last executing test programs: 33m2.211983316s ago: executing program 32 (id=35): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}]}], {0x14}}, 0x90}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000090a010400000000000000000a0000050900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3000118008000100636d70002400028008000140000000151000038006000200cda5e7ddf5000000080002"], 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 32m32.049138284s ago: executing program 33 (id=435): bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x6, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000088000000240000007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, &(0x7f0000000000)=""/20, &(0x7f0000000600), &(0x7f0000000380), 0x3, r0}, 0x38) 32m20.27308641s ago: executing program 34 (id=403): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff3c, 0x0}, 0xe07e872420dfefca) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 31m29.51736803s ago: executing program 35 (id=916): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x89ec, 0xfffffffffffffffb}, 0x10fc1d, 0x3, 0x4, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100ff12142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) 31m20.478915793s ago: executing program 36 (id=981): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0x1ff}, 0x81c2, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x4000, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848370000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) 29m57.14146334s ago: executing program 37 (id=1850): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r0, &(0x7f0000000a80), 0x0}, 0x20) 29m53.39178658s ago: executing program 38 (id=1883): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0xe, 0x7ffffd, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a68000000060a010400000000000000000a0000010900010073797a31000000003c000480380001800b00010064796e736574000028000280080004400000000008000340000000000900010073797a300000000008000940000000010900020073797a32"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 29m16.219395627s ago: executing program 39 (id=2001): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xa, 0x1, 0x0, 0x3, 0x0, 0xfffffffffa, 0x1218, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x8886, 0x2, 0xfffffffc, 0x6, 0x70ed, 0x5, 0x806, 0x0, 0xffffffff, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x23, &(0x7f0000000000)=r3, 0x8) 28m43.974316457s ago: executing program 40 (id=2325): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={&(0x7f0000000600), 0x8}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2405, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0xd) 28m40.267154585s ago: executing program 41 (id=2345): r0 = socket(0x10, 0x80002, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f6, &(0x7f0000000900)={'tunl0\x00', @random="0000230c1100"}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7fff, 0x0, 0xe4ffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}}, 0x0) 28m15.783237913s ago: executing program 42 (id=2480): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtclass={0x38, 0x28, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0xfff2}, {0xffe0, 0x10}, {0xffff, 0x4}}, [@tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x9, 0x4}}]}, 0x38}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 27m56.817540849s ago: executing program 43 (id=2601): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0xc}, 0x114101, 0x4, 0x9, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) 26m30.645571775s ago: executing program 44 (id=3022): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20004005) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0xd9b, 0x0, 0x1, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x0, 0x13, 0x0, 0x0) 25m39.12116086s ago: executing program 45 (id=3255): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x2, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0xffffffffffffffff, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x81, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0xf, 0x3, 0x2) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2, {0x7, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0x5}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) 24m18.027657004s ago: executing program 46 (id=3575): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, 0x0, 0x0) recvmsg$kcm(r1, 0x0, 0x2022) close(0x3) 23m26.571409333s ago: executing program 47 (id=3798): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x1, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x52}, 0x28) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x20080010) syz_open_procfs$namespace(r0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x9}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 23m19.298744918s ago: executing program 48 (id=3830): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000880) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x2, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "f1"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x800}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0xe, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xb28}}]}, 0x80}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xcc, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0000000200000006100000c200000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) 20m44.237205443s ago: executing program 49 (id=4625): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2e, 0x25dfdc01, {0x0, 0x0, 0x12, 0x0, {}, {0x0, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x7, [0x7, 0x2, 0x5, 0x10, 0xff, 0xe, 0x9, 0x8, 0xc, 0x5, 0xc, 0xd, 0x9, 0xa, 0x3, 0xc], 0x1, [0x1ff, 0xc, 0x102, 0x7, 0x688, 0x8001, 0x8, 0x5, 0x927, 0x2e, 0x4, 0x3, 0xfffc, 0x6, 0x6, 0xb], [0x3, 0x9, 0x3, 0x0, 0x3, 0x0, 0x614, 0x3, 0x3, 0xe3, 0x9, 0x7, 0x5, 0x1, 0x6, 0x6]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc004811}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x3518, 0x2, 0xffdffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0xa, 0x3, 0x73) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001880), 0x20}, 0x2102) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500211d", 0x2c}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) 19m50.118831404s ago: executing program 50 (id=4943): r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x40, 0xd, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x40}}, 0xc040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$netlink(r0, 0x0, 0x4001) 18m59.749029335s ago: executing program 1 (id=5396): perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x0, 0x4, 0x0, 0x1, 0xfc, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xb) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b90402000000008000000000150010001400259070f409000d2000000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee05e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5e08001b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6cce50dd6e4edef3d939acd92954b43370e", 0xc8}], 0x1}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0xffffff81, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000021c0)={0x2, 0x80, 0x49, 0x1, 0xfd, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x0, 0x6}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000100)={0x0, 0x80, 0x2, 0x6, 0x1, 0xec, 0x0, 0x87, 0x83000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x6, 0x37000}, 0x802, 0xff, 0x200, 0x8, 0xf291, 0x0, 0x5, 0x0, 0x26, 0x0, 0xb5}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x850) r4 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r2, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0xd0, 0x1c, 0x100, 0x70bd2d, 0x25dfdbfe, {0x10}, [@generic="d6d9a996e24482e6458a065e98a8cbfec10ca3beba", @generic="1a3119e01a58fd7723dbff493b331dc119c356a9ca3675b1f033f0ee16de08e731447ddf45e19a6f132882ddf59d5c2860ef6ac4e1f768d90c58db19857fcae00e2a9cd38a97497ad3ae633e958c60f26d571c25966ed171a977089f38f2fa59b775fe748d12ed85790e8aa84998ff69458bd31f4eaaf12639aec475c7373691e5692b8317f33fd73a2d36eb78d3c500f1c355c1a58dde253c7e2f4735", @typed={0x5, 0xa, 0x0, 0x0, @str='\x00'}]}, 0xd0}, 0x1, 0x0, 0x0, 0x48000}, 0x40) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x0, 0xb, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) 18m58.881934398s ago: executing program 1 (id=5403): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x2}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0xa) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x2000000830d}, 0x100, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000027c0000040042800c0001"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, 0x0}, 0x41) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x14) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8916, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) close(0xffffffffffffffff) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x20040081) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40051}, 0x20048010) socket$kcm(0x10, 0x2, 0x10) 18m54.000580212s ago: executing program 51 (id=5337): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x10}}, @cred={{0x1c}}], 0x30}, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES16=r2], 0x20) 18m43.73398191s ago: executing program 52 (id=5403): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x2}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0xa) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x2000000830d}, 0x100, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000027c0000040042800c0001"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, 0x0}, 0x41) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x14) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8916, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) close(0xffffffffffffffff) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x20040081) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40051}, 0x20048010) socket$kcm(0x10, 0x2, 0x10) 18m36.447311304s ago: executing program 9 (id=5495): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc010}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFULNL_MSG_CONFIG(r4, 0x0, 0x8048814) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x50) r6 = socket$inet(0x2, 0x3, 0x6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r6, 0x2}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r7}, 0x38) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(r4, 0x0, 0x20044091) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x138, 0x10, 0x31, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0x1b, 0x10}, {0xe, 0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x10) 18m36.223940849s ago: executing program 9 (id=5498): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @loopback=0x7f000300, @multicast2}}}], 0x20}, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x8, 0x0, 0x0, 0x480000000000000b, 0x9729, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x76, 0xffffffffffffff0c}, 0x13f9e, 0x0, 0x0, 0x0, 0x8002, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='#--*\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2000000008, 0x800}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000380)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, {0xa, 0x4e24, 0x76000000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x401}}}, 0x80, 0x0}, 0x8000) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, &(0x7f0000000700), 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000340)='.d\x00\x00\x00\x00j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x0f\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r!\xad-\x13\xb0 E\xaaC\xc388\x13\xc6H\x0f \x03\x86\xb5\xbfq\'\xab!\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdf\xde\x91\xfd\xf1B*j\n\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) socket$kcm(0x10, 0x2, 0x0) 18m35.863060033s ago: executing program 9 (id=5500): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0x0, 0x0}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2, 0x5, 0x0, 0x3, 0x7, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d6}]}, 0x38}, 0x1, 0x7}, 0x4040840) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x3a63d1be51fdea0c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000000480)={&(0x7f0000000000)={0xa, 0x4e22, 0x7fff, @local, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000290000003e"], 0x18}, 0x1) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002500010125bd7000fbff3e8c"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000001100010000000000000000000084000aa69134801ff719fcb8f682f91743899bfe416af0046a7548467b023591a0a3b0ffa7674883c30c2a6d3a48a8442187959abe33477c9bb94a0bbeeb1321cea6621408b1b6b7f6947e9ced8b302f1acf2a4eef11ea920e"], 0x28}}, 0x0) socket$kcm(0x21, 0x2, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newsa={0x144, 0x10, 0x713, 0x70bd27, 0x0, {{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x2f}, {@in=@multicast1, 0x1, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x8727e}, {0x0, 0xffffdffff7fffffb, 0x7, 0x5}, {0x1, 0x9, 0x8}, 0x80000000, 0x3506, 0xa, 0x4, 0x0, 0x21}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x80}}, @replay_thresh={0x8, 0xb, 0x8000}]}, 0x144}}, 0x0) 18m35.424458183s ago: executing program 9 (id=5503): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x2, 0x9, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef42b000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x2, 0x9, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000d5aa1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x68, 0x12, 0x0, 0x70bd26, 0x25dfdbfc, {0x8, 0x6, 0xa, 0x1, {0x4e24, 0x4e23, [0xfffffff8, 0x3, 0x6], [0x400, 0x9, 0x8, 0x9], 0x0, [0x1, 0x3]}, 0x4, 0xb}, [@INET_DIAG_REQ_BYTECODE={0x1b, 0x1, "f102dcf29effae15cd649e6a6437eb61afd9d8ae2b0e26"}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x72, &(0x7f0000000000)=""/114}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) perf_event_open(0x0, r6, 0x9, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10000040) 18m34.400083041s ago: executing program 5 (id=5506): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000940)=@deltclass={0x24, 0x29, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0x7}, {0x4, 0xf}, {0x2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x18561, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x23, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x24000000) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0xd, 0x8, 0x1, 0xfb, 0x0, 0x3c, 0x18104, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000004000000040000000102000000"], 0x48) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x76, 0x1ef7}, 0x111efa, 0x1, 0x0, 0x0, 0x6, 0x3ff, 0x4, 0x0, 0x0, 0x0, 0x20}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200"/32], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r4, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) 18m34.10011631s ago: executing program 9 (id=5508): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0xa206, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$kcm(0x2c, 0x3, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40009c5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xec, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x115b05, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$TUNGETDEVNETNS(r0, 0xff02, 0x0) 18m33.642421785s ago: executing program 5 (id=5510): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x111640, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000002c0), 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r2, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000000ec0)='ns/uts\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 18m33.463004112s ago: executing program 9 (id=5511): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2000001946}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000e40), 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x45, 0x9, 0x4, 0x25dfdbfd, {0x2}}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000880)={0x14, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x820}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x14) r3 = socket$kcm(0x2, 0x3, 0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x5}, 0x94) sendmsg$inet(r3, &(0x7f0000003a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r3, &(0x7f0000000480)={&(0x7f0000000340)=@l2tp={0x2, 0x0, @remote}, 0x80, 0x0}, 0x8400) sendmsg$inet(r3, 0x0, 0x0) recvmsg(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x40010040) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1bee, 0x2422, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x80000005}, 0x200, 0x1, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r6, &(0x7f0000002c80)={&(0x7f0000000180)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000002bc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @remote}}}], 0x20}, 0x20000004) 18m33.147188886s ago: executing program 5 (id=5512): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0xb7339c9072f1fbf9, 0x0) setsockopt$sock_attach_bpf(r1, 0x11, 0x68, &(0x7f0000000640), 0x4) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}]}]}], {0x14, 0x10}}, 0xe4}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000040), 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x39, 0x1, 0x7fffa, 0x4, {0x1}, [@typed={0x9, 0xec, 0x0, 0x0, @str='\x01A+/\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000100001001e000000000000010500000a3c0000001d0ac5f60b0b5d33d45a00000a0000070900020073797a31000000000900010073797a31"], 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) write$cgroup_netprio_ifpriomap(r5, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1000000830d}, 0x0, 0x2, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x20, 0x1406, 0x8, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x800) 18m32.417857236s ago: executing program 5 (id=5515): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x3, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x8020000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000480)={0x1, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x800c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r2 = syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x83}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x81ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}, 0x100) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r8], 0x12) 18m31.453684895s ago: executing program 5 (id=5520): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x100, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}]}], {0x14}}, 0x64}}, 0x20040004) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0xffffff81, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000021c0)={0x2, 0x80, 0x49, 0x1, 0xfd, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x0, 0x6}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000100)={0x0, 0x80, 0x2, 0x6, 0x1, 0xec, 0x0, 0x87, 0x83000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x6, 0x37000}, 0x802, 0xff, 0x200, 0x8, 0xf291, 0x0, 0x5, 0x0, 0x26, 0x0, 0xb5}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x850) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4, 0x1}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xb}}]}, 0x2c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r2, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0xb4, 0xa, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x30}, @NFTA_SET_EXPRESSIONS={0x74, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x2}, @NFTA_OSF_TTL={0x5, 0x2, 0xfa}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_NAT_TYPE={0x8}]}}}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20048044}, 0x8044) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) 18m30.606840299s ago: executing program 5 (id=5525): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x10}}, @cred={{0x1c}}], 0x30}, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES16=r2], 0x20) 18m17.96251464s ago: executing program 53 (id=5511): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2000001946}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000e40), 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x45, 0x9, 0x4, 0x25dfdbfd, {0x2}}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000880)={0x14, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x820}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x14) r3 = socket$kcm(0x2, 0x3, 0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x5}, 0x94) sendmsg$inet(r3, &(0x7f0000003a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r3, &(0x7f0000000480)={&(0x7f0000000340)=@l2tp={0x2, 0x0, @remote}, 0x80, 0x0}, 0x8400) sendmsg$inet(r3, 0x0, 0x0) recvmsg(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x40010040) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1bee, 0x2422, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x80000005}, 0x200, 0x1, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r6, &(0x7f0000002c80)={&(0x7f0000000180)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000002bc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @remote}}}], 0x20}, 0x20000004) 18m15.51967841s ago: executing program 54 (id=5525): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x10}}, @cred={{0x1c}}], 0x30}, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES16=r2], 0x20) 13m7.932026386s ago: executing program 3 (id=7751): socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x980) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0xfcc9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xa4}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r4) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000", @ANYRES32, @ANYBLOB="000000000000000000000014050d4b1087dcfeb4", @ANYRES32=0x0, @ANYBLOB='\x00'/19], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) recvmsg$can_raw(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x2) 13m7.157202807s ago: executing program 3 (id=7758): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000019c0)=ANY=[@ANYBLOB="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"], 0xd4c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x61]}}, 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x330}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x1}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='GPL\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_crypto(0x10, 0x3, 0x15) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x13, 0x0, 0x26) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}}, &(0x7f0000000200)=""/138, 0x3a, 0x8a, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 13m6.829226926s ago: executing program 3 (id=7763): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x4, 0x201, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x0, 0x80001945}, 0x0, 0x0, 0x3, 0x1, 0x7ff, 0x7fffffff, 0xffff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={0x0, 0x0, 0x10}, 0x18) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfd57) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000002e5f"], 0x0, 0x5e, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xff, '\x00', 0x0, r1, 0x1, 0x4}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8917, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="110000005200338f65277b9b108b4a"], 0xfe33) socket$rxrpc(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x80000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1a, 0x1a, 0xa, [@datasec={0x0, 0x1, 0x0, 0xf, 0x2, [{0x4, 0x6, 0x3}], "1760"}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000600)=""/4, 0x3e, 0x4, 0x1}, 0x28) socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 13m6.49103007s ago: executing program 3 (id=7766): socket$kcm(0x28, 0x7, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0042, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffc, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x3, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013a000000000095000000000000006dd49ce32174533466dea5d576455601e2fb1b5f31e4419a986250033107fbd0a73eb80c10a24968f8126dd26538975e8b2d8755d6dec5bb047740716c1457a324f349bc95093f3982cbb72b"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) socket$kcm(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3ffffe, 0x0, 0x41000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888808", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') 13m3.114788435s ago: executing program 3 (id=7774): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x100, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}]}], {0x14}}, 0x64}}, 0x20040004) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0xffffff81, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000021c0)={0x2, 0x80, 0x49, 0x1, 0xfd, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x0, 0x6}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000100)={0x0, 0x80, 0x2, 0x6, 0x1, 0xec, 0x0, 0x87, 0x83000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x6, 0x37000}, 0x802, 0xff, 0x200, 0x8, 0xf291, 0x0, 0x5, 0x0, 0x26, 0x0, 0xb5}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x850) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4, 0x1}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xb}}]}, 0x2c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r2, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0xb4, 0xa, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x30}, @NFTA_SET_EXPRESSIONS={0x74, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x2}, @NFTA_OSF_TTL={0x5, 0x2, 0xfa}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_NAT_TYPE={0x8}]}}}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20048044}, 0x8044) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) 13m2.465099399s ago: executing program 3 (id=7777): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x9, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x700, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$nl_generic(r1, 0x0, 0x240040d0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48084) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) close(0x3) 12m47.268340315s ago: executing program 55 (id=7777): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x9, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x700, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$nl_generic(r1, 0x0, 0x240040d0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48084) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) close(0x3) 11m8.695710625s ago: executing program 2 (id=8695): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x32efe636, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x1e, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x306) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) close(0x3) 11m6.857325496s ago: executing program 2 (id=8699): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x10}}, @cred={{0x1c}}], 0x30}, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11m6.127543229s ago: executing program 2 (id=8705): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb0042, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x20080, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2000000008, 0x800}, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$isdn_base(0x22, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91f, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x8000000000000000}, 0x18404, 0x7, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x922000000001, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) 11m5.630075058s ago: executing program 2 (id=8708): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb0042, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x20080, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2000000008, 0x800}, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$isdn_base(0x22, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91f, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x8000000000000000}, 0x18404, 0x7, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x922000000001, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000000000000010200000", @ANYRES32=r0, @ANYBLOB="da"], 0x50) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) 11m5.228276483s ago: executing program 2 (id=8712): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x24, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xe2}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1, 0x0, 0x1, [@generic]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$SIOCSIFHWADDR(r3, 0x4030582b, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x225451, 0x0) 11m4.692234263s ago: executing program 2 (id=8717): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x78}, 0x1, 0x7}, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = getpid() r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x5, 0x1946}, 0x10ab14, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xf}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) sendmsg(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[], 0x20}, 0x41) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="14000000040000000400000015000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c3b3121dda88ac1bba9627c56bf20f9aa37ab42ff31a7afa595e692b3a247807ab9bd24769e0fef7dcab9d1db8c3f52d50370535c21acc668ef1cedd1409cf54fc3df7085978fb3213d3fd43b020b0f5"], 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000200ff0000000003000000850000002c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x3, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='./\x00') syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r7 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r7, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) 10m49.526165548s ago: executing program 56 (id=8717): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x78}, 0x1, 0x7}, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = getpid() r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x5, 0x1946}, 0x10ab14, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xf}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) sendmsg(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[], 0x20}, 0x41) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="14000000040000000400000015000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c3b3121dda88ac1bba9627c56bf20f9aa37ab42ff31a7afa595e692b3a247807ab9bd24769e0fef7dcab9d1db8c3f52d50370535c21acc668ef1cedd1409cf54fc3df7085978fb3213d3fd43b020b0f5"], 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000200ff0000000003000000850000002c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x3, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='./\x00') syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r7 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r7, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) 40.103139468s ago: executing program 6 (id=12791): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000019c0)=ANY=[@ANYBLOB="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"], 0xd4c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r2 = socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x1}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='GPL\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x13, 0x0, 0x26) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}}, &(0x7f0000000200)=""/138, 0x3a, 0x8a, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 39.337353289s ago: executing program 6 (id=12796): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESDEC=r0], 0x0}, 0x94) r1 = getpid() sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x20, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TUPLE_REPLY={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4004f}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20044001) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x34024, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39a0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa8010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000200), 0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x9, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff4e53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a1574aefc97d8addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf73b18e509402a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f82"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x80) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106800000000006113740000000000bfa00000000000000700000008ffffffd50301000ee60060950000000000000069163a0000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x42680, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000001440)={'\x00', 0x4212}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x51}, 0x0, 0x0, 0x3f, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 38.544468304s ago: executing program 6 (id=12800): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x80}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="05000000010000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 37.221650422s ago: executing program 6 (id=12814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="70000000020605021c0000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3000000000240007800c000280080001401c0200000c0001800800014000001c02080006400000000005000500020000000500010006"], 0x70}}, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000100100000a0000009c00000000000000835826fbf64a13bcec1657e8df087701dfe4008362b3c577bf3496d064145b7e317cdaf941b302ae5866b1dee96c59945d04ba5db229a42ad580877ad65626ff95acd56d37a1596f9b8c50ff56db6f2c9b83a6e1c3343e44d39a5766ff2629d2689e5aa56dee96abca8562ded3611fe66a9af8eb3a2e81"], 0x18}, 0xfc40) r6 = socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="640000001900010029bd7000000000001d01090050000f8008", @ANYRES32=r7, @ANYBLOB="44004a803d0009800200024248a8f7206b6e614f02e4f7d522a77f5516f5a8b1c3af9926c1279876467428853542b7e5b0f3ad969001aa6c2ad86f123cf0b63abc"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x804) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000200003"], 0x33fe0) mount$bpf(0x0, 0x0, 0x0, 0x2085008, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02005e3b1da9e6cff400ec040100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r8}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 36.51968806s ago: executing program 6 (id=12817): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1d, 0x2, 0x6) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) close(0x3) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a050000000000000000000a0000040900010073797a310000000008000540000000020900020073797a320000000008000a40fffffffc14000980100002800c00018008000140000000061400000011000100003da5c7fc5b610c2a00000afd97bddfa2ad2b39e49043d62a961b2e2656206802eef65f0a067fdb67721b52d118d8db40f91d2802d133ca4644c5d1f02859b2f5e7fe21e4"], 0x78}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) 36.162847223s ago: executing program 6 (id=12823): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESDEC=r0], 0x0}, 0x94) r1 = getpid() sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x20, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TUPLE_REPLY={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4004f}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20044001) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x34024, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39a0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa8010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000200), 0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x9, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x80) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, 0x40, 0x107, 0x70bd2b, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @u32=0x4}]}]}, @typed={0x4, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106800000000006113740000000000bfa00000000000000700000008ffffffd50301000ee60060950000000000000069163a0000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) sendmsg$unix(0xffffffffffffffff, 0x0, 0xc03e0000) openat$tun(0xffffffffffffff9c, 0x0, 0x42680, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x51}, 0x0, 0x0, 0x3f, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x5, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) 20.906365572s ago: executing program 57 (id=12823): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESDEC=r0], 0x0}, 0x94) r1 = getpid() sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x20, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TUPLE_REPLY={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4004f}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20044001) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x34024, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39a0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa8010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000200), 0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x9, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x80) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, 0x40, 0x107, 0x70bd2b, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @u32=0x4}]}]}, @typed={0x4, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) sendmsg$unix(0xffffffffffffffff, 0x0, 0xc03e0000) openat$tun(0xffffffffffffff9c, 0x0, 0x42680, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x51}, 0x0, 0x0, 0x3f, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x5, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) 6.567601241s ago: executing program 8 (id=12956): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x24044004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000ec0), 0x4) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8880, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={0x0, 0x6}, 0x4008, 0x3, 0x0, 0x6, 0x7, 0x4, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = getpid() ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r2}) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000100)) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x10207, 0x0, 0x0, 0x9, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1000}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000900)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf15}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 6.393122498s ago: executing program 0 (id=12958): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="3eaa0000000000007110810000000000"], 0x0}, 0x94) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000001}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x3c, 0x300, 0x70bd2a, 0x25dfdbfc, {0xe}, [@typed={0x8, 0x54, 0x0, 0x0, @uid=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x20044084) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@jmp={0x5, 0x1, 0xb, 0x8, 0xb, 0x50, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000000), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "000000030000000000000500"}}}]}, 0x48}}, 0x4000010) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000008c0), 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, &(0x7f0000000040)=0x20000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619}, 0x38) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_ext={0x1c, 0x16, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x81}, {}, {}, [@map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x4, 0x98, &(0x7f00000004c0)=""/152, 0x40f00, 0x48, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000580)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x0, 0x9, 0x1}, 0x10, 0x1782, 0xffffffffffffffff, 0x2, &(0x7f0000000740)=[0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r9, 0x1], &(0x7f0000000780)=[{0x4, 0x1, 0xe, 0x9}, {0x0, 0x3, 0x7, 0x6}], 0x10, 0x4}, 0x94) sendmsg$kcm(r2, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x1) 6.256192303s ago: executing program 8 (id=12960): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="70000000020605021c0000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3000000000240007800c000280080001401c0200000c0001800800014000001c02080006400000000005000500020000000500010006"], 0x70}}, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000100100000a0000009c00000000000000835826fbf64a13bcec1657e8df087701dfe4008362b3c577bf3496d064145b7e317cdaf941b302ae5866b1dee96c59945d04ba5db229a42ad580877ad65626ff95acd56d37a1596f9b8c50ff56db6f2c9b83a6e1c3343e44d39a5766ff2629d2689e5aa56dee96abca8562ded3611fe66a9af8eb3a2e81"], 0x18}, 0xfc40) r5 = socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="640000001900010029bd7000000000001d01090050000f8008", @ANYRES32=r6, @ANYBLOB="44004a803d0009800200024248a8f7206b6e614f02e4f7d522a77f5516f5a8b1c3af9926c1279876467428853542b7e5b0f3ad969001aa6c2ad86f123cf0b63abc"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x804) openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000200003"], 0x33fe0) mount$bpf(0x0, 0x0, 0x0, 0x2085008, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02005e3b1da9e6cff400ec040100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r7}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 5.936801968s ago: executing program 0 (id=12962): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x400, @empty, 0x6}}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000050900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024075031b3408000140000000000900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c00048014000180090001006c6173740000000004000280240001800b00010072656a65637400001400028005000200c1000000080001"], 0xec}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x3, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0x8, 0x1, 'tcp\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x4048014) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x25, &(0x7f0000000000)=r5, 0x20000010) 5.492805903s ago: executing program 8 (id=12964): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRES32=r0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRESHEX=0x0], 0x20) 5.0390352s ago: executing program 8 (id=12965): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x400, @empty, 0x6}}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000050900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024075031b3408000140000000000900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c00048014000180090001006c6173740000000004000280240001800b00010072656a65637400001400028005000200c1000000080001"], 0xec}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x3, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0x8, 0x1, 'tcp\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x4048014) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x25, &(0x7f0000000000)=r5, 0x20000010) 4.592756257s ago: executing program 7 (id=12968): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000d80)=ANY=[@ANYBLOB="38000000130001002bbd7000f8dbdf2504004f8008003300e00000011a0025800c002e"], 0x38}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, 0x0, 0x9, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x80) socket(0x10, 0x3, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000e, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x11efa, 0x4, 0xfffd, 0x0, 0x2, 0xf7fff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) 4.126423786s ago: executing program 7 (id=12971): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="3eaa0000000000007110810000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) fstat(r0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000001}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x3c, 0x300, 0x70bd2a, 0x25dfdbfc, {0xe}, [@typed={0x8, 0x54, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x20044084) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@jmp={0x5, 0x1, 0xb, 0x8, 0xb, 0x50, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "000000030000000000000500"}}}]}, 0x48}}, 0x4000010) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000008c0), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, &(0x7f0000000040)=0x20000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619}, 0x38) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_ext={0x1c, 0x16, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x81}, {}, {}, [@map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x4, 0x98, &(0x7f00000004c0)=""/152, 0x40f00, 0x48, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000580)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x0, 0x9, 0x1}, 0x10, 0x1782, 0xffffffffffffffff, 0x2, &(0x7f0000000740)=[0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r8, 0x1], &(0x7f0000000780)=[{0x4, 0x1, 0xe, 0x9}, {0x0, 0x3, 0x7, 0x6}], 0x10, 0x4}, 0x94) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x1) 3.506705874s ago: executing program 7 (id=12974): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000d80)=ANY=[@ANYBLOB="38000000130001002bbd7000f8dbdf2504004f8008003300e00000011a0025800c002e"], 0x38}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, 0x0, 0x9, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x80) socket(0x10, 0x3, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000e, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x11efa, 0x4, 0xfffd, 0x0, 0x2, 0xf7fff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) 3.223499135s ago: executing program 4 (id=12975): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff, 0x3, 0x0, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0800000004000000040000000400000000000000", @ANYRES32, @ANYBLOB="002000000000000300000000000000007df0a3c23d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002180)={0x1c, 0x43, 0x107, 0x2, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x5, 0x1, 0x0, 0x1, [@generic='4']}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='pids.events\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000400), &(0x7f0000000440)=r4}, 0x20) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.142778028s ago: executing program 7 (id=12976): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = getpid() r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000071009154090893b3520ba54a07", @ANYBLOB="eef06930e987"], 0xfe33) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x2, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func], &(0x7f00000002c0)='GPL\x00', 0x0, 0x2c, &(0x7f0000000300)=""/44, 0x0, 0x7ee930c63edbc062, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x7, 0x7, 0x75f58e96}, 0x10, 0x7928, r6, 0x7, &(0x7f0000000500)=[0x1, r3, 0x1], &(0x7f0000000540)=[{0x3, 0x3, 0xe, 0x3}, {0x5, 0x1, 0x7, 0x3}, {0x1, 0x2, 0x5, 0x8}, {0x5, 0x4, 0xb, 0x4}, {0x4, 0x1, 0x7, 0xb}, {0x4, 0x2, 0xa, 0x7}, {0x0, 0x5, 0xe, 0x9}], 0x10, 0x6}, 0x94) fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) r9 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}}, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000250007002c"], 0x14}, 0x1, 0x0, 0x0, 0x24048851}, 0xc000) sendmsg$AUDIT_TTY_SET(r9, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x18, 0x3f9, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x2000c004) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x4) 3.099462282s ago: executing program 0 (id=12977): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00'}, 0x18) 2.715805249s ago: executing program 0 (id=12978): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x5}, 0x104101, 0x4, 0x9, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, 0x0, 0xc0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x2c, 0x3, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000002440)="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", 0xe00}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x14, 0x29, 0x32}}, @ip_pktinfo={{0x1c, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x58}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2.598770208s ago: executing program 4 (id=12979): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x24044004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000ec0), 0x4) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8880, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={0x0, 0x6}, 0x4008, 0x3, 0x0, 0x6, 0x7, 0x4, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = getpid() ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r2}) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000100)) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x10207, 0x0, 0x0, 0x9, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1000}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000900)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf15}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2.456538838s ago: executing program 1 (id=12892): r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) socket$kcm(0x18, 0x0, 0x2) (fail_nth: 5) 2.4112136s ago: executing program 8 (id=12980): socketpair(0x26, 0x6, 0x6, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000013c0)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x2, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x1beea, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x80000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x11d105, 0x4, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/28], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r9, &(0x7f0000000180), 0x40001) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40305829, &(0x7f0000000040)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x8004) 2.119317879s ago: executing program 0 (id=12981): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1a6}, 0x94) socket$kcm(0x11, 0x2, 0x0) r4 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x404000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r6}, &(0x7f0000000880), &(0x7f00000008c0)=r5}, 0x20) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x3c000001}, 0x20040) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="e80000003f00070100000000fddbdf25027c0000d10037801300030071747228"], 0xe8}, 0x1, 0x0, 0x0, 0xc880}, 0x0) 2.010273889s ago: executing program 1 (id=12982): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000019c0)=ANY=[@ANYBLOB="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"], 0xd4c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r2 = socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x60) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x1}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='GPL\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x13, 0x0, 0x26) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}}, &(0x7f0000000200)=""/138, 0x3a, 0x8a, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 1.878265228s ago: executing program 0 (id=12983): socketpair(0x26, 0x6, 0x6, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000013c0)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x2, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x1beea, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x80000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x11d105, 0x4, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/28], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r9, &(0x7f0000000180), 0x40001) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40305829, &(0x7f0000000040)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x8004) 1.74294481s ago: executing program 4 (id=12984): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa4}}, 0x0) 1.313745502s ago: executing program 7 (id=12985): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x2d, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x5, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, 0x0, 0x9a) 1.230445521s ago: executing program 4 (id=12986): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000d80)=ANY=[@ANYBLOB="38000000130001002bbd7000f8dbdf2504004f8008003300e00000011a0025800c002e"], 0x38}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, 0x0, 0x9, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x80) socket(0x10, 0x3, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000e, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x11efa, 0x4, 0xfffd, 0x0, 0x2, 0xf7fff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) 914.009279ms ago: executing program 1 (id=12987): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000680)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0xa2}]}}}], 0x18}, 0x60040080) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"/798], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff96}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x0) 508.637611ms ago: executing program 4 (id=12988): close(0xffffffffffffffff) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x9, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030", @ANYBLOB], 0xb8}}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x6, 0x0, 0x0, 0x0, 0x8800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005880)={0x28, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x7, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @pid}]}]}, 0x28}}, 0xc010) 419.995322ms ago: executing program 8 (id=12989): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac0040002020800020003", 0x2d}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5d, 0xd, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1000, 0x1941}, 0x0, 0x0, 0x0, 0x9, 0x3fe, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x640100fe}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$inet(0x2, 0x2, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x3, 0x7, 0x5, 0x0, 0x0, {0x6, 0x0, 0x7}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6a}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x90) ioctl$TUNSETDEBUG(r2, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x13) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'veth1_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}) 402.708193ms ago: executing program 1 (id=12990): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x6, 0x9}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40047459, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r2, 0x40047459, &(0x7f0000001200)) 200.76315ms ago: executing program 7 (id=12991): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x5}, 0x104101, 0x4, 0x9, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, 0x0, 0xc0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x2c, 0x3, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000002440)="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", 0xf00}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x14, 0x29, 0x32}}, @ip_pktinfo={{0x1c, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x58}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 0s ago: executing program 4 (id=12992): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x400, @empty, 0x6}}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000050900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024075031b3408000140000000000900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c00048014000180090001006c6173740000000004000280240001800b00010072656a65637400001400028005000200c1000000080001"], 0xec}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x3, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0x8, 0x1, 'tcp\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x4048014) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x25, &(0x7f0000000000)=r5, 0x20000010) kernel console output (not intermixed with test programs): 307][T11329] ? __alloc_skb+0x193/0x390 [ 1793.437335][T11329] ? __alloc_skb+0x1d7/0x390 [ 1793.437362][T11329] ? __local_bh_enable_ip+0xd0/0x130 [ 1793.437386][T11329] ? __alloc_skb+0x193/0x390 [ 1793.437416][T11329] __alloc_skb+0x1d7/0x390 [ 1793.437452][T11329] netlink_sendmsg+0x5d4/0xb40 [ 1793.437492][T11329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1793.437525][T11329] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1793.437565][T11329] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1793.437596][T11329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1793.437621][T11329] ____sys_sendmsg+0xa68/0xad0 [ 1793.437655][T11329] ? __might_fault+0xaf/0x130 [ 1793.437687][T11329] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1793.437732][T11329] ? import_iovec+0x73/0xa0 [ 1793.437761][T11329] ___sys_sendmsg+0x2a5/0x360 [ 1793.437792][T11329] ? __lock_acquire+0x6b5/0x2cf0 [ 1793.437831][T11329] ? __pfx____sys_sendmsg+0x10/0x10 [ 1793.437912][T11329] ? __fget_files+0x2a/0x420 [ 1793.437946][T11329] ? __fget_files+0x3a0/0x420 [ 1793.438011][T11329] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1793.438046][T11329] ? perf_trace_run_bpf_submit+0x100/0x170 [ 1793.438080][T11329] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1793.438129][T11329] ? __pfx_ksys_write+0x10/0x10 [ 1793.438170][T11329] do_syscall_64+0xe2/0xf80 [ 1793.438198][T11329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1793.438221][T11329] ? trace_irq_disable+0x37/0x100 [ 1793.438245][T11329] ? clear_bhb_loop+0x60/0xb0 [ 1793.438274][T11329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1793.438296][T11329] RIP: 0033:0x7fab8559aeb9 [ 1793.438318][T11329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1793.438338][T11329] RSP: 002b:00007fab863de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1793.438363][T11329] RAX: ffffffffffffffda RBX: 00007fab85815fa0 RCX: 00007fab8559aeb9 [ 1793.438380][T11329] RDX: 0000000000008004 RSI: 0000200000000580 RDI: 0000000000000003 [ 1793.438395][T11329] RBP: 00007fab863de090 R08: 0000000000000000 R09: 0000000000000000 [ 1793.438410][T11329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1793.438424][T11329] R13: 00007fab85816038 R14: 00007fab85815fa0 R15: 00007ffc9d1a0cb8 [ 1793.438465][T11329] [ 1793.832981][T11333] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10888'. [ 1795.248481][T11350] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10892'. [ 1795.428530][T11358] FAULT_INJECTION: forcing a failure. [ 1795.428530][T11358] name failslab, interval 1, probability 0, space 0, times 0 [ 1795.446849][T11358] CPU: 0 UID: 0 PID: 11358 Comm: syz.8.10897 Not tainted syzkaller #0 PREEMPT(full) [ 1795.446880][T11358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1795.446894][T11358] Call Trace: [ 1795.446903][T11358] [ 1795.446912][T11358] dump_stack_lvl+0xe8/0x150 [ 1795.446947][T11358] should_fail_ex+0x412/0x560 [ 1795.446984][T11358] should_failslab+0xa8/0x100 [ 1795.447015][T11358] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 1795.447039][T11358] ? __alloc_skb+0x193/0x390 [ 1795.447067][T11358] ? __alloc_skb+0x1d7/0x390 [ 1795.447092][T11358] ? __local_bh_enable_ip+0xd0/0x130 [ 1795.447115][T11358] ? __alloc_skb+0x193/0x390 [ 1795.447144][T11358] __alloc_skb+0x1d7/0x390 [ 1795.447179][T11358] netlink_sendmsg+0x5d4/0xb40 [ 1795.447218][T11358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1795.447249][T11358] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1795.447282][T11358] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1795.447312][T11358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1795.447337][T11358] ____sys_sendmsg+0xa68/0xad0 [ 1795.447370][T11358] ? __might_fault+0xaf/0x130 [ 1795.447419][T11358] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1795.447482][T11358] ? import_iovec+0x73/0xa0 [ 1795.447511][T11358] ___sys_sendmsg+0x2a5/0x360 [ 1795.447542][T11358] ? __lock_acquire+0x6b5/0x2cf0 [ 1795.447581][T11358] ? __pfx____sys_sendmsg+0x10/0x10 [ 1795.447663][T11358] ? __fget_files+0x2a/0x420 [ 1795.447692][T11358] ? __fget_files+0x3a0/0x420 [ 1795.447735][T11358] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1795.447773][T11358] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1795.447820][T11358] ? __pfx_ksys_write+0x10/0x10 [ 1795.447860][T11358] do_syscall_64+0xe2/0xf80 [ 1795.447886][T11358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1795.447907][T11358] ? trace_irq_disable+0x37/0x100 [ 1795.447930][T11358] ? clear_bhb_loop+0x60/0xb0 [ 1795.447959][T11358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1795.447981][T11358] RIP: 0033:0x7f5def39aeb9 [ 1795.448001][T11358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1795.448020][T11358] RSP: 002b:00007f5df02b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1795.448044][T11358] RAX: ffffffffffffffda RBX: 00007f5def615fa0 RCX: 00007f5def39aeb9 [ 1795.448061][T11358] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1795.448075][T11358] RBP: 00007f5df02b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1795.448088][T11358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1795.448101][T11358] R13: 00007f5def616038 R14: 00007f5def615fa0 R15: 00007ffedf4e3b98 [ 1795.448141][T11358] [ 1795.921037][T11364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10898'. [ 1796.250840][T11372] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10900'. [ 1796.799585][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1796.811062][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.002577][T11395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10907'. [ 1797.447862][T11403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10912'. [ 1797.462705][T11403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10912'. [ 1798.350562][T11432] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10921'. [ 1798.853993][T11437] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10923'. [ 1799.566760][T11456] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 1799.822691][T11460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10929'. [ 1802.713178][T11478] netlink: 104 bytes leftover after parsing attributes in process `syz.6.10935'. [ 1802.913600][T11479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10934'. [ 1803.948315][T11498] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 1804.070984][T11500] bpf: Bad value for 'uid' [ 1804.267139][T11510] FAULT_INJECTION: forcing a failure. [ 1804.267139][T11510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1804.295396][T11510] CPU: 0 UID: 0 PID: 11510 Comm: syz.0.10947 Not tainted syzkaller #0 PREEMPT(full) [ 1804.295429][T11510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1804.295444][T11510] Call Trace: [ 1804.295454][T11510] [ 1804.295465][T11510] dump_stack_lvl+0xe8/0x150 [ 1804.295501][T11510] should_fail_ex+0x412/0x560 [ 1804.295539][T11510] _copy_from_iter+0x1d3/0x1670 [ 1804.295581][T11510] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 1804.295611][T11510] ? __pfx__copy_from_iter+0x10/0x10 [ 1804.295647][T11510] ? __build_skb_around+0x22d/0x3c0 [ 1804.295680][T11510] ? __alloc_skb+0x193/0x390 [ 1804.295710][T11510] ? netlink_sendmsg+0x650/0xb40 [ 1804.295737][T11510] ? skb_put+0x11b/0x210 [ 1804.295783][T11510] netlink_sendmsg+0x6c0/0xb40 [ 1804.295820][T11510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1804.295857][T11510] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1804.295891][T11510] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1804.295921][T11510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1804.295946][T11510] ____sys_sendmsg+0xa68/0xad0 [ 1804.295981][T11510] ? __might_fault+0xaf/0x130 [ 1804.296010][T11510] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1804.296053][T11510] ? import_iovec+0x73/0xa0 [ 1804.296080][T11510] ___sys_sendmsg+0x2a5/0x360 [ 1804.296112][T11510] ? __lock_acquire+0x6b5/0x2cf0 [ 1804.296148][T11510] ? __pfx____sys_sendmsg+0x10/0x10 [ 1804.296220][T11510] ? __fget_files+0x2a/0x420 [ 1804.296247][T11510] ? __fget_files+0x3a0/0x420 [ 1804.296288][T11510] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1804.296324][T11510] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1804.296368][T11510] ? __pfx_ksys_write+0x10/0x10 [ 1804.296405][T11510] do_syscall_64+0xe2/0xf80 [ 1804.296436][T11510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1804.296457][T11510] ? trace_irq_disable+0x37/0x100 [ 1804.296479][T11510] ? clear_bhb_loop+0x60/0xb0 [ 1804.296506][T11510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1804.296527][T11510] RIP: 0033:0x7fab8559aeb9 [ 1804.296548][T11510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1804.296567][T11510] RSP: 002b:00007fab863de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1804.296591][T11510] RAX: ffffffffffffffda RBX: 00007fab85815fa0 RCX: 00007fab8559aeb9 [ 1804.296608][T11510] RDX: 0000000000044000 RSI: 0000200000000500 RDI: 0000000000000003 [ 1804.296622][T11510] RBP: 00007fab863de090 R08: 0000000000000000 R09: 0000000000000000 [ 1804.296636][T11510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1804.296649][T11510] R13: 00007fab85816038 R14: 00007fab85815fa0 R15: 00007ffc9d1a0cb8 [ 1804.296685][T11510] [ 1804.611783][T11517] netlink: 104 bytes leftover after parsing attributes in process `syz.6.10948'. [ 1804.736580][T11523] FAULT_INJECTION: forcing a failure. [ 1804.736580][T11523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1804.749941][T11523] CPU: 0 UID: 0 PID: 11523 Comm: syz.6.10952 Not tainted syzkaller #0 PREEMPT(full) [ 1804.749970][T11523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1804.749985][T11523] Call Trace: [ 1804.749994][T11523] [ 1804.750004][T11523] dump_stack_lvl+0xe8/0x150 [ 1804.750040][T11523] should_fail_ex+0x412/0x560 [ 1804.750079][T11523] _copy_from_iter+0x1d3/0x1670 [ 1804.750122][T11523] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 1804.750151][T11523] ? __pfx__copy_from_iter+0x10/0x10 [ 1804.750187][T11523] ? __build_skb_around+0x22d/0x3c0 [ 1804.750221][T11523] ? __alloc_skb+0x193/0x390 [ 1804.750251][T11523] ? netlink_sendmsg+0x650/0xb40 [ 1804.750276][T11523] ? skb_put+0x11b/0x210 [ 1804.750312][T11523] netlink_sendmsg+0x6c0/0xb40 [ 1804.750352][T11523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1804.750384][T11523] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1804.750418][T11523] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1804.750449][T11523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1804.750475][T11523] ____sys_sendmsg+0xa68/0xad0 [ 1804.750509][T11523] ? __pfx_perf_trace_lock+0x10/0x10 [ 1804.750540][T11523] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1804.750585][T11523] ? import_iovec+0x73/0xa0 [ 1804.750621][T11523] ___sys_sendmsg+0x2a5/0x360 [ 1804.750653][T11523] ? __lock_acquire+0x6b5/0x2cf0 [ 1804.750691][T11523] ? __pfx____sys_sendmsg+0x10/0x10 [ 1804.750751][T11523] ? __fget_files+0x2a/0x420 [ 1804.750797][T11523] ? __fget_files+0x2a/0x420 [ 1804.750825][T11523] ? __fget_files+0x3a0/0x420 [ 1804.750873][T11523] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1804.750910][T11523] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1804.750941][T11523] ? perf_trace_preemptirq_template+0xab/0x340 [ 1804.750988][T11523] ? __pfx_ksys_write+0x10/0x10 [ 1804.751025][T11523] do_syscall_64+0xe2/0xf80 [ 1804.751050][T11523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1804.751071][T11523] ? clear_bhb_loop+0x60/0xb0 [ 1804.751097][T11523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1804.751117][T11523] RIP: 0033:0x7f45fe59aeb9 [ 1804.751137][T11523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1804.751154][T11523] RSP: 002b:00007f45ff415028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1804.751177][T11523] RAX: ffffffffffffffda RBX: 00007f45fe815fa0 RCX: 00007f45fe59aeb9 [ 1804.751192][T11523] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1804.751206][T11523] RBP: 00007f45ff415090 R08: 0000000000000000 R09: 0000000000000000 [ 1804.751218][T11523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1804.751231][T11523] R13: 00007f45fe816038 R14: 00007f45fe815fa0 R15: 00007ffcd80e2668 [ 1804.751267][T11523] [ 1805.097719][T11515] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10949'. [ 1805.710764][T11531] netlink: 152 bytes leftover after parsing attributes in process `syz.6.10954'. [ 1806.022873][T11543] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10958'. [ 1806.226922][T11549] FAULT_INJECTION: forcing a failure. [ 1806.226922][T11549] name failslab, interval 1, probability 0, space 0, times 0 [ 1806.266068][T11549] CPU: 0 UID: 0 PID: 11549 Comm: syz.0.10960 Not tainted syzkaller #0 PREEMPT(full) [ 1806.266097][T11549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1806.266111][T11549] Call Trace: [ 1806.266118][T11549] [ 1806.266127][T11549] dump_stack_lvl+0xe8/0x150 [ 1806.266159][T11549] should_fail_ex+0x412/0x560 [ 1806.266193][T11549] should_failslab+0xa8/0x100 [ 1806.266221][T11549] kmem_cache_alloc_noprof+0x87/0x6e0 [ 1806.266241][T11549] ? __netlink_lookup+0xc6/0x8b0 [ 1806.266267][T11549] ? skb_clone+0x212/0x3a0 [ 1806.266289][T11549] skb_clone+0x212/0x3a0 [ 1806.266311][T11549] __netlink_deliver_tap+0x404/0x850 [ 1806.266346][T11549] ? netlink_deliver_tap+0x2e/0x1b0 [ 1806.266372][T11549] netlink_deliver_tap+0x19c/0x1b0 [ 1806.266396][T11549] netlink_unicast+0x7e3/0x9b0 [ 1806.266426][T11549] ? __pfx_netlink_unicast+0x10/0x10 [ 1806.266448][T11549] ? __alloc_skb+0x193/0x390 [ 1806.266475][T11549] ? netlink_sendmsg+0x650/0xb40 [ 1806.266496][T11549] ? skb_put+0x11b/0x210 [ 1806.266528][T11549] netlink_sendmsg+0x813/0xb40 [ 1806.266561][T11549] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1806.266590][T11549] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1806.266621][T11549] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1806.266654][T11549] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1806.266676][T11549] ____sys_sendmsg+0xa68/0xad0 [ 1806.266705][T11549] ? __might_fault+0xaf/0x130 [ 1806.266732][T11549] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1806.266771][T11549] ? import_iovec+0x73/0xa0 [ 1806.266797][T11549] ___sys_sendmsg+0x2a5/0x360 [ 1806.266825][T11549] ? __lock_acquire+0x6b5/0x2cf0 [ 1806.266858][T11549] ? __pfx____sys_sendmsg+0x10/0x10 [ 1806.266924][T11549] ? __fget_files+0x2a/0x420 [ 1806.266950][T11549] ? __fget_files+0x3a0/0x420 [ 1806.266986][T11549] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1806.267019][T11549] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1806.267059][T11549] ? __pfx_ksys_write+0x10/0x10 [ 1806.267092][T11549] do_syscall_64+0xe2/0xf80 [ 1806.267116][T11549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1806.267136][T11549] ? trace_irq_disable+0x37/0x100 [ 1806.267156][T11549] ? clear_bhb_loop+0x60/0xb0 [ 1806.267181][T11549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1806.267200][T11549] RIP: 0033:0x7fab8559aeb9 [ 1806.267218][T11549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1806.267235][T11549] RSP: 002b:00007fab863de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1806.267257][T11549] RAX: ffffffffffffffda RBX: 00007fab85815fa0 RCX: 00007fab8559aeb9 [ 1806.267272][T11549] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1806.267285][T11549] RBP: 00007fab863de090 R08: 0000000000000000 R09: 0000000000000000 [ 1806.267297][T11549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1806.267309][T11549] R13: 00007fab85816038 R14: 00007fab85815fa0 R15: 00007ffc9d1a0cb8 [ 1806.267341][T11549] [ 1806.609896][T11552] netlink: 104 bytes leftover after parsing attributes in process `syz.7.10962'. [ 1806.694646][T11555] netlink: 360 bytes leftover after parsing attributes in process `syz.0.10964'. [ 1807.266742][T11572] bpf: Bad value for 'mode' [ 1807.284371][T11572] netlink: 'syz.7.10970': attribute type 1 has an invalid length. [ 1807.301621][T11572] netlink: 'syz.7.10970': attribute type 3 has an invalid length. [ 1807.319867][T11572] netlink: 132 bytes leftover after parsing attributes in process `syz.7.10970'. [ 1807.726376][T11577] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 1807.774491][T11577] syzkaller0: tun_chr_ioctl cmd 1074025684 [ 1807.830889][T11577] syzkaller0: tun_chr_ioctl cmd 35108 [ 1807.994645][T11586] netlink: 'syz.8.10973': attribute type 16 has an invalid length. [ 1808.061896][T11586] netlink: 'syz.8.10973': attribute type 17 has an invalid length. [ 1808.251768][T11594] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10976'. [ 1808.986173][T11605] netlink: 'syz.7.10981': attribute type 138 has an invalid length. [ 1809.005035][T11611] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10984'. [ 1809.030730][T11605] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10981'. [ 1809.047065][T11605] openvswitch: netlink: Duplicate key (type 6). [ 1809.643607][T11623] __nla_validate_parse: 3 callbacks suppressed [ 1809.643632][T11623] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10986'. [ 1809.694786][T11625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10986'. [ 1809.838348][T11625] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10986'. [ 1809.857944][T11625] nbd: must specify an index to disconnect [ 1810.304130][T11641] FAULT_INJECTION: forcing a failure. [ 1810.304130][T11641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1810.319374][T11641] CPU: 0 UID: 0 PID: 11641 Comm: syz.4.10990 Not tainted syzkaller #0 PREEMPT(full) [ 1810.319412][T11641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1810.319426][T11641] Call Trace: [ 1810.319434][T11641] [ 1810.319444][T11641] dump_stack_lvl+0xe8/0x150 [ 1810.319476][T11641] should_fail_ex+0x412/0x560 [ 1810.319511][T11641] _copy_from_iter+0x1d3/0x1670 [ 1810.319551][T11641] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 1810.319578][T11641] ? __pfx__copy_from_iter+0x10/0x10 [ 1810.319609][T11641] ? __build_skb_around+0x22d/0x3c0 [ 1810.319641][T11641] ? __alloc_skb+0x193/0x390 [ 1810.319669][T11641] ? netlink_sendmsg+0x650/0xb40 [ 1810.319694][T11641] ? skb_put+0x11b/0x210 [ 1810.319726][T11641] netlink_sendmsg+0x6c0/0xb40 [ 1810.319762][T11641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1810.319791][T11641] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1810.319823][T11641] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1810.319852][T11641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1810.319876][T11641] ____sys_sendmsg+0xa68/0xad0 [ 1810.319907][T11641] ? __might_fault+0xaf/0x130 [ 1810.319935][T11641] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1810.319977][T11641] ? import_iovec+0x73/0xa0 [ 1810.320002][T11641] ___sys_sendmsg+0x2a5/0x360 [ 1810.320032][T11641] ? __lock_acquire+0x6b5/0x2cf0 [ 1810.320068][T11641] ? __pfx____sys_sendmsg+0x10/0x10 [ 1810.320138][T11641] ? __fget_files+0x2a/0x420 [ 1810.320165][T11641] ? __fget_files+0x3a0/0x420 [ 1810.320204][T11641] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1810.320238][T11641] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1810.320280][T11641] ? __pfx_ksys_write+0x10/0x10 [ 1810.320315][T11641] do_syscall_64+0xe2/0xf80 [ 1810.320340][T11641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1810.320361][T11641] ? trace_irq_disable+0x37/0x100 [ 1810.320389][T11641] ? clear_bhb_loop+0x60/0xb0 [ 1810.320417][T11641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1810.320438][T11641] RIP: 0033:0x7f12d979aeb9 [ 1810.320458][T11641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1810.320476][T11641] RSP: 002b:00007f12da66b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1810.320497][T11641] RAX: ffffffffffffffda RBX: 00007f12d9a16090 RCX: 00007f12d979aeb9 [ 1810.320512][T11641] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1810.320526][T11641] RBP: 00007f12da66b090 R08: 0000000000000000 R09: 0000000000000000 [ 1810.320538][T11641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1810.320549][T11641] R13: 00007f12d9a16128 R14: 00007f12d9a16090 R15: 00007ffca1270d68 [ 1810.320583][T11641] [ 1811.015882][T11653] netlink: 360 bytes leftover after parsing attributes in process `syz.0.10992'. [ 1811.862894][T11672] FAULT_INJECTION: forcing a failure. [ 1811.862894][T11672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1811.886048][T11672] CPU: 1 UID: 0 PID: 11672 Comm: syz.0.11000 Not tainted syzkaller #0 PREEMPT(full) [ 1811.886078][T11672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1811.886093][T11672] Call Trace: [ 1811.886102][T11672] [ 1811.886111][T11672] dump_stack_lvl+0xe8/0x150 [ 1811.886146][T11672] should_fail_ex+0x412/0x560 [ 1811.886180][T11672] _copy_from_user+0x2d/0xb0 [ 1811.886204][T11672] __sys_bpf+0x229/0x950 [ 1811.886224][T11672] ? irqentry_enter+0xac/0x130 [ 1811.886250][T11672] ? __pfx___sys_bpf+0x10/0x10 [ 1811.886305][T11672] __x64_sys_bpf+0x7c/0x90 [ 1811.886339][T11672] do_syscall_64+0xe2/0xf80 [ 1811.886363][T11672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1811.886384][T11672] ? clear_bhb_loop+0x60/0xb0 [ 1811.886411][T11672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1811.886431][T11672] RIP: 0033:0x7fab8559aeb9 [ 1811.886451][T11672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1811.886471][T11672] RSP: 002b:00007fab863de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1811.886494][T11672] RAX: ffffffffffffffda RBX: 00007fab85815fa0 RCX: 00007fab8559aeb9 [ 1811.886509][T11672] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 0000000000000009 [ 1811.886522][T11672] RBP: 00007fab863de090 R08: 0000000000000000 R09: 0000000000000000 [ 1811.886536][T11672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1811.886549][T11672] R13: 00007fab85816038 R14: 00007fab85815fa0 R15: 00007ffc9d1a0cb8 [ 1811.886583][T11672] [ 1812.739831][T11705] netlink: 92 bytes leftover after parsing attributes in process `syz.4.11010'. [ 1812.797332][T11705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11010'. [ 1812.816900][T11705] netlink: 348 bytes leftover after parsing attributes in process `syz.4.11010'. [ 1812.832757][T11705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11010'. [ 1812.847968][T11705] netlink: 348 bytes leftover after parsing attributes in process `syz.4.11010'. [ 1812.888653][T11705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11010'. [ 1813.960683][T11731] FAULT_INJECTION: forcing a failure. [ 1813.960683][T11731] name failslab, interval 1, probability 0, space 0, times 0 [ 1814.031800][T11731] CPU: 1 UID: 0 PID: 11731 Comm: syz.6.11019 Not tainted syzkaller #0 PREEMPT(full) [ 1814.031832][T11731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1814.031847][T11731] Call Trace: [ 1814.031861][T11731] [ 1814.031874][T11731] dump_stack_lvl+0xe8/0x150 [ 1814.031924][T11731] should_fail_ex+0x412/0x560 [ 1814.031991][T11731] should_failslab+0xa8/0x100 [ 1814.032038][T11731] __kmalloc_noprof+0xde/0x7e0 [ 1814.032068][T11731] ? rcu_is_watching+0x15/0xb0 [ 1814.032089][T11731] ? security_sk_alloc+0x52/0x360 [ 1814.032148][T11731] security_sk_alloc+0x52/0x360 [ 1814.032196][T11731] sk_prot_alloc+0x101/0x210 [ 1814.032228][T11731] ? sk_alloc+0x27/0x390 [ 1814.032281][T11731] sk_alloc+0x3a/0x390 [ 1814.032343][T11731] __netlink_create+0x65/0x260 [ 1814.032400][T11731] netlink_create+0x3ca/0x590 [ 1814.032439][T11731] ? __pfx_nfnetlink_unbind+0x10/0x10 [ 1814.032460][T11731] ? __pfx_nfnetlink_bind+0x10/0x10 [ 1814.032505][T11731] __sock_create+0x4b2/0x9d0 [ 1814.032591][T11731] __sys_socket+0xd6/0x1b0 [ 1814.032649][T11731] __x64_sys_socket+0x7a/0x90 [ 1814.032692][T11731] do_syscall_64+0xe2/0xf80 [ 1814.032723][T11731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1814.032756][T11731] ? clear_bhb_loop+0x60/0xb0 [ 1814.032803][T11731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1814.032827][T11731] RIP: 0033:0x7f45fe59aeb9 [ 1814.032854][T11731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1814.032874][T11731] RSP: 002b:00007f45ff415028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1814.032899][T11731] RAX: ffffffffffffffda RBX: 00007f45fe815fa0 RCX: 00007f45fe59aeb9 [ 1814.032916][T11731] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 1814.032929][T11731] RBP: 00007f45ff415090 R08: 0000000000000000 R09: 0000000000000000 [ 1814.032944][T11731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1814.032957][T11731] R13: 00007f45fe816038 R14: 00007f45fe815fa0 R15: 00007ffcd80e2668 [ 1814.033065][T11731] [ 1814.664408][T11735] __nla_validate_parse: 4 callbacks suppressed [ 1814.664436][T11735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11021'. [ 1814.894868][T11739] sit0: left promiscuous mode [ 1814.899650][T11739] sit0: entered allmulticast mode [ 1815.074968][T11739] sit0: entered promiscuous mode [ 1815.528943][T11742] netlink: 'syz.4.11023': attribute type 10 has an invalid length. [ 1815.565602][T11744] FAULT_INJECTION: forcing a failure. [ 1815.565602][T11744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1815.650008][T11744] CPU: 0 UID: 0 PID: 11744 Comm: syz.6.11024 Not tainted syzkaller #0 PREEMPT(full) [ 1815.650040][T11744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1815.650066][T11744] Call Trace: [ 1815.650079][T11744] [ 1815.650093][T11744] dump_stack_lvl+0xe8/0x150 [ 1815.650140][T11744] should_fail_ex+0x412/0x560 [ 1815.650204][T11744] _copy_from_iter+0x1d3/0x1670 [ 1815.650276][T11744] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 1815.650326][T11744] ? __pfx__copy_from_iter+0x10/0x10 [ 1815.650372][T11744] ? __build_skb_around+0x22d/0x3c0 [ 1815.650420][T11744] ? __alloc_skb+0x193/0x390 [ 1815.650457][T11744] ? netlink_sendmsg+0x650/0xb40 [ 1815.650482][T11744] ? skb_put+0x11b/0x210 [ 1815.650537][T11744] netlink_sendmsg+0x6c0/0xb40 [ 1815.650628][T11744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1815.650679][T11744] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1815.650744][T11744] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1815.650787][T11744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1815.650817][T11744] ____sys_sendmsg+0xa68/0xad0 [ 1815.650857][T11744] ? __pfx_perf_trace_lock+0x10/0x10 [ 1815.650939][T11744] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1815.651025][T11744] ? import_iovec+0x73/0xa0 [ 1815.651077][T11744] ___sys_sendmsg+0x2a5/0x360 [ 1815.651167][T11744] ? __pfx____sys_sendmsg+0x10/0x10 [ 1815.651317][T11744] ? __fget_files+0x2a/0x420 [ 1815.651416][T11744] ? __fget_files+0x2a/0x420 [ 1815.651448][T11744] ? __fget_files+0x3a0/0x420 [ 1815.651544][T11744] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1815.651602][T11744] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1815.651690][T11744] ? __pfx_ksys_write+0x10/0x10 [ 1815.651784][T11744] do_syscall_64+0xe2/0xf80 [ 1815.651816][T11744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.651838][T11744] ? trace_irq_disable+0x37/0x100 [ 1815.651869][T11744] ? clear_bhb_loop+0x60/0xb0 [ 1815.651917][T11744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.651941][T11744] RIP: 0033:0x7f45fe59aeb9 [ 1815.651968][T11744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1815.651988][T11744] RSP: 002b:00007f45ff415028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1815.652011][T11744] RAX: ffffffffffffffda RBX: 00007f45fe815fa0 RCX: 00007f45fe59aeb9 [ 1815.652028][T11744] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1815.652042][T11744] RBP: 00007f45ff415090 R08: 0000000000000000 R09: 0000000000000000 [ 1815.652057][T11744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1815.652070][T11744] R13: 00007f45fe816038 R14: 00007f45fe815fa0 R15: 00007ffcd80e2668 [ 1815.652176][T11744] [ 1816.611132][T11753] FAULT_INJECTION: forcing a failure. [ 1816.611132][T11753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1816.658347][T11753] CPU: 0 UID: 0 PID: 11753 Comm: syz.7.11027 Not tainted syzkaller #0 PREEMPT(full) [ 1816.658379][T11753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1816.658393][T11753] Call Trace: [ 1816.658406][T11753] [ 1816.658418][T11753] dump_stack_lvl+0xe8/0x150 [ 1816.658466][T11753] should_fail_ex+0x412/0x560 [ 1816.658532][T11753] _copy_from_iter+0x1d3/0x1670 [ 1816.658606][T11753] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 1816.658655][T11753] ? __pfx__copy_from_iter+0x10/0x10 [ 1816.658702][T11753] ? __build_skb_around+0x22d/0x3c0 [ 1816.658750][T11753] ? __alloc_skb+0x193/0x390 [ 1816.658794][T11753] ? netlink_sendmsg+0x650/0xb40 [ 1816.658819][T11753] ? skb_put+0x11b/0x210 [ 1816.658877][T11753] netlink_sendmsg+0x6c0/0xb40 [ 1816.658963][T11753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1816.659015][T11753] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1816.659063][T11753] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1816.659106][T11753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1816.659135][T11753] ____sys_sendmsg+0xa68/0xad0 [ 1816.659175][T11753] ? __pfx_perf_trace_lock+0x10/0x10 [ 1816.659238][T11753] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1816.659326][T11753] ? import_iovec+0x73/0xa0 [ 1816.659377][T11753] ___sys_sendmsg+0x2a5/0x360 [ 1816.659448][T11753] ? __pfx____sys_sendmsg+0x10/0x10 [ 1816.659596][T11753] ? __fget_files+0x2a/0x420 [ 1816.659693][T11753] ? __fget_files+0x2a/0x420 [ 1816.659724][T11753] ? __fget_files+0x3a0/0x420 [ 1816.659818][T11753] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1816.659875][T11753] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1816.659963][T11753] ? __pfx_ksys_write+0x10/0x10 [ 1816.660053][T11753] do_syscall_64+0xe2/0xf80 [ 1816.660083][T11753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1816.660104][T11753] ? trace_irq_disable+0x37/0x100 [ 1816.660125][T11753] ? clear_bhb_loop+0x60/0xb0 [ 1816.660171][T11753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1816.660194][T11753] RIP: 0033:0x7fc14f99aeb9 [ 1816.660221][T11753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1816.660240][T11753] RSP: 002b:00007fc1507d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1816.660263][T11753] RAX: ffffffffffffffda RBX: 00007fc14fc15fa0 RCX: 00007fc14f99aeb9 [ 1816.660279][T11753] RDX: 0000000000008004 RSI: 0000200000000580 RDI: 0000000000000003 [ 1816.660292][T11753] RBP: 00007fc1507d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1816.660305][T11753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1816.660318][T11753] R13: 00007fc14fc16038 R14: 00007fc14fc15fa0 R15: 00007ffeaf4ef938 [ 1816.660415][T11753] [ 1818.007517][T11774] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 1818.106395][T11774] netlink: 'syz.7.11035': attribute type 21 has an invalid length. [ 1818.136674][T11774] netlink: 144 bytes leftover after parsing attributes in process `syz.7.11035'. [ 1822.142702][T11787] sit0: left promiscuous mode [ 1822.232970][T11793] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1822.263661][T11793] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1822.307443][T11793] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1822.865887][T11817] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11048'. [ 1823.042719][T11831] netlink: 220 bytes leftover after parsing attributes in process `syz.4.11053'. [ 1823.080950][T11831] netlink: 220 bytes leftover after parsing attributes in process `syz.4.11053'. [ 1823.177490][T11841] FAULT_INJECTION: forcing a failure. [ 1823.177490][T11841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1823.211537][T11841] CPU: 1 UID: 0 PID: 11841 Comm: syz.0.11055 Not tainted syzkaller #0 PREEMPT(full) [ 1823.211565][T11841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1823.211578][T11841] Call Trace: [ 1823.211586][T11841] [ 1823.211596][T11841] dump_stack_lvl+0xe8/0x150 [ 1823.211629][T11841] should_fail_ex+0x412/0x560 [ 1823.211663][T11841] _copy_to_user+0x31/0xb0 [ 1823.211688][T11841] simple_read_from_buffer+0xe1/0x170 [ 1823.211738][T11841] proc_fail_nth_read+0x1bb/0x230 [ 1823.211767][T11841] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1823.211794][T11841] ? rw_verify_area+0x2a6/0x4d0 [ 1823.211817][T11841] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1823.211842][T11841] vfs_read+0x20c/0xa70 [ 1823.211869][T11841] ? fdget_pos+0x246/0x320 [ 1823.211903][T11841] ? __pfx___mutex_lock+0x10/0x10 [ 1823.211941][T11841] ? __pfx_vfs_read+0x10/0x10 [ 1823.211965][T11841] ? __fget_files+0x2a/0x420 [ 1823.211999][T11841] ? __fget_files+0x3a0/0x420 [ 1823.212027][T11841] ? __fget_files+0x2a/0x420 [ 1823.212066][T11841] ksys_read+0x150/0x270 [ 1823.212091][T11841] ? __pfx_ksys_read+0x10/0x10 [ 1823.212126][T11841] do_syscall_64+0xe2/0xf80 [ 1823.212153][T11841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1823.212174][T11841] ? trace_irq_disable+0x37/0x100 [ 1823.212195][T11841] ? clear_bhb_loop+0x60/0xb0 [ 1823.212222][T11841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1823.212243][T11841] RIP: 0033:0x7fab8555b78e [ 1823.212264][T11841] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1823.212283][T11841] RSP: 002b:00007fab863bcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1823.212306][T11841] RAX: ffffffffffffffda RBX: 00007fab863bd6c0 RCX: 00007fab8555b78e [ 1823.212324][T11841] RDX: 000000000000000f RSI: 00007fab863bd0a0 RDI: 0000000000000018 [ 1823.212338][T11841] RBP: 00007fab863bd090 R08: 0000000000000000 R09: 0000000000000000 [ 1823.212352][T11841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1823.212365][T11841] R13: 00007fab85816128 R14: 00007fab85816090 R15: 00007ffc9d1a0cb8 [ 1823.212401][T11841] [ 1823.579134][T11847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11059'. [ 1823.822830][T11859] FAULT_INJECTION: forcing a failure. [ 1823.822830][T11859] name failslab, interval 1, probability 0, space 0, times 0 [ 1823.837849][T11859] CPU: 1 UID: 0 PID: 11859 Comm: syz.8.11064 Not tainted syzkaller #0 PREEMPT(full) [ 1823.837878][T11859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1823.837892][T11859] Call Trace: [ 1823.837901][T11859] [ 1823.837910][T11859] dump_stack_lvl+0xe8/0x150 [ 1823.837944][T11859] should_fail_ex+0x412/0x560 [ 1823.837979][T11859] should_failslab+0xa8/0x100 [ 1823.838020][T11859] __kvmalloc_node_noprof+0x166/0x8d0 [ 1823.838047][T11859] ? alloc_netdev_mqs+0xa6/0x11b0 [ 1823.838068][T11859] ? lockdep_rtnl_is_held+0x26/0x40 [ 1823.838091][T11859] alloc_netdev_mqs+0xa6/0x11b0 [ 1823.838116][T11859] ? __pfx_ip6gre_tunnel_setup+0x10/0x10 [ 1823.838152][T11859] ip6gre_tunnel_locate+0x23d/0x3f0 [ 1823.838185][T11859] ? __pfx_ip6gre_tunnel_locate+0x10/0x10 [ 1823.838211][T11859] ? ip6gre_tnl_parm_from_user+0x41/0x400 [ 1823.838242][T11859] ? ip6gre_tunnel_siocdevprivate+0x529/0x720 [ 1823.838277][T11859] ip6gre_tunnel_siocdevprivate+0x554/0x720 [ 1823.838315][T11859] ? __pfx_ip6gre_tunnel_siocdevprivate+0x10/0x10 [ 1823.838343][T11859] ? trace_contention_end+0x39/0x100 [ 1823.838388][T11859] ? full_name_hash+0x92/0xe0 [ 1823.838423][T11859] dev_ifsioc+0xba6/0x1280 [ 1823.838459][T11859] dev_ioctl+0x84c/0x1150 [ 1823.838489][T11859] sock_ioctl+0x75f/0x7f0 [ 1823.838513][T11859] ? __pfx_sock_ioctl+0x10/0x10 [ 1823.838536][T11859] ? __fget_files+0x3a0/0x420 [ 1823.838562][T11859] ? __fget_files+0x2a/0x420 [ 1823.838591][T11859] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1823.838620][T11859] ? __pfx_sock_ioctl+0x10/0x10 [ 1823.838659][T11859] __se_sys_ioctl+0xfc/0x170 [ 1823.838683][T11859] do_syscall_64+0xe2/0xf80 [ 1823.838708][T11859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1823.838740][T11859] ? trace_irq_disable+0x37/0x100 [ 1823.838759][T11859] ? clear_bhb_loop+0x60/0xb0 [ 1823.838782][T11859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1823.838801][T11859] RIP: 0033:0x7f5def39aeb9 [ 1823.838817][T11859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1823.838834][T11859] RSP: 002b:00007f5df02b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1823.838855][T11859] RAX: ffffffffffffffda RBX: 00007f5def615fa0 RCX: 00007f5def39aeb9 [ 1823.838869][T11859] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 1823.838882][T11859] RBP: 00007f5df02b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1823.838894][T11859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1823.838906][T11859] R13: 00007f5def616038 R14: 00007f5def615fa0 R15: 00007ffedf4e3b98 [ 1823.838939][T11859] [ 1824.131019][T11863] FAULT_INJECTION: forcing a failure. [ 1824.131019][T11863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1824.171590][T11863] CPU: 0 UID: 0 PID: 11863 Comm: syz.4.11062 Not tainted syzkaller #0 PREEMPT(full) [ 1824.171619][T11863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1824.171633][T11863] Call Trace: [ 1824.171641][T11863] [ 1824.171651][T11863] dump_stack_lvl+0xe8/0x150 [ 1824.171683][T11863] should_fail_ex+0x412/0x560 [ 1824.171715][T11863] _copy_from_user+0x2d/0xb0 [ 1824.171738][T11863] ___sys_sendmsg+0x1c6/0x360 [ 1824.171767][T11863] ? __lock_acquire+0x6b5/0x2cf0 [ 1824.171800][T11863] ? __pfx____sys_sendmsg+0x10/0x10 [ 1824.171871][T11863] ? __fget_files+0x2a/0x420 [ 1824.171897][T11863] ? __fget_files+0x3a0/0x420 [ 1824.171934][T11863] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1824.171967][T11863] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1824.172007][T11863] ? __pfx_ksys_write+0x10/0x10 [ 1824.172040][T11863] do_syscall_64+0xe2/0xf80 [ 1824.172063][T11863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1824.172083][T11863] ? trace_irq_disable+0x37/0x100 [ 1824.172103][T11863] ? clear_bhb_loop+0x60/0xb0 [ 1824.172128][T11863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1824.172147][T11863] RIP: 0033:0x7f12d979aeb9 [ 1824.172166][T11863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1824.172184][T11863] RSP: 002b:00007f12da68c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1824.172205][T11863] RAX: ffffffffffffffda RBX: 00007f12d9a15fa0 RCX: 00007f12d979aeb9 [ 1824.172220][T11863] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1824.172232][T11863] RBP: 00007f12da68c090 R08: 0000000000000000 R09: 0000000000000000 [ 1824.172245][T11863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1824.172257][T11863] R13: 00007f12d9a16038 R14: 00007f12d9a15fa0 R15: 00007ffca1270d68 [ 1824.172289][T11863] [ 1824.458864][T11869] sit0: left promiscuous mode [ 1825.580960][T11888] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11072'. [ 1825.697220][T11896] netlink: 360 bytes leftover after parsing attributes in process `syz.4.11074'. [ 1825.767503][T11898] netlink: 196 bytes leftover after parsing attributes in process `syz.6.11075'. [ 1825.978983][T18922] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4 [ 1826.002711][T11898] syzkaller0: entered promiscuous mode [ 1826.017738][T11898] syzkaller0: entered allmulticast mode [ 1827.330326][T11934] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11086'. [ 1827.493202][T11936] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1827.885360][T11943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11089'. [ 1829.295612][T11947] FAULT_INJECTION: forcing a failure. [ 1829.295612][T11947] name failslab, interval 1, probability 0, space 0, times 0 [ 1829.338395][T11947] CPU: 1 UID: 0 PID: 11947 Comm: syz.0.11091 Not tainted syzkaller #0 PREEMPT(full) [ 1829.338424][T11947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1829.338438][T11947] Call Trace: [ 1829.338447][T11947] [ 1829.338457][T11947] dump_stack_lvl+0xe8/0x150 [ 1829.338492][T11947] should_fail_ex+0x412/0x560 [ 1829.338527][T11947] should_failslab+0xa8/0x100 [ 1829.338558][T11947] __kmalloc_cache_noprof+0x83/0x6e0 [ 1829.338585][T11947] ? sctp_association_new+0x89/0x25e0 [ 1829.338622][T11947] sctp_association_new+0x89/0x25e0 [ 1829.338661][T11947] ? sctp_do_bind+0x661/0x9d0 [ 1829.338704][T11947] sctp_connect_new_asoc+0x2e4/0x6b0 [ 1829.338738][T11947] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1829.338778][T11947] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 1829.338812][T11947] __sctp_connect+0x5cb/0xdc0 [ 1829.338878][T11947] ? __pfx___sctp_connect+0x10/0x10 [ 1829.338909][T11947] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1829.338938][T11947] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 1829.338965][T11947] sctp_setsockopt+0x708/0x12c0 [ 1829.338994][T11947] ? sock_common_setsockopt+0x36/0xc0 [ 1829.339019][T11947] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1829.339046][T11947] do_sock_setsockopt+0x17c/0x1b0 [ 1829.339083][T11947] __x64_sys_setsockopt+0x13d/0x1b0 [ 1829.339120][T11947] do_syscall_64+0xe2/0xf80 [ 1829.339144][T11947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1829.339165][T11947] ? clear_bhb_loop+0x60/0xb0 [ 1829.339192][T11947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1829.339212][T11947] RIP: 0033:0x7fab8559aeb9 [ 1829.339231][T11947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1829.339250][T11947] RSP: 002b:00007fab863de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1829.339273][T11947] RAX: ffffffffffffffda RBX: 00007fab85815fa0 RCX: 00007fab8559aeb9 [ 1829.339288][T11947] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000004 [ 1829.339301][T11947] RBP: 00007fab863de090 R08: 0000000000000010 R09: 0000000000000000 [ 1829.339314][T11947] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1829.339328][T11947] R13: 00007fab85816038 R14: 00007fab85815fa0 R15: 00007ffc9d1a0cb8 [ 1829.339364][T11947] [ 1830.293234][T11971] netlink: 104 bytes leftover after parsing attributes in process `syz.0.11100'. [ 1830.818177][T11979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11101'. [ 1830.983307][T11978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11102'. [ 1831.663069][T12000] bpf: Bad value for 'uid' [ 1831.694407][T12000] netlink: 360 bytes leftover after parsing attributes in process `syz.4.11110'. [ 1831.704821][T12003] netlink: 104 bytes leftover after parsing attributes in process `syz.0.11112'. [ 1832.115350][T12019] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11117'. [ 1832.685107][T12025] netlink: 188 bytes leftover after parsing attributes in process `syz.8.11119'. [ 1832.826590][T12035] FAULT_INJECTION: forcing a failure. [ 1832.826590][T12035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1832.877070][T12035] CPU: 0 UID: 0 PID: 12035 Comm: syz.6.11122 Not tainted syzkaller #0 PREEMPT(full) [ 1832.877101][T12035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1832.877121][T12035] Call Trace: [ 1832.877131][T12035] [ 1832.877141][T12035] dump_stack_lvl+0xe8/0x150 [ 1832.877176][T12035] should_fail_ex+0x412/0x560 [ 1832.877214][T12035] _copy_from_user+0x2d/0xb0 [ 1832.877239][T12035] kvmemdup_bpfptr_noprof+0x86/0xf0 [ 1832.877271][T12035] map_update_elem+0x5ae/0x9d0 [ 1832.877309][T12035] __sys_bpf+0x6fa/0x950 [ 1832.877336][T12035] ? __pfx___sys_bpf+0x10/0x10 [ 1832.877379][T12035] ? do_syscall_64+0x9f/0xf80 [ 1832.877407][T12035] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1832.877434][T12035] ? __pfx_ksys_write+0x10/0x10 [ 1832.877468][T12035] __x64_sys_bpf+0x7c/0x90 [ 1832.877504][T12035] do_syscall_64+0xe2/0xf80 [ 1832.877529][T12035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1832.877551][T12035] ? trace_irq_disable+0x37/0x100 [ 1832.877572][T12035] ? clear_bhb_loop+0x60/0xb0 [ 1832.877600][T12035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1832.877622][T12035] RIP: 0033:0x7f45fe59aeb9 [ 1832.877642][T12035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1832.877662][T12035] RSP: 002b:00007f45ff3f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1832.877692][T12035] RAX: ffffffffffffffda RBX: 00007f45fe816090 RCX: 00007f45fe59aeb9 [ 1832.877708][T12035] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 0000000000000002 [ 1832.877722][T12035] RBP: 00007f45ff3f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1832.877736][T12035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1832.877749][T12035] R13: 00007f45fe816128 R14: 00007f45fe816090 R15: 00007ffcd80e2668 [ 1832.877788][T12035] [ 1833.294614][T12040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11124'. [ 1833.364841][T12041] sock: sock_set_timeout: `syz.4.11124' (pid 12041) tries to set negative timeout [ 1833.406089][T12040] netlink: 'syz.4.11124': attribute type 21 has an invalid length. [ 1833.460808][T12041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11124'. [ 1833.900904][T12058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11129'. [ 1834.403854][T12062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11130'. [ 1834.542891][T12072] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 1834.606032][T12075] bpf: Bad value for 'mode' [ 1834.622527][T12075] netlink: 'syz.6.11136': attribute type 1 has an invalid length. [ 1834.630382][T12075] netlink: 'syz.6.11136': attribute type 3 has an invalid length. [ 1834.661686][T12075] netlink: 132 bytes leftover after parsing attributes in process `syz.6.11136'. [ 1834.828478][T12080] netlink: 836 bytes leftover after parsing attributes in process `syz.4.11137'. [ 1834.946420][T12080] netlink: 92 bytes leftover after parsing attributes in process `syz.4.11137'. [ 1834.968576][T12084] netlink: 132 bytes leftover after parsing attributes in process `syz.8.11139'. [ 1835.221178][T12089] netlink: 'syz.6.11141': attribute type 2 has an invalid length. [ 1835.725029][T12103] FAULT_INJECTION: forcing a failure. [ 1835.725029][T12103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1835.790017][T12103] CPU: 0 UID: 0 PID: 12103 Comm: syz.6.11146 Not tainted syzkaller #0 PREEMPT(full) [ 1835.790047][T12103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1835.790062][T12103] Call Trace: [ 1835.790071][T12103] [ 1835.790081][T12103] dump_stack_lvl+0xe8/0x150 [ 1835.790116][T12103] should_fail_ex+0x412/0x560 [ 1835.790153][T12103] _copy_to_user+0x31/0xb0 [ 1835.790179][T12103] simple_read_from_buffer+0xe1/0x170 [ 1835.790214][T12103] proc_fail_nth_read+0x1bb/0x230 [ 1835.790241][T12103] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1835.790269][T12103] ? rw_verify_area+0x2a6/0x4d0 [ 1835.790291][T12103] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1835.790316][T12103] vfs_read+0x20c/0xa70 [ 1835.790337][T12103] ? fdget_pos+0x246/0x320 [ 1835.790378][T12103] ? __pfx___mutex_lock+0x10/0x10 [ 1835.790425][T12103] ? __pfx_vfs_read+0x10/0x10 [ 1835.790461][T12103] ? __fget_files+0x2a/0x420 [ 1835.790495][T12103] ? __fget_files+0x3a0/0x420 [ 1835.790524][T12103] ? __fget_files+0x2a/0x420 [ 1835.790565][T12103] ksys_read+0x150/0x270 [ 1835.790592][T12103] ? __pfx_ksys_read+0x10/0x10 [ 1835.790629][T12103] do_syscall_64+0xe2/0xf80 [ 1835.790657][T12103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1835.790679][T12103] ? trace_irq_disable+0x37/0x100 [ 1835.790702][T12103] ? clear_bhb_loop+0x60/0xb0 [ 1835.790730][T12103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1835.790753][T12103] RIP: 0033:0x7f45fe55b78e [ 1835.790774][T12103] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1835.790794][T12103] RSP: 002b:00007f45ff414fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1835.790827][T12103] RAX: ffffffffffffffda RBX: 00007f45ff4156c0 RCX: 00007f45fe55b78e [ 1835.790844][T12103] RDX: 000000000000000f RSI: 00007f45ff4150a0 RDI: 0000000000000005 [ 1835.790858][T12103] RBP: 00007f45ff415090 R08: 0000000000000000 R09: 0000000000000000 [ 1835.790872][T12103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1835.790886][T12103] R13: 00007f45fe816038 R14: 00007f45fe815fa0 R15: 00007ffcd80e2668 [ 1835.790924][T12103] [ 1836.607636][T12127] FAULT_INJECTION: forcing a failure. [ 1836.607636][T12127] name failslab, interval 1, probability 0, space 0, times 0 [ 1836.620685][T12127] CPU: 0 UID: 0 PID: 12127 Comm: syz.8.11156 Not tainted syzkaller #0 PREEMPT(full) [ 1836.620713][T12127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1836.620735][T12127] Call Trace: [ 1836.620743][T12127] [ 1836.620753][T12127] dump_stack_lvl+0xe8/0x150 [ 1836.620787][T12127] should_fail_ex+0x412/0x560 [ 1836.620821][T12127] should_failslab+0xa8/0x100 [ 1836.620851][T12127] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 1836.620874][T12127] ? __alloc_skb+0x193/0x390 [ 1836.620901][T12127] ? __alloc_skb+0x1d7/0x390 [ 1836.620926][T12127] ? __local_bh_enable_ip+0xd0/0x130 [ 1836.620948][T12127] ? __alloc_skb+0x193/0x390 [ 1836.620977][T12127] __alloc_skb+0x1d7/0x390 [ 1836.621009][T12127] netlink_ack+0x146/0xa50 [ 1836.621031][T12127] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1836.621057][T12127] ? ref_tracker_free+0x693/0x840 [ 1836.621086][T12127] ? __copy_skb_header+0xa3/0x4a0 [ 1836.621120][T12127] ? __pfx_ref_tracker_free+0x10/0x10 [ 1836.621148][T12127] ? __skb_clone+0x63/0x7a0 [ 1836.621199][T12127] netlink_rcv_skb+0x2b6/0x4b0 [ 1836.621224][T12127] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1836.621251][T12127] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1836.621285][T12127] ? netlink_deliver_tap+0x2e/0x1b0 [ 1836.621315][T12127] netlink_unicast+0x80f/0x9b0 [ 1836.621343][T12127] ? __pfx_netlink_unicast+0x10/0x10 [ 1836.621361][T12127] ? __alloc_skb+0x193/0x390 [ 1836.621385][T12127] ? netlink_sendmsg+0x650/0xb40 [ 1836.621406][T12127] ? skb_put+0x11b/0x210 [ 1836.621436][T12127] netlink_sendmsg+0x813/0xb40 [ 1836.621469][T12127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1836.621501][T12127] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1836.621531][T12127] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1836.621559][T12127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1836.621582][T12127] ____sys_sendmsg+0xa68/0xad0 [ 1836.621612][T12127] ? __might_fault+0xaf/0x130 [ 1836.621639][T12127] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1836.621677][T12127] ? import_iovec+0x73/0xa0 [ 1836.621703][T12127] ___sys_sendmsg+0x2a5/0x360 [ 1836.621738][T12127] ? __lock_acquire+0x6b5/0x2cf0 [ 1836.621772][T12127] ? __pfx____sys_sendmsg+0x10/0x10 [ 1836.621837][T12127] ? __fget_files+0x2a/0x420 [ 1836.621863][T12127] ? __fget_files+0x3a0/0x420 [ 1836.621899][T12127] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1836.621932][T12127] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1836.621972][T12127] ? __pfx_ksys_write+0x10/0x10 [ 1836.622005][T12127] do_syscall_64+0xe2/0xf80 [ 1836.622029][T12127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1836.622048][T12127] ? trace_irq_disable+0x37/0x100 [ 1836.622068][T12127] ? clear_bhb_loop+0x60/0xb0 [ 1836.622093][T12127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1836.622113][T12127] RIP: 0033:0x7f5def39aeb9 [ 1836.622131][T12127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1836.622149][T12127] RSP: 002b:00007f5df02b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1836.622170][T12127] RAX: ffffffffffffffda RBX: 00007f5def615fa0 RCX: 00007f5def39aeb9 [ 1836.622185][T12127] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003 [ 1836.622197][T12127] RBP: 00007f5df02b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1836.622209][T12127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1836.622222][T12127] R13: 00007f5def616038 R14: 00007f5def615fa0 R15: 00007ffedf4e3b98 [ 1836.622254][T12127] [ 1836.737289][T12129] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11155'. [ 1837.702929][T12151] netlink: 836 bytes leftover after parsing attributes in process `syz.8.11161'. [ 1837.994744][T12164] netlink: 'syz.6.11164': attribute type 2 has an invalid length. [ 1838.468280][T12169] netlink: 'syz.8.11167': attribute type 27 has an invalid length. [ 1839.219443][T12188] __nla_validate_parse: 2 callbacks suppressed [ 1839.219480][T12188] netlink: 188 bytes leftover after parsing attributes in process `syz.0.11174'. [ 1839.257768][T12193] netlink: 836 bytes leftover after parsing attributes in process `syz.4.11176'. [ 1839.319297][T12195] netlink: 836 bytes leftover after parsing attributes in process `syz.6.11177'. [ 1839.446187][T12195] netlink: 92 bytes leftover after parsing attributes in process `syz.6.11177'. [ 1839.900570][T12200] netlink: 428 bytes leftover after parsing attributes in process `syz.0.11178'. [ 1841.366608][T12235] netlink: 836 bytes leftover after parsing attributes in process `syz.0.11190'. [ 1841.655112][T12240] FAULT_INJECTION: forcing a failure. [ 1841.655112][T12240] name failslab, interval 1, probability 0, space 0, times 0 [ 1841.696509][T12240] CPU: 0 UID: 0 PID: 12240 Comm: syz.7.11192 Not tainted syzkaller #0 PREEMPT(full) [ 1841.696539][T12240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1841.696558][T12240] Call Trace: [ 1841.696568][T12240] [ 1841.696580][T12240] dump_stack_lvl+0xe8/0x150 [ 1841.696620][T12240] should_fail_ex+0x412/0x560 [ 1841.696669][T12240] should_failslab+0xa8/0x100 [ 1841.696706][T12240] __kmalloc_cache_noprof+0x83/0x6e0 [ 1841.696737][T12240] ? tcf_action_init_1+0x1c2/0x740 [ 1841.696778][T12240] tcf_action_init_1+0x1c2/0x740 [ 1841.696821][T12240] ? __pfx_tcf_action_init_1+0x10/0x10 [ 1841.696845][T12240] ? _raw_read_unlock+0x28/0x50 [ 1841.696867][T12240] ? tc_action_load_ops+0x247/0x540 [ 1841.696886][T12240] ? is_bpf_text_address+0x26/0x2b0 [ 1841.696972][T12240] ? __nla_parse+0x40/0x60 [ 1841.697005][T12240] tcf_action_init+0x31e/0xb40 [ 1841.697061][T12240] ? __pfx_tcf_action_init+0x10/0x10 [ 1841.697080][T12240] ? perf_swevent_event+0x113/0x650 [ 1841.697220][T12240] ? __pfx___nla_validate_parse+0x10/0x10 [ 1841.697373][T12240] tc_ctl_action+0x43b/0xc70 [ 1841.697442][T12240] ? __pfx_tc_ctl_action+0x10/0x10 [ 1841.697484][T12240] ? rcu_is_watching+0x15/0xb0 [ 1841.697513][T12240] ? trace_contention_end+0x39/0x100 [ 1841.697682][T12240] ? __pfx_tc_ctl_action+0x10/0x10 [ 1841.697710][T12240] rtnetlink_rcv_msg+0x77e/0xbe0 [ 1841.697756][T12240] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1841.697789][T12240] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1841.697823][T12240] ? perf_trace_run_bpf_submit+0xee/0x170 [ 1841.697899][T12240] netlink_rcv_skb+0x232/0x4b0 [ 1841.697935][T12240] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1841.697975][T12240] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1841.698044][T12240] ? netlink_deliver_tap+0x2e/0x1b0 [ 1841.698102][T12240] netlink_unicast+0x80f/0x9b0 [ 1841.698158][T12240] ? __pfx_netlink_unicast+0x10/0x10 [ 1841.698185][T12240] ? __alloc_skb+0x193/0x390 [ 1841.698221][T12240] ? netlink_sendmsg+0x650/0xb40 [ 1841.698246][T12240] ? skb_put+0x11b/0x210 [ 1841.698295][T12240] netlink_sendmsg+0x813/0xb40 [ 1841.698368][T12240] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1841.698425][T12240] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1841.698464][T12240] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1841.698497][T12240] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1841.698523][T12240] ____sys_sendmsg+0xa68/0xad0 [ 1841.698581][T12240] ? __pfx_perf_trace_lock+0x10/0x10 [ 1841.698628][T12240] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1841.698695][T12240] ? import_iovec+0x73/0xa0 [ 1841.698735][T12240] ___sys_sendmsg+0x2a5/0x360 [ 1841.698772][T12240] ? perf_trace_run_bpf_submit+0xee/0x170 [ 1841.698812][T12240] ? __pfx____sys_sendmsg+0x10/0x10 [ 1841.698915][T12240] ? __fget_files+0x2a/0x420 [ 1841.698993][T12240] ? __fget_files+0x2a/0x420 [ 1841.699021][T12240] ? __fget_files+0x3a0/0x420 [ 1841.699082][T12240] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1841.699112][T12240] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 1841.699145][T12240] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1841.699208][T12240] ? __pfx_ksys_write+0x10/0x10 [ 1841.699268][T12240] do_syscall_64+0xe2/0xf80 [ 1841.699295][T12240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1841.699315][T12240] ? trace_irq_disable+0x37/0x100 [ 1841.699335][T12240] ? clear_bhb_loop+0x60/0xb0 [ 1841.699369][T12240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1841.699390][T12240] RIP: 0033:0x7fc14f99aeb9 [ 1841.699413][T12240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1841.699432][T12240] RSP: 002b:00007fc1507d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1841.699453][T12240] RAX: ffffffffffffffda RBX: 00007fc14fc15fa0 RCX: 00007fc14f99aeb9 [ 1841.699469][T12240] RDX: 0000000000000000 RSI: 0000200000002f80 RDI: 0000000000000004 [ 1841.699482][T12240] RBP: 00007fc1507d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1841.699495][T12240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1841.699507][T12240] R13: 00007fc14fc16038 R14: 00007fc14fc15fa0 R15: 00007ffeaf4ef938 [ 1841.699581][T12240] [ 1842.703075][T12262] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11200'. [ 1844.000801][T12288] netlink: 836 bytes leftover after parsing attributes in process `syz.7.11210'. [ 1845.633678][T12307] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11216'. [ 1846.353325][T12317] netlink: 'syz.7.11221': attribute type 1 has an invalid length. [ 1846.449857][T12322] netlink: 152 bytes leftover after parsing attributes in process `syz.6.11220'. [ 1847.011203][T12330] netlink: 836 bytes leftover after parsing attributes in process `syz.4.11226'. [ 1847.462330][T12336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1847.508431][T12336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1847.562788][T12336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1847.595860][T12336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1847.793778][T12347] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11229'. [ 1848.769032][T12359] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11232'. [ 1848.933814][T12359] netlink: 'syz.6.11232': attribute type 10 has an invalid length. [ 1849.315463][T12365] FAULT_INJECTION: forcing a failure. [ 1849.315463][T12365] name failslab, interval 1, probability 0, space 0, times 0 [ 1849.367480][T12359] team0: Port device wlan1 added [ 1849.375070][T12365] CPU: 1 UID: 0 PID: 12365 Comm: syz.4.11235 Not tainted syzkaller #0 PREEMPT(full) [ 1849.375100][T12365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1849.375115][T12365] Call Trace: [ 1849.375128][T12365] [ 1849.375141][T12365] dump_stack_lvl+0xe8/0x150 [ 1849.375192][T12365] should_fail_ex+0x412/0x560 [ 1849.375264][T12365] should_failslab+0xa8/0x100 [ 1849.375309][T12365] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 1849.375339][T12365] ? __alloc_skb+0x193/0x390 [ 1849.375371][T12365] ? __alloc_skb+0x1d7/0x390 [ 1849.375398][T12365] ? __local_bh_enable_ip+0xd0/0x130 [ 1849.375432][T12365] ? __alloc_skb+0x193/0x390 [ 1849.375475][T12365] __alloc_skb+0x1d7/0x390 [ 1849.375536][T12365] netlink_ack+0x146/0xa50 [ 1849.375562][T12365] ? trace_call_bpf+0xc2/0xb70 [ 1849.375622][T12365] ? trace_call_bpf+0x7d0/0xb70 [ 1849.375653][T12365] ? perf_trace_preemptirq_template+0x268/0x340 [ 1849.375735][T12365] netlink_rcv_skb+0x2b6/0x4b0 [ 1849.375778][T12365] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1849.375832][T12365] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1849.375930][T12365] ? bpf_lsm_capable+0x9/0x20 [ 1849.375949][T12365] ? security_capable+0x7e/0x2c0 [ 1849.376017][T12365] nfnetlink_rcv+0x2c0/0x27b0 [ 1849.376060][T12365] ? __pfx_perf_trace_lock+0x10/0x10 [ 1849.376100][T12365] ? trace_call_bpf+0xc2/0xb70 [ 1849.376124][T12365] ? lock_acquire+0x106/0x330 [ 1849.376162][T12365] ? trace_call_bpf+0xc2/0xb70 [ 1849.376258][T12365] ? trace_call_bpf+0x7d0/0xb70 [ 1849.376304][T12365] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1849.376362][T12365] ? __pfx_trace_call_bpf+0x10/0x10 [ 1849.376448][T12365] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 1849.376500][T12365] ? perf_trace_lock+0x326/0x3f0 [ 1849.376528][T12365] ? __skb_clone+0x483/0x7a0 [ 1849.376585][T12365] ? __pfx_perf_trace_lock+0x10/0x10 [ 1849.376613][T12365] ? skb_clone+0x246/0x3a0 [ 1849.376656][T12365] ? __netlink_deliver_tap+0x807/0x850 [ 1849.376691][T12365] ? netlink_deliver_tap+0x2e/0x1b0 [ 1849.376753][T12365] ? netlink_deliver_tap+0x2e/0x1b0 [ 1849.376822][T12365] netlink_unicast+0x80f/0x9b0 [ 1849.376893][T12365] ? __pfx_netlink_unicast+0x10/0x10 [ 1849.376919][T12365] ? __alloc_skb+0x193/0x390 [ 1849.376955][T12365] ? netlink_sendmsg+0x650/0xb40 [ 1849.376978][T12365] ? skb_put+0x11b/0x210 [ 1849.377032][T12365] netlink_sendmsg+0x813/0xb40 [ 1849.377107][T12365] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1849.377155][T12365] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1849.377199][T12365] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1849.377237][T12365] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1849.377264][T12365] ____sys_sendmsg+0xa68/0xad0 [ 1849.377301][T12365] ? __pfx_perf_trace_lock+0x10/0x10 [ 1849.377358][T12365] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1849.377440][T12365] ? import_iovec+0x73/0xa0 [ 1849.377488][T12365] ___sys_sendmsg+0x2a5/0x360 [ 1849.377554][T12365] ? __pfx____sys_sendmsg+0x10/0x10 [ 1849.377696][T12365] ? __fget_files+0x2a/0x420 [ 1849.377786][T12365] ? __fget_files+0x2a/0x420 [ 1849.377814][T12365] ? __fget_files+0x3a0/0x420 [ 1849.377897][T12365] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1849.377970][T12365] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1849.378058][T12365] ? __pfx_ksys_write+0x10/0x10 [ 1849.378149][T12365] do_syscall_64+0xe2/0xf80 [ 1849.378180][T12365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1849.378200][T12365] ? trace_irq_disable+0x37/0x100 [ 1849.378233][T12365] ? clear_bhb_loop+0x60/0xb0 [ 1849.378275][T12365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1849.378296][T12365] RIP: 0033:0x7f12d979aeb9 [ 1849.378321][T12365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1849.378339][T12365] RSP: 002b:00007f12da68c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1849.378361][T12365] RAX: ffffffffffffffda RBX: 00007f12d9a15fa0 RCX: 00007f12d979aeb9 [ 1849.378376][T12365] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1849.378389][T12365] RBP: 00007f12da68c090 R08: 0000000000000000 R09: 0000000000000000 [ 1849.378402][T12365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1849.378414][T12365] R13: 00007f12d9a16038 R14: 00007f12d9a15fa0 R15: 00007ffca1270d68 [ 1849.378511][T12365] [ 1850.326453][T12375] FAULT_INJECTION: forcing a failure. [ 1850.326453][T12375] name failslab, interval 1, probability 0, space 0, times 0 [ 1850.345956][T12371] netlink: 836 bytes leftover after parsing attributes in process `syz.8.11240'. [ 1850.378569][T12375] CPU: 1 UID: 0 PID: 12375 Comm: syz.4.11239 Not tainted syzkaller #0 PREEMPT(full) [ 1850.378598][T12375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1850.378611][T12375] Call Trace: [ 1850.378622][T12375] [ 1850.378650][T12375] dump_stack_lvl+0xe8/0x150 [ 1850.378698][T12375] should_fail_ex+0x412/0x560 [ 1850.378760][T12375] should_failslab+0xa8/0x100 [ 1850.378811][T12375] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 1850.378840][T12375] ? __alloc_skb+0x193/0x390 [ 1850.378872][T12375] ? __alloc_skb+0x1d7/0x390 [ 1850.378897][T12375] ? __local_bh_enable_ip+0xd0/0x130 [ 1850.378929][T12375] ? __alloc_skb+0x193/0x390 [ 1850.378970][T12375] __alloc_skb+0x1d7/0x390 [ 1850.379028][T12375] netlink_ack+0x146/0xa50 [ 1850.379056][T12375] ? trace_call_bpf+0x7d0/0xb70 [ 1850.379177][T12375] netlink_rcv_skb+0x2b6/0x4b0 [ 1850.379216][T12375] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1850.379254][T12375] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1850.379339][T12375] ? bpf_lsm_capable+0x9/0x20 [ 1850.379356][T12375] ? security_capable+0x7e/0x2c0 [ 1850.379425][T12375] nfnetlink_rcv+0x2c0/0x27b0 [ 1850.379467][T12375] ? __pfx_perf_trace_lock+0x10/0x10 [ 1850.379507][T12375] ? trace_call_bpf+0xc2/0xb70 [ 1850.379530][T12375] ? lock_acquire+0x106/0x330 [ 1850.379569][T12375] ? trace_call_bpf+0xc2/0xb70 [ 1850.379668][T12375] ? trace_call_bpf+0x7d0/0xb70 [ 1850.379714][T12375] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1850.379778][T12375] ? __pfx_trace_call_bpf+0x10/0x10 [ 1850.379863][T12375] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 1850.379912][T12375] ? perf_trace_lock+0x326/0x3f0 [ 1850.379940][T12375] ? __skb_clone+0x483/0x7a0 [ 1850.379997][T12375] ? __pfx_perf_trace_lock+0x10/0x10 [ 1850.380025][T12375] ? skb_clone+0x246/0x3a0 [ 1850.380065][T12375] ? __netlink_deliver_tap+0x807/0x850 [ 1850.380094][T12375] ? netlink_deliver_tap+0x2e/0x1b0 [ 1850.380155][T12375] ? netlink_deliver_tap+0x2e/0x1b0 [ 1850.380232][T12375] netlink_unicast+0x80f/0x9b0 [ 1850.380299][T12375] ? __pfx_netlink_unicast+0x10/0x10 [ 1850.380324][T12375] ? __alloc_skb+0x193/0x390 [ 1850.380357][T12375] ? netlink_sendmsg+0x650/0xb40 [ 1850.380378][T12375] ? skb_put+0x11b/0x210 [ 1850.380444][T12375] netlink_sendmsg+0x813/0xb40 [ 1850.380517][T12375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1850.380565][T12375] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1850.380610][T12375] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1850.380648][T12375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1850.380674][T12375] ____sys_sendmsg+0xa68/0xad0 [ 1850.380711][T12375] ? __pfx_perf_trace_lock+0x10/0x10 [ 1850.380774][T12375] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1850.380855][T12375] ? import_iovec+0x73/0xa0 [ 1850.380902][T12375] ___sys_sendmsg+0x2a5/0x360 [ 1850.380967][T12375] ? __pfx____sys_sendmsg+0x10/0x10 [ 1850.381101][T12375] ? __fget_files+0x2a/0x420 [ 1850.381190][T12375] ? __fget_files+0x2a/0x420 [ 1850.381218][T12375] ? __fget_files+0x3a0/0x420 [ 1850.381300][T12375] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1850.381352][T12375] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1850.381434][T12375] ? __pfx_ksys_write+0x10/0x10 [ 1850.381520][T12375] do_syscall_64+0xe2/0xf80 [ 1850.381552][T12375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1850.381571][T12375] ? trace_irq_disable+0x37/0x100 [ 1850.381610][T12375] ? clear_bhb_loop+0x60/0xb0 [ 1850.381656][T12375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1850.381679][T12375] RIP: 0033:0x7f12d979aeb9 [ 1850.381707][T12375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1850.381727][T12375] RSP: 002b:00007f12da68c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1850.381749][T12375] RAX: ffffffffffffffda RBX: 00007f12d9a15fa0 RCX: 00007f12d979aeb9 [ 1850.381765][T12375] RDX: 0000000000044000 RSI: 0000200000000500 RDI: 0000000000000003 [ 1850.381786][T12375] RBP: 00007f12da68c090 R08: 0000000000000000 R09: 0000000000000000 [ 1850.381800][T12375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1850.381814][T12375] R13: 00007f12d9a16038 R14: 00007f12d9a15fa0 R15: 00007ffca1270d68 [ 1850.381919][T12375] [ 1851.524396][T12387] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11245'. [ 1851.688660][T12387] netlink: 'syz.6.11245': attribute type 10 has an invalid length. [ 1851.778894][T12393] netlink: 'syz.4.11246': attribute type 8 has an invalid length. [ 1851.796094][T12393] netlink: 209840 bytes leftover after parsing attributes in process `syz.4.11246'. [ 1852.202902][T12399] FAULT_INJECTION: forcing a failure. [ 1852.202902][T12399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1852.322036][T12399] CPU: 1 UID: 0 PID: 12399 Comm: syz.8.11248 Not tainted syzkaller #0 PREEMPT(full) [ 1852.322065][T12399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1852.322079][T12399] Call Trace: [ 1852.322090][T12399] [ 1852.322103][T12399] dump_stack_lvl+0xe8/0x150 [ 1852.322148][T12399] should_fail_ex+0x412/0x560 [ 1852.322209][T12399] _copy_to_user+0x31/0xb0 [ 1852.322249][T12399] bpf_test_finish+0x1db/0x6b0 [ 1852.322323][T12399] ? __pfx_bpf_test_finish+0x10/0x10 [ 1852.322352][T12399] ? eth_type_trans+0x35e/0x6d0 [ 1852.322445][T12399] bpf_prog_test_run_skb+0x114f/0x1d50 [ 1852.322539][T12399] ? __fget_files+0x2a/0x420 [ 1852.322570][T12399] ? __fget_files+0x3a0/0x420 [ 1852.322599][T12399] ? __fget_files+0x2a/0x420 [ 1852.322657][T12399] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1852.322693][T12399] bpf_prog_test_run+0x2c7/0x340 [ 1852.322743][T12399] __sys_bpf+0x643/0x950 [ 1852.322785][T12399] ? __pfx___sys_bpf+0x10/0x10 [ 1852.322890][T12399] ? ksys_write+0x242/0x270 [ 1852.322931][T12399] ? __pfx_ksys_write+0x10/0x10 [ 1852.322996][T12399] __x64_sys_bpf+0x7c/0x90 [ 1852.323041][T12399] do_syscall_64+0xe2/0xf80 [ 1852.323074][T12399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1852.323094][T12399] ? trace_irq_disable+0x37/0x100 [ 1852.323115][T12399] ? clear_bhb_loop+0x60/0xb0 [ 1852.323157][T12399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1852.323179][T12399] RIP: 0033:0x7f5def39aeb9 [ 1852.323204][T12399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1852.323224][T12399] RSP: 002b:00007f5df02b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1852.323246][T12399] RAX: ffffffffffffffda RBX: 00007f5def615fa0 RCX: 00007f5def39aeb9 [ 1852.323261][T12399] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1852.323275][T12399] RBP: 00007f5df02b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1852.323288][T12399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1852.323300][T12399] R13: 00007f5def616038 R14: 00007f5def615fa0 R15: 00007ffedf4e3b98 [ 1852.323441][T12399] [ 1853.115721][T12404] netlink: 188 bytes leftover after parsing attributes in process `syz.7.11250'. [ 1853.204262][T12408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11251'. [ 1853.288593][T12410] netlink: 'syz.4.11251': attribute type 10 has an invalid length. [ 1853.334511][T12410] team0: Port device wlan1 added [ 1854.266734][T12427] netlink: 836 bytes leftover after parsing attributes in process `syz.0.11258'. [ 1855.416136][T12431] lo speed is unknown, defaulting to 1000 [ 1855.477538][T12442] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11262'. [ 1856.608833][T12453] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11267'. [ 1856.625109][T12452] netlink: 64 bytes leftover after parsing attributes in process `syz.8.11265'. [ 1857.653375][T12461] netlink: 836 bytes leftover after parsing attributes in process `syz.0.11270'. [ 1857.780732][T12461] netlink: 92 bytes leftover after parsing attributes in process `syz.0.11270'. [ 1858.263072][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.269532][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.744328][T12473] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11275'. [ 1860.181235][T12486] netlink: 68 bytes leftover after parsing attributes in process `syz.7.11281'. [ 1860.349265][T12486] netlink: 52 bytes leftover after parsing attributes in process `syz.7.11281'. [ 1861.344459][T12500] sit0: entered promiscuous mode [ 1861.514263][T18922] Bluetooth: hci0: ISO packet for unknown connection handle 12 [ 1862.223142][T12510] sit0: entered promiscuous mode [ 1863.221442][T12517] netlink: 188 bytes leftover after parsing attributes in process `syz.0.11290'. [ 1863.495832][T12527] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11292'. [ 1863.769009][T18922] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 1864.177244][T12534] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11294'. [ 1865.501407][T12551] netlink: 60 bytes leftover after parsing attributes in process `syz.8.11298'. [ 1865.943429][T12556] netlink: 'syz.4.11303': attribute type 21 has an invalid length. [ 1865.981583][T12556] netlink: 128 bytes leftover after parsing attributes in process `syz.4.11303'. [ 1866.037543][T12556] netlink: 3 bytes leftover after parsing attributes in process `syz.4.11303'. [ 1867.033119][T12569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11306'. [ 1868.827753][T12589] netlink: 24576 bytes leftover after parsing attributes in process `syz.4.11311'. [ 1869.442835][T12595] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11313'. [ 1869.501652][T12595] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1869.553645][T12596] netlink: 836 bytes leftover after parsing attributes in process `syz.4.11314'. [ 1869.610843][T12599] netlink: 836 bytes leftover after parsing attributes in process `syz.6.11315'. [ 1871.934155][T12622] netlink: 836 bytes leftover after parsing attributes in process `syz.7.11323'. [ 1872.232566][T12623] netlink: 92 bytes leftover after parsing attributes in process `syz.7.11323'. [ 1872.748220][T12632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1872.756115][T12627] IPv6: …: Disabled Multicast RS [ 1873.213242][T12636] sit0: left promiscuous mode [ 1873.540776][T12637] sit0: entered promiscuous mode [ 1874.365922][T12642] sit0: entered allmulticast mode [ 1874.481877][T12645] sit0: entered promiscuous mode [ 1875.708024][T12663] netlink: 188 bytes leftover after parsing attributes in process `syz.0.11334'. [ 1876.050704][T12671] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11336'. [ 1876.219378][T12675] netlink: 'syz.7.11336': attribute type 10 has an invalid length. [ 1876.431037][T12675] mac80211_hwsim hwsim100 wlan1: left promiscuous mode [ 1876.450980][T12675] mac80211_hwsim hwsim100 wlan1: left allmulticast mode [ 1876.553429][T12675] bond0: (slave wlan1): Releasing backup interface [ 1876.667233][T12675] team0: Port device wlan1 added [ 1877.524094][T12686] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1877.530700][T12686] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1877.587697][T12688] FAULT_INJECTION: forcing a failure. [ 1877.587697][T12688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1877.636516][T12686] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11341'. [ 1877.683081][T12688] CPU: 0 UID: 0 PID: 12688 Comm: syz.7.11342 Not tainted syzkaller #0 PREEMPT(full) [ 1877.683114][T12688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1877.683129][T12688] Call Trace: [ 1877.683142][T12688] [ 1877.683156][T12688] dump_stack_lvl+0xe8/0x150 [ 1877.683206][T12688] should_fail_ex+0x412/0x560 [ 1877.683276][T12688] _copy_from_user+0x2d/0xb0 [ 1877.683326][T12688] mptcp_setsockopt+0x1657/0x36a0 [ 1877.683361][T12688] ? aa_sk_perm+0x15a/0x960 [ 1877.683412][T12688] ? aa_sk_perm+0x82d/0x960 [ 1877.683468][T12688] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 1877.683526][T12688] ? __pfx_aa_sk_perm+0x10/0x10 [ 1877.683581][T12688] ? __fget_files+0x2a/0x420 [ 1877.683608][T12688] ? aa_sock_opt_perm+0xff/0x1a0 [ 1877.683657][T12688] ? sock_common_setsockopt+0x36/0xc0 [ 1877.683690][T12688] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1877.683734][T12688] do_sock_setsockopt+0x17c/0x1b0 [ 1877.683797][T12688] __x64_sys_setsockopt+0x13d/0x1b0 [ 1877.683865][T12688] do_syscall_64+0xe2/0xf80 [ 1877.683896][T12688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1877.683918][T12688] ? trace_irq_disable+0x37/0x100 [ 1877.683941][T12688] ? clear_bhb_loop+0x60/0xb0 [ 1877.683987][T12688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1877.684011][T12688] RIP: 0033:0x7fc14f99aeb9 [ 1877.684037][T12688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1877.684056][T12688] RSP: 002b:00007fc1507d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1877.684080][T12688] RAX: ffffffffffffffda RBX: 00007fc14fc15fa0 RCX: 00007fc14f99aeb9 [ 1877.684097][T12688] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 0000000000000003 [ 1877.684110][T12688] RBP: 00007fc1507d5090 R08: 0000000000000004 R09: 0000000000000000 [ 1877.684124][T12688] R10: 0000200000000800 R11: 0000000000000246 R12: 0000000000000001 [ 1877.684138][T12688] R13: 00007fc14fc16038 R14: 00007fc14fc15fa0 R15: 00007ffeaf4ef938 [ 1877.684246][T12688] [ 1880.845764][T12721] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11355'. [ 1881.019668][T12721] netlink: 'syz.7.11355': attribute type 10 has an invalid length. [ 1881.724903][T12729] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11359'. [ 1881.833833][T12729] netlink: 'syz.6.11359': attribute type 10 has an invalid length. [ 1881.858202][T12733] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11360'. [ 1882.328449][T12736] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11361'. [ 1884.643712][T12764] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11373'. [ 1885.176323][T12771] FAULT_INJECTION: forcing a failure. [ 1885.176323][T12771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1885.243142][T12771] CPU: 0 UID: 0 PID: 12771 Comm: syz.8.11375 Not tainted syzkaller #0 PREEMPT(full) [ 1885.243170][T12771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1885.243183][T12771] Call Trace: [ 1885.243194][T12771] [ 1885.243206][T12771] dump_stack_lvl+0xe8/0x150 [ 1885.243251][T12771] should_fail_ex+0x412/0x560 [ 1885.243309][T12771] _copy_to_user+0x31/0xb0 [ 1885.243347][T12771] simple_read_from_buffer+0xe1/0x170 [ 1885.243400][T12771] proc_fail_nth_read+0x1bb/0x230 [ 1885.243442][T12771] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1885.243491][T12771] ? rw_verify_area+0x2a6/0x4d0 [ 1885.243517][T12771] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1885.243553][T12771] vfs_read+0x20c/0xa70 [ 1885.243575][T12771] ? fdget_pos+0x246/0x320 [ 1885.243628][T12771] ? __pfx___mutex_lock+0x10/0x10 [ 1885.243662][T12771] ? __pfx_vfs_read+0x10/0x10 [ 1885.243699][T12771] ? __fget_files+0x2a/0x420 [ 1885.243771][T12771] ? __fget_files+0x3a0/0x420 [ 1885.243800][T12771] ? __fget_files+0x2a/0x420 [ 1885.243884][T12771] ksys_read+0x150/0x270 [ 1885.243924][T12771] ? __pfx_ksys_read+0x10/0x10 [ 1885.244006][T12771] do_syscall_64+0xe2/0xf80 [ 1885.244032][T12771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1885.244051][T12771] ? trace_irq_disable+0x37/0x100 [ 1885.244070][T12771] ? clear_bhb_loop+0x60/0xb0 [ 1885.244109][T12771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1885.244130][T12771] RIP: 0033:0x7f5def35b78e [ 1885.244153][T12771] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1885.244169][T12771] RSP: 002b:00007f5df02b6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1885.244192][T12771] RAX: ffffffffffffffda RBX: 00007f5df02b76c0 RCX: 00007f5def35b78e [ 1885.244205][T12771] RDX: 000000000000000f RSI: 00007f5df02b70a0 RDI: 0000000000000004 [ 1885.244216][T12771] RBP: 00007f5df02b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1885.244228][T12771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1885.244257][T12771] R13: 00007f5def616038 R14: 00007f5def615fa0 R15: 00007ffedf4e3b98 [ 1885.244354][T12771] [ 1886.313528][T12785] FAULT_INJECTION: forcing a failure. [ 1886.313528][T12785] name failslab, interval 1, probability 0, space 0, times 0 [ 1886.372550][T12785] CPU: 1 UID: 0 PID: 12785 Comm: syz.0.11382 Not tainted syzkaller #0 PREEMPT(full) [ 1886.372578][T12785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1886.372592][T12785] Call Trace: [ 1886.372601][T12785] [ 1886.372610][T12785] dump_stack_lvl+0xe8/0x150 [ 1886.372641][T12785] should_fail_ex+0x412/0x560 [ 1886.372676][T12785] should_failslab+0xa8/0x100 [ 1886.372704][T12785] kmem_cache_alloc_noprof+0x87/0x6e0 [ 1886.372727][T12785] ? sk_prot_alloc+0x57/0x210 [ 1886.372760][T12785] sk_prot_alloc+0x57/0x210 [ 1886.372786][T12785] ? sk_alloc+0x27/0x390 [ 1886.372815][T12785] sk_alloc+0x3a/0x390 [ 1886.372847][T12785] inet6_create+0x7f0/0x1260 [ 1886.372871][T12785] ? inet6_create+0x83/0x1260 [ 1886.372900][T12785] __sock_create+0x4b2/0x9d0 [ 1886.372934][T12785] udp_sock_create6+0xd6/0x6a0 [ 1886.372963][T12785] ? __pfx_udp_sock_create6+0x10/0x10 [ 1886.372998][T12785] ? rxrpc_lookup_local+0xc88/0x1500 [ 1886.373034][T12785] rxrpc_lookup_local+0xd02/0x1500 [ 1886.373072][T12785] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 1886.373100][T12785] ? irqentry_exit+0x59c/0x620 [ 1886.373147][T12785] ? __local_bh_enable_ip+0xd8/0x130 [ 1886.373171][T12785] rxrpc_sendmsg+0x399/0x710 [ 1886.373203][T12785] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 1886.373227][T12785] ____sys_sendmsg+0xa68/0xad0 [ 1886.373267][T12785] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1886.373308][T12785] ? import_iovec+0x73/0xa0 [ 1886.373334][T12785] ___sys_sendmsg+0x2a5/0x360 [ 1886.373372][T12785] ? __lock_acquire+0x6b5/0x2cf0 [ 1886.373407][T12785] ? __pfx____sys_sendmsg+0x10/0x10 [ 1886.373443][T12785] ? trace_call_bpf+0xc2/0xb70 [ 1886.373519][T12785] ? __fget_files+0x2a/0x420 [ 1886.373548][T12785] ? __fget_files+0x3a0/0x420 [ 1886.373588][T12785] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1886.373624][T12785] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1886.373686][T12785] do_syscall_64+0xe2/0xf80 [ 1886.373721][T12785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1886.373742][T12785] ? clear_bhb_loop+0x60/0xb0 [ 1886.373767][T12785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1886.373786][T12785] RIP: 0033:0x7fab8559aeb9 [ 1886.373805][T12785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1886.373823][T12785] RSP: 002b:00007fab863de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1886.373845][T12785] RAX: ffffffffffffffda RBX: 00007fab85815fa0 RCX: 00007fab8559aeb9 [ 1886.373861][T12785] RDX: 000000002004fc10 RSI: 0000200000000080 RDI: 0000000000000007 [ 1886.373874][T12785] RBP: 00007fab863de090 R08: 0000000000000000 R09: 0000000000000000 [ 1886.373887][T12785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1886.373899][T12785] R13: 00007fab85816038 R14: 00007fab85815fa0 R15: 00007ffc9d1a0cb8 [ 1886.373933][T12785] [ 1886.752480][T12795] netlink: 56 bytes leftover after parsing attributes in process `syz.6.11387'. [ 1886.851769][T12802] netlink: 152 bytes leftover after parsing attributes in process `syz.7.11388'. [ 1887.446650][T12813] FAULT_INJECTION: forcing a failure. [ 1887.446650][T12813] name failslab, interval 1, probability 0, space 0, times 0 [ 1887.501158][T12813] CPU: 0 UID: 0 PID: 12813 Comm: syz.7.11393 Not tainted syzkaller #0 PREEMPT(full) [ 1887.501188][T12813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1887.501203][T12813] Call Trace: [ 1887.501212][T12813] [ 1887.501221][T12813] dump_stack_lvl+0xe8/0x150 [ 1887.501256][T12813] should_fail_ex+0x412/0x560 [ 1887.501312][T12813] should_failslab+0xa8/0x100 [ 1887.501340][T12813] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 1887.501365][T12813] ? __alloc_skb+0x1d7/0x390 [ 1887.501389][T12813] ? __local_bh_enable_ip+0xd0/0x130 [ 1887.501411][T12813] ? __alloc_skb+0x193/0x390 [ 1887.501438][T12813] __alloc_skb+0x1d7/0x390 [ 1887.501471][T12813] xfrm_send_policy_notify+0x297/0x1bf0 [ 1887.501496][T12813] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1887.501518][T12813] ? lockdep_hardirqs_on+0x7a/0x110 [ 1887.501542][T12813] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 1887.501560][T12813] ? km_policy_notify+0x28/0x200 [ 1887.501582][T12813] ? km_policy_notify+0x28/0x200 [ 1887.501603][T12813] ? __local_bh_enable_ip+0xd0/0x130 [ 1887.501621][T12813] ? lockdep_hardirqs_on+0x7a/0x110 [ 1887.501641][T12813] ? __local_bh_enable_ip+0xd0/0x130 [ 1887.501659][T12813] ? km_policy_notify+0x28/0x200 [ 1887.501679][T12813] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 1887.501700][T12813] km_policy_notify+0x121/0x200 [ 1887.501720][T12813] ? km_policy_notify+0x28/0x200 [ 1887.501743][T12813] xfrm_add_policy+0x4ef/0x820 [ 1887.501771][T12813] ? __pfx_xfrm_add_policy+0x10/0x10 [ 1887.501791][T12813] ? apparmor_capable+0x137/0x1a0 [ 1887.501818][T12813] ? __nla_parse+0x40/0x60 [ 1887.501842][T12813] xfrm_user_rcv_msg+0x746/0xb20 [ 1887.501872][T12813] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1887.501931][T12813] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1887.501959][T12813] ? rcu_is_watching+0x15/0xb0 [ 1887.501981][T12813] ? trace_contention_end+0x39/0x100 [ 1887.502004][T12813] ? __mutex_lock+0x319/0x1300 [ 1887.502036][T12813] netlink_rcv_skb+0x232/0x4b0 [ 1887.502062][T12813] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1887.502086][T12813] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1887.502126][T12813] ? netlink_deliver_tap+0x2e/0x1b0 [ 1887.502150][T12813] ? netlink_deliver_tap+0x2e/0x1b0 [ 1887.502177][T12813] xfrm_netlink_rcv+0x79/0x90 [ 1887.502199][T12813] netlink_unicast+0x80f/0x9b0 [ 1887.502230][T12813] ? __pfx_netlink_unicast+0x10/0x10 [ 1887.502250][T12813] ? __alloc_skb+0x193/0x390 [ 1887.502283][T12813] ? netlink_sendmsg+0x650/0xb40 [ 1887.502305][T12813] ? skb_put+0x11b/0x210 [ 1887.502337][T12813] netlink_sendmsg+0x813/0xb40 [ 1887.502372][T12813] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1887.502400][T12813] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1887.502431][T12813] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1887.502458][T12813] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1887.502500][T12813] ____sys_sendmsg+0xa68/0xad0 [ 1887.502533][T12813] ? __might_fault+0xaf/0x130 [ 1887.502563][T12813] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1887.502606][T12813] ? import_iovec+0x73/0xa0 [ 1887.502634][T12813] ___sys_sendmsg+0x2a5/0x360 [ 1887.502664][T12813] ? __lock_acquire+0x6b5/0x2cf0 [ 1887.502700][T12813] ? __pfx____sys_sendmsg+0x10/0x10 [ 1887.502774][T12813] ? __fget_files+0x2a/0x420 [ 1887.502802][T12813] ? __fget_files+0x3a0/0x420 [ 1887.502841][T12813] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1887.502875][T12813] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1887.502916][T12813] ? __pfx_ksys_write+0x10/0x10 [ 1887.502951][T12813] do_syscall_64+0xe2/0xf80 [ 1887.502976][T12813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1887.502997][T12813] ? trace_irq_disable+0x37/0x100 [ 1887.503019][T12813] ? clear_bhb_loop+0x60/0xb0 [ 1887.503046][T12813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1887.503067][T12813] RIP: 0033:0x7fc14f99aeb9 [ 1887.503086][T12813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1887.503105][T12813] RSP: 002b:00007fc1507d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1887.503128][T12813] RAX: ffffffffffffffda RBX: 00007fc14fc15fa0 RCX: 00007fc14f99aeb9 [ 1887.503144][T12813] RDX: 0000000000008004 RSI: 0000200000000580 RDI: 0000000000000003 [ 1887.503158][T12813] RBP: 00007fc1507d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1887.503172][T12813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1887.503185][T12813] R13: 00007fc14fc16038 R14: 00007fc14fc15fa0 R15: 00007ffeaf4ef938 [ 1887.503221][T12813] [ 1888.595616][T12831] €Â: renamed from hsr0 (while UP) [ 1888.709796][T12829] C: renamed from team_slave_0 (while UP) [ 1888.756660][T12829] netlink: 'syz.4.11399': attribute type 3 has an invalid length. [ 1888.772753][T12829] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11399'. [ 1888.788532][T12836] netlink: 188 bytes leftover after parsing attributes in process `syz.6.11402'. [ 1888.801392][T12832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11399'. [ 1888.802827][T12829] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1888.843704][T12832] netlink: 360 bytes leftover after parsing attributes in process `syz.4.11399'. [ 1888.855945][T12838] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11401'. [ 1889.208376][T12857] netlink: 36 bytes leftover after parsing attributes in process `syz.6.11409'. [ 1889.241645][T12857] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11409'. [ 1889.585532][T12849] lo speed is unknown, defaulting to 1000 [ 1889.965864][T12880] netlink: 152 bytes leftover after parsing attributes in process `syz.6.11415'. [ 1891.290297][T12924] FAULT_INJECTION: forcing a failure. [ 1891.290297][T12924] name failslab, interval 1, probability 0, space 0, times 0 [ 1891.325228][T12924] CPU: 1 UID: 0 PID: 12924 Comm: syz.7.11431 Not tainted syzkaller #0 PREEMPT(full) [ 1891.325260][T12924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1891.325275][T12924] Call Trace: [ 1891.325285][T12924] [ 1891.325295][T12924] dump_stack_lvl+0xe8/0x150 [ 1891.325332][T12924] should_fail_ex+0x412/0x560 [ 1891.325371][T12924] should_failslab+0xa8/0x100 [ 1891.325404][T12924] kmem_cache_alloc_noprof+0x87/0x6e0 [ 1891.325430][T12924] ? sk_prot_alloc+0x57/0x210 [ 1891.325468][T12924] sk_prot_alloc+0x57/0x210 [ 1891.325498][T12924] ? sk_alloc+0x27/0x390 [ 1891.325532][T12924] sk_alloc+0x3a/0x390 [ 1891.325567][T12924] inet6_create+0x7f0/0x1260 [ 1891.325593][T12924] ? inet6_create+0x83/0x1260 [ 1891.325625][T12924] __sock_create+0x4b2/0x9d0 [ 1891.325663][T12924] udp_sock_create6+0xd6/0x6a0 [ 1891.325697][T12924] ? __pfx_udp_sock_create6+0x10/0x10 [ 1891.325736][T12924] ? rxrpc_lookup_local+0xc88/0x1500 [ 1891.325775][T12924] rxrpc_lookup_local+0xd02/0x1500 [ 1891.325829][T12924] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 1891.325879][T12924] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1891.325915][T12924] ? __local_bh_enable_ip+0xd0/0x130 [ 1891.325941][T12924] rxrpc_sendmsg+0x399/0x710 [ 1891.325974][T12924] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 1891.325998][T12924] ____sys_sendmsg+0xa68/0xad0 [ 1891.326027][T12924] ? __might_fault+0xaf/0x130 [ 1891.326058][T12924] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1891.326098][T12924] ? import_iovec+0x73/0xa0 [ 1891.326124][T12924] ___sys_sendmsg+0x2a5/0x360 [ 1891.326153][T12924] ? __lock_acquire+0x6b5/0x2cf0 [ 1891.326188][T12924] ? __pfx____sys_sendmsg+0x10/0x10 [ 1891.326263][T12924] ? __fget_files+0x2a/0x420 [ 1891.326289][T12924] ? __fget_files+0x3a0/0x420 [ 1891.326344][T12924] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1891.326391][T12924] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1891.326466][T12924] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1891.326517][T12924] do_syscall_64+0xe2/0xf80 [ 1891.326550][T12924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1891.326574][T12924] ? clear_bhb_loop+0x60/0xb0 [ 1891.326602][T12924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1891.326624][T12924] RIP: 0033:0x7fc14f99aeb9 [ 1891.326644][T12924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1891.326664][T12924] RSP: 002b:00007fc1507d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1891.326688][T12924] RAX: ffffffffffffffda RBX: 00007fc14fc15fa0 RCX: 00007fc14f99aeb9 [ 1891.326705][T12924] RDX: 000000002004fc10 RSI: 0000200000000080 RDI: 0000000000000009 [ 1891.326720][T12924] RBP: 00007fc1507d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1891.326734][T12924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1891.326748][T12924] R13: 00007fc14fc16038 R14: 00007fc14fc15fa0 R15: 00007ffeaf4ef938 [ 1891.326786][T12924] [ 1891.630831][T12929] sit0: entered allmulticast mode [ 1891.775641][T12929] sit0: entered promiscuous mode [ 1892.326465][T12947] __nla_validate_parse: 6 callbacks suppressed [ 1892.326491][T12947] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11439'. [ 1892.667872][T12963] netlink: 152 bytes leftover after parsing attributes in process `syz.7.11443'. [ 1892.917090][T12972] netlink: 188 bytes leftover after parsing attributes in process `syz.7.11447'. [ 1893.094739][T12984] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11451'. [ 1893.590479][T13001] netlink: 152 bytes leftover after parsing attributes in process `syz.7.11457'. [ 1894.290840][T13020] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11464'. [ 1894.442227][T13028] netlink: 152 bytes leftover after parsing attributes in process `syz.6.11468'. [ 1894.557239][T13031] syzkaller0: entered promiscuous mode [ 1894.564839][T13031] syzkaller0: entered allmulticast mode [ 1894.790416][T13040] bpf: Bad value for 'uid' [ 1894.817951][T13040] netlink: 360 bytes leftover after parsing attributes in process `syz.7.11471'. [ 1896.651041][T13058] netlink: 152 bytes leftover after parsing attributes in process `syz.7.11480'. [ 1896.701894][T13060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11482'. [ 1896.799532][T13060] netlink: 'syz.0.11482': attribute type 10 has an invalid length. [ 1896.904867][ T1109] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1897.094916][T13060] team0: Port device wlan1 added [ 1897.170929][ T1109] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1897.285093][ T1109] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1897.380123][T13074] netlink: 220 bytes leftover after parsing attributes in process `syz.0.11488'. [ 1897.401783][T13074] netlink: 220 bytes leftover after parsing attributes in process `syz.0.11488'. [ 1897.422152][T13076] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1897.443996][T13076] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1897.454313][T13076] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1897.475104][T13076] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1897.485865][ T1109] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1897.499767][T13076] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1897.724169][T13075] lo speed is unknown, defaulting to 1000 [ 1898.153882][ T1109] bridge_slave_0: left allmulticast mode [ 1898.266465][ T1109] bridge_slave_0: left promiscuous mode [ 1898.290018][ T1109] bridge0: port 1(bridge_slave_0) entered disabled state [ 1898.349447][ T1109] macsec0: left allmulticast mode [ 1898.375875][ T1109] macsec0: left promiscuous mode [ 1898.397686][ T1109] : port 1(macsec0) entered disabled state [ 1898.494479][T13103] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11498'. [ 1899.539295][ T1109] team0: Port device geneve1 removed [ 1899.612466][T13076] Bluetooth: hci3: command tx timeout [ 1900.222422][T13094] netlink: 152 bytes leftover after parsing attributes in process `syz.7.11495'. [ 1900.430430][T13159] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11511'. [ 1900.898470][T13075] chnl_net:caif_netlink_parms(): no params data found [ 1901.102841][T13183] netlink: 208 bytes leftover after parsing attributes in process `syz.0.11516'. [ 1901.415733][T13203] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11520'. [ 1901.429196][T13075] bridge0: port 1(bridge_slave_0) entered blocking state [ 1901.449231][T13075] bridge0: port 1(bridge_slave_0) entered disabled state [ 1901.477514][T13075] bridge_slave_0: entered allmulticast mode [ 1901.486467][T13075] bridge_slave_0: entered promiscuous mode [ 1901.502503][T13075] bridge0: port 2(bridge_slave_1) entered blocking state [ 1901.519963][T13075] bridge0: port 2(bridge_slave_1) entered disabled state [ 1901.537913][T13075] bridge_slave_1: entered allmulticast mode [ 1901.554247][T13075] bridge_slave_1: entered promiscuous mode [ 1901.623872][T13075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1901.654661][T13075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1901.671622][T13076] Bluetooth: hci3: command tx timeout [ 1901.753307][T13075] team0: Port device team_slave_0 added [ 1901.790433][T13075] team0: Port device team_slave_1 added [ 1901.945196][T13075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1901.960160][T13075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1902.067934][T13075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1902.082949][ T1109] : left promiscuous mode [ 1902.138656][T13220] FAULT_INJECTION: forcing a failure. [ 1902.138656][T13220] name failslab, interval 1, probability 0, space 0, times 0 [ 1902.212356][T13220] CPU: 0 UID: 0 PID: 13220 Comm: syz.6.11526 Not tainted syzkaller #0 PREEMPT(full) [ 1902.212388][T13220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1902.212403][T13220] Call Trace: [ 1902.212417][T13220] [ 1902.212432][T13220] dump_stack_lvl+0xe8/0x150 [ 1902.212485][T13220] should_fail_ex+0x412/0x560 [ 1902.212562][T13220] should_failslab+0xa8/0x100 [ 1902.212613][T13220] __kmalloc_cache_noprof+0x83/0x6e0 [ 1902.212655][T13220] ? tcf_skbedit_init+0x862/0xfd0 [ 1902.212733][T13220] tcf_skbedit_init+0x862/0xfd0 [ 1902.212856][T13220] ? __pfx_tcf_skbedit_init+0x10/0x10 [ 1902.213015][T13220] ? __asan_memcpy+0x40/0x70 [ 1902.213073][T13220] tcf_action_init_1+0x4ba/0x740 [ 1902.213149][T13220] ? __pfx_tcf_action_init_1+0x10/0x10 [ 1902.213180][T13220] ? _raw_read_unlock+0x28/0x50 [ 1902.213208][T13220] ? tc_action_load_ops+0x247/0x540 [ 1902.213376][T13220] ? __nla_parse+0x40/0x60 [ 1902.213435][T13220] tcf_action_init+0x31e/0xb40 [ 1902.213496][T13220] ? __pfx_perf_tp_event+0x10/0x10 [ 1902.213555][T13220] ? __pfx_tcf_action_init+0x10/0x10 [ 1902.213766][T13220] ? __pfx___nla_validate_parse+0x10/0x10 [ 1902.214031][T13220] tc_ctl_action+0x43b/0xc70 [ 1902.214143][T13220] ? __pfx_tc_ctl_action+0x10/0x10 [ 1902.214198][T13220] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1902.214232][T13220] ? lockdep_hardirqs_on+0x7a/0x110 [ 1902.214540][T13220] ? __pfx_tc_ctl_action+0x10/0x10 [ 1902.214572][T13220] rtnetlink_rcv_msg+0x77e/0xbe0 [ 1902.214638][T13220] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1902.214673][T13220] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1902.214715][T13220] ? perf_trace_run_bpf_submit+0xee/0x170 [ 1902.214834][T13220] netlink_rcv_skb+0x232/0x4b0 [ 1902.214882][T13220] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1902.214934][T13220] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1902.215045][T13220] ? netlink_deliver_tap+0x2e/0x1b0 [ 1902.215130][T13220] netlink_unicast+0x80f/0x9b0 [ 1902.215219][T13220] ? __pfx_netlink_unicast+0x10/0x10 [ 1902.215257][T13220] ? __alloc_skb+0x193/0x390 [ 1902.215300][T13220] ? netlink_sendmsg+0x650/0xb40 [ 1902.215324][T13220] ? skb_put+0x11b/0x210 [ 1902.215389][T13220] netlink_sendmsg+0x813/0xb40 [ 1902.215485][T13220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1902.215545][T13220] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1902.215600][T13220] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1902.215647][T13220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1902.215677][T13220] ____sys_sendmsg+0xa68/0xad0 [ 1902.215722][T13220] ? __pfx_perf_trace_lock+0x10/0x10 [ 1902.215794][T13220] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1902.215904][T13220] ? import_iovec+0x73/0xa0 [ 1902.215963][T13220] ___sys_sendmsg+0x2a5/0x360 [ 1902.216005][T13220] ? perf_trace_run_bpf_submit+0xee/0x170 [ 1902.216059][T13220] ? __pfx____sys_sendmsg+0x10/0x10 [ 1902.216252][T13220] ? __fget_files+0x2a/0x420 [ 1902.216369][T13220] ? __fget_files+0x2a/0x420 [ 1902.216402][T13220] ? __fget_files+0x3a0/0x420 [ 1902.216508][T13220] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1902.216573][T13220] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1902.216677][T13220] ? __pfx_ksys_write+0x10/0x10 [ 1902.216786][T13220] do_syscall_64+0xe2/0xf80 [ 1902.216821][T13220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1902.216843][T13220] ? trace_irq_disable+0x37/0x100 [ 1902.216865][T13220] ? clear_bhb_loop+0x60/0xb0 [ 1902.216915][T13220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1902.216939][T13220] RIP: 0033:0x7f45fe59aeb9 [ 1902.216969][T13220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1902.216990][T13220] RSP: 002b:00007f45ff415028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1902.217013][T13220] RAX: ffffffffffffffda RBX: 00007f45fe815fa0 RCX: 00007f45fe59aeb9 [ 1902.217030][T13220] RDX: 0000000000000000 RSI: 0000200000002f80 RDI: 0000000000000004 [ 1902.217044][T13220] RBP: 00007f45ff415090 R08: 0000000000000000 R09: 0000000000000000 [ 1902.217058][T13220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1902.217072][T13220] R13: 00007f45fe816038 R14: 00007f45fe815fa0 R15: 00007ffcd80e2668 [ 1902.217199][T13220] [ 1902.752304][T13075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1902.791186][T13075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1902.888259][T13075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1903.030560][T13075] hsr_slave_0: entered promiscuous mode [ 1903.037531][T13075] hsr_slave_1: entered promiscuous mode [ 1903.037571][T13229] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11527'. [ 1903.580517][T13241] sit0: left promiscuous mode [ 1903.758284][T13250] sit0: entered promiscuous mode [ 1903.770735][T13076] Bluetooth: hci3: command tx timeout [ 1904.486951][T13276] netlink: 'syz.6.11538': attribute type 10 has an invalid length. [ 1904.518458][T13276] bridge0: port 3(netdevsim0) entered blocking state [ 1904.539760][T13276] bridge0: port 3(netdevsim0) entered disabled state [ 1904.550479][T13276] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1904.570364][T13276] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1904.578766][T13276] bridge0: port 3(netdevsim0) entered blocking state [ 1904.585754][T13276] bridge0: port 3(netdevsim0) entered forwarding state [ 1904.862451][ T1109] team0: Port device wlan1 removed [ 1905.234420][T13293] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11544'. [ 1905.389407][T13075] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1905.480720][T13075] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1905.577976][T13075] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1905.607954][T13075] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1905.749896][T13303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11547'. [ 1905.849707][T13076] Bluetooth: hci3: command tx timeout [ 1905.908289][T13075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1906.013113][T13323] FAULT_INJECTION: forcing a failure. [ 1906.013113][T13323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1906.027007][T13323] CPU: 1 UID: 0 PID: 13323 Comm: syz.7.11551 Not tainted syzkaller #0 PREEMPT(full) [ 1906.027036][T13323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1906.027049][T13323] Call Trace: [ 1906.027058][T13323] [ 1906.027067][T13323] dump_stack_lvl+0xe8/0x150 [ 1906.027100][T13323] should_fail_ex+0x412/0x560 [ 1906.027135][T13323] _copy_from_user+0x2d/0xb0 [ 1906.027159][T13323] ___sys_sendmsg+0x1c6/0x360 [ 1906.027189][T13323] ? __lock_acquire+0x6b5/0x2cf0 [ 1906.027225][T13323] ? __pfx____sys_sendmsg+0x10/0x10 [ 1906.027281][T13323] ? __fget_files+0x2a/0x420 [ 1906.027324][T13323] ? __fget_files+0x2a/0x420 [ 1906.027349][T13323] ? __fget_files+0x3a0/0x420 [ 1906.027389][T13323] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1906.027423][T13323] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1906.027451][T13323] ? perf_trace_preemptirq_template+0xab/0x340 [ 1906.027486][T13323] ? __pfx_ksys_write+0x10/0x10 [ 1906.027522][T13323] do_syscall_64+0xe2/0xf80 [ 1906.027547][T13323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1906.027566][T13323] ? trace_irq_disable+0x37/0x100 [ 1906.027586][T13323] ? clear_bhb_loop+0x60/0xb0 [ 1906.027613][T13323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1906.027633][T13323] RIP: 0033:0x7fc14f99aeb9 [ 1906.027651][T13323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1906.027669][T13323] RSP: 002b:00007fc1507d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1906.027698][T13323] RAX: ffffffffffffffda RBX: 00007fc14fc15fa0 RCX: 00007fc14f99aeb9 [ 1906.027713][T13323] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1906.027743][T13323] RBP: 00007fc1507d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1906.027757][T13323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1906.027770][T13323] R13: 00007fc14fc16038 R14: 00007fc14fc15fa0 R15: 00007ffeaf4ef938 [ 1906.027809][T13323] [ 1906.100577][T13321] netlink: 300 bytes leftover after parsing attributes in process `syz.6.11550'. [ 1906.233770][T13075] 8021q: adding VLAN 0 to HW filter on device team0 [ 1906.274441][ T6128] bridge0: port 1(bridge_slave_0) entered blocking state [ 1906.281702][ T6128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1906.300488][T13325] netlink: 44 bytes leftover after parsing attributes in process `syz.6.11550'. [ 1906.349023][T12948] bridge0: port 2(bridge_slave_1) entered blocking state [ 1906.356318][T12948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1907.313845][T13335] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11554'. [ 1907.324555][T13335] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11554'. [ 1907.415650][T13075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1907.879245][ T1109] hsr_slave_0: left promiscuous mode [ 1907.912092][T13368] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11562'. [ 1908.124930][ T1109] hsr_slave_1: left promiscuous mode [ 1908.172339][ T1109] veth0_macvtap: left promiscuous mode [ 1908.410993][T13392] netlink: 188 bytes leftover after parsing attributes in process `syz.8.11567'. [ 1909.234783][ T1109] team0 (unregistering): Port device 26±ÿ removed [ 1909.307022][ T1109] team0 (unregistering): Port device C removed [ 1910.237353][T13438] FAULT_INJECTION: forcing a failure. [ 1910.237353][T13438] name failslab, interval 1, probability 0, space 0, times 0 [ 1910.273555][T13438] CPU: 0 UID: 0 PID: 13438 Comm: syz.8.11573 Not tainted syzkaller #0 PREEMPT(full) [ 1910.273595][T13438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1910.273609][T13438] Call Trace: [ 1910.273619][T13438] [ 1910.273629][T13438] dump_stack_lvl+0xe8/0x150 [ 1910.273666][T13438] should_fail_ex+0x412/0x560 [ 1910.273707][T13438] should_failslab+0xa8/0x100 [ 1910.273740][T13438] __kmalloc_cache_noprof+0x83/0x6e0 [ 1910.273769][T13438] ? sctp_add_bind_addr+0x8c/0x370 [ 1910.273803][T13438] sctp_add_bind_addr+0x8c/0x370 [ 1910.273838][T13438] sctp_copy_local_addr_list+0x314/0x4f0 [ 1910.273870][T13438] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1910.273897][T13438] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1910.273930][T13438] ? sctp_v4_is_any+0x35/0x60 [ 1910.273956][T13438] ? sctp_copy_one_addr+0x93/0x360 [ 1910.273988][T13438] sctp_bind_addr_copy+0xb3/0x3c0 [ 1910.274011][T13438] ? sctp_assoc_set_bind_addr_from_ep+0xba/0x1a0 [ 1910.274059][T13438] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1910.274096][T13438] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1910.274148][T13438] ? sctp_endpoint_lookup_assoc+0x57/0x260 [ 1910.274179][T13438] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 1910.274212][T13438] __sctp_connect+0x5cb/0xdc0 [ 1910.274259][T13438] ? __pfx___sctp_connect+0x10/0x10 [ 1910.274287][T13438] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1910.274316][T13438] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 1910.274343][T13438] sctp_setsockopt+0x708/0x12c0 [ 1910.274374][T13438] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1910.274402][T13438] do_sock_setsockopt+0x17c/0x1b0 [ 1910.274438][T13438] __x64_sys_setsockopt+0x13d/0x1b0 [ 1910.274494][T13438] do_syscall_64+0xe2/0xf80 [ 1910.274520][T13438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1910.274542][T13438] ? clear_bhb_loop+0x60/0xb0 [ 1910.274579][T13438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1910.274600][T13438] RIP: 0033:0x7f5def39aeb9 [ 1910.274649][T13438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1910.274669][T13438] RSP: 002b:00007f5df02b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1910.274692][T13438] RAX: ffffffffffffffda RBX: 00007f5def615fa0 RCX: 00007f5def39aeb9 [ 1910.274709][T13438] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000004 [ 1910.274723][T13438] RBP: 00007f5df02b7090 R08: 0000000000000010 R09: 0000000000000000 [ 1910.274737][T13438] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1910.274751][T13438] R13: 00007f5def616038 R14: 00007f5def615fa0 R15: 00007ffedf4e3b98 [ 1910.274796][T13438] [ 1910.827207][T13075] veth0_vlan: entered promiscuous mode [ 1910.850093][T13075] veth1_vlan: entered promiscuous mode [ 1910.862450][T13447] sit0: entered promiscuous mode [ 1911.456297][T13461] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11583'. [ 1911.465403][T13461] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11583'. [ 1911.797357][T13470] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11586'. [ 1911.811378][T13468] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 1911.820752][T13075] veth0_macvtap: entered promiscuous mode [ 1911.828980][T13468] syzkaller0: tun_chr_ioctl cmd 1074025684 [ 1911.844067][T13468] syzkaller0: tun_chr_ioctl cmd 35108 [ 1911.853729][T13075] veth1_macvtap: entered promiscuous mode [ 1911.923644][T13075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1911.956768][T13075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1912.188451][T15106] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1912.200109][T15106] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1912.233070][T15106] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1912.309670][T15106] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1912.369384][T13475] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11588'. [ 1912.636955][T13481] sit0: left promiscuous mode [ 1912.850391][T13483] sit0: entered promiscuous mode [ 1913.501892][ T4866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1913.524909][ T4866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1913.623601][T10444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1913.665056][T10444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1913.857361][T13519] sit0: left promiscuous mode [ 1914.003139][T13517] lo speed is unknown, defaulting to 1000 [ 1914.017185][T13519] sit0: entered promiscuous mode [ 1915.146490][T13557] netlink: 836 bytes leftover after parsing attributes in process `syz.6.11613'. [ 1915.316925][T13561] netlink: 'syz.8.11614': attribute type 2 has an invalid length. [ 1915.355143][T13561] netlink: 119 bytes leftover after parsing attributes in process `syz.8.11614'. [ 1915.418035][T13568] FAULT_INJECTION: forcing a failure. [ 1915.418035][T13568] name failslab, interval 1, probability 0, space 0, times 0 [ 1915.433821][T13569] netlink: 'syz.0.11615': attribute type 2 has an invalid length. [ 1915.442457][T13568] CPU: 0 UID: 0 PID: 13568 Comm: syz.4.11616 Not tainted syzkaller #0 PREEMPT(full) [ 1915.442486][T13568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1915.442500][T13568] Call Trace: [ 1915.442509][T13568] [ 1915.442519][T13568] dump_stack_lvl+0xe8/0x150 [ 1915.442555][T13568] should_fail_ex+0x412/0x560 [ 1915.442593][T13568] should_failslab+0xa8/0x100 [ 1915.442624][T13568] kmem_cache_alloc_noprof+0x87/0x6e0 [ 1915.442650][T13568] ? skb_clone+0x212/0x3a0 [ 1915.442676][T13568] skb_clone+0x212/0x3a0 [ 1915.442702][T13568] __netlink_deliver_tap+0x404/0x850 [ 1915.442744][T13568] ? netlink_deliver_tap+0x2e/0x1b0 [ 1915.442771][T13568] netlink_deliver_tap+0x19c/0x1b0 [ 1915.442799][T13568] netlink_sendskb+0x68/0x140 [ 1915.442825][T13568] netlink_unicast+0x3a3/0x9b0 [ 1915.442859][T13568] ? __pfx_netlink_unicast+0x10/0x10 [ 1915.442896][T13568] netlink_rcv_skb+0x2b6/0x4b0 [ 1915.442924][T13568] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1915.442949][T13568] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1915.442991][T13568] ? bpf_lsm_capable+0x9/0x20 [ 1915.443008][T13568] ? security_capable+0x7e/0x2c0 [ 1915.443048][T13568] nfnetlink_rcv+0x2c0/0x27b0 [ 1915.443083][T13568] ? __local_bh_enable_ip+0xd0/0x130 [ 1915.443116][T13568] ? lockdep_hardirqs_on+0x7a/0x110 [ 1915.443142][T13568] ? __dev_queue_xmit+0x27a/0x3820 [ 1915.443161][T13568] ? __local_bh_enable_ip+0xd0/0x130 [ 1915.443179][T13568] ? __dev_queue_xmit+0x27a/0x3820 [ 1915.443198][T13568] ? __dev_queue_xmit+0x1e89/0x3820 [ 1915.443216][T13568] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 1915.443264][T13568] ? __dev_queue_xmit+0x27a/0x3820 [ 1915.443284][T13568] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1915.443314][T13568] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1915.443347][T13568] ? ref_tracker_free+0x693/0x840 [ 1915.443377][T13568] ? __copy_skb_header+0xa3/0x4a0 [ 1915.443413][T13568] ? __pfx_ref_tracker_free+0x10/0x10 [ 1915.443442][T13568] ? __skb_clone+0x63/0x7a0 [ 1915.443478][T13568] ? perf_trace_lock+0xf8/0x3f0 [ 1915.443497][T13568] ? __skb_clone+0x483/0x7a0 [ 1915.443535][T13568] ? __pfx_perf_trace_lock+0x10/0x10 [ 1915.443556][T13568] ? skb_clone+0x246/0x3a0 [ 1915.443581][T13568] ? __netlink_deliver_tap+0x807/0x850 [ 1915.443607][T13568] ? netlink_deliver_tap+0x2e/0x1b0 [ 1915.443641][T13568] ? netlink_deliver_tap+0x2e/0x1b0 [ 1915.443678][T13568] netlink_unicast+0x80f/0x9b0 [ 1915.443714][T13568] ? __pfx_netlink_unicast+0x10/0x10 [ 1915.443735][T13568] ? __alloc_skb+0x193/0x390 [ 1915.443764][T13568] ? netlink_sendmsg+0x650/0xb40 [ 1915.443788][T13568] ? skb_put+0x11b/0x210 [ 1915.443823][T13568] netlink_sendmsg+0x813/0xb40 [ 1915.443862][T13568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1915.443894][T13568] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1915.443926][T13568] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1915.443956][T13568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1915.443982][T13568] ____sys_sendmsg+0xa68/0xad0 [ 1915.444014][T13568] ? __pfx_perf_trace_lock+0x10/0x10 [ 1915.444044][T13568] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1915.444089][T13568] ? import_iovec+0x73/0xa0 [ 1915.444124][T13568] ___sys_sendmsg+0x2a5/0x360 [ 1915.444156][T13568] ? __lock_acquire+0x6b5/0x2cf0 [ 1915.444194][T13568] ? __pfx____sys_sendmsg+0x10/0x10 [ 1915.444254][T13568] ? __fget_files+0x2a/0x420 [ 1915.444299][T13568] ? __fget_files+0x2a/0x420 [ 1915.444326][T13568] ? __fget_files+0x3a0/0x420 [ 1915.444369][T13568] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1915.444405][T13568] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1915.444452][T13568] ? __pfx_ksys_write+0x10/0x10 [ 1915.444492][T13568] do_syscall_64+0xe2/0xf80 [ 1915.444519][T13568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1915.444540][T13568] ? trace_irq_disable+0x37/0x100 [ 1915.444562][T13568] ? clear_bhb_loop+0x60/0xb0 [ 1915.444590][T13568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1915.444611][T13568] RIP: 0033:0x7fb24039aeb9 [ 1915.444650][T13568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1915.444670][T13568] RSP: 002b:00007fb241180028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1915.444694][T13568] RAX: ffffffffffffffda RBX: 00007fb240615fa0 RCX: 00007fb24039aeb9 [ 1915.444711][T13568] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1915.444725][T13568] RBP: 00007fb241180090 R08: 0000000000000000 R09: 0000000000000000 [ 1915.444739][T13568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1915.444753][T13568] R13: 00007fb240616038 R14: 00007fb240615fa0 R15: 00007ffc0862e078 [ 1915.444794][T13568] [ 1915.890922][T13569] netlink: 119 bytes leftover after parsing attributes in process `syz.0.11615'. [ 1917.206810][T13590] netlink: 188 bytes leftover after parsing attributes in process `syz.4.11623'. [ 1917.777204][T13608] netlink: 132 bytes leftover after parsing attributes in process `syz.8.11630'. [ 1917.892157][T13612] netlink: 'syz.6.11631': attribute type 2 has an invalid length. [ 1917.958933][T13612] netlink: 119 bytes leftover after parsing attributes in process `syz.6.11631'. [ 1918.308056][T13619] FAULT_INJECTION: forcing a failure. [ 1918.308056][T13619] name failslab, interval 1, probability 0, space 0, times 0 [ 1918.321291][T13619] CPU: 0 UID: 0 PID: 13619 Comm: syz.4.11634 Not tainted syzkaller #0 PREEMPT(full) [ 1918.321320][T13619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1918.321335][T13619] Call Trace: [ 1918.321344][T13619] [ 1918.321354][T13619] dump_stack_lvl+0xe8/0x150 [ 1918.321388][T13619] should_fail_ex+0x412/0x560 [ 1918.321425][T13619] should_failslab+0xa8/0x100 [ 1918.321459][T13619] kmem_cache_alloc_noprof+0x87/0x6e0 [ 1918.321491][T13619] ? skb_clone+0x212/0x3a0 [ 1918.321516][T13619] skb_clone+0x212/0x3a0 [ 1918.321540][T13619] __netlink_deliver_tap+0x404/0x850 [ 1918.321591][T13619] ? netlink_deliver_tap+0x2e/0x1b0 [ 1918.321620][T13619] netlink_deliver_tap+0x19c/0x1b0 [ 1918.321648][T13619] netlink_sendskb+0x68/0x140 [ 1918.321674][T13619] netlink_unicast+0x3a3/0x9b0 [ 1918.321706][T13619] ? __pfx_netlink_unicast+0x10/0x10 [ 1918.321741][T13619] netlink_rcv_skb+0x2b6/0x4b0 [ 1918.321768][T13619] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1918.321793][T13619] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1918.321833][T13619] ? bpf_lsm_capable+0x9/0x20 [ 1918.321851][T13619] ? security_capable+0x7e/0x2c0 [ 1918.321890][T13619] nfnetlink_rcv+0x2c0/0x27b0 [ 1918.321924][T13619] ? __local_bh_enable_ip+0xd0/0x130 [ 1918.321945][T13619] ? lockdep_hardirqs_on+0x7a/0x110 [ 1918.321971][T13619] ? __dev_queue_xmit+0x27a/0x3820 [ 1918.321990][T13619] ? __local_bh_enable_ip+0xd0/0x130 [ 1918.322009][T13619] ? __dev_queue_xmit+0x27a/0x3820 [ 1918.322028][T13619] ? __dev_queue_xmit+0x1e89/0x3820 [ 1918.322047][T13619] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 1918.322095][T13619] ? __dev_queue_xmit+0x27a/0x3820 [ 1918.322116][T13619] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1918.322146][T13619] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1918.322178][T13619] ? ref_tracker_free+0x693/0x840 [ 1918.322207][T13619] ? __copy_skb_header+0xa3/0x4a0 [ 1918.322242][T13619] ? __pfx_ref_tracker_free+0x10/0x10 [ 1918.322270][T13619] ? __skb_clone+0x63/0x7a0 [ 1918.322306][T13619] ? perf_trace_lock+0xf8/0x3f0 [ 1918.322326][T13619] ? __skb_clone+0x483/0x7a0 [ 1918.322363][T13619] ? __pfx_perf_trace_lock+0x10/0x10 [ 1918.322384][T13619] ? skb_clone+0x246/0x3a0 [ 1918.322408][T13619] ? __netlink_deliver_tap+0x807/0x850 [ 1918.322434][T13619] ? netlink_deliver_tap+0x2e/0x1b0 [ 1918.322468][T13619] ? netlink_deliver_tap+0x2e/0x1b0 [ 1918.322504][T13619] netlink_unicast+0x80f/0x9b0 [ 1918.322539][T13619] ? __pfx_netlink_unicast+0x10/0x10 [ 1918.322560][T13619] ? __alloc_skb+0x193/0x390 [ 1918.322596][T13619] ? netlink_sendmsg+0x650/0xb40 [ 1918.322620][T13619] ? skb_put+0x11b/0x210 [ 1918.322655][T13619] netlink_sendmsg+0x813/0xb40 [ 1918.322693][T13619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1918.322724][T13619] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1918.322757][T13619] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1918.322803][T13619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1918.322828][T13619] ____sys_sendmsg+0xa68/0xad0 [ 1918.322859][T13619] ? __pfx_perf_trace_lock+0x10/0x10 [ 1918.322888][T13619] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1918.322932][T13619] ? import_iovec+0x73/0xa0 [ 1918.322972][T13619] ___sys_sendmsg+0x2a5/0x360 [ 1918.323003][T13619] ? __lock_acquire+0x6b5/0x2cf0 [ 1918.323040][T13619] ? __pfx____sys_sendmsg+0x10/0x10 [ 1918.323098][T13619] ? __fget_files+0x2a/0x420 [ 1918.323142][T13619] ? __fget_files+0x2a/0x420 [ 1918.323169][T13619] ? __fget_files+0x3a0/0x420 [ 1918.323209][T13619] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1918.323246][T13619] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1918.323276][T13619] ? perf_trace_preemptirq_template+0xab/0x340 [ 1918.323312][T13619] ? __pfx_ksys_write+0x10/0x10 [ 1918.323347][T13619] do_syscall_64+0xe2/0xf80 [ 1918.323370][T13619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1918.323390][T13619] ? trace_irq_disable+0x37/0x100 [ 1918.323410][T13619] ? clear_bhb_loop+0x60/0xb0 [ 1918.323438][T13619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1918.323459][T13619] RIP: 0033:0x7fb24039aeb9 [ 1918.323479][T13619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1918.323516][T13619] RSP: 002b:00007fb241180028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1918.323539][T13619] RAX: ffffffffffffffda RBX: 00007fb240615fa0 RCX: 00007fb24039aeb9 [ 1918.323556][T13619] RDX: 0000000000044000 RSI: 0000200000000500 RDI: 0000000000000003 [ 1918.323580][T13619] RBP: 00007fb241180090 R08: 0000000000000000 R09: 0000000000000000 [ 1918.323593][T13619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1918.323607][T13619] R13: 00007fb240616038 R14: 00007fb240615fa0 R15: 00007ffc0862e078 [ 1918.323648][T13619] [ 1918.886463][T13620] netlink: 'syz.7.11633': attribute type 1 has an invalid length. [ 1918.921546][T13620] netlink: 9 bytes leftover after parsing attributes in process `syz.7.11633'. [ 1918.936690][T13617] sctp: [Deprecated]: syz.7.11633 (pid 13617) Use of int in max_burst socket option deprecated. [ 1918.936690][T13617] Use struct sctp_assoc_value instead [ 1919.687715][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1919.695220][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1919.730614][T13650] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1919.737333][T13650] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1919.913524][T13656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11643'. [ 1920.006528][T13656] netlink: 'syz.4.11643': attribute type 10 has an invalid length. [ 1920.253312][T13660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11645'. [ 1920.270071][T13656] team0: Port device wlan1 added [ 1921.445253][T13691] FAULT_INJECTION: forcing a failure. [ 1921.445253][T13691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1921.458580][T13694] netlink: 836 bytes leftover after parsing attributes in process `syz.6.11660'. [ 1921.471623][T13691] CPU: 0 UID: 0 PID: 13691 Comm: syz.8.11658 Not tainted syzkaller #0 PREEMPT(full) [ 1921.471652][T13691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1921.471666][T13691] Call Trace: [ 1921.471676][T13691] [ 1921.471686][T13691] dump_stack_lvl+0xe8/0x150 [ 1921.471722][T13691] should_fail_ex+0x412/0x560 [ 1921.471761][T13691] _copy_to_user+0x31/0xb0 [ 1921.471790][T13691] simple_read_from_buffer+0xe1/0x170 [ 1921.471827][T13691] proc_fail_nth_read+0x1bb/0x230 [ 1921.471856][T13691] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1921.471886][T13691] ? rw_verify_area+0x2a6/0x4d0 [ 1921.471909][T13691] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1921.471935][T13691] vfs_read+0x20c/0xa70 [ 1921.471957][T13691] ? fdget_pos+0x246/0x320 [ 1921.471994][T13691] ? __pfx___mutex_lock+0x10/0x10 [ 1921.472023][T13691] ? __pfx_vfs_read+0x10/0x10 [ 1921.472050][T13691] ? __fget_files+0x2a/0x420 [ 1921.472085][T13691] ? __fget_files+0x3a0/0x420 [ 1921.472115][T13691] ? __fget_files+0x2a/0x420 [ 1921.472165][T13691] ksys_read+0x150/0x270 [ 1921.472190][T13691] ? __pfx_ksys_read+0x10/0x10 [ 1921.472225][T13691] do_syscall_64+0xe2/0xf80 [ 1921.472250][T13691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1921.472269][T13691] ? trace_irq_disable+0x37/0x100 [ 1921.472289][T13691] ? clear_bhb_loop+0x60/0xb0 [ 1921.472314][T13691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1921.472333][T13691] RIP: 0033:0x7f5def35b78e [ 1921.472370][T13691] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1921.472388][T13691] RSP: 002b:00007f5df02b6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1921.472411][T13691] RAX: ffffffffffffffda RBX: 00007f5df02b76c0 RCX: 00007f5def35b78e [ 1921.472427][T13691] RDX: 000000000000000f RSI: 00007f5df02b70a0 RDI: 0000000000000004 [ 1921.472441][T13691] RBP: 00007f5df02b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1921.472454][T13691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1921.472470][T13691] R13: 00007f5def616038 R14: 00007f5def615fa0 R15: 00007ffedf4e3b98 [ 1921.472509][T13691] [ 1922.106104][T13076] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 1922.289730][T13713] netlink: 188 bytes leftover after parsing attributes in process `syz.7.11667'. [ 1922.487243][T13718] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11669'. [ 1923.882502][T13750] sit0: left promiscuous mode [ 1924.099836][T13750] sit0: entered promiscuous mode [ 1924.122536][T13076] Bluetooth: hci3: unexpected subevent 0x10 length: 150 > 2 [ 1924.552527][T13779] netlink: 836 bytes leftover after parsing attributes in process `syz.7.11688'. [ 1924.682553][T13786] sit0: left promiscuous mode [ 1924.909061][T13787] netlink: 'syz.6.11689': attribute type 41 has an invalid length. [ 1925.082377][T13789] sit0: entered promiscuous mode [ 1926.005278][T13797] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11692'. [ 1928.462401][T13076] Bluetooth: hci1: unexpected subevent 0x10 length: 150 > 2 [ 1928.655968][T13813] delete_channel: no stack [ 1929.929448][T13859] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11713'. [ 1929.967011][T13859] netlink: 1 bytes leftover after parsing attributes in process `syz.6.11713'. [ 1930.138175][T13869] netlink: 836 bytes leftover after parsing attributes in process `syz.4.11717'. [ 1930.946004][T13890] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11725'. [ 1932.064275][T13904] netlink: 836 bytes leftover after parsing attributes in process `syz.8.11728'. [ 1932.248880][T13903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11729'. [ 1932.484402][T13909] netlink: 'syz.6.11730': attribute type 2 has an invalid length. [ 1933.106906][T13927] sit0: left promiscuous mode [ 1933.203768][T13931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11739'. [ 1933.207145][T13927] sit0: entered promiscuous mode [ 1933.238295][T13931] netlink: 836 bytes leftover after parsing attributes in process `syz.4.11739'. [ 1933.606533][T13076] Bluetooth: hci1: unexpected subevent 0x12 length: 150 > 5 [ 1934.509111][T13954] netlink: 'syz.4.11748': attribute type 1 has an invalid length. [ 1934.626942][T13962] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11751'. [ 1935.100117][T13991] sit0: left promiscuous mode [ 1935.282417][T13991] sit0: entered promiscuous mode [ 1936.215899][T14025] bpf: Bad value for 'uid' [ 1936.244386][T14025] netlink: 360 bytes leftover after parsing attributes in process `syz.4.11763'. [ 1936.664952][T14046] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11772'. [ 1936.729198][T14046] netlink: 836 bytes leftover after parsing attributes in process `syz.6.11772'. [ 1937.783441][T14061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11775'. [ 1937.834661][T14061] netlink: 'syz.0.11775': attribute type 10 has an invalid length. [ 1937.859951][T14063] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 1938.007205][T14068] bpf: Bad value for 'uid' [ 1938.030217][T14068] netlink: 360 bytes leftover after parsing attributes in process `syz.4.11778'. [ 1938.228886][T14074] netlink: 188 bytes leftover after parsing attributes in process `syz.6.11781'. [ 1938.360228][T14082] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11784'. [ 1938.427946][T14082] netlink: 'syz.8.11784': attribute type 10 has an invalid length. [ 1938.559902][T14082] mac80211_hwsim hwsim95 wlan1: entered promiscuous mode [ 1938.569314][T14082] mac80211_hwsim hwsim95 wlan1: entered allmulticast mode [ 1938.579937][T14086] netlink: 188 bytes leftover after parsing attributes in process `syz.0.11785'. [ 1938.597613][T14082] team0: Port device wlan1 added [ 1939.422726][T14103] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 1939.766875][T14116] bpf: Bad value for 'uid' [ 1939.783927][T14116] netlink: 360 bytes leftover after parsing attributes in process `syz.7.11796'. [ 1940.097403][T14122] netlink: 188 bytes leftover after parsing attributes in process `syz.8.11799'. [ 1940.154868][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1940.454959][T14139] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 1940.493240][T14130] netlink: 188 bytes leftover after parsing attributes in process `syz.7.11802'. [ 1940.754772][T14142] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 1940.778546][T14142] syzkaller0: tun_chr_ioctl cmd 1074025684 [ 1940.794357][T14142] syzkaller0: tun_chr_ioctl cmd 35108 [ 1941.079293][T14158] netlink: 188 bytes leftover after parsing attributes in process `syz.4.11813'. [ 1941.625702][T14180] netlink: 188 bytes leftover after parsing attributes in process `syz.4.11821'. [ 1943.176747][T14227] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1943.183367][T14227] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1943.790826][T14250] netlink: 'syz.6.11845': attribute type 32 has an invalid length. [ 1943.902755][T14253] FAULT_INJECTION: forcing a failure. [ 1943.902755][T14253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1943.929287][T14253] CPU: 1 UID: 0 PID: 14253 Comm: syz.0.11847 Not tainted syzkaller #0 PREEMPT(full) [ 1943.929347][T14253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1943.929361][T14253] Call Trace: [ 1943.929369][T14253] [ 1943.929378][T14253] dump_stack_lvl+0xe8/0x150 [ 1943.929410][T14253] should_fail_ex+0x412/0x560 [ 1943.929445][T14253] _copy_from_user+0x2d/0xb0 [ 1943.929469][T14253] ___sys_sendmsg+0x1c6/0x360 [ 1943.929510][T14253] ? __lock_acquire+0x6b5/0x2cf0 [ 1943.929563][T14253] ? __pfx____sys_sendmsg+0x10/0x10 [ 1943.929631][T14253] ? __fget_files+0x2a/0x420 [ 1943.929659][T14253] ? __fget_files+0x3a0/0x420 [ 1943.929698][T14253] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1943.929732][T14253] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1943.929772][T14253] ? __pfx_ksys_write+0x10/0x10 [ 1943.929806][T14253] do_syscall_64+0xe2/0xf80 [ 1943.929832][T14253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1943.929852][T14253] ? trace_irq_disable+0x37/0x100 [ 1943.929873][T14253] ? clear_bhb_loop+0x60/0xb0 [ 1943.929900][T14253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1943.929921][T14253] RIP: 0033:0x7fab8559aeb9 [ 1943.929943][T14253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1943.929962][T14253] RSP: 002b:00007fab863de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1943.929988][T14253] RAX: ffffffffffffffda RBX: 00007fab85815fa0 RCX: 00007fab8559aeb9 [ 1943.930004][T14253] RDX: 0000000020000080 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1943.930018][T14253] RBP: 00007fab863de090 R08: 0000000000000000 R09: 0000000000000000 [ 1943.930032][T14253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1943.930046][T14253] R13: 00007fab85816038 R14: 00007fab85815fa0 R15: 00007ffc9d1a0cb8 [ 1943.930082][T14253] [ 1944.148893][T14254] __nla_validate_parse: 1 callbacks suppressed [ 1944.148943][T14254] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11848'. [ 1944.644154][T14272] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1944.650716][T14272] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1944.753670][T14278] FAULT_INJECTION: forcing a failure. [ 1944.753670][T14278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1944.784371][T14278] CPU: 0 UID: 0 PID: 14278 Comm: syz.8.11857 Not tainted syzkaller #0 PREEMPT(full) [ 1944.784399][T14278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1944.784412][T14278] Call Trace: [ 1944.784421][T14278] [ 1944.784429][T14278] dump_stack_lvl+0xe8/0x150 [ 1944.784461][T14278] should_fail_ex+0x412/0x560 [ 1944.784495][T14278] _copy_from_user+0x2d/0xb0 [ 1944.784518][T14278] __sys_bpf+0x229/0x950 [ 1944.784542][T14278] ? __pfx___sys_bpf+0x10/0x10 [ 1944.784579][T14278] ? ksys_write+0x242/0x270 [ 1944.784604][T14278] ? __pfx_ksys_write+0x10/0x10 [ 1944.784633][T14278] __x64_sys_bpf+0x7c/0x90 [ 1944.784697][T14278] do_syscall_64+0xe2/0xf80 [ 1944.784724][T14278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1944.784746][T14278] ? trace_irq_disable+0x37/0x100 [ 1944.784768][T14278] ? clear_bhb_loop+0x60/0xb0 [ 1944.784796][T14278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1944.784817][T14278] RIP: 0033:0x7f5def39aeb9 [ 1944.784837][T14278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1944.784857][T14278] RSP: 002b:00007f5df02b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1944.784880][T14278] RAX: ffffffffffffffda RBX: 00007f5def615fa0 RCX: 00007f5def39aeb9 [ 1944.784897][T14278] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 1944.784912][T14278] RBP: 00007f5df02b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1944.784926][T14278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1944.784939][T14278] R13: 00007f5def616038 R14: 00007f5def615fa0 R15: 00007ffedf4e3b98 [ 1944.784975][T14278] [ 1945.082015][T14291] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11861'. [ 1945.517804][T14301] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11866'. [ 1945.598194][T14304] netlink: 'syz.6.11866': attribute type 10 has an invalid length. [ 1945.843693][T14309] sit0: left promiscuous mode [ 1945.993250][T14310] sit0: entered promiscuous mode [ 1946.659261][T14312] sit0: left promiscuous mode [ 1946.859367][T14313] sit0: entered promiscuous mode [ 1947.438359][T14341] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 1947.563181][T14344] bpf: Bad value for 'uid' [ 1947.571097][T14344] netlink: 360 bytes leftover after parsing attributes in process `syz.7.11879'. [ 1947.674368][T14349] netlink: 188 bytes leftover after parsing attributes in process `syz.0.11881'. [ 1947.743543][T14356] netlink: 84 bytes leftover after parsing attributes in process `syz.8.11883'. [ 1947.807004][T14356] netlink: 164 bytes leftover after parsing attributes in process `syz.8.11883'. [ 1947.835850][T14359] netlink: 836 bytes leftover after parsing attributes in process `syz.7.11885'. [ 1948.308154][T14379] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 1948.410292][T13076] Bluetooth: hci3: unexpected subevent 0x12 length: 150 > 5 [ 1948.612866][T14394] netlink: 188 bytes leftover after parsing attributes in process `syz.8.11897'. [ 1948.797939][T14397] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11898'. [ 1948.967537][T13076] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 1949.386235][T14437] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 1949.399656][T14439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11913'. [ 1949.506357][T14445] FAULT_INJECTION: forcing a failure. [ 1949.506357][T14445] name failslab, interval 1, probability 0, space 0, times 0 [ 1949.544991][T14445] CPU: 0 UID: 0 PID: 14445 Comm: syz.8.11916 Not tainted syzkaller #0 PREEMPT(full) [ 1949.545023][T14445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1949.545038][T14445] Call Trace: [ 1949.545047][T14445] [ 1949.545057][T14445] dump_stack_lvl+0xe8/0x150 [ 1949.545093][T14445] should_fail_ex+0x412/0x560 [ 1949.545131][T14445] should_failslab+0xa8/0x100 [ 1949.545162][T14445] __kmalloc_noprof+0xde/0x7e0 [ 1949.545186][T14445] ? kfree+0x4d/0x650 [ 1949.545204][T14445] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1949.545244][T14445] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1949.545280][T14445] ? tomoyo_domain+0xd7/0x130 [ 1949.545321][T14445] ? tomoyo_path_number_perm+0x219/0x630 [ 1949.545349][T14445] tomoyo_path_number_perm+0x246/0x630 [ 1949.545380][T14445] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1949.545407][T14445] ? __lock_acquire+0x6b5/0x2cf0 [ 1949.545442][T14445] ? trace_call_bpf+0x7d0/0xb70 [ 1949.545509][T14445] ? __fget_files+0x2a/0x420 [ 1949.545543][T14445] ? __fget_files+0x2a/0x420 [ 1949.545570][T14445] ? __fget_files+0x3a0/0x420 [ 1949.545597][T14445] ? __fget_files+0x2a/0x420 [ 1949.545631][T14445] security_file_ioctl+0xc3/0x2a0 [ 1949.545660][T14445] __se_sys_ioctl+0x47/0x170 [ 1949.545686][T14445] do_syscall_64+0xe2/0xf80 [ 1949.545712][T14445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1949.545734][T14445] ? trace_irq_disable+0x37/0x100 [ 1949.545755][T14445] ? clear_bhb_loop+0x60/0xb0 [ 1949.545782][T14445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1949.545804][T14445] RIP: 0033:0x7f5def39aeb9 [ 1949.545830][T14445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1949.545850][T14445] RSP: 002b:00007f5df02b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1949.545883][T14445] RAX: ffffffffffffffda RBX: 00007f5def615fa0 RCX: 00007f5def39aeb9 [ 1949.545898][T14445] RDX: 00002000000000c0 RSI: 00000000000089e1 RDI: 0000000000000003 [ 1949.545912][T14445] RBP: 00007f5df02b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1949.545924][T14445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1949.545937][T14445] R13: 00007f5def616038 R14: 00007f5def615fa0 R15: 00007ffedf4e3b98 [ 1949.545970][T14445] [ 1949.545995][T14445] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1949.821650][T14451] netlink: 10 bytes leftover after parsing attributes in process `syz.0.11917'. [ 1949.922351][T13076] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 1950.114496][T14468] netlink: 152 bytes leftover after parsing attributes in process `syz.6.11925'. [ 1950.146370][T13076] Bluetooth: hci4: unexpected subevent 0x12 length: 150 > 5 [ 1950.217282][T14476] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11927'. [ 1950.468856][T14484] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11931'. [ 1950.508347][T14484] netlink: 284 bytes leftover after parsing attributes in process `syz.7.11931'. [ 1950.537875][T14487] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 1950.556801][T14479] syzkaller0: tun_chr_ioctl cmd 1074025684 [ 1950.567671][T14479] ªªªªª(: renamed from veth1_vlan (while UP) [ 1951.286369][T13076] Bluetooth: hci4: unexpected subevent 0x12 length: 150 > 5 [ 1951.699911][T14528] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11941'. [ 1952.065202][T14540] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11944'. [ 1952.760320][T13076] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 1953.336307][T14583] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1953.342855][T14583] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1954.563314][T13076] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 1955.185636][T14642] netlink: 'syz.6.11983': attribute type 1 has an invalid length. [ 1955.225506][T14642] netlink: 9 bytes leftover after parsing attributes in process `syz.6.11983'. [ 1955.237001][T14641] sctp: [Deprecated]: syz.6.11983 (pid 14641) Use of int in max_burst socket option deprecated. [ 1955.237001][T14641] Use struct sctp_assoc_value instead [ 1956.120170][T14665] netlink: 188 bytes leftover after parsing attributes in process `syz.4.11991'. [ 1956.216961][T13076] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 1956.346057][T14673] netlink: 188 bytes leftover after parsing attributes in process `syz.6.11995'. [ 1956.542808][T14679] proc: Unknown parameter 'fowner<00000000000000000000' [ 1956.685918][T14684] netlink: 'syz.6.11999': attribute type 1 has an invalid length. [ 1956.701805][T14684] netlink: 9 bytes leftover after parsing attributes in process `syz.6.11999'. [ 1956.741610][T14684] sctp: [Deprecated]: syz.6.11999 (pid 14684) Use of int in max_burst socket option deprecated. [ 1956.741610][T14684] Use struct sctp_assoc_value instead [ 1957.113827][T14689] lo speed is unknown, defaulting to 1000 [ 1957.586533][T14709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12007'. [ 1957.757230][T13076] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 1958.024303][T14720] netlink: 188 bytes leftover after parsing attributes in process `syz.6.12009'. [ 1958.380349][T14724] lo speed is unknown, defaulting to 1000 [ 1958.401963][T14739] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1958.408430][T14739] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1958.857864][T14750] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12020'. [ 1959.567709][T13076] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 1959.803468][T14771] netlink: 'syz.4.12024': attribute type 4 has an invalid length. [ 1959.833724][T14771] netlink: 168 bytes leftover after parsing attributes in process `syz.4.12024'. [ 1959.885778][T14764] netlink: 'syz.7.12025': attribute type 10 has an invalid length. [ 1959.896995][T14764] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 1960.269807][T14777] netlink: 188 bytes leftover after parsing attributes in process `syz.6.12028'. [ 1960.806718][T14788] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12031'. [ 1961.526868][T13076] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 1962.014636][T14817] bpf: Bad value for 'gid' [ 1962.063913][T14810] netlink: 188 bytes leftover after parsing attributes in process `syz.0.12041'. [ 1962.082890][T14817] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12043'. [ 1962.132047][T14817] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12043'. [ 1963.002689][T14841] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 1963.031762][T14842] syzkaller0: tun_chr_ioctl cmd 35108 [ 1963.092335][T14834] ªªªªª(: renamed from veth1_vlan (while UP) [ 1963.892825][T13076] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 1964.165124][T14864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12059'. [ 1964.871090][T14886] netlink: 56 bytes leftover after parsing attributes in process `syz.4.12068'. [ 1964.899770][T14886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12068'. [ 1964.940112][T14886] netlink: 31 bytes leftover after parsing attributes in process `syz.4.12068'. [ 1965.033642][T14886] netlink: 'syz.4.12068': attribute type 3 has an invalid length. [ 1965.099994][T14886] netlink: 'syz.4.12068': attribute type 2 has an invalid length. [ 1965.149135][T14886] netlink: 31 bytes leftover after parsing attributes in process `syz.4.12068'. [ 1965.260874][T14892] netlink: 'syz.6.12070': attribute type 21 has an invalid length. [ 1965.358418][T14902] FAULT_INJECTION: forcing a failure. [ 1965.358418][T14902] name failslab, interval 1, probability 0, space 0, times 0 [ 1965.377247][T14902] CPU: 1 UID: 0 PID: 14902 Comm: syz.0.12073 Not tainted syzkaller #0 PREEMPT(full) [ 1965.377278][T14902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1965.377304][T14902] Call Trace: [ 1965.377324][T14902] [ 1965.377333][T14902] dump_stack_lvl+0xe8/0x150 [ 1965.377366][T14902] should_fail_ex+0x412/0x560 [ 1965.377403][T14902] should_failslab+0xa8/0x100 [ 1965.377432][T14902] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 1965.377457][T14902] ? perf_event_alloc+0x1cb/0x2e40 [ 1965.377508][T14902] perf_event_alloc+0x1cb/0x2e40 [ 1965.377539][T14902] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1965.377566][T14902] ? __pfx_perf_trace_lock+0x10/0x10 [ 1965.377587][T14902] ? __fget_files+0x2a/0x420 [ 1965.377625][T14902] ? __pfx_perf_event_alloc+0x10/0x10 [ 1965.377660][T14902] ? find_lively_task_by_vpid+0x19/0x290 [ 1965.377683][T14902] ? find_lively_task_by_vpid+0x19/0x290 [ 1965.377704][T14902] ? find_lively_task_by_vpid+0x19/0x290 [ 1965.377734][T14902] __se_sys_perf_event_open+0x7a9/0x1d60 [ 1965.377789][T14902] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 1965.377833][T14902] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1965.377860][T14902] ? __pfx_ksys_write+0x10/0x10 [ 1965.377892][T14902] ? __x64_sys_perf_event_open+0x20/0xc0 [ 1965.377922][T14902] do_syscall_64+0xe2/0xf80 [ 1965.377949][T14902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1965.377971][T14902] ? trace_irq_disable+0x37/0x100 [ 1965.377992][T14902] ? clear_bhb_loop+0x60/0xb0 [ 1965.378019][T14902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1965.378041][T14902] RIP: 0033:0x7fab8559aeb9 [ 1965.378061][T14902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1965.378080][T14902] RSP: 002b:00007fab863de028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1965.378104][T14902] RAX: ffffffffffffffda RBX: 00007fab85815fa0 RCX: 00007fab8559aeb9 [ 1965.378119][T14902] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000040 [ 1965.378134][T14902] RBP: 00007fab863de090 R08: 0000000000000000 R09: 0000000000000000 [ 1965.378148][T14902] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1965.378162][T14902] R13: 00007fab85816038 R14: 00007fab85815fa0 R15: 00007ffc9d1a0cb8 [ 1965.378201][T14902] [ 1965.409178][T14892] netlink: 360 bytes leftover after parsing attributes in process `syz.6.12070'. [ 1965.959214][T14913] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1965.965832][T14913] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1966.004359][T14905] ªªªªª(: renamed from veth1_vlan (while UP) [ 1966.077830][T14916] netlink: 836 bytes leftover after parsing attributes in process `syz.0.12079'. [ 1967.696167][T14946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12089'. [ 1968.167680][T14970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12095'. [ 1968.487710][T14967] netlink: 'syz.6.12096': attribute type 1 has an invalid length. [ 1969.010524][T14982] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1969.017040][T14982] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1969.230172][T14991] netlink: 312 bytes leftover after parsing attributes in process `syz.8.12107'. [ 1969.469843][T14996] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12109'. [ 1969.691781][T15009] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1969.698299][T15009] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1969.897961][T15019] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12115'. [ 1969.918973][T15019] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12115'. [ 1970.482775][T15033] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 1970.527919][T15032] lo speed is unknown, defaulting to 1000 [ 1971.181697][T15043] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12126'. [ 1971.911856][T15055] netlink: 'syz.6.12131': attribute type 12 has an invalid length. [ 1971.943757][T15055] netlink: 132 bytes leftover after parsing attributes in process `syz.6.12131'. [ 1973.646788][T15091] FAULT_INJECTION: forcing a failure. [ 1973.646788][T15091] name failslab, interval 1, probability 0, space 0, times 0 [ 1973.699537][T15091] CPU: 0 UID: 0 PID: 15091 Comm: syz.0.12144 Not tainted syzkaller #0 PREEMPT(full) [ 1973.699568][T15091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1973.699582][T15091] Call Trace: [ 1973.699592][T15091] [ 1973.699602][T15091] dump_stack_lvl+0xe8/0x150 [ 1973.699637][T15091] should_fail_ex+0x412/0x560 [ 1973.699674][T15091] should_failslab+0xa8/0x100 [ 1973.699716][T15091] kmem_cache_alloc_noprof+0x87/0x6e0 [ 1973.699741][T15091] ? sk_prot_alloc+0x57/0x210 [ 1973.699779][T15091] sk_prot_alloc+0x57/0x210 [ 1973.699808][T15091] ? sk_alloc+0x27/0x390 [ 1973.699840][T15091] sk_alloc+0x3a/0x390 [ 1973.699875][T15091] inet_create+0x7a0/0x1000 [ 1973.699898][T15091] ? inet_create+0x9c/0x1000 [ 1973.699925][T15091] __sock_create+0x4b2/0x9d0 [ 1973.699965][T15091] mptcp_subflow_create_socket+0xfb/0x800 [ 1973.700005][T15091] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 1973.700035][T15091] ? perf_trace_preemptirq_template+0x268/0x340 [ 1973.700064][T15091] ? __local_bh_enable_ip+0x71/0x130 [ 1973.700092][T15091] __mptcp_nmpc_sk+0x155/0x790 [ 1973.700127][T15091] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 1973.700162][T15091] ? __local_bh_enable_ip+0xd0/0x130 [ 1973.700189][T15091] mptcp_setsockopt+0x10fc/0x36a0 [ 1973.700220][T15091] ? aa_sk_perm+0x15a/0x960 [ 1973.700258][T15091] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 1973.700295][T15091] ? __pfx_aa_sk_perm+0x10/0x10 [ 1973.700327][T15091] ? __fget_files+0x2a/0x420 [ 1973.700354][T15091] ? aa_sock_opt_perm+0xff/0x1a0 [ 1973.700388][T15091] ? sock_common_setsockopt+0x36/0xc0 [ 1973.700414][T15091] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1973.700443][T15091] do_sock_setsockopt+0x17c/0x1b0 [ 1973.700480][T15091] __x64_sys_setsockopt+0x13d/0x1b0 [ 1973.700520][T15091] do_syscall_64+0xe2/0xf80 [ 1973.700546][T15091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1973.700568][T15091] ? trace_irq_disable+0x37/0x100 [ 1973.700589][T15091] ? clear_bhb_loop+0x60/0xb0 [ 1973.700617][T15091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1973.700639][T15091] RIP: 0033:0x7fab8559aeb9 [ 1973.700660][T15091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1973.700698][T15091] RSP: 002b:00007fab863de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1973.700721][T15091] RAX: ffffffffffffffda RBX: 00007fab85815fa0 RCX: 00007fab8559aeb9 [ 1973.700737][T15091] RDX: 0000000000000017 RSI: 0000000000000006 RDI: 0000000000000003 [ 1973.700750][T15091] RBP: 00007fab863de090 R08: 0000000000000004 R09: 0000000000000000 [ 1973.700764][T15091] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 1973.700778][T15091] R13: 00007fab85816038 R14: 00007fab85815fa0 R15: 00007ffc9d1a0cb8 [ 1973.700813][T15091] [ 1974.449318][T15105] netlink: 360 bytes leftover after parsing attributes in process `syz.7.12148'. [ 1974.979159][T15124] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12153'. [ 1975.597425][T15151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12159'. [ 1975.889739][T15158] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12162'. [ 1976.208660][T15169] netlink: 188 bytes leftover after parsing attributes in process `syz.8.12165'. [ 1976.543001][T15187] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12174'. [ 1976.604277][T15190] netlink: 112 bytes leftover after parsing attributes in process `syz.7.12171'. [ 1977.110170][T15194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12176'. [ 1977.424985][T15199] netlink: 'syz.8.12177': attribute type 21 has an invalid length. [ 1977.743725][T15192] netlink: 830 bytes leftover after parsing attributes in process `syz.6.12175'. [ 1977.754951][T15199] netlink: 164 bytes leftover after parsing attributes in process `syz.8.12177'. [ 1978.288643][T15219] netlink: 188 bytes leftover after parsing attributes in process `syz.7.12184'. [ 1978.369492][T15226] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12186'. [ 1978.665994][T15236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12188'. [ 1978.916910][T15242] netlink: 'syz.6.12192': attribute type 10 has an invalid length. [ 1978.933306][T15242] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 1978.941546][T15242] bridge0: port 3(netdevsim0) entered disabled state [ 1978.994879][T15248] netlink: 'syz.4.12194': attribute type 21 has an invalid length. [ 1979.011493][T15248] IPv6: NLM_F_CREATE should be specified when creating new route [ 1979.021204][T15248] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12194'. [ 1981.117655][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.126104][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1981.948672][T15265] __nla_validate_parse: 1 callbacks suppressed [ 1981.948688][T15265] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12198'. [ 1982.637515][T15280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12204'. [ 1982.652412][T18922] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 1982.773416][T15286] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 1983.394269][T15303] netlink: 188 bytes leftover after parsing attributes in process `syz.8.12214'. [ 1983.790413][T15322] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 1983.791976][T18922] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 1984.296716][T15341] netlink: 'syz.7.12228': attribute type 1 has an invalid length. [ 1985.037656][T15353] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 1985.048208][T15353] syzkaller0: tun_chr_ioctl cmd 1074025684 [ 1985.063370][T15353] syzkaller0: tun_chr_ioctl cmd 35108 [ 1985.086902][T15353] ªªªªª(: renamed from veth1_vlan (while UP) [ 1985.248721][T15356] syzkaller0: entered promiscuous mode [ 1985.255963][T15364] netlink: 'syz.0.12237': attribute type 16 has an invalid length. [ 1985.264591][T15356] syzkaller0: entered allmulticast mode [ 1985.270262][T15364] netlink: 'syz.0.12237': attribute type 17 has an invalid length. [ 1985.317625][T18922] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 1987.310799][T15381] netlink: 152 bytes leftover after parsing attributes in process `syz.6.12242'. [ 1988.659088][T15412] netlink: 836 bytes leftover after parsing attributes in process `syz.0.12253'. [ 1988.809984][T15417] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12256'. [ 1989.926667][T15423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12257'. [ 1991.670602][T15446] netlink: 'syz.4.12263': attribute type 1 has an invalid length. [ 1991.699325][T15446] netlink: 9 bytes leftover after parsing attributes in process `syz.4.12263'. [ 1991.914224][T15453] FAULT_INJECTION: forcing a failure. [ 1991.914224][T15453] name failslab, interval 1, probability 0, space 0, times 0 [ 1991.947786][T15453] CPU: 1 UID: 0 PID: 15453 Comm: syz.0.12266 Not tainted syzkaller #0 PREEMPT(full) [ 1991.947818][T15453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1991.947832][T15453] Call Trace: [ 1991.947842][T15453] [ 1991.947852][T15453] dump_stack_lvl+0xe8/0x150 [ 1991.947890][T15453] should_fail_ex+0x412/0x560 [ 1991.947931][T15453] should_failslab+0xa8/0x100 [ 1991.947964][T15453] __kmalloc_noprof+0xde/0x7e0 [ 1991.947990][T15453] ? tomoyo_encode+0x28b/0x550 [ 1991.948032][T15453] tomoyo_encode+0x28b/0x550 [ 1991.948076][T15453] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1991.948135][T15453] ? tomoyo_path_number_perm+0x219/0x630 [ 1991.948165][T15453] tomoyo_path_number_perm+0x246/0x630 [ 1991.948199][T15453] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1991.948226][T15453] ? __lock_acquire+0x6b5/0x2cf0 [ 1991.948264][T15453] ? perf_trace_lock_acquire+0x102/0x420 [ 1991.948338][T15453] ? __fget_files+0x2a/0x420 [ 1991.948372][T15453] ? __fget_files+0x2a/0x420 [ 1991.948400][T15453] ? __fget_files+0x3a0/0x420 [ 1991.948430][T15453] ? __fget_files+0x2a/0x420 [ 1991.948466][T15453] security_file_ioctl+0xc3/0x2a0 [ 1991.948498][T15453] __se_sys_ioctl+0x47/0x170 [ 1991.948526][T15453] do_syscall_64+0xe2/0xf80 [ 1991.948553][T15453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1991.948573][T15453] ? trace_irq_disable+0x37/0x100 [ 1991.948596][T15453] ? clear_bhb_loop+0x60/0xb0 [ 1991.948625][T15453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1991.948646][T15453] RIP: 0033:0x7fab8559aeb9 [ 1991.948667][T15453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1991.948686][T15453] RSP: 002b:00007fab863de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1991.948711][T15453] RAX: ffffffffffffffda RBX: 00007fab85815fa0 RCX: 00007fab8559aeb9 [ 1991.948727][T15453] RDX: 0000000000000000 RSI: 0000000000002401 RDI: 0000000000000003 [ 1991.948741][T15453] RBP: 00007fab863de090 R08: 0000000000000000 R09: 0000000000000000 [ 1991.948755][T15453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1991.948768][T15453] R13: 00007fab85816038 R14: 00007fab85815fa0 R15: 00007ffc9d1a0cb8 [ 1991.948812][T15453] [ 1992.177093][T15453] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1992.348321][T15457] netlink: 188 bytes leftover after parsing attributes in process `syz.8.12267'. [ 1993.407709][T15496] netlink: 'syz.0.12275': attribute type 10 has an invalid length. [ 1993.450077][T15496] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1994.267410][T15516] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12281'. [ 1994.416961][T15522] bpf: Bad value for 'uid' [ 1994.432786][T15522] netlink: 360 bytes leftover after parsing attributes in process `syz.8.12283'. [ 1994.486761][T15525] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 1994.520208][T15525] syzkaller0: tun_chr_ioctl cmd 1074025684 [ 1994.527457][T15525] syzkaller0: tun_chr_ioctl cmd 35108 [ 1994.858405][T15536] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12287'. [ 1995.657391][T15549] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12292'. [ 1995.790331][T15555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12293'. [ 1996.118517][T15567] bpf: Bad value for 'uid' [ 1996.146025][T15559] netlink: 360 bytes leftover after parsing attributes in process `syz.0.12297'. [ 1996.280113][T15562] netlink: 'syz.4.12295': attribute type 10 has an invalid length. [ 1996.331064][T15562] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1997.145897][T15577] netlink: 836 bytes leftover after parsing attributes in process `syz.7.12300'. [ 1997.156064][T15577] netlink: 576 bytes leftover after parsing attributes in process `syz.7.12300'. [ 1997.334001][T15580] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 1997.639337][T15584] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 1997.698845][T15584] syzkaller0: tun_chr_ioctl cmd 1074025684 [ 1997.735433][T15584] syzkaller0: tun_chr_ioctl cmd 35108 [ 1998.146529][T15594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12306'. [ 1998.949421][T15613] netlink: 1064 bytes leftover after parsing attributes in process `syz.0.12313'. [ 1998.985997][T15613] netlink: 576 bytes leftover after parsing attributes in process `syz.0.12313'. [ 1999.210292][T15617] netlink: 836 bytes leftover after parsing attributes in process `syz.6.12315'. [ 1999.228960][T15617] netlink: 576 bytes leftover after parsing attributes in process `syz.6.12315'. [ 1999.570610][T15627] bpf: Bad value for 'uid' [ 1999.608712][T15627] netlink: 360 bytes leftover after parsing attributes in process `syz.8.12319'. [ 1999.700190][T15629] netlink: 188 bytes leftover after parsing attributes in process `syz.4.12317'. [ 2000.148686][T15648] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.12326'. [ 2000.240562][T15656] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 2000.265834][T15651] syzkaller0: tun_chr_ioctl cmd 1074025684 [ 2000.284627][T15651] syzkaller0: tun_chr_ioctl cmd 35108 [ 2000.382102][T18922] Bluetooth: hci1: unexpected subevent 0x12 length: 150 > 5 [ 2000.710449][T15664] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12330'. [ 2000.770465][T15663] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.12329'. [ 2001.600943][T15691] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 2002.301369][T15708] openvswitch: netlink: Message has 576 unknown bytes. [ 2002.312099][T15709] openvswitch: netlink: Message has 576 unknown bytes. [ 2002.319029][T15709] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2002.334746][T15708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2002.815614][T15726] netlink: 'syz.6.12354': attribute type 1 has an invalid length. [ 2003.609882][T15751] netlink: 'syz.0.12365': attribute type 1 has an invalid length. [ 2003.610467][T15750] __nla_validate_parse: 8 callbacks suppressed [ 2003.610529][T15750] netlink: 360 bytes leftover after parsing attributes in process `syz.7.12364'. [ 2003.716442][T15755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12367'. [ 2003.920105][T15763] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12370'. [ 2004.402314][T15784] FAULT_INJECTION: forcing a failure. [ 2004.402314][T15784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2004.417118][T15784] CPU: 1 UID: 0 PID: 15784 Comm: syz.0.12378 Not tainted syzkaller #0 PREEMPT(full) [ 2004.417147][T15784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2004.417160][T15784] Call Trace: [ 2004.417169][T15784] [ 2004.417178][T15784] dump_stack_lvl+0xe8/0x150 [ 2004.417211][T15784] should_fail_ex+0x412/0x560 [ 2004.417247][T15784] _copy_from_user+0x2d/0xb0 [ 2004.417278][T15784] ___sys_sendmsg+0x1c6/0x360 [ 2004.417310][T15784] ? __lock_acquire+0x6b5/0x2cf0 [ 2004.417347][T15784] ? __pfx____sys_sendmsg+0x10/0x10 [ 2004.417404][T15784] ? __fget_files+0x2a/0x420 [ 2004.417447][T15784] ? __fget_files+0x2a/0x420 [ 2004.417473][T15784] ? __fget_files+0x3a0/0x420 [ 2004.417512][T15784] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2004.417542][T15784] ? perf_trace_run_bpf_submit+0x100/0x170 [ 2004.417570][T15784] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2004.417613][T15784] ? __pfx_ksys_write+0x10/0x10 [ 2004.417650][T15784] do_syscall_64+0xe2/0xf80 [ 2004.417675][T15784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2004.417695][T15784] ? trace_irq_disable+0x37/0x100 [ 2004.417716][T15784] ? clear_bhb_loop+0x60/0xb0 [ 2004.417743][T15784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2004.417763][T15784] RIP: 0033:0x7fab8559aeb9 [ 2004.417782][T15784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2004.417801][T15784] RSP: 002b:00007fab863de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2004.417823][T15784] RAX: ffffffffffffffda RBX: 00007fab85815fa0 RCX: 00007fab8559aeb9 [ 2004.417839][T15784] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 2004.417853][T15784] RBP: 00007fab863de090 R08: 0000000000000000 R09: 0000000000000000 [ 2004.417866][T15784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2004.417877][T15784] R13: 00007fab85816038 R14: 00007fab85815fa0 R15: 00007ffc9d1a0cb8 [ 2004.417914][T15784] [ 2004.803422][T15787] netlink: 360 bytes leftover after parsing attributes in process `syz.8.12379'. [ 2004.964576][T18922] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 2005.113477][T15799] netlink: 'syz.8.12384': attribute type 2 has an invalid length. [ 2005.194586][T15802] netlink: 'syz.8.12384': attribute type 2 has an invalid length. [ 2005.898503][T15810] FAULT_INJECTION: forcing a failure. [ 2005.898503][T15810] name failslab, interval 1, probability 0, space 0, times 0 [ 2005.912191][T15810] CPU: 0 UID: 0 PID: 15810 Comm: syz.8.12386 Not tainted syzkaller #0 PREEMPT(full) [ 2005.912221][T15810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2005.912235][T15810] Call Trace: [ 2005.912244][T15810] [ 2005.912255][T15810] dump_stack_lvl+0xe8/0x150 [ 2005.912292][T15810] should_fail_ex+0x412/0x560 [ 2005.912331][T15810] should_failslab+0xa8/0x100 [ 2005.912364][T15810] __kmalloc_cache_noprof+0x83/0x6e0 [ 2005.912393][T15810] ? sctp_add_bind_addr+0x8c/0x370 [ 2005.912429][T15810] sctp_add_bind_addr+0x8c/0x370 [ 2005.912462][T15810] sctp_copy_local_addr_list+0x314/0x4f0 [ 2005.912494][T15810] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 2005.912521][T15810] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 2005.912554][T15810] ? sctp_v4_is_any+0x35/0x60 [ 2005.912580][T15810] ? sctp_copy_one_addr+0x93/0x360 [ 2005.912612][T15810] sctp_bind_addr_copy+0xb3/0x3c0 [ 2005.912640][T15810] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 2005.912693][T15810] sctp_connect_new_asoc+0x2ff/0x6b0 [ 2005.912727][T15810] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 2005.912769][T15810] ? __sanitizer_cov_trace_switch+0x7/0x130 [ 2005.912789][T15810] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 2005.912824][T15810] __sctp_connect+0x5cb/0xdc0 [ 2005.912893][T15810] ? __pfx___sctp_connect+0x10/0x10 [ 2005.912923][T15810] ? security_sctp_bind_connect+0x7e/0x2c0 [ 2005.912955][T15810] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 2005.912985][T15810] sctp_setsockopt+0x708/0x12c0 [ 2005.913014][T15810] ? sock_common_setsockopt+0x36/0xc0 [ 2005.913040][T15810] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2005.913071][T15810] do_sock_setsockopt+0x17c/0x1b0 [ 2005.913111][T15810] __x64_sys_setsockopt+0x13d/0x1b0 [ 2005.913158][T15810] do_syscall_64+0xe2/0xf80 [ 2005.913185][T15810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2005.913208][T15810] ? clear_bhb_loop+0x60/0xb0 [ 2005.913237][T15810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2005.913259][T15810] RIP: 0033:0x7f5def39aeb9 [ 2005.913279][T15810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2005.913298][T15810] RSP: 002b:00007f5df02b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2005.913321][T15810] RAX: ffffffffffffffda RBX: 00007f5def615fa0 RCX: 00007f5def39aeb9 [ 2005.913338][T15810] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000004 [ 2005.913351][T15810] RBP: 00007f5df02b7090 R08: 0000000000000010 R09: 0000000000000000 [ 2005.913365][T15810] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2005.913378][T15810] R13: 00007f5def616038 R14: 00007f5def615fa0 R15: 00007ffedf4e3b98 [ 2005.913422][T15810] [ 2006.278789][T15814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12388'. [ 2006.721872][T15828] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 2006.752625][T15828] syzkaller0: tun_chr_ioctl cmd 1074025684 [ 2006.822222][T15820] syzkaller0: tun_chr_ioctl cmd 35108 [ 2006.848604][T15832] netlink: 360 bytes leftover after parsing attributes in process `syz.4.12393'. [ 2007.496813][T15847] lo speed is unknown, defaulting to 1000 [ 2008.115544][T15873] netlink: 360 bytes leftover after parsing attributes in process `syz.4.12407'. [ 2008.233282][T15880] FAULT_INJECTION: forcing a failure. [ 2008.233282][T15880] name failslab, interval 1, probability 0, space 0, times 0 [ 2008.253451][T15877] netlink: 'syz.7.12409': attribute type 2 has an invalid length. [ 2008.275152][T15880] CPU: 0 UID: 0 PID: 15880 Comm: syz.8.12410 Not tainted syzkaller #0 PREEMPT(full) [ 2008.275185][T15880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2008.275200][T15880] Call Trace: [ 2008.275209][T15880] [ 2008.275220][T15880] dump_stack_lvl+0xe8/0x150 [ 2008.275256][T15880] should_fail_ex+0x412/0x560 [ 2008.275295][T15880] should_failslab+0xa8/0x100 [ 2008.275326][T15880] __kmalloc_noprof+0xde/0x7e0 [ 2008.275351][T15880] ? tomoyo_encode+0x28b/0x550 [ 2008.275391][T15880] tomoyo_encode+0x28b/0x550 [ 2008.275432][T15880] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2008.275480][T15880] ? tomoyo_path_number_perm+0x219/0x630 [ 2008.275509][T15880] tomoyo_path_number_perm+0x246/0x630 [ 2008.275542][T15880] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2008.275568][T15880] ? __lock_acquire+0x6b5/0x2cf0 [ 2008.275620][T15880] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 2008.275686][T15880] ? __fget_files+0x2a/0x420 [ 2008.275720][T15880] ? __fget_files+0x2a/0x420 [ 2008.275749][T15880] ? __fget_files+0x3a0/0x420 [ 2008.275777][T15880] ? __fget_files+0x2a/0x420 [ 2008.275813][T15880] security_file_ioctl+0xc3/0x2a0 [ 2008.275844][T15880] __se_sys_ioctl+0x47/0x170 [ 2008.275885][T15880] do_syscall_64+0xe2/0xf80 [ 2008.275911][T15880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2008.275933][T15880] ? trace_irq_disable+0x37/0x100 [ 2008.275956][T15880] ? clear_bhb_loop+0x60/0xb0 [ 2008.275983][T15880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2008.276005][T15880] RIP: 0033:0x7f5def39aeb9 [ 2008.276026][T15880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2008.276045][T15880] RSP: 002b:00007f5df02b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2008.276068][T15880] RAX: ffffffffffffffda RBX: 00007f5def615fa0 RCX: 00007f5def39aeb9 [ 2008.276085][T15880] RDX: 0000200000000040 RSI: 000000004030582a RDI: 0000000000000003 [ 2008.276100][T15880] RBP: 00007f5df02b7090 R08: 0000000000000000 R09: 0000000000000000 [ 2008.276113][T15880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2008.276126][T15880] R13: 00007f5def616038 R14: 00007f5def615fa0 R15: 00007ffedf4e3b98 [ 2008.276167][T15880] [ 2008.276406][T15880] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2009.616639][T15906] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12418'. [ 2009.822168][T15918] netlink: 360 bytes leftover after parsing attributes in process `syz.0.12421'. [ 2009.968989][T15924] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 2010.097062][T15927] netlink: 'syz.4.12424': attribute type 1 has an invalid length. [ 2010.169431][T18922] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 2010.279747][T15933] netlink: 836 bytes leftover after parsing attributes in process `syz.6.12427'. [ 2010.967701][T15943] lo speed is unknown, defaulting to 1000 [ 2011.160826][T15948] netlink: 'syz.7.12431': attribute type 10 has an invalid length. [ 2011.497203][T15955] netlink: 836 bytes leftover after parsing attributes in process `syz.8.12433'. [ 2011.508626][T15955] netlink: 328 bytes leftover after parsing attributes in process `syz.8.12433'. [ 2011.731910][T15963] netlink: 'syz.6.12435': attribute type 21 has an invalid length. [ 2011.770591][T15963] netlink: 128 bytes leftover after parsing attributes in process `syz.6.12435'. [ 2011.866460][T15963] netlink: 3 bytes leftover after parsing attributes in process `syz.6.12435'. [ 2012.052372][T15973] netlink: 836 bytes leftover after parsing attributes in process `syz.4.12439'. [ 2012.232810][T18922] Bluetooth: hci0: command 0x0406 tx timeout [ 2012.287617][T15975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12440'. [ 2012.378134][T15985] netlink: 836 bytes leftover after parsing attributes in process `syz.6.12444'. [ 2013.068574][T15994] lo speed is unknown, defaulting to 1000 [ 2013.333123][T16009] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 2013.438573][T16012] netlink: 'syz.7.12452': attribute type 2 has an invalid length. [ 2013.706313][T16014] netlink: 'syz.0.12453': attribute type 10 has an invalid length. [ 2014.312706][T18922] Bluetooth: hci0: command 0x0406 tx timeout [ 2014.607685][T16020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2014.834283][T16040] __nla_validate_parse: 2 callbacks suppressed [ 2014.834305][T16040] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12460'. [ 2014.903283][T16038] netlink: 188 bytes leftover after parsing attributes in process `syz.0.12459'. [ 2015.146469][T16052] netlink: 836 bytes leftover after parsing attributes in process `syz.6.12464'. [ 2015.654090][T16064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12468'. [ 2015.676942][T16071] netlink: 'syz.8.12471': attribute type 2 has an invalid length. [ 2015.747513][T16064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12468'. [ 2015.875841][T16067] netlink: 'syz.7.12469': attribute type 10 has an invalid length. [ 2016.486652][T16085] netlink: 68 bytes leftover after parsing attributes in process `syz.6.12474'. [ 2016.543731][T16095] netlink: 360 bytes leftover after parsing attributes in process `syz.4.12476'. [ 2016.563089][T16085] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12474'. [ 2016.592720][T16094] openvswitch: netlink: Flow actions attr not present in new flow. [ 2016.849079][T16106] netlink: 836 bytes leftover after parsing attributes in process `syz.4.12484'. [ 2016.895532][T16108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12483'. [ 2016.934286][T16109] netlink: 'syz.8.12482': attribute type 2 has an invalid length. [ 2017.435456][T16114] netlink: 'syz.7.12485': attribute type 10 has an invalid length. [ 2019.882440][T16180] __nla_validate_parse: 8 callbacks suppressed [ 2019.882464][T16180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12505'. [ 2020.528595][T16200] netlink: 836 bytes leftover after parsing attributes in process `syz.7.12516'. [ 2021.377148][T16215] lo speed is unknown, defaulting to 1000 [ 2021.716727][T16228] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 2021.994055][T16240] netlink: 836 bytes leftover after parsing attributes in process `syz.0.12529'. [ 2022.294220][T16246] netlink: 'syz.4.12530': attribute type 2 has an invalid length. [ 2023.040399][T16262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12533'. [ 2023.910408][T16274] netlink: 188 bytes leftover after parsing attributes in process `syz.4.12541'. [ 2024.012031][T16282] netlink: 836 bytes leftover after parsing attributes in process `syz.8.12543'. [ 2024.233962][T13076] Bluetooth: hci3: command 0x0406 tx timeout [ 2024.586799][T16296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12548'. [ 2024.808708][T16300] netlink: 14601 bytes leftover after parsing attributes in process `syz.8.12549'. [ 2024.903120][T16303] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.12552'. [ 2024.992736][T16306] netlink: 'syz.4.12551': attribute type 10 has an invalid length. [ 2025.069042][T16315] netlink: 152 bytes leftover after parsing attributes in process `syz.6.12554'. [ 2025.551934][T16324] netlink: 132 bytes leftover after parsing attributes in process `syz.6.12559'. [ 2025.552494][T16321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12557'. [ 2025.820730][T16336] FAULT_INJECTION: forcing a failure. [ 2025.820730][T16336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2025.836703][T16336] CPU: 0 UID: 0 PID: 16336 Comm: syz.7.12563 Not tainted syzkaller #0 PREEMPT(full) [ 2025.836734][T16336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2025.836749][T16336] Call Trace: [ 2025.836758][T16336] [ 2025.836769][T16336] dump_stack_lvl+0xe8/0x150 [ 2025.836804][T16336] should_fail_ex+0x412/0x560 [ 2025.836842][T16336] _copy_to_user+0x31/0xb0 [ 2025.836869][T16336] bpf_verifier_vlog+0x520/0x8f0 [ 2025.836909][T16336] __btf_verifier_log+0xe2/0x140 [ 2025.836949][T16336] ? __pfx___btf_verifier_log+0x10/0x10 [ 2025.836979][T16336] ? __might_fault+0xaf/0x130 [ 2025.837009][T16336] ? btf_parse_hdr+0x1e2/0x760 [ 2025.837039][T16336] btf_parse_hdr+0x366/0x760 [ 2025.837071][T16336] btf_new_fd+0x385/0xd10 [ 2025.837107][T16336] ? __pfx_btf_new_fd+0x10/0x10 [ 2025.837135][T16336] ? bpf_token_put+0x143/0x160 [ 2025.837172][T16336] ? bpf_btf_load+0x126/0x190 [ 2025.837202][T16336] __sys_bpf+0x4e5/0x950 [ 2025.837228][T16336] ? __pfx___sys_bpf+0x10/0x10 [ 2025.837274][T16336] ? do_syscall_64+0x9f/0xf80 [ 2025.837303][T16336] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2025.837331][T16336] ? __pfx_ksys_write+0x10/0x10 [ 2025.837365][T16336] __x64_sys_bpf+0x7c/0x90 [ 2025.837400][T16336] do_syscall_64+0xe2/0xf80 [ 2025.837427][T16336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2025.837450][T16336] ? trace_irq_disable+0x37/0x100 [ 2025.837472][T16336] ? clear_bhb_loop+0x60/0xb0 [ 2025.837500][T16336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2025.837522][T16336] RIP: 0033:0x7fc14f99aeb9 [ 2025.837543][T16336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2025.837563][T16336] RSP: 002b:00007fc1507d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2025.837587][T16336] RAX: ffffffffffffffda RBX: 00007fc14fc15fa0 RCX: 00007fc14f99aeb9 [ 2025.837604][T16336] RDX: 0000000000000028 RSI: 0000200000001380 RDI: 0000000000000012 [ 2025.837619][T16336] RBP: 00007fc1507d5090 R08: 0000000000000000 R09: 0000000000000000 [ 2025.837634][T16336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2025.837648][T16336] R13: 00007fc14fc16038 R14: 00007fc14fc15fa0 R15: 00007ffeaf4ef938 [ 2025.837684][T16336] [ 2026.497516][T16352] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12569'. [ 2026.749829][T16354] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.12571'. [ 2027.886016][T16366] lo speed is unknown, defaulting to 1000 [ 2028.039623][T16369] netlink: 16 bytes leftover after parsing attributes in process `syz.8.12573'. [ 2028.166158][T16380] netlink: 28 bytes leftover after parsing attributes in process `syz.8.12573'. [ 2028.307474][T16380] netlink: 28 bytes leftover after parsing attributes in process `syz.8.12573'. [ 2028.320143][T16380] netlink: 28 bytes leftover after parsing attributes in process `syz.8.12573'. [ 2028.623541][T16387] netlink: 'syz.4.12580': attribute type 2 has an invalid length. [ 2029.226573][T16403] warn_alloc: 1 callbacks suppressed [ 2029.226627][T16403] syz.6.12587: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2029.344605][T16403] CPU: 1 UID: 0 PID: 16403 Comm: syz.6.12587 Not tainted syzkaller #0 PREEMPT(full) [ 2029.344636][T16403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2029.344650][T16403] Call Trace: [ 2029.344659][T16403] [ 2029.344669][T16403] dump_stack_lvl+0xe8/0x150 [ 2029.344703][T16403] warn_alloc+0x249/0x340 [ 2029.344750][T16403] ? stack_trace_save+0xa9/0x100 [ 2029.344783][T16403] ? __pfx_warn_alloc+0x10/0x10 [ 2029.344820][T16403] ? kasan_save_track+0x4f/0x80 [ 2029.344842][T16403] ? kasan_save_track+0x3e/0x80 [ 2029.344863][T16403] ? __kasan_kmalloc+0x93/0xb0 [ 2029.344888][T16403] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 2029.344913][T16403] ? xskq_create+0x56/0x170 [ 2029.344937][T16403] ? xsk_setsockopt+0x603/0x990 [ 2029.344956][T16403] ? do_sock_setsockopt+0x17c/0x1b0 [ 2029.344987][T16403] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 2029.345018][T16403] ? do_syscall_64+0xe2/0xf80 [ 2029.345049][T16403] __vmalloc_node_range_noprof+0x132/0x1730 [ 2029.345121][T16403] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2029.345158][T16403] ? __kasan_kmalloc+0x93/0xb0 [ 2029.345193][T16403] vmalloc_user_noprof+0xad/0xe0 [ 2029.345221][T16403] ? xskq_create+0xbf/0x170 [ 2029.345246][T16403] xskq_create+0xbf/0x170 [ 2029.345275][T16403] xsk_init_queue+0xad/0x110 [ 2029.345302][T16403] xsk_setsockopt+0x603/0x990 [ 2029.345322][T16403] ? irqentry_exit+0x59c/0x620 [ 2029.345351][T16403] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2029.345381][T16403] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2029.345401][T16403] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2029.345423][T16403] ? do_sock_setsockopt+0x15e/0x1b0 [ 2029.345457][T16403] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2029.345482][T16403] do_sock_setsockopt+0x17c/0x1b0 [ 2029.345521][T16403] __x64_sys_setsockopt+0x13d/0x1b0 [ 2029.345561][T16403] do_syscall_64+0xe2/0xf80 [ 2029.345588][T16403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2029.345612][T16403] ? clear_bhb_loop+0x60/0xb0 [ 2029.345641][T16403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2029.345663][T16403] RIP: 0033:0x7f45fe59aeb9 [ 2029.345684][T16403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2029.345704][T16403] RSP: 002b:00007f45ff415028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2029.345729][T16403] RAX: ffffffffffffffda RBX: 00007f45fe815fa0 RCX: 00007f45fe59aeb9 [ 2029.345747][T16403] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009 [ 2029.345761][T16403] RBP: 00007f45fe608c1f R08: 0000000000000004 R09: 0000000000000000 [ 2029.345776][T16403] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 2029.345792][T16403] R13: 00007f45fe816038 R14: 00007f45fe815fa0 R15: 00007ffcd80e2668 [ 2029.345841][T16403] [ 2029.349421][T16403] Mem-Info: [ 2029.763401][T16403] active_anon:21216 inactive_anon:2 isolated_anon:0 [ 2029.763401][T16403] active_file:20183 inactive_file:42917 isolated_file:0 [ 2029.763401][T16403] unevictable:768 dirty:315 writeback:0 [ 2029.763401][T16403] slab_reclaimable:7454 slab_unreclaimable:106967 [ 2029.763401][T16403] mapped:34703 shmem:6496 pagetables:1894 [ 2029.763401][T16403] sec_pagetables:0 bounce:0 [ 2029.763401][T16403] kernel_misc_reclaimable:0 [ 2029.763401][T16403] free:1288908 free_pcp:9910 free_cma:0 [ 2029.876880][T16403] Node 0 active_anon:85460kB inactive_anon:8kB active_file:80732kB inactive_file:171468kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:110740kB dirty:1272kB writeback:0kB shmem:25128kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13636kB pagetables:7348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2030.001618][T16403] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28672kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2030.061534][T16403] Node 0 DMA free:11120kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:144kB local_pcp:128kB free_cma:0kB [ 2030.121456][T16403] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 2030.127391][T16403] Node 0 DMA32 free:1309036kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:89660kB inactive_anon:8kB active_file:80732kB inactive_file:171468kB unevictable:1536kB writepending:1272kB zspages:0kB present:3129332kB managed:2554108kB mlocked:0kB bounce:0kB free_pcp:38620kB local_pcp:19720kB free_cma:0kB [ 2030.189686][T16403] lowmem_reserve[]: 0 0 1 1 1 [ 2030.201441][T16403] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2030.326283][T16411] netlink: 'syz.7.12590': attribute type 2 has an invalid length. [ 2030.334689][T16403] lowmem_reserve[]: 0 0 0 0 0 [ 2030.339477][T16403] Node 1 Normal free:3831708kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2030.376336][T16403] lowmem_reserve[]: 0 0 0 0 0 [ 2030.382151][T16403] Node 0 DMA: 2*4kB (U) 1*8kB (U) 2*16kB (U) 2*32kB (U) 2*64kB (U) 3*128kB (U) 1*256kB (U) 2*512kB (U) 3*1024kB (U) 1*2048kB (M) 1*4096kB (M) = 11120kB [ 2030.405527][T16403] Node 0 DMA32: 7203*4kB (U) 6572*8kB (U) 6124*16kB (UME) 754*32kB (UM) 1717*64kB (UM) 987*128kB (UME) 373*256kB (UME) 390*512kB (UME) 268*1024kB (UME) 72*2048kB (UM) 37*4096kB (UM) = 1308332kB [ 2030.441236][T16403] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2030.463491][T16403] Node 1 Normal: 183*4kB (UME) 48*8kB (UME) 42*16kB (UME) 215*32kB (UME) 101*64kB (UME) 29*128kB (UME) 18*256kB (UME) 4*512kB (UM) 3*1024kB (UM) 1*2048kB (E) 928*4096kB (UM) = 3831708kB [ 2030.501311][T16403] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2030.563924][T16403] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2030.605977][T16403] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2030.645994][T16403] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2030.686131][T16403] 72537 total pagecache pages [ 2030.690980][T16403] 0 pages in swap cache [ 2030.722452][T16403] Free swap = 124996kB [ 2030.747110][T16403] Total swap = 124996kB [ 2030.751335][T16403] 2097051 pages RAM [ 2030.780981][T16403] 0 pages HighMem/MovableOnly [ 2030.793957][T16403] 426626 pages reserved [ 2030.817982][T16403] 0 pages cma reserved [ 2030.854180][T16422] __nla_validate_parse: 2 callbacks suppressed [ 2030.854202][T16422] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12595'. [ 2031.076287][T16423] lo speed is unknown, defaulting to 1000 [ 2031.172893][T16430] netlink: 360 bytes leftover after parsing attributes in process `syz.0.12598'. [ 2031.390003][T16436] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12601'. [ 2031.713788][T16447] netlink: 836 bytes leftover after parsing attributes in process `syz.7.12606'. [ 2032.139381][T16452] netlink: 152 bytes leftover after parsing attributes in process `syz.6.12607'. [ 2032.534798][T16454] bpf: Bad value for 'uid' [ 2032.643073][T16456] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12609'. [ 2033.207128][T16469] FAULT_INJECTION: forcing a failure. [ 2033.207128][T16469] name failslab, interval 1, probability 0, space 0, times 0 [ 2033.261439][T16469] CPU: 1 UID: 0 PID: 16469 Comm: syz.6.12612 Not tainted syzkaller #0 PREEMPT(full) [ 2033.261482][T16469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2033.261497][T16469] Call Trace: [ 2033.261506][T16469] [ 2033.261515][T16469] dump_stack_lvl+0xe8/0x150 [ 2033.261554][T16469] should_fail_ex+0x412/0x560 [ 2033.261593][T16469] should_failslab+0xa8/0x100 [ 2033.261625][T16469] __kmalloc_cache_noprof+0x83/0x6e0 [ 2033.261653][T16469] ? __kthread_create_on_node+0x115/0x3f0 [ 2033.261676][T16469] ? __init_swait_queue_head+0xa9/0x150 [ 2033.261702][T16469] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 2033.261734][T16469] __kthread_create_on_node+0x115/0x3f0 [ 2033.261761][T16469] ? __pfx___kthread_create_on_node+0x10/0x10 [ 2033.261800][T16469] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 2033.261829][T16469] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 2033.261858][T16469] kthread_create_on_node+0xeb/0x140 [ 2033.261888][T16469] ? __pfx_kthread_create_on_node+0x10/0x10 [ 2033.261915][T16469] ? ip_sock_set_mtu_discover+0x33/0x80 [ 2033.261951][T16469] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 2033.261978][T16469] rxrpc_lookup_local+0xf1c/0x1500 [ 2033.262019][T16469] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 2033.262050][T16469] ? __pfx_rxrpc_encap_rcv+0x10/0x10 [ 2033.262076][T16469] ? __pfx_rxrpc_encap_err_rcv+0x10/0x10 [ 2033.262119][T16469] ? preempt_schedule_common+0x82/0xd0 [ 2033.262144][T16469] ? rxrpc_sendmsg+0x136/0x710 [ 2033.262169][T16469] ? preempt_schedule_thunk+0x16/0x30 [ 2033.262200][T16469] rxrpc_sendmsg+0x399/0x710 [ 2033.262235][T16469] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 2033.262260][T16469] ____sys_sendmsg+0xa68/0xad0 [ 2033.262304][T16469] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2033.262348][T16469] ? import_iovec+0x73/0xa0 [ 2033.262375][T16469] ___sys_sendmsg+0x2a5/0x360 [ 2033.262425][T16469] ? __lock_acquire+0x6b5/0x2cf0 [ 2033.262464][T16469] ? __pfx____sys_sendmsg+0x10/0x10 [ 2033.262514][T16469] ? trace_call_bpf+0xc2/0xb70 [ 2033.262578][T16469] ? __fget_files+0x2a/0x420 [ 2033.262607][T16469] ? __fget_files+0x3a0/0x420 [ 2033.262650][T16469] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2033.262699][T16469] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2033.262760][T16469] do_syscall_64+0xe2/0xf80 [ 2033.262785][T16469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2033.262807][T16469] ? clear_bhb_loop+0x60/0xb0 [ 2033.262835][T16469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2033.262857][T16469] RIP: 0033:0x7f45fe59aeb9 [ 2033.262877][T16469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2033.262896][T16469] RSP: 002b:00007f45ff415028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2033.262920][T16469] RAX: ffffffffffffffda RBX: 00007f45fe815fa0 RCX: 00007f45fe59aeb9 [ 2033.262937][T16469] RDX: 000000002004fc10 RSI: 0000200000000080 RDI: 0000000000000007 [ 2033.262951][T16469] RBP: 00007f45ff415090 R08: 0000000000000000 R09: 0000000000000000 [ 2033.262965][T16469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2033.262978][T16469] R13: 00007f45fe816038 R14: 00007f45fe815fa0 R15: 00007ffcd80e2668 [ 2033.263015][T16469] [ 2034.251783][T16482] netlink: 'syz.6.12620': attribute type 2 has an invalid length. [ 2034.498643][T18922] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 2034.682193][T16489] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 2034.724460][T16489] syzkaller0: tun_chr_ioctl cmd 1074025684 [ 2034.737525][T16489] syzkaller0: tun_chr_ioctl cmd 35108 [ 2035.390285][T16506] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 2035.404035][T16503] syzkaller0: tun_chr_ioctl cmd 1074025684 [ 2035.413740][T16503] syzkaller0: tun_chr_ioctl cmd 35108 [ 2036.425512][T16525] lo speed is unknown, defaulting to 1000 [ 2036.561911][T13076] Bluetooth: hci0: command 0x0406 tx timeout [ 2036.587871][T18922] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 2036.595949][T18922] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 2036.606179][T18922] CPU: 1 UID: 0 PID: 18922 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 2036.606208][T18922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2036.606222][T18922] Workqueue: hci0 hci_rx_work [ 2036.606261][T18922] Call Trace: [ 2036.606271][T18922] [ 2036.606281][T18922] dump_stack_lvl+0xe8/0x150 [ 2036.606316][T18922] sysfs_create_dir_ns+0x271/0x2a0 [ 2036.606344][T18922] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 2036.606385][T18922] ? do_raw_spin_unlock+0xf5/0x210 [ 2036.606425][T18922] kobject_add_internal+0x62b/0xd00 [ 2036.606468][T18922] kobject_add+0x163/0x240 [ 2036.606504][T18922] ? __pfx_kobject_add+0x10/0x10 [ 2036.606536][T18922] ? _raw_spin_unlock+0x28/0x50 [ 2036.606564][T18922] ? get_device_parent+0x366/0x3a0 [ 2036.606596][T18922] device_add+0x408/0xb70 [ 2036.606627][T18922] hci_conn_add_sysfs+0xd5/0x210 [ 2036.606665][T18922] le_conn_complete_evt+0xf1d/0x1430 [ 2036.606706][T18922] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 2036.606730][T18922] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 2036.606766][T18922] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2036.606793][T18922] ? skb_pull_data+0xfb/0x200 [ 2036.606822][T18922] hci_le_enh_conn_complete_evt+0x189/0x490 [ 2036.606856][T18922] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 2036.606890][T18922] hci_event_packet+0x7af/0x12c0 [ 2036.606933][T18922] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2036.606977][T18922] ? __pfx_hci_event_packet+0x10/0x10 [ 2036.607019][T18922] ? kcov_remote_start+0x49a/0x7a0 [ 2036.607048][T18922] ? hci_send_to_monitor+0xe2/0x590 [ 2036.607082][T18922] hci_rx_work+0x3ee/0x1030 [ 2036.607125][T18922] ? process_scheduled_works+0xa0f/0x17a0 [ 2036.607182][T18922] process_scheduled_works+0xaec/0x17a0 [ 2036.607252][T18922] ? __pfx_process_scheduled_works+0x10/0x10 [ 2036.607283][T18922] ? do_raw_spin_lock+0x12b/0x2f0 [ 2036.607314][T18922] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2036.607338][T18922] ? schedule+0x90/0x360 [ 2036.607373][T18922] worker_thread+0xda6/0x1360 [ 2036.607421][T18922] ? __kthread_parkme+0x19c/0x1f0 [ 2036.607455][T18922] kthread+0x726/0x8b0 [ 2036.607486][T18922] ? __pfx_worker_thread+0x10/0x10 [ 2036.607506][T18922] ? __pfx_kthread+0x10/0x10 [ 2036.607536][T18922] ? _raw_spin_unlock_irq+0x23/0x50 [ 2036.607559][T18922] ? __pfx_kthread+0x10/0x10 [ 2036.607586][T18922] ret_from_fork+0x51b/0xa40 [ 2036.607610][T18922] ? __pfx_ret_from_fork+0x10/0x10 [ 2036.607644][T18922] ? __switch_to+0xc82/0x1410 [ 2036.607690][T18922] ? __pfx_kthread+0x10/0x10 [ 2036.607719][T18922] ret_from_fork_asm+0x1a/0x30 [ 2036.607772][T18922] [ 2036.607886][T18922] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 2036.875171][T18922] Bluetooth: hci0: failed to register connection device [ 2037.575666][T16541] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12638'. [ 2038.631620][T18922] Bluetooth: hci0: command 0x0406 tx timeout [ 2039.051373][T16573] netlink: 'syz.7.12646': attribute type 2 has an invalid length. [ 2039.080391][T16573] netlink: 134 bytes leftover after parsing attributes in process `syz.7.12646'. [ 2039.090864][T16573] netlink: 264 bytes leftover after parsing attributes in process `syz.7.12646'. [ 2039.118341][T16573] netlink: 'syz.7.12646': attribute type 2 has an invalid length. [ 2039.127013][T16573] netlink: 134 bytes leftover after parsing attributes in process `syz.7.12646'. [ 2039.276423][T18922] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 2039.477606][T16578] netlink: 'syz.0.12650': attribute type 10 has an invalid length. [ 2040.239697][T16597] lo speed is unknown, defaulting to 1000 [ 2040.712016][T25976] Bluetooth: hci0: command 0x0406 tx timeout [ 2040.869821][T16616] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.12662'. [ 2041.230195][T16632] netlink: 14601 bytes leftover after parsing attributes in process `syz.6.12669'. [ 2041.353671][T18922] Bluetooth: hci3: command 0x0406 tx timeout [ 2042.111057][T16654] netlink: 'syz.7.12674': attribute type 3 has an invalid length. [ 2042.122907][T16654] netlink: 'syz.7.12674': attribute type 3 has an invalid length. [ 2042.173717][T16654] netlink: 224 bytes leftover after parsing attributes in process `syz.7.12674'. [ 2042.245103][T16654] netlink: 16 bytes leftover after parsing attributes in process `syz.7.12674'. [ 2042.289543][T16654] openvswitch: netlink: Flow actions attr not present in new flow. [ 2042.559301][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2042.571072][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2042.803615][T13076] Bluetooth: hci0: command 0x0406 tx timeout [ 2043.117331][T16687] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.12684'. [ 2043.431506][T25976] Bluetooth: hci3: command 0x0406 tx timeout [ 2043.950290][T16718] netlink: 836 bytes leftover after parsing attributes in process `syz.8.12696'. [ 2045.334303][T16750] netlink: 'syz.4.12709': attribute type 10 has an invalid length. [ 2045.412694][T16761] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12710'. [ 2045.901139][T16769] FAULT_INJECTION: forcing a failure. [ 2045.901139][T16769] name failslab, interval 1, probability 0, space 0, times 0 [ 2045.917030][T16769] CPU: 1 UID: 0 PID: 16769 Comm: syz.7.12714 Not tainted syzkaller #0 PREEMPT(full) [ 2045.917060][T16769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2045.917075][T16769] Call Trace: [ 2045.917087][T16769] [ 2045.917100][T16769] dump_stack_lvl+0xe8/0x150 [ 2045.917149][T16769] should_fail_ex+0x412/0x560 [ 2045.917215][T16769] should_failslab+0xa8/0x100 [ 2045.917261][T16769] kmem_cache_alloc_noprof+0x87/0x6e0 [ 2045.917297][T16769] ? security_inode_alloc+0x39/0x310 [ 2045.917363][T16769] security_inode_alloc+0x39/0x310 [ 2045.917414][T16769] inode_init_always_gfp+0x9ed/0xdc0 [ 2045.917481][T16769] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2045.917508][T16769] alloc_inode+0x82/0x1b0 [ 2045.917553][T16769] __sock_create+0x12d/0x9d0 [ 2045.917638][T16769] mptcp_subflow_create_socket+0xfb/0x800 [ 2045.917710][T16769] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 2045.917754][T16769] ? perf_trace_preemptirq_template+0xab/0x340 [ 2045.917786][T16769] ? __local_bh_enable_ip+0x71/0x130 [ 2045.917838][T16769] __mptcp_nmpc_sk+0x155/0x790 [ 2045.917892][T16769] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 2045.917948][T16769] ? __local_bh_enable_ip+0xd0/0x130 [ 2045.918000][T16769] mptcp_setsockopt+0x10fc/0x36a0 [ 2045.918032][T16769] ? aa_sk_perm+0x15a/0x960 [ 2045.918110][T16769] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 2045.918168][T16769] ? __pfx_aa_sk_perm+0x10/0x10 [ 2045.918222][T16769] ? __fget_files+0x2a/0x420 [ 2045.918248][T16769] ? aa_sock_opt_perm+0xff/0x1a0 [ 2045.918297][T16769] ? sock_common_setsockopt+0x36/0xc0 [ 2045.918328][T16769] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2045.918379][T16769] do_sock_setsockopt+0x17c/0x1b0 [ 2045.918441][T16769] __x64_sys_setsockopt+0x13d/0x1b0 [ 2045.918508][T16769] do_syscall_64+0xe2/0xf80 [ 2045.918539][T16769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2045.918560][T16769] ? trace_irq_disable+0x37/0x100 [ 2045.918581][T16769] ? clear_bhb_loop+0x60/0xb0 [ 2045.918626][T16769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2045.918650][T16769] RIP: 0033:0x7fc14f99aeb9 [ 2045.918676][T16769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2045.918695][T16769] RSP: 002b:00007fc1507d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2045.918718][T16769] RAX: ffffffffffffffda RBX: 00007fc14fc15fa0 RCX: 00007fc14f99aeb9 [ 2045.918735][T16769] RDX: 0000000000000017 RSI: 0000000000000006 RDI: 0000000000000003 [ 2045.918748][T16769] RBP: 00007fc1507d5090 R08: 0000000000000004 R09: 0000000000000000 [ 2045.918762][T16769] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 2045.918775][T16769] R13: 00007fc14fc16038 R14: 00007fc14fc15fa0 R15: 00007ffeaf4ef938 [ 2045.918880][T16769] [ 2045.918948][T16769] socket: no more sockets [ 2046.303087][T16771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12715'. [ 2046.679062][T16786] netlink: 836 bytes leftover after parsing attributes in process `syz.8.12719'. [ 2047.421646][T16810] netlink: 'syz.4.12727': attribute type 10 has an invalid length. [ 2047.437889][T16810] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12727'. [ 2047.469475][T16810] veth0_vlan: entered allmulticast mode [ 2047.492562][T16810] bridge0: port 3(veth0_vlan) entered blocking state [ 2047.509283][T16810] bridge0: port 3(veth0_vlan) entered disabled state [ 2047.547936][T16810] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2047.669923][T16812] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12730'. [ 2047.996664][T16817] netlink: 'syz.8.12732': attribute type 10 has an invalid length. [ 2048.030237][T16823] lo speed is unknown, defaulting to 1000 [ 2048.137235][T16831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12735'. [ 2049.408177][T16856] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12744'. [ 2051.037719][T16899] veth1_macvtap: left promiscuous mode [ 2051.109790][T16903] veth1_macvtap: entered promiscuous mode [ 2051.145823][T16903] macsec0: entered promiscuous mode [ 2051.152212][T16903] macsec0: entered allmulticast mode [ 2051.157718][T16903] veth1_macvtap: entered allmulticast mode [ 2051.269802][T16905] lo speed is unknown, defaulting to 1000 [ 2052.007132][T16924] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12767'. [ 2052.160949][T16931] netlink: 360 bytes leftover after parsing attributes in process `syz.6.12770'. [ 2052.740651][T18922] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 2052.939025][T16948] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 2053.038240][T16938] syzkaller0: tun_chr_ioctl cmd 1074025684 [ 2053.075958][T16944] syzkaller0: tun_chr_ioctl cmd 35108 [ 2053.296271][T16956] lo speed is unknown, defaulting to 1000 [ 2054.097281][T16972] netlink: 68 bytes leftover after parsing attributes in process `syz.8.12782'. [ 2054.491223][T16975] netlink: 'syz.6.12783': attribute type 10 has an invalid length. [ 2054.792551][T25976] Bluetooth: hci4: command 0x0406 tx timeout [ 2055.785169][T17001] netlink: 836 bytes leftover after parsing attributes in process `syz.4.12790'. [ 2056.296363][T17009] netlink: 'syz.0.12792': attribute type 10 has an invalid length. [ 2056.485965][T17018] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 2056.525831][T17012] syzkaller0: tun_chr_ioctl cmd 1074025684 [ 2056.573735][T17012] syzkaller0: tun_chr_ioctl cmd 35108 [ 2056.646152][T17022] netlink: 68 bytes leftover after parsing attributes in process `syz.8.12795'. [ 2056.878551][T25976] Bluetooth: hci4: command 0x0406 tx timeout [ 2057.191963][T17031] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 2057.783401][T17042] netlink: 'syz.7.12801': attribute type 10 has an invalid length. [ 2057.891238][T18922] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 2058.246598][T17058] netlink: 68 bytes leftover after parsing attributes in process `syz.0.12807'. [ 2058.546842][T17065] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 2058.616268][T17062] netlink: 'syz.4.12809': attribute type 10 has an invalid length. [ 2059.067450][T17075] netlink: 14601 bytes leftover after parsing attributes in process `syz.6.12814'. [ 2059.625960][T17096] netlink: 68 bytes leftover after parsing attributes in process `syz.8.12821'. [ 2059.911482][T18922] Bluetooth: hci0: command 0x0406 tx timeout [ 2060.378371][T17108] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.12828'. [ 2060.947876][T17121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12830'. [ 2061.156221][T17125] netlink: 836 bytes leftover after parsing attributes in process `syz.0.12833'. [ 2061.528186][T17127] lo speed is unknown, defaulting to 1000 [ 2061.808425][T17135] netlink: 68 bytes leftover after parsing attributes in process `syz.4.12835'. [ 2061.993494][T25976] Bluetooth: hci0: command 0x0406 tx timeout [ 2063.689395][T17164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2063.732871][T17170] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 2064.382697][T17178] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12851'. [ 2064.672789][T17185] netlink: 60 bytes leftover after parsing attributes in process `syz.8.12852'. [ 2064.817935][T17184] netlink: 60 bytes leftover after parsing attributes in process `syz.8.12852'. [ 2064.842474][T17188] netlink: 836 bytes leftover after parsing attributes in process `syz.7.12854'. [ 2065.381268][T17198] netlink: 164 bytes leftover after parsing attributes in process `syz.7.12857'. [ 2065.760264][T17201] syzkaller0: entered promiscuous mode [ 2066.388198][T17214] netlink: 'syz.0.12862': attribute type 2 has an invalid length. [ 2066.430261][T17214] netlink: 'syz.0.12862': attribute type 1 has an invalid length. [ 2069.905005][T17207] lo speed is unknown, defaulting to 1000 [ 2070.006433][T17224] netlink: 24 bytes leftover after parsing attributes in process `syz.8.12865'. [ 2070.076094][T17224] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12865'. [ 2070.080637][T17226] netlink: 836 bytes leftover after parsing attributes in process `syz.4.12867'. [ 2071.227327][T18922] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 2073.273861][T18922] Bluetooth: hci3: command 0x0406 tx timeout [ 2073.451254][T18922] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 2073.675491][T17278] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 2073.700701][T17277] syzkaller0: tun_chr_ioctl cmd 1074025684 [ 2073.709176][T17277] syzkaller0: tun_chr_ioctl cmd 35108 [ 2074.246814][T17288] netlink: 'syz.0.12889': attribute type 10 has an invalid length. [ 2075.145966][ T30] audit: type=1107 audit(1770423557.013:11): pid=17300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 2075.185919][T17301] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12893'. [ 2075.323038][T16579] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2075.337845][T16579] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2075.351959][T16579] Bluetooth: hci3: command 0x0406 tx timeout [ 2075.360872][T16579] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2075.369122][T16579] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2075.378239][T16579] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2075.441136][T17306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12895'. [ 2075.504212][T17304] lo speed is unknown, defaulting to 1000 [ 2075.506984][T17306] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12895'. [ 2075.513499][T18922] Bluetooth: hci4: command 0x0406 tx timeout [ 2075.601018][T17306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12895'. [ 2076.180189][T14533] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2076.244766][T17329] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 2076.275142][T17330] syzkaller0: tun_chr_ioctl cmd 1074025684 [ 2076.281182][T17331] syzkaller0: tun_chr_ioctl cmd 35108 [ 2076.652837][T17341] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12902'. [ 2076.755482][T14533] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2077.431781][T18922] Bluetooth: hci5: command tx timeout [ 2077.591555][T18922] Bluetooth: hci4: command 0x0406 tx timeout [ 2078.727897][T17361] netlink: 'syz.0.12904': attribute type 10 has an invalid length. [ 2078.823868][T14533] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2079.014888][T14533] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2079.269840][T17304] chnl_net:caif_netlink_parms(): no params data found [ 2079.393839][T14533] bridge_slave_1: left allmulticast mode [ 2079.399537][T14533] bridge_slave_1: left promiscuous mode [ 2079.405495][T14533] bridge0: port 2(bridge_slave_1) entered disabled state [ 2079.415012][T14533] bridge_slave_0: left allmulticast mode [ 2079.420672][T14533] bridge_slave_0: left promiscuous mode [ 2079.429002][T14533] bridge0: port 1(bridge_slave_0) entered disabled state [ 2079.450455][T17376] FAULT_INJECTION: forcing a failure. [ 2079.450455][T17376] name failslab, interval 1, probability 0, space 0, times 0 [ 2079.464446][T17376] CPU: 0 UID: 0 PID: 17376 Comm: syz.7.12908 Not tainted syzkaller #0 PREEMPT(full) [ 2079.464475][T17376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2079.464489][T17376] Call Trace: [ 2079.464499][T17376] [ 2079.464509][T17376] dump_stack_lvl+0xe8/0x150 [ 2079.464546][T17376] should_fail_ex+0x412/0x560 [ 2079.464585][T17376] should_failslab+0xa8/0x100 [ 2079.464616][T17376] __kmalloc_cache_noprof+0x83/0x6e0 [ 2079.464640][T17376] ? sctp_v4_scope+0x5a/0x180 [ 2079.464673][T17376] ? sctp_add_bind_addr+0x8c/0x370 [ 2079.464705][T17376] sctp_add_bind_addr+0x8c/0x370 [ 2079.464738][T17376] sctp_copy_local_addr_list+0x314/0x4f0 [ 2079.464768][T17376] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 2079.464796][T17376] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 2079.464828][T17376] ? sctp_v4_is_any+0x35/0x60 [ 2079.464854][T17376] ? sctp_copy_one_addr+0x93/0x360 [ 2079.464885][T17376] sctp_bind_addr_copy+0xb3/0x3c0 [ 2079.464912][T17376] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 2079.464953][T17376] sctp_connect_new_asoc+0x2ff/0x6b0 [ 2079.464990][T17376] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 2079.465041][T17376] __sctp_connect+0x5cb/0xdc0 [ 2079.465090][T17376] ? __pfx___sctp_connect+0x10/0x10 [ 2079.465121][T17376] ? security_sctp_bind_connect+0x7e/0x2c0 [ 2079.465152][T17376] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 2079.465181][T17376] sctp_setsockopt+0x708/0x12c0 [ 2079.465213][T17376] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2079.465244][T17376] do_sock_setsockopt+0x17c/0x1b0 [ 2079.465282][T17376] __x64_sys_setsockopt+0x13d/0x1b0 [ 2079.465322][T17376] do_syscall_64+0xe2/0xf80 [ 2079.465348][T17376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2079.465371][T17376] ? clear_bhb_loop+0x60/0xb0 [ 2079.465400][T17376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2079.465429][T17376] RIP: 0033:0x7fc14f99aeb9 [ 2079.465450][T17376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2079.465469][T17376] RSP: 002b:00007fc1507b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2079.465493][T17376] RAX: ffffffffffffffda RBX: 00007fc14fc16090 RCX: 00007fc14f99aeb9 [ 2079.465509][T17376] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000004 [ 2079.465523][T17376] RBP: 00007fc1507b4090 R08: 0000000000000010 R09: 0000000000000000 [ 2079.465537][T17376] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2079.465551][T17376] R13: 00007fc14fc16128 R14: 00007fc14fc16090 R15: 00007ffeaf4ef938 [ 2079.465591][T17376] [ 2079.581734][T13076] Bluetooth: hci5: command tx timeout [ 2080.078238][T17385] netlink: 68 bytes leftover after parsing attributes in process `syz.4.12912'. [ 2080.281003][T17390] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12913'. [ 2080.469523][T14533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2080.490745][T14533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2080.508645][T14533] bond0 (unregistering): Released all slaves [ 2080.640207][T17394] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 2080.682676][T17397] syzkaller0: tun_chr_ioctl cmd 1074025684 [ 2080.709455][T17400] syzkaller0: tun_chr_ioctl cmd 35108 [ 2080.919971][T17304] bridge0: port 1(bridge_slave_0) entered blocking state [ 2080.927995][T17304] bridge0: port 1(bridge_slave_0) entered disabled state [ 2080.935621][T17304] bridge_slave_0: entered allmulticast mode [ 2080.944974][T17304] bridge_slave_0: entered promiscuous mode [ 2080.986040][T17304] bridge0: port 2(bridge_slave_1) entered blocking state [ 2080.994377][T17304] bridge0: port 2(bridge_slave_1) entered disabled state [ 2081.005329][T17304] bridge_slave_1: entered allmulticast mode [ 2081.014362][T17304] bridge_slave_1: entered promiscuous mode [ 2081.077077][T17409] netlink: 'syz.7.12918': attribute type 10 has an invalid length. [ 2081.129825][T14533] team0: Port device wlan1 removed [ 2081.270510][T17304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2081.272503][T17420] netlink: 68 bytes leftover after parsing attributes in process `syz.8.12921'. [ 2081.296103][T17304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2081.751568][T13076] Bluetooth: hci5: command tx timeout [ 2081.769637][T17429] €Â: renamed from hsr0 (while UP) [ 2081.914343][T17304] team0: Port device team_slave_0 added [ 2081.953958][T17304] team0: Port device team_slave_1 added [ 2081.989460][T17437] netlink: 836 bytes leftover after parsing attributes in process `syz.7.12925'. [ 2082.217568][T17304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2082.231409][T17304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2082.287280][T17304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2082.305583][T17304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2082.312586][T17304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2082.373866][T17304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2082.655259][T17454] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12927'. [ 2082.935875][T14533] hsr_slave_0: left promiscuous mode [ 2082.942926][T14533] hsr_slave_1: left promiscuous mode [ 2082.966178][T14533] veth1_macvtap: left promiscuous mode [ 2082.972374][T14533] veth0_macvtap: left promiscuous mode [ 2082.978163][T14533] ªªªªª(: left promiscuous mode [ 2082.984488][T14533] veth0_vlan: left promiscuous mode [ 2083.782312][T17470] netlink: 'syz.7.12933': attribute type 46 has an invalid length. [ 2083.790520][T17470] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12933'. [ 2083.817935][T14533] team0 (unregistering): Port device team_slave_1 removed [ 2083.831733][T13076] Bluetooth: hci5: command tx timeout [ 2083.885854][T14533] team0 (unregistering): Port device team_slave_0 removed [ 2084.079597][T17472] netlink: 45 bytes leftover after parsing attributes in process `syz.7.12933'. [ 2084.789001][T17304] hsr_slave_0: entered promiscuous mode [ 2084.818066][T17304] hsr_slave_1: entered promiscuous mode [ 2084.838378][T17304] debugfs: 'hsr0' already exists in 'hsr' [ 2084.847806][T17304] Cannot create hsr debugfs directory [ 2085.118303][T17480] netlink: 'syz.4.12934': attribute type 10 has an invalid length. [ 2085.154546][T13076] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 2086.206083][T17519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12944'. [ 2086.506801][T17525] netlink: 14601 bytes leftover after parsing attributes in process `syz.7.12947'. [ 2086.690261][T13076] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 2086.698337][T13076] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 2086.708119][T13076] CPU: 0 UID: 0 PID: 13076 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 2086.708146][T13076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2086.708159][T13076] Workqueue: hci4 hci_rx_work [ 2086.708195][T13076] Call Trace: [ 2086.708204][T13076] [ 2086.708213][T13076] dump_stack_lvl+0xe8/0x150 [ 2086.708245][T13076] sysfs_create_dir_ns+0x271/0x2a0 [ 2086.708271][T13076] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 2086.708310][T13076] ? do_raw_spin_unlock+0xf5/0x210 [ 2086.708343][T13076] kobject_add_internal+0x62b/0xd00 [ 2086.708383][T13076] kobject_add+0x163/0x240 [ 2086.708419][T13076] ? __pfx_kobject_add+0x10/0x10 [ 2086.708450][T13076] ? _raw_spin_unlock+0x28/0x50 [ 2086.708477][T13076] ? get_device_parent+0x366/0x3a0 [ 2086.708507][T13076] device_add+0x408/0xb70 [ 2086.708536][T13076] hci_conn_add_sysfs+0xd5/0x210 [ 2086.708571][T13076] le_conn_complete_evt+0xf1d/0x1430 [ 2086.708609][T13076] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 2086.708631][T13076] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 2086.708666][T13076] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2086.708691][T13076] ? skb_pull_data+0xfb/0x200 [ 2086.708719][T13076] hci_le_enh_conn_complete_evt+0x189/0x490 [ 2086.708755][T13076] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 2086.708786][T13076] hci_event_packet+0x7af/0x12c0 [ 2086.708827][T13076] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2086.708851][T13076] ? __pfx_hci_event_packet+0x10/0x10 [ 2086.708890][T13076] ? kcov_remote_start+0x49a/0x7a0 [ 2086.708917][T13076] ? hci_send_to_monitor+0xe2/0x590 [ 2086.708948][T13076] hci_rx_work+0x3ee/0x1030 [ 2086.708990][T13076] ? process_scheduled_works+0xa0f/0x17a0 [ 2086.709026][T13076] process_scheduled_works+0xaec/0x17a0 [ 2086.709095][T13076] ? __pfx_process_scheduled_works+0x10/0x10 [ 2086.709124][T13076] ? do_raw_spin_lock+0x12b/0x2f0 [ 2086.709153][T13076] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2086.709193][T13076] worker_thread+0xda6/0x1360 [ 2086.709252][T13076] ? __kthread_parkme+0x19c/0x1f0 [ 2086.709284][T13076] kthread+0x726/0x8b0 [ 2086.709316][T13076] ? __pfx_worker_thread+0x10/0x10 [ 2086.709337][T13076] ? __pfx_kthread+0x10/0x10 [ 2086.709369][T13076] ? _raw_spin_unlock_irq+0x23/0x50 [ 2086.709391][T13076] ? __pfx_kthread+0x10/0x10 [ 2086.709419][T13076] ret_from_fork+0x51b/0xa40 [ 2086.709446][T13076] ? __pfx_ret_from_fork+0x10/0x10 [ 2086.709480][T13076] ? __switch_to+0xc82/0x1410 [ 2086.709518][T13076] ? __pfx_kthread+0x10/0x10 [ 2086.709546][T13076] ret_from_fork_asm+0x1a/0x30 [ 2086.709601][T13076] [ 2086.709632][T13076] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 2086.969992][T13076] Bluetooth: hci4: failed to register connection device [ 2087.195819][T13076] Bluetooth: hci4: command 0x0406 tx timeout [ 2087.368372][T17304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2087.426612][T17304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2087.460465][T17547] netlink: 'syz.7.12951': attribute type 10 has an invalid length. [ 2087.476638][T17304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2087.516343][T17304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2089.285139][T13076] Bluetooth: hci4: command 0x0406 tx timeout [ 2089.525088][T17304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2089.642423][T17304] 8021q: adding VLAN 0 to HW filter on device team0 [ 2089.689798][ T6128] bridge0: port 1(bridge_slave_0) entered blocking state [ 2089.697061][ T6128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2089.747501][ T6128] bridge0: port 2(bridge_slave_1) entered blocking state [ 2089.754810][ T6128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2089.858394][T17583] netlink: 14601 bytes leftover after parsing attributes in process `syz.8.12960'. [ 2089.946945][T18922] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 2090.165825][T17593] lo speed is unknown, defaulting to 1000 [ 2090.633843][T17604] netlink: 132 bytes leftover after parsing attributes in process `syz.8.12964'. [ 2091.067102][T17304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2091.173050][T17617] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12966'. [ 2091.232099][T17609] lo speed is unknown, defaulting to 1000 [ 2091.354462][T18922] Bluetooth: hci4: command 0x0406 tx timeout [ 2091.362599][T17304] veth0_vlan: entered promiscuous mode [ 2091.403675][T17620] netlink: 'syz.7.12968': attribute type 46 has an invalid length. [ 2091.431520][T17620] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12968'. [ 2091.534593][T17304] veth1_vlan: entered promiscuous mode [ 2091.897212][T18922] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 2091.911706][T18922] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 2091.922618][T18922] CPU: 0 UID: 0 PID: 18922 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 2091.922648][T18922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2091.922664][T18922] Workqueue: hci3 hci_rx_work [ 2091.922702][T18922] Call Trace: [ 2091.922712][T18922] [ 2091.922722][T18922] dump_stack_lvl+0xe8/0x150 [ 2091.922754][T18922] sysfs_create_dir_ns+0x271/0x2a0 [ 2091.922782][T18922] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 2091.922822][T18922] ? do_raw_spin_unlock+0xf5/0x210 [ 2091.922855][T18922] kobject_add_internal+0x62b/0xd00 [ 2091.922898][T18922] kobject_add+0x163/0x240 [ 2091.922936][T18922] ? __pfx_kobject_add+0x10/0x10 [ 2091.922967][T18922] ? _raw_spin_unlock+0x28/0x50 [ 2091.922995][T18922] ? get_device_parent+0x366/0x3a0 [ 2091.923026][T18922] device_add+0x408/0xb70 [ 2091.923057][T18922] hci_conn_add_sysfs+0xd5/0x210 [ 2091.923095][T18922] le_conn_complete_evt+0xf1d/0x1430 [ 2091.923137][T18922] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 2091.923160][T18922] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 2091.923197][T18922] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2091.923223][T18922] ? skb_pull_data+0xfb/0x200 [ 2091.923252][T18922] hci_le_enh_conn_complete_evt+0x189/0x490 [ 2091.923280][T18922] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 2091.923312][T18922] hci_event_packet+0x7af/0x12c0 [ 2091.923384][T18922] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2091.923411][T18922] ? __pfx_hci_event_packet+0x10/0x10 [ 2091.923454][T18922] ? kcov_remote_start+0x49a/0x7a0 [ 2091.923485][T18922] ? hci_send_to_monitor+0xe2/0x590 [ 2091.923518][T18922] hci_rx_work+0x3ee/0x1030 [ 2091.923568][T18922] ? process_scheduled_works+0xa0f/0x17a0 [ 2091.923607][T18922] process_scheduled_works+0xaec/0x17a0 [ 2091.923684][T18922] ? __pfx_process_scheduled_works+0x10/0x10 [ 2091.923717][T18922] ? do_raw_spin_lock+0x12b/0x2f0 [ 2091.923748][T18922] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2091.923790][T18922] worker_thread+0xda6/0x1360 [ 2091.923836][T18922] ? __kthread_parkme+0x19c/0x1f0 [ 2091.923869][T18922] kthread+0x726/0x8b0 [ 2091.923900][T18922] ? __pfx_worker_thread+0x10/0x10 [ 2091.923922][T18922] ? __pfx_kthread+0x10/0x10 [ 2091.923954][T18922] ? _raw_spin_unlock_irq+0x23/0x50 [ 2091.923976][T18922] ? __pfx_kthread+0x10/0x10 [ 2091.924004][T18922] ret_from_fork+0x51b/0xa40 [ 2091.924031][T18922] ? __pfx_ret_from_fork+0x10/0x10 [ 2091.924064][T18922] ? __switch_to+0xc82/0x1410 [ 2091.924103][T18922] ? __pfx_kthread+0x10/0x10 [ 2091.924132][T18922] ret_from_fork_asm+0x1a/0x30 [ 2091.924187][T18922] [ 2091.924219][T18922] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 2092.131916][T17304] veth0_macvtap: entered promiscuous mode [ 2092.141613][T18922] Bluetooth: hci3: failed to register connection device [ 2092.198583][T18922] Bluetooth: hci3: command 0x0406 tx timeout [ 2092.343518][T17304] veth1_macvtap: entered promiscuous mode [ 2092.385209][T17634] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.12973'. [ 2092.418389][T17304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2092.449224][T17304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2092.467075][T17636] netlink: 'syz.7.12974': attribute type 46 has an invalid length. [ 2092.481900][T17636] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12974'. [ 2092.507529][T17115] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2092.534145][ T6128] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2092.560907][ T6128] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2092.569860][ T6128] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2093.051542][ T3571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2093.072709][ T3571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2093.202090][T12948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2093.231539][T12948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2093.441608][T18922] Bluetooth: hci4: command 0x0406 tx timeout [ 2093.486700][T17658] FAULT_INJECTION: forcing a failure. [ 2093.486700][T17658] name failslab, interval 1, probability 0, space 0, times 0 [ 2093.499663][T17658] CPU: 0 UID: 0 PID: 17658 Comm: syz.1.12892 Not tainted syzkaller #0 PREEMPT(full) [ 2093.499694][T17658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2093.499708][T17658] Call Trace: [ 2093.499718][T17658] [ 2093.499727][T17658] dump_stack_lvl+0xe8/0x150 [ 2093.499763][T17658] should_fail_ex+0x412/0x560 [ 2093.499799][T17658] should_failslab+0xa8/0x100 [ 2093.499831][T17658] kmem_cache_alloc_lru_noprof+0x8c/0x6c0 [ 2093.499858][T17658] ? __d_alloc+0x37/0x6f0 [ 2093.499896][T17658] __d_alloc+0x37/0x6f0 [ 2093.499934][T17658] d_alloc_pseudo+0x21/0xc0 [ 2093.499969][T17658] alloc_file_pseudo+0xdd/0x240 [ 2093.500005][T17658] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 2093.500035][T17658] ? do_raw_spin_unlock+0xf5/0x210 [ 2093.500066][T17658] ? _raw_spin_unlock+0x28/0x50 [ 2093.500098][T17658] sock_alloc_file+0xb8/0x2e0 [ 2093.500122][T17658] ? __sys_socket+0x12b/0x1b0 [ 2093.500151][T17658] __sys_socket+0x13c/0x1b0 [ 2093.500193][T17658] __x64_sys_socket+0x7a/0x90 [ 2093.500222][T17658] do_syscall_64+0xe2/0xf80 [ 2093.500250][T17658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2093.500272][T17658] ? trace_irq_disable+0x37/0x100 [ 2093.500296][T17658] ? clear_bhb_loop+0x60/0xb0 [ 2093.500324][T17658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2093.500347][T17658] RIP: 0033:0x7f4b6379aeb9 [ 2093.500367][T17658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2093.500387][T17658] RSP: 002b:00007f4b619ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2093.500412][T17658] RAX: ffffffffffffffda RBX: 00007f4b63a15fa0 RCX: 00007f4b6379aeb9 [ 2093.500429][T17658] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000018 [ 2093.500443][T17658] RBP: 00007f4b619ee090 R08: 0000000000000000 R09: 0000000000000000 [ 2093.500457][T17658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2093.500471][T17658] R13: 00007f4b63a16038 R14: 00007f4b63a15fa0 R15: 00007ffdd4406ae8 [ 2093.500508][T17658] [ 2093.815709][T17662] netlink: 188 bytes leftover after parsing attributes in process `syz.0.12981'. [ 2093.937607][T17665] netlink: 836 bytes leftover after parsing attributes in process `syz.1.12982'. [ 2094.241984][T18922] Bluetooth: hci3: command 0x0406 tx timeout [ 2094.659795][T17679] netlink: 'syz.4.12986': attribute type 46 has an invalid length. [ 2094.780135][T17679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12986'. [ 2096.106883][T17706] lo speed is unknown, defaulting to 1000 [ 2096.216247][T17712] netlink: 188 bytes leftover after parsing attributes in process `syz.1.12993'. [ 2096.311818][T18922] Bluetooth: hci3: command 0x0406 tx timeout [ 2096.575719][T17725] netlink: 'syz.7.12995': attribute type 10 has an invalid length. [ 2096.726515][T17734] netlink: 'syz.0.12998': attribute type 46 has an invalid length. [ 2096.767515][T17734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12998'. [ 2097.529221][T17753] netlink: 188 bytes leftover after parsing attributes in process `syz.7.13002'. [ 2098.401760][T13076] Bluetooth: hci3: command 0x0406 tx timeout [ 2103.998555][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2104.005946][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2165.435509][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2165.443001][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2198.231470][T18922] Bluetooth: hci5: command 0x0406 tx timeout [ 2226.876944][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2226.888785][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2288.316232][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2288.322671][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2349.755803][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2349.762964][ T1304] ieee802154 phy1 wpan1: encryption failed: -22