_from_node+0x2f/0x290 [ 165.810830][ T5842] sysfs_create_dir_ns+0x259/0x280 [ 165.810862][ T5842] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 165.810894][ T5842] ? do_raw_spin_unlock+0x122/0x240 [ 165.810929][ T5842] kobject_add_internal+0x6a8/0xca0 [ 165.810971][ T5842] kobject_add+0x155/0x220 [ 165.811008][ T5842] ? __pfx_kobject_add+0x10/0x10 [ 165.811059][ T5842] ? _raw_spin_unlock+0x28/0x50 [ 165.811089][ T5842] ? get_device_parent+0x366/0x3a0 [ 165.811128][ T5842] device_add+0x408/0xb50 [ 165.811165][ T5842] hci_conn_add_sysfs+0xd5/0x1e0 [ 165.811199][ T5842] le_conn_complete_evt+0xf1d/0x1420 [ 165.811236][ T5842] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 165.811258][ T5842] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 165.811297][ T5842] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 165.811326][ T5842] ? skb_pull_data+0xfb/0x200 [ 165.811356][ T5842] hci_le_conn_complete_evt+0x187/0x450 [ 165.811396][ T5842] hci_event_packet+0x78f/0x1200 [ 165.811433][ T5842] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 165.811469][ T5842] ? __pfx_hci_event_packet+0x10/0x10 [ 165.811505][ T5842] ? kcov_remote_start+0x4d3/0x7d0 [ 165.811531][ T5842] ? exc_debug_kernel+0x60/0x150 [ 165.811555][ T5842] ? hci_send_to_monitor+0xe2/0x570 [ 165.811583][ T5842] hci_rx_work+0x42b/0xf20 [ 165.811621][ T5842] ? process_scheduled_works+0x9ef/0x1770 [ 165.811659][ T5842] process_scheduled_works+0xad1/0x1770 [ 165.811726][ T5842] ? __pfx_process_scheduled_works+0x10/0x10 [ 165.811781][ T5842] worker_thread+0x8a0/0xda0 [ 165.811805][ T5842] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 165.811841][ T5842] ? __kthread_parkme+0x7b/0x200 [ 165.811876][ T5842] kthread+0x711/0x8a0 [ 165.811923][ T5842] ? __pfx_worker_thread+0x10/0x10 [ 165.811945][ T5842] ? __pfx_kthread+0x10/0x10 [ 165.811975][ T5842] ? _raw_spin_unlock_irq+0x23/0x50 [ 165.812001][ T5842] ? lockdep_hardirqs_on+0x98/0x140 [ 165.812027][ T5842] ? __pfx_kthread+0x10/0x10 [ 165.812056][ T5842] ret_from_fork+0x599/0xb30 [ 165.812093][ T5842] ? __pfx_ret_from_fork+0x10/0x10 [ 165.812140][ T5842] ? __switch_to_asm+0x39/0x70 [ 165.812165][ T5842] ? __switch_to_asm+0x33/0x70 [ 165.812189][ T5842] ? __pfx_kthread+0x10/0x10 [ 165.812229][ T5842] ret_from_fork_asm+0x1a/0x30 [ 165.812275][ T5842] [ 165.812448][ T5842] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 166.097677][ T5842] Bluetooth: hci2: failed to register connection device [ 166.252810][ T7530] netlink: 'syz.3.515': attribute type 10 has an invalid length. [ 168.167105][ T5842] Bluetooth: hci2: command 0x2016 tx timeout [ 168.689578][ T7569] sch_tbf: burst 128 is lower than device veth0_to_bridge mtu (1514) ! [ 168.850733][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.532'. [ 168.875255][ T7579] netlink: 16 bytes leftover after parsing attributes in process `syz.0.532'. [ 169.131856][ T7595] netlink: 'syz.1.538': attribute type 23 has an invalid length. [ 170.210118][ T5842] Bluetooth: hci2: command 0x2016 tx timeout [ 170.952203][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.550'. [ 170.963650][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.547'. [ 171.930010][ T7657] sch_tbf: burst 128 is lower than device veth0_to_bridge mtu (1514) ! [ 172.178714][ T7663] netlink: 72 bytes leftover after parsing attributes in process `syz.2.559'. [ 172.214430][ T7663] netlink: 72 bytes leftover after parsing attributes in process `syz.2.559'. [ 172.350821][ T7637] syz.1.551 (7637) used greatest stack depth: 17104 bytes left [ 172.575040][ T7674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.563'. [ 173.378336][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.565'. [ 173.455942][ T5842] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 173.821063][ T7700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.031191][ T7703] netlink: 'syz.4.571': attribute type 1 has an invalid length. [ 174.285292][ T7709] netlink: 'syz.0.572': attribute type 10 has an invalid length. [ 174.636045][ T7712] netlink: 120 bytes leftover after parsing attributes in process `syz.3.573'. [ 174.660226][ T7712] FAULT_INJECTION: forcing a failure. [ 174.660226][ T7712] name failslab, interval 1, probability 0, space 0, times 0 [ 174.685969][ T7712] CPU: 0 UID: 0 PID: 7712 Comm: syz.3.573 Not tainted syzkaller #0 PREEMPT(full) [ 174.685998][ T7712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 174.686011][ T7712] Call Trace: [ 174.686019][ T7712] [ 174.686028][ T7712] dump_stack_lvl+0x189/0x250 [ 174.686058][ T7712] ? __pfx____ratelimit+0x10/0x10 [ 174.686086][ T7712] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.686111][ T7712] ? __pfx__printk+0x10/0x10 [ 174.686147][ T7712] ? __pfx___might_resched+0x10/0x10 [ 174.686176][ T7712] should_fail_ex+0x414/0x560 [ 174.686207][ T7712] should_failslab+0xa8/0x100 [ 174.686242][ T7712] __kmalloc_cache_noprof+0x6f/0x6f0 [ 174.686269][ T7712] ? irqentry_exit+0x5dd/0x660 [ 174.686296][ T7712] ? xfrm_policy_alloc+0x78/0x2b0 [ 174.686329][ T7712] xfrm_policy_alloc+0x78/0x2b0 [ 174.686355][ T7712] xfrm_policy_construct+0x39/0x6b0 [ 174.686398][ T7712] xfrm_add_policy+0x267/0x800 [ 174.686434][ T7712] ? __pfx_xfrm_add_policy+0x10/0x10 [ 174.686460][ T7712] ? apparmor_capable+0x137/0x1a0 [ 174.686493][ T7712] ? __nla_parse+0x40/0x60 [ 174.686534][ T7712] xfrm_user_rcv_msg+0x7a3/0xab0 [ 174.686570][ T7712] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 174.686638][ T7712] ? __pfx___mutex_trylock_common+0x10/0x10 [ 174.686671][ T7712] ? rcu_is_watching+0x15/0xb0 [ 174.686698][ T7712] ? trace_contention_end+0x39/0x100 [ 174.686725][ T7712] ? __mutex_lock+0x335/0x1350 [ 174.686763][ T7712] netlink_rcv_skb+0x208/0x470 [ 174.686786][ T7712] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 174.686817][ T7712] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 174.686856][ T7712] ? netlink_deliver_tap+0x2e/0x1b0 [ 174.686877][ T7712] ? netlink_deliver_tap+0x2e/0x1b0 [ 174.686902][ T7712] xfrm_netlink_rcv+0x79/0x90 [ 174.686930][ T7712] netlink_unicast+0x82f/0x9e0 [ 174.686973][ T7712] ? __pfx_netlink_unicast+0x10/0x10 [ 174.687008][ T7712] ? netlink_sendmsg+0x642/0xb30 [ 174.687027][ T7712] ? skb_put+0x11b/0x210 [ 174.687074][ T7712] netlink_sendmsg+0x805/0xb30 [ 174.687106][ T7712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.687132][ T7712] ? aa_sock_msg_perm+0xf1/0x1b0 [ 174.687155][ T7712] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 174.687183][ T7712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.687206][ T7712] __sock_sendmsg+0x21c/0x270 [ 174.687235][ T7712] ____sys_sendmsg+0x505/0x820 [ 174.687275][ T7712] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.687317][ T7712] ? import_iovec+0x74/0xa0 [ 174.687350][ T7712] ___sys_sendmsg+0x21f/0x2a0 [ 174.687386][ T7712] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.687426][ T7712] ? rcu_read_lock_any_held+0xb3/0x120 [ 174.687483][ T7712] ? __fget_files+0x2a/0x420 [ 174.687526][ T7712] ? __fget_files+0x3a0/0x420 [ 174.687557][ T7712] __x64_sys_sendmsg+0x19b/0x260 [ 174.687593][ T7712] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 174.687624][ T7712] ? perf_trace_preemptirq_template+0xa3/0x340 [ 174.687662][ T7712] ? __pfx_ksys_write+0x10/0x10 [ 174.687711][ T7712] ? do_syscall_64+0xbe/0xf80 [ 174.687742][ T7712] do_syscall_64+0xfa/0xf80 [ 174.687771][ T7712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.687791][ T7712] ? clear_bhb_loop+0x60/0xb0 [ 174.687816][ T7712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.687836][ T7712] RIP: 0033:0x7fca1898f749 [ 174.687854][ T7712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.687871][ T7712] RSP: 002b:00007fca19859038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.687893][ T7712] RAX: ffffffffffffffda RBX: 00007fca18be5fa0 RCX: 00007fca1898f749 [ 174.687908][ T7712] RDX: 0000000000080084 RSI: 0000200000000180 RDI: 0000000000000003 [ 174.687921][ T7712] RBP: 00007fca19859090 R08: 0000000000000000 R09: 0000000000000000 [ 174.687933][ T7712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.687945][ T7712] R13: 00007fca18be6038 R14: 00007fca18be5fa0 R15: 00007ffdba330698 [ 174.687981][ T7712] [ 175.103543][ T7714] netlink: 'syz.2.575': attribute type 21 has an invalid length. [ 175.112178][ T7714] netlink: 156 bytes leftover after parsing attributes in process `syz.2.575'. [ 175.233801][ T7722] netlink: 72 bytes leftover after parsing attributes in process `syz.1.574'. [ 175.245546][ T7722] netlink: 72 bytes leftover after parsing attributes in process `syz.1.574'. [ 175.359354][ T7728] netlink: 40 bytes leftover after parsing attributes in process `syz.0.577'. [ 176.016906][ T5842] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 176.730990][ T7759] netlink: 72 bytes leftover after parsing attributes in process `syz.1.589'. [ 176.742431][ T7759] netlink: 72 bytes leftover after parsing attributes in process `syz.1.589'. [ 176.815193][ T7752] netlink: 830 bytes leftover after parsing attributes in process `syz.4.586'. [ 177.163748][ T5842] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 177.311354][ T7767] netlink: 16 bytes leftover after parsing attributes in process `syz.4.591'. [ 177.328568][ T7779] netlink: 40 bytes leftover after parsing attributes in process `syz.3.594'. [ 178.281518][ T7793] FAULT_INJECTION: forcing a failure. [ 178.281518][ T7793] name failslab, interval 1, probability 0, space 0, times 0 [ 178.296807][ T7793] CPU: 0 UID: 0 PID: 7793 Comm: syz.2.597 Not tainted syzkaller #0 PREEMPT(full) [ 178.296836][ T7793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 178.296848][ T7793] Call Trace: [ 178.296857][ T7793] [ 178.296867][ T7793] dump_stack_lvl+0x189/0x250 [ 178.296896][ T7793] ? __pfx____ratelimit+0x10/0x10 [ 178.296924][ T7793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.296948][ T7793] ? __pfx__printk+0x10/0x10 [ 178.296974][ T7793] ? kmalloc_reserve+0x136/0x290 [ 178.297009][ T7793] ? __lock_acquire+0x6b6/0x2cf0 [ 178.297040][ T7793] should_fail_ex+0x414/0x560 [ 178.297072][ T7793] should_failslab+0xa8/0x100 [ 178.297107][ T7793] kmem_cache_alloc_noprof+0x74/0x6f0 [ 178.297134][ T7793] ? skb_clone+0x212/0x3a0 [ 178.297162][ T7793] skb_clone+0x212/0x3a0 [ 178.297187][ T7793] __netlink_deliver_tap+0x404/0x850 [ 178.297229][ T7793] ? netlink_deliver_tap+0x2e/0x1b0 [ 178.297254][ T7793] netlink_deliver_tap+0x19c/0x1b0 [ 178.297277][ T7793] netlink_unicast+0x7fa/0x9e0 [ 178.297320][ T7793] ? __pfx_netlink_unicast+0x10/0x10 [ 178.297354][ T7793] ? netlink_sendmsg+0x642/0xb30 [ 178.297374][ T7793] ? skb_put+0x11b/0x210 [ 178.297410][ T7793] netlink_sendmsg+0x805/0xb30 [ 178.297443][ T7793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.297469][ T7793] ? aa_sock_msg_perm+0xf1/0x1b0 [ 178.297494][ T7793] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 178.297523][ T7793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.297547][ T7793] __sock_sendmsg+0x21c/0x270 [ 178.297577][ T7793] ____sys_sendmsg+0x505/0x820 [ 178.297617][ T7793] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.297660][ T7793] ? import_iovec+0x74/0xa0 [ 178.297695][ T7793] ___sys_sendmsg+0x21f/0x2a0 [ 178.297732][ T7793] ? __pfx____sys_sendmsg+0x10/0x10 [ 178.297810][ T7793] ? __fget_files+0x2a/0x420 [ 178.297828][ T7793] ? __fget_files+0x3a0/0x420 [ 178.297860][ T7793] __x64_sys_sendmsg+0x19b/0x260 [ 178.297897][ T7793] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 178.297929][ T7793] ? perf_trace_preemptirq_template+0xa3/0x340 [ 178.297975][ T7793] ? do_syscall_64+0xbe/0xf80 [ 178.298009][ T7793] do_syscall_64+0xfa/0xf80 [ 178.298038][ T7793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.298059][ T7793] ? clear_bhb_loop+0x60/0xb0 [ 178.298086][ T7793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.298107][ T7793] RIP: 0033:0x7f12f318f749 [ 178.298126][ T7793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.298143][ T7793] RSP: 002b:00007f12f40eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.298166][ T7793] RAX: ffffffffffffffda RBX: 00007f12f33e6090 RCX: 00007f12f318f749 [ 178.298181][ T7793] RDX: 0000000000008010 RSI: 0000200000000000 RDI: 0000000000000005 [ 178.298194][ T7793] RBP: 00007f12f40eb090 R08: 0000000000000000 R09: 0000000000000000 [ 178.298207][ T7793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.298230][ T7793] R13: 00007f12f33e6128 R14: 00007f12f33e6090 R15: 00007ffd12f81a38 [ 178.298264][ T7793] [ 178.298400][ T7793] netlink: 'syz.2.597': attribute type 2 has an invalid length. [ 178.606957][ T7793] netlink: 'syz.2.597': attribute type 2 has an invalid length. [ 179.197855][ T7812] netlink: 'syz.0.604': attribute type 1 has an invalid length. [ 179.206030][ T7812] netlink: 'syz.0.604': attribute type 4 has an invalid length. [ 179.798428][ T7829] FAULT_INJECTION: forcing a failure. [ 179.798428][ T7829] name failslab, interval 1, probability 0, space 0, times 0 [ 179.819808][ T7829] CPU: 1 UID: 0 PID: 7829 Comm: syz.4.611 Not tainted syzkaller #0 PREEMPT(full) [ 179.819835][ T7829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.819846][ T7829] Call Trace: [ 179.819854][ T7829] [ 179.819862][ T7829] dump_stack_lvl+0x189/0x250 [ 179.819901][ T7829] ? __pfx____ratelimit+0x10/0x10 [ 179.819926][ T7829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.819947][ T7829] ? __pfx__printk+0x10/0x10 [ 179.819980][ T7829] ? __pfx___might_resched+0x10/0x10 [ 179.820006][ T7829] should_fail_ex+0x414/0x560 [ 179.820032][ T7829] should_failslab+0xa8/0x100 [ 179.820064][ T7829] __kmalloc_noprof+0xcb/0x800 [ 179.820090][ T7829] ? bpf_ctx_init+0xbd/0x1d0 [ 179.820123][ T7829] bpf_ctx_init+0xbd/0x1d0 [ 179.820145][ T7829] bpf_prog_test_run_flow_dissector+0x211/0x5c0 [ 179.820177][ T7829] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 179.820202][ T7829] ? __fget_files+0x2a/0x420 [ 179.820223][ T7829] ? __fget_files+0x2a/0x420 [ 179.820240][ T7829] ? __fget_files+0x3a0/0x420 [ 179.820257][ T7829] ? __fget_files+0x2a/0x420 [ 179.820281][ T7829] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 179.820305][ T7829] bpf_prog_test_run+0x2c7/0x340 [ 179.820338][ T7829] __sys_bpf+0x562/0x860 [ 179.820364][ T7829] ? __pfx___sys_bpf+0x10/0x10 [ 179.820405][ T7829] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 179.820430][ T7829] ? ksys_write+0x22a/0x250 [ 179.820457][ T7829] ? __pfx_ksys_write+0x10/0x10 [ 179.820489][ T7829] __x64_sys_bpf+0x7c/0x90 [ 179.820512][ T7829] do_syscall_64+0xfa/0xf80 [ 179.820540][ T7829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.820561][ T7829] ? clear_bhb_loop+0x60/0xb0 [ 179.820585][ T7829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.820605][ T7829] RIP: 0033:0x7f552b18f749 [ 179.820630][ T7829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.820646][ T7829] RSP: 002b:00007f552bfc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 179.820672][ T7829] RAX: ffffffffffffffda RBX: 00007f552b3e5fa0 RCX: 00007f552b18f749 [ 179.820687][ T7829] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 000000000000000a [ 179.820700][ T7829] RBP: 00007f552bfc4090 R08: 0000000000000000 R09: 0000000000000000 [ 179.820712][ T7829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.820725][ T7829] R13: 00007f552b3e6038 R14: 00007f552b3e5fa0 R15: 00007fff6b420198 [ 179.820763][ T7829] [ 180.656671][ T7842] __nla_validate_parse: 8 callbacks suppressed [ 180.656693][ T7842] netlink: 72 bytes leftover after parsing attributes in process `syz.2.614'. [ 180.707195][ T7842] netlink: 72 bytes leftover after parsing attributes in process `syz.2.614'. [ 180.934364][ T7849] Driver unsupported XDP return value 0 on prog (id 505) dev N/A, expect packet loss! [ 181.391246][ T7855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.639541][ T7875] bpf: Bad value for 'gid' [ 181.654934][ T7875] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 181.922754][ T7891] netlink: 'syz.4.627': attribute type 29 has an invalid length. [ 181.936283][ T7891] netlink: 'syz.4.627': attribute type 3 has an invalid length. [ 181.949712][ T7891] netlink: 132 bytes leftover after parsing attributes in process `syz.4.627'. [ 182.951683][ T5842] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 182.959442][ T5842] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 186.542810][ T7939] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 186.550276][ T7939] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 186.866993][ T7951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.646'. [ 186.885832][ T7951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.646'. [ 187.013795][ T7944] netlink: 'syz.0.645': attribute type 11 has an invalid length. [ 187.024224][ T7944] netlink: 140 bytes leftover after parsing attributes in process `syz.0.645'. [ 187.453940][ T7960] netlink: 'syz.3.648': attribute type 10 has an invalid length. [ 187.696150][ T7967] netlink: 16 bytes leftover after parsing attributes in process `syz.2.651'. [ 187.794943][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.653'. [ 187.927544][ T7972] FAULT_INJECTION: forcing a failure. [ 187.927544][ T7972] name failslab, interval 1, probability 0, space 0, times 0 [ 187.981914][ T7972] CPU: 0 UID: 0 PID: 7972 Comm: syz.4.652 Not tainted syzkaller #0 PREEMPT(full) [ 187.981944][ T7972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 187.981958][ T7972] Call Trace: [ 187.981971][ T7972] [ 187.981984][ T7972] dump_stack_lvl+0x189/0x250 [ 187.982022][ T7972] ? __pfx____ratelimit+0x10/0x10 [ 187.982060][ T7972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.982095][ T7972] ? __pfx__printk+0x10/0x10 [ 187.982169][ T7972] ? __pfx___might_resched+0x10/0x10 [ 187.982191][ T7972] ? fs_reclaim_acquire+0x7d/0x100 [ 187.982255][ T7972] should_fail_ex+0x414/0x560 [ 187.982318][ T7972] should_failslab+0xa8/0x100 [ 187.982369][ T7972] __kmalloc_noprof+0xcb/0x800 [ 187.982402][ T7972] ? sk_prot_alloc+0xe7/0x220 [ 187.982475][ T7972] sk_prot_alloc+0xe7/0x220 [ 187.982509][ T7972] ? sk_alloc+0x27/0x390 [ 187.982564][ T7972] sk_alloc+0x3a/0x390 [ 187.982635][ T7972] bpf_prog_test_run_skb+0x3f4/0x1d50 [ 187.982718][ T7972] ? __fget_files+0x2a/0x420 [ 187.982763][ T7972] ? __fget_files+0x2a/0x420 [ 187.982785][ T7972] ? __fget_files+0x3a0/0x420 [ 187.982807][ T7972] ? __fget_files+0x2a/0x420 [ 187.982862][ T7972] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 187.982912][ T7972] bpf_prog_test_run+0x2c7/0x340 [ 187.982971][ T7972] __sys_bpf+0x562/0x860 [ 187.983022][ T7972] ? __pfx___sys_bpf+0x10/0x10 [ 187.983143][ T7972] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 187.983170][ T7972] ? ksys_write+0x22a/0x250 [ 187.983221][ T7972] ? __pfx_ksys_write+0x10/0x10 [ 187.983291][ T7972] __x64_sys_bpf+0x7c/0x90 [ 187.983330][ T7972] do_syscall_64+0xfa/0xf80 [ 187.983371][ T7972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.983396][ T7972] ? clear_bhb_loop+0x60/0xb0 [ 187.983441][ T7972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.983464][ T7972] RIP: 0033:0x7f552b18f749 [ 187.983489][ T7972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.983507][ T7972] RSP: 002b:00007f552bfc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 187.983530][ T7972] RAX: ffffffffffffffda RBX: 00007f552b3e5fa0 RCX: 00007f552b18f749 [ 187.983546][ T7972] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 187.983560][ T7972] RBP: 00007f552bfc4090 R08: 0000000000000000 R09: 0000000000000000 [ 187.983573][ T7972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.983585][ T7972] R13: 00007f552b3e6038 R14: 00007f552b3e5fa0 R15: 00007fff6b420198 [ 187.983699][ T7972] [ 188.568976][ T7981] netlink: 72 bytes leftover after parsing attributes in process `syz.3.656'. [ 188.646352][ T7981] netlink: 72 bytes leftover after parsing attributes in process `syz.3.656'. [ 189.249484][ T7995] netlink: 'syz.0.660': attribute type 4 has an invalid length. [ 189.582097][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.662'. [ 189.630520][ T7999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.662'. [ 189.751476][ T8003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.663'. [ 190.559628][ T8041] bpf: Bad value for 'gid' [ 190.750100][ T8041] netlink: 'syz.0.675': attribute type 10 has an invalid length. [ 192.692489][ T8088] __nla_validate_parse: 8 callbacks suppressed [ 192.692543][ T8088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.693'. [ 192.776264][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.695'. [ 194.530553][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.708'. [ 194.999979][ T8150] : entered promiscuous mode [ 195.018035][ T8152] netlink: 'syz.1.711': attribute type 4 has an invalid length. [ 195.377972][ T8161] netlink: 'syz.4.715': attribute type 10 has an invalid length. [ 195.450688][ T8161] bond0: (slave wlan1): Releasing backup interface [ 195.611983][ T8161] team0: Port device wlan1 added [ 197.512823][ T8217] netlink: 252 bytes leftover after parsing attributes in process `syz.0.733'. [ 197.565361][ T8201] netlink: 24 bytes leftover after parsing attributes in process `syz.4.727'. [ 198.000846][ T5842] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 198.359155][ T8237] netlink: 'syz.3.740': attribute type 4 has an invalid length. [ 199.004159][ T8245] FAULT_INJECTION: forcing a failure. [ 199.004159][ T8245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.050493][ T8245] CPU: 1 UID: 0 PID: 8245 Comm: syz.0.743 Not tainted syzkaller #0 PREEMPT(full) [ 199.050522][ T8245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 199.050535][ T8245] Call Trace: [ 199.050543][ T8245] [ 199.050552][ T8245] dump_stack_lvl+0x189/0x250 [ 199.050587][ T8245] ? __pfx____ratelimit+0x10/0x10 [ 199.050614][ T8245] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.050637][ T8245] ? __pfx__printk+0x10/0x10 [ 199.050679][ T8245] should_fail_ex+0x414/0x560 [ 199.050709][ T8245] _copy_to_user+0x31/0xb0 [ 199.050742][ T8245] simple_read_from_buffer+0xe1/0x170 [ 199.050780][ T8245] proc_fail_nth_read+0x1b3/0x220 [ 199.050812][ T8245] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 199.050844][ T8245] ? rw_verify_area+0x2a6/0x4d0 [ 199.050869][ T8245] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 199.050899][ T8245] vfs_read+0x200/0xa30 [ 199.050923][ T8245] ? fdget_pos+0x247/0x320 [ 199.050947][ T8245] ? __pfx___mutex_lock+0x10/0x10 [ 199.050977][ T8245] ? __pfx_vfs_read+0x10/0x10 [ 199.051005][ T8245] ? __fget_files+0x2a/0x420 [ 199.051033][ T8245] ? __fget_files+0x3a0/0x420 [ 199.051051][ T8245] ? __fget_files+0x2a/0x420 [ 199.051080][ T8245] ksys_read+0x145/0x250 [ 199.051109][ T8245] ? __pfx_ksys_read+0x10/0x10 [ 199.051147][ T8245] do_syscall_64+0xfa/0xf80 [ 199.051176][ T8245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.051197][ T8245] ? clear_bhb_loop+0x60/0xb0 [ 199.051223][ T8245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.051244][ T8245] RIP: 0033:0x7f279718e15c [ 199.051263][ T8245] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 199.051280][ T8245] RSP: 002b:00007f279805a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 199.051302][ T8245] RAX: ffffffffffffffda RBX: 00007f27973e5fa0 RCX: 00007f279718e15c [ 199.051317][ T8245] RDX: 000000000000000f RSI: 00007f279805a0a0 RDI: 0000000000000006 [ 199.051329][ T8245] RBP: 00007f279805a090 R08: 0000000000000000 R09: 0000000000000000 [ 199.051343][ T8245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.051355][ T8245] R13: 00007f27973e6038 R14: 00007f27973e5fa0 R15: 00007ffebdf0ca48 [ 199.051389][ T8245] [ 199.341578][ T8254] netlink: 'syz.2.746': attribute type 39 has an invalid length. [ 199.504618][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.511707][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.652977][ T5842] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 199.832795][ T8264] netlink: 'syz.0.750': attribute type 10 has an invalid length. [ 200.441544][ T8273] syzkaller0: entered promiscuous mode [ 200.447241][ T8273] syzkaller0: entered allmulticast mode [ 200.642301][ T8288] netlink: 'syz.0.757': attribute type 10 has an invalid length. [ 200.723964][ T8288] netlink: 40 bytes leftover after parsing attributes in process `syz.0.757'. [ 201.396301][ T5842] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 202.110521][ T8288] batman_adv: batadv0: Adding interface: virt_wifi0 [ 202.118778][ T8288] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.149107][ T8288] batman_adv: batadv0: Interface activated: virt_wifi0 [ 202.182254][ T8291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.214534][ T8291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.236901][ T8291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.248448][ T8291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.380809][ T8289] netlink: 24 bytes leftover after parsing attributes in process `syz.2.758'. [ 202.389933][ T8289] netlink: 24 bytes leftover after parsing attributes in process `syz.2.758'. [ 202.490735][ T8316] netlink: 'syz.0.768': attribute type 10 has an invalid length. [ 202.601982][ T8320] netlink: 'syz.2.770': attribute type 1 has an invalid length. [ 202.652725][ T8318] netlink: 'syz.3.769': attribute type 10 has an invalid length. [ 203.608550][ T8343] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 203.615280][ T8343] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 203.635681][ T8339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.777'. [ 203.688307][ T8345] netlink: 'syz.1.778': attribute type 21 has an invalid length. [ 203.699404][ T8339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.777'. [ 204.074857][ T8348] bpf: Bad value for 'gid' [ 204.192209][ T8348] netlink: 'syz.0.780': attribute type 10 has an invalid length. [ 204.535672][ T8357] netlink: 'syz.1.783': attribute type 10 has an invalid length. [ 209.114268][ T8399] netlink: 16 bytes leftover after parsing attributes in process `syz.4.797'. [ 209.366084][ T8405] tc_dump_action: action bad kind [ 209.784028][ T8414] netlink: 'syz.0.801': attribute type 3 has an invalid length. [ 209.865326][ T8417] netlink: 48 bytes leftover after parsing attributes in process `syz.0.801'. [ 209.969002][ T8414] netlink: 'syz.0.801': attribute type 12 has an invalid length. [ 211.231190][ T8438] netlink: 'syz.4.808': attribute type 10 has an invalid length. [ 211.808872][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 211.815157][ T5833] Bluetooth: hci1: command 0x2016 tx timeout [ 211.819475][ T8453] Bluetooth: hci3: command 0x0406 tx timeout [ 211.821187][ T5833] Bluetooth: hci2: command 0x2016 tx timeout [ 211.827355][ T8453] Bluetooth: hci0: command 0x0406 tx timeout [ 212.790298][ T8460] netlink: 'syz.0.813': attribute type 23 has an invalid length. [ 213.291690][ T8443] netlink: 'syz.1.809': attribute type 4 has an invalid length. [ 213.509604][ T8482] netlink: 28 bytes leftover after parsing attributes in process `syz.3.819'. [ 213.661097][ T8487] netlink: 36 bytes leftover after parsing attributes in process `syz.3.822'. [ 213.817179][ T5844] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 213.882797][ T5844] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 214.397653][ T8503] netlink: 'syz.1.827': attribute type 4 has an invalid length. [ 214.513531][ T8508] netlink: 132 bytes leftover after parsing attributes in process `syz.2.830'. [ 214.662325][ T8511] netlink: 'syz.4.831': attribute type 10 has an invalid length. [ 214.709577][ T8516] netlink: 16 bytes leftover after parsing attributes in process `syz.1.835'. [ 214.712478][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.833'. [ 214.751558][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.833'. [ 214.794818][ T8518] netlink: 'syz.0.834': attribute type 39 has an invalid length. [ 218.145124][ T8538] bpf: Bad value for 'gid' [ 218.184513][ T8543] netlink: 48 bytes leftover after parsing attributes in process `syz.1.839'. [ 218.202817][ T8538] netlink: 'syz.4.841': attribute type 10 has an invalid length. [ 218.340807][ T8538] team0: Port device wlan1 removed [ 218.428545][ T8538] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 220.836727][ T8574] netlink: 'syz.0.850': attribute type 10 has an invalid length. [ 221.039834][ T8580] netlink: 72 bytes leftover after parsing attributes in process `syz.3.853'. [ 221.049989][ T8580] netlink: 72 bytes leftover after parsing attributes in process `syz.3.853'. [ 221.219486][ T8583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.854'. [ 221.237039][ T8583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.854'. [ 221.935784][ T8593] netlink: 'syz.4.855': attribute type 10 has an invalid length. [ 222.780836][ T5844] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 222.909554][ T8601] netlink: 'syz.1.860': attribute type 1 has an invalid length. [ 223.054056][ T5844] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 223.190485][ T8611] netlink: 'syz.2.864': attribute type 10 has an invalid length. [ 224.373136][ T8617] netlink: 'syz.4.865': attribute type 4 has an invalid length. [ 224.974884][ T8621] netlink: 'syz.1.867': attribute type 4 has an invalid length. [ 225.363193][ T8628] netlink: 24 bytes leftover after parsing attributes in process `syz.3.869'. [ 225.454292][ T8628] netlink: 24 bytes leftover after parsing attributes in process `syz.3.869'. [ 225.499469][ T8634] tc_dump_action: action bad kind [ 225.771108][ T8638] netlink: 72 bytes leftover after parsing attributes in process `syz.1.870'. [ 225.896834][ T8638] netlink: 72 bytes leftover after parsing attributes in process `syz.1.870'. [ 226.070162][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.871'. [ 226.148653][ T8655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.875'. [ 226.303179][ T8656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.875'. [ 226.477431][ T8658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.876'. [ 226.504744][ T8662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.531277][ T8663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.876'. [ 226.998866][ T8667] netlink: 'syz.2.878': attribute type 10 has an invalid length. [ 227.209261][ T8685] FAULT_INJECTION: forcing a failure. [ 227.209261][ T8685] name failslab, interval 1, probability 0, space 0, times 0 [ 227.222763][ T8685] CPU: 1 UID: 0 PID: 8685 Comm: syz.2.884 Not tainted syzkaller #0 PREEMPT(full) [ 227.222791][ T8685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 227.222805][ T8685] Call Trace: [ 227.222813][ T8685] [ 227.222822][ T8685] dump_stack_lvl+0x189/0x250 [ 227.222851][ T8685] ? __pfx____ratelimit+0x10/0x10 [ 227.222878][ T8685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.222901][ T8685] ? __pfx__printk+0x10/0x10 [ 227.222937][ T8685] ? __pfx___might_resched+0x10/0x10 [ 227.222965][ T8685] should_fail_ex+0x414/0x560 [ 227.223013][ T8685] should_failslab+0xa8/0x100 [ 227.223048][ T8685] __kmalloc_noprof+0xcb/0x800 [ 227.223075][ T8685] ? kobject_get_path+0xc5/0x2d0 [ 227.223105][ T8685] ? __kasan_kmalloc+0x93/0xb0 [ 227.223140][ T8685] kobject_get_path+0xc5/0x2d0 [ 227.223178][ T8685] kobject_uevent_env+0x292/0x8c0 [ 227.223202][ T8685] ? do_raw_spin_unlock+0x122/0x240 [ 227.223237][ T8685] nbd_config_put+0x17e/0x790 [ 227.223268][ T8685] ? nbd_alloc_and_init_config+0x186/0x260 [ 227.223298][ T8685] ? device_create_file+0xf4/0x1b0 [ 227.223331][ T8685] nbd_genl_connect+0x167c/0x18f0 [ 227.223367][ T8685] ? __pfx_nbd_genl_connect+0x10/0x10 [ 227.223402][ T8685] ? rcu_is_watching+0x15/0xb0 [ 227.223431][ T8685] ? __nla_parse+0x40/0x60 [ 227.223463][ T8685] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 227.223503][ T8685] genl_family_rcv_msg_doit+0x215/0x300 [ 227.223540][ T8685] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 227.223595][ T8685] genl_rcv_msg+0x60e/0x790 [ 227.223636][ T8685] ? __pfx_genl_rcv_msg+0x10/0x10 [ 227.223662][ T8685] ? __pfx_nbd_genl_connect+0x10/0x10 [ 227.223705][ T8685] netlink_rcv_skb+0x208/0x470 [ 227.223735][ T8685] ? __pfx_genl_rcv_msg+0x10/0x10 [ 227.223765][ T8685] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 227.223807][ T8685] ? down_read+0x274/0x2e0 [ 227.223836][ T8685] ? genl_rcv+0xd/0x40 [ 227.223865][ T8685] genl_rcv+0x28/0x40 [ 227.223890][ T8685] netlink_unicast+0x82f/0x9e0 [ 227.223932][ T8685] ? __pfx_netlink_unicast+0x10/0x10 [ 227.223965][ T8685] ? netlink_sendmsg+0x642/0xb30 [ 227.223985][ T8685] ? skb_put+0x11b/0x210 [ 227.224021][ T8685] netlink_sendmsg+0x805/0xb30 [ 227.224054][ T8685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.224080][ T8685] ? aa_sock_msg_perm+0xf1/0x1b0 [ 227.224104][ T8685] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 227.224134][ T8685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.224156][ T8685] __sock_sendmsg+0x21c/0x270 [ 227.224185][ T8685] ____sys_sendmsg+0x505/0x820 [ 227.224226][ T8685] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.224271][ T8685] ? import_iovec+0x74/0xa0 [ 227.224306][ T8685] ___sys_sendmsg+0x21f/0x2a0 [ 227.224343][ T8685] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.224385][ T8685] ? rcu_read_lock_any_held+0xb3/0x120 [ 227.224442][ T8685] ? __fget_files+0x2a/0x420 [ 227.224461][ T8685] ? __fget_files+0x3a0/0x420 [ 227.224493][ T8685] __x64_sys_sendmsg+0x19b/0x260 [ 227.224531][ T8685] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 227.224563][ T8685] ? perf_trace_preemptirq_template+0xa3/0x340 [ 227.224602][ T8685] ? __pfx_ksys_write+0x10/0x10 [ 227.224634][ T8685] ? do_syscall_64+0xbe/0xf80 [ 227.224667][ T8685] do_syscall_64+0xfa/0xf80 [ 227.224697][ T8685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.224718][ T8685] ? clear_bhb_loop+0x60/0xb0 [ 227.224753][ T8685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.224774][ T8685] RIP: 0033:0x7f12f318f749 [ 227.224794][ T8685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.224811][ T8685] RSP: 002b:00007f12f410c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.224835][ T8685] RAX: ffffffffffffffda RBX: 00007f12f33e5fa0 RCX: 00007f12f318f749 [ 227.224851][ T8685] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003 [ 227.224865][ T8685] RBP: 00007f12f410c090 R08: 0000000000000000 R09: 0000000000000000 [ 227.224878][ T8685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 227.224888][ T8685] R13: 00007f12f33e6038 R14: 00007f12f33e5fa0 R15: 00007ffd12f81a38 [ 227.224924][ T8685] [ 227.640230][ T8686] bpf: Bad value for 'gid' [ 227.696261][ T8683] netlink: 'syz.3.882': attribute type 10 has an invalid length. [ 227.891803][ T8692] netlink: 72 bytes leftover after parsing attributes in process `syz.1.885'. [ 227.970331][ T8693] netlink: 'syz.4.886': attribute type 4 has an invalid length. [ 227.990235][ T8690] netlink: 72 bytes leftover after parsing attributes in process `syz.1.885'. [ 228.215062][ T8704] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 228.547145][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.893'. [ 228.575429][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.893'. [ 228.645253][ T8724] netlink: 'syz.3.894': attribute type 10 has an invalid length. [ 228.794312][ T8726] netlink: 'syz.2.895': attribute type 4 has an invalid length. [ 231.704419][ T8747] netlink: 'syz.4.896': attribute type 10 has an invalid length. [ 231.774180][ T8752] netlink: 'syz.0.898': attribute type 10 has an invalid length. [ 231.789777][ T8747] geneve0: entered promiscuous mode [ 231.910611][ T8747] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 231.976590][ T8755] netlink: 'syz.2.899': attribute type 4 has an invalid length. [ 232.291960][ T8765] netlink: 48 bytes leftover after parsing attributes in process `syz.0.903'. [ 232.448315][ T8776] netlink: 'syz.1.907': attribute type 10 has an invalid length. [ 232.461416][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.908'. [ 232.478943][ T8772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.906'. [ 232.494260][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.908'. [ 232.915560][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.906'. [ 233.260020][ T8796] bpf: Bad value for 'gid' [ 233.353051][ T8796] netlink: 'syz.1.912': attribute type 10 has an invalid length. [ 235.568531][ T8796] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 235.575637][ T8796] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 235.708566][ T8801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.913'. [ 235.729488][ T8802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.915'. [ 235.780618][ T8798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.913'. [ 235.825219][ T8800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.915'. [ 236.343866][ T8821] netlink: 132 bytes leftover after parsing attributes in process `syz.4.921'. [ 236.394180][ T8821] netlink: 'syz.4.921': attribute type 10 has an invalid length. [ 236.405701][ T8821] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.415966][ T8821] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.598395][ T8821] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.606351][ T8821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.615252][ T8821] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.622954][ T8821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.766544][ T8821] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 237.372407][ T8839] netlink: 'syz.3.925': attribute type 10 has an invalid length. [ 237.565354][ T8844] __nla_validate_parse: 1 callbacks suppressed [ 237.565386][ T8844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.927'. [ 237.684628][ T8846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.927'. [ 237.844622][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.929'. [ 238.141996][ T8849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.929'. [ 238.221882][ T8857] netlink: 'syz.3.930': attribute type 21 has an invalid length. [ 238.232361][ T8857] netlink: 156 bytes leftover after parsing attributes in process `syz.3.930'. [ 238.555067][ T8865] netlink: 'syz.2.932': attribute type 39 has an invalid length. [ 238.986051][ T8870] netlink: 'syz.4.934': attribute type 2 has an invalid length. [ 239.013946][ T8870] netlink: 134 bytes leftover after parsing attributes in process `syz.4.934'. [ 239.193643][ T8870] netlink: 264 bytes leftover after parsing attributes in process `syz.4.934'. [ 239.203799][ T8870] FAULT_INJECTION: forcing a failure. [ 239.203799][ T8870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.204921][ T8870] [ 239.204929][ T8870] ====================================================== [ 239.204938][ T8870] WARNING: possible circular locking dependency detected [ 239.204952][ T8870] syzkaller #0 Not tainted [ 239.204963][ T8870] ------------------------------------------------------ [ 239.204970][ T8870] syz.4.934/8870 is trying to acquire lock: [ 239.204981][ T8870] ffffffff8df35b40 (console_owner){-...}-{0:0}, at: console_flush_all+0x131/0xb60 [ 239.205040][ T8870] [ 239.205040][ T8870] but task is already holding lock: [ 239.205047][ T8870] ffff8880b893a7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 239.205091][ T8870] [ 239.205091][ T8870] which lock already depends on the new lock. [ 239.205091][ T8870] [ 239.205098][ T8870] [ 239.205098][ T8870] the existing dependency chain (in reverse order) is: [ 239.205104][ T8870] [ 239.205104][ T8870] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 239.205131][ T8870] _raw_spin_lock_nested+0x32/0x50 [ 239.205157][ T8870] raw_spin_rq_lock_nested+0x2a/0x140 [ 239.205175][ T8870] task_rq_lock+0xbc/0x470 [ 239.205192][ T8870] cgroup_move_task+0x92/0x2a0 [ 239.205214][ T8870] css_set_move_task+0x658/0x9e0 [ 239.205245][ T8870] cgroup_post_fork+0x1ef/0x7a0 [ 239.205274][ T8870] copy_process+0x3614/0x3950 [ 239.205293][ T8870] kernel_clone+0x21e/0x820 [ 239.205313][ T8870] user_mode_thread+0xdd/0x140 [ 239.205332][ T8870] rest_init+0x23/0x300 [ 239.205348][ T8870] start_kernel+0x3ae/0x410 [ 239.205365][ T8870] x86_64_start_reservations+0x24/0x30 [ 239.205391][ T8870] x86_64_start_kernel+0x143/0x1c0 [ 239.205415][ T8870] common_startup_64+0x13e/0x147 [ 239.205437][ T8870] [ 239.205437][ T8870] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 239.205464][ T8870] _raw_spin_lock_irqsave+0xa7/0xf0 [ 239.205486][ T8870] try_to_wake_up+0x67/0x12b0 [ 239.205510][ T8870] __wake_up_common_lock+0x137/0x1f0 [ 239.205536][ T8870] tty_port_default_wakeup+0xfb/0x170 [ 239.205561][ T8870] serial8250_tx_chars+0x72e/0x970 [ 239.205580][ T8870] serial8250_handle_irq+0x633/0xbb0 [ 239.205599][ T8870] serial8250_default_handle_irq+0xbf/0x200 [ 239.205624][ T8870] serial8250_interrupt+0x8d/0x180 [ 239.205654][ T8870] __handle_irq_event_percpu+0x285/0xa60 [ 239.205681][ T8870] handle_irq_event+0x8b/0x1e0 [ 239.205706][ T8870] handle_edge_irq+0x23b/0xa10 [ 239.205729][ T8870] __common_interrupt+0x141/0x1f0 [ 239.205755][ T8870] common_interrupt+0xb6/0xe0 [ 239.205772][ T8870] asm_common_interrupt+0x26/0x40 [ 239.205791][ T8870] ___slab_alloc+0x576/0x1960 [ 239.205821][ T8870] __slab_alloc+0x65/0x100 [ 239.205849][ T8870] kmem_cache_alloc_noprof+0x3f9/0x6f0 [ 239.205871][ T8870] security_file_alloc+0x34/0x330 [ 239.205896][ T8870] init_file+0x93/0x2f0 [ 239.205919][ T8870] alloc_empty_file+0x6e/0x1d0 [ 239.205936][ T8870] path_openat+0x108/0x3dd0 [ 239.205958][ T8870] do_filp_open+0x1fa/0x410 [ 239.205980][ T8870] do_sys_openat2+0x121/0x200 [ 239.205998][ T8870] __x64_sys_openat+0x138/0x170 [ 239.206016][ T8870] do_syscall_64+0xfa/0xf80 [ 239.206041][ T8870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.206060][ T8870] [ 239.206060][ T8870] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 239.206087][ T8870] _raw_spin_lock_irqsave+0xa7/0xf0 [ 239.206109][ T8870] __wake_up_common_lock+0x2f/0x1f0 [ 239.206135][ T8870] tty_port_default_wakeup+0xfb/0x170 [ 239.206158][ T8870] serial8250_tx_chars+0x72e/0x970 [ 239.206177][ T8870] serial8250_handle_irq+0x633/0xbb0 [ 239.206196][ T8870] serial8250_default_handle_irq+0xbf/0x200 [ 239.206221][ T8870] serial8250_interrupt+0x8d/0x180 [ 239.206249][ T8870] __handle_irq_event_percpu+0x285/0xa60 [ 239.206276][ T8870] handle_irq_event+0x8b/0x1e0 [ 239.206301][ T8870] handle_edge_irq+0x23b/0xa10 [ 239.206324][ T8870] __common_interrupt+0x141/0x1f0 [ 239.206350][ T8870] common_interrupt+0xb6/0xe0 [ 239.206366][ T8870] asm_common_interrupt+0x26/0x40 [ 239.206384][ T8870] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 239.206407][ T8870] uart_port_unlock_deref+0x111/0x2f0 [ 239.206426][ T8870] uart_write+0xe8/0x130 [ 239.206444][ T8870] n_tty_write+0xd27/0x1200 [ 239.206468][ T8870] file_tty_write+0x559/0xa20 [ 239.206486][ T8870] vfs_write+0x5c9/0xb30 [ 239.206507][ T8870] ksys_write+0x145/0x250 [ 239.206530][ T8870] do_syscall_64+0xfa/0xf80 [ 239.206554][ T8870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.206573][ T8870] [ 239.206573][ T8870] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 239.206600][ T8870] _raw_spin_lock_irqsave+0xa7/0xf0 [ 239.206622][ T8870] serial8250_console_write+0x17e/0x1ba0 [ 239.206643][ T8870] console_flush_all+0x745/0xb60 [ 239.206668][ T8870] console_unlock+0xbb/0x190 [ 239.206689][ T8870] vprintk_emit+0x4f8/0x5f0 [ 239.206711][ T8870] _printk+0xcf/0x120 [ 239.206735][ T8870] register_console+0xa8b/0xf90 [ 239.206760][ T8870] univ8250_console_init+0x3a/0x70 [ 239.206786][ T8870] console_init+0xfc/0x3f0 [ 239.206809][ T8870] start_kernel+0x254/0x410 [ 239.206825][ T8870] x86_64_start_reservations+0x24/0x30 [ 239.206850][ T8870] x86_64_start_kernel+0x143/0x1c0 [ 239.206874][ T8870] common_startup_64+0x13e/0x147 [ 239.206896][ T8870] [ 239.206896][ T8870] -> #0 (console_owner){-...}-{0:0}: [ 239.206928][ T8870] __lock_acquire+0x15a6/0x2cf0 [ 239.206946][ T8870] lock_acquire+0x117/0x340 [ 239.206962][ T8870] console_flush_all+0x6ee/0xb60 [ 239.206986][ T8870] console_unlock+0xbb/0x190 [ 239.207008][ T8870] vprintk_emit+0x4f8/0x5f0 [ 239.207029][ T8870] _printk+0xcf/0x120 [ 239.207053][ T8870] should_fail_ex+0x3f5/0x560 [ 239.207073][ T8870] strncpy_from_user+0x36/0x2c0 [ 239.207092][ T8870] strncpy_from_user_nofault+0x72/0x150 [ 239.207123][ T8870] bpf_probe_read_compat_str+0xe2/0x180 [ 239.207152][ T8870] bpf_prog_573c5a647519ba93+0x3e/0x44 [ 239.207172][ T8870] bpf_trace_run4+0x28e/0x4b0 [ 239.207193][ T8870] __bpf_trace_sched_switch+0x17a/0x1e0 [ 239.207219][ T8870] __traceiter_sched_switch+0x9d/0xd0 [ 239.207245][ T8870] __schedule+0x256b/0x5000 [ 239.207267][ T8870] preempt_schedule_common+0x83/0xd0 [ 239.207290][ T8870] preempt_schedule+0xae/0xc0 [ 239.207313][ T8870] preempt_schedule_thunk+0x16/0x30 [ 239.207340][ T8870] vprintk_emit+0x53b/0x5f0 [ 239.207362][ T8870] _printk+0xcf/0x120 [ 239.207386][ T8870] __nla_validate_parse+0x2563/0x2d40 [ 239.207410][ T8870] __nla_parse+0x40/0x60 [ 239.207433][ T8870] genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 239.207460][ T8870] genl_family_rcv_msg_doit+0xb8/0x300 [ 239.207485][ T8870] genl_rcv_msg+0x60e/0x790 [ 239.207508][ T8870] netlink_rcv_skb+0x208/0x470 [ 239.207525][ T8870] genl_rcv+0x28/0x40 [ 239.207546][ T8870] netlink_unicast+0x82f/0x9e0 [ 239.207574][ T8870] netlink_sendmsg+0x805/0xb30 [ 239.207592][ T8870] __sock_sendmsg+0x21c/0x270 [ 239.207613][ T8870] ____sys_sendmsg+0x505/0x820 [ 239.207641][ T8870] ___sys_sendmsg+0x21f/0x2a0 [ 239.207670][ T8870] __x64_sys_sendmsg+0x19b/0x260 [ 239.207699][ T8870] do_syscall_64+0xfa/0xf80 [ 239.207724][ T8870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.207742][ T8870] [ 239.207742][ T8870] other info that might help us debug this: [ 239.207742][ T8870] [ 239.207749][ T8870] Chain exists of: [ 239.207749][ T8870] console_owner --> &p->pi_lock --> &rq->__lock [ 239.207749][ T8870] [ 239.207780][ T8870] Possible unsafe locking scenario: [ 239.207780][ T8870] [ 239.207787][ T8870] CPU0 CPU1 [ 239.207792][ T8870] ---- ---- [ 239.207798][ T8870] lock(&rq->__lock); [ 239.207811][ T8870] lock(&p->pi_lock); [ 239.207825][ T8870] lock(&rq->__lock); [ 239.207840][ T8870] lock(console_owner); [ 239.207853][ T8870] [ 239.207853][ T8870] *** DEADLOCK *** [ 239.207853][ T8870] [ 239.207864][ T8870] 6 locks held by syz.4.934/8870: [ 239.207876][ T8870] #0: ffffffff8f35d170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 239.207933][ T8870] #1: ffffffff8f35cf88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 239.207986][ T8870] #2: ffff8880b893a7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 239.208033][ T8870] #3: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x19c/0x4b0 [ 239.208083][ T8870] #4: ffffffff8df35ba0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 239.208156][ T8870] #5: ffffffff8de1d458 (console_srcu){....}-{0:0}, at: console_flush_all+0x131/0xb60 [ 239.208211][ T8870] [ 239.208211][ T8870] stack backtrace: [ 239.208221][ T8870] CPU: 1 UID: 0 PID: 8870 Comm: syz.4.934 Not tainted syzkaller #0 PREEMPT(full) [ 239.208244][ T8870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 239.208256][ T8870] Call Trace: [ 239.208266][ T8870] [ 239.208276][ T8870] dump_stack_lvl+0x189/0x250 [ 239.208310][ T8870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.208337][ T8870] ? __pfx__printk+0x10/0x10 [ 239.208378][ T8870] ? print_lock_name+0xde/0x100 [ 239.208425][ T8870] print_circular_bug+0x2e2/0x300 [ 239.208466][ T8870] check_noncircular+0x12e/0x150 [ 239.208515][ T8870] __lock_acquire+0x15a6/0x2cf0 [ 239.208601][ T8870] ? console_flush_all+0x131/0xb60 [ 239.208627][ T8870] lock_acquire+0x117/0x340 [ 239.208648][ T8870] ? console_flush_all+0x131/0xb60 [ 239.208699][ T8870] ? do_raw_spin_unlock+0x122/0x240 [ 239.208734][ T8870] ? console_flush_all+0x131/0xb60 [ 239.208764][ T8870] console_flush_all+0x6ee/0xb60 [ 239.208792][ T8870] ? console_flush_all+0x131/0xb60 [ 239.208829][ T8870] ? console_flush_all+0x131/0xb60 [ 239.208877][ T8870] ? __pfx_console_flush_all+0x10/0x10 [ 239.208940][ T8870] ? is_printk_cpu_sync_owner+0x32/0x40 [ 239.208984][ T8870] console_unlock+0xbb/0x190 [ 239.209012][ T8870] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 239.209045][ T8870] ? __pfx_console_unlock+0x10/0x10 [ 239.209104][ T8870] vprintk_emit+0x4f8/0x5f0 [ 239.209140][ T8870] ? __pfx_vprintk_emit+0x10/0x10 [ 239.209175][ T8870] ? perf_tp_event+0x664/0x1380 [ 239.209200][ T8870] ? tracing_gen_ctx_irq_test+0xc7/0x160 [ 239.209235][ T8870] ? perf_swevent_event+0x113/0x5e0 [ 239.209272][ T8870] ? __pfx_perf_tp_event+0x10/0x10 [ 239.209303][ T8870] ? __pfx_perf_swevent_event+0x10/0x10 [ 239.209351][ T8870] _printk+0xcf/0x120 [ 239.209382][ T8870] ? __pfx____ratelimit+0x10/0x10 [ 239.209418][ T8870] ? __pfx__printk+0x10/0x10 [ 239.209452][ T8870] ? perf_swevent_event+0x113/0x5e0 [ 239.209505][ T8870] should_fail_ex+0x3f5/0x560 [ 239.209545][ T8870] strncpy_from_user+0x36/0x2c0 [ 239.209582][ T8870] strncpy_from_user_nofault+0x72/0x150 [ 239.209627][ T8870] bpf_probe_read_compat_str+0xe2/0x180 [ 239.209672][ T8870] bpf_prog_573c5a647519ba93+0x3e/0x44 [ 239.209699][ T8870] bpf_trace_run4+0x28e/0x4b0 [ 239.209730][ T8870] ? bpf_trace_run4+0x19c/0x4b0 [ 239.209779][ T8870] ? __pfx_bpf_trace_run4+0x10/0x10 [ 239.209808][ T8870] ? perf_trace_run_bpf_submit+0xee/0x170 [ 239.209855][ T8870] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 239.209902][ T8870] __bpf_trace_sched_switch+0x17a/0x1e0 [ 239.209949][ T8870] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 239.209986][ T8870] ? psi_group_change+0xab8/0x1050 [ 239.210014][ T8870] ? __schedule+0x24c4/0x5000 [ 239.210059][ T8870] ? __schedule+0x24c4/0x5000 [ 239.210099][ T8870] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 239.210128][ T8870] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 239.210162][ T8870] __traceiter_sched_switch+0x9d/0xd0 [ 239.210207][ T8870] __schedule+0x256b/0x5000 [ 239.210270][ T8870] ? _prb_read_valid+0xa07/0xa90 [ 239.210330][ T8870] ? __pfx___schedule+0x10/0x10 [ 239.210367][ T8870] ? __pfx__prb_read_valid+0x10/0x10 [ 239.210399][ T8870] ? __console_unlock+0x14c/0x1a0 [ 239.210429][ T8870] ? __pfx___console_unlock+0x10/0x10 [ 239.210468][ T8870] ? preempt_schedule+0xae/0xc0 [ 239.210503][ T8870] preempt_schedule_common+0x83/0xd0 [ 239.210535][ T8870] preempt_schedule+0xae/0xc0 [ 239.210564][ T8870] ? __pfx_preempt_schedule+0x10/0x10 [ 239.210589][ T8870] ? console_unlock+0x13a/0x190 [ 239.210617][ T8870] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 239.210652][ T8870] ? __pfx_console_unlock+0x10/0x10 [ 239.210686][ T8870] preempt_schedule_thunk+0x16/0x30 [ 239.210725][ T8870] ? vprintk_emit+0x536/0x5f0 [ 239.210759][ T8870] vprintk_emit+0x53b/0x5f0 [ 239.210796][ T8870] ? __pfx_vprintk_emit+0x10/0x10 [ 239.210820][ T8870] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 239.210850][ T8870] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 239.210929][ T8870] _printk+0xcf/0x120 [ 239.210971][ T8870] ? __pfx____ratelimit+0x10/0x10 [ 239.211007][ T8870] ? __pfx__printk+0x10/0x10 [ 239.211048][ T8870] ? kasan_save_track+0x4f/0x80 [ 239.211096][ T8870] __nla_validate_parse+0x2563/0x2d40 [ 239.211125][ T8870] ? ___sys_sendmsg+0x21f/0x2a0 [ 239.211155][ T8870] ? __x64_sys_sendmsg+0x19b/0x260 [ 239.211232][ T8870] ? __pfx___nla_validate_parse+0x10/0x10 [ 239.211319][ T8870] ? rcu_is_watching+0x15/0xb0 [ 239.211356][ T8870] __nla_parse+0x40/0x60 [ 239.211398][ T8870] genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 239.211449][ T8870] genl_family_rcv_msg_doit+0xb8/0x300 [ 239.211496][ T8870] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 239.211529][ T8870] ? __pfx___mutex_lock+0x10/0x10 [ 239.211562][ T8870] ? __pfx_genl_get_cmd+0x10/0x10 [ 239.211588][ T8870] ? __pfx_mptcp_pm_nl_get_addr_doit+0x10/0x10 [ 239.211621][ T8870] ? __pfx_mptcp_pm_nl_get_addr_dumpit+0x10/0x10 [ 239.211689][ T8870] genl_rcv_msg+0x60e/0x790 [ 239.211737][ T8870] ? __pfx_genl_rcv_msg+0x10/0x10 [ 239.211765][ T8870] ? __pfx_mptcp_pm_nl_get_addr_doit+0x10/0x10 [ 239.211837][ T8870] netlink_rcv_skb+0x208/0x470 [ 239.211865][ T8870] ? __pfx_genl_rcv_msg+0x10/0x10 [ 239.211899][ T8870] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 239.211974][ T8870] ? down_read+0x274/0x2e0 [ 239.212002][ T8870] ? genl_rcv+0xd/0x40 [ 239.212036][ T8870] genl_rcv+0x28/0x40 [ 239.212064][ T8870] netlink_unicast+0x82f/0x9e0 [ 239.212121][ T8870] ? __pfx_netlink_unicast+0x10/0x10 [ 239.212162][ T8870] ? netlink_sendmsg+0x642/0xb30 [ 239.212181][ T8870] ? skb_put+0x11b/0x210 [ 239.212225][ T8870] netlink_sendmsg+0x805/0xb30 [ 239.212273][ T8870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.212307][ T8870] ? aa_sock_msg_perm+0xf1/0x1b0 [ 239.212336][ T8870] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 239.212366][ T8870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.212394][ T8870] __sock_sendmsg+0x21c/0x270 [ 239.212431][ T8870] ____sys_sendmsg+0x505/0x820 [ 239.212482][ T8870] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.212541][ T8870] ? import_iovec+0x74/0xa0 [ 239.212585][ T8870] ___sys_sendmsg+0x21f/0x2a0 [ 239.212628][ T8870] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.212716][ T8870] ? __fget_files+0x2a/0x420 [ 239.212769][ T8870] ? __fget_files+0x2a/0x420 [ 239.212788][ T8870] ? __fget_files+0x3a0/0x420 [ 239.212836][ T8870] __x64_sys_sendmsg+0x19b/0x260 [ 239.212879][ T8870] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 239.212946][ T8870] ? __pfx_ksys_write+0x10/0x10 [ 239.212985][ T8870] ? do_syscall_64+0xbe/0xf80 [ 239.213025][ T8870] do_syscall_64+0xfa/0xf80 [ 239.213058][ T8870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.213080][ T8870] ? clear_bhb_loop+0x60/0xb0 [ 239.213112][ T8870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.213133][ T8870] RIP: 0033:0x7f552b18f749 [ 239.213154][ T8870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.213171][ T8870] RSP: 002b:00007f552bfc4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.213192][ T8870] RAX: ffffffffffffffda RBX: 00007f552b3e5fa0 RCX: 00007f552b18f749 [ 239.213207][ T8870] RDX: 0000000000008010 RSI: 0000200000000000 RDI: 0000000000000005 [ 239.213220][ T8870] RBP: 00007f552bfc4090 R08: 0000000000000000 R09: 0000000000000000 [ 239.213233][ T8870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.213245][ T8870] R13: 00007f552b3e6038 R14: 00007f552b3e5fa0 R15: 00007fff6b420198 [ 239.213306][ T8870] [ 240.783949][ T8870] CPU: 1 UID: 0 PID: 8870 Comm: syz.4.934 Not tainted syzkaller #0 PREEMPT(full) [ 240.783969][ T8870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 240.783978][ T8870] Call Trace: [ 240.783987][ T8870] [ 240.783997][ T8870] dump_stack_lvl+0x189/0x250 [ 240.784020][ T8870] ? __pfx____ratelimit+0x10/0x10 [ 240.784042][ T8870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.784062][ T8870] ? __pfx__printk+0x10/0x10 [ 240.784086][ T8870] ? perf_swevent_event+0x113/0x5e0 [ 240.784125][ T8870] should_fail_ex+0x414/0x560 [ 240.784155][ T8870] strncpy_from_user+0x36/0x2c0 [ 240.784181][ T8870] strncpy_from_user_nofault+0x72/0x150 [ 240.784214][ T8870] bpf_probe_read_compat_str+0xe2/0x180 [ 240.784248][ T8870] bpf_prog_573c5a647519ba93+0x3e/0x44 [ 240.784267][ T8870] bpf_trace_run4+0x28e/0x4b0 [ 240.784290][ T8870] ? bpf_trace_run4+0x19c/0x4b0 [ 240.784312][ T8870] ? __pfx_bpf_trace_run4+0x10/0x10 [ 240.784332][ T8870] ? perf_trace_run_bpf_submit+0xee/0x170 [ 240.784365][ T8870] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 240.784398][ T8870] __bpf_trace_sched_switch+0x17a/0x1e0 [ 240.784427][ T8870] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 240.784453][ T8870] ? psi_group_change+0xab8/0x1050 [ 240.784472][ T8870] ? __schedule+0x24c4/0x5000 [ 240.784508][ T8870] ? __schedule+0x24c4/0x5000 [ 240.784536][ T8870] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 240.784556][ T8870] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 240.784580][ T8870] __traceiter_sched_switch+0x9d/0xd0 [ 240.784612][ T8870] __schedule+0x256b/0x5000 [ 240.784655][ T8870] ? _prb_read_valid+0xa07/0xa90 [ 240.784696][ T8870] ? __pfx___schedule+0x10/0x10 [ 240.784722][ T8870] ? __pfx__prb_read_valid+0x10/0x10 [ 240.784744][ T8870] ? __console_unlock+0x14c/0x1a0 [ 240.784765][ T8870] ? __pfx___console_unlock+0x10/0x10 [ 240.784792][ T8870] ? preempt_schedule+0xae/0xc0 [ 240.784816][ T8870] preempt_schedule_common+0x83/0xd0 [ 240.784839][ T8870] preempt_schedule+0xae/0xc0 [ 240.784872][ T8870] ? __pfx_preempt_schedule+0x10/0x10 [ 240.784889][ T8870] ? console_unlock+0x13a/0x190 [ 240.784907][ T8870] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 240.784930][ T8870] ? __pfx_console_unlock+0x10/0x10 [ 240.784953][ T8870] preempt_schedule_thunk+0x16/0x30 [ 240.784979][ T8870] ? vprintk_emit+0x536/0x5f0 [ 240.785002][ T8870] vprintk_emit+0x53b/0x5f0 [ 240.785026][ T8870] ? __pfx_vprintk_emit+0x10/0x10 [ 240.785043][ T8870] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 240.785063][ T8870] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 240.785111][ T8870] _printk+0xcf/0x120 [ 240.785132][ T8870] ? __pfx____ratelimit+0x10/0x10 [ 240.785157][ T8870] ? __pfx__printk+0x10/0x10 [ 240.785185][ T8870] ? kasan_save_track+0x4f/0x80 [ 240.785218][ T8870] __nla_validate_parse+0x2563/0x2d40 [ 240.785238][ T8870] ? ___sys_sendmsg+0x21f/0x2a0 [ 240.785260][ T8870] ? __x64_sys_sendmsg+0x19b/0x260 [ 240.785313][ T8870] ? __pfx___nla_validate_parse+0x10/0x10 [ 240.785372][ T8870] ? rcu_is_watching+0x15/0xb0 [ 240.785397][ T8870] __nla_parse+0x40/0x60 [ 240.785426][ T8870] genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 240.785462][ T8870] genl_family_rcv_msg_doit+0xb8/0x300 [ 240.785494][ T8870] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 240.785521][ T8870] ? __pfx___mutex_lock+0x10/0x10 [ 240.785544][ T8870] ? __pfx_genl_get_cmd+0x10/0x10 [ 240.785562][ T8870] ? __pfx_mptcp_pm_nl_get_addr_doit+0x10/0x10 [ 240.785586][ T8870] ? __pfx_mptcp_pm_nl_get_addr_dumpit+0x10/0x10 [ 240.785633][ T8870] genl_rcv_msg+0x60e/0x790 [ 240.785666][ T8870] ? __pfx_genl_rcv_msg+0x10/0x10 [ 240.785686][ T8870] ? __pfx_mptcp_pm_nl_get_addr_doit+0x10/0x10 [ 240.785735][ T8870] netlink_rcv_skb+0x208/0x470 [ 240.785754][ T8870] ? __pfx_genl_rcv_msg+0x10/0x10 [ 240.785778][ T8870] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 240.785824][ T8870] ? down_read+0x274/0x2e0 [ 240.785844][ T8870] ? genl_rcv+0xd/0x40 [ 240.785868][ T8870] genl_rcv+0x28/0x40 [ 240.785886][ T8870] netlink_unicast+0x82f/0x9e0 [ 240.785926][ T8870] ? __pfx_netlink_unicast+0x10/0x10 [ 240.785954][ T8870] ? netlink_sendmsg+0x642/0xb30 [ 240.785968][ T8870] ? skb_put+0x11b/0x210 [ 240.785998][ T8870] netlink_sendmsg+0x805/0xb30 [ 240.786031][ T8870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.786053][ T8870] ? aa_sock_msg_perm+0xf1/0x1b0 [ 240.786074][ T8870] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 240.786095][ T8870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.786113][ T8870] __sock_sendmsg+0x21c/0x270 [ 240.786139][ T8870] ____sys_sendmsg+0x505/0x820 [ 240.786174][ T8870] ? __pfx_____sys_sendmsg+0x10/0x10 [ 240.786215][ T8870] ? import_iovec+0x74/0xa0 [ 240.786245][ T8870] ___sys_sendmsg+0x21f/0x2a0 [ 240.786275][ T8870] ? __pfx____sys_sendmsg+0x10/0x10 [ 240.786336][ T8870] ? __fget_files+0x2a/0x420 [ 240.786371][ T8870] ? __fget_files+0x2a/0x420 [ 240.786384][ T8870] ? __fget_files+0x3a0/0x420 [ 240.786417][ T8870] __x64_sys_sendmsg+0x19b/0x260 [ 240.786447][ T8870] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 240.786489][ T8870] ? __pfx_ksys_write+0x10/0x10 [ 240.786521][ T8870] ? do_syscall_64+0xbe/0xf80 [ 240.786549][ T8870] do_syscall_64+0xfa/0xf80 [ 240.786572][ T8870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.786587][ T8870] ? clear_bhb_loop+0x60/0xb0 [ 240.786610][ T8870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.786624][ T8870] RIP: 0033:0x7f552b18f749 [ 240.786640][ T8870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.786653][ T8870] RSP: 002b:00007f552bfc4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.786668][ T8870] RAX: ffffffffffffffda RBX: 00007f552b3e5fa0 RCX: 00007f552b18f749 [ 240.786679][ T8870] RDX: 0000000000008010 RSI: 0000200000000000 RDI: 0000000000000005 [ 240.786689][ T8870] RBP: 00007f552bfc4090 R08: 0000000000000000 R09: 0000000000000000 [ 240.786698][ T8870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.786707][ T8870] R13: 00007f552b3e6038 R14: 00007f552b3e5fa0 R15: 00007fff6b420198 [ 240.786748][ T8870] [ 241.371314][ T8870] netlink: 'syz.4.934': attribute type 2 has an invalid length. [ 241.417713][ T8870] netlink: 134 bytes leftover after parsing attributes in process `syz.4.934'.